last executing test programs: 12.893096454s ago: executing program 1 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000) r2 = socket$inet6(0xa, 0x3, 0xff) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201020301080212000108035055090421c0b01ff44f31"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x7}, 0x1c) r3 = dup2(r2, r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f0000000000000000000000000000fdffffffffffffffffffffffffffffffffffff7f0000000000000000000000000200000000000000f9ffffffffffffff00000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300000700"/180], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x1, 0x4, 0x1, 0x5}, &(0x7f0000000100)=0x20) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064bd0500000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) write$tun(r3, 0x0, 0x3c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000002400)=[{&(0x7f0000000740)="88", 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x1a) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x2}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000300)={r12, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r11, 0xc01064d2, &(0x7f0000000140)={r13}) 10.255119725s ago: executing program 3 (id=1035): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1980000, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x10, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x65, 0x6608, 0x24, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8, 0xffffffff, 0x10}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x7800, 0xd81, 0x1, {{0x29, 0x4, 0x2, 0x1e, 0xa4, 0x66, 0x0, 0x86, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0x27, 0x35, [@multicast2, @multicast2, @empty, @broadcast, @multicast2, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @ssrr={0x89, 0xb, 0xbf, [@remote, @empty]}, @lsrr={0x83, 0x7, 0x5c, [@rand_addr=0x64010102]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x5, 0x7, "b4989a3fff"}, {0x7, 0xc, "b876246056d445d3c8cb"}, {0x0, 0x5, "835d9d"}, {0x2, 0x7, "673804b42e"}, {0x0, 0x4, "14dc"}, {0x5, 0x11, "c413b2ce7b598273ffd71b8a0ee7df"}, {0x5, 0x10, "6ea3cd65a70949fa371636339023"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf25040000003c0001801400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r4, @ANYBLOB="0400018040000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000000001400020073793ee36f7033648012719c84a378a926fc1f9f5a7a6b616c6c657230000000", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006970766c616e30000000000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x48010}, 0x8000) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71057f070204820807070ee6ab9275823797c1159e37dcc1b508070a026482c1681381eed1f591c4c78c519a9501c19151afef6640879ebf138c6485c8fe8911612e81917024827e4031a6f4d966487a3e3523ee2b9a282bd8101560c8fd16c6100653368d64ca49c91b66fe35a1cfbda552fdaddde20fef3836e3cc87a16e6e018d"], 0x82) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r9, 0x5) r10 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x46}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r10, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r=\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "3df5c37f37aa4d4fb8cdb504274d71d4a96bccd6"}, 0x15, 0x3) 9.595563658s ago: executing program 1 (id=1038): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x2a8800) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44014}, 0x811) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x104, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x1}}, 0x18) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000540)={0x3, 0x200, 0x1, 0x2, 0xff, 0x5}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r3}}, 0x18) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="980ecd4a08cef5e769b0be56f2719e164959a483b27710ed88640e8919ab6b838cf551a94c488dce256356fb2b8d5d6997d0c03183cc6e14e76dd14f665158e311f99a530c73b21a", 0x48}, {&(0x7f0000000840)="9114310b2acc1a75ba67e4f56f276ad763bedd461c16603a5149c8bc6f17df16910128bf6e7e347a154f4a75b52f5935ea1075464d99b6858d17aecd33d1b191bc95b2641a95f14b87cd85931add7ef949d28029e406661ddbdac1cb8f557689e9e81b1026dc2489544a360350faf944e32d1f0726a0b4ce72ddf153864ff68d890d20de648ef2f4bd972a69e8309c5b46f9d88a066bb1bf0c5df3c5ac861b4dc7af2f24e3c3e4bd897475a1e8a841303f", 0xb1}, {&(0x7f0000000900)="ff7060fede541d937351215c90d5ded5024e78437a85929ef5cf6e1aa75f", 0x1e}, {&(0x7f0000000940)="ddb73cdae127b0", 0x7}, {&(0x7f0000000980)="01aca50f8311928b4ff796a16facedb8f7afdc9bea9ff457982e3bfbecb9f1509f944c86b456b84f91385967f25aac03a2f9cd3a635b9978d927bb5bef6d126ece116c0d144d7ce6a3d35d510f4da50dedc36efd9d3c1f9c17ddf9c48365873ebd23a41cba8169d4b38b35a8c9cacb642337f41cf60fcb3e251a8cb9cc0bdbc8e48a1cc1bfd5f4a9e75ccdd4e94194", 0x8f}], 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b00)={0x450, 0x3f3, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x2, 0x21, [0x6, 0x2a7, 0xd7db, 0xd8, 0x1, 0x4, 0x8, 0x7, 0x1e3, 0x3, 0x2, 0xe3b1, 0x9, 0x4, 0x2, 0x6, 0x1000, 0xd40a, 0xbb78, 0x7ff, 0x5, 0x7ff, 0x812, 0x3, 0x1ff, 0x7ff, 0xc610, 0x4, 0x0, 0x2, 0x6, 0x1, 0x80000000, 0x1, 0x0, 0xfffff000, 0x74e9, 0x0, 0x1, 0x450, 0x0, 0x4, 0xd, 0x59, 0x2, 0x4, 0x6, 0xc, 0x9, 0x1269, 0x2d, 0xf, 0x8, 0x6, 0x6, 0x200, 0x7, 0x7, 0xffff, 0x0, 0x6, 0x9, 0xd, 0xfffffffd], [0x1adf, 0x7, 0x3ff, 0x0, 0x2, 0x200, 0x3ff, 0xb, 0x3, 0x9, 0xf, 0x6, 0x4, 0x101, 0x3, 0x10001, 0x5, 0x100, 0x1a53, 0xc795, 0x0, 0x0, 0x1db, 0x7, 0x9, 0x0, 0x3, 0x1, 0xffffff23, 0x400, 0x800, 0x1, 0x8, 0x7, 0x5, 0x4, 0x6, 0x7ff, 0x3, 0x8, 0x1, 0x8, 0x8, 0x3, 0xfffff617, 0x8, 0x9, 0xe033, 0xc57c, 0xfffffff2, 0x886, 0x6, 0x100, 0xa, 0x8a81, 0x10000, 0x8, 0x2, 0x9, 0x8001, 0x2, 0x6, 0x80, 0x6], [0x7, 0x6, 0x80000001, 0x497, 0x4, 0x0, 0x7fff, 0x9, 0x4, 0xffffffff, 0x1, 0xc0, 0x5, 0x6, 0x9, 0x8, 0x7fff0000, 0x8, 0x6, 0x6, 0x4, 0x6829, 0x101, 0x2, 0x5, 0x2, 0x5, 0x400, 0x6, 0x1, 0xa, 0x2, 0x6, 0x8, 0xec, 0x85, 0x3, 0x6, 0x7fffffff, 0x24d, 0x7, 0x1, 0x9, 0x5, 0x0, 0xffffffff, 0x8, 0x9, 0x6, 0x80000000, 0x1, 0x6, 0xe, 0x0, 0x8, 0xffff, 0x1, 0x7, 0x1, 0xa, 0x1, 0x3, 0xf, 0x5], [0x401, 0xfffffffe, 0xb905, 0x6, 0x1, 0xffffffff, 0x1, 0x1, 0x7fff, 0x8, 0x5, 0x0, 0x7fe, 0x400, 0x6, 0x1, 0x1, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x7, 0xd3, 0x7f, 0x3ff, 0x788, 0x3cff5307, 0x6, 0x5, 0x200, 0xf9, 0x101, 0x9, 0x2, 0x800, 0x0, 0xeef2, 0xfffffffa, 0x3e5, 0x2, 0x4, 0xc, 0x4, 0xffffff73, 0xde5, 0x80, 0x5, 0x8, 0x8, 0xb, 0xff, 0x9, 0x2, 0x3, 0xffffffff, 0xf216, 0x9a, 0x2, 0xee6c, 0x80000000, 0x9, 0x6, 0x5], 0x2d, ['/dev/vcsa#\x00', '-%*}\x00', '/dev/vcsa#\x00', '802.15.4 MAC\x00', '%-', '*)\x00']}, ["", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x598c4e814489765f}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xec, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x67, 0xa9, @random="3f676cb5ee9f4423852f793f9f0c97d72f285e8c2568aed3748190683e0a169fc418b677a7057c81cb41c773d4c605c20b1b1c32906c8bd33564bdd58ff87168865222c7277e2fb847b0262f7ac9e06a539cfc5b07b4ef1ed31e67c97f91a0ca5fa861"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9, 0xa9, @random="93b43a44d7"}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004055}, 0x4040010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001200)={'wpan0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/diskstats\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20048080) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f00000013c0)={0x1ff, 0x6, 0x5, 0x8, 0x1, [0x7fff, 0x6, 0x6, 0x1]}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001440)={0x6, 0xe000, 0xfffffbff, 0x9, '\x00', '\x00', '\x00', 0x1, 0x2, 0x0, 0x1, "f5ef951c8dd38e039fdfce9fd11c15f1"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000015c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001600)={'ip_vti0\x00', 0x0, 0x7840, 0x40, 0xffffffff, 0x8, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x67, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x13, 0x40, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @empty]}, @generic={0x86, 0x7, "aa7ed6db4d"}, @end]}}}}}) sendmsg$nl_route(r7, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@RTM_NEWMDB={0x38, 0x54, 0x20, 0x70bd2c, 0x25dfdbfd, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x3, 0x1, {@ip4=@remote}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x302, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r7) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xbc, r12, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 7.593869706s ago: executing program 2 (id=1046): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt_acct\x00') (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x2000, 0x1) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) (async) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x10000, 0x1, 0x10001, 0x7f, 0xffffffff, 0xb8, 0x4}) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={0x0}) (async) renameat2(r0, &(0x7f0000000040)='./cgroup\x00', r0, &(0x7f0000000000)='./cgroup\x00', 0x1) 7.434094566s ago: executing program 2 (id=1047): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 7.344594514s ago: executing program 2 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x1}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x73}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0xbaf, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x0, 0x9, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) pread64(r1, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc044) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r6, 0x200, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) 7.05862465s ago: executing program 1 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xb, 0x12, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xc8, 0x0, 0x316f, 0x0, 0x30, "ec28a144f13d7607"}) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 6.937845399s ago: executing program 3 (id=1052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r3 = memfd_create(&(0x7f0000000800)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x86\x00\x00\x00\x00\x00\x00\x00i\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83`\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9eP\x1f\xf0Dy\xd4S\xef\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92\a\x00I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xc7\xf3n_\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xdbF\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xed,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcfj\xb2\xe8\t\x05\xc8v-\x18\x88\x80\xe6\xef\xcbw\x03L\xe4\xbd\x8e;\xf4X\x0f\x92\xe7\x1a51d\x1f\x18}$\tl\x16s,\t\x15)^RG\xe1L\xff\xb3#\xe3VuLP\xbfr\x19Q\x9e0\x80,\x068\xe5\x8c\x92\xc9{/\n,[\x1fp\xa7\xe6.\xf4\x91\x12HDm\xb4\xefR\xc3\x16-\xdc\xe9\xc7\xd6\f\f\xe5\xae\xd9\x9b\xf2\xfc|\xe4\x9eU\xdb$\xd4\x11\xa0\x12\xd3)\x90\x04\xa4\\\x9d\xfd\xb3\x10\x01O\xfc\x82\x9b\x8d\a\xc9\xf4\x8d\x99\x1b\xf1\xc0:<`', 0x1) execveat(r3, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) 6.872101924s ago: executing program 1 (id=1053): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) waitid(0x2, r1, &(0x7f0000000180), 0x2, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040), 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80043f679a1070f7e433ff3d425f9c00f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r9, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="dd61f4bab19cf30db64d3f584a91394facef1bb0aeab537fafba4877320c13a3ff12355e52d4c79e8333f25ad95b2b5c8e314dfc92fa740aa7541a42c3b9106ff9009d06dfed708cf7e37ce63cea156428a1c8efe95129541341be18eea93cf011316ef33386dbb7bf2534bcb2353734ced9b8fdb12cbcc86214b98ab7cf8b0e478a101e1ed80ba2169fe96325f366c2e8bd41a8aad99bf99899ec6e9f5cf4221069e69cf1830b090223d161756ad9bab24267185b532b1a6c5026f56be45dbedf59482859bd4413baf9b497ec70655443ac52bcb3015a23c4bf81b83df289b9f3d5c532a9768a8560e3afca41b31ccce8efe4b9", @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.454347835s ago: executing program 2 (id=1056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x10, r0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) keyctl$session_to_parent(0x12) socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07"], 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000"], 0x0, 0x34}, 0x28) r3 = accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0xc0000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000380)) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 5.847774396s ago: executing program 3 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x5a1c00, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x4000) (async) close(r2) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000380)={r2, 0x0, 0xfffffffffffffccf, 0xf2b3, 0x2, 0x4, [0x0, 0x7, 0x8, 0x4, 0x6, 0x3]}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000003d40)=[{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="4f0f1368bb3bd1137e3c14354d68df072f3e932e4c580584bf33137e001d71936a58a5b03276fcdd9123b8f8bb4f53e56cb4d88aa8d52cf584f85857a35e7cca1148740296f59ba2f6883988ade28de228069040538d9e3f4a3e28291ec834235bb53c6d06e8e00845309faa03ba8b2ae4797750572697e702fb2023d6900e12b53c460b5f4de41961820150e7aa8c315d2b3d30665e927c3e554f6c1f06e1d9a391d1660e07f70bc5b0c77e13e93fad427056f292bfc42eba7c2d732d421e15651a9b2d02aad072af8f1ea1515b8d76ce0e8e", 0xd3}, {&(0x7f00000033c0)="00e26cbe66945f7c5427bf41b5f27058446c1898d64ce1805dd9a22b32840e9b7691c6510c513d6843f5fa33e1245d9de36b894948de69a26fe1eb0d3a7c3229487ba47997ac48218669fd5886132544a7806c73c40a98c04e1093aa92bf4d47c3c751d09568f33b041d4fea6f0fd6479bdc74d77019549a8009e734d0a27bac3659bdf23c3012974cd9531acab58c992de1a8bffe90cb33f0958c476f615a76e6530d6269fa4000417b56e6178678ce4ad9440c2831e74f314a0d48a8a2dae063ff306637", 0xc5}], 0x3, &(0x7f0000003500)=[@iv={0x30, 0x117, 0x2, 0x16, "4bdff5c8763f3038f0d8f0659f7832a350cb6411237d"}, @iv={0x60, 0x117, 0x2, 0x47, "b359a173fb12707e8d9f368cc58e2db9d146cd1d8aa1607988290656e3c6d8418ed3a57410ba505c0d874dfb7147380218dfecf0316f1fcd59cfaa31f35dba0a0eb6d1e7c978ad"}, @iv={0x70, 0x117, 0x2, 0x57, "3074e59967b96b899fc3cbbd3e58d1eef31e76f192dbd0e0b54e50d6c0a5e36e381d35e9dae6c14546694437a40d1ad7d06cbb71cdb9f8397f1b2196e5b2e17967c7b1494eedf77d37fe3028545a2d3fc149c40fbc7065"}, @op={0x18, 0x117, 0x3, 0x1}], 0x118, 0x2000c080}, {0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003640)="0d921ded14bc3efead3dc65bee31f8a2d856547776c55b", 0x17}, {&(0x7f0000003680)="e6ae302f71c05ba4c3ced29d63cb9063194393814b3f9875835a8769efe4928ecaba87a78c328266b5896e611af6b99ac2d4e8dfbdd14df12cc2c601f1b6132d9edf8be7cee4c6cd73c8894ddca7d7db3040dea784e777ea6f4449d992757d32a66ee58e8d74e6df78b09d886e38e5cdcad501f13467d6a13cb80e818821a011940ce9031a4017f4a3a016952c98cbbed831d8", 0x93}, {&(0x7f00000037c0)="98c4912681b17d223c42c41fe44f5f8c343900a2a7407b20c19b9104785a008a3015d9d409a306d9badcf5c3c21836ef14de58789b5a3f35e67bf32a5b367e8bdca5b44e59044ecfc63a3059dc5377d0b526c8642d2d7e70ac1f5b9cd39efa6e5cb5128a60d8c7d6befc4d5a0580f045e99b1da5470b2d4e604eb135999f3e4808f78138a542b7b866106d01776424c7ebcecf414cc499017cde681dd4515c19cbb0485e496cf2e529a9304f1c584117483345392430fc32b755a8f5c6a26d47b310a7b8d5b17fc3f608263e8986495ec8dbe9", 0xd3}], 0x3, &(0x7f0000003900)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xe0, 0x117, 0x2, 0xc5, "8356ea250fb0a07579d4d75e006d25cc56468b53389fffc1db2a959b23058b76a251cddd82d059e7dbf9b6566039aa61038c2a7c8b69670f8523974dfc157cf2d6ac87a58038a4c01f6811f20ab0d2d12aaabc237394de175ad7c18455a2ec706f6764fa77bf3106e3dff8b23932832d2472aa539647292ae5041e1610f1ffbfc2b0eeeb0fa24bee72c5d9f05600a9ed76cbdb1826e044581146f1e093330ce6fa580c9be56b933f89654d9176068fc6df0091cd073da80b668206d4e087fd15f00214ab82"}, @iv={0x88, 0x117, 0x2, 0x74, "4f32f31b5980031d6969abe99d5c1b876aa022f0041e8114fa196e9cabbbfe7f5545c59d04d8243763c9ec77df7956387d0f27104bbabfd4c5e2d44b3571099b641b2227ca3a6446f806bca0af7d12ba6b326f9a33e84de29ea337b716ffa1f178ee58347baeec5a5b681e40a60c1e358eb2d5e6"}, @assoc={0x18, 0x117, 0x4, 0xd}, @iv={0xe8, 0x117, 0x2, 0xd4, "43fa8503553dbbe2a40966bc8b00561dc113f80535dcc70ca20739004cf8dc82166739fae856903fa607b0875c079a8d555e9eaf9dd1e3120b0a01bd363b7917f8a74d2247e336f5405e4bf6e9ee8db7e3c70f34606bf5ce5baa78a7e1b5ec2f834a31cc23e7a3554b43d60e37641480c6d37470e040bbd23c0e52bba5461b6042f7db2cbc362dbcda75e5a628dc0fb09391e4fb514fb72c1ffe8cc61fbe73fd35e25d299c704a0a9f725ae4b58b41f2c72cceb59377d39d78637f6bc06daf85bc0df0e41f9512c31ee49bb1b1a48d8235a39ce1"}, @iv={0x58, 0x117, 0x2, 0x44, "9e8cc060c4b604fff8ea04a095dc9fea4f408ffae6d77cf13a2f9d232f43002941515aa10e79c6f87bbe9df985bbfc2420c42a8e1055603a6c54cc8de21209fa76a7275f"}, @iv={0xb0, 0x117, 0x2, 0x9b, "b1f6923ae7d064364aedd8f84dc5548498dc44f192cf960b5b1cb649587d64ded7f47530585406fd0a8e730e962b39c1a4e1267ecae46f44f8b3e7170ad39c69273177032f21266b1bc7a0855434ca5449cb47de21f350798a8fc5bbab3b09ae244686aab26d231a723fff6181fc0e3b8e458b28fcf943cd272d7c9c25d391387f5a9f0657beeca84f611a95c968de459eb75647284f0930a457f1"}, @iv={0x80, 