last executing test programs: 2m50.705058502s ago: executing program 4 (id=440): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{0x6, 0x5, 0x0, 0x7fff4026}, {0x1e, 0x4, 0x2f}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRES32=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x500, 0x0, 0xfffd, 0x0, 0x40000, 0x0, 0x0, 0x10}}, 0x50) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xffffffffffffffff, 0x90400) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x81001, 0x2496) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r3, 0x2000000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x300080, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff04"], 0x14}, 0x1, 0x0, 0x0, 0x440d7}, 0x8000000) (fail_nth: 4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x11, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)={0x0, 0xc88, 0xa3, "679a1056831f8d5e4f7402d654c2194228ce0b9829b71d5350777283dbaffcb6366d0ab4b607df669cd44d398be17a7beaeaa4b37e483d5042f58b5702b4c7dd6c79dfd0b2491609170e1b4880a4d695931dce87a21c6a6982954f926814712b29dfeafebac865de4babab2652d98561889ec6aa58141f925ec715f58cdd3ccde3d94dff932c9cd18dd6defa4833456af896c1bd850d4c5ef18c5c084c75cf5a349a6d"}, 0xab) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 2m50.011871833s ago: executing program 4 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3, 0x2c, 0x20, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x4, 0xa5, 0x1, 0x8}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0) 2m49.60123474s ago: executing program 4 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x10000, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r4) socket$tipc(0x1e, 0x5, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x101700) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r3, 0x20) shutdown(r3, 0x0) 2m44.901432087s ago: executing program 4 (id=451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() prlimit64(r1, 0x6, &(0x7f0000000040)={0x2008, 0xc}, 0x0) getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000080c33f40f70a0101622d000000010902120001000000000904000000cb355200"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_FD(r5, 0x4c05, r5) dup2(r4, r2) 2m42.135616114s ago: executing program 4 (id=461): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a", 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x801d}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) (fail_nth: 10) 2m40.917424599s ago: executing program 4 (id=466): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x1}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m40.213371436s ago: executing program 32 (id=466): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x280) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x3}, 0x10}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0x1}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='erofs\x00', 0x851, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m21.225171723s ago: executing program 5 (id=749): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) symlinkat(&(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x6c}}, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) (async) unshare(0x42000000) 1m19.941140605s ago: executing program 5 (id=755): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x25, 0x5, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 1m18.007916593s ago: executing program 5 (id=762): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 1m17.425450672s ago: executing program 5 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_clone(0x8000680, 0x0, 0x6e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r0, 0x16) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) unshare(0x28000600) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) 1m16.316851863s ago: executing program 5 (id=768): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) write(r4, &(0x7f0000000640)="9e", 0x1) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f00000000c0)={0x10, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000a40)) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3, {0x6, 