last executing test programs: 14.125111557s ago: executing program 0 (id=2396): syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0x188) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0xee00, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = msgget(0x0, 0x40) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000000c0)=""/173) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, 0xffffffffffffffff) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.385106202s ago: executing program 0 (id=2400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0800a000020a000008009f000d00000008"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3819519bc9896427750794916f45000000", @ANYRES64=r5, @ANYBLOB="00012cbd7001fcdbdf25140000000c00990008000000200000000c004300ffffffff010400000c008100050001008e000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x100c3) socket(0xa, 0x3, 0xff) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) 11.375152096s ago: executing program 1 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.833795467s ago: executing program 1 (id=2404): statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000163000/0x1000)=nil, 0x1000, 0x13) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xe, &(0x7f0000000000)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x40103e05, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x8100}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) 9.478375394s ago: executing program 2 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104dfd2bd582f5a23cb"], 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$UHID_INPUT(r1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x734) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 9.432383353s ago: executing program 1 (id=2409): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0xfffffffffffffffe) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, 0x0, 0x52cc) 9.336567548s ago: executing program 4 (id=2410): r0 = socket(0x2, 0x80805, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x36}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 8.74084213s ago: executing program 3 (id=2411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090001"], 0xb8}}, 0x20050800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x894) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {r5, r6+10000000}}, &(0x7f0000000340)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 8.590048418s ago: executing program 2 (id=2412): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7.652927728s ago: executing program 3 (id=2413): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000040), 0x5d) 7.503917585s ago: executing program 2 (id=2414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x8000, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7.341107402s ago: executing program 0 (id=2415): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x8, 0x2, 0x0, "2115beba7af972a16fd06e6b5694848119e1a8bc94b6871c7f46690000000011"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x8000000000000004, 0x8000000000000001, 0x80000001, 0x100000001, 0x200, 0x1, 0x6, 0xfffffffffffffffe, 0xfff, 0x9, 0x9], 0x0, 0x80402}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xa, 0x4, 0x2, '\x00', 0x200000008}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 6.900887113s ago: executing program 4 (id=2416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000400)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) (async, rerun: 64) r1 = epoll_create1(0x0) (rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x8eea, 0x80, 0xfffffffe, 0x10027b}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) (async) io_uring_enter(r2, 0x47ba, 0xfffffffc, 0x0, 0x0, 0x0) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000004140)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000006c0)="f0d0745019cb5cd3367b6bc4b7bed3c731f0a0c481bd1fb94977a46019baf3574dc2f4fc9a7b98bbadf439fb741b4280bf58be91384011fdcfc3e2e1e3ef2ab99a34f5c8582221b6367be86d1de6fb7ba882edff12a950623ad7db06d3520df8c826c7", 0x63}, {&(0x7f0000000740)="751ec97778c60fcccb2fde3541dbcf531a74fb3e088942db08d743d939580b8cfe865bc97caba08f796637c26abcdf9588f177d44a5f4df4d9bb6ca3de7618d20af0c3d2f55af36db61e5c57813afb917f2f1b0a9b8fde9e0f42bb74419cec88bfec4111a7db7a5c36f6aed23ebc0a487bc1db64", 0x74}, {&(0x7f00000007c0)="c684961a310ed70fc049ea5c54f0d4ef51f4bcf8e138d05815cea4eeb952f6428284e4e81ce2789a73d1f361ab9c8acf08063bb4970d8827e11619e77c5c418a101a90870febf470a69860909acfa7510b752ec5e8ea839f7a30e3304c52c6d355c596aabfd03e8c5c25e0d543bf6cc3211bbadd04c92096e05b697468c9ceac1dd12f05eb244a565461ab6037fda6ade36d533bfb8c27452da5268912facf6d5ee01c72a7032bcf0c0422d0f107dc457f9c93ab526d33bc0d9ab8fe2699e5502c0aa6676f26c777d4284c0eaee78e75", 0xd0}, {&(0x7f00000008c0)="b6b14633de590e157449fc0bede6af24e4318a73300b8d73f8ca8032daedbc63153a6e4ac54d984d309f431962789d817d92e2940add86e4a50cb56e81cabeee1cda15db1ba72b03e1635d52be41068f4d71dc3e11c7f4fb66784779fb75b29b1fe5f6d6e7e1f85c5ceaa92f40910179e727f4c72168bcaa81f6478ee44a0f67cb8a7db7faeecfe0e2ab59a286a88e81301d245987077a2f73477064acee1f510d376d5059c446b183f0a8ad814b840c8b5255e2ecf2b392e5e02c818d7fe4021fa5afa607760dab2204981760a13bba1530f727a2dde8521bc30d", 0xdb}, {&(0x7f00000009c0)="de9f7430393c6be009d4e5b2d3eacb703836c8a01ac556dec4d034e693b6cb4ba8b228546f3871c7366223e9b5bbe1836da6027d0393a75378d88ced0f0cd7b8158e5a250c5ac64a8089b10154c30ee3c5003d4f9279d7c4d3f416ac4ae3a8dbded544e84ec22a93cffdb9ef6b03625a862a92fa512dae2597eed6d7bd50bf756062e7ceabd7d090f70f06010826180bb76e0f6181e35ea7ce396e04c5238b7687af4b25e4ff109d2a980f2fcf1755", 0xaf}, {&(0x7f0000000000)="98da618d7743d92b35d38049f37b65866269ed7c6f56ab69e8c63eb3e631d2086defaf08c32ab7a85c", 0x29}, {&(0x7f0000000a80)="b6888639a399da7cc4030c9a0f4222b691a7106c120b991f4ca0d79e45f1acea22d6d000a200b397a1d3c1199f6e8ae1c4b045895f456fc59891c1df17a51f970ce72b153b91c1b1a5b2483939fdb53fd49c7bad9e4d9ec68dd372969a218f629f4ed6a9a28fa549c14c7a01ea87bc7d6bb7d587355e50db", 0x78}, {&(0x7f0000000b00)="507ab9dd9943aa777052aa824f87717cd21ab0919a10b38145446ab0c69652dfddaca17ee17841363cdcd82d2f87bc3b0c37d2e2ab366f9a44937242dce35d04f0da8634e213d56ecda97eab4730f6f5fed9b11d279c28f804412ebaefdd9682cfa5c49d50e21357fd03adb57d", 0x6d}], 0x8, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x78, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d40)="572e09effbea0dd8e691f75c0e2af1a9226e8cdf16856c69e9e49f0a619768b402536a1490f2eecf263c434c0d2cccdaf135faaa966f27a3758df8b2094718dd2922aa53f7451070415f0fab58ba4ffd09025ead20e24c765a7699094ee6dd53a8532c39ca6a6349868efb1ff8b87a621cb7354840b2a32956411fb0f86107008b34658505ebb7fa8f3f31dcca0cc879535bd6593b81a0cfbb07527bae3b3dea23cf4749e04e35514ff62531ff129405394422e551ce9f2774d776737cc92160809951b070483be2904bc335ddd0", 0xce}], 0x1, &(0x7f0000002f80)=[@rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x80}}, {{&(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003080)="5691a872a7a36ae459e22ce00b2c9e8cb87e4dd598f713d7d475c44175be85649527258c3741dc8bf66fc752757209351e3487341efd972cc25e730e2f55eb497a0551b9ddbbebe2bd504100acc5a11d249983c124aa07d49a5a5f3d1f94c5b07c292b83320cd389e40e57ab460bd34eaa3999b9c879cca06cd36e65ed3e4759d33353f811185c4f3e8fcfa0acc2aaf80eda7e3fd3fcb7da1081e72488ba1815280cb7a7adb53724dc050963696f99b1b3a5763be1f570710f5a5e59c94468751ab7dd271ee5e2e676e74f809b3414ca09585089a8ceb05db98f682785219851e47137c271ab645a7c91ad", 0xeb}, {&(0x7f0000003180)="fb66c529b0c88759ecb91553f54e7b1162ab3a55c5e1eee91b05041ffb830abd804b", 0x22}, {&(0x7f00000031c0)="a238e33c5987320df4273723bd6206bed51564022d12caf80a02f7caec9a55f6086b3e4d172a556d13a03f6d1b44ecf521b015ffe2cf25a3fbc9abfda98cdec609be9685056fa714ee1cd9725902aa8838310f7782bf0f7a2271980b74cfc7a8957f6e28522732016adc0e48c983687b8abb8fd14a7fa2ce922bcda77922a673649e9224fae75bfdeb493f00c53e9cc4e1a417ed1b7cfcfe7500b2401bbf32466dafb0c75fb733047f97b574ccaaa42e05284b5efed9cbe2310bce03b4", 0xbd}], 0x3, &(0x7f00000032c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r6]}}], 0x78, 0x8000000}}, {{&(0x7f0000003340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)="54dfd65bf91ec2ef8476dde54367fe0b9c9a8853bc94a9f2b0fee81617227f735f501f8a75e14a285baab1eb5d245ec25de98babeb8775db391e09c563bc45ebb5787a8339ac6e0fde4a8b6a041f06435ef67ef4eccbd14830d06f5228d6e886623c88b89385144c475e82345150780982252d92dcaa3386db25fb35ed366f357c42a8ddc7232c1570c081fb154a9c7a9f7897c3bd60fe8c29e6f80d395bdc2971f5d1a5183be4bf5027cd4ea16ff28a975628d0c76af105890a05b89e025d7182b249ff9cd78c3923a923012fd096e73bdaa126430ced4e15cc6facb3c4c4c1a321c5a361141931e67b1ac5ac8531f8d78851e982", 0xf5}, {&(0x7f00000034c0)="8faf563e78c831962595853272f816f08e53e8aae398f692fec01e24732474300225b64b008753f42d4daf87368cba4ded79a9e6bfa400467d1ee6a590e4895f17778324455fcee7fa8ef8022eaa97f0feabb7153a3283ed8035e7a3d661de6f7abb59d334888781cd1986503f6b6da0db5b9d17cc4a7d5cea01ceacb37be01238919e82f990ec3deb273c1aad59a632fcdbd83b51ac69b5a32cf2703c7f5731940776f5c7bfeecb7fc7c4f6c2962be1be35b4fbc26cc60799cc3a172995e2967ed9800eeb2db244bb7257c18266218e47a6e1131b1cd8f26428558f26a7e5e44b850db9f832342d898f26f2ca71db0901ba90b0d1", 0xf5}], 0x2, &(0x7f0000003740)=[@rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120, 0x1}}, {{&(0x7f0000003880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003900)="e487c046309825a2bca11ca415b314ac20549c5585e0f449b34ad58b115a4de9bf3adc509e64f76d7190e8d553a97bd1af5083ccdf50f3b82e8a3ea6794f2dfa7261842faada4e8517f639c138932a60f46e5fa580cb6e8a7cd44e46c083bcaea0ae5c4c218b6ac30cbbc9dbbfdd4c2ec79c0ddd51d55be0db638819dd91c0c0ca76f0cb951bb15a8811220b41c44d7c2f9175eb44f111c8bc675a764bdfe4e8044ede6ff9532e1e468d4537fc21e3dd2f5ad209d2afce5f30a3b865536c776dc5d30145542fbdb10fd49992c024e18e9af01b608f733ed48a0b2307a0d72a2e0ccfe7d2fc718b25597b42", 0xeb}, {&(0x7f0000003a00)="cc9412df072aa30a4c44b9bd9a04e64e85b3a96f2f0c435b491d1e457751923566e79c3ee22aa8ee42a8521dcb26b7847167e84ddcd143eb7d0f3f7abe94c6c4d23e1606d2d32aac399de121ee45df1ecb86946fa7915a44246317dd1c15c3948120effd8a2c20998550c88751897d568d81c553f5ee53de3de5c54a53de6e29e592a9899dfd44e31cb8f236615e35411d902c2247dddfcb74b8c55f08cb30b8bc0da978b1c24de96cd7a2ab3b799b005af4a2699a07", 0xb6}, {&(0x7f0000003ac0)="dc2ec1727177a4c681e5dcae0bac2059ba3bd045180ee665359c4a1dc2959f04f6b4dff40bbe878a70ff01b88a4ebd95776da2d3cc6dc14fc45bebbe4f23be92f394a047c55ffe0c3f87c0997e2b7ea3c2ac382fcbbcd9a051b395f9d3fa65b2268783964c0d0b965c8f28baf2c87a6b8d64833a31946d", 0x77}, {&(0x7f0000003b40)="7ca30efc56c435627b208ad8caf7559f2e21ffada7a91496af1fca45b66576d59770e57bc5123076aeece8e444837d0607b451fcbe3768aabb75c0accf7f66a7b043bbc4463c41f2e52b663c9103add562a97ace4827f1309bd66539bb12a4cd86da3c623c508d49db0cb408b113cce1afef262ed284a3420305811a5db32e6f2da85c9d9c6f84cddb6c730dc5614e63020f1bd3c077f4b07c0732f4345366304229d09616e3657605", 0xa9}, {&(0x7f0000003c00)="5a152dd2aa286f97f07fdf5a3df9d29c7e4755e6efcc4da5ff171d888fae1491bb3d7e56d1d6024034874e5bef1793a443e7108d663093d15a9dea50f1702ceda0b6cfac869ecc83c8c4e3ca40e8e9b984795c2f916d0f22852c7a62fe16fa5575fc611bc4dc33813b2b4e418683c06103f9032587001e7139cd0390d91d3481124a7755ddc214f0c809ccee11b3d3366af82dec3613f8ad46dc55ae220c07f513b61ba58adaecaa06ef8f5ebe0ce3ebadf9ecfab133ec664c57676bef2f9c2a0bfa28aba05a04e89bd932af3720ebd2d337a73c8841496b52369b805f19c9159c7ea32bfa59c9f523ed380b1f65eaca9a4626a258f0", 0xf6}, {&(0x7f0000003d00)="a63c3e045a755bd9c6fcf0cd3f6db3b2", 0x10}, {&(0x7f0000003d40)="d763e14613ea414f1987073a0ca9453f6209298b588cf1ce98b21a3711d6b9c8c3084915ecafdfe7f0d828eeb810b510ce608e386bc5ccec3c71dcb32a15d9ba950a7e1252d6531ac948346b87bf79c3be4ba77044f5795de71bbcccb7fd991c35cb83bba43a574cd914fff1142fbfef884be2bf6e4280c3bf052c9c14fb793cbfa4da0e2264fe0c4fb0bd79a3ee914f845dc0dfcdc78755a729db72", 0x9c}], 0x7, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}], 0x58, 0x80}}, {{&(0x7f0000003f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003f80)="3e87fb1e77f450b6a795a4953537160f763a12e1f60babe965acc131170055c28bd2f50f160c08f396908bde669a00d92880a8fd4339e025eb661ab6bc91e825b899dc692935c1bbe3d58628cb4a5c3ef823912823dc543478638baf061bef25a67ed0e7f452d7863afe4c6bacec917ac5f11085ab1b33853d86b8d1386d17455829f619c3b74b", 0x87}, {&(0x7f0000004040)="363fefe3a917701e5a25757c1a126ebd7dd88d3faae8a7e529201a3a22196113f1c734c03b879d07d6ad8230769ed3c7ba61936e567028833e74c3e88784e4f8690363fc15d950b1a8b02d5b602500c0c49d291b715075b942cebc383a0b02886dc507b0949f2c962934ddcff13d8336ef50d1945e3fcb011b543388ab08105a2f4b620ef9c006e2b2f67840ea74a3dfa1c3fa", 0x93}], 0x2, 0x0, 0x0, 0x28000000}}], 0x6, 0x0) (rerun: 64) socket(0xa, 0x3, 0x3a) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000480)=ANY=[@ANYBLOB="be6f000000000000b75afefd26cba60f1a4643326660f3e030b16a488356a64e135143c8cdeaf43cb1075bf5c9d3bb3cc08bd30e93fa64020db977cacf69a58c7a2c0037645dbaf492c31c3712431627e902fb45a25467413b0b83852a1593f2426ec5d432f2f610fbf4c9af75964a0f1e53d37ffa0929600f8d435e317186fd414b86e310564ed33d68e33051bfa8f9f76a85c0e3cc44976bbaf6070861ea52b59a9079fa06406fde2cc2898e27053330163afcdaf36f47858b6988fd92b5c1f872ac735db99941da94670fca32a2c0ff4d3b026ecb057e2947821abfd2de57830b02"]) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r9, 0x0, 0x8, 0x0, 0x0) (async) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000]}, 0x8) 6.784268091s ago: executing program 3 (id=2417): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x01\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) 6.658095788s ago: executing program 1 (id=2418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, 0x0, 0xffa8) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0xfed, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 6.54177686s ago: executing program 2 (id=2419): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9, 0xfff3}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) r4 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x1) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x3, 0x5, 0x4}) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x4, 0xb, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000080)='syzkaller\x00', 0xfffffff7, 0xd4, &(0x7f00000000c0)=""/212, 0x41000, 0x70, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[r0, r5], &(0x7f00000002c0)=[{0x4, 0x3, 0x0, 0x3}, {0x1, 0x4, 0x5, 0x6}], 0x10, 0x7fffffff}, 0x94) 5.845595254s ago: executing program 4 (id=2420): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYRES64=r1, @ANYRES16, @ANYRESOCT, @ANYRESDEC], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 5.845067796s ago: executing program 2 (id=2421): socketpair$unix(0x1, 0x7, 0x0, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x400442, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffeb8, 0xffffff48, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x48) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xfffffff000000001, 0x0, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x3, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000000000000, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x89, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x800202, 0x4) socket$netlink(0x10, 0x3, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="000089480003810080a5000005008adcb940d3c69bf54ac1ca9278cd04a16a9865e1534239fb0bfad27622abb1454b635e9dd1b7d0462f502bde0a5f38ee7ea0364dbff10000007549555cfe7f297eaf63e4d069b282594a6638b9410100000046e08cd17140a5f367350f8a74afee01bad944eb68f6d499175d05a314d5d7eb91c6b992789c10fc43ec0a9373c264cdfb308dc1dd86ab2f08dec953080000000000000033e700310a"], 0xa9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.8404144s ago: executing program 0 (id=2422): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104dfd2bd582f5a23cb"], 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$UHID_INPUT(r1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x734) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 5.294363344s ago: executing program 0 (id=2423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0, 0x0, 0x1000000000009}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(r3, &(0x7f0000019300)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r10 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62", 0x5b, r7) keyctl$link(0x8, r7, r10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) close_range(r8, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 4.524477121s ago: executing program 3 (id=2424): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4.471303678s ago: executing program 4 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000009"], 0xb8}}, 0x20050800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100"/18], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002200000000000000", @ANYBLOB="4fbc", @ANYBLOB="00090000ebff60"], 0x50) 2.73337093s ago: executing program 4 (id=2426): r0 = socket(0x2, 0x80805, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 2.015412771s ago: executing program 1 (id=2427): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000040), 0x5d) 1.961382161s ago: executing program 2 (id=2428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0xfffffffffffffffe) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, 0x0, 0x52cc) 1.705718829s ago: executing program 4 (id=2429): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000580)="0d081020c23b2711030725b2c590c5289ac9f7ad7da533baa8adce51bfb70ff1c34152cee83f523f825151ef7c9e19b76b90c1532441a1c1d3fb2e4d6f48edc3e1d25cd513bfec3ae75419811519d5eb8ef940a6ea5a09312193c99224ef90abb4255a32175a0eb51442bbf1868d05b91e8ab47fc1b2ac9c99769dc2024bd3d48f947361fb3ee0658d2f9ad6ddccf3ded5ac274e8e3752966d8fbf4ac2fd85e8ea3b4f719816935a3209b62b03167338c340e0362cb5a6e24dd661daf1b3f73d8d61f09ab3d4264bab5376a2b8fa33a0927fdca79d25af516f") r1 = socket(0x80000000000000a, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a00000000000000000036de1e025a4f30ab0000ac1e0001ac141401071300e000000200000000ffffffffac14140c00da173dad41dbd33c21c6af8306b9a63ee237d70f95a930bcf24fbf86f85a4d7ab28de9e11db647a28a90cb0679b910"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'veth0_to_bridge\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000c40)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x01\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\x9c\xfaZ\xfeR\xbb\xea5F\x00G\xe8\xc6\xb9\x05\x00\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\'\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac \xc2\xe8\xc1\x1b\x17\xb5\x95\xb2\xdb\xe0+\x0e\xc0\x8d\xd8\xb5\xb4\xea\x90\x06\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|\xf0\xf7\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff`\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00ct\x00\xe8\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00\x8cJ=\xfd\xed\xcd\xfb\xab\x19\x88Y&[\xfaS\x9a\x80\x85\xb5\xa7\xf6\xef}\x81G\x15\x93\xfd\x02\xab\xaf\xe7\xe8\xcfz\x80\xf7\xf9\xe0\xd6\x98\xbf]\t7nPV\xe5\xe7LF\xc4PM\'mp.