last executing test programs: 2m49.8033394s ago: executing program 0 (id=1429): syz_emit_ethernet(0x52, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000100bbfe8000000000000000000000000000aa11000001"], 0x0) 2m49.145542664s ago: executing program 0 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x3f, 0x488c0}, 0x4c044) 2m48.474725935s ago: executing program 0 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) ioctl$TIOCNOTTY(r5, 0x5422) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, 0x0) chown(&(0x7f0000000040)='./file0\x00', r6, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m47.451573391s ago: executing program 0 (id=1439): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80101, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed57c908cd0cb300042e01020301090212"], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x60}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.715865312s ago: executing program 0 (id=1459): socket$igmp(0x2, 0x3, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf250200"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601020000000000000000000000000500010007000000"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000001fffffff0000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc00000006060101189fd46300000000000000000900020073790000050001000702000005000100070006000900020073797a3200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20020881) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) 2m42.075308064s ago: executing program 0 (id=1462): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a370520810705000500010203010902240001000010000904e602025bbd9700097502020000020000090582020002000000"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x101400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000100)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef91b000040"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x10}, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 2m41.652321627s ago: executing program 32 (id=1462): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a370520810705000500010203010902240001000010000904e602025bbd9700097502020000020000090582020002000000"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x101400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000100)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef91b000040"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x10}, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 2m41.63557526s ago: executing program 4 (id=1468): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = getpid() prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 2m40.698960115s ago: executing program 4 (id=1469): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@mmap={0x3, 0x1, 0x4, 0x8, 0x7f, {0x0, 0x2710}, {0x4, 0x8, 0x8, 0x25, 0x29, 0x58, "10363fa0"}, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) 2m37.9872792s ago: executing program 4 (id=1478): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = getpid() prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 2m36.909206016s ago: executing program 4 (id=1480): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r0, &(0x7f0000000180)="3b354482f81148ee78af2512204af5f3408d0c0541fb94cb28244239cf12f1e2766c172c03f19a5214c0af041113293020521dc8548f958d50b60a9fe46152969c032f3a56fcec5f1182ac3fb6dba4339115825f9fa03da5a20a61066700512c74ad", 0x62) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea04850000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0xfffffd01}, 0x20000000) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r10, 0x1) sendto$inet6(r10, 0x0, 0x0, 0x4000000, 0x0, 0x0) keyctl$chown(0x4, r6, 0xee01, r9) 2m35.963568493s ago: executing program 4 (id=1481): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 2m35.31185921s ago: executing program 4 (id=1486): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3eae, &(0x7f0000000300)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioperm(0xd97, 0x7, 0x3000) sync() r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendfile(r0, r1, 0x0, 0x20000023896) 2m20.124827371s ago: executing program 33 (id=1486): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0x3eae, &(0x7f0000000300)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8], 0x24}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioperm(0xd97, 0x7, 0x3000) sync() r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendfile(r0, r1, 0x0, 0x20000023896) 26.55843076s ago: executing program 5 (id=1930): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="300200001000330600000000fcdbdf25fc000000000000000000000000000000ffffffff00000000000020000000000000004000000080040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010102000000000000000000000000000004d232000000200100000000000000000000000000022603000000000000000000000000000000000000000000000000000000000000ff0f000000000000feffffffffffffffef06000000000000000000000000400000000000000000000000000000000000000000000000000000080000000000008f000000000000000000000029bd7000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee001200"], 0x230}, 0x1, 0x0, 0x0, 0x28008000}, 0x0) 25.767019287s ago: executing program 5 (id=1931): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/214, &(0x7f00000001c0)=0xd6) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd27, 0x25dedbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0xffeb}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x240080c4) 23.8974906s ago: executing program 5 (id=1938): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x4, 0x40, 0xbc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x98, 0x3}, [@selector_unit={0xb, 0x24, 0x5, 0x15, 0x7, "1c2f3fb936d1"}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0xa9, "d510fe"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0xb, 0x1, {0x7, 0x25, 0x1, 0x3, 0x7, 0x4ae}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd, 0x1, 0x4, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x5, 0x77, {0x7, 0x25, 0x1, 0x2, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000340)={0x40, 0x3, 0x9a, {0x9a, 0x27, "364878487b95f9dc1936c929aee262cbbc7538e01c043503f59650f86f605a2c818665450539c305d52600976ce093382db40ae39fc02608854d3cc2054ae66a58846d6307707a00039683793441f3cc0aaf0aa275eb327b19680ab59127ddd64c07d10c2cea90c4e8f30aefc67a9d3b6e35916bd8a1db51832540f777c6b42eebfdb75f7e216f01dd77ad5ae1c417268b1f079b4ab7081d"}}, &(0x7f0000000500)={0x0, 0x3, 0x74, @string={0x74, 0x3, "3815a7bd8aa6a11cef231625760db41530e59a112972067add08d413d67f0e3ffb2aef7b100845c2a4adce923e6f69fcb30fbdf0bdcb9092f50e883e3ff4a6bf63daa83b8968041b4bfb1975f097680a04f12089e8cc631fd85b264d20ba680470d854387f9a4981b59485115ee34e7e0fe9"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x40, 0x0, 0xca, "2a18ab92df14cdd2825002e5ae0c7609ac9d2c96d2358f3ffbce3fca4870c17ec29dab9393e77ff058170ac64b0cdc86bd0dcf52aa76d25de02c271ec9a08aea8ca59d22a6b3c7ad267e1ed3dc30b7382ec517a09b3d0cf84bd6510e9d7bd9c896f061206c531be5ffd1280cca5912764dea4294f16f731614fc806d6dcacbe3d99d9f7b24e4ecf8f7964b8db8cf3d8b917ae1e812f33958db5f9577c79b3a6869993ce13a20712bf3dcf28443966621a04b5e247aa0dbecb1702f97712117755c3647f3ce7dd15775c1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0x20, 0x0, 0x66, {0x64, "f88062fadf9b2ee72609c0b2ec6d1fe6d38b714fb5c05106c28d5839f4c9f4f00cd880173e3eda8911b0b0a3bc9f763c1ead8516774c52313a7ebed6afc4dc7a3ba72dd5ce3b426f83ed262e0773e8d467e500a5737112c3fcd9403538a621e26b1012ba"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x40}}) r2 = io_uring_setup(0x1fcb, &(0x7f0000000080)={0x0, 0x8f50, 0x0, 0xfffffffe}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000a80)=0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000ac0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0xc, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000000c0)=r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x44) 19.692033256s ago: executing program 5 (id=1964): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xa7a, 0x88100) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000180)) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0x9, 0x2}) socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) fsetxattr(r4, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)='syz0\x00', 0x5, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) 16.564889759s ago: executing program 5 (id=1976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) fanotify_init(0x4, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 16.116083941s ago: executing program 5 (id=1979): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) sync() syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x940) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) 11.968085367s ago: executing program 6 (id=1996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) syz_open_dev$MSR(0x0, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000008400000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 10.19901531s ago: executing program 6 (id=2006): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x8, "04030e0000"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x3, @raw_data="a425e2f1a54d24f14152323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, r2}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x3, &(0x7f0000000440)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0xc, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r8 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r8, 0x6f58, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20402) ioctl$I2C_FUNCS(r12, 0x705, &(0x7f0000000480)=0xfffffffffffffff5) 8.452005606s ago: executing program 3 (id=2014): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffdc0700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.591945536s ago: executing program 1 (id=2015): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.464276877s ago: executing program 3 (id=2016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa, 0x0, 0x7000000}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x2}, @md5sig={0x13, 0x12, "4150aa50f56c03fca240aa4e23f7a6ff"}]}}}}}}}}, 0x0) 7.435021833s ago: executing program 3 (id=2017): r0 = fanotify_init(0x8, 0x40000) (async) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x441, 0x8000029, r1, 0x0) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000007f00), 0x1, 0x48903) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000007f40)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) dup(0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r7, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) (async) fcntl$setlease(r2, 0x400, 0x1) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f00000000c0)={{@local, 0x4}, {@my=0x1, 0xffff}, 0x400, "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"}, 0x418, 0x8}) (async, rerun: 64) open(&(0x7f00000005c0)='./bus\x00', 0xe6c42, 0x0) (async, rerun: 64) r8 = socket(0x28, 0x800, 0x800) connect$vsock_stream(r8, 0x0, 0x0) connect$vsock_stream(r8, 0x0, 0x0) 6.692698202s ago: executing program 2 (id=2021): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 6.679544312s ago: executing program 1 (id=2022): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000440)={"2ec15cf994f3fef122bafeaafdd83dfcaf4fe37e1946dfe857bc2a415f0c", 0xffff8001, 0x0, 0x1, 0x23e, 0x51b, 0x9, 0xe730, 0x1, [0xfffffffa, 0x7, 0x9, 0x1, 0x8, 0x2c, 0xeae, 0xc7, 0x3ff, 0x1, 0x5, 0xce2, 0x7, 0x5, 0x6, 0x6, 0x0, 0x100, 0x9d]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10d00, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) 6.606596055s ago: executing program 2 (id=2023): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff564c0, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x1) 6.596340907s ago: executing program 6 (id=2024): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, &(0x7f0000000340)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r2, 0x0, 0x0, [0x0, 0x8]}, {0x80000000, 0x0, 0x0, [0x1, 0xfffffff9]}, 0x0, [0x1]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d5a14012d2d453d2c2c2523be3928df7b104a12dfee9a0af11584fd5e9323b76b6a6395c3110eb87b2b8ffdca0e114d26b82729fae898a1ab5af11c61acd06862628c96dd4fc1d7fa8bf5d6a713f194b04367be1c59bb4961c43e1ae5e660d347d9", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000180)) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000280)={0x9, 0x2}) socket(0x40000000015, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) r7 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r11, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r7, 0x46f3, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r12, 0x8b29, &(0x7f0000000040)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r13, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000030700"/19], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10044005) write(r10, &(0x7f0000000200)='~', 0xf5) 6.352021167s ago: executing program 2 (id=2025): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000005be886904611bbb3712020c21733297f0ea7c2557545199ff7a2cf016f138c15446a63fe4a7c985d3163690ff0a56ecc001c88dccd80d052972c0dbc756d22f587d8d024a58d8c45b066188ec767c19387a4665820c5f8f17485d0ef9161e3c7e4c837f895d94571409d55f8daff7c4704db680c620c4bb037ae7239dcd9ff3228958824345ab25cccd518952ca4f51f102043a04a2c52a4869aedc5dd22d00dfa0556da9e0899a96e2f629df9b98d59ab196ed5241432df43e05f1412ff5", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000eaff000000000000000000000000cc6a20da9237b1e0430397e9d51eb2ebc049", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6.00460243s ago: executing program 3 (id=2026): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000005be886904611bbb3712020c21733297f0ea7c2557545199ff7a2cf016f138c15446a63fe4a7c985d3163690ff0a56ecc001c88dccd80d052972c0dbc756d22f587d8d024a58d8c45b066188ec767c19387a4665820c5f8f17485d0ef9161e3c7e4c837f895d94571409d55f8daff7c4704db680c620c4bb037ae7239dcd9ff3228958824345ab25cccd518952ca4f51f102043a04a2c52a4869aedc5dd22d00dfa0556da9e0899a96e2f629df9b98d59ab196ed5241432df43e05f1412ff5", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000eaff000000000000000000000000cc6a20da9237b1e0430397e9d51eb2ebc049", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.781108217s ago: executing program 1 (id=2027): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x2040, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.821800752s ago: executing program 1 (id=2028): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x29}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800"], 0x18}, 0x40) 4.655467511s ago: executing program 1 (id=2029): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, 0x0, 0x9, 0x400, r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x541b, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.435860274s ago: executing program 6 (id=2030): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) syz_init_net_socket$ax25(0x3, 0x5, 0x1) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="0706675823b8a37f19b37e0f9f120623b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0289ef98886eaac01b08aa753b8726d16773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2555da4ef9035cbfe8dc1e000000000000", 0xc0, r6) (async) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) unshare(0x2c020400) r9 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) (async) msgrcv(r9, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) (async) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r7, r8}, &(0x7f0000000440)=""/251, 0xfb, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0xffffffffffffffff}}}, 0x118) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 3.682685213s ago: executing program 1 (id=2031): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@mmap={0x3, 0x1, 0x4, 0x8, 0x7f, {0x0, 0x2710}, {0x4, 0x8, 0x8, 0x25, 0x29, 0x58, "10363fa0"}, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) 3.22424625s ago: executing program 2 (id=2032): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002224e00000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) (fail_nth: 3) 2.41983132s ago: executing program 2 (id=2033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@delqdisc={0x12c, 0x25, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xfff3, 0xfff2}, {0x8, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0xb9, 0x0, 0x1, 0xfffffff8, 0x1000, 0x1}}, {0x6, 0x2, [0x6895]}}, {{0x1c, 0x1, {0xf8, 0xf9, 0xfff8, 0xc, 0x0, 0x1, 0x8, 0x6}}, {0x10, 0x2, [0x3, 0xa, 0xc, 0x4e0, 0x1, 0x3]}}, {{0x1c, 0x1, {0x5, 0x46, 0x0, 0x7f, 0x2, 0x1, 0x9, 0x8}}, {0x14, 0x2, [0x3c00, 0x8, 0x5e, 0x95af, 0x2, 0x8, 0x0, 0x3]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xba4}]}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x10, 0xfffffc01, 0x2, 0x4, 0xfffffffe, 0x6}}, {0x10, 0x2, [0x81, 0xf, 0x8, 0x9, 0x8, 0xf3]}}]}, @TCA_RATE={0x6, 0x5, {0xf0, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x4, 0x8, 0x1, 0x59e, 0x2000b3e, 0x2}}, {0x8, 0x2, [0x4, 0x9]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000901, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) 2.413428607s ago: executing program 6 (id=2034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x9403, 0x0, 0x230, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {0xff}, 'erspan0\x00', {}, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x3000000, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 1.701415474s ago: executing program 3 (id=2035): socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000380)="899753ef44c633c882d97da46512f17f29fd2fee5555e55c1485b04e01c18c95c32b61e33d462d777c240f034ff90dc6b1f99a", 0x33, 0xfffffffffffffffd) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20004811) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$kcm(0x10, 0x2, 0x4) fchdir(r3) sendmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe03f0300}}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) 616.851484ms ago: executing program 34 (id=1979): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) sync() syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x940) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) 586.804279ms ago: executing program 6 (id=2037): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = getpid() prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 586.28558ms ago: executing program 3 (id=2038): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'syzkaller1\x00', 0xff77}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x50800) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000280)) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='co\rL\xb8\xd0', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.