0x117, 0x2, 0x67, "809bf7d53150911b460a7e626457631138c8ab58912290f7b8ff1c0fd80ee6b05c330aa0f785d590fc520a48bcf52a0bad54611a7f55a4c386e0be6b643ba868828238f0ba84e3e9cd48d94d79b4248d85593f4fb33bac209506b7e4f48a0c625c8bd14407b9e7"}, @assoc={0x18}], 0x420, 0x94}], 0x2, 0x84001) recvmmsg(r6, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x8b4}], 0x1, 0x100, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettaction={0x6c, 0x32, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x68000, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'veth0_vlan\x00', @multicast}) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async, rerun: 32) sendto$packet(r1, &(0x7f00000002c0)="05031604d3bc141200004788031c09104eb3", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 32) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x404002, 0x0) ioctl$GIO_SCRNMAP(r10, 0x4b40, &(0x7f0000000600)=""/242) (async, rerun: 32) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x9, 0x7, 0x89, 0x3}}) (rerun: 32) 5.778703599s ago: executing program 4 (id=1058): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getrlimit(0x8, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x1f}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x9}, {0x0, 0x0, 0xfffffffe, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x8000}, {}, {}, {0x1, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x3, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x93}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x40, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 5.602930592s ago: executing program 3 (id=1059): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20, 0x40880}}], 0x1, 0x40000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3004000}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000190020f7b5bd700064f6d31861da29dbdf10280d0202fe080018000008001900", @ANYRES32=r6, @ANYBLOB="060015000100000008000600070000000800050064010100"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x24004000) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1000001004000, 0x0, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x9, 0x5}) 5.392757763s ago: executing program 4 (id=1060): socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) io_uring_setup(0x24e7, &(0x7f0000000640)={0x0, 0xa97f, 0x4000, 0x2, 0x22e}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4003) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905040310000607030905050308000e0e9a0905fdff"], 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffb6) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x232) (async) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35}, 0x28) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000001180)=ANY=[]) (async) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xee00, 0x1000) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.9463039s ago: executing program 4 (id=1062): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mq_open(&(0x7f0000000280)='v\\t0\x11\xb5p\x0e\x91\xc8\xab{\x02\xa9\xcb', 0x1, 0x80, &(0x7f0000000340)={0x7, 0x9, 0x31e0, 0x20000000000c68d}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r6 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00'}) setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/20, 0x14}, {0x0}], 0x2) 3.925588926s ago: executing program 3 (id=1063): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x801001a, 0x5, 0x1, 0x1}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xfffffffffffffffd, {0x3, 0x0, 0x8, 0x0, 0x0, 0x0, {0x2000000000000005, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa000, 0x0, 0x0, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='Q') 2.788551637s ago: executing program 4 (id=1065): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3) (async) r6 = fanotify_init(0x40, 0x1) (async) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x1, 0x40001019, r8, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000005, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0x9}, 0x9c) (async) mq_timedreceive(r2, &(0x7f0000000340)=""/185, 0xb9, 0x0, 0x0) (async) write$P9_RRENAME(r2, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x7, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x1, 0x8, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.782021222s ago: executing program 1 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000300006b"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r3 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4001}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a001, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000003680)={&(0x7f0000000180)=@vsock, 0x80, &(0x7f0000003500)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/211, 0xd3}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/206, 0xce}, {&(0x7f0000003400)=""/53, 0x35}, {&(0x7f0000003440)=""/145, 0x91}], 0x7, &(0x7f0000003580)=""/218, 0xda}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 2.144476019s ago: executing program 1 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88ce359bdb00147d, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250700000008000400ffffffff3000070073797374656d5f753a6f626a6563745f723a6465766963656b69745f706f7765725f657865635f743a73300008000500ac1e0001"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0xc804) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xe01, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r7, 0x80047437, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) 2.058942999s ago: executing program 4 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000700)=0x8, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r5, &(0x7f0000003540)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x342, 0xfffffffe, 0x80) r6 = dup2(r2, r2) utimensat(r6, 0x0, 0x0, 0x100) read$FUSE(r6, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x5, 0x4, 0x1, 0x5, 0x3, 0x0, [{0x7fffffff, 0xc, 0xff, '\x00', 0xd00}, {0x0, 0x5, 0x565e, '\x00', 0x205}, {0xd, 0x558f, 0x6, '\x00', 0x801}]}) read$FUSE(r6, 0x0, 0x0) write$vhost_msg_v2(r6, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept$inet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x74, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xfa}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.366007824s ago: executing program 2 (id=1070): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000a5b47ab1b70b9ace188ef4b3", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) r8 = fanotify_init(0x1a, 0x800) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r8, 0x641, 0x1028, r9, 0x0) fanotify_mark(r8, 0x1, 0x48000038, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r10 = syz_io_uring_setup(0x4a7b, &(0x7f00000000c0)={0x0, 0x679d, 0x0, 0x2000003, 0x3ce}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000097a14f7f0000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) 1.270827251s ago: executing program 0 (id=1071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x405, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}}, 0x40044) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) setsockopt$inet_opts(r1, 0x0, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x405, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}}, 0x40044) (async) socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) (async) setsockopt$inet_opts(r1, 0x0, 0x5, 0x0, 0x0) (async) 612.812975ms ago: executing program 4 (id=1072): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd70000000000049000000080001007063690011000200303030303a30303a313000300000000008007300000000000e0001006e657464657673696d"], 0x60}}, 0x24004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010207010902360001000000000904"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081204e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x11, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5], 0xfe, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a0001e4ed16ddcaad13ded20f"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setresuid(0x0, 0xee01, 0xee00) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}, 0xd}], 0x1, 0x10040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@delqdisc={0x24, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x9, 0x7}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x44840) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 478.337571ms ago: executing program 2 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000001baff8db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x7, 0x8, 0x0, 0xffe00002, 0x0, "0000100000b7a1169d6541f56500"}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r5 = fanotify_init(0x0, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) fanotify_mark(r7, 0x21, 0x101a, r7, 0x0) fanotify_mark(r7, 0x22, 0x4000003b, r7, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) 466.855605ms ago: executing program 0 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bond0\x00', {}, 0x104}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000a80)={0x0, 'veth0_vlan\x00', {0x4}, 0x1}) 279.020893ms ago: executing program 0 (id=1075): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10001, 0x1, 0x0, 0x6, 0x0, 0xd9b4, "5debca561a5fbf61048955f6f876b2ff", 0x2, 0x0, 0x0, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r3, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000380)={0x3, &(0x7f00000003c0)=[{0x1f, '\x00', @st={0x4, [{0x3, @uvalue=0x1000080000001}, {0x1, @uvalue=0x698}, {0x0, @uvalue=0xee6}, {0x3, @svalue=0x10}]}, 0x4}, {0x5, '\x00', @data=0x3, 0x3}]}) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000bd7000ffdbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0xc080) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000080)) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r9, r9, 0x0, 0x40008) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x10) getpid() 159.154964ms ago: executing program 0 (id=1076): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x48c2) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x7}) 150.600252ms ago: executing program 0 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=0x0, @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}]}}) (async) r5 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000406a05000000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x7, 0x4, 0xd, 0x0, 0x1, 0xff}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r9, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) (async, rerun: 32) sendto$packet(r7, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async, rerun: 32) r11 = syz_open_procfs(0x0, &(0x7f0000006340)='net/softnet_stat\x00') (async) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xfffff, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x28) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r14, r13, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee00}}, './file0\x00'}) (rerun: 64) 83.160487ms ago: executing program 0 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) write$char_usb(r9, &(0x7f0000002100)="887b527fabcf7c01079f2194d40f52f050619e8db5a1d1a9dd3a2d00702e9957f77422c22618f06f6d969a2cc8810bb3e9b69f575bb8ab6d8ebbdeee2f7951d58a749c6a96b60110a2a50442f83ccd9f435a167535ff0bb8a59236f9ab77749d0b9fe77229cc48dc0f0b617eba427f4c7eaab55f0816b588905edbc93af02a543fe633a74c8e1597d267667c98f656bd91d448903db5698c22475b7f3e4a0edb3172addb1c1e2f2340b3c30524056d8bcb4d579901ed5755ac9bbbaa55f7e749ab90e875ceabbb7da53540349471f2c31d9176c44c374e79abd976748b043ebc57e954d3efe29349c4e8399759ac5ea14162c9e538f77165ea2b4adb3e2d6f1e8ce256289f55b3db6081bdd85f4a72e34986c35af9c3d9087d2dd59c5252ec369830d96f24a3c37c1e29bf827369e5855bd300ba0061cac0b298eb64ce9cd729ee8ed9a4952ce722c82ecb6a67c6e74596874ab1bc1844b90fcd69148c4539fb9a28152e0d6f443c9cb9a3abd8705569a90ba1f3d3d4350ef1683e25937e43386cf66da52bebbd9d2ee51c1407e59fb0462f21ba35971f539fb25134f5dc05cd07c702084ca322320f38fb8549170ed445c163b9a539843f59089216e8b40e86efc32577cda3955c18e826a70e97aa16943a92f36ad04a6e8ac24ab75976b9c3aaeefad9abc7578f67bd048bea367a29e6b207dbc63371ffb8b6d29ec63e237352c7f4ddac06ebfd930237a0d8d1ffa5c1f39c2f2ca9393dbd38e135e0faf909d2fb7bba01d26f635c0402a546b7f052610e6919e53c4b123e85929874a92ca915c262014598d5c8e686c2199063d6c5bbf31582dd85bbce6a9f7b6f4e8b2570c1e806f581391a4b5831623e23de36895d38b6cbd0df182277caba14d971c84cddcccec80bc344a2a58b9507a79f312def0b4ec95dd7584b580dd34c8d59bb2a25e399b87036a8c2f9a4f44a70c27c49281e3d3707575cc7c54532a6fcbeb51a742c338d85ed15934bbb874d5967018c30a5222e8e832b26baf4b1619839ebe9fcc7e1df8180681dd6f03fe2aeaf344b97f27e378e155479d7c23d43d6f812ab9c938e23faf556b1b27cbcf7a434c9efc0aa61f5ca035b97984fad8d97bf1aab36aa686bdae727de73fd6c75a6d3be179b48bfc7f1504c1a3dd3798eaa8573483cb6e259fb79850ffa781dec45d34b6e0cdfa89af9b6fdbff331620146ff8163a7121bb5d790611c4f2877dbbac16f6ff6844300b95a4197782ecdb4900f15cfba36a7da6f935b374b364c2d7dbef62420de87ce2ad684f63b90f063a47ec820bbc8b0e3f545f9217a24773a13759f51b16f9555d1b5efb88f", 0x3b9) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x200) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="30050400b5a10500140012800b0001006970766c616e00000400028008000a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f00000000c0)) write$P9_RLOPEN(r10, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x10, 0x0, 0x3}}}, 0x18) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, 0x0, 0x10008800) 0s ago: executing program 3 (id=1079): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8a301, 0x0) unshare(0x28060400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x17, 0x2, r2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x141840) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000011c0)={{0x7, 0x9}, 'port1\x00', 0x5, 0x12, 0x10, 0x2, 0x7, 0x2a52, 0x1, 0x0, 0x4, 0x2}) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000009c0)=0xd, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(r5, &(0x7f0000000200)='net/sctp\x00') r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x149902, 0x0) write$sndseq(r8, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x1}, {}, @connect={{0xb, 0x40}, {0x3, 0xdf}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x64}, {0x0, 0x80}, @queue={0xa, {0x2, 0x8}}}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffffa, 0x200}, {}, {0x2}, @queue={0x3, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x94, 0xc}, @result={0x0, 0x3}}], 0x70) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000000a00)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_gettime(r6, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280000700", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): 542089][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.569357][ T5710] dvb-usb: bulk message failed: -22 (3/0) [ 259.569592][ T8353] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 259.576067][ T30] audit: type=1400 audit(1777200628.518:3548): avc: denied { create } for pid=8327 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.622688][ T5710] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 259.656028][ T5710] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 259.674080][ T5710] usb 2-1: media controller created [ 259.691466][ T30] audit: type=1400 audit(1777200628.518:3549): avc: denied { write } for pid=8327 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.716317][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.741730][ T5710] dvb-usb: bulk message failed: -22 (5/0) [ 259.762326][ T5710] dvb-usb: MAC address reading failed. [ 259.782357][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.797794][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.800324][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.818122][ T30] audit: type=1400 audit(1777200628.528:3550): avc: denied { write } for pid=8327 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.843161][ T5702] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 259.859902][ T5702] asix 4-1:0.34: probe with driver asix failed with error -61 [ 259.872331][ T5710] dvb-usb: bulk message failed: -22 (6/0) [ 259.887369][ T5710] dvb-usb: bulk message failed: -22 (6/0) [ 259.898660][ T30] audit: type=1400 audit(1777200628.528:3551): avc: denied { read } for pid=8327 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.923144][ T5710] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 259.934764][ T5702] usb 4-1: USB disconnect, device number 32 [ 259.981209][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 260.022239][ T30] audit: type=1400 audit(1777200628.558:3552): avc: denied { create } for pid=8374 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 260.068837][ T5710] dvb-usb: schedule remote query interval to 100 msecs. [ 260.091577][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 260.101575][ T5710] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 260.168510][ T8384] netlink: 212 bytes leftover after parsing attributes in process `syz.1.641'. [ 260.259896][ T6235] dvb-usb: bulk message failed: -22 (2/0) [ 260.266169][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.641'. [ 260.267324][ T6235] dvb-usb: error while querying for an remote control event. [ 260.405015][ T6235] dvb-usb: bulk message failed: -22 (2/0) [ 260.412920][ T6235] dvb-usb: error while querying for an remote control event. [ 260.593767][ T6235] dvb-usb: bulk message failed: -22 (2/0) [ 260.626218][ T6235] dvb-usb: error while querying for an remote control event. [ 260.754172][ T6235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.766126][ T5710] dvb-usb: bulk message failed: -22 (2/0) [ 260.780807][ T6217] usb 3-1: USB disconnect, device number 26 [ 260.797960][ T5710] dvb-usb: error while querying for an remote control event. [ 261.294617][ T6235] dvb-usb: bulk message failed: -22 (2/0) [ 261.372721][ T6235] dvb-usb: error while querying for an remote control event. [ 261.518438][ T6217] dvb-usb: bulk message failed: -22 (2/0) [ 261.552928][ T6217] dvb-usb: error while querying for an remote control event. [ 261.661301][ T8402] lo speed is unknown, defaulting to 1000 [ 261.699845][ T8414] fuse: fd is not a fuse device [ 261.711861][ T6217] dvb-usb: bulk message failed: -22 (2/0) [ 261.846977][ T6217] dvb-usb: error while querying for an remote control event. [ 261.859504][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.912223][ T5710] usb 2-1: USB disconnect, device number 31 [ 262.609094][ T5710] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 262.648935][ T5702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.657538][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.984970][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.065718][ T8436] netlink: 88 bytes leftover after parsing attributes in process `syz.4.659'. [ 264.275008][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 264.275039][ T30] audit: type=1400 audit(1777200633.508:3735): avc: denied { create } for pid=8446 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.383070][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.431995][ T5702] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 264.466672][ T30] audit: type=1400 audit(1777200633.578:3736): avc: denied { map_create } for pid=8446 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 264.537746][ T30] audit: type=1400 audit(1777200633.578:3737): avc: denied { create } for pid=8446 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.616414][ T30] audit: type=1400 audit(1777200633.578:3738): avc: denied { bpf } for pid=8446 comm="syz.0.663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 264.617787][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.640755][ T30] audit: type=1400 audit(1777200633.598:3739): avc: denied { read } for pid=8447 comm="syz.1.662" dev="nsfs" ino=4026533219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 264.659657][ T8455] capability: warning: `syz.0.664' uses 32-bit capabilities (legacy support in use) [ 264.670882][ T30] audit: type=1400 audit(1777200633.598:3740): avc: denied { open } for pid=8447 comm="syz.1.662" path="net:[4026533219]" dev="nsfs" ino=4026533219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 264.670925][ T30] audit: type=1400 audit(1777200633.608:3741): avc: denied { map_create } for pid=8446 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 264.670959][ T30] audit: type=1400 audit(1777200633.608:3742): avc: denied { map_read map_write } for pid=8446 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 264.670994][ T30] audit: type=1400 audit(1777200633.618:3743): avc: denied { ioctl } for pid=8438 comm="syz.3.660" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.671031][ T30] audit: type=1400 audit(1777200633.628:3744): avc: denied { create } for pid=8447 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.800338][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.811096][ T5702] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 264.857788][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.907524][ T5702] usb 4-1: config 0 descriptor?? [ 265.452726][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.083387][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.493148][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.552858][ T5702] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 266.573837][ T5702] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 267.541934][ T5702] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 268.302745][ T8493] overlayfs: failed to clone upperpath [ 268.342793][ T6217] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 268.688516][ T5702] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 268.826208][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.838048][ T5702] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 268.986880][ T5702] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 269.002588][ T6217] usb 2-1: Using ep0 maxpacket: 16 [ 269.038860][ T6217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 269.075057][ T5702] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -71 [ 269.097773][ T6217] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.136163][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.151177][ T5702] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -71 [ 269.171136][ T6217] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 269.192764][ T5702] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 269.231301][ T6217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.231891][ T5702] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 269.287995][ T6217] usb 2-1: config 0 descriptor?? [ 269.313713][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 269.313745][ T30] audit: type=1400 audit(1777200638.548:3969): avc: denied { read write } for pid=8506 comm="syz.2.678" name="swradio5" dev="devtmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.375852][ T5702] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 269.496174][ T5702] usb 4-1: USB disconnect, device number 33 [ 269.561636][ T30] audit: type=1400 audit(1777200638.548:3970): avc: denied { module_request } for pid=8505 comm="syz.0.677" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 269.596314][ T6217] usbhid 2-1:0.0: can't add hid device: -71 [ 269.643958][ T6217] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.667274][ T8504] fido_id[8504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 269.698120][ T30] audit: type=1400 audit(1777200638.548:3971): avc: denied { module_request } for pid=8505 comm="syz.0.677" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 269.706235][ T6217] usb 2-1: USB disconnect, device number 32 [ 269.743844][ T6223] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.791886][ T30] audit: type=1400 audit(1777200638.578:3972): avc: denied { read write open } for pid=8506 comm="syz.2.678" path="/dev/swradio5" dev="devtmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.861899][ T30] audit: type=1400 audit(1777200638.588:3973): avc: denied { ioctl } for pid=8506 comm="syz.2.678" path="/dev/swradio5" dev="devtmpfs" ino=1021 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.892737][ T2088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.942086][ T6223] usb 3-1: Using ep0 maxpacket: 8 [ 269.949891][ T6223] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.961041][ T30] audit: type=1400 audit(1777200638.588:3974): avc: denied { ioctl } for pid=8485 comm="syz.1.673" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.986978][ T5702] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 270.162994][ T6223] usb 3-1: config 1 has an invalid interface number: 2 but max is 0 [ 270.173840][ T6223] usb 3-1: config 1 has no interface number 0 [ 270.212314][ T6223] usb 3-1: config 1 interface 2 has no altsetting 0 [ 270.221025][ T30] audit: type=1400 audit(1777200638.588:3975): avc: denied { ioctl } for pid=8485 comm="syz.1.673" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.261028][ T6223] usb 3-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=2a.87 [ 270.276797][ T6223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.290860][ T30] audit: type=1400 audit(1777200638.588:3976): avc: denied { read write } for pid=8506 comm="syz.2.678" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.318189][ T6223] usb 3-1: Product: syz [ 270.324574][ T30] audit: type=1400 audit(1777200638.588:3977): avc: denied { open } for pid=8506 comm="syz.2.678" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.336732][ T6223] usb 3-1: Manufacturer: syz [ 270.355077][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 270.366250][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.376587][ T30] audit: type=1400 audit(1777200638.598:3978): avc: denied { sys_module } for pid=8505 comm="syz.0.677" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 270.381845][ T6223] usb 3-1: SerialNumber: syz [ 270.413572][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.439100][ T5702] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.454144][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.459226][ T8525] netlink: 400 bytes leftover after parsing attributes in process `syz.1.681'. [ 270.479927][ T5702] usb 4-1: Product: syz [ 270.489110][ T5702] usb 4-1: Manufacturer: syz [ 270.495928][ T5702] usb 4-1: SerialNumber: syz [ 270.512935][ T5702] usb 4-1: config 0 descriptor?? [ 270.568240][ T5702] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.596287][ T5702] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 270.681230][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.692783][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.706052][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'. [ 270.772407][ T6217] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 270.782680][ T6223] gspca_main: finepix-2.14.0 probing 04cb:013d [ 270.810895][ T6223] usb 3-1: USB disconnect, device number 27 [ 270.937508][ T6217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.954758][ T6217] usb 2-1: config 0 has no interfaces? [ 270.961540][ T6217] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 270.972886][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.981309][ T6217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.993567][ T6217] usb 2-1: config 0 descriptor?? [ 271.080772][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 271.093040][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 271.155687][ T5702] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 271.366132][ T5702] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 271.859994][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.071552][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.282514][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.462957][ T5702] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 272.466223][ T5702] em28xx 4-1:0.0: No AC97 audio processor [ 272.915787][ T6217] usb 4-1: USB disconnect, device number 34 [ 272.916918][ T6217] em28xx 4-1:0.0: Disconnecting em28xx [ 272.979320][ T6217] em28xx 4-1:0.0: Freeing device [ 273.009940][ T8540] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 273.009960][ T8540] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 273.009971][ T8540] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.685'. [ 273.013674][ T8540] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 273.013691][ T8540] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 273.013701][ T8540] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.685'. [ 273.132306][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.421887][ T6217] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.558496][ T8553] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 273.577228][ T6217] usb 3-1: Using ep0 maxpacket: 8 [ 273.585345][ T6217] usb 3-1: config 1 has an invalid interface number: 97 but max is 0 [ 273.585369][ T6217] usb 3-1: config 1 has no interface number 0 [ 273.585405][ T6217] usb 3-1: config 1 interface 97 altsetting 68 endpoint 0x8 has an invalid bInterval 129, changing to 11 [ 273.585454][ T6217] usb 3-1: config 1 interface 97 altsetting 68 has a duplicate endpoint with address 0x8, skipping [ 273.585475][ T6217] usb 3-1: config 1 interface 97 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 32 [ 273.585496][ T6217] usb 3-1: config 1 interface 97 altsetting 68 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 273.585521][ T6217] usb 3-1: config 1 interface 97 altsetting 68 has an invalid descriptor for endpoint zero, skipping [ 273.585539][ T6217] usb 3-1: config 1 interface 97 altsetting 68 has a duplicate endpoint with address 0x3, skipping [ 273.585556][ T6217] usb 3-1: config 1 interface 97 has no altsetting 0 [ 273.588915][ T6217] usb 3-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=2a.87 [ 273.588968][ T6217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.589017][ T6217] usb 3-1: Product: 〠[ 273.589047][ T6217] usb 3-1: Manufacturer: 郶챚ç†æ§œìŒµî«–붌å¶ë»“嗶竞穭ī晄䎣瞅Ƌꢋʼnҵᤧ䎲㙲ﺻ紮æ•é¢¼ã§ë›£â¬¯ážžï«ïŽ…彉뱊ïµî¯¥ç”·æ¸¦é‚šÔ¢á¤ˆâžæ‹³ã²ƒâ‡Šï£ì¹‰äƒ†äŸç“¬Ì¯á™ë­´êŸºæ·‹æ­…ᖌ䠱靖䧞鬫☫儊㸻胡횕ꖱ鶉ç覒᯳뫱誙쫠蕈 [ 273.589103][ T6217] usb 3-1: SerialNumber: Є [ 273.643519][ T8557] No such timeout policy "syz1" [ 274.409308][ T8554] batman_adv: batadv0: Adding interface: dummy0 [ 274.409323][ T8554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.409345][ T8554] batman_adv: batadv0: Interface activated: dummy0 [ 274.418153][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 274.418168][ T30] audit: type=1400 audit(1777200642.878:4124): avc: denied { create } for pid=8547 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.418204][ T30] audit: type=1400 audit(1777200642.878:4125): avc: denied { write } for pid=8547 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.418238][ T30] audit: type=1400 audit(1777200642.878:4126): avc: denied { remount } for pid=8547 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 274.418271][ T30] audit: type=1400 audit(1777200643.628:4127): avc: denied { map_create } for pid=8550 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.418303][ T30] audit: type=1400 audit(1777200643.638:4128): avc: denied { create } for pid=8550 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.418335][ T30] audit: type=1400 audit(1777200643.638:4129): avc: denied { create } for pid=8550 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.518268][ T30] audit: type=1400 audit(1777200643.748:4130): avc: denied { ioctl } for pid=8541 comm="syz.2.684" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.518920][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.594316][ T30] audit: type=1400 audit(1777200643.828:4131): avc: denied { map_create } for pid=8558 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.594386][ T30] audit: type=1400 audit(1777200643.828:4132): avc: denied { map_read map_write } for pid=8558 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.599089][ T30] audit: type=1400 audit(1777200643.828:4133): avc: denied { prog_load } for pid=8558 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.770015][ T6217] gspca_main: finepix-2.14.0 probing 04cb:013d [ 274.832011][ T6217] usb 3-1: USB disconnect, device number 28 [ 275.292358][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.535842][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.600459][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.792356][ T8582] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 277.436826][ T8588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.801086][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 277.834660][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.115243][ T8587] syz.2.696 (8587): drop_caches: 2 [ 278.246887][ T6239] usb 2-1: USB disconnect, device number 33 [ 278.332061][ T6225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.983672][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.029040][ T8602] netlink: 7 bytes leftover after parsing attributes in process `syz.3.703'. [ 279.131879][ T6239] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 279.261849][ T6239] usb 2-1: device descriptor read/64, error -71 [ 279.427325][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 279.427341][ T30] audit: type=1400 audit(1777200648.658:4251): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.765420][ T30] audit: type=1400 audit(1777200648.658:4252): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.811886][ T6239] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 279.823795][ T30] audit: type=1400 audit(1777200648.658:4253): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 279.852891][ T30] audit: type=1400 