\x8a\xc7', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.357160501s ago: executing program 3 (id=2430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_io_uring_setup(0x200450a, &(0x7f0000000900)={0x0, 0x256c, 0x4000, 0x2, 0x1ec}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000003c0), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, 0x0, &(0x7f00000008c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) socket(0x400000000010, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, r8, 0x0, r9}) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.326862163s ago: executing program 0 (id=2431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x8000, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 695.290088ms ago: executing program 1 (id=2432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000540), 0x0, 0x0, 0x800006}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000001c0), 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x2, 0x1, 0x34f}, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 0s ago: executing program 3 (id=2433): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): ode [ 618.700273][T13125] syz_tun: left promiscuous mode [ 618.706577][T13125] ip6gretap0: left promiscuous mode [ 618.712921][T13125] bridge0: left promiscuous mode [ 618.721019][T13125] vcan0: left promiscuous mode [ 618.726723][T13125] bond0: left promiscuous mode [ 618.731498][T13125] bond_slave_0: left promiscuous mode [ 618.737514][T13125] bond_slave_1: left promiscuous mode [ 618.744957][T13125] team0: left promiscuous mode [ 618.749744][T13125] team_slave_0: left promiscuous mode [ 618.755898][T13125] team_slave_1: left promiscuous mode [ 618.763491][T13125] dummy0: left promiscuous mode [ 618.771167][T13125] nlmon0: left promiscuous mode [ 618.777567][T13125] caif0: left promiscuous mode [ 618.818097][T13125] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 619.824455][T12514] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 619.832309][T12514] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 621.213025][ T5965] usb 4-1: USB disconnect, device number 43 [ 621.403990][T12514] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 621.495807][T13137] sd 0:0:1:0: device reset [ 621.869300][T12514] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 621.877441][T12514] usb 3-1: config 0 has no interface number 0 [ 621.883540][T12514] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 621.903390][T12514] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 621.912797][T12514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.939093][T12514] usb 3-1: Product: syz [ 621.943772][T12514] usb 3-1: Manufacturer: syz [ 621.948623][T12514] usb 3-1: SerialNumber: syz [ 621.964359][T12514] usb 3-1: config 0 descriptor?? [ 621.969787][T13133] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 621.994276][T12514] usb-storage 3-1:0.20: USB Mass Storage device detected [ 622.011495][ T5917] usb 5-1: USB disconnect, device number 40 [ 622.022741][T12514] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 622.175491][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 622.338798][ T30] audit: type=1326 audit(1759021889.498:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13144 comm="syz.3.1862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ebbb8eec9 code=0x0 [ 623.155810][T13145] bridge_slave_1: left allmulticast mode [ 623.270825][T13145] bridge_slave_1: left promiscuous mode [ 623.365624][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.525867][T13145] bridge_slave_0: left allmulticast mode [ 623.577540][T13145] bridge_slave_0: left promiscuous mode [ 623.698542][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.877033][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.883374][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.317849][T12514] scsi host1: usb-storage 3-1:0.20 [ 624.330290][T12514] usb 3-1: USB disconnect, device number 29 [ 625.225228][T13172] netlink: 'syz.4.1866': attribute type 3 has an invalid length. [ 625.233068][T13172] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1866'. [ 625.899509][ T30] audit: type=1400 audit(1759021893.098:935): avc: denied { ioctl } for pid=13174 comm="syz.4.1869" path="socket:[43378]" dev="sockfs" ino=43378 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 627.333977][T12514] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 627.483869][T12514] usb 3-1: Using ep0 maxpacket: 8 [ 627.490515][T12514] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 627.502201][T12514] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.512898][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 627.532090][T12514] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.660884][T13188] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1872'. [ 627.678670][T12514] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 627.747724][T12514] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 627.843954][ T30] audit: type=1400 audit(1759021895.034:936): avc: denied { setattr } for pid=13189 comm="syz.3.1873" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 627.846598][T13191] veth0: entered promiscuous mode [ 628.063006][T12514] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.214006][T12514] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 628.292890][T12514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.373867][T13194] block nbd0: shutting down sockets [ 628.406379][T12514] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 628.441263][T13189] veth0: left promiscuous mode [ 628.815672][T13203] lo speed is unknown, defaulting to 1000 [ 629.466446][ T30] audit: type=1400 audit(1759021896.624:937): avc: denied { watch } for pid=13212 comm="syz.3.1878" path="/396/bus" dev="tmpfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 629.604243][T13194] veth0: entered promiscuous mode [ 629.614398][T13194] veth0: left promiscuous mode [ 629.706260][ T30] audit: type=1400 audit(1759021896.624:938): avc: denied { watch_sb watch_reads } for pid=13212 comm="syz.3.1878" path="/396/bus" dev="tmpfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 629.729914][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.947794][T13223] netlink: 'syz.1.1879': attribute type 3 has an invalid length. [ 629.955751][T13223] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1879'. [ 630.652267][ T43] usb 3-1: USB disconnect, device number 30 [ 630.762378][T13228] overlay: Bad value for 'verity' [ 632.106860][T13240] input: syz0 as /devices/virtual/input/input30 [ 633.795754][ T5910] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 633.805759][T13228] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 633.954127][ T5910] usb 3-1: device descriptor read/64, error -71 [ 634.436737][ T30] audit: type=1400 audit(1759021901.644:939): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 635.469029][T13277] netlink: 'syz.1.1893': attribute type 3 has an invalid length. [ 635.476945][T13277] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1893'. [ 635.951135][ T30] audit: type=1326 audit(1759021903.154:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 636.045423][ T30] audit: type=1326 audit(1759021903.194:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 636.164442][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 636.173856][ T5965] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 636.232754][ T30] audit: type=1326 audit(1759021903.194:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 636.293311][ T30] audit: type=1326 audit(1759021903.194:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 636.424775][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 636.434180][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 636.532779][T13295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.560072][T13295] netlink: 'syz.2.1900': attribute type 3 has an invalid length. [ 636.567930][T13295] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1900'. [ 636.980037][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.989348][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.008195][ T30] audit: type=1326 audit(1759021903.194:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 637.036151][ T5965] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 637.057813][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.084145][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.092492][ T5965] usb 2-1: Product: syz [ 637.105631][ T5965] usb 2-1: Manufacturer: syz [ 637.114097][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.134870][ T5965] usb 2-1: SerialNumber: syz [ 637.146798][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.157935][ T30] audit: type=1326 audit(1759021903.194:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 637.243571][ T5965] usb 2-1: config 0 descriptor?? [ 637.261881][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.274851][ T5965] usb 2-1: bad CDC descriptors [ 637.304246][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.333993][ T30] audit: type=1326 audit(1759021903.194:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 637.358165][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.379640][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.386514][ T30] audit: type=1326 audit(1759021903.194:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 637.410687][ T30] audit: type=1326 audit(1759021903.194:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebbb8eec9 code=0x7ffc0000 [ 637.434810][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.443767][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.600501][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.608932][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.906408][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.922902][T13306] sd 0:0:1:0: device reset [ 637.931106][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.939499][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.949821][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.961921][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.969886][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.979193][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.994456][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 638.010895][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 638.040257][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 638.070475][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 638.109455][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 638.128790][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 638.157049][ T10] usb 1-1: Product: syz [ 638.163464][ T10] usb 1-1: Manufacturer: syz [ 638.183899][ T10] usb 1-1: SerialNumber: syz [ 638.219384][ T10] usb 1-1: config 0 descriptor?? [ 638.236249][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 638.384639][ T5965] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 638.460621][T13314] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 638.540420][T13314] netlink: 'syz.2.1905': attribute type 33 has an invalid length. [ 638.859844][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1905'. [ 638.893006][ T5965] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 638.903580][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.923506][ T5965] usb 4-1: config 0 descriptor?? [ 639.085351][ T24] usb 2-1: USB disconnect, device number 37 [ 639.354158][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 639.355150][ T43] usb 1-1: USB disconnect, device number 43 [ 639.466187][ T43] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 639.549367][T13324] sd 0:0:1:0: device reset [ 640.359205][T13331] netlink: 'syz.4.1908': attribute type 3 has an invalid length. [ 640.367213][T13331] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1908'. [ 641.263927][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 641.263938][ T30] audit: type=1400 audit(1759021908.464:971): avc: denied { create } for pid=13332 comm="syz.0.1909" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 641.743647][ T30] audit: type=1400 audit(1759021908.464:972): avc: denied { link } for pid=13332 comm="syz.0.1909" name="file1" dev="overlay" ino=1979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 641.767815][ T30] audit: type=1400 audit(1759021908.464:973): avc: denied { setattr } for pid=13332 comm="syz.0.1909" name="#21" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 641.793337][ T30] audit: type=1400 audit(1759021908.464:974): avc: denied { rename } for pid=13332 comm="syz.0.1909" name="#21" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 642.107341][ T30] audit: type=1400 audit(1759021909.314:975): avc: denied { unlink } for pid=5861 comm="syz-executor" name="file0" dev="tmpfs" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 642.129931][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.163180][ T5965] usb 4-1: Cannot read MAC address [ 642.174972][ T5965] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 642.211854][ T5965] usb 4-1: USB disconnect, device number 44 [ 642.464003][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 642.535333][T13352] lo speed is unknown, defaulting to 1000 [ 642.624787][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 643.034822][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 643.058642][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.085609][ T24] usb 5-1: Product: syz [ 643.089788][ T24] usb 5-1: Manufacturer: syz [ 643.131934][ T24] usb 5-1: SerialNumber: syz [ 643.174117][ T24] usb 5-1: config 0 descriptor?? [ 643.578935][ T5965] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 643.638914][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 643.911021][ T24] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 643.925724][ T24] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 643.938885][ T24] usb 5-1: USB disconnect, device number 41 [ 643.941005][ T5965] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 643.989424][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.011236][ T5965] usb 2-1: Product: syz [ 644.049221][ T5965] usb 2-1: Manufacturer: syz [ 644.064582][ T5965] usb 2-1: SerialNumber: syz [ 644.179260][ T5965] usb 2-1: config 0 descriptor?? [ 644.187674][ T10] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 644.206043][ T10] usb 1-1: config 0 has no interface number 0 [ 644.212562][ T10] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 644.305568][T13378] netlink: 'syz.2.1920': attribute type 3 has an invalid length. [ 644.313439][T13378] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1920'. [ 644.634958][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 644.651496][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.660111][ T10] usb 1-1: Product: syz [ 644.667691][ T10] usb 1-1: Manufacturer: syz [ 644.672503][ T10] usb 1-1: SerialNumber: syz [ 644.689593][ T10] usb 1-1: config 0 descriptor?? [ 644.835820][T13363] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 644.912061][ T5965] usb 2-1: ignoring: probably an ADSL modem [ 646.067913][ T10] usb-storage 1-1:0.20: USB Mass Storage device detected [ 646.166128][ T10] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 647.696718][ T5965] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 647.777592][ T5965] usb 2-1: USB disconnect, device number 38 [ 647.854189][ T10] scsi host1: usb-storage 1-1:0.20 [ 647.891685][ T10] usb 1-1: USB disconnect, device number 44 [ 649.868043][T13423] fuse: Bad value for 'group_id' [ 650.005079][T13423] fuse: Bad value for 'group_id' [ 650.244370][ T5965] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 650.304049][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 650.406433][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 650.414972][ T5965] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 650.450331][ T5965] usb 5-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 650.528009][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 650.541748][ T5965] usb 5-1: config 0 has no interface number 0 [ 650.553609][ T5965] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0x6 has invalid maxpacket 9216, setting to 1024 [ 650.566980][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 650.603624][ T5965] usb 5-1: config 0 interface 203 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 650.614526][ T5965] usb 5-1: config 0 interface 203 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.628081][ T5965] usb 5-1: New USB device found, idVendor=19d2, idProduct=1177, bcdDevice=32.af [ 650.637630][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.751798][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.770336][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.778948][ T10] usb 1-1: Product: syz [ 650.783152][ T10] usb 1-1: Manufacturer: syz [ 650.788641][ T10] usb 1-1: SerialNumber: syz [ 651.015935][T13442] bridge0: port 3(team0) entered blocking state [ 651.022573][T13442] bridge0: port 3(team0) entered disabled state [ 651.029556][T13442] team0: entered allmulticast mode [ 651.034726][T13442] team_slave_0: entered allmulticast mode [ 651.040497][T13442] team_slave_1: entered allmulticast mode [ 651.221358][T13442] team0: entered promiscuous mode [ 651.226800][T13442] team_slave_0: entered promiscuous mode [ 651.232648][T13442] team_slave_1: entered promiscuous mode [ 651.238975][T13442] bridge0: port 3(team0) entered blocking state [ 651.245298][T13442] bridge0: port 3(team0) entered forwarding state [ 651.251880][ T5965] usb 5-1: config 0 descriptor?? [ 651.265026][ T5965] usb 5-1: bad CDC descriptors [ 651.276424][T13423] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 651.313962][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 651.729271][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.746673][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.760822][ T5965] usb 5-1: USB disconnect, device number 42 [ 651.860280][T13449] netlink: 'syz.1.1939': attribute type 3 has an invalid length. [ 651.868134][T13449] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1939'. [ 652.237624][T13445] lo speed is unknown, defaulting to 1000 [ 652.266843][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 652.276546][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.285430][ T24] usb 4-1: Product: syz [ 652.289798][ T24] usb 4-1: Manufacturer: syz [ 652.295694][ T24] usb 4-1: SerialNumber: syz [ 652.308840][ T24] usb 4-1: config 0 descriptor?? [ 652.473722][T13453] kvm: kvm [13452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 652.558306][T13453] kvm: kvm [13452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 652.585215][T13456] FAULT_INJECTION: forcing a failure. [ 652.585215][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 652.588398][T13453] kvm: kvm [13452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 652.628567][T13453] kvm: kvm [13452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 652.641933][ T5965] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 652.655140][ T5965] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 652.684288][T13456] CPU: 0 UID: 0 PID: 13456 Comm: syz.4.1941 Not tainted syzkaller #0 PREEMPT(full) [ 652.684309][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 652.684319][T13456] Call Trace: [ 652.684325][T13456] [ 652.684331][T13456] dump_stack_lvl+0x16c/0x1f0 [ 652.684355][T13456] should_fail_ex+0x512/0x640 [ 652.684374][T13456] ? fs_reclaim_acquire+0xae/0x150 [ 652.684397][T13456] ? tomoyo_encode2+0x100/0x3e0 [ 652.684417][T13456] should_failslab+0xc2/0x120 [ 652.684434][T13456] __kmalloc_noprof+0xd2/0x510 [ 652.684455][T13456] tomoyo_encode2+0x100/0x3e0 [ 652.684479][T13456] tomoyo_encode+0x29/0x50 [ 652.684499][T13456] tomoyo_realpath_from_path+0x18f/0x6e0 [ 652.684525][T13456] ? tomoyo_profile+0x47/0x60 [ 652.684544][T13456] tomoyo_path_number_perm+0x245/0x580 [ 652.684565][T13456] ? tomoyo_path_number_perm+0x237/0x580 [ 652.684587][T13456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 652.684608][T13456] ? find_held_lock+0x2b/0x80 [ 652.684647][T13456] ? find_held_lock+0x2b/0x80 [ 652.684665][T13456] ? hook_file_ioctl_common+0x145/0x410 [ 652.684688][T13456] ? __fget_files+0x20e/0x3c0 [ 652.684708][T13456] security_file_ioctl+0x9b/0x240 [ 652.684731][T13456] __x64_sys_ioctl+0xb7/0x210 [ 652.684755][T13456] do_syscall_64+0xcd/0x4e0 [ 652.684778][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.684792][T13456] RIP: 0033:0x7fad3d98eec9 [ 652.684807][T13456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.684822][T13456] RSP: 002b:00007fad3e8f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.684837][T13456] RAX: ffffffffffffffda RBX: 00007fad3dbe6090 RCX: 00007fad3d98eec9 [ 652.684847][T13456] RDX: 0000000000000000 RSI: 000000000000aead RDI: 0000000000000005 [ 652.684855][T13456] RBP: 00007fad3e8f3090 R08: 0000000000000000 R09: 0000000000000000 [ 652.684863][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.684872][T13456] R13: 00007fad3dbe6128 R14: 00007fad3dbe6090 R15: 00007ffcbe182738 [ 652.684892][T13456] [ 652.684927][T13456] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.705239][T13458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1942'. [ 652.714888][ T5965] hid-generic 0000:0003:0000.0018: hidraw0: HID v0.03 Device [syz0] on syz0 [ 652.748303][ T24] usb 4-1: ignoring: probably an ADSL modem [ 652.753291][ T10] cdc_ncm 1-1:1.0: failed to get mac address [ 652.972565][T13462] fido_id[13462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 653.004307][ T10] cdc_ncm 1-1:1.0: bind() failure [ 653.015129][ T10] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 653.108795][T13461] 9pnet_fd: Insufficient options for proto=fd [ 653.190287][ T24] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 653.203265][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 653.219432][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 653.242938][ T24] usb 4-1: USB disconnect, device number 45 [ 653.249631][ T10] usb 1-1: USB disconnect, device number 45 [ 653.445984][T13475] bridge1: entered promiscuous mode [ 653.886696][ T30] audit: type=1400 audit(1759021921.094:976): avc: denied { read write } for pid=13480 comm="syz.0.1947" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 654.087172][ T30] audit: type=1400 audit(1759021921.094:977): avc: denied { open } for pid=13480 comm="syz.0.1947" path="/372/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 655.154568][T13505] netlink: 'syz.3.1952': attribute type 3 has an invalid length. [ 655.162402][T13505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1952'. [ 656.952969][T13541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.995237][T13541] netlink: 'syz.1.1957': attribute type 3 has an invalid length. [ 657.003088][T13541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1957'. [ 657.303365][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 658.089530][T13555] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 658.107989][T13555] FAULT_INJECTION: forcing a failure. [ 658.107989][T13555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.121517][T13555] CPU: 1 UID: 0 PID: 13555 Comm: syz.2.1962 Not tainted syzkaller #0 PREEMPT(full) [ 658.121540][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.121551][T13555] Call Trace: [ 658.121556][T13555] [ 658.121563][T13555] dump_stack_lvl+0x16c/0x1f0 [ 658.121591][T13555] should_fail_ex+0x512/0x640 [ 658.121617][T13555] _copy_to_user+0x32/0xd0 [ 658.121645][T13555] simple_read_from_buffer+0xcb/0x170 [ 658.121666][T13555] proc_fail_nth_read+0x197/0x240 [ 658.121689][T13555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.121711][T13555] ? rw_verify_area+0xcf/0x6c0 [ 658.121737][T13555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.121758][T13555] vfs_read+0x1e4/0xcf0 [ 658.121778][T13555] ? __pfx___mutex_lock+0x10/0x10 [ 658.121802][T13555] ? __pfx_vfs_read+0x10/0x10 [ 658.121827][T13555] ? __fget_files+0x20e/0x3c0 [ 658.121854][T13555] ksys_read+0x12a/0x250 [ 658.121871][T13555] ? __pfx_ksys_read+0x10/0x10 [ 658.121897][T13555] do_syscall_64+0xcd/0x4e0 [ 658.121927][T13555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.121946][T13555] RIP: 0033:0x7f120bd8d8dc [ 658.121960][T13555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 658.121977][T13555] RSP: 002b:00007f120cd0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.121994][T13555] RAX: ffffffffffffffda RBX: 00007f120bfe5fa0 RCX: 00007f120bd8d8dc [ 658.122006][T13555] RDX: 000000000000000f RSI: 00007f120cd0d0a0 RDI: 0000000000000005 [ 658.122016][T13555] RBP: 00007f120cd0d090 R08: 0000000000000000 R09: 0000000000000000 [ 658.122026][T13555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.122037][T13555] R13: 00007f120bfe6038 R14: 00007f120bfe5fa0 R15: 00007ffc2fc124a8 [ 658.122062][T13555] [ 658.300466][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.564219][ T5917] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 658.843094][ T5917] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 658.864816][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.883536][ T5917] usb 2-1: Product: syz [ 658.891413][ T5917] usb 2-1: Manufacturer: syz [ 658.899110][ T5917] usb 2-1: SerialNumber: syz [ 659.023370][ T5917] usb 2-1: config 0 descriptor?? [ 659.742890][T13575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.777288][T13575] netlink: 'syz.4.1968': attribute type 3 has an invalid length. [ 659.785151][T13575] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1968'. [ 660.017219][ T5917] usb 2-1: ignoring: probably an ADSL modem [ 660.225791][T13581] FAULT_INJECTION: forcing a failure. [ 660.225791][T13581] name failslab, interval 1, probability 0, space 0, times 0 [ 660.238661][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.3.1971 Not tainted syzkaller #0 PREEMPT(full) [ 660.238683][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.238692][T13581] Call Trace: [ 660.238698][T13581] [ 660.238704][T13581] dump_stack_lvl+0x16c/0x1f0 [ 660.238731][T13581] should_fail_ex+0x512/0x640 [ 660.238750][T13581] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 660.238769][T13581] should_failslab+0xc2/0x120 [ 660.238782][T13581] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 660.238793][T13581] ? __alloc_skb+0x2b2/0x380 [ 660.238807][T13581] __alloc_skb+0x2b2/0x380 [ 660.238818][T13581] ? __pfx___alloc_skb+0x10/0x10 [ 660.238832][T13581] ? pppol2tp_sock_to_session+0x249/0x570 [ 660.238856][T13581] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 660.238883][T13581] sock_wmalloc+0xd4/0x120 [ 660.238901][T13581] pppol2tp_sendmsg+0x1a6/0x5f0 [ 660.238924][T13581] ____sys_sendmsg+0xa98/0xc70 [ 660.238940][T13581] ? copy_msghdr_from_user+0x10a/0x160 [ 660.238953][T13581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.238971][T13581] ? __pfx__kstrtoull+0x10/0x10 [ 660.238992][T13581] ___sys_sendmsg+0x134/0x1d0 [ 660.239013][T13581] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.239043][T13581] ? find_held_lock+0x2b/0x80 [ 660.239069][T13581] __sys_sendmmsg+0x200/0x420 [ 660.239084][T13581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 660.239109][T13581] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.239140][T13581] ? fput+0x9b/0xd0 [ 660.239160][T13581] ? ksys_write+0x1ac/0x250 [ 660.239176][T13581] ? __pfx_ksys_write+0x10/0x10 [ 660.239196][T13581] __x64_sys_sendmmsg+0x9c/0x100 [ 660.239210][T13581] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.239223][T13581] do_syscall_64+0xcd/0x4e0 [ 660.239237][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.239248][T13581] RIP: 0033:0x7f1ebbb8eec9 [ 660.239257][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.239271][T13581] RSP: 002b:00007f1ebc979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 660.239292][T13581] RAX: ffffffffffffffda RBX: 00007f1ebbde5fa0 RCX: 00007f1ebbb8eec9 [ 660.239302][T13581] RDX: 04000000000001ce RSI: 0000200000005f80 RDI: 0000000000000006 [ 660.239311][T13581] RBP: 00007f1ebc979090 R08: 0000000000000000 R09: 0000000000000000 [ 660.239320][T13581] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 660.239329][T13581] R13: 00007f1ebbde6038 R14: 00007f1ebbde5fa0 R15: 00007ffdf5c0dc58 [ 660.239351][T13581] [ 660.579639][T13584] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 660.666688][ T5917] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 660.799978][ T5917] usb 2-1: USB disconnect, device number 39 [ 662.937298][T13616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.972345][T13616] netlink: 'syz.4.1979': attribute type 3 has an invalid length. [ 662.980271][T13616] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1979'. [ 663.645214][T13618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.795836][T13617] tipc: Enabled bearer , priority 0 [ 663.802957][T13617] syzkaller0: entered promiscuous mode [ 663.903984][T13617] syzkaller0: entered allmulticast mode [ 664.284376][T13625] tipc: Resetting bearer [ 664.306466][T13614] tipc: Resetting bearer [ 664.381684][T13614] tipc: Disabling bearer [ 665.113901][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 665.244518][ T43] usb 4-1: device descriptor read/64, error -71 [ 665.573721][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 665.839322][T13647] sd 0:0:1:0: device reset [ 666.238099][ T43] usb 4-1: device descriptor read/64, error -71 [ 666.354867][ T43] usb usb4-port1: attempt power cycle [ 666.523616][ T5917] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 666.744212][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 666.821607][ T5917] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 667.192949][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.205459][ T43] usb 4-1: device descriptor read/8, error -71 [ 667.216151][ T5917] usb 5-1: Product: syz [ 667.220384][ T5917] usb 5-1: Manufacturer: syz [ 667.225179][ T5917] usb 5-1: SerialNumber: syz [ 667.279304][ T5917] usb 5-1: config 0 descriptor?? [ 667.333089][T13665] binder: BINDER_SET_CONTEXT_MGR already set [ 667.341814][T13665] binder: 13663:13665 ioctl 4018620d 200000000100 returned -16 [ 667.523984][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 667.756734][ T43] usb 4-1: device descriptor read/8, error -71 [ 667.874664][ T5917] usb 5-1: ignoring: probably an ADSL modem [ 667.894057][ T43] usb usb4-port1: unable to enumerate USB device [ 667.974107][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 668.184488][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 668.206045][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 668.252012][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 668.254429][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.297299][ T24] usb 2-1: config 0 descriptor?? [ 668.308584][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 668.413849][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 668.426211][T13679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1996'. [ 668.486548][ T5917] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 668.626070][ T5917] usb 5-1: USB disconnect, device number 43 [ 668.699340][T13682] FAULT_INJECTION: forcing a failure. [ 668.699340][T13682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.793036][T13682] CPU: 1 UID: 0 PID: 13682 Comm: syz.3.1997 Not tainted syzkaller #0 PREEMPT(full) [ 668.793062][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.793073][T13682] Call Trace: [ 668.793079][T13682] [ 668.793086][T13682] dump_stack_lvl+0x16c/0x1f0 [ 668.793113][T13682] should_fail_ex+0x512/0x640 [ 668.793144][T13682] _copy_from_user+0x2e/0xd0 [ 668.793170][T13682] copy_msghdr_from_user+0x98/0x160 [ 668.793193][T13682] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 668.793219][T13682] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 668.793243][T13682] ? rcu_is_watching+0x12/0xc0 [ 668.793267][T13682] ___sys_sendmsg+0xfe/0x1d0 [ 668.793290][T13682] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.793342][T13682] __sys_sendmsg+0x16d/0x220 [ 668.793364][T13682] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.793383][T13682] ? ksys_write+0x17e/0x250 [ 668.793418][T13682] do_syscall_64+0xcd/0x4e0 [ 668.793443][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.793461][T13682] RIP: 0033:0x7f1ebbb8eec9 [ 668.793475][T13682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.793491][T13682] RSP: 002b:00007f1ebc979038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.793508][T13682] RAX: ffffffffffffffda RBX: 00007f1ebbde5fa0 RCX: 00007f1ebbb8eec9 [ 668.793519][T13682] RDX: 00000000040430d0 RSI: 00002000000028c0 RDI: 0000000000000003 [ 668.793529][T13682] RBP: 00007f1ebc979090 R08: 0000000000000000 R09: 0000000000000000 [ 668.793539][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.793549][T13682] R13: 00007f1ebbde6038 R14: 