\x00\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x66}, &(0x7f0000000080), &(0x7f00000014c0)) 0s ago: executing program 2 (id=2039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSBRK(r0, 0x5427) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_setup(0x5f6f, &(0x7f0000000000)={0x0, 0x84bf, 0x40, 0x20, 0xfffffffc}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/655, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2ae) syz_create_resource$binfmt(0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) kernel console output (not intermixed with test programs): nied { ioctl } for pid=11394 comm="syz.3.1555" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 497.046578][ T30] audit: type=1400 audit(4751448866.564:1315): avc: denied { create } for pid=11399 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 497.067261][ T30] audit: type=1400 audit(4751448866.564:1316): avc: denied { ioctl } for pid=11399 comm="syz.5.1554" path="socket:[36107]" dev="sockfs" ino=36107 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 497.154255][ T30] audit: type=1400 audit(4751448866.564:1317): avc: denied { create } for pid=11399 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 497.176489][ T30] audit: type=1400 audit(4751448866.564:1318): avc: denied { setopt } for pid=11399 comm="syz.5.1554" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 497.198863][ T30] audit: type=1400 audit(4751448866.584:1319): avc: denied { module_request } for pid=11399 comm="syz.5.1554" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 497.220620][ T30] audit: type=1400 audit(4751448866.644:1320): avc: denied { create } for pid=11394 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.376405][T11412] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 497.489855][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 497.661171][ T54] Bluetooth: hci5: command tx timeout [ 497.763122][ T24] usb 3-1: config 0 has no interfaces? [ 497.805374][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.820427][ T5951] block nbd2: Possible stuck request ffff888026250000: control (read@0,1024B). Runtime 90 seconds [ 497.842029][ T5951] block nbd2: Possible stuck request ffff8880262501c0: control (read@1024,1024B). Runtime 90 seconds [ 497.870985][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.886667][ T5951] block nbd2: Possible stuck request ffff888026250380: control (read@2048,1024B). Runtime 90 seconds [ 497.887680][T11305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.931917][ T5951] block nbd2: Possible stuck request ffff888026250540: control (read@3072,1024B). Runtime 90 seconds [ 497.946101][ T24] usb 3-1: Product: syz [ 498.001461][ T24] usb 3-1: Manufacturer: syz [ 498.124809][ T24] usb 3-1: config 0 descriptor?? [ 498.247548][T11305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.307378][T11305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.323731][T11305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.467447][T11305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.495715][T11433] xt_hashlimit: max too large, truncated to 1048576 [ 498.563126][T11305] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.578165][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.585373][T10433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.594932][ T5857] usb 3-1: USB disconnect, device number 54 [ 498.674610][T11436] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÎÌULÙvy¸ÚØR3âëp(@Ož>ÆÀ–PÛçR' [ 498.685391][T11436] CPU: 0 UID: 0 PID: 11436 Comm: syz.5.1562 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 498.685417][T11436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.685428][T11436] Call Trace: [ 498.685435][T11436] [ 498.685443][T11436] dump_stack_lvl+0x16c/0x1f0 [ 498.685476][T11436] sysfs_warn_dup+0x7f/0xa0 [ 498.685496][T11436] sysfs_do_create_link_sd+0x124/0x140 [ 498.685519][T11436] sysfs_create_link+0x61/0xc0 [ 498.685538][T11436] device_add+0x62c/0x1a70 [ 498.685568][T11436] ? __pfx_device_add+0x10/0x10 [ 498.685590][T11436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.685612][T11436] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 498.685648][T11436] wiphy_register+0x1c9c/0x2850 [ 498.685678][T11436] ? __pfx_wiphy_register+0x10/0x10 [ 498.685705][T11436] ? ieee80211_register_hw+0x246e/0x4140 [ 498.685724][T11436] ? ieee80211_register_hw+0x223a/0x4140 [ 498.685746][T11436] ieee80211_register_hw+0x24ac/0x4140 [ 498.685775][T11436] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 498.685798][T11436] ? kasan_check_range+0x105/0x1a0 [ 498.685825][T11436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.685845][T11436] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 498.685866][T11436] ? __hrtimer_setup+0x176/0x280 [ 498.685889][T11436] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 498.685932][T11436] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 498.685954][T11436] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 498.685984][T11436] ? __asan_memcpy+0x3c/0x60 [ 498.686013][T11436] hwsim_new_radio_nl+0xb51/0x12c0 [ 498.686043][T11436] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 498.686079][T11436] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 498.686107][T11436] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 498.686140][T11436] genl_family_rcv_msg_doit+0x209/0x2f0 [ 498.686169][T11436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.686205][T11436] ? bpf_lsm_capable+0x9/0x10 [ 498.686222][T11436] ? security_capable+0x7e/0x260 [ 498.686246][T11436] ? ns_capable+0xd7/0x110 [ 498.686277][T11436] genl_rcv_msg+0x55c/0x800 [ 498.686307][T11436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.686334][T11436] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 498.686363][T11436] ? __lock_acquire+0xaa4/0x1ba0 [ 498.686399][T11436] netlink_rcv_skb+0x16d/0x440 [ 498.686423][T11436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.686453][T11436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.686492][T11436] ? __pfx_down_read+0x10/0x10 [ 498.686512][T11436] ? netlink_deliver_tap+0x1ae/0xd30 [ 498.686538][T11436] genl_rcv+0x28/0x40 [ 498.686562][T11436] netlink_unicast+0x53a/0x7f0 [ 498.686589][T11436] ? __pfx_netlink_unicast+0x10/0x10 [ 498.686622][T11436] netlink_sendmsg+0x8d1/0xdd0 [ 498.686651][T11436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.686686][T11436] ____sys_sendmsg+0xa95/0xc70 [ 498.686712][T11436] ? copy_msghdr_from_user+0x10a/0x160 [ 498.686732][T11436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.686764][T11436] ? try_to_wake_up+0xa2f/0x1680 [ 498.686791][T11436] ___sys_sendmsg+0x134/0x1d0 [ 498.686814][T11436] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.686871][T11436] __sys_sendmsg+0x16d/0x220 [ 498.686893][T11436] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.686913][T11436] ? __x64_sys_futex+0x1e0/0x4c0 [ 498.686947][T11436] ? rcu_is_watching+0x12/0xc0 [ 498.686977][T11436] do_syscall_64+0xcd/0x260 [ 498.687006][T11436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.687024][T11436] RIP: 0033:0x7ff67378e969 [ 498.687039][T11436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.687057][T11436] RSP: 002b:00007ff674644038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.687075][T11436] RAX: ffffffffffffffda RBX: 00007ff6739b6160 RCX: 00007ff67378e969 [ 498.687087][T11436] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 498.687098][T11436] RBP: 00007ff673810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 498.687109][T11436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.687120][T11436] R13: 0000000000000000 R14: 00007ff6739b6160 R15: 00007ffdd9a6e178 [ 498.687146][T11436] [ 498.837495][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 498.840274][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.138464][T11305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.149295][T11305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.193232][T10432] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.200322][T10432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.459822][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 499.494496][ T24] usb 4-1: config 102 has an invalid interface number: 37 but max is 0 [ 499.507709][ T24] usb 4-1: config 102 has no interface number 0 [ 499.595852][ T24] usb 4-1: config 102 interface 37 has no altsetting 0 [ 499.621570][ T24] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=a1.4e [ 499.639750][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.649099][T11447] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 499.651725][ T24] usb 4-1: Product: syz [ 499.663986][ T24] usb 4-1: Manufacturer: syz [ 499.668592][ T24] usb 4-1: SerialNumber: syz [ 499.716119][T11447] bond1: entered promiscuous mode [ 499.722989][T11447] bond1: entered allmulticast mode [ 499.728616][T11447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.741578][ T54] Bluetooth: hci5: command tx timeout [ 500.555711][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.028050][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.166369][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.795842][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 501.795858][ T30] audit: type=1400 audit(4751448871.344:1370): avc: denied { prog_run } for pid=11466 comm="syz.2.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 501.835024][ T24] vmk80xx 4-1:102.37: driver 'vmk80xx' failed to auto-configure device. [ 502.037994][ T24] usb 4-1: USB disconnect, device number 37 [ 502.209225][ T30] audit: type=1400 audit(4751448871.754:1371): avc: denied { read write } for pid=11471 comm="syz.3.1573" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 502.392729][ T30] audit: type=1400 audit(4751448871.754:1372): avc: denied { open } for pid=11471 comm="syz.3.1573" path="/dev/vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 502.710541][ T30] audit: type=1400 audit(4751448871.794:1373): avc: denied { ioctl } for pid=11471 comm="syz.3.1573" path="/dev/vbi2" dev="devtmpfs" ino=965 ioctlcmd=0x565b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 503.660216][ T30] audit: type=1400 audit(4751448871.794:1374): avc: denied { create } for pid=11471 comm="syz.3.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.680295][ T30] audit: type=1400 audit(4751448871.804:1375): avc: denied { connect } for pid=11471 comm="syz.3.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.700112][ T30] audit: type=1400 audit(4751448871.804:1376): avc: denied { nlmsg_write } for pid=11471 comm="syz.3.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 503.722344][ T30] audit: type=1400 audit(4751448871.824:1377): avc: denied { search } for pid=11470 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.744780][ T30] audit: type=1400 audit(4751448871.834:1378): avc: denied { read } for pid=11476 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.779782][ T30] audit: type=1400 audit(4751448871.844:1379): avc: denied { open } for pid=11476 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.939359][T11305] veth0_vlan: entered promiscuous mode [ 504.006955][T11305] veth1_vlan: entered promiscuous mode [ 504.108063][T11305] veth0_macvtap: entered promiscuous mode [ 504.134601][T11305] veth1_macvtap: entered promiscuous mode [ 504.196859][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.231491][ T5858] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 504.237212][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.262406][T11305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.292204][T11305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.311914][T11305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.330866][T11305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.532716][ T5858] usb 4-1: config 0 interface 0 altsetting 4 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 504.561793][ T5858] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 504.579760][ T5858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.594086][ T5858] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 504.742503][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.055377][ T5858] usb 4-1: config 0 descriptor?? [ 505.093309][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.120578][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.127365][ T5858] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 505.288452][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.312176][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.106098][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 506.118713][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.651389][T11547] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 507.658398][T11547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.749578][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.757171][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.768551][ T5169] bcm5974 4-1:0.0: could not read from device [ 507.791581][ T5857] usb 4-1: USB disconnect, device number 38 [ 507.830224][T11547] vhci_hcd vhci_hcd.0: Device attached [ 508.116454][T11554] bridge0: entered allmulticast mode [ 508.232316][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 508.360427][T11555] bridge_slave_1: left allmulticast mode [ 508.407526][T11548] vhci_hcd: connection reset by peer [ 508.450928][T11555] bridge_slave_1: left promiscuous mode [ 508.452426][T11554] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1588'. [ 508.457577][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.490952][ T1113] vhci_hcd: stop threads [ 508.495721][ T1113] vhci_hcd: release socket [ 508.512292][ T1113] vhci_hcd: disconnect device [ 508.599603][T11555] bridge_slave_0: left allmulticast mode [ 508.621404][T11555] bridge_slave_0: left promiscuous mode [ 508.632378][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.123000][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 509.123016][ T30] audit: type=1400 audit(4751448878.674:1429): avc: denied { ioctl } for pid=11570 comm="syz.6.1592" path="socket:[37446]" dev="sockfs" ino=37446 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.157474][T11572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1592'. [ 509.251118][T11589] overlayfs: missing 'workdir' [ 509.334796][ T30] audit: type=1400 audit(4751448878.724:1430): avc: denied { create } for pid=11580 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.378788][ T30] audit: type=1400 audit(4751448878.794:1431): avc: denied { write } for pid=11587 comm="syz.1.1595" name="ip6_flowlabel" dev="proc" ino=4026533176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 509.535732][ T5858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 509.848846][ T30] audit: type=1400 audit(4751448878.864:1432): avc: denied { setopt } for pid=11580 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.907148][ T5858] usb 6-1: config 0 has no interfaces? [ 509.921220][ T5858] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.962825][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.982658][ T30] audit: type=1400 audit(4751448878.864:1433): avc: denied { firmware_load } for pid=11580 comm="syz.3.1594" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 510.105956][ T5858] usb 6-1: Product: syz [ 510.110644][ T5858] usb 6-1: Manufacturer: syz [ 510.121066][ T5858] usb 6-1: config 0 descriptor?? [ 510.126140][ T30] audit: type=1400 audit(4751448878.994:1434): avc: denied { setopt } for pid=11588 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.172826][ T30] audit: type=1400 audit(4751448879.014:1435): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 510.222912][ T30] audit: type=1400 audit(4751448879.564:1436): avc: denied { create } for pid=11608 comm="syz.6.