0x2, 0x6, 0x4, 0x3, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m15.712527324s ago: executing program 5 (id=772): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/69, 0x45, 0x7, 0x5, 0xa3, 0x0, 0x3ff}}, 0x120) 1m15.306787681s ago: executing program 33 (id=772): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/69, 0x45, 0x7, 0x5, 0xa3, 0x0, 0x3ff}}, 0x120) 13.578142375s ago: executing program 3 (id=975): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 12.5961373s ago: executing program 3 (id=977): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x805, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000672000/0x4000)=nil, 0x4000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x7) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r2, 0x402, 0x13) open(0x0, 0x109042, 0x0) mremap(&(0x7f0000e67000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c98000/0x3000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005000)={0x2020}, 0xfdc9) listen(r5, 0x3) syz_fuse_handle_req(r4, &(0x7f0000000380)="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", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 12.353504674s ago: executing program 1 (id=979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000090}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r3, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004440)={0x18, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5da6982ca8fdfd5, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}}, 0x44004) 11.816794993s ago: executing program 6 (id=981): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x8, 0x101}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x303a40, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 11.729241288s ago: executing program 1 (id=982): socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5409, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009050402100000fa0009058202", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102358, 0x18fd6) syz_open_dev$vim2m(0x0, 0x7f, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) socket(0x1, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x1, r7}) sendmsg$unix(r5, &(0x7f0000000080), 0x240408c1) 10.611090797s ago: executing program 3 (id=988): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, 0x0, 0x0, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x10, r3, 0x10000000) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet(0x2, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xae}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r4, 0x0) unshare(0x40200) semget(0x1, 0x4, 0x39c) unshare(0x40400) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8) 9.108574008s ago: executing program 3 (id=991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000006440), 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x13) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "ddf98317e5a1149989fc8dbe43ea6acc96e3aa503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985888a073500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc40a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7]}}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500030001000000050003000200"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.103994555s ago: executing program 6 (id=994): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)={@void, @void, @eth={@link_local, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x6, 0x40, 0x68, 0x0, 0x7, 0x6, 0x0, @broadcast, @broadcast}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x3, 0x2, 0x0, 0x0, 0x0, 0xf, 0x4, 0x1, 0x81, 0x0, 0x1, 0x4e24, 0x4e22}, 0x1, 0x1}, 0x2, 0x3}, 0x4}}}}}}}}, 0x52) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) lseek(r5, 0x5, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000340)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xb23, 0x46, {}, {0xee01}, 0x8, 0x8001}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x6, 0x4e21, 0x800, 0xa, 0x80, 0x0, 0x62, r9, r10}, {0x2, 0xb, 0x7ffffffffffffffe, 