00007f1ebbde5fa0 R15: 00007ffdf5c0dc58 [ 668.793572][T13682] [ 669.187325][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 669.198847][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.208386][ T9] usb 1-1: Product: syz [ 669.212635][ T9] usb 1-1: Manufacturer: syz [ 669.218063][ T9] usb 1-1: SerialNumber: syz [ 669.228238][ T9] usb 1-1: config 0 descriptor?? [ 669.555718][T13691] sd 0:0:1:0: device reset [ 669.838134][ T24] gspca_sq930x: ucbus_write failed -71 [ 669.843671][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 670.002228][ T24] usb 2-1: USB disconnect, device number 40 [ 670.290892][ T9] snd-usb-6fire 1-1:0.0: unable to receive device firmware state. [ 671.577974][ T9] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 671.662152][T13700] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 671.983861][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 672.004353][T13702] lo speed is unknown, defaulting to 1000 [ 672.347178][ T30] audit: type=1400 audit(1759021939.554:978): avc: denied { write } for pid=13698 comm="syz.1.2004" name="usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 672.466498][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 672.487906][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 672.527409][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.602968][ T24] usb 5-1: config 0 descriptor?? [ 672.692909][ T5910] usb 1-1: USB disconnect, device number 46 [ 672.945533][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 672.963178][ T24] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 672.972309][ T24] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 673.250112][T13718] lo speed is unknown, defaulting to 1000 [ 674.273865][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 674.474124][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 674.570588][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.613823][ T9] usb 4-1: Product: syz [ 674.618063][ T9] usb 4-1: Manufacturer: syz [ 674.649761][ T9] usb 4-1: SerialNumber: syz [ 674.713929][ T9] usb 4-1: config 0 descriptor?? [ 675.054769][ T5961] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 675.125052][ T9] usb 4-1: ignoring: probably an ADSL modem [ 675.471379][ T9] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 675.504190][ T9] usb 4-1: USB disconnect, device number 50 [ 675.566931][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 675.581446][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 675.636988][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.045613][ T5961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.129327][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE [ 676.167061][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 676.194926][T13766] lo speed is unknown, defaulting to 1000 [ 676.204823][ T5961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 676.242945][ T5961] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 676.334458][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.368087][ T5961] usb 1-1: config 0 descriptor?? [ 676.429009][T13777] input: syz0 as /devices/virtual/input/input33 [ 676.661382][T13783] sd 0:0:1:0: device reset [ 677.449776][ T5850] usb 1-1: USB disconnect, device number 47 [ 679.076096][T13796] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2023'. [ 679.722249][T13808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.764680][T13808] netlink: 'syz.0.2024': attribute type 3 has an invalid length. [ 679.772565][T13808] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2024'. [ 680.612620][T13814] netlink: 'syz.3.2025': attribute type 21 has an invalid length. [ 680.861343][ T2963] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.954859][T13821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.002005][T13821] netlink: 'syz.0.2027': attribute type 3 has an invalid length. [ 681.009854][T13821] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2027'. [ 681.288855][ T2963] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.298019][ T2963] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.357946][ T2963] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.413940][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 681.652339][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 681.785863][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 681.795882][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.815061][ T9] usb 4-1: Product: syz [ 681.842105][ T9] usb 4-1: Manufacturer: syz [ 681.965629][T13832] sd 0:0:1:0: device reset [ 682.353840][ T9] usb 4-1: SerialNumber: syz [ 682.377553][ T9] usb 4-1: config 0 descriptor?? [ 682.474032][ T5965] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 682.597939][T13814] netlink: 'syz.3.2025': attribute type 21 has an invalid length. [ 682.754273][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 682.787881][ T5965] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 683.130138][ T10] usb 2-1: device descriptor read/64, error -71 [ 683.137368][ T5965] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 683.170237][T13838] lo speed is unknown, defaulting to 1000 [ 683.212636][ T9] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 683.232849][ T5965] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 4 [ 683.243105][ T9] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 683.263275][ T5965] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 683.275326][ T9] usb 4-1: USB disconnect, device number 51 [ 683.282112][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.530374][T13829] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 683.563888][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 683.677331][ T5965] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.730903][ T5965] usb 3-1: invalid MIDI out EP 0 [ 683.793898][ T10] usb 2-1: device descriptor read/64, error -71 [ 683.863132][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.888537][ T5965] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 683.914764][ T10] usb usb2-port1: attempt power cycle [ 683.934888][ T5965] usb 3-1: USB disconnect, device number 33 [ 684.027262][ T30] audit: type=1400 audit(1759021951.234:979): avc: denied { mount } for pid=13844 comm="syz.3.2036" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 684.283888][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 684.324307][ T10] usb 2-1: device descriptor read/8, error -71 [ 684.603969][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 684.653489][ T10] usb 2-1: device descriptor read/8, error -71 [ 684.819398][ T10] usb usb2-port1: unable to enumerate USB device [ 685.163047][ T30] audit: type=1400 audit(1759021952.364:980): avc: denied { read } for pid=13866 comm="syz.4.2041" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 685.191123][ T30] audit: type=1400 audit(1759021952.364:981): avc: denied { open } for pid=13866 comm="syz.4.2041" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 685.249002][ T30] audit: type=1400 audit(1759021952.394:982): avc: denied { ioctl } for pid=13866 comm="syz.4.2041" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 685.316428][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.323427][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.356154][T13870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 685.363235][T13870] overlayfs: failed to set xattr on upper [ 685.369148][T13870] overlayfs: ...falling back to redirect_dir=nofollow. [ 685.375981][T13870] overlayfs: ...falling back to index=off. [ 685.381763][T13870] overlayfs: ...falling back to uuid=null. [ 685.387563][T13870] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 685.468883][T13873] vxcan1: entered allmulticast mode [ 685.489481][ T30] audit: type=1400 audit(1759021952.694:983): avc: denied { setattr } for pid=13872 comm="syz.1.2043" name="NETLINK" dev="sockfs" ino=47162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 685.523943][ T5850] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 685.631158][T13875] tipc: Started in network mode [ 685.640426][T13875] tipc: Node identity 76f30a6e3068, cluster identity 4711 [ 685.648555][T13875] tipc: Enabled bearer , priority 0 [ 685.662194][T13875] syzkaller0: entered promiscuous mode [ 685.677584][T13875] syzkaller0: entered allmulticast mode [ 685.686062][ T5850] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 685.687844][T13877] /dev/nullb0: Can't open blockdev [ 685.699339][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.716739][T13875] tipc: Resetting bearer [ 685.729182][T13874] tipc: Resetting bearer [ 685.754874][ T5850] usb 4-1: config 0 descriptor?? [ 685.834734][T13874] tipc: Disabling bearer [ 686.165944][ T5910] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 686.226988][T13885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.551907][ T5910] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 686.585121][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.595652][ T5910] usb 1-1: Product: syz [ 686.599884][ T5910] usb 1-1: Manufacturer: syz [ 686.637317][ T5910] usb 1-1: SerialNumber: syz [ 686.655799][ T5910] usb 1-1: config 0 descriptor?? [ 686.674668][ T5850] usb 4-1: Cannot set autoneg [ 686.688313][ T5850] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 686.736928][ T5850] usb 4-1: USB disconnect, device number 52 [ 686.931890][T13902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13902 comm=syz.1.2054 [ 687.036217][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 687.077638][ T5910] usb 1-1: ignoring: probably an ADSL modem [ 687.173939][ T10] usb 3-1: device descriptor read/64, error -71 [ 687.275420][T13914] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 687.292542][ T5910] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 687.304861][ T5910] usb 1-1: USB disconnect, device number 48 [ 687.324721][T13914] exFAT-fs (nullb0): invalid boot record signature [ 687.405455][T13914] exFAT-fs (nullb0): failed to read boot sector [ 687.411797][T13914] exFAT-fs (nullb0): failed to recognize exfat type [ 687.424100][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 687.564310][ T10] usb 3-1: device descriptor read/64, error -71 [ 688.023608][ T10] usb usb3-port1: attempt power cycle [ 688.613843][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 688.714584][ T10] usb 3-1: device descriptor read/8, error -71 [ 689.213825][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 689.443873][ T10] usb 3-1: device descriptor read/8, error -71 [ 689.701989][ T10] usb usb3-port1: unable to enumerate USB device [ 690.267565][T13952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.300795][T13952] netlink: 'syz.3.2065': attribute type 3 has an invalid length. [ 690.308633][T13952] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2065'. [ 690.401273][T13950] netlink: 'syz.4.2066': attribute type 4 has an invalid length. [ 690.472899][T13953] netlink: 'syz.4.2066': attribute type 4 has an invalid length. [ 691.117465][T13954] block nbd4: shutting down sockets [ 691.549120][T13963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.593493][T13963] netlink: 'syz.2.2068': attribute type 3 has an invalid length. [ 691.601356][T13963] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2068'. [ 691.764270][ T43] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 691.968192][T13965] kernel read not supported for file /!selt‘¹M (pid: 13965 comm: syz.4.2070) [ 691.977498][ T30] audit: type=1800 audit(1759021959.184:984): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2070" name=2173656C7491B94D7F dev="mqueue" ino=47288 res=0 errno=0 [ 692.055290][ T5910] kernel read not supported for file /!selt‘¹M (pid: 5910 comm: kworker/1:5) [ 692.096716][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.192523][ T43] usb 4-1: config 0 has no interface number 0 [ 692.220973][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 692.302497][T13972] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 692.311163][T13972] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 692.319711][T13972] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 692.378299][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2071'. [ 692.397831][T13973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2072'. [ 692.458696][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 692.543826][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.566399][T13971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2071'. [ 692.594430][ T43] usb 4-1: config 0 descriptor?? [ 692.602850][T13971] netlink: 540 bytes leftover after parsing attributes in process `syz.4.2071'. [ 692.616796][ T43] usb 4-1: selecting invalid altsetting 1 [ 692.626076][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 692.632390][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 692.784933][ T43] DVB: Unable to find symbol cx22700_attach() [ 692.869922][ T43] DVB: Unable to find symbol tda10046_attach() [ 692.886416][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 692.918838][ T43] usb 4-1: USB disconnect, device number 53 [ 692.982539][T13982] input: syz0 as /devices/virtual/input/input34 [ 693.918087][T13985] lo speed is unknown, defaulting to 1000 [ 696.301451][T14010] sd 0:0:1:0: device reset [ 697.521672][T14022] lo speed is unknown, defaulting to 1000 [ 698.211824][T14031] sd 0:0:1:0: device reset [ 700.704990][T14045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.730883][T14044] infiniband syz2: set active [ 700.735760][T14044] infiniband syz2: added bond0 [ 700.741799][T14044] syz2: rxe_create_cq: returned err = -12 [ 700.747725][T14044] infiniband syz2: Couldn't create ib_mad CQ [ 700.755260][T14044] infiniband syz2: Couldn't open port 1 [ 700.784873][T14044] RDS/IB: syz2: added [ 700.789093][T14044] smc: adding ib device syz2 with port count 1 [ 700.795610][T14044] smc: ib device syz2 port 1 has pnetid [ 701.880120][T14058] sd 0:0:1:0: device reset [ 701.885704][ T5965] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 702.147187][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 702.267175][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.330132][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.484375][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.497887][ T5965] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 702.540890][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.601337][ T5965] usb 1-1: config 0 descriptor?? [ 703.494218][T14077] sd 0:0:1:0: device reset [ 703.988375][T14076] FAULT_INJECTION: forcing a failure. [ 703.988375][T14076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.033924][ T5965] usbhid 1-1:0.0: can't add hid device: -71 [ 704.118132][T14076] CPU: 1 UID: 0 PID: 14076 Comm: syz.4.2096 Not tainted syzkaller #0 PREEMPT(full) [ 704.118157][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.118167][T14076] Call Trace: [ 704.118172][T14076] [ 704.118179][T14076] dump_stack_lvl+0x16c/0x1f0 [ 704.118204][T14076] should_fail_ex+0x512/0x640 [ 704.118229][T14076] _copy_from_iter+0x29f/0x1720 [ 704.118256][T14076] ? __alloc_skb+0x200/0x380 [ 704.118277][T14076] ? __pfx__copy_from_iter+0x10/0x10 [ 704.118303][T14076] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 704.118334][T14076] netlink_sendmsg+0x829/0xdd0 [ 704.118361][T14076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.118392][T14076] ____sys_sendmsg+0xa98/0xc70 [ 704.118419][T14076] ? copy_msghdr_from_user+0x10a/0x160 [ 704.118439][T14076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.118476][T14076] ___sys_sendmsg+0x134/0x1d0 [ 704.118498][T14076] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.118549][T14076] __sys_sendmsg+0x16d/0x220 [ 704.118572][T14076] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.118609][T14076] do_syscall_64+0xcd/0x4e0 [ 704.118634][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.118651][T14076] RIP: 0033:0x7fad3d98eec9 [ 704.118665][T14076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.118680][T14076] RSP: 002b:00007fad3e914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.118696][T14076] RAX: ffffffffffffffda RBX: 00007fad3dbe5fa0 RCX: 00007fad3d98eec9 [ 704.118706][T14076] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 704.118717][T14076] RBP: 00007fad3e914090 R08: 0000000000000000 R09: 0000000000000000 [ 704.118727][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.118736][T14076] R13: 00007fad3dbe6038 R14: 00007fad3dbe5fa0 R15: 00007ffcbe182738 [ 704.118759][T14076] [ 704.310051][ T5965] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 704.362119][ T5965] usb 1-1: USB disconnect, device number 49 [ 704.712338][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2098'. [ 704.828222][T14091] sd 0:0:1:0: device reset [ 705.841596][T14102] sd 0:0:1:0: device reset [ 706.492028][T14106] netlink: 'syz.1.2104': attribute type 3 has an invalid length. [ 706.499926][T14106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2104'. [ 707.053978][T14111] sysfs: Unknown parameter 'lowerdir' [ 707.081856][ T30] audit: type=1400 audit(1759021974.254:985): avc: denied { remount } for pid=14109 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 707.326859][ T5965] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 