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 510.368740][ T30] audit: type=1400 audit(4751448879.714:1437): avc: denied { create } for pid=11608 comm="syz.6.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 510.610088][ T5858] usb 6-1: USB disconnect, device number 3 [ 510.724763][ T30] audit: type=1400 audit(4751448879.714:1438): avc: denied { create } for pid=11608 comm="syz.6.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 510.997001][T11630] netlink: 'syz.3.1602': attribute type 4 has an invalid length. [ 511.198654][ T5859] kernel write not supported for file bpf-map (pid: 5859 comm: kworker/0:5) [ 512.798047][T11657] loop6: detected capacity change from 0 to 7 [ 512.864571][ T5800] Dev loop6: unable to read RDB block 7 [ 512.878414][ T5800] loop6: unable to read partition table [ 512.915665][ T5800] loop6: partition table beyond EOD, truncated [ 513.076483][T11657] Dev loop6: unable to read RDB block 7 [ 513.489273][T11657] loop6: unable to read partition table [ 513.536059][T11657] loop6: partition table beyond EOD, truncated [ 513.542479][ T10] vhci_hcd: vhci_device speed not set [ 513.581353][T11657] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 513.904342][ T5859] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 514.240043][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 514.262963][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 514.262978][ T30] audit: type=1400 audit(4751448883.814:1445): avc: denied { setopt } for pid=11683 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 514.454715][T11687] block nbd6: NBD_DISCONNECT [ 514.470117][ T30] audit: type=1400 audit(4751448883.904:1446): avc: denied { create } for pid=11682 comm="syz.6.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.494237][T11687] block nbd6: Send disconnect failed -22 [ 514.500378][ T30] audit: type=1400 audit(4751448884.024:1447): avc: denied { write } for pid=11682 comm="syz.6.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.511092][ T5859] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 514.575161][ T9] usb 2-1: config 0 has no interfaces? [ 514.605936][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 514.631315][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 514.648683][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 514.670658][ T9] usb 2-1: Product: syz [ 514.674831][ T9] usb 2-1: Manufacturer: syz [ 514.689395][ T5859] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.718791][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.733538][ T9] usb 2-1: config 0 descriptor?? [ 514.772583][ T5859] usb 6-1: config 0 descriptor?? [ 514.818021][ T5859] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 514.852052][T10316] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 514.940095][ T30] audit: type=1400 audit(4751448884.454:1448): avc: denied { write } for pid=11691 comm="syz.2.1619" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 515.319381][ T5858] usb 2-1: USB disconnect, device number 36 [ 515.829444][T10316] usb 7-1: Using ep0 maxpacket: 8 [ 516.681493][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.691403][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.875503][ T30] audit: type=1400 audit(4751448884.954:1449): avc: denied { unlink } for pid=11670 comm="syz.5.1614" name="#d" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 517.293010][ T30] audit: type=1400 audit(4751448884.964:1450): avc: denied { mount } for pid=11670 comm="syz.5.1614" name="/" dev="overlay" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 517.315841][ T30] audit: type=1800 audit(4751448884.994:1451): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1614" name="bus" dev="overlay" ino=155 res=0 errno=0 [ 517.408268][T10316] usb 7-1: device descriptor read/all, error -71 [ 517.421293][T11685] block nbd6: Disconnected due to user request. [ 517.447560][T11685] block nbd6: shutting down sockets [ 517.643520][ T30] audit: type=1400 audit(4751448887.154:1452): avc: denied { create } for pid=11711 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 518.498073][ T30] audit: type=1400 audit(4751448887.154:1453): avc: denied { connect } for pid=11711 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 518.530325][ T5859] usb 6-1: USB disconnect, device number 4 [ 518.631864][ T30] audit: type=1400 audit(4751448888.154:1455): avc: denied { write } for pid=11719 comm="syz.2.1624" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 518.817303][T11737] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1630'. [ 518.939144][ C0] Unknown status report in ack skb [ 520.071567][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 520.071584][ T30] audit: type=1400 audit(4751448889.594:1458): avc: denied { read write } for pid=11755 comm="syz.6.1635" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 520.113091][ T30] audit: type=1400 audit(4751448889.594:1459): avc: denied { open } for pid=11755 comm="syz.6.1635" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 520.152681][ T30] audit: type=1400 audit(4751448889.614:1460): avc: denied { ioctl } for pid=11755 comm="syz.6.1635" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 522.922403][ T30] audit: type=1400 audit(4751448892.474:1461): avc: denied { connect } for pid=11790 comm="syz.1.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 522.967298][ T30] audit: type=1400 audit(4751448892.474:1462): avc: denied { setopt } for pid=11792 comm="syz.5.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 523.024351][ T30] audit: type=1400 audit(4751448892.494:1463): avc: denied { setopt } for pid=11790 comm="syz.1.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 523.077467][ T30] audit: type=1326 audit(4751448892.624:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.6.1646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f092458e969 code=0x0 [ 523.881132][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 524.245207][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 524.265178][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.311490][ T10] usb 3-1: Product: syz [ 524.319079][ T10] usb 3-1: Manufacturer: syz [ 524.348912][ T10] usb 3-1: SerialNumber: syz [ 524.375054][ T10] usb 3-1: config 0 descriptor?? [ 524.510066][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 524.733364][ T30] audit: type=1400 audit(4751448894.284:1465): avc: denied { connect } for pid=11831 comm="syz.5.1656" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 524.888309][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.908691][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.927074][T11809] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(18) [ 524.933661][T11809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.966630][ T9] usb 7-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 524.979837][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.988031][T11809] vhci_hcd vhci_hcd.0: Device attached [ 524.990159][T11838] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(21) [ 524.993890][ T9] usb 7-1: Product: syz [ 525.000040][T11838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 525.012683][ T9] usb 7-1: Manufacturer: syz [ 525.017376][ T9] usb 7-1: SerialNumber: syz [ 525.028481][ T9] usb 7-1: config 0 descriptor?? [ 525.033810][T11838] vhci_hcd vhci_hcd.0: Device attached [ 525.087981][T11809] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 525.094615][T11809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 525.111375][T11809] vhci_hcd vhci_hcd.0: Device attached [ 525.137329][T11838] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(25) [ 525.143940][T11838] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 525.151735][ T5859] vhci_hcd: vhci_device speed not set [ 525.197503][T11809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.199893][T11838] vhci_hcd vhci_hcd.0: Device attached [ 525.229799][ T5859] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 525.245914][T11809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.252235][ T30] audit: type=1400 audit(4751448894.804:1466): avc: denied { create } for pid=11818 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 525.274558][T11809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 525.299776][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 525.309112][T11839] vhci_hcd: connection closed [ 525.317504][ T24] usb 7-1: USB disconnect, device number 4 [ 525.329707][ T36] vhci_hcd: stop threads [ 525.333944][ T36] vhci_hcd: release socket [ 525.338939][T11845] vhci_hcd: connection closed [ 525.350172][T11835] vhci_hcd: connection reset by peer [ 525.373752][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 525.383803][ T36] vhci_hcd: disconnect device [ 525.394081][ T36] vhci_hcd: stop threads [ 525.398334][ T36] vhci_hcd: release socket [ 525.433269][ T30] audit: type=1400 audit(4751448894.804:1467): avc: denied { ioctl } for pid=11818 comm="syz.6.1653" path="socket:[38434]" dev="sockfs" ino=38434 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 525.461725][T11847] vhci_hcd: connection closed [ 525.462057][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 525.466768][ T36] vhci_hcd: disconnect device [ 525.466969][ T36] vhci_hcd: stop threads [ 525.466982][ T36] vhci_hcd: release socket [ 525.522915][ T10] usb 3-1: USB disconnect, device number 55 [ 525.548510][ T36] vhci_hcd: disconnect device [ 525.554352][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.573312][ T36] vhci_hcd: stop threads [ 525.581049][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.593769][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 525.594338][ T36] vhci_hcd: release socket [ 525.604137][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.625488][ T36] vhci_hcd: disconnect device [ 525.774736][ T9] usb 6-1: config 0 descriptor?? [ 525.797511][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 526.402030][ T9] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 526.522675][T11871] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 526.531209][ T30] audit: type=1400 audit(4751448896.074:1468): avc: denied { load_policy } for pid=11869 comm="syz.6.1662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 526.589415][T10316] usb 6-1: USB disconnect, device number 5 [ 526.678981][T11874] fido_id[11874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 527.171028][T11871] SELinux: failed to load policy [ 527.201758][T11871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23064 sclass=netlink_route_socket pid=11871 comm=syz.6.1662 [ 527.349478][ T30] audit: type=1400 audit(4751448896.884:1469): avc: denied { shutdown } for pid=11881 comm="syz.1.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 527.641692][T11891] sctp: [Deprecated]: syz.1.1665 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.641692][T11891] Use struct sctp_sack_info instead [ 527.659448][ T30] audit: type=1400 audit(4751448897.194:1470): avc: denied { setopt } for pid=11881 comm="syz.1.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 527.684525][T11891] sctp: [Deprecated]: syz.1.1665 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.684525][T11891] Use struct sctp_sack_info instead [ 527.973245][ T11] block nbd2: Possible stuck request ffff888026250000: control (read@0,1024B). Runtime 120 seconds [ 527.985128][ T11] block nbd2: Possible stuck request ffff8880262501c0: control (read@1024,1024B). Runtime 120 seconds [ 528.051074][ T11] block nbd2: Possible stuck request ffff888026250380: control (read@2048,1024B). Runtime 120 seconds [ 528.130171][ T11] block nbd2: Possible stuck request ffff888026250540: control (read@3072,1024B). Runtime 120 seconds [ 528.687736][ T30] audit: type=1400 audit(4751448898.234:1471): avc: denied { create } for pid=11917 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 528.729231][ T30] audit: type=1400 audit(4751448898.274:1472): avc: denied { write } for pid=11916 comm="syz.3.1673" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 528.909823][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 528.960166][ T5857] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 529.044179][T11928] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 529.169459][ T30] audit: type=1400 audit(4751448898.544:1473): avc: denied { create } for pid=11917 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.189741][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.351187][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 529.382811][ T30] audit: type=1400 audit(4751448898.544:1474): avc: denied { write } for pid=11917 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.407995][ T5857] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.418470][ T5857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.433685][ T5857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.444982][ T5857] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.460445][ T5857] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.470052][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.481223][ T5887] usb 6-1: device descriptor read/64, error -71 [ 529.747215][ T5857] usb 4-1: usb_control_msg returned -71 [ 529.850497][ T5857] usbtmc 4-1:16.0: can't read capabilities [ 530.055413][ T5857] usb 4-1: USB disconnect, device number 39 [ 530.251858][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 530.254548][T11933] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1676'. [ 530.281398][ T30] audit: type=1400 audit(4751448899.804:1475): avc: denied { read write } for pid=11932 comm="syz.2.1676" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.373125][ T30] audit: type=1400 audit(4751448899.804:1476): avc: denied { open } for pid=11932 comm="syz.2.1676" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.553988][ T5859] vhci_hcd: vhci_device speed not set [ 530.789766][ T5887] usb 6-1: device descriptor read/64, error -71 [ 530.900326][ T5887] usb usb6-port1: attempt power cycle [ 531.744772][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 531.974160][ T5887] usb 6-1: device descriptor read/8, error -71 [ 533.581109][T11962] ALSA: mixer_oss: invalid OSS volume '”' [ 534.059947][ T30] audit: type=1400 audit(4751448903.574:1477): avc: denied { create } for pid=11967 comm="syz.3.