audit(1777200648.768:4254): avc: denied { read } for pid=8607 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.879594][ T30] audit: type=1400 audit(1777200648.998:4255): avc: denied { ioctl } for pid=8600 comm="syz.1.704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.906123][ T30] audit: type=1400 audit(1777200649.038:4256): avc: denied { mount } for pid=8610 comm="syz.2.708" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 279.929508][ T30] audit: type=1400 audit(1777200649.048:4257): avc: denied { ioctl } for pid=8600 comm="syz.1.704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.954814][ T30] audit: type=1400 audit(1777200649.118:4258): avc: denied { map_create } for pid=8620 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 279.975347][ T6239] usb 2-1: device descriptor read/64, error -71 [ 279.989622][ T30] audit: type=1400 audit(1777200649.138:4259): avc: denied { map_read map_write } for pid=8620 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.009547][ T30] audit: type=1400 audit(1777200649.138:4260): avc: denied { ioctl } for pid=8600 comm="syz.1.704" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.040149][ T2088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.092150][ T6239] usb usb2-port1: attempt power cycle [ 280.127349][ T8626] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 280.159632][ T8626] bond1: entered promiscuous mode [ 280.168603][ T8626] bond1: entered allmulticast mode [ 280.176153][ T8626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.441858][ T6239] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 280.484896][ T6239] usb 2-1: device descriptor read/8, error -71 [ 280.811937][ T6239] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 280.833264][ T6239] usb 2-1: device descriptor read/8, error -71 [ 280.954846][ T6239] usb usb2-port1: unable to enumerate USB device [ 281.096344][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.372205][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.452363][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.181827][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.291525][ T8685] netlink: 88 bytes leftover after parsing attributes in process `syz.1.727'. [ 282.321920][ T6223] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 282.532006][ T6223] usb 4-1: device descriptor read/64, error -71 [ 282.832927][ T6223] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 283.148643][ T6223] usb 4-1: device descriptor read/64, error -71 [ 283.213669][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.282179][ T6223] usb usb4-port1: attempt power cycle [ 283.625885][ T8709] trusted_key: syz.0.733 sent an empty control message without MSG_MORE. [ 283.706207][ T6223] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 283.748942][ T6223] usb 4-1: device descriptor read/8, error -71 [ 284.001934][ T6223] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 284.043153][ T6223] usb 4-1: device descriptor read/8, error -71 [ 284.162092][ T6223] usb usb4-port1: unable to enumerate USB device [ 284.255686][ T2088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.412095][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.432351][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 284.432373][ T30] audit: type=1400 audit(1777200653.658:4531): avc: denied { mount } for pid=8730 comm="syz.1.739" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 284.465077][ T8731] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 284.474980][ T8731] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 284.489560][ T30] audit: type=1400 audit(1777200653.698:4532): avc: denied { ioctl } for pid=8730 comm="syz.1.739" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=929 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.545648][ T8736] netlink: 88 bytes leftover after parsing attributes in process `syz.4.740'. [ 285.220010][ T30] audit: type=1400 audit(1777200653.748:4533): avc: denied { prog_load } for pid=8730 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.242428][ T30] audit: type=1400 audit(1777200653.758:4534): avc: denied { bpf } for pid=8730 comm="syz.1.739" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.264873][ T30] audit: type=1400 audit(1777200653.758:4535): avc: denied { create } for pid=8730 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.287119][ T30] audit: type=1400 audit(1777200653.758:4536): avc: denied { read append } for pid=8730 comm="syz.1.739" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.313409][ T30] audit: type=1400 audit(1777200653.758:4537): avc: denied { open } for pid=8730 comm="syz.1.739" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.339325][ T30] audit: type=1400 audit(1777200653.758:4538): avc: denied { create } for pid=8735 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.361385][ T30] audit: type=1400 audit(1777200653.768:4539): avc: denied { read append } for pid=8730 comm="syz.1.739" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.384690][ T30] audit: type=1400 audit(1777200653.768:4540): avc: denied { open } for pid=8730 comm="syz.1.739" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.428103][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.522373][ T8742] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 285.570057][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.578797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.587901][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.596163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.598374][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.604683][ T8748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.646587][ T8742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8742 comm=syz.4.742 [ 286.088843][ T8748] could not allocate digest TFM handle sha224-generic [ 286.409098][ T8760] vti0: entered promiscuous mode [ 286.435599][ T8760] vti0: entered allmulticast mode [ 286.571839][ T6225] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 286.736759][ T6225] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.749465][ T6225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.766023][ T6225] usb 4-1: Product: syz [ 286.775180][ T6225] usb 4-1: Manufacturer: syz [ 286.784190][ T6225] usb 4-1: SerialNumber: syz [ 286.807801][ T6225] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.895778][ T6223] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.120237][ T6223] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 288.140122][ T6223] ath9k_htc: Failed to initialize the device [ 288.233054][ T6223] usb 4-1: ath9k_htc: USB layer deinitialized [ 289.964450][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 289.964483][ T30] audit: type=1400 audit(1777200657.350:4790): avc: denied { create } for pid=8791 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 289.970435][ T6417] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 290.001174][ T30] audit: type=1400 audit(1777200657.350:4791): avc: denied { write } for pid=8791 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.161993][ T30] audit: type=1400 audit(1777200657.360:4792): avc: denied { read } for pid=8791 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.369075][ T30] audit: type=1400 audit(1777200657.370:4793): avc: denied { firmware_load } for pid=8791 comm="syz.2.756" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 290.458885][ T30] audit: type=1400 audit(1777200657.670:4794): avc: denied { module_request } for pid=8762 comm="syz.3.748" kmod="crypto-hmac(sm3)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 290.510953][ T30] audit: type=1400 audit(1777200658.270:4795): avc: denied { module_request } for pid=8762 comm="syz.3.748" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 290.522827][ T6225] usb 4-1: USB disconnect, device number 39 [ 290.557068][ T30] audit: type=1400 audit(1777200658.270:4796): avc: denied { module_request } for pid=8762 comm="syz.3.748" kmod="crypto-ecb(cipher_null)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 290.629925][ T30] audit: type=1400 audit(1777200658.430:4797): avc: denied { execmem } for pid=8819 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 290.661614][ T30] audit: type=1400 audit(1777200658.660:4798): avc: denied { create } for pid=8819 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.681541][ T30] audit: type=1400 audit(1777200658.660:4799): avc: denied { setopt } for pid=8819 comm="syz.4.757" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.294439][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.301158][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 291.770960][ T8862] misc userio: No port type given on /dev/userio [ 291.944509][ T6223] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 292.160985][ T6223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.189269][ T6223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.509874][ T6223] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 292.724452][ T6223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.774524][ T6223] usb 3-1: config 0 descriptor?? [ 293.027200][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.123093][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.598006][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.625666][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.647386][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.659994][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.676390][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.687731][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.698244][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.715905][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.955905][ T6223] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -32 [ 294.103373][ T8908] netlink: 88 bytes leftover after parsing attributes in process `syz.1.778'. [ 294.151910][ T5710] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 294.543417][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 294.559812][ T5710] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 294.580966][ T8916] netlink: 88 bytes leftover after parsing attributes in process `syz.0.779'. [ 294.593718][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 294.620702][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 294.639239][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 294.658185][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 294.682272][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 294.711000][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 294.813226][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 294.851850][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 294.903051][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 294.927871][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 294.946507][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 294.973026][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 294.973042][ T30] audit: type=1326 audit(1777200662.198:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.050832][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 295.083249][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 295.111001][ T6239] usb 3-1: USB disconnect, device number 29 [ 295.121030][ T30] audit: type=1326 audit(1777200662.208:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.168353][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 295.189508][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 295.209969][ T30] audit: type=1326 audit(1777200662.208:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.274684][ T5710] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 295.319594][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 295.351288][ T30] audit: type=1326 audit(1777200662.238:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.422635][ T5710] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.450703][ T5710] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 295.472487][ T30] audit: type=1326 audit(1777200662.238:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.518516][ T5710] usb 4-1: Product: syz [ 295.539445][ T5710] usb 4-1: Manufacturer: syz [ 295.574815][ T5710] r8152-cfgselector 4-1: Unknown version 0x0000 [ 295.610112][ T5710] r8152-cfgselector 4-1: config 0 descriptor?? [ 295.803719][ T30] audit: type=1326 audit(1777200662.238:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd846d5d60e code=0x7ffc0000 [ 295.830193][ T30] audit: type=1326 audit(1777200662.238:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 295.874369][ T30] audit: type=1326 audit(1777200662.238:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd846d9cdd9 code=0x7ffc0000 [ 296.648816][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.784'. [ 296.672509][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.732090][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.852473][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.220480][ T30] audit: type=1400 audit(1777200662.268:5100): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.252651][ T30] audit: type=1400 audit(1777200662.268:5101): avc: denied { read write open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.775356][ T8945] lo speed is unknown, defaulting to 1000 [ 299.871259][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.046644][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 300.046675][ T30] audit: type=1400 audit(1777200667.278:5164): avc: denied { create } for pid=8947 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.172970][ T5710] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 300.228354][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.786'. [ 300.288346][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 300.451073][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 300.460082][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 300.544195][ T30] audit: type=1400 audit(1777200667.308:5165): avc: denied { bind } for pid=8947 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.871911][ T30] audit: type=1400 audit(1777200667.318:5166): avc: denied { write } for pid=8947 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.924695][ T30] audit: type=1400 audit(1777200667.418:5167): avc: denied { create } for pid=8947 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.948246][ T30] audit: type=1400 audit(1777200667.428:5168): avc: denied { bpf } for pid=8947 comm="syz.2.786" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.972920][ T30] audit: type=1400 audit(1777200667.458:5169): avc: denied { write } for pid=8947 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.993866][ T30] audit: type=1400 audit(1777200667.558:5170): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.019858][ T30] audit: type=1400 audit(1777200667.558:5171): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.101877][ T30] audit: type=1400 audit(1777200667.578:5172): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.200083][ T30] audit: type=1400 audit(1777200668.128:5173): avc: denied { create } for pid=8958 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.453631][ T8966] net_ratelimit: 739 callbacks suppressed [ 301.453648][ T8966] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.749204][ T8969] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.854536][ T8983] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.787'. [ 303.083712][ T9000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.127964][ T9004] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 303.144637][ T6225] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 303.144910][ T9000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.161038][ T9004] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 303.301506][ T9009] Cannot find del_set index 2 as target [ 303.392007][ T891] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 303.484321][ T6225] usb 3-1: Using ep0 maxpacket: 8 [ 303.549820][ T6225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.603499][ T6225] usb 3-1: config 1 has an invalid interface number: 97 but max is 0 [ 303.612901][ T6225] usb 3-1: config 1 has no interface number 0 [ 303.619643][ T6225] usb 3-1: config 1 interface 97 has no altsetting 0 [ 303.645792][ T6225] usb 3-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=2a.87 [ 303.673626][ T6225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.696484][ T6225] usb 3-1: Product: syz [ 303.703483][ T6225] usb 3-1: Manufacturer: syz [ 303.708386][ T6225] usb 3-1: SerialNumber: syz [ 303.757546][ T9024] ALSA: mixer_oss: invalid OSS volume '/file0' [ 303.991524][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 304.035347][ T6225] gspca_main: finepix-2.14.0 probing 04cb:013d [ 304.063561][ T5710] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 304.071515][ T9037] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 304.090444][ T6225] usb 3-1: USB disconnect, device number 30 [ 304.233631][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 304.266421][ T5710] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 304.409520][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.422988][ T5710] usb 4-1: config 0 has no interface number 0 [ 304.429377][ T5710] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 304.457251][ T5710] usb 4-1: config 0 interface 8 has no altsetting 0 [ 304.477222][ T5710] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 304.498862][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.217161][ T5710] usb 4-1: Product: syz [ 305.238716][ T5710] usb 4-1: Manufacturer: syz [ 305.256374][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 305.256399][ T30] audit: type=1400 audit(1777200672.488:5479): avc: denied { map_create } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.265636][ T5710] usb 4-1: SerialNumber: syz [ 305.283399][ T30] audit: type=1400 audit(1777200672.488:5480): avc: denied { bpf } for pid=9048 comm="syz.4.811" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.335342][ T30] audit: type=1400 audit(1777200672.488:5481): avc: denied { map_create } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.363947][ T30] audit: type=1400 audit(1777200672.488:5482): avc: denied { map_read map_write } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.403082][ T5710] usb 4-1: config 0 descriptor?? [ 305.429151][ T30] audit: type=1400 audit(1777200672.518:5483): avc: denied { create } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.646878][ T30] audit: type=1400 audit(1777200672.548:5484): avc: denied { write } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.446176][ T30] audit: type=1400 audit(1777200672.568:5485): avc: denied { read } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.488624][ T5710] ath6kl: Failed to submit usb control message: -71 [ 306.510253][ T5710] ath6kl: unable to send the bmi data to the device: -71 [ 306.524984][ T30] audit: type=1400 audit(1777200672.568:5486): avc: denied { read } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.534999][ T5710] ath6kl: Unable to send get target info: -71 [ 306.563898][ T5710] ath6kl: Failed to init ath6kl core: -71 [ 306.570576][ T5710] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 306.616278][ T30] audit: type=1400 audit(1777200672.588:5487): avc: denied { create } for pid=9048 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.620952][ T5710] usb 4-1: USB disconnect, device number 41 [ 306.716837][ T30] audit: type=1400 audit(1777200672.588:5488): avc: denied { ioctl } for pid=9048 comm="syz.4.811" path="socket:[18228]" dev="sockfs" ino=18228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.022940][ T9066] 9p: Bad value for 'rfdno' [ 307.500670][ T9074] dvmrp1: entered allmulticast mode [ 307.821065][ T9092] overlayfs: failed to clone upperpath [ 309.452049][ T891] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 309.611889][ T891] usb 4-1: device descriptor read/64, error -71 [ 309.903003][ T6217] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.961925][ T891] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 310.074375][ T6217] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.098539][ T6217] usb 3-1: config 1 interface 0 has no altsetting 0 [ 310.111882][ T891] usb 4-1: device descriptor read/64, error -71 [ 310.124224][ T6217] usb 3-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.40 [ 310.142179][ T6217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.163142][ T6217] usb 3-1: Product: syz [ 310.173202][ T6217] usb 3-1: Manufacturer: 鰻˜캹᢬빃Ơ⺶ëµä–®Ä“옷ᷰ䗩ﵗ㜼췳쩿䛊ã²ä§ŽÔ팶îžåé•ï¢á€‹í‰¢íž—䇧羽᫭Ẍ酗ꂉ㧽â–摵ି兗믶능✷쳔칓᜽᠆鮭ⴶæ¡î˜žä˜¢æ¢†ìž’撾亸궢툗ퟵ隀辪䑤峲㱟녰刻⣎à²ï´½æ·§å¥—祻ê¬âˆ¡ë³¤á„¼ë¬‚ì„ [ 310.324218][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 310.324229][ T30] audit: type=1400 audit(1777200676.560:5682): avc: denied { bind } for pid=9122 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.355588][ T891] usb usb4-port1: attempt power cycle [ 310.363277][ T30] audit: type=1400 audit(1777200676.590:5683): avc: denied { create } for pid=9122 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.384311][ T30] audit: type=1400 audit(1777200676.590:5684): avc: denied { ioctl } for pid=9102 comm="syz.3.830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.412340][ T30] audit: type=1400 audit(1777200676.590:5685): avc: denied { ioctl } for pid=9102 comm="syz.3.830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.449560][ T6217] usb 3-1: SerialNumber: syz [ 310.458208][ T30] audit: type=1400 audit(1777200676.700:5686): avc: denied { ioctl } for pid=9102 comm="syz.3.830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.490566][ T30] audit: type=1400 audit(1777200676.730:5687): avc: denied { ioctl } for pid=9114 comm="syz.2.833" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.663476][ T30] audit: type=1400 audit(1777200676.900:5688): avc: denied { ioctl } for pid=9102 comm="syz.3.830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.721939][ T891] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 310.744335][ T30] audit: type=1400 audit(1777200676.930:5689): avc: denied { read write } for pid=9114 comm="syz.2.833" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 310.805408][ T891] usb 4-1: device descriptor read/8, error -71 [ 310.854749][ T6217] usbhid 3-1:1.0: can't add hid device: -71 [ 310.900241][ T6217] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 310.910148][ T30] audit: type=1400 audit(1777200676.930:5690): avc: denied { read write open } for pid=9114 comm="syz.2.833" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 310.972718][ T6217] usb 3-1: USB disconnect, device number 31 [ 311.176375][ T891] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 311.213111][ T891] usb 4-1: device descriptor read/8, error -71 [ 311.382891][ T891] usb usb4-port1: unable to enumerate USB device [ 311.486368][ T30] audit: type=1400 audit(1777200676.930:5691): avc: denied { create } for pid=9114 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.545251][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.566848][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.681666][ T9148] tmpfs: Bad value for 'mpol' [ 313.518606][ T9156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.243567][ T6223] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 314.389568][ T9183] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 314.401869][ T6223] usb 4-1: Using ep0 maxpacket: 8 [ 314.446670][ T6223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.482450][ T6223] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.519575][ T6223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.551300][ T6223] usb 4-1: config 0 descriptor?? [ 314.579985][ T9186] lo speed is unknown, defaulting to 1000 [ 314.934098][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.944235][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.049096][ T6223] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 315.230821][ T9186] IPVS: Unknown mcast interface: syzkaller0 [ 315.332188][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 315.332217][ T30] audit: type=1400 audit(1777200680.581:5846): avc: denied { bpf } for pid=9194 comm="syz.0.853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.373337][ T30] audit: type=1400 audit(1777200680.581:5847): avc: denied { ioctl } for pid=9174 comm="syz.3.847" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.415440][ T30] audit: type=1400 audit(1777200680.611:5848): avc: denied { prog_load } for pid=9194 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 315.441787][ T9195] nftables ruleset with unbound set [ 315.447083][ T30] audit: type=1400 audit(1777200680.611:5849): avc: denied { bpf } for pid=9194 comm="syz.0.853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.475129][ T30] audit: type=1400 audit(1777200680.611:5850): avc: denied { perfmon } for pid=9194 comm="syz.0.853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.498942][ T30] audit: type=1400 audit(1777200680.611:5851): avc: denied { perfmon } for pid=9194 comm="syz.0.853" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.521032][ T30] audit: type=1400 audit(1777200680.611:5852): avc: denied { bpf } for pid=9194 comm="syz.0.853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.556774][ T30] audit: type=1400 audit(1777200680.611:5853): avc: denied { prog_run } for pid=9194 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 315.576770][ T30] audit: type=1400 audit(1777200680.621:5854): avc: denied { setopt } for pid=9194 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.593425][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.596328][ T30] audit: type=1400 audit(1777200680.641:5855): avc: denied { allowed } for pid=9194 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 315.629340][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.791849][ T5710] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 315.922812][ T5710] usb 3-1: device descriptor read/64, error -71 [ 315.978089][ T9175] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 316.076874][ T9175] input: syz1 as /devices/virtual/input/input18 [ 316.182200][ T5710] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 316.194047][ T6223] usb 4-1: USB disconnect, device number 46 [ 316.592370][ T5710] usb 3-1: device descriptor read/64, error -71 [ 316.630785][ T9213] loop7: detected capacity change from 0 to 7 [ 316.688640][ T9213] Dev loop7: unable to read RDB block 7 [ 316.694534][ T9213] loop7: unable to read partition table [ 316.700573][ T9213] loop7: partition table beyond EOD, truncated [ 316.707478][ T6223] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 316.712178][ T5710] usb usb3-port1: attempt power cycle [ 316.718288][ T9213] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 316.885589][ T6223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.896366][ T6223] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.906867][ T6223] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.916440][ T6223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 316.925111][ T6223] usb 2-1: SerialNumber: syz [ 317.052712][ T5710] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 317.062093][ T6217] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 317.072314][ T5710] usb 3-1: device descriptor read/8, error -71 [ 317.149861][ T9210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.857'. [ 317.211891][ T6217] usb 4-1: Using ep0 maxpacket: 32 [ 317.218649][ T6217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.229916][ T6217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.239850][ T6217] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.248940][ T6217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.260743][ T6217] usb 4-1: config 0 descriptor?? [ 317.270832][ T6217] hub 4-1:0.0: USB hub found [ 317.312011][ T5710] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 317.333578][ T5710] usb 3-1: device descriptor read/8, error -71 [ 317.601287][ T5710] usb usb3-port1: unable to enumerate USB device [ 317.623631][ T6217] hub 4-1:0.0: 1 port detected [ 318.578360][ T6217] hub 4-1:0.0: activate --> -90 [ 319.402242][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 319.421031][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 319.778259][ T6217] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 319.905654][ T9241] bridge0: port 3(netdevsim0) entered disabled state [ 319.912508][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.919696][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.109812][ T7448] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.146641][ T7448] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.242879][ T6223] usb 2-1: 0:2 : does not exist [ 320.248232][ T7448] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.262019][ T6223] usb 2-1: unit 5: unexpected type 0x0a [ 320.269940][ T7448] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.349081][ T6223] usb 2-1: USB disconnect, device number 39 [ 320.356987][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 320.357015][ T30] audit: type=1400 audit(1777200685.601:6031): avc: denied { read } for pid=9253 comm="syz.1.870" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.408350][ T30] audit: type=1400 audit(1777200685.601:6032): avc: denied { read open } for pid=9253 comm="syz.1.870" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.421094][ T9256] fuse: Unknown parameter '' [ 320.433823][ T30] audit: type=1400 audit(1777200685.631:6033): avc: denied { read write } for pid=9253 comm="syz.1.870" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.469398][ T30] audit: type=1400 audit(1777200685.631:6034): avc: denied { open } for pid=9253 comm="syz.1.870" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.481551][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.505650][ T30] audit: type=1400 audit(1777200685.631:6035): avc: denied { ioctl } for pid=9253 comm="syz.1.870" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.533353][ T30] audit: type=1400 audit(1777200685.631:6036): avc: denied { ioctl } for pid=9253 comm="syz.1.870" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.558142][ T30] audit: type=1400 audit(1777200685.631:6037): avc: denied { ioctl } for pid=9253 comm="syz.1.870" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.582902][ T30] audit: type=1400 audit(1777200685.631:6038): avc: denied { read write } for pid=9255 comm="syz.2.871" name="swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.612948][ T30] audit: type=1400 audit(1777200685.631:6039): avc: denied { open } for pid=9255 comm="syz.2.871" path="/dev/swradio4" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.638106][ T30] audit: type=1400 audit(1777200685.631:6040): avc: denied { read write } for pid=9255 comm="syz.2.871" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 320.893384][ T6223] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 321.096577][ T6223] usb 2-1: Using ep0 maxpacket: 8 [ 321.115066][ T6223] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 321.145305][ T6223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.612084][ T6217] usb 4-1: USB disconnect, device number 47 [ 321.834273][ T6223] pvrusb2: Hardware description: Terratec Grabster AV400 [ 321.915906][ T6223] pvrusb2: ********** [ 321.944220][ T6223] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 321.986818][ T6223] pvrusb2: Important functionality might not be entirely working. [ 322.011840][ T6223] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 322.051790][ T6223] pvrusb2: ********** [ 323.081884][ T891] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 323.241928][ T891] usb 4-1: Using ep0 maxpacket: 32 [ 323.256947][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.273088][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.282845][ T891] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 323.292173][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.318833][ T891] usb 4-1: config 0 descriptor?? [ 323.475577][ T891] hub 4-1:0.0: USB hub found [ 323.571415][ T2359] pvrusb2: Invalid write control endpoint [ 323.583942][ T6223] usb 2-1: USB disconnect, device number 40 [ 323.612775][ T6225] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 323.698144][ T891] hub 4-1:0.0: 1 port detected [ 323.779074][ T2359] pvrusb2: Invalid write control endpoint [ 323.796378][ T6225] usb 3-1: Using ep0 maxpacket: 32 [ 323.803124][ T2359] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 323.824865][ T6225] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.848584][ T2359] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 323.867988][ T6225] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.885670][ T2359] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 323.901826][ T6225] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.922067][ T2359] pvrusb2: Device being rendered inoperable [ 323.927980][ T6225] usb 3-1: Product: syz [ 323.932117][ T6225] usb 3-1: Manufacturer: syz [ 323.937921][ T2359] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 323.947719][ T6225] usb 3-1: SerialNumber: syz [ 323.959079][ T2359] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 323.968289][ T6225] usb 3-1: config 0 descriptor?? [ 323.994920][ T9293] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 324.009738][ T2359] pvrusb2: Attached sub-driver cx25840 [ 324.015527][ T2359] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 324.040932][ T2359] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 324.096907][ T6225] hub 3-1:0.0: bad descriptor, ignoring hub [ 324.102843][ T6225] hub 3-1:0.0: probe with driver hub failed with error -5 [ 324.125034][ T9305] fuse: fd is not a fuse device [ 324.490755][ T6223] libceph: connect (1)[c::]:6789 error -101 [ 324.507072][ T6223] libceph: mon0 (1)[c::]:6789 connect error [ 324.533650][ T6223] libceph: connect (1)[c::]:6789 error -101 [ 324.542074][ T6223] libceph: mon0 (1)[c::]:6789 connect error [ 324.653401][ T9318] xt_HMARK: proto mask must be zero with L3 mode [ 324.663162][ T891] hub 4-1:0.0: activate --> -90 [ 324.712017][ T6224] usb 3-1: USB disconnect, device number 36 [ 324.808581][ T6224] libceph: connect (1)[c::]:6789 error -101 [ 324.828994][ T6224] libceph: mon0 (1)[c::]:6789 connect error [ 325.137189][ T9279] macsec1: entered promiscuous mode [ 325.158230][ T9279] virt_wifi0: entered promiscuous mode [ 325.317564][ T9314] ceph: No mds server is up or the cluster is laggy [ 325.352508][ T6224] libceph: connect (1)[c::]:6789 error -101 [ 325.363416][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 325.363430][ T30] audit: type=1400 audit(1777200690.601:6232): avc: denied { bpf } for pid=9330 comm="syz.2.887" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.426712][ T6224] libceph: mon0 (1)[c::]:6789 connect error [ 325.483815][ T30] audit: type=1400 audit(1777200690.641:6233): avc: denied { prog_load } for pid=9330 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 325.564562][ T30] audit: type=1400 audit(1777200690.641:6234): avc: denied { bpf } for pid=9330 comm="syz.2.887" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.637040][ T30] audit: type=1400 audit(1777200690.641:6235): avc: denied { perfmon } for pid=9330 comm="syz.2.887" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.680885][ T9335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 325.690456][ T30] audit: type=1400 audit(1777200690.681:6236): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.719966][ T30] audit: type=1400 audit(1777200690.681:6237): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.814289][ T30] audit: type=1400 audit(1777200690.681:6238): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.964782][ T30] audit: type=1400 audit(1777200690.921:6239): avc: denied { create } for pid=9334 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 325.986973][ T30] audit: type=1400 audit(1777200690.921:6240): avc: denied { write } for pid=9334 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.008337][ T30] audit: type=1400 audit(1777200690.961:6241): avc: denied { write } for pid=9334 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.088610][ T2088] libceph: connect (1)[c::]:6789 error -101 [ 326.094751][ T2088] libceph: mon0 (1)[c::]:6789 connect error [ 326.114709][ T9338] ceph: No mds server is up or the cluster is laggy [ 326.161592][ T9346] netlink: 156 bytes leftover after parsing attributes in process `syz.4.890'. [ 326.268185][ T9352] bridge: RTM_NEWNEIGH with invalid ether address [ 326.372097][ T2088] libceph: connect (1)[c::]:6789 error -101 [ 326.384491][ T2088] libceph: mon0 (1)[c::]:6789 connect error [ 326.544716][ T891] usb 4-1: USB disconnect, device number 48 [ 326.686460][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.738084][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.934173][ T2088] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 327.132193][ T2088] usb 4-1: Using ep0 maxpacket: 8 [ 327.345576][ T2088] usb 4-1: device descriptor read/all, error -71 [ 328.435388][ T6224] libceph: connect (1)[c::]:6789 error -101 [ 328.458022][ T6224] libceph: mon0 (1)[c::]:6789 connect error [ 328.563704][ T9391] ceph: No mds server is up or the cluster is laggy [ 328.601918][ T6239] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 328.781796][ T6239] usb 2-1: Invalid ep0 maxpacket: 16 [ 328.941969][ T6239] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 329.111862][ T6239] usb 2-1: Invalid ep0 maxpacket: 16 [ 329.125162][ T6239] usb usb2-port1: attempt power cycle [ 329.481807][ T6239] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 329.533144][ T6239] usb 2-1: Invalid ep0 maxpacket: 16 [ 329.671836][ T6239] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 329.714286][ T6239] usb 2-1: Invalid ep0 maxpacket: 16 [ 329.739488][ T6239] usb usb2-port1: unable to enumerate USB device [ 329.796628][ T9413] netlink: 5268 bytes leftover after parsing attributes in process `syz.2.907'. [ 329.874543][ T9417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.058425][ T9422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.241898][ T6239] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 330.424180][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 330.424228][ T30] audit: type=1400 audit(1777200695.671:6460): avc: denied { create } for pid=9410 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.482785][ T6239] usb 3-1: Using ep0 maxpacket: 16 [ 330.490054][ T6239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.501864][ T6239] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 330.530120][ T6239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.530174][ T30] audit: type=1400 audit(1777200695.731:6461): avc: denied { ioctl } for pid=9419 comm="syz.2.910" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.659972][ T9433] vlan2: entered promiscuous mode [ 330.665091][ T9433] bridge0: entered promiscuous mode [ 331.337892][ T30] audit: type=1400 audit(1777200695.761:6462): avc: denied { create } for pid=9410 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.362760][ T30] audit: type=1400 audit(1777200695.761:6463): avc: denied { getopt } for pid=9410 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.373769][ T6239] usb 3-1: config 0 descriptor?? [ 331.384905][ T30] audit: type=1400 audit(1777200695.761:6464): avc: denied { create } for pid=9410 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.426663][ T30] audit: type=1400 audit(1777200695.861:6465): avc: denied { mounton } for pid=9427 comm="syz.3.913" path="/166" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.490858][ T30] audit: type=1400 audit(1777200695.861:6466): avc: denied { mount } for pid=9427 comm="syz.3.913" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.583514][ T30] audit: type=1400 audit(1777200695.871:6467): avc: denied { create } for pid=9427 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.625618][ T30] audit: type=1400 audit(1777200695.871:6468): avc: denied { write } for pid=9427 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.656690][ T30] audit: type=1400 audit(1777200695.871:6469): avc: denied { read } for pid=9427 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.790846][ T9440] batman_adv: batadv0: Interface deactivated: dummy0 [ 331.805007][ T9440] dummy0: entered allmulticast mode [ 331.842383][ T6217] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 331.854629][ T6239] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 332.211025][ T9436] Invalid source name [ 332.236047][ T9436] lo speed is unknown, defaulting to 1000 [ 333.131950][ T6217] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.156013][ T6217] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 333.187562][ T6217] usb 2-1: can't read configurations, error -71 [ 333.856948][ T6224] usb 3-1: USB disconnect, device number 37 [ 334.461955][ T6224] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 334.643907][ T6224] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.671906][ T6224] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 334.695582][ T6224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.781437][ T9463] overlay: filesystem on ./bus not supported as upperdir [ 334.912965][ T9463] IPv6: sit1: Disabled Multicast RS [ 334.926001][ T6224] usb 3-1: config 0 descriptor?? [ 335.254621][ T6224] usbhid 3-1:0.0: can't add hid device: -71 [ 335.266314][ T6224] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 335.295738][ T6224] usb 3-1: USB disconnect, device number 38 [ 335.369606][ T9466] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 335.436603][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 335.436620][ T30] audit: type=1400 audit(1777200700.681:6597): avc: denied { ioctl } for pid=9467 comm="syz.1.922" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.496856][ T6225] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 335.538424][ T30] audit: type=1400 audit(1777200700.761:6598): avc: denied { read write } for pid=9456 comm="syz.2.919" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.582407][ T30] audit: type=1400 audit(1777200700.761:6599): avc: denied { open } for pid=9456 comm="syz.2.919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.616831][ T30] audit: type=1400 audit(1777200700.761:6600): avc: denied { ioctl } for pid=9456 comm="syz.2.919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.643015][ T30] audit: type=1400 audit(1777200700.761:6601): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 335.663311][ T30] audit: type=1400 audit(1777200700.761:6602): avc: denied { ioctl } for pid=9456 comm="syz.2.919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.700382][ T30] audit: type=1400 audit(1777200700.781:6603): avc: denied { create } for pid=9482 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.721911][ T30] audit: type=1400 audit(1777200700.781:6604): avc: denied { connect } for pid=9482 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.752049][ T30] audit: type=1400 audit(1777200700.781:6605): avc: denied { create } for pid=9482 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.792021][ T30] audit: type=1400 audit(1777200700.781:6606): avc: denied { setopt } for pid=9482 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.309237][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 336.835980][ T6225] usb 2-1: Using ep0 maxpacket: 8 [ 336.845356][ T6225] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 336.848997][ T9498] vlan2: entered allmulticast mode [ 336.854196][ T6225] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.869598][ T9498] macsec0: entered allmulticast mode [ 336.869629][ T6225] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.886703][ T6225] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.897113][ T9498] veth1_macvtap: entered allmulticast mode [ 336.914250][ T6225] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.929467][ T6225] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.939149][ T6225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.389854][ T6225] usb 2-1: usb_control_msg returned -32 [ 337.395469][ T6225] usbtmc 2-1:16.0: can't read capabilities [ 337.665894][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.898996][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.031406][ T9522] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 338.040400][ T9522] netlink: 'syz.2.940': attribute type 2 has an invalid length. [ 338.049262][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 338.557442][ T9526] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 338.785160][ T6217] usb 2-1: USB disconnect, device number 47 [ 339.265972][ T9551] autofs4:pid:9551:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1216.8192), cmd(0xc0189374) [ 339.279836][ T9551] autofs4:pid:9551:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 339.739545][ T9560] bond1: option xmit_hash_policy: invalid value (9) [ 339.882639][ T9560] bond1 (unregistering): Released all slaves [ 340.474071][ T30] kauditd_printk_skb: 251 callbacks suppressed [ 340.474087][ T30] audit: type=1400 audit(1777200705.721:6858): avc: denied { ioctl } for pid=9550 comm="syz.3.950" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.536196][ T30] audit: type=1400 audit(1777200705.781:6859): avc: denied { ioctl } for pid=9550 comm="syz.3.950" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.601930][ T6224] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 340.602498][ T30] audit: type=1400 audit(1777200705.831:6860): avc: denied { create } for pid=9571 comm="syz.4.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 341.052956][ T30] audit: type=1400 audit(1777200705.851:6861): avc: denied { ioctl } for pid=9550 comm="syz.3.950" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.090305][ T6224] usb 4-1: device descriptor read/64, error -71 [ 341.115780][ T30] audit: type=1400 audit(1777200706.261:6862): avc: denied { create } for pid=9571 comm="syz.4.954" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.156299][ T30] audit: type=1400 audit(1777200706.261:6863): avc: denied { write } for pid=9571 comm="syz.4.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 341.411816][ T30] audit: type=1400 audit(1777200706.441:6864): avc: denied { execmem } for pid=9581 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 341.431140][ T30] audit: type=1400 audit(1777200706.471:6865): avc: denied { ioctl } for pid=9550 comm="syz.3.950" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.052467][ T6224] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 342.076563][ T30] audit: type=1400 audit(1777200706.701:6866): avc: denied { create } for pid=9581 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.117231][ T30] audit: type=1400 audit(1777200706.711:6867): avc: denied { setopt } for pid=9581 comm="syz.0.956" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.221952][ T6224] usb 4-1: device descriptor read/64, error -71 [ 343.243436][ T6224] usb usb4-port1: attempt power cycle [ 343.414716][ T9598] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.960'. [ 343.545371][ T9601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.962'. [ 343.610454][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.962'. [ 343.716257][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 343.725996][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.962'. [ 344.747721][ T9606] tipc: Enabling of bearer rejected, failed to enable media [ 344.924365][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 345.125292][ T9619] all: renamed from bridge_slave_1 [ 345.326863][ T9619] bridge0: port 3(syz_tun) entered blocking state [ 345.333479][ T9619] bridge0: port 3(syz_tun) entered listening state [ 345.465509][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.481812][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 345.481841][ T30] audit: type=1400 audit(1777200710.651:6991): avc: denied { create } for pid=9621 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.635374][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.714206][ T30] audit: type=1400 audit(1777200710.651:6992): avc: denied { setopt } for pid=9621 comm="syz.1.968" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.986630][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.072873][ T6415] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 346.139341][ T30] audit: type=1400 audit(1777200711.381:6993): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.190509][ T30] audit: type=1400 audit(1777200711.381:6994): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.220427][ T30] audit: type=1400 audit(1777200711.381:6995): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 346.274701][ T30] audit: type=1400 audit(1777200711.511:6996): avc: denied { read } for pid=9633 comm="syz.1.971" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 346.306353][ T30] audit: type=1400 audit(1777200711.541:6997): avc: denied { open } for pid=9633 comm="syz.1.971" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 346.339209][ T30] audit: type=1400 audit(1777200711.541:6998): avc: denied { ioctl } for pid=9633 comm="syz.1.971" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 346.367042][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.376814][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.384266][ T30] audit: type=1400 audit(1777200711.561:6999): avc: denied { execmem } for pid=9633 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 346.409170][ T9619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.419511][ T9619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.433594][ T9619] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 346.451636][ T6224] lo speed is unknown, defaulting to 1000 [ 346.458586][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.458699][ T7448] bridge0: port 1(bridge_slave_0) entered listening state [ 346.481163][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.488269][ T7448] bridge0: port 2(bridge_slave_1) entered listening state [ 346.492772][ T6217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.512843][ T6224] syz1: Port: 1 Link ACTIVE [ 346.572015][ T30] audit: type=1400 audit(1777200711.821:7000): avc: denied { create } for pid=9635 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 346.576871][ T6239] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.713523][ T6415] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.781364][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.813599][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.001985][ T6217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.596582][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.979'. [ 348.606881][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 348.625664][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 348.634578][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 348.691891][ T891] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 348.877275][ T891] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 348.906475][ T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.941835][ T891] usb 3-1: Product: syz [ 348.952022][ T891] usb 3-1: Manufacturer: syz [ 348.962682][ T891] usb 3-1: SerialNumber: syz [ 348.983877][ T891] usb 3-1: config 0 descriptor?? [ 349.117476][ T9668] fuse: Bad value for 'fd' [ 350.340087][ T891] usb 3-1: Firmware version (0.0) predates our first public release. [ 350.360238][ T891] usb 3-1: Please update to version 0.2 or newer [ 350.381992][ T6224] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 350.555249][ T6224] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.570657][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 350.570684][ T30] audit: type=1400 audit(1777200715.811:7128): avc: denied { setopt } for pid=9653 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.572396][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 350.577565][ T6224] usb 4-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 350.620156][ T6224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.670499][ T6224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 350.692714][ T6224] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50908, setting to 1024 [ 350.732436][ T30] audit: type=1400 audit(1777200715.981:7129): avc: denied { ioctl } for pid=9680 comm="syz.3.983" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.791437][ T6224] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.811073][ T6224] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.843245][ T30] audit: type=1400 audit(1777200716.011:7130): avc: denied { ioctl } for pid=9680 comm="syz.3.983" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.919403][ T6224] usb 4-1: Product: syz [ 350.935716][ T6224] usb 4-1: Manufacturer: syz [ 350.958160][ T891] usb 3-1: USB disconnect, device number 40 [ 350.966176][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 350.984072][ T9683] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 351.005792][ T30] audit: type=1400 audit(1777200716.031:7131): avc: denied { ioctl } for pid=9680 comm="syz.3.983" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.036047][ T30] audit: type=1400 audit(1777200716.231:7132): avc: denied { ioctl } for pid=9680 comm="syz.3.983" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.091736][ T6224] cdc_wdm 4-1:1.0: skipping garbage [ 351.096959][ T6224] cdc_wdm 4-1:1.0: skipping garbage [ 351.106119][ T6224] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 351.112038][ T6224] cdc_wdm 4-1:1.0: Unknown control protocol [ 351.201826][ T30] audit: type=1400 audit(1777200716.431:7133): avc: denied { create } for pid=9698 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.270807][ T30] audit: type=1400 audit(1777200716.431:7134): avc: denied { write } for pid=9698 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.381159][ T30] audit: type=1400 audit(1777200716.441:7135): avc: denied { read } for pid=9698 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.437794][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.444522][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.452880][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.459479][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.467275][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.473879][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.481459][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.488049][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.495471][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.502102][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.509672][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.516262][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.523748][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.530338][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.537967][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.539406][ T30] audit: type=1400 audit(1777200716.441:7136): avc: denied { prog_load } for pid=9698 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.544553][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.545344][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.576209][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.611824][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.661854][ T30] audit: type=1400 audit(1777200716.441:7137): avc: denied { bpf } for pid=9698 comm="syz.4.989" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.680530][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 351.688826][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 351.759127][ T6217] usb 4-1: USB disconnect, device number 54 [ 351.776523][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 351.781873][ T9706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 351.861384][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 351.963583][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 351.972502][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 352.863432][ T9710] ip6gre1: entered promiscuous mode [ 352.903302][ T9710] ip6gre1: entered allmulticast mode [ 352.913020][ T6217] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 353.075420][ T6217] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.093582][ T6217] usb 4-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 353.124332][ T6217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.174101][ T6217] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 353.210851][ T6217] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50908, setting to 1024 [ 353.278814][ T6217] usb 4-1: string descriptor 0 read error: -71 [ 353.312702][ T6217] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.355353][ T6217] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.406210][ T6217] usb 4-1: can't set config #1, error -71 [ 353.440713][ T6217] usb 4-1: USB disconnect, device number 55 [ 355.830192][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 355.830210][ T30] audit: type=1400 audit(1777200721.071:7216): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.965677][ T30] audit: type=1400 audit(1777200721.071:7217): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.009548][ T30] audit: type=1400 audit(1777200721.071:7218): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.080663][ T30] audit: type=1400 audit(1777200721.211:7219): avc: denied { read write } for pid=9724 comm="syz.3.996" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.121337][ T30] audit: type=1400 audit(1777200721.211:7220): avc: denied { open } for pid=9724 comm="syz.3.996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.192059][ T30] audit: type=1400 audit(1777200721.211:7221): avc: denied { ioctl } for pid=9724 comm="syz.3.996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.225184][ T6239] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 356.351823][ T6217] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 356.392551][ T30] audit: type=1400 audit(1777200721.301:7222): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.401808][ T6239] usb 4-1: Using ep0 maxpacket: 8 [ 356.419101][ T30] audit: type=1400 audit(1777200721.301:7223): avc: denied { read write open } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.449201][ T30] audit: type=1400 audit(1777200721.301:7224): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.513955][ T6239] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 356.525685][ T30] audit: type=1400 audit(1777200721.321:7225): avc: denied { ioctl } for pid=9724 comm="syz.3.996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.531850][ T6239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.606327][ T6239] usb 4-1: config 0 descriptor?? [ 356.630046][ T6239] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 356.646351][ T6217] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.668813][ T6217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.681192][ T6239] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 356.762206][ T6239] usb-storage 4-1:0.0: USB Mass Storage device detected [ 356.769438][ T6217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.783373][ T6217] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.812374][ T6239] usb-storage 4-1:0.0: device ignored [ 356.831840][ T6217] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.841104][ T6217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.854960][ T6217] usb 3-1: config 0 descriptor?? [ 356.872852][ T9727] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.955064][ T6239] usb 4-1: USB disconnect, device number 56 [ 357.233495][ T9685] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 357.329979][ T6217] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 357.466034][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 357.476035][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1001'. [ 357.487111][ T6217] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 357.654963][ T9750] x_tables: duplicate underflow at hook 1 [ 357.669871][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.709342][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.105890][ T9749] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 358.805751][ T6224] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 359.043504][ T6224] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.062228][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.063715][ T6217] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 359.071039][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.095352][ T6224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 359.126351][ T6224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.139234][ T6224] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.210670][ T6224] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.239454][ T6224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.255501][ T6224] usb 4-1: config 0 descriptor?? [ 359.269194][ T9759] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 359.303875][ T9772] macsec1: entered promiscuous mode [ 359.309635][ T9772] bridge0: entered promiscuous mode [ 359.489490][ T9776] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 359.498850][ T9776] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 359.532425][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 359.560193][ T6224] usbhid 4-1:0.0: can't add hid device: -71 [ 359.567275][ T6224] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.587792][ T6224] usb 4-1: USB disconnect, device number 57 [ 359.988129][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 360.009643][ T2088] usb 3-1: USB disconnect, device number 41 [ 360.815609][ C1] bridge0: port 3(syz_tun) entered learning state [ 360.840393][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 360.840420][ T30] audit: type=1400 audit(1777200726.081:7415): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.872105][ T30] audit: type=1400 audit(1777200726.081:7416): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.896205][ T30] audit: type=1400 audit(1777200726.081:7417): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.930855][ T30] audit: type=1400 audit(1777200726.171:7418): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.059416][ T30] audit: type=1400 audit(1777200726.201:7419): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.124397][ T30] audit: type=1400 audit(1777200726.211:7420): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.156766][ T30] audit: type=1400 audit(1777200726.291:7421): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.211489][ T30] audit: type=1400 audit(1777200726.291:7422): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.247344][ T30] audit: type=1400 audit(1777200726.291:7423): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.321863][ T30] audit: type=1400 audit(1777200726.301:7424): avc: denied { read } for pid=9812 comm="syz.3.1019" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 361.525870][ T891] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 361.692718][ T5710] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 361.743719][ T891] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 361.818994][ T9835] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 361.839308][ T9835] xt_HMARK: spi-set and port-set can't be combined [ 362.091822][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 362.102420][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 362.528636][ T891] usb 3-1: config 1 has no interface number 0 [ 362.537757][ T891] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 520 [ 362.571815][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 362.585695][ T891] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 362.587181][ T5710] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 362.656946][ T5710] usb 2-1: config 0 has no interface number 0 [ 362.674002][ T5710] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 4168, setting to 64 [ 362.690611][ T891] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 362.701867][ T5710] usb 2-1: config 0 interface 89 has no altsetting 0 [ 362.704821][ T5710] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 362.728914][ T891] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 362.744429][ T891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.755530][ T891] usb 3-1: Product: syz [ 362.762083][ T891] usb 3-1: Manufacturer: syz [ 362.769954][ T891] usb 3-1: SerialNumber: syz [ 362.887524][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.895754][ T5710] usb 2-1: Product: syz [ 362.899974][ T5710] usb 2-1: Manufacturer: syz [ 362.904672][ T5710] usb 2-1: SerialNumber: syz [ 362.919931][ T5710] usb 2-1: config 0 descriptor?? [ 362.924109][ T9819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.020983][ T9839] lo speed is unknown, defaulting to 1000 [ 364.443375][ T5710] usb 2-1: can't set config #0, error -71 [ 364.512078][ T891] usb 3-1: can't set config #1, error -71 [ 364.534224][ T5710] usb 2-1: USB disconnect, device number 48 [ 364.693029][ T891] usb 3-1: USB disconnect, device number 42 [ 364.903722][ T9850] bond5 (unregistering): Released all slaves [ 365.141849][ T5710] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 365.332043][ T5710] usb 2-1: device descriptor read/64, error -71 [ 365.339001][ T891] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 365.504300][ T891] usb 3-1: device descriptor read/64, error -71 [ 365.571810][ T5710] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 365.761821][ T5710] usb 2-1: device descriptor read/64, error -71 [ 365.791974][ T891] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 365.841966][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 365.841981][ T30] audit: type=1400 audit(1777200731.081:7549): avc: denied { ioctl } for pid=9846 comm="syz.2.1027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.902827][ T5710] usb usb2-port1: attempt power cycle [ 365.980362][ T30] audit: type=1400 audit(1777200731.221:7550): avc: denied { create } for pid=9865 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 366.002085][ T891] usb 3-1: device descriptor read/64, error -71 [ 366.036976][ T30] audit: type=1400 audit(1777200731.261:7551): avc: denied { ioctl } for pid=9847 comm="syz.1.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.070395][ T30] audit: type=1400 audit(1777200731.281:7552): avc: denied { sys_admin } for pid=9865 comm="syz.4.1031" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 366.152194][ T891] usb usb3-port1: attempt power cycle [ 366.166425][ T30] audit: type=1400 audit(1777200731.401:7553): avc: denied { ioctl } for pid=9846 comm="syz.2.1027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.260848][ T30] audit: type=1400 audit(1777200731.471:7554): avc: denied { ioctl } for pid=9847 comm="syz.1.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.286098][ T5710] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 366.313626][ T30] audit: type=1400 audit(1777200731.491:7555): avc: denied { read open } for pid=9865 comm="syz.4.1031" path="mnt:[4026533972]" dev="nsfs" ino=4026533972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 366.358687][ T5710] usb 2-1: device descriptor read/8, error -71 [ 366.382027][ T30] audit: type=1400 audit(1777200731.591:7556): avc: denied { ioctl } for pid=9846 comm="syz.2.1027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.431927][ T30] audit: type=1400 audit(1777200731.601:7557): avc: denied { ioctl } for pid=9847 comm="syz.1.