708.056225][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 708.172113][ T5965] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 708.180930][ T5965] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 708.196438][ T30] audit: type=1400 audit(1759021975.384:986): avc: denied { accept } for pid=14119 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 708.309651][ T5965] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 708.328772][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 708.353197][ T5965] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 708.377963][ T5965] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 708.555878][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2110'. [ 708.654555][ T5965] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 708.666518][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.680039][ T5965] usb 1-1: config 0 descriptor?? [ 708.897051][ T5965] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 709.148132][T14133] netlink: 'syz.3.2112': attribute type 3 has an invalid length. [ 709.155972][T14133] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2112'. [ 709.175067][T14137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.184962][T14137] netlink: 'syz.1.2113': attribute type 3 has an invalid length. [ 709.192674][T14137] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2113'. [ 709.685825][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2115'. [ 710.291194][T14146] overlay: ./file0 is not a directory [ 710.306093][ T5961] usb 1-1: USB disconnect, device number 50 [ 710.340080][ T5961] usblp0: removed [ 713.235565][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 713.407308][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 713.419311][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.427953][ T10] usb 3-1: Product: syz [ 713.574355][T14197] netlink: 'syz.1.2126': attribute type 3 has an invalid length. [ 713.582214][T14197] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2126'. [ 713.998271][ T10] usb 3-1: Manufacturer: syz [ 714.014002][ T10] usb 3-1: SerialNumber: syz [ 714.044371][ T10] usb 3-1: config 0 descriptor?? [ 714.260186][ T30] audit: type=1400 audit(1759021981.464:987): avc: denied { ioctl } for pid=14198 comm="syz.4.2127" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 714.488219][ T10] usb 3-1: ignoring: probably an ADSL modem [ 714.524474][T14206] input: syz0 as /devices/virtual/input/input36 [ 715.162850][ T10] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 715.214548][ T30] audit: type=1400 audit(1759021982.414:988): avc: denied { setopt } for pid=14207 comm="syz.0.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 715.221531][ T10] usb 3-1: USB disconnect, device number 38 [ 715.245139][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 715.580755][T14214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'. [ 715.724134][T14215] sd 0:0:1:0: device reset [ 716.387064][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2133'. [ 716.832034][T14220] bond0: (slave bond_slave_1): Releasing backup interface [ 716.868044][T14231] input: syz0 as /devices/virtual/input/input37 [ 717.040814][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2137'. [ 718.313927][T14245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.793085][T14256] input: syz0 as /devices/virtual/input/input38 [ 719.973009][T14261] lo speed is unknown, defaulting to 1000 [ 720.023896][ T5961] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 720.255248][ T5961] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.276419][ T5961] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.427567][ T5961] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 720.512529][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.744713][T14260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.753937][ T5961] usb 1-1: usb_control_msg returned -32 [ 720.759506][ T5961] usbtmc 1-1:16.0: can't read capabilities [ 720.766679][T14260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.903143][T14273] syz_tun: entered allmulticast mode [ 722.464499][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2148'. [ 722.558102][T14289] sd 0:0:1:0: device reset [ 722.952037][ T43] usb 1-1: USB disconnect, device number 51 [ 723.553338][T14298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14298 comm=syz.2.2155 [ 723.623701][T14271] syz_tun: left allmulticast mode [ 723.963848][ T5961] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 724.417161][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 724.472553][ T5961] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 724.513911][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.557248][ T5961] usb 3-1: Product: syz [ 724.562228][ T5961] usb 3-1: Manufacturer: syz [ 724.571246][ T5961] usb 3-1: SerialNumber: syz [ 724.589646][ T5961] usb 3-1: config 0 descriptor?? [ 724.605957][ T5961] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 724.727848][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 725.006318][ T5965] usb 3-1: USB disconnect, device number 39 [ 725.958296][ T30] audit: type=1400 audit(1759021992.934:989): avc: denied { mount } for pid=14323 comm="syz.2.2163" name="/" dev="rpc_pipefs" ino=49409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 726.058429][T14326] tmpfs: Unknown parameter '01777777777777777777777' [ 726.614004][ T30] audit: type=1400 audit(1759021993.764:990): avc: denied { append } for pid=14330 comm="syz.2.2165" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 726.651817][T14333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2165'. [ 726.859737][T14334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2165'. [ 727.213914][ T5961] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 727.515405][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 727.554372][ T5961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 727.619227][ T5961] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 727.673867][ T5961] usb 3-1: config 7 has no interface number 0 [ 727.684071][ T5961] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7 [ 727.703895][ T5961] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024 [ 727.769251][ T5961] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.843791][ T5961] usb 3-1: config 7 interface 58 has no altsetting 0 [ 727.875316][ T5961] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 727.913869][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.032414][T14347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.073989][ T5961] usb 3-1: Product: syz [ 728.078205][ T5961] usb 3-1: Manufacturer: Ь [ 728.082739][ T5961] usb 3-1: SerialNumber: syz [ 728.903853][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 729.157997][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 729.336444][T14358] mkiss: ax0: crc mode is auto. [ 729.369720][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.386109][T14362] fuse: Bad value for 'group_id' [ 729.392080][T14362] fuse: Bad value for 'group_id' [ 729.404933][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.442654][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 729.476713][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'. [ 729.493066][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 729.504523][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 729.533275][ T10] usb 1-1: Manufacturer: syz [ 729.557554][ T10] usb 1-1: config 0 descriptor?? [ 729.724106][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 729.735140][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 729.745679][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 729.755433][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 729.765387][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 729.775023][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 729.784996][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 729.794599][T14357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 729.804081][T14357] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 729.863825][ T5961] usb 3-1: USB disconnect, device number 40 [ 729.953954][ T5965] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 730.035169][ T10] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 730.075632][ T10] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 730.109571][T14376]  [ 730.119681][ T5965] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 730.131761][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.141174][ T5965] usb 4-1: Product: syz [ 730.145848][ T5965] usb 4-1: Manufacturer: syz [ 730.151513][ T5965] usb 4-1: SerialNumber: syz [ 730.161710][ T5965] usb 4-1: config 0 descriptor?? [ 730.286997][ T30] audit: type=1400 audit(1759021997.494:991): avc: denied { write } for pid=14378 comm="syz.4.2177" name="file0" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 730.429619][ T30] audit: type=1400 audit(1759021997.514:992): avc: denied { open } for pid=14378 comm="syz.4.2177" path="/401/file0" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 730.452446][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.491475][ T30] audit: type=1400 audit(1759021997.524:993): avc: denied { ioctl } for pid=14378 comm="syz.4.2177" path="/401/file0" dev="tmpfs" ino=2161 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 731.073324][T14385] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 731.159377][ T5965] usb 4-1: ignoring: probably an ADSL modem [ 731.199531][ T5961] usb 1-1: USB disconnect, device number 52 [ 731.290766][ T5965] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 731.301015][ T5965] usb 4-1: USB disconnect, device number 54 [ 731.650025][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 732.130961][T14396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.033502][T14427] tipc: Enabled bearer , priority 0 [ 735.063624][T14427] tipc: Resetting bearer [ 735.144744][T14430] FAULT_INJECTION: forcing a failure. [ 735.144744][T14430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.157926][T14430] CPU: 1 UID: 0 PID: 14430 Comm: syz.3.2190 Not tainted syzkaller #0 PREEMPT(full) [ 735.157948][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.157959][T14430] Call Trace: [ 735.157971][T14430] [ 735.157978][T14430] dump_stack_lvl+0x16c/0x1f0 [ 735.158006][T14430] should_fail_ex+0x512/0x640 [ 735.158032][T14430] _copy_to_user+0x32/0xd0 [ 735.158060][T14430] simple_read_from_buffer+0xcb/0x170 [ 735.158082][T14430] proc_fail_nth_read+0x197/0x240 [ 735.158104][T14430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.158126][T14430] ? rw_verify_area+0xcf/0x6c0 [ 735.158153][T14430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.158174][T14430] vfs_read+0x1e4/0xcf0 [ 735.158196][T14430] ? __pfx___mutex_lock+0x10/0x10 [ 735.158220][T14430] ? __pfx_vfs_read+0x10/0x10 [ 735.158245][T14430] ? __fget_files+0x20e/0x3c0 [ 735.158273][T14430] ksys_read+0x12a/0x250 [ 735.158291][T14430] ? __pfx_ksys_read+0x10/0x10 [ 735.158309][T14430] ? fput+0x9b/0xd0 [ 735.158336][T14430] do_syscall_64+0xcd/0x4e0 [ 735.158362][T14430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.158380][T14430] RIP: 0033:0x7f1ebbb8d8dc [ 735.158395][T14430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 735.158412][T14430] RSP: 002b:00007f1ebc958030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.158429][T14430] RAX: ffffffffffffffda RBX: 00007f1ebbde6090 RCX: 00007f1ebbb8d8dc [ 735.158441][T14430] RDX: 000000000000000f RSI: 00007f1ebc9580a0 RDI: 000000000000000b [ 735.158451][T14430] RBP: 00007f1ebc958090 R08: 0000000000000000 R09: 0000000000000000 [ 735.158462][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.158472][T14430] R13: 00007f1ebbde6128 R14: 00007f1ebbde6090 R15: 00007ffdf5c0dc58 [ 735.158495][T14430] [ 735.512665][T14424] tipc: Disabling bearer [ 736.516873][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 736.576238][ T24] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 736.613537][ T24] usb 5-1: USB disconnect, device number 44 [ 737.035681][T14458] lo speed is unknown, defaulting to 1000 [ 737.106615][ T5850] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 737.235473][T14451] bond7: entered promiscuous mode [ 737.263553][ T5850] usb 4-1: device descriptor read/64, error -71 [ 737.426249][ T30] audit: type=1400 audit(1759022004.594:994): avc: denied { listen } for pid=14462 comm="syz.0.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 737.634101][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 737.693816][ T5850] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 737.821179][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 737.833839][ T5850] usb 4-1: device descriptor read/64, error -71 [ 737.865486][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.925178][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 737.948235][ T5850] usb usb4-port1: attempt power cycle [ 738.003825][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.042562][ T10] usb 1-1: config 0 descriptor?? [ 738.303810][ T5850] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 738.456411][ T5850] usb 4-1: device descriptor read/8, error -71 [ 739.036167][ T10] aquacomputer_d5next 0003:0C70:F011.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 739.258803][ T5850] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 739.274562][ T10] usb 1-1: USB disconnect, device number 53 [ 739.324557][ T5850] usb 4-1: device descriptor read/8, error -71 [ 739.386226][T14477] fido_id[14477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 739.443218][ T5850] usb usb4-port1: unable to enumerate USB device [ 740.848645][T14506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.873224][T14506] netlink: 'syz.0.2208': attribute type 3 has an invalid length. [ 740.881032][T14506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2208'. [ 741.214349][ T5850] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 741.793835][T14511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.806433][T14511] netlink: 'syz.1.2210': attribute type 3 has an invalid length. [ 741.814269][T14511] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2210'. [ 741.877037][ T30] audit: type=1400 audit(1759022009.054:995): avc: denied { getopt } for pid=14509 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 742.514071][ T5850] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 742.567731][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.598999][ T5850] usb 4-1: Product: syz [ 742.603343][ T5850] usb 4-1: Manufacturer: syz [ 742.605281][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'. [ 742.608337][ T30] audit: type=1400 audit(1759022009.814:996): avc: denied { bind } for pid=14517 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.663977][ T5850] usb 4-1: SerialNumber: syz [ 742.709352][ T5850] usb 4-1: config 0 descriptor?? [ 743.843609][ T5850] usb 4-1: ignoring: probably an ADSL modem [ 743.883330][ T5850] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 743.883772][T14541] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 743.900994][T14541] exFAT-fs (nullb0): invalid boot record signature [ 743.908115][T14541] exFAT-fs (nullb0): failed to read boot sector [ 743.914607][T14541] exFAT-fs (nullb0): failed to recognize exfat type [ 743.972980][ T5850] usb 4-1: USB disconnect, device number 59 [ 744.187997][T14547] macsec1: entered allmulticast mode [ 744.203591][T14547] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 744.520271][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 745.453824][ T5961] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 745.582042][T14568] fuse: Unknown parameter 'grou00000000000000000000' [ 745.613851][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 745.620911][ T5961] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 745.632728][ T5961] usb 4-1: config 179 has no interface number 0 [ 745.652834][ T5961] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 745.695221][ T5961] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 745.718609][ T5961] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.742917][ T5961] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 745.764713][ T5961] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 745.911039][ T5961] usb 4-1: config 179 interface 65 has no altsetting 0 [ 745.941391][ T5961] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 745.956346][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.989755][ T5961] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input40 [ 746.765794][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.161155][T14585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.457042][ T5965] usb 4-1: USB disconnect, device number 60 [ 748.457071][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 749.545688][T14610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25970 sclass=netlink_route_socket pid=14610 comm=syz.1.2237 [ 749.675582][T14617] fuse: Unknown parameter 'grou00000000000000000000' [ 749.682353][ T30] audit: type=1400 audit(1759022016.884:997): avc: denied { accept } for pid=14614 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 749.701817][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.206503][T14631] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2243'. [ 751.287913][ T30] audit: type=1400 audit(1759022018.464:998): avc: denied { bind } for pid=14625 comm="syz.3.