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 535.636918][T11991] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 535.647554][T11991] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 536.019979][ T30] audit: type=1400 audit(4751448905.194:1478): avc: denied { firmware_load } for pid=11979 comm="syz.5.1692" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 536.485269][T11996] xt_hashlimit: max too large, truncated to 1048576 [ 537.027045][T12008] xt_hashlimit: max too large, truncated to 1048576 [ 537.546853][ T30] audit: type=1400 audit(4751448907.084:1479): avc: denied { map } for pid=12005 comm="syz.1.1702" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 537.570497][T12008] xt_hashlimit: Unknown mode mask 88, kernel too old? [ 537.582547][T12017] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÎÌULÙvy¸ÚØR3âëp(@Ož>ÆÀ–PÛçR' [ 537.593302][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.6.1701 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 537.593327][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.593338][T12017] Call Trace: [ 537.593346][T12017] [ 537.593353][T12017] dump_stack_lvl+0x16c/0x1f0 [ 537.593386][T12017] sysfs_warn_dup+0x7f/0xa0 [ 537.593405][T12017] sysfs_do_create_link_sd+0x124/0x140 [ 537.593427][T12017] sysfs_create_link+0x61/0xc0 [ 537.593447][T12017] device_add+0x62c/0x1a70 [ 537.593481][T12017] ? __pfx_device_add+0x10/0x10 [ 537.593503][T12017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.593526][T12017] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 537.593561][T12017] wiphy_register+0x1c9c/0x2850 [ 537.593581][T12017] ? netdev_run_todo+0x864/0x1320 [ 537.593613][T12017] ? __pfx_wiphy_register+0x10/0x10 [ 537.593642][T12017] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 537.593676][T12017] ieee80211_register_hw+0x24ac/0x4140 [ 537.593706][T12017] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.593729][T12017] ? find_held_lock+0x2b/0x80 [ 537.593753][T12017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.593774][T12017] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.593795][T12017] ? __hrtimer_setup+0x176/0x280 [ 537.593818][T12017] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 537.593859][T12017] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 537.593881][T12017] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.593910][T12017] ? __asan_memcpy+0x3c/0x60 [ 537.593941][T12017] hwsim_new_radio_nl+0xb51/0x12c0 [ 537.593971][T12017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.594006][T12017] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 537.594035][T12017] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 537.594068][T12017] genl_family_rcv_msg_doit+0x209/0x2f0 [ 537.594097][T12017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.594134][T12017] ? bpf_lsm_capable+0x9/0x10 [ 537.594149][T12017] ? security_capable+0x7e/0x260 [ 537.594173][T12017] ? ns_capable+0xd7/0x110 [ 537.594197][T12017] genl_rcv_msg+0x55c/0x800 [ 537.594226][T12017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.594254][T12017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.594283][T12017] ? __lock_acquire+0xaa4/0x1ba0 [ 537.594317][T12017] netlink_rcv_skb+0x16d/0x440 [ 537.594341][T12017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.594368][T12017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.594406][T12017] ? __pfx_down_read+0x10/0x10 [ 537.594425][T12017] ? netlink_deliver_tap+0x1ae/0xd30 [ 537.594455][T12017] genl_rcv+0x28/0x40 [ 537.594479][T12017] netlink_unicast+0x53a/0x7f0 [ 537.594506][T12017] ? __pfx_netlink_unicast+0x10/0x10 [ 537.594537][T12017] netlink_sendmsg+0x8d1/0xdd0 [ 537.594566][T12017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.594600][T12017] ____sys_sendmsg+0xa95/0xc70 [ 537.594627][T12017] ? copy_msghdr_from_user+0x10a/0x160 [ 537.594648][T12017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.594679][T12017] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 537.594711][T12017] ___sys_sendmsg+0x134/0x1d0 [ 537.594735][T12017] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.594792][T12017] __sys_sendmsg+0x16d/0x220 [ 537.594814][T12017] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.594834][T12017] ? __x64_sys_futex+0x1e0/0x4c0 [ 537.594867][T12017] ? rcu_is_watching+0x12/0xc0 [ 537.594897][T12017] do_syscall_64+0xcd/0x260 [ 537.594927][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.594946][T12017] RIP: 0033:0x7f092458e969 [ 537.594962][T12017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.594979][T12017] RSP: 002b:00007f0925368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.594998][T12017] RAX: ffffffffffffffda RBX: 00007f09247b6240 RCX: 00007f092458e969 [ 537.595010][T12017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 537.595021][T12017] RBP: 00007f0924610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 537.595032][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.595042][T12017] R13: 0000000000000000 R14: 00007f09247b6240 R15: 00007fffa3c69048 [ 537.595068][T12017] [ 538.047790][ T30] audit: type=1400 audit(4751448907.084:1480): avc: denied { execute } for pid=12005 comm="syz.1.1702" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.352273][T12025] tipc: Started in network mode [ 538.357134][T12025] tipc: Node identity 0000000000000000002e000000005e4, cluster identity 4711 [ 539.020504][ T30] audit: type=1400 audit(4751448908.554:1481): avc: denied { create } for pid=12020 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 539.201702][ T30] audit: type=1400 audit(4751448908.554:1482): avc: denied { bind } for pid=12020 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 539.271483][ T30] audit: type=1400 audit(4751448908.554:1483): avc: denied { setopt } for pid=12020 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 539.316432][ T30] audit: type=1400 audit(4751448908.554:1484): avc: denied { accept } for pid=12020 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 541.913213][ T30] audit: type=1400 audit(4751448908.564:1485): avc: denied { write } for pid=12020 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 541.955885][ T30] audit: type=1400 audit(4751448911.504:1486): avc: denied { read write } for pid=12044 comm="syz.6.1712" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 541.980626][T12045] fuse: Bad value for 'fd' [ 542.307163][ T30] audit: type=1400 audit(4751448911.524:1487): avc: denied { open } for pid=12044 comm="syz.6.1712" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 542.337588][ T30] audit: type=1400 audit(4751448911.534:1488): avc: denied { remount } for pid=12044 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 542.363295][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 542.477456][T12063] xt_hashlimit: max too large, truncated to 1048576 [ 542.488340][ T30] audit: type=1400 audit(4751448911.534:1489): avc: denied { read } for pid=12044 comm="syz.6.1712" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 543.065263][ T30] audit: type=1400 audit(4751448911.534:1490): avc: denied { open } for pid=12044 comm="syz.6.1712" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 544.065036][ T30] audit: type=1400 audit(4751448911.594:1491): avc: denied { create } for pid=12044 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 544.065083][ T30] audit: type=1400 audit(4751448911.654:1492): avc: denied { connect } for pid=12044 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 544.065122][ T30] audit: type=1400 audit(4751448911.934:1493): avc: denied { setopt } for pid=12048 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 544.065159][ T30] audit: type=1400 audit(4751448911.934:1494): avc: denied { write } for pid=12056 comm="syz.1.1715" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 544.283453][T12084] loop6: detected capacity change from 0 to 7 [ 544.295529][T12084] Dev loop6: unable to read RDB block 7 [ 544.295564][T12084] loop6: unable to read partition table [ 544.295712][T12084] loop6: partition table beyond EOD, truncated [ 544.295727][T12084] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.939590][T12094] SELinux: security_context_str_to_sid () failed with errno=-22 [ 544.939824][T12094] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1724'. [ 546.674634][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 547.279852][ T24] usb 2-1: device descriptor read/64, error -71 [ 547.630020][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 548.252592][ T24] usb 2-1: device descriptor read/64, error -71 [ 548.260192][T12125] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 548.360762][ T24] usb usb2-port1: attempt power cycle [ 549.049777][ T5887] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 549.152100][T12144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.252390][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 549.255014][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.277013][ T5887] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 549.290563][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.318347][ T5887] usb 4-1: config 0 descriptor?? [ 549.333749][ T5887] usb 4-1: bad CDC descriptors [ 549.367098][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 549.367107][ T30] audit: type=1400 audit(4751448918.914:1504): avc: denied { create } for pid=12149 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 549.459272][T12151] netlink: 'syz.5.1738': attribute type 1 has an invalid length. [ 549.481624][T12151] netlink: 'syz.5.1738': attribute type 3 has an invalid length. [ 549.495288][T12151] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1738'. [ 549.611689][ T30] audit: type=1800 audit(4751448919.164:1505): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.1734" name="/" dev="tmpfs" ino=1273 res=0 errno=0 [ 549.782268][ T9] usb 4-1: USB disconnect, device number 40 [ 550.260908][ T30] audit: type=1400 audit(4751448919.724:1506): avc: denied { bind } for pid=12169 comm="syz.2.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 550.425908][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 550.487269][T12175] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 550.722415][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.758554][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.769045][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 550.783565][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.800879][ T9] usb 4-1: config 0 descriptor?? [ 551.078334][ T30] audit: type=1400 audit(4751448920.624:1507): avc: denied { bind } for pid=12185 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 551.860120][ T30] audit: type=1400 audit(4751448920.734:1508): avc: denied { override_creds } for pid=12185 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 552.987250][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 552.999784][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 553.106338][ T9] usb 4-1: USB disconnect, device number 41 [ 553.114595][ T30] audit: type=1400 audit(4751448922.644:1509): avc: denied { create } for pid=12209 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 553.189624][ T30] audit: type=1400 audit(4751448922.644:1510): avc: denied { getopt } for pid=12209 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 553.270345][ T30] audit: type=1400 audit(4751448922.814:1511): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 553.391953][ T30] audit: type=1400 audit(4751448922.934:1512): avc: denied { ioctl } for pid=12218 comm="syz.5.1747" path="socket:[39927]" dev="sockfs" ino=39927 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.419776][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 553.468328][ T30] audit: type=1400 audit(4751448923.014:1513): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 553.569742][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 553.581271][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 553.602187][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 553.614563][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.631924][ T9] usb 4-1: Product: syz [ 553.660970][ T9] usb 4-1: Manufacturer: syz [ 553.682091][ T9] usb 4-1: SerialNumber: syz [ 553.691236][ T9] usb 4-1: config 0 descriptor?? [ 553.708270][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 553.727253][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 554.181430][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 554.240779][T12237] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 554.298074][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 554.311547][T12237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.358107][ T9] em28xx 4-1:0.0: board has no eeprom [ 554.419088][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 554.479737][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 554.479752][ T30] audit: type=1400 audit(4751448924.024:1515): avc: denied { ioctl } for pid=12240 comm="syz.5.1750" path="socket:[40982]" dev="sockfs" ino=40982 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 554.539353][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 554.544028][T12241] 9p filesystem being mounted at /47/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 554.561323][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 554.561928][T12243] netlink: 'syz.1.1751': attribute type 4 has an invalid length. [ 554.567797][ T5859] em28xx 4-1:0.0: Binding DVB extension [ 554.578223][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 554.619875][ T30] audit: type=1400 audit(4751448924.144:1516): avc: denied { write } for pid=12240 comm="syz.5.1750" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.648497][ T9] usb 4-1: USB disconnect, device number 42 [ 554.682698][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 554.742309][ T30] audit: type=1400 audit(4751448924.144:1517): avc: denied { add_name } for pid=12240 comm="syz.5.1750" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.815319][ T30] audit: type=1400 audit(4751448924.144:1518): avc: denied { create } for pid=12240 comm="syz.5.1750" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 554.898579][ T5859] em28xx 4-1:0.0: Registering input extension [ 554.931199][ T9] em28xx 4-1:0.0: Closing input extension [ 555.072444][ T30] audit: type=1400 audit(4751448924.144:1519): avc: denied { associate } for pid=12240 comm="syz.5.1750" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 555.418474][ T5887] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 555.432572][ T30] audit: type=1400 audit(4751448924.154:1520): avc: denied { ioctl } for pid=12240 comm="syz.5.1750" path="socket:[40990]" dev="sockfs" ino=40990 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 555.467325][ T30] audit: type=1400 audit(4751448924.214:1521): avc: denied { unmount } for pid=10948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 555.493849][ T30] audit: type=1400 audit(4751448924.804:1522): avc: denied { watch } for pid=12254 comm="syz.1.1756" path="/365/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 555.626313][ T5887] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 555.628352][ T9] em28xx 4-1:0.0: Freeing device [ 555.641160][ T30] audit: type=1400 audit(4751448924.804:1523): avc: denied { watch_sb watch_reads } for pid=12254 comm="syz.1.1756" path="/365/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 555.649607][ T5887] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 555.723038][ T5887] usb 3-1: config 220 has no interface number 2 [ 555.778346][ T5887] usb 3-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x74, changing to 0x4 [ 555.848677][ T5887] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x4 has an invalid bInterval 58, changing to 9 [ 555.945735][ T5887] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x4 has invalid maxpacket 25705, setting to 1024 [ 556.039007][ T5887] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 556.072090][ T5887] usb 3-1: config 220 interface 0 has no altsetting 0 [ 556.079631][ T5887] usb 3-1: config 220 interface 76 has no altsetting 0 [ 556.086609][ T5887] usb 3-1: config 220 interface 1 has no altsetting 0 [ 556.105062][ T5887] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 556.114805][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.122867][ T5887] usb 3-1: Product: syz [ 556.127543][ T5887] usb 3-1: Manufacturer: syz [ 556.132208][ T5887] usb 3-1: SerialNumber: syz [ 556.163689][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 556.445527][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.471022][ T5887] usb 3-1: selecting invalid altsetting 0 [ 556.479239][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 556.495954][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.504180][ T5887] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 556.524450][ T5887] usb 3-1: No valid video chain found. [ 556.545979][ T9] usb 4-1: config 0 descriptor?? [ 556.555378][ T5887] usb 3-1: selecting invalid altsetting 0 [ 556.589748][ T5887] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 556.629735][ T5859] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 556.633227][ T5887] usb 3-1: USB disconnect, device number 56 [ 556.786940][T12285] bond_slave_0: entered promiscuous mode [ 556.794349][T12285] bond_slave_1: entered promiscuous