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.491029][ T30] audit: type=1400 audit(1777200731.731:7558): avc: denied { ioctl } for pid=9847 comm="syz.1.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.611847][ T891] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 366.611847][ T5710] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 366.661151][ T5710] usb 2-1: device descriptor read/8, error -71 [ 366.713436][ T891] usb 3-1: device descriptor read/8, error -71 [ 366.812828][ T5710] usb usb2-port1: unable to enumerate USB device [ 366.992057][ T891] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 367.035548][ T891] usb 3-1: device descriptor read/8, error -71 [ 367.176107][ T891] usb usb3-port1: unable to enumerate USB device [ 367.853132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.282654][ T9881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.888376][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 370.888406][ T30] audit: type=1400 audit(1777200736.131:7731): avc: denied { create } for pid=9946 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.988649][ T9953] overlayfs: failed to clone upperpath [ 371.005174][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 371.015210][ T30] audit: type=1400 audit(1777200736.201:7732): avc: denied { read write } for pid=9950 comm="syz.1.1053" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.501788][ T5710] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 371.520480][ T30] audit: type=1400 audit(1777200736.201:7733): avc: denied { open } for pid=9950 comm="syz.1.1053" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.589327][ T30] audit: type=1400 audit(1777200736.201:7734): avc: denied { ioctl } for pid=9950 comm="syz.1.1053" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.643817][ T30] audit: type=1400 audit(1777200736.201:7735): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 371.687295][ T30] audit: type=1400 audit(1777200736.211:7736): avc: denied { ioctl } for pid=9950 comm="syz.1.1053" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.688253][ T5710] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 371.712297][ T30] audit: type=1400 audit(1777200736.231:7737): avc: denied { mounton } for pid=9952 comm="syz.4.1054" path="/258/file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 371.822777][ T5710] usb 2-1: config 0 has no interface number 0 [ 371.833698][ T5710] usb 2-1: config 0 interface 41 has no altsetting 0 [ 371.843638][ T5710] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 371.863946][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.883147][ T9968] Cannot find del_set index 2 as target [ 371.898500][ T5710] usb 2-1: Product: syz [ 371.906137][ T5612] Bluetooth: hci4: unexpected event for opcode 0x656c [ 371.908179][ T30] audit: type=1400 audit(1777200736.241:7738): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.951830][ T5710] usb 2-1: Manufacturer: syz [ 371.966964][ T5710] usb 2-1: SerialNumber: syz [ 371.977170][ T5710] usb 2-1: config 0 descriptor?? [ 372.024751][ T9970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.138507][ T30] audit: type=1400 audit(1777200736.241:7739): avc: denied { read write open } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.189979][ T9967] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 372.386638][ T30] audit: type=1400 audit(1777200736.241:7740): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 373.289923][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.306013][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.313916][ T5710] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 374.616691][ T6223] usb 2-1: USB disconnect, device number 53 [ 374.711841][ T5710] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 374.891876][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.991839][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 375.011119][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.029427][ T5710] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.040814][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.057585][ T5710] usb 4-1: config 0 descriptor?? [ 375.100896][ T9999] pim6reg1: entered promiscuous mode [ 375.114992][ T9999] pim6reg1: entered allmulticast mode [ 375.719423][ T5710] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 375.924480][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 375.924502][ T30] audit: type=1400 audit(1777200741.171:7871): avc: denied { create } for pid=10010 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.025984][ T30] audit: type=1400 audit(1777200741.211:7872): avc: denied { create } for pid=10010 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.051324][ T30] audit: type=1400 audit(1777200741.211:7873): avc: denied { ioctl } for pid=9985 comm="syz.3.1063" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.110251][ T30] audit: type=1400 audit(1777200741.261:7874): avc: denied { read write } for pid=5614 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.160262][ T30] audit: type=1400 audit(1777200741.261:7875): avc: denied { open } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.184621][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 376.184672][ C1] bridge0: topology change detected, propagating [ 376.710301][T10015] xt_CT: No such helper "pptp" [ 376.723163][ T30] audit: type=1400 audit(1777200741.261:7876): avc: denied { ioctl } for pid=5614 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 376.842983][ T30] audit: type=1400 audit(1777200741.261:7877): avc: denied { write } for pid=10010 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.886768][ T30] audit: type=1400 audit(1777200741.301:7878): avc: denied { bpf } for pid=10013 comm="syz.2.1070" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 376.959477][ T30] audit: type=1400 audit(1777200741.301:7879): avc: denied { create } for pid=10013 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 376.994136][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 377.015803][T10030] netlink: 'syz.4.1072': attribute type 12 has an invalid length. [ 377.027223][ T30] audit: type=1400 audit(1777200741.401:7880): avc: denied { read } for pid=10013 comm="syz.2.1070" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 377.051593][T10030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1072'. [ 377.357067][ T6217] usb 4-1: USB disconnect, device number 58 [ 377.365532][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 377.457819][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 377.471858][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.479079][ C1] bridge0: topology change detected, propagating [ 377.485517][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.492716][ C0] bridge0: topology change detected, propagating [ 377.531995][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 377.532629][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 404.372051][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.172132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 482.571669][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 482.578325][ C1] rcu: 1-...!: (10501 ticks this GP) idle=ecd4/1/0x4000000000000000 softirq=46887/46887 fqs=0 [ 482.589690][ C1] rcu: (t=10504 jiffies g=45717 q=665 ncpus=2) [ 482.595923][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10503 jiffies! g45717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 482.608231][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=18975 [ 482.616103][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g45717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 482.627460][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 482.637411][ C1] rcu: RCU grace-period kthread stack dump: [ 482.643281][ C1] task:rcu_preempt state:I stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 482.655192][ C1] Call Trace: [ 482.658461][ C1] [ 482.661383][ C1] __schedule+0x10e9/0x6820 [ 482.665896][ C1] ? __pfx___schedule+0x10/0x10 [ 482.670735][ C1] ? find_held_lock+0x2b/0x80 [ 482.675400][ C1] ? schedule+0x2bf/0x390 [ 482.679723][ C1] schedule+0xdd/0x390 [ 482.683782][ C1] schedule_timeout+0x127/0x280 [ 482.688630][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 482.694007][ C1] ? __pfx_process_timeout+0x10/0x10 [ 482.699294][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 482.705092][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 482.710548][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 482.715308][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 482.720589][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 482.726042][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 482.730973][ C1] ? rcu_is_watching+0x12/0xc0 [ 482.735737][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 482.741538][ C1] rcu_gp_kthread+0x179/0x230 [ 482.746206][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.751394][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 482.757190][ C1] ? __kthread_parkme+0x18c/0x230 [ 482.762205][ C1] ? kthread+0x13a/0x450 [ 482.766436][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.771624][ C1] kthread+0x370/0x450 [ 482.775686][ C1] ? __pfx_kthread+0x10/0x10 [ 482.780272][ C1] ret_from_fork+0x72b/0xd50 [ 482.784860][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 482.789965][ C1] ? __switch_to+0x800/0x1100 [ 482.794643][ C1] ? __pfx_kthread+0x10/0x10 [ 482.799227][ C1] ret_from_fork_asm+0x1a/0x30 [ 482.804006][ C1] [ 482.807012][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 482.813320][ C1] Sending NMI from CPU 1 to CPUs 0: [ 482.818515][ C0] NMI backtrace for cpu 0 [ 482.818527][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 482.818543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.818551][ C0] RIP: 0010:__lock_acquire+0x151/0x2630 [ 482.818569][ C0] Code: e2 ff 1f 48 01 c3 0f b7 43 20 4c 89 53 10 4c 89 63 18 66 25 00 e0 09 d0 31 d2 66 89 43 20 48 8b 84 24 b0 00 00 00 48 89 43 08 <65> 44 8b 1d 0f 67 26 12 8b b5 74 0b 00 00 45 85 db 0f 95 c2 31 c0 [ 482.818582][ C0] RSP: 0018:ffffc90000007c90 EFLAGS: 00000046 [ 482.818593][ C0] RAX: ffffffff899b7347 RBX: ffffffff8e496150 RCX: 0000000000000000 [ 482.818602][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e54e0 [ 482.818610][ C0] RBP: ffffffff8e4955c0 R08: 0000000000000000 R09: 0000000000000001 [ 482.818618][ C0] R10: ffffffff8e7e54e0 R11: 0000000000000001 R12: 0000000000000000 [ 482.818626][ C0] R13: 0000000000000007 R14: 0000000000000002 R15: 0000000000000000 [ 482.818635][ C0] FS: 0000000000000000(0000) GS:ffff888124379000(0000) knlGS:0000000000000000 [ 482.818649][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.818658][ C0] CR2: 0000000000000000 CR3: 000000007b633000 CR4: 00000000003526f0 [ 482.818666][ C0] Call Trace: [ 482.818671][ C0] [ 482.818676][ C0] ? do_raw_spin_lock+0x128/0x260 [ 482.818695][ C0] ? do_raw_spin_lock+0x128/0x260 [ 482.818715][ C0] lock_acquire+0x1b1/0x370 [ 482.818730][ C0] ? advance_sched+0x707/0xd20 [ 482.818748][ C0] ? advance_sched+0x6a2/0xd20 [ 482.818766][ C0] advance_sched+0x718/0xd20 [ 482.818782][ C0] ? advance_sched+0x707/0xd20 [ 482.818800][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 482.818818][ C0] ? __pfx_advance_sched+0x10/0x10 [ 482.818835][ C0] __hrtimer_run_queues+0x470/0xa00 [ 482.818858][ C0] hrtimer_interrupt+0x3e5/0x940 [ 482.818874][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 482.818893][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 482.818907][ C0] [ 482.818911][ C0] [ 482.818916][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.818931][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 482.818944][ C0] Code: 86 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 482.818956][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 482.818966][ C0] RAX: 0000000001b28aa1 RBX: ffffffff8e4955c0 RCX: ffffffff8b89b045 [ 482.818974][ C0] RDX: 0000000000000000 RSI: ffffffff8df1e362 RDI: ffffffff8c1c3200 [ 482.818983][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 482.818991][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 482.818999][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d78750 [ 482.819010][ C0] ? ct_kernel_exit+0x125/0x180 [ 482.819026][ C0] default_idle+0x9/0x10 [ 482.819041][ C0] default_idle_call+0x6c/0xb0 [ 482.819057][ C0] do_idle+0x464/0x590 [ 482.819070][ C0] ? __pfx_do_idle+0x10/0x10 [ 482.819084][ C0] cpu_startup_entry+0x4f/0x60 [ 482.819097][ C0] rest_init+0x251/0x260 [ 482.819113][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 482.819128][ C0] start_kernel+0x484/0x490 [ 482.819148][ C0] x86_64_start_reservations+0x24/0x30 [ 482.819162][ C0] x86_64_start_kernel+0x12b/0x130 [ 482.819175][ C0] common_startup_64+0x13e/0x148 [ 482.819197][ C0] [ 483.150565][ C1] CPU: 1 UID: 0 PID: 10007 Comm: syz.1.1067 Not tainted syzkaller #0 PREEMPT(full) [ 483.150584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.150593][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 483.150616][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 09 80 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 483.150635][ C1] RSP: 0018:ffffc9000da4f660 EFLAGS: 00000293 [ 483.150648][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc0f3d [ 483.150657][ C1] RDX: ffff888036c18000 RSI: ffffffff81fc0f17 RDI: ffff888036c18000 [ 483.150668][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 483.150678][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 483.150687][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 483.150698][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 483.150714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.150724][ C1] CR2: 0000001b3341aff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 483.150735][ C1] Call Trace: [ 483.150740][ C1] [ 483.150749][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 483.150774][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 483.150791][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 483.150819][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.150844][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 483.150865][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 483.150886][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 483.150910][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 483.150929][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 483.150955][ C1] tlb_finish_mmu+0x3fe/0x810 [ 483.150980][ C1] exit_mmap+0x454/0xa10 [ 483.151002][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 483.151019][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.151047][ C1] ? uprobe_clear_state+0x5f/0x260 [ 483.151071][ C1] ? uprobe_clear_state+0x5f/0x260 [ 483.151102][ C1] ? __lock_acquire+0x4a5/0x2630 [ 483.151133][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 483.151160][ C1] __mmput+0x12a/0x410 [ 483.151185][ C1] mmput+0x67/0x80 [ 483.151207][ C1] do_exit+0x833/0x2a60 [ 483.151223][ C1] ? __pfx___might_resched+0x10/0x10 [ 483.151251][ C1] ? __pfx_do_exit+0x10/0x10 [ 483.151268][ C1] ? do_raw_spin_lock+0x128/0x260 [ 483.151290][ C1] ? find_held_lock+0x2b/0x80 [ 483.151306][ C1] ? get_signal+0x7e0/0x21e0 [ 483.151332][ C1] do_group_exit+0xd5/0x2a0 [ 483.151352][ C1] get_signal+0x1ec7/0x21e0 [ 483.151385][ C1] ? __pfx_get_signal+0x10/0x10 [ 483.151408][ C1] ? task_work_add+0x201/0x3b0 [ 483.151434][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 483.151461][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.151493][ C1] ? selinux_file_ioctl+0x13b/0x290 [ 483.151516][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.151543][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 483.151563][ C1] ? do_syscall_64+0x52d/0xf80 [ 483.151584][ C1] do_syscall_64+0x706/0xf80 [ 483.151600][ C1] ? clear_bhb_loop+0x40/0x90 [ 483.151621][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.151643][ C1] RIP: 0033:0x7f9cb439cdd9 [ 483.151656][ C1] Code: Unable to access opcode bytes at 0x7f9cb439cdaf. [ 483.151664][ C1] RSP: 002b:00007f9cb523c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.151678][ C1] RAX: 0000000000000000 RBX: 00007f9cb4616180 RCX: 00007f9cb439cdd9 [ 483.151687][ C1] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005 [ 483.151696][ C1] RBP: 00007f9cb4432d69 R08: 0000000000000000 R09: 0000000000000000 [ 483.151706][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.151715][ C1] R13: 00007f9cb4616218 R14: 00007f9cb4616180 R15: 00007ffecd769bf8 [ 483.151738][ C1]