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 751.743527][T14645] netlink: 'syz.1.2242': attribute type 3 has an invalid length. [ 751.751380][T14645] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2242'. [ 753.196631][T14644] lo speed is unknown, defaulting to 1000 [ 753.360732][T14660] fuse: Unknown parameter 'grou00000000000000000000' [ 754.754052][ T24] IPVS: starting estimator thread 0... [ 754.820586][T14679] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 754.834572][T14679] exFAT-fs (nullb0): invalid boot record signature [ 754.842152][T14679] exFAT-fs (nullb0): failed to read boot sector [ 754.849304][T14679] exFAT-fs (nullb0): failed to recognize exfat type [ 754.864108][T14672] IPVS: using max 50 ests per chain, 120000 per kthread [ 755.003120][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'. [ 755.353021][T14693] netlink: 'syz.2.2260': attribute type 3 has an invalid length. [ 755.361020][T14693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2260'. [ 756.420348][T14706] tipc: Enabled bearer , priority 0 [ 756.477139][T14704] tipc: Resetting bearer [ 756.627957][T14703] tipc: Disabling bearer [ 756.867963][T14710] fuse: Unknown parameter 'group_i00000000000000000000' [ 759.335621][T14745] input: syz0 as /devices/virtual/input/input41 [ 759.814098][ T30] audit: type=1400 audit(1759022027.024:999): avc: denied { write } for pid=14757 comm="syz.0.2278" path="socket:[50431]" dev="sockfs" ino=50431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 759.837622][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.073808][T14764] netlink: 'syz.3.2276': attribute type 3 has an invalid length. [ 760.081617][T14764] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2276'. [ 760.099834][T14765] sd 0:0:1:0: device reset [ 760.766370][T14775] omfs: Invalid superblock (0) [ 760.943481][ T30] audit: type=1400 audit(1759022028.144:1000): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.042882][ T30] audit: type=1400 audit(1759022028.144:1001): avc: denied { read } for pid=14777 comm="syz.1.2283" name="media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 761.197722][ T30] audit: type=1400 audit(1759022028.144:1002): avc: denied { open } for pid=14777 comm="syz.1.2283" path="/dev/media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 761.220919][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.470705][ T30] audit: type=1400 audit(1759022028.144:1003): avc: denied { read } for pid=14777 comm="syz.1.2283" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 761.585031][ T30] audit: type=1400 audit(1759022028.144:1004): avc: denied { open } for pid=14777 comm="syz.1.2283" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 761.608932][ T30] audit: type=1400 audit(1759022028.144:1005): avc: denied { prog_load } for pid=14777 comm="syz.1.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 761.628284][ T30] audit: type=1400 audit(1759022028.144:1006): avc: denied { bpf } for pid=14777 comm="syz.1.2283" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 761.653561][ T30] audit: type=1400 audit(1759022028.214:1007): avc: denied { open } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.678426][ T30] audit: type=1400 audit(1759022028.224:1008): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.704016][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.824119][ T5961] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 762.177652][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.188814][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.201716][ T5961] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 762.211072][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.219914][ T5961] usb 3-1: Product: syz [ 762.229448][ T5961] usb 3-1: Manufacturer: syz [ 762.240769][ T5961] usb 3-1: SerialNumber: syz [ 762.251117][ T5961] usb 3-1: config 0 descriptor?? [ 762.304015][ T5961] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 762.323019][ T5961] usb 3-1: No valid video chain found. [ 762.543865][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 762.697568][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.707803][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 762.718901][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 762.753091][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.788262][ T10] usb 2-1: config 0 descriptor?? [ 762.924159][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 762.930883][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 762.957694][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 762.967693][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 762.976817][ T10] usb 2-1: media controller created [ 762.983849][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.021196][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 763.047718][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 763.058324][T14817] binder: BINDER_SET_CONTEXT_MGR already set [ 763.064540][T14817] binder: 14816:14817 ioctl 4018620d 200000004a80 returned -16 [ 763.065524][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 763.104404][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 763.112639][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 763.130749][T14808] dibusb: i2c wr: len=61 is too big! [ 763.130749][T14808] [ 763.139509][T14818] FAULT_INJECTION: forcing a failure. [ 763.139509][T14818] name failslab, interval 1, probability 0, space 0, times 0 [ 763.144484][T14808] netlink: 'syz.1.2288': attribute type 7 has an invalid length. [ 763.166899][T14808] netlink: 'syz.1.2288': attribute type 8 has an invalid length. [ 763.183802][T14818] CPU: 1 UID: 0 PID: 14818 Comm: syz.3.2292 Not tainted syzkaller #0 PREEMPT(full) [ 763.183824][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.183834][T14818] Call Trace: [ 763.183840][T14818] [ 763.183846][T14818] dump_stack_lvl+0x16c/0x1f0 [ 763.183871][T14818] should_fail_ex+0x512/0x640 [ 763.183896][T14818] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 763.183923][T14818] should_failslab+0xc2/0x120 [ 763.183942][T14818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 763.183963][T14818] ? binder_get_thread+0x1eb/0x8c0 [ 763.183986][T14818] ? binder_get_thread+0x225/0x8c0 [ 763.184007][T14818] binder_get_thread+0x225/0x8c0 [ 763.184028][T14818] ? rcu_is_watching+0x12/0xc0 [ 763.184049][T14818] binder_ioctl+0x20f/0x71f0 [ 763.184079][T14818] ? tomoyo_path_number_perm+0x18d/0x580 [ 763.184106][T14818] ? __pfx_binder_ioctl+0x10/0x10 [ 763.184131][T14818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 763.184153][T14818] ? do_vfs_ioctl+0x128/0x14f0 [ 763.184178][T14818] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 763.184201][T14818] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 763.184232][T14818] ? hook_file_ioctl_common+0x145/0x410 [ 763.184252][T14818] ? selinux_file_ioctl+0x180/0x270 [ 763.184271][T14818] ? selinux_file_ioctl+0xb4/0x270 [ 763.184295][T14818] ? __pfx_binder_ioctl+0x10/0x10 [ 763.184321][T14818] __x64_sys_ioctl+0x18e/0x210 [ 763.184348][T14818] do_syscall_64+0xcd/0x4e0 [ 763.184372][T14818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.184389][T14818] RIP: 0033:0x7f1ebbb8eec9 [ 763.184403][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.184419][T14818] RSP: 002b:00007f1ebc958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.184435][T14818] RAX: ffffffffffffffda RBX: 00007f1ebbde6090 RCX: 00007f1ebbb8eec9 [ 763.184446][T14818] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 763.184456][T14818] RBP: 00007f1ebc958090 R08: 0000000000000000 R09: 0000000000000000 [ 763.184465][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.184475][T14818] R13: 00007f1ebbde6128 R14: 00007f1ebbde6090 R15: 00007ffdf5c0dc58 [ 763.184498][T14818] [ 763.412659][T14818] binder: 14816:14818 ioctl c0306201 200000000440 returned -12 [ 763.413006][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 763.430296][ T10] dvb-usb: error while querying for an remote control event. [ 763.633919][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 763.639721][ T10] dvb-usb: error while querying for an remote control event. [ 763.854692][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 764.090445][ T10] dvb-usb: error while querying for an remote control event. [ 764.275118][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 764.280925][ T10] dvb-usb: error while querying for an remote control event. [ 764.444195][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 764.453811][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 764.462213][ T10] dvb-usb: error while querying for an remote control event. [ 764.565104][ T5850] usb 3-1: USB disconnect, device number 41 [ 764.605532][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 764.625669][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 764.638900][ T10] dvb-usb: error while querying for an remote control event. [ 764.652262][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 764.696222][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 764.723024][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 764.765164][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 764.803429][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 764.815919][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 764.823360][ T5961] dvb-usb: error while querying for an remote control event. [ 764.831260][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 764.842617][ T24] usb 4-1: Product: syz [ 764.861421][ T24] usb 4-1: Manufacturer: syz [ 764.925791][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 764.931256][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 764.965630][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 764.981119][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 764.994155][ T5961] dvb-usb: bulk message failed: -22 (1/0) [ 765.024241][ T5850] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 765.231597][ T5961] dvb-usb: error while querying for an remote control event. [ 765.376304][ T5961] usb 2-1: USB disconnect, device number 46 [ 765.382348][ T5850] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 765.416283][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 765.416297][ T30] audit: type=1400 audit(1759022032.614:1062): avc: denied { read } for pid=14834 comm="syz.0.2299" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 765.451361][ T5850] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.473141][ T5850] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.536987][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.538522][ T5961] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 765.915454][ T5850] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.933650][ T30] audit: type=1400 audit(1759022032.614:1063): avc: denied { open } for pid=14834 comm="syz.0.2299" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 765.945870][ T5850] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.989770][ T30] audit: type=1400 audit(1759022032.624:1064): avc: denied { read write } for pid=14825 comm="syz.3.2295" name="cdc-wdm0" dev="devtmpfs" ino=3548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 766.106651][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 766.106870][T14849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.130164][ T5850] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.134225][ T30] audit: type=1400 audit(1759022032.624:1065): avc: denied { open } for pid=14825 comm="syz.3.2295" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 766.257478][ T5850] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.269137][T14849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.334890][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 766.354442][ T30] audit: type=1400 audit(1759022032.664:1066): avc: denied { ioctl } for pid=14834 comm="syz.0.2299" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 766.419219][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 766.923845][ T5850] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 767.173843][ T5850] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 767.193762][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.257782][T14859] atomic_op ffff888031164998 conn xmit_atomic 0000000000000000 [ 767.351509][ T30] audit: type=1400 audit(1759022032.694:1067): avc: denied { write } for pid=14834 comm="syz.0.2299" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 767.351662][ T5850] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 767.423674][ T30] audit: type=1400 audit(1759022032.764:1068): avc: denied { name_bind } for pid=14834 comm="syz.0.2299" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 767.463998][ T5850] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 767.532537][ T30] audit: type=1400 audit(1759022032.764:1069): avc: denied { node_bind } for pid=14834 comm="syz.0.2299" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 767.565109][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.757966][ T30] audit: type=1400 audit(1759022032.764:1070): avc: denied { mounton } for pid=14840 comm="syz.4.2300" path="/422/file1" dev="tmpfs" ino=2278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 767.782182][ T30] audit: type=1400 audit(1759022032.764:1071): avc: denied { mount } for pid=14840 comm="syz.4.2300" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 768.007812][ T5850] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 768.056181][ T5850] usb 3-1: can't read configurations, error -71 [ 768.319272][ T5961] usb 4-1: USB disconnect, device number 61 [ 768.891877][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 769.644484][T14879] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2309'. [ 769.658955][T14879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2309'. [ 769.829656][T14891] tipc: Enabling of bearer rejected, failed to enable media [ 769.940658][T14887] lo speed is unknown, defaulting to 1000 [ 770.743380][T14909] sd 0:0:1:0: device reset [ 770.750817][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 770.750850][ T30] audit: type=1400 audit(1759022037.944:1095): avc: denied { read } for pid=14902 comm="syz.3.2317" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 771.123341][ T30] audit: type=1400 audit(1759022037.944:1096): avc: denied { open } for pid=14902 comm="syz.3.2317" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 771.147728][ T30] audit: type=1400 audit(1759022037.944:1097): avc: denied { ioctl } for pid=14902 comm="syz.3.2317" path="/dev/sg0" dev="devtmpfs" ino=734 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 771.272234][ T30] audit: type=1400 audit(1759022038.474:1098): avc: denied { getopt } for pid=14910 comm="syz.2.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 771.329859][ T30] audit: type=1400 audit(1759022038.504:1099): avc: denied { bind } for pid=14910 comm="syz.2.