mode [ 556.800199][T12285] team_slave_0: entered promiscuous mode [ 556.806183][T12285] team_slave_1: entered promiscuous mode [ 556.945275][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 556.960909][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.635155][T12285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 557.688125][T12285] bond_slave_0: left promiscuous mode [ 557.693600][T12285] bond_slave_1: left promiscuous mode [ 557.699165][T12285] team_slave_0: left promiscuous mode [ 557.704598][T12285] team_slave_1: left promiscuous mode [ 557.734108][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.110464][T12295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1762'. [ 558.144430][T12295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1762'. [ 558.734178][ T11] block nbd2: Possible stuck request ffff888026250000: control (read@0,1024B). Runtime 150 seconds [ 558.745416][ T11] block nbd2: Possible stuck request ffff8880262501c0: control (read@1024,1024B). Runtime 150 seconds [ 558.756452][ T11] block nbd2: Possible stuck request ffff888026250380: control (read@2048,1024B). Runtime 150 seconds [ 558.767488][ T11] block nbd2: Possible stuck request ffff888026250540: control (read@3072,1024B). Runtime 150 seconds [ 558.779152][ T5859] usb 7-1: device descriptor read/all, error -71 [ 558.884619][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 558.894894][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 558.906905][ T9] usb 4-1: USB disconnect, device number 43 [ 559.053007][ T30] audit: type=1400 audit(4751448928.594:1524): avc: denied { listen } for pid=12305 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 559.356314][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 559.409932][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.418703][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.728946][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1772'. [ 560.759895][T12329] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1774'. [ 560.772125][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 560.772140][ T30] audit: type=1400 audit(4751448930.324:1542): avc: denied { read append } for pid=12325 comm="syz.6.1772" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 560.842425][T12329] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1774'. [ 560.844131][ T30] audit: type=1400 audit(4751448930.324:1543): avc: denied { open } for pid=12325 comm="syz.6.1772" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 560.914238][ T30] audit: type=1400 audit(4751448930.434:1544): avc: denied { create } for pid=12325 comm="syz.6.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 560.965838][T12326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.976716][T12326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.983637][T12326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.994147][ T30] audit: type=1400 audit(4751448930.434:1545): avc: denied { mount } for pid=12325 comm="syz.6.1772" name="/" dev="autofs" ino=41112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 561.024105][T12326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 561.030707][T12326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.036844][T12326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 561.054719][T12326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 561.071749][ T30] audit: type=1400 audit(4751448930.614:1546): avc: denied { write } for pid=12345 comm="syz.5.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 561.081501][T12326] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 561.099381][T12326] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 561.113467][T12326] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 561.233195][ T54] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 561.256202][ T30] audit: type=1400 audit(4751448930.724:1547): avc: denied { ioctl } for pid=12345 comm="syz.5.1767" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.602075][ T30] audit: type=1400 audit(4751448930.844:1548): avc: denied { setopt } for pid=12345 comm="syz.5.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 561.659716][ T30] audit: type=1400 audit(4751448931.194:1549): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.731960][ T30] audit: type=1400 audit(4751448931.194:1550): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.766883][ T30] audit: type=1400 audit(4751448931.194:1551): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 563.903035][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.909407][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.926803][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 563.932906][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 563.938908][ T5812] Bluetooth: hci5: command 0x0405 tx timeout [ 563.945127][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout [ 563.951201][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 563.957200][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 565.779401][T12402] fuse: Bad value for 'fd' [ 565.783992][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 565.784003][ T30] audit: type=1400 audit(4751448935.324:1598): avc: denied { mounton } for pid=12401 comm="syz.6.1792" path="/51/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 565.996069][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 566.002195][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 566.009904][ T30] audit: type=1400 audit(4751448935.374:1599): avc: denied { watch } for pid=12401 comm="syz.6.1792" path="/51/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 566.032253][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.439837][ T30] audit: type=1400 audit(4751448935.374:1600): avc: denied { write } for pid=12401 comm="syz.6.1792" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 566.462832][ T5887] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 566.474477][ T30] audit: type=1400 audit(4751448935.544:1601): avc: denied { sys_module } for pid=12396 comm="syz.3.1791" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 566.525506][ T30] audit: type=1400 audit(4751448935.624:1602): avc: denied { create } for pid=12413 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 566.547693][ T30] audit: type=1400 audit(4751448935.634:1603): avc: denied { write } for pid=12413 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 566.568606][ T30] audit: type=1400 audit(4751448936.074:1604): avc: denied { append } for pid=12422 comm="syz.6.1796" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 566.744814][ T5887] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 566.995705][ T30] audit: type=1400 audit(4751448936.284:1605): avc: denied { create } for pid=12424 comm="syz.2.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.064244][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.474801][ T5887] usb 4-1: Product: syz [ 567.479084][ T5887] usb 4-1: Manufacturer: syz [ 567.533434][ T5887] usb 4-1: SerialNumber: syz [ 567.539631][ T5887] usb 4-1: config 0 descriptor?? [ 568.509120][ T30] audit: type=1400 audit(4751448937.144:1606): avc: denied { allowed } for pid=12422 comm="syz.6.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 569.209774][ T5887] usb 4-1: can't set config #0, error -71 [ 569.219929][ T5887] usb 4-1: USB disconnect, device number 44 [ 569.249009][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 569.255331][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 569.261786][ T30] audit: type=1400 audit(4751448938.154:1607): avc: denied { map } for pid=12422 comm="syz.6.1796" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 569.637692][T12447] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 570.049919][T10316] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 570.232185][T10316] usb 2-1: Using ep0 maxpacket: 32 [ 570.258697][T10316] usb 2-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 570.304443][T10316] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.354363][T10316] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 570.375345][T12455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1805'. [ 570.497080][T10316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.507249][T10316] usb 2-1: Product: syz [ 570.511517][T10316] usb 2-1: Manufacturer: syz [ 570.516159][T10316] usb 2-1: SerialNumber: syz [ 570.534113][T10316] usb 2-1: config 0 descriptor?? [ 570.537547][T12466] vlan2: entered promiscuous mode [ 570.544734][T12466] vlan2: entered allmulticast mode [ 570.715299][T12466] hsr_slave_1: entered allmulticast mode [ 570.995103][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 570.995130][ T30] audit: type=1400 audit(4751448940.534:1626): avc: denied { write } for pid=12453 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 571.035448][T12468] netlink: 'syz.5.1808': attribute type 4 has an invalid length. [ 571.046787][ T30] audit: type=1400 audit(4751448940.594:1627): avc: denied { read } for pid=12438 comm="syz.1.1800" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 571.056190][ T5887] usb 2-1: USB disconnect, device number 41 [ 571.079897][ T30] audit: type=1400 audit(4751448940.594:1628): avc: denied { open } for pid=12438 comm="syz.1.1800" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 571.111625][T12456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.130276][T12456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.137289][T12456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.139785][ T30] audit: type=1400 audit(4751448940.594:1629): avc: denied { ioctl } for pid=12438 comm="syz.1.1800" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 571.168851][T12456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 571.170823][ T30] audit: type=1400 audit(4751448940.624:1630): avc: denied { append } for pid=12438 comm="syz.1.1800" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 571.289882][T12456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.297905][ T30] audit: type=1400 audit(4751448940.654:1631): avc: denied { read } for pid=12453 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 571.318501][ T30] audit: type=1400 audit(4751448940.844:1632): avc: denied { read write } for pid=12470 comm="syz.3.1809" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.352544][T12456] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 571.358250][ T30] audit: type=1400 audit(4751448940.844:1633): avc: denied { open } for pid=12470 comm="syz.3.1809" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 571.491861][T12471] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 571.518050][ T30] audit: type=1400 audit(4751448941.014:1634): avc: denied { read write } for pid=12470 comm="syz.3.1809" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 571.549852][ T30] audit: type=1400 audit(4751448941.014:1635): avc: denied { open } for pid=12470 comm="syz.3.1809" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 571.722973][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1811'. [ 571.960027][ T5857] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 571.969781][T12480] nbd3: detected capacity change from 0 to 65536 [ 571.999179][ T54] block nbd3: Receive control failed (result -104) [ 572.170119][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 572.198405][ T5857] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 572.207967][ T5857] usb 6-1: config 0 has no interface number 0 [ 572.216624][ T5857] usb 6-1: config 0 interface 184 has no altsetting 0 [ 572.236224][ T5857] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 572.274970][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.292563][ T5857] usb 6-1: Product: syz [ 572.296826][ T5857] usb 6-1: Manufacturer: syz [ 572.306137][ T5857] usb 6-1: SerialNumber: syz [ 572.318388][ T5857] usb 6-1: config 0 descriptor?? [ 572.330956][T12488] libceph: resolve '4' (ret=-3): failed [ 572.336934][ T5857] smsc75xx v1.0.0 [ 572.540568][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 572.540582][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 572.763484][ T9] usb 2-1: config 123 has an invalid interface number: 89 but max is 0 [ 572.772014][ T9] usb 2-1: config 123 has no interface number 0 [ 572.779774][ T9] usb 2-1: config 123 interface 89 has no altsetting 0 [ 572.802306][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=60af, bcdDevice= 6.f5 [ 572.816994][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.834945][ T9] usb 2-1: Product: syz [ 572.841194][ T9] usb 2-1: Manufacturer: syz [ 572.846788][ T9] usb 2-1: SerialNumber: syz [ 573.179983][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 573.184993][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 573.186005][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 573.201819][ T9] gspca_main: sonixb-2.14.0 probing 0c45:60af [ 573.208756][ T9] sonixb 2-1:123.89: Error reading register 00: -71 [ 573.217638][ T9] usb 2-1: USB disconnect, device number 42 [ 573.342349][T12473] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 573.374329][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 573.452678][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 573.478389][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 573.552143][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 573.653547][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 573.710311][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 573.795002][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 573.871756][ T5859] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 573.885222][ T5857] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 573.982733][ T5857] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 574.263159][ T5857] usb 6-1: USB disconnect, device number 10 [ 574.411278][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 574.418040][ T5859] usb 3-1: config 0 has no interfaces? [ 574.432397][ T5859] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 574.442020][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.480144][ T5859] usb 3-1: Product: syz [ 574.486737][ T5859] usb 3-1: Manufacturer: syz [ 574.494447][ T5859] usb 3-1: SerialNumber: syz [ 574.508990][ T5859] usb 3-1: config 0 descriptor?? [ 574.789798][ T5857] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 575.091070][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 575.108098][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.127078][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.141890][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.157524][ T5857] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 575.167602][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.197140][ T5857] usb 6-1: config 0 descriptor?? [ 575.379786][ T5887] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 575.499757][T10316] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 575.531604][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.542627][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.552421][ T5887] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 575.561526][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.572165][ T5887] usb 4-1: config 0 descriptor?? [ 575.614267][ T5857] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001A/input/input24 [ 575.627368][ T5857] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 575.672358][T10316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.683342][T10316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.693100][T10316] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 575.702181][T10316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.712047][T10316] usb 2-1: config 0 descriptor?? [ 575.726874][ T5857] usb 3-1: USB disconnect, device number 57 [ 577.295764][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 577.295779][ T30] audit: type=1400 audit(4751448946.844:1660): avc: denied { mounton } for pid=12533 comm="syz.2.1828" path="/proc/1152/task" dev="proc" ino=41597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 577.326937][ T30] audit: type=1400 audit(4751448946.844:1661): avc: denied { mount } for pid=12533 comm="syz.2.1828" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 577.418139][ T5858] usb 6-1: USB disconnect, device number 11 [ 577.439843][ T5908] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 577.591964][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.602203][ T5908] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 