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 771.778771][ T30] audit: type=1400 audit(1759022038.594:1100): avc: denied { name_bind } for pid=14910 comm="syz.2.2318" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 771.870277][T14925] binder: BINDER_SET_CONTEXT_MGR already set [ 771.876611][T14925] binder: 14924:14925 ioctl 4018620d 200000000680 returned -16 [ 771.972967][T14925] FAULT_INJECTION: forcing a failure. [ 771.972967][T14925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.991106][ T30] audit: type=1400 audit(1759022038.644:1101): avc: denied { node_bind } for pid=14910 comm="syz.2.2318" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 772.023394][T14925] CPU: 0 UID: 0 PID: 14925 Comm: syz.1.2322 Not tainted syzkaller #0 PREEMPT(full) [ 772.023411][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 772.023418][T14925] Call Trace: [ 772.023422][T14925] [ 772.023426][T14925] dump_stack_lvl+0x16c/0x1f0 [ 772.023445][T14925] should_fail_ex+0x512/0x640 [ 772.023464][T14925] _copy_from_user+0x2e/0xd0 [ 772.023480][T14925] binder_ioctl+0x51c/0x71f0 [ 772.023502][T14925] ? tomoyo_path_number_perm+0x18d/0x580 [ 772.023521][T14925] ? __pfx_binder_ioctl+0x10/0x10 [ 772.023544][T14925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.023558][T14925] ? do_vfs_ioctl+0x128/0x14f0 [ 772.023575][T14925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 772.023591][T14925] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 772.023612][T14925] ? hook_file_ioctl_common+0x145/0x410 [ 772.023626][T14925] ? selinux_file_ioctl+0x180/0x270 [ 772.023641][T14925] ? selinux_file_ioctl+0xb4/0x270 [ 772.023656][T14925] ? __pfx_binder_ioctl+0x10/0x10 [ 772.023673][T14925] __x64_sys_ioctl+0x18e/0x210 [ 772.023689][T14925] do_syscall_64+0xcd/0x4e0 [ 772.023705][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.023719][T14925] RIP: 0033:0x7f39e178eec9 [ 772.023732][T14925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.023747][T14925] RSP: 002b:00007f39e263b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.023763][T14925] RAX: ffffffffffffffda RBX: 00007f39e19e5fa0 RCX: 00007f39e178eec9 [ 772.023772][T14925] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 772.023781][T14925] RBP: 00007f39e263b090 R08: 0000000000000000 R09: 0000000000000000 [ 772.023790][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.023799][T14925] R13: 00007f39e19e6038 R14: 00007f39e19e5fa0 R15: 00007ffe79561fc8 [ 772.023822][T14925] [ 772.255470][T14925] binder: 14924:14925 ioctl c0306201 200000000180 returned -14 [ 772.414869][ T30] audit: type=1400 audit(1759022038.914:1102): avc: denied { write } for pid=14910 comm="syz.2.2318" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 772.450634][ T30] audit: type=1400 audit(1759022038.914:1103): avc: denied { name_connect } for pid=14910 comm="syz.2.2318" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 772.512111][ T30] audit: type=1400 audit(1759022039.054:1104): avc: denied { write } for pid=14912 comm="syz.0.2320" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 772.970580][T14933] netlink: 'syz.2.2323': attribute type 3 has an invalid length. [ 772.978400][T14933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2323'. [ 773.299090][T14935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.801197][T14945] lo speed is unknown, defaulting to 1000 [ 774.186980][T14951] sd 0:0:1:0: device reset [ 774.691887][T14952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2327'. [ 774.847349][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 775.285279][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2331'. [ 775.554065][ T5910] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 775.708054][T14974] overlayfs: failed to clone upperpath [ 775.733782][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 775.758451][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 775.758467][ T30] audit: type=1400 audit(1759022042.964:1115): avc: denied { name_bind } for pid=14976 comm="syz.4.2335" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 775.908616][ T5910] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 775.918380][ T5910] usb 1-1: config 0 has no interface number 0 [ 775.933806][ T5910] usb 1-1: config 0 interface 12 has no altsetting 0 [ 776.392050][ T30] audit: type=1400 audit(1759022043.244:1116): avc: denied { firmware_load } for pid=14976 comm="syz.4.2335" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 776.423794][T13898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 776.458809][ T5910] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 776.477489][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.501473][ T5910] usb 1-1: Product: syz [ 776.506800][ T5910] usb 1-1: Manufacturer: syz [ 776.513565][ T5910] usb 1-1: SerialNumber: syz [ 776.545545][ T5910] usb 1-1: config 0 descriptor?? [ 776.663832][T13898] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 776.672468][T13898] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 776.705493][T13898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 776.743799][T13898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 776.747996][T14981] overlayfs: failed to clone upperpath [ 776.783767][T13898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 776.831493][T13898] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 776.863937][T13898] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 776.871975][T13898] usb 2-1: Product: syz [ 776.892097][T13898] usb 2-1: Manufacturer: syz [ 776.940185][T13898] cdc_wdm 2-1:1.0: skipping garbage [ 776.953997][T13898] cdc_wdm 2-1:1.0: skipping garbage [ 776.978002][ T5910] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 777.002826][ T5910] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 777.101464][T13898] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 777.110316][T13898] cdc_wdm 2-1:1.0: Unknown control protocol [ 777.118272][ T5910] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 777.268986][T14990] netlink: 'syz.2.2337': attribute type 3 has an invalid length. [ 777.276775][T14990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2337'. [ 777.641790][ T30] audit: type=1400 audit(1759022044.344:1117): avc: denied { allowed } for pid=14969 comm="syz.1.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 777.646729][T14989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.663558][ T30] audit: type=1400 audit(1759022044.344:1118): avc: denied { create } for pid=14969 comm="syz.1.2333" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 777.697996][ T5910] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 777.729536][ T5910] usb 1-1: USB disconnect, device number 54 [ 777.777315][ T30] audit: type=1400 audit(1759022044.354:1119): avc: denied { map } for pid=14969 comm="syz.1.2333" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 777.873791][ T30] audit: type=1400 audit(1759022044.354:1120): avc: denied { read write } for pid=14969 comm="syz.1.2333" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 777.924649][T14970] syz.1.2333 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 778.379732][ T30] audit: type=1400 audit(1759022045.584:1121): avc: denied { bind } for pid=14994 comm="syz.2.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 778.552535][ T30] audit: type=1400 audit(1759022045.754:1122): avc: denied { mount } for pid=14994 comm="syz.2.2340" name="/" dev="ramfs" ino=51956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 778.673835][ T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 778.875870][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.889642][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.942204][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.991077][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.001145][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.031126][ T10] usb 1-1: Product: syz [ 779.042506][ T10] usb 1-1: Manufacturer: syz [ 779.061885][ T10] usb 1-1: SerialNumber: syz [ 779.088923][ T10] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 779.108365][ T10] cdc_mbim 1-1:1.0: bind() failure [ 779.530509][T15017] netlink: 'syz.2.2345': attribute type 8 has an invalid length. [ 779.738585][ T30] audit: type=1400 audit(1759022046.674:1123): avc: denied { write } for pid=15012 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 779.738790][ T10] usb 2-1: USB disconnect, device number 47 [ 779.874937][ T30] audit: type=1400 audit(1759022046.674:1124): avc: denied { read } for pid=15012 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 780.574206][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.595286][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.753850][T13898] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 782.143096][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 782.143137][ T30] audit: type=1400 audit(1759022047.974:1127): avc: denied { cmd } for pid=14996 comm="syz.0.2342" path="socket:[52054]" dev="sockfs" ino=52054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 782.553829][T13898] usb 3-1: Using ep0 maxpacket: 16 [ 782.624058][T15037] netlink: 'syz.4.2350': attribute type 3 has an invalid length. [ 782.631856][T15037] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2350'. [ 783.010708][T13898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 783.022984][T13898] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 783.037423][T13898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.047028][T13898] usb 3-1: Product: syz [ 783.051290][T13898] usb 3-1: Manufacturer: syz [ 783.057006][T13898] usb 3-1: SerialNumber: syz [ 783.066676][T13898] usb 3-1: config 0 descriptor?? [ 783.086786][T13898] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 783.096429][T13898] usb 3-1: Detected FT232R [ 783.134015][ T5961] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 783.297634][T13898] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 783.416571][ T30] audit: type=1400 audit(1759022050.594:1128): avc: denied { bind } for pid=15038 comm="syz.1.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 783.869412][ T5961] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.879740][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.894048][ T5961] usb 4-1: Product: syz [ 783.901120][ T5961] usb 4-1: Manufacturer: syz [ 783.919028][ T5850] usb 1-1: USB disconnect, device number 55 [ 783.925135][ T5961] usb 4-1: SerialNumber: syz [ 783.958081][ T5961] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 784.100980][ T5965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.126596][T13898] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 784.482740][ T30] audit: type=1400 audit(1759022051.524:1129): avc: denied { sqpoll } for pid=15048 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 784.635012][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.673879][T15053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2356'. [ 784.692696][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.703847][T15053] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2356'. [ 784.750645][ T10] IPVS: starting estimator thread 0... [ 784.768717][ T30] audit: type=1400 audit(1759022051.974:1130): avc: denied { create } for pid=15035 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 784.793326][T15053] netlink: 'syz.0.2356': attribute type 5 has an invalid length. [ 784.826467][T15053] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2356'. [ 784.854140][T15055] IPVS: using max 46 ests per chain, 110400 per kthread [ 784.875122][ T30] audit: type=1400 audit(1759022051.974:1131): avc: denied { create } for pid=15035 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 784.898439][ T30] audit: type=1400 audit(1759022051.974:1132): avc: denied { write } for pid=15035 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 784.928850][ T30] audit: type=1400 audit(1759022052.134:1133): avc: denied { create } for pid=15056 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 784.980269][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.999313][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.057022][ T30] audit: type=1400 audit(1759022052.174:1134): avc: denied { bind } for pid=15056 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 785.091842][ T5850] usb 4-1: USB disconnect, device number 62 [ 785.110957][ T30] audit: type=1400 audit(1759022052.174:1135): avc: denied { setopt } for pid=15056 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 785.130992][ T30] audit: type=1400 audit(1759022052.174:1136): avc: denied { accept } for pid=15056 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 785.614660][T15069] netlink: 'syz.1.2359': attribute type 3 has an invalid length. [ 785.622447][T15069] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2359'. [ 786.025590][ T5965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 786.032919][ T5965] ath9k_htc: Failed to initialize the device [ 786.041334][ T5850] usb 4-1: ath9k_htc: USB layer deinitialized [ 787.435814][ T5850] usb 3-1: USB disconnect, device number 44 [ 787.554827][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 787.554864][ T30] audit: type=1400 audit(1759022054.744:1146): avc: denied { mount } for pid=15080 comm="syz.4.2364" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 787.848535][ T5850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 788.004572][ T5850] ftdi_sio 3-1:0.0: device disconnected [ 788.893766][ T30] audit: type=1400 audit(1759022056.094:1147): avc: denied { unlink } for pid=15101 comm="syz.0.2369" name="#29" dev="tmpfs" ino=2482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 788.959348][ T30] audit: type=1400 audit(1759022056.124:1148): avc: denied { mount } for pid=15101 comm="syz.0.2369" name="/" dev="overlay" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 788.986050][ T30] audit: type=1400 audit(1759022056.154:1149): avc: denied { setopt } for pid=15103 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 789.011816][ T30] audit: type=1400 audit(1759022056.154:1150): avc: denied { listen } for pid=15103 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 789.036189][ T30] audit: type=1400 audit(1759022056.214:1151): avc: denied { mount } for pid=15101 comm="syz.0.2369" name="/" dev="autofs" ino=50964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 789.276524][T15111] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 789.284355][T15111] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2371'. [ 789.743287][ T30] audit: type=1400 audit(1759022056.944:1152): avc: denied { unmount } for pid=5861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 789.786156][ T30] audit: type=1400 audit(1759022056.994:1153): avc: denied { unmount } for pid=5861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 789.944905][ T30] audit: type=1326 audit(1759022057.154:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3d98eec9 code=0x7ffc0000 [ 790.028080][ T30] audit: type=1326 audit(1759022057.154:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fad3d98eec9 code=0x7ffc0000 [ 790.644333][T15129] lo speed is unknown, defaulting to 1000 [ 790.834829][T15134] sd 0:0:1:0: device reset [ 792.617958][T15156] lo speed is unknown, defaulting to 1000 [ 792.688093][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 792.688142][ T30] audit: type=1400 audit(1759022059.894:1199): avc: denied { create } for pid=15152 comm="syz.0.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 793.184526][T15165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.212468][T15188] overlayfs: failed to clone upperpath [ 794.383883][ T5961] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 794.564071][ T5965] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 794.620202][ T5961] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 794.663851][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.671954][ T5961] usb 4-1: Product: syz [ 794.676300][ T5961] usb 4-1: Manufacturer: syz [ 794.796455][ T5961] usb 4-1: SerialNumber: syz [ 794.862316][T15196] lo speed is unknown, defaulting to 1000 [ 794.868869][ T5961] usb 4-1: config 0 descriptor?? [ 794.876596][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 794.883635][ T5961] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 794.897189][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 794.912948][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.923337][ T5961] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 794.932798][ T5965] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 794.943590][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.956611][ T5961] usb 4-1: media controller created [ 794.975981][ T5965] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 795.113835][ T30] audit: type=1400 audit(1759022062.314:1200): avc: denied { append } for pid=15185 comm="syz.3.2392" name="i2c-1" dev="devtmpfs" ino=3580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.137043][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.145367][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.128309][ T5965] usb 2-1: Product: syz [ 796.137400][ T5965] usb 2-1: Manufacturer: syz [ 796.143610][ T5965] usb 2-1: SerialNumber: syz [ 796.152804][T15193] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 796.180947][ T30] audit: type=1400 audit(1759022063.254:1201): avc: denied { ioctl } for pid=15185 comm="syz.3.2392" path="socket:[51151]" dev="sockfs" ino=51151 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 796.501933][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.530179][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.552494][ T5961] DVB: Unable to find symbol mt352_attach() [ 796.600586][ T5965] usblp0: Disabling reads from problematic bidirectional printer [ 796.610014][ T5965] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 796.661855][ T5961] DVB: Unable to find symbol nxt6000_attach() [ 796.670413][ T5965] usb 2-1: USB disconnect, device number 48 [ 796.703195][ T5961] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 796.722064][ T5965] usblp0: removed [ 796.732474][ T5961] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 796.791101][ T5961] dvb-usb: schedule remote query interval to 1000 msecs. [ 796.799228][ T5961] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 796.812632][ T5961] dvb-usb: bulk message failed: -22 (7/0) [ 796.820932][ T5961] dvb-usb: bulk message failed: -22 (7/0) [ 797.802910][ T5850] usb 4-1: USB disconnect, device number 63 [ 797.816573][ T30] audit: type=1400 audit(1759022064.984:1202): avc: denied { read append } for pid=15214 comm="syz.0.2400" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 797.853634][ T30] audit: type=1400 audit(1759022064.984:1203): avc: denied { open } for pid=15214 comm="syz.0.2400" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 797.902629][ T30] audit: type=1400 audit(1759022065.054:1204): avc: denied { mounton } for pid=15220 comm="syz.2.2402" path="/496/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 798.093179][ T5850] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 798.193553][T15226] sd 0:0:1:0: device reset [ 798.556975][ T30] audit: type=1400 audit(1759022065.054:1205): avc: denied { read write } for pid=15220 comm="syz.2.2402" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 