577.612396][ T5908] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 577.621505][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.632970][ T5908] usb 7-1: config 0 descriptor?? [ 577.639834][ T5908] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 577.646536][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 577.654105][ T5908] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 577.663403][ T5908] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 577.670548][ T5908] usb 7-1: media controller created [ 577.676485][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.687261][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 577.693896][ T5908] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 577.704798][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 577.716715][ T5908] dvb-usb: schedule remote query interval to 150 msecs. [ 577.723801][ T5908] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 577.845112][ T30] audit: type=1400 audit(4751448947.394:1662): avc: denied { mounton } for pid=12530 comm="syz.6.1827" path="/59/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 577.891237][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 577.897090][ T5908] dvb-usb: error while querying for an remote control event. [ 577.898405][ T30] audit: type=1400 audit(4751448947.444:1663): avc: denied { append } for pid=12530 comm="syz.6.1827" name="i2c-1" dev="devtmpfs" ino=3336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 577.958807][ T5908] usb 7-1: USB disconnect, device number 7 [ 577.971889][ T30] audit: type=1400 audit(4751448947.524:1664): avc: denied { setopt } for pid=12538 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 577.984270][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 578.183699][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 578.204464][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 578.255347][ T5887] usb 4-1: USB disconnect, device number 45 [ 578.263929][T12544] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1829'. [ 578.315615][T12546] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 578.348752][T10316] usbhid 2-1:0.0: can't add hid device: -71 [ 578.386341][T10316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 578.472539][T10316] usb 2-1: USB disconnect, device number 43 [ 578.523808][ T30] audit: type=1400 audit(4751448948.074:1665): avc: denied { create } for pid=12545 comm="syz.3.1831" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 578.817934][ T30] audit: type=1400 audit(4751448948.294:1666): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 580.026635][ T30] audit: type=1400 audit(4751448949.574:1667): avc: denied { getopt } for pid=12566 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 582.670830][ T30] audit: type=1400 audit(4751448952.194:1668): avc: denied { connect } for pid=12579 comm="syz.3.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 582.770806][ T54] Bluetooth: hci2: ACL packet too small [ 582.781479][ T30] audit: type=1400 audit(4751448952.194:1669): avc: denied { name_connect } for pid=12579 comm="syz.3.1840" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 582.933844][ T30] audit: type=1400 audit(4751448952.194:1670): avc: denied { listen } for pid=12579 comm="syz.3.1840" lport=35964 faddr=::ffff:127.0.0.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.060013][ T30] audit: type=1400 audit(4751448952.314:1671): avc: denied { write } for pid=12579 comm="syz.3.1840" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 583.083810][ T30] audit: type=1400 audit(4751448952.444:1672): avc: denied { read write } for pid=12579 comm="syz.3.1840" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 583.107337][ T30] audit: type=1400 audit(4751448952.444:1673): avc: denied { open } for pid=12579 comm="syz.3.1840" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 583.190013][ T5857] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 583.744972][ T30] audit: type=1400 audit(4751448952.454:1674): avc: denied { accept } for pid=12579 comm="syz.3.1840" lport=35964 faddr=::ffff:127.0.0.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.769621][ T30] audit: type=1400 audit(4751448952.454:1675): avc: denied { setopt } for pid=12579 comm="syz.3.1840" lport=35964 faddr=::ffff:127.0.0.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 583.821257][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.842939][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.853328][ T5857] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 583.870193][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.895785][ T5857] usb 2-1: config 0 descriptor?? [ 583.996825][ T30] audit: type=1400 audit(4751448953.544:1676): avc: denied { read } for pid=12593 comm="syz.3.1845" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 584.024103][T12599] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1844'. [ 584.031789][T12598] dummy0: entered promiscuous mode [ 584.044332][ T30] audit: type=1400 audit(4751448953.574:1677): avc: denied { open } for pid=12593 comm="syz.3.1845" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 584.169836][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 584.721153][ T9] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 584.730346][ T9] usb 7-1: config 0 has no interface number 0 [ 584.736492][ T9] usb 7-1: too many endpoints for config 0 interface 76 altsetting 133: 31, using maximum allowed: 30 [ 584.839173][ T9] usb 7-1: config 0 interface 76 altsetting 133 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.878688][T12593] dummy0: left promiscuous mode [ 584.882026][ T9] usb 7-1: config 0 interface 76 altsetting 133 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 584.897669][ T9] usb 7-1: config 0 interface 76 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 584.911135][ T9] usb 7-1: config 0 interface 76 has no altsetting 0 [ 584.920715][ T9] usb 7-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 584.930009][ T9] usb 7-1: New USB device strings: Mfr=0, Product=244, SerialNumber=0 [ 584.938195][ T9] usb 7-1: Product: syz [ 584.946191][ T9] usb 7-1: config 0 descriptor?? [ 584.952442][T12597] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 585.169970][ T9] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.76/input/input26 [ 585.257676][T12608] xt_hashlimit: max too large, truncated to 1048576 [ 585.268898][T12608] xt_hashlimit: Unknown mode mask 88, kernel too old? [ 585.277160][T12610] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1850'. [ 585.332496][T12612] sp0: Synchronizing with TNC [ 585.369947][ T10] usb 7-1: USB disconnect, device number 8 [ 585.663153][T12617] netlink: 'syz.5.1853': attribute type 7 has an invalid length. [ 585.676326][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1853'. [ 585.685614][T12617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 585.938419][ T5857] usbhid 2-1:0.0: can't add hid device: -71 [ 585.969913][ T5857] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.025662][ T5857] usb 2-1: USB disconnect, device number 44 [ 586.502671][T12630] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 586.555842][T12636] xt_hashlimit: max too large, truncated to 1048576 [ 586.568561][T12634] ipt_REJECT: TCP_RESET invalid for non-tcp [ 586.713549][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 586.829883][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 587.103720][T12656] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1862'. [ 587.484961][ T9] usb 7-1: device descriptor read/64, error -71 [ 588.253081][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 588.604531][ T9] usb 7-1: device descriptor read/64, error -71 [ 589.009884][ T9] usb usb7-port1: attempt power cycle [ 589.339853][ T11] block nbd2: Possible stuck request ffff888026250000: control (read@0,1024B). Runtime 180 seconds [ 589.354608][ T11] block nbd2: Possible stuck request ffff8880262501c0: control (read@1024,1024B). Runtime 180 seconds [ 589.389702][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 589.404655][ T11] block nbd2: Possible stuck request ffff888026250380: control (read@2048,1024B). Runtime 180 seconds [ 589.452108][ T11] block nbd2: Possible stuck request ffff888026250540: control (read@3072,1024B). Runtime 180 seconds [ 589.742057][ T9] usb 7-1: device descriptor read/8, error -71 [ 589.808666][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 589.808677][ T30] audit: type=1400 audit(4751448959.354:1695): avc: denied { read } for pid=12670 comm="syz.6.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 589.839983][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 589.893507][ T30] audit: type=1400 audit(4751448959.444:1696): avc: denied { create } for pid=12670 comm="syz.6.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 589.914032][ T30] audit: type=1400 audit(4751448959.444:1697): avc: denied { setopt } for pid=12670 comm="syz.6.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 589.933854][ T30] audit: type=1400 audit(4751448959.454:1698): avc: denied { read } for pid=12672 comm="syz.2.1871" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 589.957477][ T30] audit: type=1400 audit(4751448959.454:1699): avc: denied { open } for pid=12672 comm="syz.2.1871" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 590.011181][ T24] usb 6-1: config 0 has no interfaces? [ 590.024733][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.039400][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.049047][ T24] usb 6-1: Product: syz [ 590.053401][ T24] usb 6-1: Manufacturer: syz [ 590.060150][ T24] usb 6-1: config 0 descriptor?? [ 590.071858][ T30] audit: type=1400 audit(4751448959.624:1700): avc: denied { append } for pid=12675 comm="syz.1.1872" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.073040][T12676] loop6: detected capacity change from 0 to 7 [ 590.104467][T12676] Dev loop6: unable to read RDB block 7 [ 590.110090][T12676] loop6: unable to read partition table [ 590.115814][T12676] loop6: partition table beyond EOD, truncated [ 590.122058][T12676] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 590.174160][ T30] audit: type=1400 audit(4751448959.724:1701): avc: denied { map } for pid=12677 comm="syz.1.1873" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.199735][ T30] audit: type=1400 audit(4751448959.724:1702): avc: denied { execute } for pid=12677 comm="syz.1.1873" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.289828][ T24] usb 6-1: USB disconnect, device number 12 [ 590.360689][ T5859] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 590.407727][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 590.413945][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 590.509726][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 590.516180][ T5859] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 590.527645][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.536755][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.545547][ T5859] usb 3-1: Product: syz [ 590.550171][ T5859] usb 3-1: Manufacturer: syz [ 590.554754][ T5859] usb 3-1: SerialNumber: syz [ 590.593880][ T30] audit: type=1400 audit(4751448960.144:1703): avc: denied { execute } for pid=12684 comm="syz.3.1876" path="/378/bus" dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 590.639742][ T5887] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 590.686987][ T30] audit: type=1400 audit(4751448960.234:1704): avc: denied { unmount } for pid=11305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 590.706974][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.771329][ T5859] cdc_ncm 3-1:1.0: bind() failure [ 590.784579][ T5859] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 590.792700][ T5859] cdc_ncm 3-1:1.1: bind() failure [ 590.803268][ T5859] usb 3-1: USB disconnect, device number 58 [ 590.869741][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 590.877446][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.887229][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.900895][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.910893][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.923897][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.932967][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.169372][ T5887] usb 2-1: GET_CAPABILITIES returned 0 [ 591.387542][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 591.935425][ T5887] usb 2-1: USB disconnect, device number 45 [ 594.063679][T12720] input: syz1 as /devices/virtual/input/input27 [ 594.679175][T12729] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 594.687215][T12729] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 594.695213][T12729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1889'. [ 594.890359][ T5898] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 594.903423][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 594.903437][ T30] audit: type=1400 audit(4751448964.454:1710): avc: denied { bind } for pid=12735 comm="syz.1.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.903788][T12736] trusted_key: syz.1.1892 sent an empty control message without MSG_MORE. [ 594.943853][ T30] audit: type=1400 audit(4751448964.494:1711): avc: denied { read } for pid=12735 comm="syz.1.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 594.996873][ T30] audit: type=1400 audit(4751448964.544:1712): avc: denied { ioctl } for pid=12737 comm="syz.1.1893" path="socket:[42742]" dev="sockfs" ino=42742 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 595.062807][ T5898] usb 7-1: config 0 has no interfaces? [ 595.070200][ T5898] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.079374][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.089929][ T5898] usb 7-1: Product: syz [ 595.094137][ T5898] usb 7-1: Manufacturer: syz [ 595.101299][ T5898] usb 7-1: config 0 descriptor?? [ 595.187220][ T30] audit: type=1400 audit(4751448964.734:1713): avc: denied { write } for pid=12740 comm="syz.3.1894" name="udp6" dev="proc" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 595.215212][T12741] sp0: Synchronizing with TNC [ 595.321685][T10316] usb 7-1: USB disconnect, device number 13 [ 596.736407][T12753] FAULT_INJECTION: forcing a failure. [ 596.736407][T12753] name failslab, interval 1, probability 0, space 0, times 0 [ 596.755738][T12753] CPU: 0 UID: 0 PID: 12753 Comm: syz.3.1898 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 596.755766][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.755776][T12753] Call Trace: [ 596.755782][T12753] [ 596.755789][T12753] dump_stack_lvl+0x16c/0x1f0 [ 596.755819][T12753] should_fail_ex+0x512/0x640 [ 596.755846][T12753] ? ip6_tun_build_state+0x16e/0x710 [ 596.755871][T12753] should_failslab+0xc2/0x120 [ 596.755894][T12753] __kmalloc_noprof+0xd2/0x510 [ 596.755912][T12753] ? __nla_parse+0x40/0x60 [ 596.755932][T12753] ip6_tun_build_state+0x16e/0x710 [ 596.755960][T12753] ? __pfx_ip6_tun_build_state+0x10/0x10 [ 596.755984][T12753] ? __lock_acquire+0x5ca/0x1ba0 [ 596.756027][T12753] ? find_held_lock+0x2b/0x80 [ 596.756057][T12753] ? find_held_lock+0x2b/0x80 [ 596.756078][T12753] ? lwtunnel_build_state+0x19a/0x680 [ 596.756106][T12753] ? lwtunnel_build_state+0x1dc/0x680 [ 596.756127][T12753] lwtunnel_build_state+0x1dc/0x680 [ 596.756160][T12753] fib_nh_common_init+0x149/0x2d0 [ 596.756189][T12753] ? __pfx_fib_nh_common_init+0x10/0x10 [ 596.756211][T12753] ? ip_fib_metrics_init+0x3e2/0x760 [ 596.756239][T12753] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 596.756263][T12753] ? rcu_is_watching+0x12/0xc0 [ 596.756288][T12753] fib_nh_init+0xbd/0x460 [ 596.756317][T12753] fib_create_info+0x25d4/0x46a0 [ 596.756361][T12753] ? __pfx_fib_create_info+0x10/0x10 [ 596.756387][T12753] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 596.756421][T12753] fib_table_insert+0x177/0x1c40 [ 596.756444][T12753] ? mark_held_locks+0x49/0x80 [ 596.756480][T12753] ? __pfx_fib_table_insert+0x10/0x10 [ 596.756509][T12753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 596.756535][T12753] ? inet_rtm_newroute+0x124/0x210 [ 596.756556][T12753] inet_rtm_newroute+0x124/0x210 [ 596.756579][T12753] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 596.756615][T12753] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 596.756637][T12753] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 596.756658][T12753] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 596.756681][T12753] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 596.756706][T12753] rtnetlink_rcv_msg+0x95e/0xe90 [ 596.756730][T12753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.756750][T12753] ? __pfx_avc_has_perm+0x10/0x10 [ 596.756784][T12753] netlink_rcv_skb+0x16d/0x440 [ 596.756807][T12753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.756834][T12753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.756872][T12753] ? netlink_deliver_tap+0x1ae/0xd30 [ 596.756898][T12753] netlink_unicast+0x53a/0x7f0 [ 596.756924][T12753] ? __pfx_netlink_unicast+0x10/0x10 [ 596.756954][T12753] netlink_sendmsg+0x8d1/0xdd0 [ 596.756980][T12753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.757017][T12753] ____sys_sendmsg+0xa95/0xc70 [ 596.757043][T12753] ? copy_msghdr_from_user+0x10a/0x160 [ 596.757066][T12753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.757102][T12753] ___sys_sendmsg+0x134/0x1d0 [ 596.757124][T12753] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.757179][T12753] __sys_sendmsg+0x16d/0x220 [ 596.757199][T12753] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.757228][T12753] ? rcu_is_watching+0x12/0xc0 [ 596.757256][T12753] do_syscall_64+0xcd/0x260 [ 596.757283][T12753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.757301][T12753] RIP: 0033:0x7fe97ad8e969 [ 596.757317][T12753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.757334][T12753] RSP: 002b:00007fe97bc30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.757352][T12753] RAX: ffffffffffffffda RBX: 00007fe97afb5fa0 RCX: 00007fe97ad8e969 [ 596.757363][T12753] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 596.757374][T12753] RBP: 00007fe97bc30090 R08: 0000000000000000 R09: 0000000000000000 [ 596.757384][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.757394][T12753] R13: 0000000000000000 R14: 00007fe97afb5fa0 R15: 00007ffdf6246808 [ 596.757420][T12753] [ 597.598436][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'. [ 597.608759][T12763] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1900'. [ 597.618088][T12763] netlink: 'syz.5.1900': attribute type 3 has an invalid length. [ 597.626526][T12763] netlink: 'syz.5.1900': attribute type 2 has an invalid length. [ 597.634289][T12763] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1900'. [ 597.676732][ T30] audit: type=1400 audit(4751448967.224:1714): avc: denied { execute_no_trans } for pid=12761 comm="syz.5.1900" path="/73/file2" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 600.765242][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'. [ 600.996783][ T30] audit: type=1400 audit(4751448970.544:1715): avc: denied { read } for pid=12784 comm="syz.1.1907" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 601.049295][ T30] audit: type=1400 audit(4751448970.544:1716): avc: denied { open } for pid=12784 comm="syz.1.1907" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 601.238860][ T30] audit: type=1400 audit(4751448970.544:1717): avc: denied { ioctl } for pid=12784 comm="syz.1.1907" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 601.295360][ T30] audit: type=1400 audit(4751448970.594:1718): avc: denied { read } for pid=12784 comm="syz.1.1907" path="socket:[42830]" dev="sockfs" ino=42830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 601.831109][ T30] audit: type=1400 audit(4751448970.974:1719): avc: denied { create } for pid=12796 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 601.911557][ T30] audit: type=1400 audit(4751448970.974:1720): avc: denied { setopt } for pid=12796 comm="syz.5.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 601.931105][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.278243][ T30] audit: type=1400 audit(4751448973.684:1721): avc: denied { read write } for pid=12844 comm="syz.2.1928" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 604.301554][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.330142][ T30] audit: type=1400 audit(4751448973.684:1722): avc: denied { open } for pid=12844 comm="syz.2.1928" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 604.458634][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'. [ 606.161335][ T30] audit: type=1400 audit(4751448975.394:1723): avc: denied { shutdown } for pid=12859 comm="syz.5.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.319256][ T30] audit: type=1400 audit(4751448975.414:1724): avc: denied { read } for pid=12859 comm="syz.5.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.500219][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'. [ 606.533453][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 606.792565][ T30] audit: type=1400 audit(4751448977.269:1725): avc: denied { bind } for pid=12869 comm="syz.3.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 607.229790][ T5898] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 607.881298][ T5898] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 607.937649][ T5898] usb 6-1: config 0 has no interface number 0 [ 607.979249][ T5898] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 608.159471][ T5898] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 608.260185][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.269733][ T5898] usb 6-1: Product: syz [ 608.273905][ T5898] usb 6-1: Manufacturer: syz [ 608.278554][ T5898] usb 6-1: SerialNumber: syz [ 608.286979][ T30] audit: type=1400 audit(4751448978.609:1726): avc: denied { firmware_load } for pid=12888 comm="syz.6.1941" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 608.291929][ T5898] usb 6-1: config 0 descriptor?? [ 608.346478][T12879] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 608.356211][ T5898] usb-storage 6-1:0.20: USB Mass Storage device detected [ 608.426309][ T5898] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 608.577050][ T5898] scsi host1: usb-storage 6-1:0.20 [ 608.838682][T12879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.870889][T12879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.936790][ T30] audit: type=1400 audit(4751448979.479:1727): avc: denied { create } for pid=12908 comm="syz.6.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 609.998033][T10316] hid-generic 0000:0004:0009.001B: unknown main item tag 0x0 [ 610.007962][ T30] audit: type=1400 audit(4751448980.079:1728): avc: denied { connect } for pid=12878 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 610.073524][T10316] hid-generic 0000:0004:0009.001B: unknown main item tag 0x0 [ 610.089332][T10316] hid-generic 0000:0004:0009.001B: unknown main item tag 0x0 [ 610.101203][ T30] audit: type=1400 audit(4751448980.139:1729): avc: denied { read write } for pid=12927 comm="syz.1.1953" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 610.142199][T10316] hid-generic 0000:0004:0009.001B: hidraw0: HID v0.04 Device [syz0] on syz1 [ 610.155814][ T30] audit: type=1400 audit(4751448980.139:1730): avc: denied { open } for pid=12927 comm="syz.1.1953" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 610.211558][T12905] usb 6-1: reset full-speed USB device number 13 using dummy_hcd [ 610.220583][ T30] audit: type=1400 audit(4751448980.649:1731): avc: denied { create } for pid=12935 comm="syz.6.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 610.429096][ T30] audit: type=1400 audit(4751448980.649:1732): avc: denied { connect } for pid=12935 comm="syz.6.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 610.879193][T12959] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 611.387816][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 611.387828][ T30] audit: type=1400 audit(4751448981.929:1735): avc: denied { read append } for pid=12975 comm="syz.3.1965" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 611.958254][ T30] audit: type=1400 audit(4751448982.019:1736): avc: denied { getopt } for pid=12969 comm="syz.6.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 612.246517][ T24] usb 6-1: USB disconnect, device number 13 [ 612.261993][ T30] audit: type=1400 audit(4751448982.519:1737): avc: denied { open } for pid=12975 comm="syz.3.1965" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 612.366077][ T30] audit: type=1400 audit(4751448982.679:1738): avc: denied { mount } for pid=12979 comm="syz.3.1966" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 612.484806][ T30] audit: type=1400 audit(4751448982.679:1739): avc: denied { mounton } for pid=12979 comm="syz.3.1966" path="/397/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 612.508760][ T30] audit: type=1400 audit(4751448982.679:1740): avc: denied { mounton } for pid=12979 comm="syz.3.1966" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 612.567315][ T30] audit: type=1400 audit(4751448982.779:1741): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 612.786353][T12988] netlink: 'syz.6.1968': attribute type 7 has an invalid length. [ 612.830706][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 612.895795][T12988] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 612.913110][ T54] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 612.921909][ T54] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 612.980451][T12989] xt_l2tp: missing protocol rule (udp|l2tpip) [ 613.121954][ T30] audit: type=1400 audit(4751448983.669:1742): avc: denied { mount } for pid=12991 comm="syz.1.1969" name="/" dev="ramfs" ino=44346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 613.129855][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 613.529890][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 613.550401][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.613571][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.761225][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.789725][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.848726][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.876489][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.042099][ T30] audit: type=1400 audit(4751448984.569:1743): avc: denied { open } for pid=13004 comm="syz.2.1975" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 614.122482][ T30] audit: type=1400 audit(4751448984.579:1744): avc: denied { ioctl } for pid=13004 comm="syz.2.1975" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 614.315720][ T24] usb 6-1: usb_control_msg returned -71 [ 614.359144][T13010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13010 comm=syz.5.1976 [ 614.374047][ T24] usbtmc 6-1:16.0: can't read capabilities [ 614.423970][T13011] netlink: 'syz.5.1976': attribute type 1 has an invalid length. [ 614.455021][ T24] usb 6-1: USB disconnect, device number 14 [ 614.596870][T13010] bond1: (slave gretap1): making interface the new active one [ 614.636638][T13010] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 614.769757][ T5908] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 614.934413][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 614.977317][ T5908] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 615.002513][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.033173][ T5908] usb 7-1: Product: syz [ 615.038409][ T5908] usb 7-1: Manufacturer: syz [ 615.046366][ T5908] usb 7-1: SerialNumber: syz [ 615.053128][ T5908] usb 7-1: config 0 descriptor?? [ 615.073750][ T5908] gspca_main: se401-2.14.0 probing 047d:5003 [ 615.167668][T13031] netlink: 'syz.3.1981': attribute type 7 has an invalid length. [ 615.198775][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1981'. [ 615.209096][T13031] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 615.244197][T13007] syz.2.1975 (13007): drop_caches: 2 [ 615.480121][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 615.687921][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.710561][ T5859] kernel write not supported for file /fb0 (pid: 5859 comm: kworker/0:5) [ 615.738013][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.760087][ T5898] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 615.823185][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 615.833064][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.843414][ T10] usb 2-1: config 0 descriptor?? [ 615.871236][ T5908] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 615.959779][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 615.966724][ T5898] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 615.979936][ T5898] usb 4-1: config 0 has no interface number 0 [ 615.988162][ T5898] usb 4-1: config 0 interface 184 has no altsetting 0 [ 615.997525][ T5898] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 616.007916][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.016008][ T5898] usb 4-1: Product: syz [ 616.020237][ T5898] usb 4-1: Manufacturer: syz [ 616.024878][ T5898] usb 4-1: SerialNumber: syz [ 616.032646][ T5898] usb 4-1: config 0 descriptor?? [ 616.040060][ T5898] smsc75xx v1.0.0 [ 616.462750][ T5859] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 616.647683][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 616.647733][ T30] audit: type=1400 audit(4751448987.189:1782): avc: denied { write } for pid=13037 comm="syz.3.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 616.724143][ T5898] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 616.735093][ T5898] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 616.745793][ T5898] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 616.756382][ T5898] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 616.767449][ T5898] usb 4-1: USB disconnect, device number 47 [ 616.800112][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 616.806912][ T5859] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 616.815361][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.826667][ T5859] usb 3-1: config 0 has no interface number 1 [ 616.835025][ T5859] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 616.844206][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 616.852450][ T5859] usb 3-1: Product: syz [ 616.856651][ T5859] usb 3-1: Manufacturer: syz [ 616.861719][ T5859] usb 3-1: SerialNumber: syz [ 616.868417][ T5859] usb 3-1: config 0 descriptor?? [ 616.940767][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 616.950775][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 616.960933][ T54] Bluetooth: hci0: hardware error 0x00 [ 617.075251][ T5859] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 617.084059][ T5859] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 617.096771][ T5859] usb 3-1: USB disconnect, device number 59 [ 617.246526][ T30] audit: type=1400 audit(4751448987.789:1783): avc: denied { ioctl } for pid=13048 comm="syz.3.1987" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 618.097618][ T30] audit: type=1400 audit(4751448988.509:1784): avc: denied { override_creds } for pid=13054 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 618.219230][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 618.235100][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 618.256766][ T10] usb 2-1: USB disconnect, device number 46 [ 618.660095][ T5908] gspca_se401: read req failed req 0x06 error -19 [ 618.669867][ T5908] usb 7-1: USB disconnect, device number 14 [ 618.954970][T13076] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1993'. [ 619.019937][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 619.025649][T13078] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1996'. [ 619.068441][T13080] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 619.077253][T13080] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.084701][T13080] team0: entered promiscuous mode [ 619.089745][T13080] team_slave_0: entered promiscuous mode [ 619.095492][T13080] team_slave_1: entered promiscuous mode [ 619.101699][T13080] bond0: (slave team0): Enslaving as an active interface with an up link [ 619.204439][T13082] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 619.262647][T13082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.419891][ T11] block nbd2: Possible stuck request ffff888026250000: control (read@0,1024B). Runtime 210 seconds [ 619.430850][ T11] block nbd2: Possible stuck request ffff8880262501c0: control (read@1024,1024B). Runtime 210 seconds [ 619.460111][ T11] block nbd2: Possible stuck request ffff888026250380: control (read@2048,1024B). Runtime 210 seconds [ 619.499820][ T11] block nbd2: Possible stuck request ffff888026250540: control (read@3072,1024B). Runtime 210 seconds [ 620.515717][T13096] tipc: Started in network mode [ 620.525389][T13096] tipc: Node identity 0000000000000000002e000000005e4, cluster identity 4711 [ 620.584613][ T30] audit: type=1400 audit(4751448991.129:1785): avc: denied { shutdown } for pid=13097 comm="syz.2.