798.580857][ T30] audit: type=1400 audit(1759022065.054:1206): avc: denied { open } for pid=15220 comm="syz.2.2402" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 798.626365][ T30] audit: type=1400 audit(1759022065.054:1207): avc: denied { ioctl } for pid=15220 comm="syz.2.2402" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 798.910910][ T30] audit: type=1400 audit(1759022066.114:1208): avc: denied { read } for pid=15229 comm="syz.3.2405" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 799.013734][ T30] audit: type=1400 audit(1759022066.114:1209): avc: denied { open } for pid=15229 comm="syz.3.2405" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 799.165865][ T30] audit: type=1400 audit(1759022066.164:1210): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 799.243791][ T30] audit: type=1400 audit(1759022066.254:1211): avc: denied { read write } for pid=15234 comm="syz.2.2406" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 800.365752][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 800.540651][T15255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15255 comm=syz.3.2411 [ 800.559998][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 801.334845][T15267] sd 0:0:1:0: device reset [ 801.737460][T15273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.378167][T13898] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 802.745832][T13898] usb 2-1: Using ep0 maxpacket: 32 [ 802.801109][T13898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 802.891737][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 802.938014][T13898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.003556][T13898] usb 2-1: Product: syz [ 803.025525][T13898] usb 2-1: Manufacturer: syz [ 803.055618][T13898] usb 2-1: SerialNumber: syz [ 803.200108][T13898] usb 2-1: config 0 descriptor?? [ 803.663952][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 803.663997][ T30] audit: type=1400 audit(1759022070.864:1215): avc: denied { load_policy } for pid=15280 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 804.683755][T13898] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 805.774987][T13898] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 806.519471][ T5961] usb 2-1: USB disconnect, device number 49 [ 806.562350][T15318] netlink: 'syz.0.2423': attribute type 3 has an invalid length. [ 806.595390][T15318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2423'. [ 807.039750][T15330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 807.050520][T15330] team0: Port device batadv1 added [ 807.503537][T15336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.169766][T15343] sd 0:0:1:0: device reset [ 808.557928][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.589709][ T30] audit: type=1400 audit(1759022075.784:1216): avc: denied { getopt } for pid=15338 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 808.613064][ T30] audit: type=1400 audit(1759022075.794:1217): avc: denied { execute } for pid=15338 comm="syz.1.2432" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 808.655662][T15347] FAULT_INJECTION: forcing a failure. [ 808.655662][T15347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.656890][T15347] [ 808.656895][T15347] ====================================================== [ 808.656899][T15347] WARNING: possible circular locking dependency detected [ 808.656904][T15347] syzkaller #0 Not tainted [ 808.656909][T15347] ------------------------------------------------------ [ 808.656912][T15347] syz.3.2433/15347 is trying to acquire lock: [ 808.656918][T15347] ffffffff8e4cecc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 808.656946][T15347] [ 808.656946][T15347] but task is already holding lock: [ 808.656949][T15347] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 808.656973][T15347] [ 808.656973][T15347] which lock already depends on the new lock. [ 808.656973][T15347] [ 808.656976][T15347] [ 808.656976][T15347] the existing dependency chain (in reverse order) is: [ 808.656979][T15347] [ 808.656979][T15347] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 808.656991][T15347] _raw_spin_lock_nested+0x31/0x40 [ 808.657003][T15347] raw_spin_rq_lock_nested+0x29/0x130 [ 808.657014][T15347] task_rq_lock+0xcf/0x490 [ 808.657025][T15347] cgroup_move_task+0x81/0x2a0 [ 808.657039][T15347] css_set_move_task+0x288/0x5f0 [ 808.657048][T15347] cgroup_post_fork+0x201/0x9e0 [ 808.657060][T15347] copy_process+0x5cfa/0x7690 [ 808.657073][T15347] kernel_clone+0xfc/0x930 [ 808.657086][T15347] user_mode_thread+0xc7/0x110 [ 808.657099][T15347] rest_init+0x23/0x2b0 [ 808.657107][T15347] start_kernel+0x3ee/0x4d0 [ 808.657118][T15347] x86_64_start_reservations+0x18/0x30 [ 808.657130][T15347] x86_64_start_kernel+0x130/0x190 [ 808.657142][T15347] common_startup_64+0x13e/0x148 [ 808.657152][T15347] [ 808.657152][T15347] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 808.657164][T15347] _raw_spin_lock_irqsave+0x3a/0x60 [ 808.657175][T15347] try_to_wake_up+0xb7/0x1870 [ 808.657186][T15347] __wake_up_common+0x132/0x1f0 [ 808.657200][T15347] __wake_up+0x31/0x60 [ 808.657212][T15347] tty_port_default_wakeup+0x2a/0x40 [ 808.657226][T15347] serial8250_tx_chars+0x68e/0x860 [ 808.657239][T15347] serial8250_handle_irq+0x761/0xcb0 [ 808.657253][T15347] serial8250_default_handle_irq+0x9a/0x250 [ 808.657267][T15347] serial8250_interrupt+0xf5/0x1b0 [ 808.657281][T15347] __handle_irq_event_percpu+0x229/0x7d0 [ 808.657293][T15347] handle_irq_event+0xab/0x1e0 [ 808.657304][T15347] handle_edge_irq+0x3ca/0x9e0 [ 808.657316][T15347] __common_interrupt+0xcd/0x2f0 [ 808.657329][T15347] common_interrupt+0xba/0xe0 [ 808.657338][T15347] asm_common_interrupt+0x26/0x40 [ 808.657347][T15347] pv_native_safe_halt+0xf/0x20 [ 808.657359][T15347] default_idle+0x13/0x20 [ 808.657372][T15347] default_idle_call+0x6d/0xb0 [ 808.657386][T15347] do_idle+0x391/0x510 [ 808.657397][T15347] cpu_startup_entry+0x4f/0x60 [ 808.657432][T15347] start_secondary+0x21d/0x2b0 [ 808.657446][T15347] common_startup_64+0x13e/0x148 [ 808.657456][T15347] [ 808.657456][T15347] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 808.657469][T15347] _raw_spin_lock_irqsave+0x3a/0x60 [ 808.657479][T15347] __wake_up+0x1c/0x60 [ 808.657491][T15347] tty_port_default_wakeup+0x2a/0x40 [ 808.657504][T15347] serial8250_tx_chars+0x68e/0x860 [ 808.657516][T15347] serial8250_handle_irq+0x761/0xcb0 [ 808.657530][T15347] serial8250_default_handle_irq+0x9a/0x250 [ 808.657544][T15347] serial8250_interrupt+0xf5/0x1b0 [ 808.657558][T15347] __handle_irq_event_percpu+0x229/0x7d0 [ 808.657570][T15347] handle_irq_event+0xab/0x1e0 [ 808.657582][T15347] handle_edge_irq+0x3ca/0x9e0 [ 808.657592][T15347] __common_interrupt+0xcd/0x2f0 [ 808.657604][T15347] common_interrupt+0xba/0xe0 [ 808.657612][T15347] asm_common_interrupt+0x26/0x40 [ 808.657621][T15347] pv_native_safe_halt+0xf/0x20 [ 808.657632][T15347] default_idle+0x13/0x20 [ 808.657645][T15347] default_idle_call+0x6d/0xb0 [ 808.657659][T15347] do_idle+0x391/0x510 [ 808.657669][T15347] cpu_startup_entry+0x4f/0x60 [ 808.657680][T15347] start_secondary+0x21d/0x2b0 [ 808.657707][T15347] common_startup_64+0x13e/0x148 [ 808.657740][T15347] [ 808.657740][T15347] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 808.657776][T15347] _raw_spin_lock_irqsave+0x3a/0x60 [ 808.657809][T15347] serial8250_console_write+0x181/0x1890 [ 808.657837][T15347] console_flush_all+0x801/0xc60 [ 808.657848][T15347] console_unlock+0xd8/0x210 [ 808.657882][T15347] vprintk_emit+0x418/0x6d0 [ 808.657916][T15347] _printk+0xc7/0x100 [ 808.657924][T15347] register_console+0xc2d/0x11b0 [ 808.657936][T15347] univ8250_console_init+0x5f/0x90 [ 808.657949][T15347] console_init+0x14f/0x680 [ 808.657960][T15347] start_kernel+0x29f/0x4d0 [ 808.657971][T15347] x86_64_start_reservations+0x18/0x30 [ 808.657983][T15347] x86_64_start_kernel+0x130/0x190 [ 808.657994][T15347] common_startup_64+0x13e/0x148 [ 808.658004][T15347] [ 808.658004][T15347] -> #0 (console_owner){-.-.}-{0:0}: [ 808.658016][T15347] __lock_acquire+0x12a6/0x1ce0 [ 808.658030][T15347] lock_acquire+0x179/0x350 [ 808.658038][T15347] console_lock_spinning_enable+0xb0/0xd0 [ 808.658049][T15347] console_flush_all+0x7aa/0xc60 [ 808.658060][T15347] console_unlock+0xd8/0x210 [ 808.658070][T15347] vprintk_emit+0x418/0x6d0 [ 808.658081][T15347] _printk+0xc7/0x100 [ 808.658089][T15347] should_fail_ex+0x4e7/0x640 [ 808.658101][T15347] strncpy_from_user+0x3b/0x2e0 [ 808.658111][T15347] strncpy_from_user_nofault+0x7f/0x180 [ 808.658124][T15347] bpf_probe_read_user_str+0x26/0x70 [ 808.658138][T15347] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 808.658146][T15347] bpf_trace_run4+0x252/0x5b0 [ 808.658156][T15347] __bpf_trace_sched_switch+0x145/0x190 [ 808.658168][T15347] __traceiter_sched_switch+0x6c/0xc0 [ 808.658178][T15347] __schedule+0x183b/0x5de0 [ 808.658188][T15347] schedule+0xe7/0x3a0 [ 808.658198][T15347] ax25_accept+0x3d6/0x9c0 [ 808.658207][T15347] do_accept+0x33b/0x530 [ 808.658217][T15347] __sys_accept4+0x100/0x1c0 [ 808.658225][T15347] __x64_sys_accept4+0x96/0x100 [ 808.658234][T15347] do_syscall_64+0xcd/0x4e0 [ 808.658247][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.658256][T15347] [ 808.658256][T15347] other info that might help us debug this: [ 808.658256][T15347] [ 808.658260][T15347] Chain exists of: [ 808.658260][T15347] console_owner --> &p->pi_lock --> &rq->__lock [ 808.658260][T15347] [ 808.658273][T15347] Possible unsafe locking scenario: [ 808.658273][T15347] [ 808.658276][T15347] CPU0 CPU1 [ 808.658279][T15347] ---- ---- [ 808.658282][T15347] lock(&rq->__lock); [ 808.658288][T15347] lock(&p->pi_lock); [ 808.658295][T15347] lock(&rq->__lock); [ 808.658301][T15347] lock(console_owner); [ 808.658307][T15347] [ 808.658307][T15347] *** DEADLOCK *** [ 808.658307][T15347] [ 808.658310][T15347] 4 locks held by syz.3.2433/15347: [ 808.658315][T15347] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 808.658339][T15347] #1: ffffffff8e5c16a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 808.658361][T15347] #2: ffffffff8e5af100 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 808.658381][T15347] #3: ffffffff8e5af170 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 808.658408][T15347] [ 808.658408][T15347] stack backtrace: [ 808.658413][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.3.2433 Not tainted syzkaller #0 PREEMPT(full) [ 808.658425][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 808.658431][T15347] Call Trace: [ 808.658434][T15347] [ 808.658439][T15347] dump_stack_lvl+0x116/0x1f0 [ 808.658453][T15347] print_circular_bug+0x275/0x350 [ 808.658468][T15347] check_noncircular+0x14c/0x170 [ 808.658485][T15347] __lock_acquire+0x12a6/0x1ce0 [ 808.658503][T15347] lock_acquire+0x179/0x350 [ 808.658511][T15347] ? console_lock_spinning_enable+0x9f/0xd0 [ 808.658524][T15347] ? console_lock_spinning_enable+0x88/0xd0 [ 808.658537][T15347] console_lock_spinning_enable+0xb0/0xd0 [ 808.658549][T15347] ? console_lock_spinning_enable+0x9f/0xd0 [ 808.658561][T15347] console_flush_all+0x7aa/0xc60 [ 808.658574][T15347] ? __pfx_console_flush_all+0x10/0x10 [ 808.658588][T15347] ? is_printk_cpu_sync_owner+0x32/0x40 [ 808.658602][T15347] console_unlock+0xd8/0x210 [ 808.658614][T15347] ? __pfx_console_unlock+0x10/0x10 [ 808.658625][T15347] ? do_raw_spin_unlock+0x140/0x230 [ 808.658637][T15347] ? _printk+0xc7/0x100 [ 808.658645][T15347] ? __down_trylock_console_sem+0xb0/0x140 [ 808.658656][T15347] vprintk_emit+0x418/0x6d0 [ 808.658668][T15347] ? __pfx_vprintk_emit+0x10/0x10 [ 808.658682][T15347] _printk+0xc7/0x100 [ 808.658691][T15347] ? __pfx__printk+0x10/0x10 [ 808.658699][T15347] ? sched_balance_rq+0x154a/0x3110 [ 808.658713][T15347] ? __pfx____ratelimit+0x10/0x10 [ 808.658726][T15347] should_fail_ex+0x4e7/0x640 [ 808.658738][T15347] ? __lock_acquire+0xb97/0x1ce0 [ 808.658753][T15347] strncpy_from_user+0x3b/0x2e0 [ 808.658764][T15347] ? lock_acquire+0x179/0x350 [ 808.658773][T15347] strncpy_from_user_nofault+0x7f/0x180 [ 808.658786][T15347] bpf_probe_read_user_str+0x26/0x70 [ 808.658801][T15347] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 808.658809][T15347] bpf_trace_run4+0x252/0x5b0 [ 808.658819][T15347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 808.658830][T15347] ? __pfx_bpf_trace_run4+0x10/0x10 [ 808.658841][T15347] ? __lock_acquire+0xb97/0x1ce0 [ 808.658858][T15347] __bpf_trace_sched_switch+0x145/0x190 [ 808.658870][T15347] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 808.658883][T15347] ? psi_group_change+0x510/0xbe0 [ 808.658899][T15347] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 808.658912][T15347] __traceiter_sched_switch+0x6c/0xc0 [ 808.658924][T15347] __schedule+0x183b/0x5de0 [ 808.658938][T15347] ? __pfx___schedule+0x10/0x10 [ 808.658950][T15347] ? find_held_lock+0x2b/0x80 [ 808.658963][T15347] ? schedule+0x2d7/0x3a0 [ 808.658974][T15347] schedule+0xe7/0x3a0 [ 808.658985][T15347] ax25_accept+0x3d6/0x9c0 [ 808.658995][T15347] ? __pfx_ax25_accept+0x10/0x10 [ 808.659003][T15347] ? selinux_socket_accept+0x110/0x240 [ 808.659017][T15347] ? __pfx_autoremove_wake_function+0x10/0x10 [ 808.659032][T15347] ? _raw_spin_unlock+0x28/0x50 [ 808.659042][T15347] ? selinux_socket_accept+0x1dc/0x240 [ 808.659056][T15347] do_accept+0x33b/0x530 [ 808.659066][T15347] ? __pfx_do_accept+0x10/0x10 [ 808.659079][T15347] __sys_accept4+0x100/0x1c0 [ 808.659089][T15347] ? __pfx___sys_accept4+0x10/0x10 [ 808.659099][T15347] ? __pfx_ksys_write+0x10/0x10 [ 808.659111][T15347] __x64_sys_accept4+0x96/0x100 [ 808.659121][T15347] ? lockdep_hardirqs_on+0x7c/0x110 [ 808.659133][T15347] do_syscall_64+0xcd/0x4e0 [ 808.659146][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.659156][T15347] RIP: 0033:0x7f1ebbb8eec9 [ 808.659164][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.659174][T15347] RSP: 002b:00007f1ebc979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 808.659184][T15347] RAX: ffffffffffffffda RBX: 00007f1ebbde5fa0 RCX: 00007f1ebbb8eec9 [ 808.659190][T15347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 808.659196][T15347] RBP: 00007f1ebc979090 R08: 0000000000000000 R09: 0000000000000000 [ 808.659202][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.659208][T15347] R13: 00007f1ebbde6038 R14: 00007f1ebbde5fa0 R15: 00007ffdf5c0dc58 [ 808.659218][T15347] [ 809.795696][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.3.2433 Not tainted syzkaller #0 PREEMPT(full) [ 809.795712][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 809.795719][T15347] Call Trace: [ 809.795725][T15347] [ 809.795730][T15347] dump_stack_lvl+0x116/0x1f0 [ 809.795748][T15347] should_fail_ex+0x512/0x640 [ 809.795762][T15347] ? __lock_acquire+0xb97/0x1ce0 [ 809.795780][T15347] strncpy_from_user+0x3b/0x2e0 [ 809.795791][T15347] ? lock_acquire+0x179/0x350 [ 809.795801][T15347] strncpy_from_user_nofault+0x7f/0x180 [ 809.795815][T15347] bpf_probe_read_user_str+0x26/0x70 [ 809.795831][T15347] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 809.795840][T15347] bpf_trace_run4+0x252/0x5b0 [ 809.795851][T15347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.795862][T15347] ? __pfx_bpf_trace_run4+0x10/0x10 [ 809.795874][T15347] ? __lock_acquire+0xb97/0x1ce0 [ 809.795891][T15347] __bpf_trace_sched_switch+0x145/0x190 [ 809.795904][T15347] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 809.795917][T15347] ? psi_group_change+0x510/0xbe0 [ 809.795933][T15347] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 809.795946][T15347] __traceiter_sched_switch+0x6c/0xc0 [ 809.795959][T15347] __schedule+0x183b/0x5de0 [ 809.795975][T15347] ? __pfx___schedule+0x10/0x10 [ 809.795988][T15347] ? find_held_lock+0x2b/0x80 [ 809.796000][T15347] ? schedule+0x2d7/0x3a0 [ 809.796011][T15347] schedule+0xe7/0x3a0 [ 809.796023][T15347] ax25_accept+0x3d6/0x9c0 [ 809.796034][T15347] ? __pfx_ax25_accept+0x10/0x10 [ 809.796042][T15347] ? selinux_socket_accept+0x110/0x240 [ 809.796056][T15347] ? __pfx_autoremove_wake_function+0x10/0x10 [ 809.796071][T15347] ? _raw_spin_unlock+0x28/0x50 [ 809.796082][T15347] ? selinux_socket_accept+0x1dc/0x240 [ 809.796096][T15347] do_accept+0x33b/0x530 [ 809.796107][T15347] ? __pfx_do_accept+0x10/0x10 [ 809.796121][T15347] __sys_accept4+0x100/0x1c0 [ 809.796131][T15347] ? __pfx___sys_accept4+0x10/0x10 [ 809.796141][T15347] ? __pfx_ksys_write+0x10/0x10 [ 809.796153][T15347] __x64_sys_accept4+0x96/0x100 [ 809.796163][T15347] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.796177][T15347] do_syscall_64+0xcd/0x4e0 [ 809.796191][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.796202][T15347] RIP: 0033:0x7f1ebbb8eec9 [ 809.796211][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.796221][T15347] RSP: 002b:00007f1ebc979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 809.796231][T15347] RAX: ffffffffffffffda RBX: 00007f1ebbde5fa0 RCX: 00007f1ebbb8eec9 [ 809.796238][T15347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 809.796244][T15347] RBP: 00007f1ebc979090 R08: 0000000000000000 R09: 0000000000000000 [ 809.796250][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.796256][T15347] R13: 00007f1ebbde6038 R14: 00007f1ebbde5fa0 R15: 00007ffdf5c0dc58 [ 809.796266][T15347]