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 620.586177][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 620.649721][ T30] audit: type=1400 audit(4751448991.129:1786): avc: denied { ioctl } for pid=13097 comm="syz.2.2004" path="socket:[44677]" dev="sockfs" ino=44677 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 620.684763][T13101] FAULT_INJECTION: forcing a failure. [ 620.684763][T13101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.698037][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz.3.2005 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 620.698062][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.698073][T13101] Call Trace: [ 620.698079][T13101] [ 620.698086][T13101] dump_stack_lvl+0x16c/0x1f0 [ 620.698118][T13101] should_fail_ex+0x512/0x640 [ 620.698147][T13101] _copy_from_user+0x2e/0xd0 [ 620.698173][T13101] copy_msghdr_from_user+0x98/0x160 [ 620.698194][T13101] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 620.698229][T13101] ___sys_sendmsg+0xfe/0x1d0 [ 620.698251][T13101] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.698309][T13101] __sys_sendmsg+0x16d/0x220 [ 620.698329][T13101] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.698359][T13101] ? rcu_is_watching+0x12/0xc0 [ 620.698389][T13101] do_syscall_64+0xcd/0x260 [ 620.698417][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.698435][T13101] RIP: 0033:0x7fe97ad8e969 [ 620.698450][T13101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.698467][T13101] RSP: 002b:00007fe97bc30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.698484][T13101] RAX: ffffffffffffffda RBX: 00007fe97afb5fa0 RCX: 00007fe97ad8e969 [ 620.698494][T13101] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000006 [ 620.698505][T13101] RBP: 00007fe97bc30090 R08: 0000000000000000 R09: 0000000000000000 [ 620.698515][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.698524][T13101] R13: 0000000000000000 R14: 00007fe97afb5fa0 R15: 00007ffdf6246808 [ 620.698546][T13101] [ 620.729700][ T30] audit: type=1400 audit(4751448991.189:1787): avc: denied { ioctl } for pid=13097 comm="syz.2.2004" path="socket:[44676]" dev="sockfs" ino=44676 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 620.927666][T13109] loop6: detected capacity change from 0 to 7 [ 620.941220][T13109] Dev loop6: unable to read RDB block 7 [ 620.947005][T13109] loop6: unable to read partition table [ 620.979455][T13109] loop6: partition table beyond EOD, truncated [ 621.017370][T13109] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 621.070226][ T5898] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 621.394949][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.453551][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 621.497555][ T5898] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 621.534754][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.674330][ T5898] usb 7-1: config 0 descriptor?? [ 621.709382][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 621.729708][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 621.744747][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 621.770217][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 621.787550][ T5898] usb 7-1: media controller created [ 621.798851][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.827054][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 621.833449][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 622.358002][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 622.380075][ T30] audit: type=1400 audit(4751448992.909:1788): avc: denied { getopt } for pid=13119 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 622.400972][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 622.407925][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 622.559741][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 622.565518][ T5898] dvb-usb: error while querying for an remote control event. [ 622.583078][ T5898] usb 7-1: USB disconnect, device number 15 [ 622.599484][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 623.932752][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.939255][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.077919][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 624.481729][T13159] 9pnet_fd: Insufficient options for proto=fd [ 624.789695][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 624.809882][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 624.949823][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 624.956226][ T5898] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.966338][ T5898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.976237][ T5898] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.986282][ T5898] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.999599][ T5898] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.008792][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.017302][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.029360][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.041115][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 625.050418][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.060014][ T10] usb 3-1: config 0 descriptor?? [ 625.229000][T10316] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 625.243444][ T5898] usb 7-1: GET_CAPABILITIES returned 0 [ 625.249011][ T5898] usbtmc 7-1:16.0: can't read capabilities [ 625.486057][ T24] usb 7-1: USB disconnect, device number 16 [ 625.733395][T10316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.768739][T10316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.780006][T10316] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 625.789173][T10316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.810577][T10316] usb 4-1: config 0 descriptor?? [ 627.600063][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 627.606070][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 627.632950][ T10] usb 3-1: USB disconnect, device number 60 [ 629.195885][T10316] usbhid 4-1:0.0: can't add hid device: -71 [ 629.207130][T10316] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 629.232800][T13193] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 629.609987][ T30] audit: type=1400 audit(4751448999.979:1789): avc: denied { create } for pid=13188 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 629.963904][T10316] usb 4-1: USB disconnect, device number 48 [ 631.589707][ T31] INFO: task syz.4.1486:11019 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 631.703793][ T30] audit: type=1400 audit(4751449002.229:1790): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[3611]" dev="pipefs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 631.744696][ T31] Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 [ 631.761978][ T30] audit: type=1400 audit(4751449002.309:1791): avc: denied { ioctl } for pid=13211 comm="syz-executor" path="socket:[44982]" dev="sockfs" ino=44982 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 631.788951][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 631.808410][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 631.816369][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 631.832202][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.841373][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 631.858497][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 631.960398][ T31] task:syz.4.1486 state:D stack:26872 pid:11019 tgid:11012 ppid:5816 task_flags:0x400140 flags:0x00404004 [ 631.989098][ T30] audit: type=1400 audit(4751449002.529:1792): avc: denied { mounton } for pid=13211 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 632.047422][ T31] Call Trace: [ 632.050768][ T31] [ 632.053704][ T31] __schedule+0x116f/0x5de0 [ 632.058222][ T31] ? register_lock_class+0x41/0x4c0 [ 632.066151][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 632.071156][ T31] ? __pfx___schedule+0x10/0x10 [ 632.076024][ T31] ? find_held_lock+0x2b/0x80 [ 632.080738][ T31] ? schedule+0x2d7/0x3a0 [ 632.085079][ T31] schedule+0xe7/0x3a0 [ 632.089152][ T31] schedule_preempt_disabled+0x13/0x30 [ 632.094634][ T31] __mutex_lock+0x6c7/0xb90 [ 632.099146][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 632.104119][ T31] ? sync_bdevs+0xfd/0x360 [ 632.108547][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.113643][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 632.118941][ T31] ? iput+0xd3/0x880 [ 632.122871][ T31] ? sync_bdevs+0xfd/0x360 [ 632.127294][ T31] sync_bdevs+0xfd/0x360 [ 632.131575][ T31] ksys_sync+0xb2/0x150 [ 632.135740][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 632.140572][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.145350][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.150186][ T31] ? do_syscall_64+0x91/0x260 [ 632.154880][ T31] __do_sys_sync+0xe/0x20 [ 632.159215][ T31] do_syscall_64+0xcd/0x260 [ 632.163773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.171762][ T31] RIP: 0033:0x7f0bd438e969 [ 632.176193][ T31] RSP: 002b:00007f0bd512e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 632.184664][ T31] RAX: ffffffffffffffda RBX: 00007f0bd45b6080 RCX: 00007f0bd438e969 [ 632.192713][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 632.200724][ T31] RBP: 00007f0bd45b6080 R08: 0000000000000000 R09: 0000000000000000 [ 632.208697][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.216760][ T31] R13: 0000000000000000 R14: 00007f0bd45b6080 R15: 00007fff5a2989d8 [ 632.225340][ T31] [ 632.228443][ T31] [ 632.228443][ T31] Showing all locks held in the system: [ 632.265533][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 632.279775][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 632.330194][ T31] 1 lock held by khungtaskd/31: [ 632.330397][T13211] chnl_net:caif_netlink_parms(): no params data found [ 632.335049][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 632.399563][ T31] 2 locks held by getty/5573: [ 632.459664][ T31] #0: ffff8880372720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 632.469461][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 632.520276][ T31] 1 lock held by syz-executor/5809: [ 632.525505][ T31] 1 lock held by udevd/5825: [ 632.550129][ T31] #0: ffff888026168358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 632.569683][ T31] 3 locks held by kworker/1:6/5908: [ 632.574908][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 632.590605][ T31] #1: ffffc90005627d18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 632.600379][ T31] #2: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 632.610600][ T31] 1 lock held by syz.4.1486/11019: [ 632.615686][ T31] #0: ffff888026168358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 632.625014][ T31] 1 lock held by syz-executor/11305: [ 632.630403][ T31] #0: ffffffff90125ca8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 632.639346][ T31] 1 lock held by syz.2.1805/12457: [ 632.644847][ T31] #0: ffffffff90125ca8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 632.653882][ T31] 1 lock held by syz.5.1979/13023: [ 632.658974][ T31] #0: ffff888026168358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 632.668286][ T31] 3 locks held by syz-executor/13211: [ 632.673816][ T31] #0: ffffffff8f4ef0e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 632.683391][ T31] #1: ffffffff90125ca8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 632.692433][ T31] #2: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 632.702656][ T31] [ 632.705005][ T31] ============================================= [ 632.705005][ T31] [ 632.713702][ T31] NMI backtrace for cpu 1 [ 632.713714][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 632.713736][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.713746][ T31] Call Trace: [ 632.713752][ T31] [ 632.713758][ T31] dump_stack_lvl+0x116/0x1f0 [ 632.713784][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 632.713802][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 632.713825][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 632.713844][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 632.713866][ T31] watchdog+0xf70/0x12c0 [ 632.713889][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.713904][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.713928][ T31] ? __kthread_parkme+0x19e/0x250 [ 632.713953][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.713969][ T31] kthread+0x3c2/0x780 [ 632.713986][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714001][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714016][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714032][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714048][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.714069][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714086][ T31] ret_from_fork+0x45/0x80 [ 632.714103][ T31] ? __pfx_kthread+0x10/0x10 [ 632.714119][ T31] ret_from_fork_asm+0x1a/0x30 [ 632.714155][ T31] [ 632.714163][ T31] Sending NMI from CPU 1 to CPUs 0: [ 632.852150][ C0] NMI backtrace for cpu 0 [ 632.852163][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 632.852179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.852187][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 632.852209][ C0] Code: e5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 cf 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 632.852220][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 632.852232][ C0] RAX: 000000000337f201 RBX: 0000000000000000 RCX: ffffffff8b6d2419 [ 632.852240][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe291d RDI: ffffffff8bf48aa0 [ 632.852248][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 632.852256][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 632.852264][ C0] R13: ffffffff8e097740 R14: ffffffff90850010 R15: 0000000000000000 [ 632.852272][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 632.852286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.852294][ C0] CR2: 00007f96f1ce7d60 CR3: 000000002b25f000 CR4: 00000000003526f0 [ 632.852302][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.852309][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.852317][ C0] Call Trace: [ 632.852321][ C0] [ 632.852325][ C0] default_idle+0x13/0x20 [ 632.852337][ C0] default_idle_call+0x6d/0xb0 [ 632.852348][ C0] do_idle+0x391/0x510 [ 632.852364][ C0] ? __pfx_do_idle+0x10/0x10 [ 632.852379][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 632.852397][ C0] cpu_startup_entry+0x4f/0x60 [ 632.852412][ C0] rest_init+0x16b/0x2b0 [ 632.852423][ C0] ? acpi_subsystem_init+0x133/0x180 [ 632.852440][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 632.852453][ C0] start_kernel+0x3e9/0x4d0 [ 632.852472][ C0] x86_64_start_reservations+0x18/0x30 [ 632.852490][ C0] x86_64_start_kernel+0xb0/0xc0 [ 632.852507][ C0] common_startup_64+0x13e/0x148 [ 632.852527][ C0] [ 633.090740][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 633.097612][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 633.109392][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.119425][ T31] Call Trace: [ 633.122681][ T31] [ 633.125590][ T31] dump_stack_lvl+0x3d/0x1f0 [ 633.130165][ T31] panic+0x71c/0x800 [ 633.134046][ T31] ? __pfx_panic+0x10/0x10 [ 633.138446][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 633.143797][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 633.149760][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 633.155121][ T31] ? watchdog+0xdda/0x12c0 [ 633.159512][ T31] ? watchdog+0xdcd/0x12c0 [ 633.163906][ T31] watchdog+0xdeb/0x12c0 [ 633.168127][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.172779][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.177957][ T31] ? __kthread_parkme+0x19e/0x250 [ 633.182962][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.187615][ T31] kthread+0x3c2/0x780 [ 633.191668][ T31] ? __pfx_kthread+0x10/0x10 [ 633.196250][ T31] ? __pfx_kthread+0x10/0x10 [ 633.200824][ T31] ? __pfx_kthread+0x10/0x10 [ 633.205402][ T31] ? __pfx_kthread+0x10/0x10 [ 633.209996][ T31] ? rcu_is_watching+0x12/0xc0 [ 633.214746][ T31] ? __pfx_kthread+0x10/0x10 [ 633.219321][ T31] ret_from_fork+0x45/0x80 [ 633.223726][ T31] ? __pfx_kthread+0x10/0x10 [ 633.228299][ T31] ret_from_fork_asm+0x1a/0x30 [ 633.233070][ T31] [ 633.236260][ T31] Kernel Offset: disabled [ 633.240564][ T31] Rebooting in 86400 seconds..