0x7fffffffffffffff, 0x9, 0x3, 0x1, 0xffffffffffff8000}, {0x8, 0x7ffffffffffffffe, 0x8001, 0x3}, 0x7, 0x6e6bb2, 0x2, 0x1, 0x2, 0x3}, {{@in=@private=0xa010101, 0x4d6, 0x33}, 0xa, @in6=@mcast1, 0x3506, 0x2, 0x1, 0x4, 0xf3a, 0x741, 0x9}}, 0xe8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000001840)={0xffff9849, 0x0, 'client0\x00', 0x80000000, "d4f3f13389ad4baa", "29f67d1bf3118dab416f51dec619e69d22b0d28108862ea089a380f66af92b4d", 0x7, 0x3c02}) writev(r0, &(0x7f0000001780)=[{&(0x7f00000001c0)="e042deb2eabdc000390790a5826d8b6f5d34"}, {&(0x7f0000000380)="8a79abfb25e514dbed148d2e85d8e5f0185330c83feefd97ade270ed7427412758ecc277c99716229c62a7715662db3cf99ad2fa719b714a295d46c797b9fcbb194a0ec199cab93084ee"}, {&(0x7f0000000400)="ef4a4998889014de16a0fcd20f563d9ec71aa1bda63c15a56e18374f8d24e6570c75fd2e9a918074754be27e38150432788d90008983d44ed644a97485e2f21c4f40f8deac3de45c39ddbe6cd13dfa8d09646a14e54f5fb12cac587ba383f16a88e91425c2b61ede9750fee224641fa97e55142fb7d3189c67d84d241354b555fb037a7797f9d41a249f69d2d620a9f4405ebfb627cb97b472f3859fb3c3f12af39ad952d6aae6bc70ff7ba8de3192a4981ce3659ad543a270d150be013d720c7ef4377c0ed8671240d0b91868d034de5097e567f3c59ff110dad6c5a3cca2920deb69356e2977d168226c2c04b6cc98e0b5953f7a04"}, {&(0x7f0000000500)="c4b1286e2426ae4df170f68208ddffee2c4d7bdcfc188dbbc7a9ca5120fc32dc89d0d163e85ca4c96294440887f0be1c2c69e9759cdb9961ca9b270c5641b262f7977f53fe3fa93799595d0d957d8c4c4342c76058d26fbb312ca3c157af3288b693f0bc38ef527da6a06f8f407b668112d3ce4f4710c74adbfa3042790da817a49806ccb6d02e52e397eb2b09d1a60df116f2a1c95346ba6f4064cd0c8ee6e3522253ca207c182dffec002571c9d10b518caaafe646ab1531c153389a50d02d928c3522e5fb0f2131431c5f2aed9e64b1fd59d968d31972540e2c09e7799d227bb8"}, {&(0x7f0000000600)="7e5c96085e0c279d622ea35e20d50838d3bad5db623a7f88264dc3848dec3fe5f9aa4acb73553fb40b2e6c64313c98cb59e316987ce9a17d2dc213ca1a61080a82f173abe0fdfa195feb307437b341515d83e5f1bb8006805088d53ec9cb90e6f33e749ec335f906c7dc24ad21f4c61a96f8a6f3b2a46cce2e48457cc830597b4fc2b905c9b433d636c5d38489a347f9d7b66d1e6347aba4e6ea7eb96160f2369f1c3d470a95c2c3ed82f4fa22d01cd0e848bbe2e3216eff58a7eab6659bd493e6a287b24deca2b169c7c3a2bef391c5ae867c9713d1508423f67d64cd2f2da150cf942a57840a5679e8212b75b19a428e79643660faf077"}, {&(0x7f0000000700)="b2d611ad8fbecf1cedcca525de029d3d8c4e8f4e85edbfbb55be86d7be51d42128fdd398fa62c754ae2d39e56545964d3e2d6b1ed18a91c72e300d2b83577b00bd22337a0ad8d7d74e148ac2088f6e93cde282323de9d2885812d4c29a0b70c50639da7fe3e46b6e4e262aaa7d51b8aa416bcd825d7e"}, {&(0x7f0000000780)="dd3e3997cda9a1d6d58f19ecc9e4ea16ea34ac49ce1d7593f8a42d71090a8a63cf1ad42f09134fa455ed8ca39da11902626cce9c630316e8a2d7fdcecf01e6d86e16eb0375507a8b7a76cf5b7920e21440f0b6eb8ba5eb2d7ec6f4a703a2d3b3550f4451e4f17d57937a2c80172b2d1d06a312cbeaa50851331c773d699bab8f5b9afd17ff918cba3241676a70e05dfc218c04c11ed4458da478db01d5783e5c5199b1b4c4e5ef5fdf19b0cb9e1abea856e3f8a1905d26aed3adb9dfa578f9160265d435357229da734f501ae1abc30a4a8f371822bb2dfd16fc9c4d234a2ce67a1e723ba6b2e94bfbbf7bb1997fdae665397124c8aecee5db4112539eb946d189a6b3d0cb143d372eaab37b08c99f675f1cf245c63a0ed2136d5a73d0e07c67008bb1d90ce2e78ff400afaf627db56a61ca34341a39878657963ee9278392d58269ec1e243841dfb333bef10c449faa0e681db2df9afd9b8040916554201494b8adbfe534d122b35ed7414369bca79d6789e57a17b77507fada740437854a9164b248f8b5695e6ab22553165aa6e2b5241d5dea9af38baf8a4f1150b32cc3411d8f8c5d69098bab28790bc2a35d2a8c48f44b1b7b8888ae5370de5e511bb1d279a6671b970dc2f3dd004f0aae3aa2509a0cbc4e1e579e9e8b0e91df9445e124053b07fe6d986e040fc48b5a1d4038f88ba0fc74d9e33e38da4a44687055d5996d3df8c3f9ead7ccb9743c751af267730b6e0bf86718536aa34c7c3d0dcff8cf758aa049c1c6f731068d77334aa82e91f1c29341489fb0ca12273d9982ead6c73e23653fa5e03fc060d77a235596d2b9002de63ed6cf7aadad36913dc5004e7de84700eb5c8070d22a9a2d5b493f36fec865f68e02a9641a588c484b4df32076b83cb8ee8d665ccbf4867e12a55087adfd324fabfbcc520141aff32317407f51cc0f20d33a157f05255aab8b7095410432d47b1803543609711d210e647710809b8d46300cf9e01b297ff0f68a7e38b8768c7152c09f5ef510543eb8a55ac9fdeb9724bcdfaa11d1dff37902c0f14103b009fd26d3b325137cebc561d25b9c89923d54c15ac9431e518a15e3832ffd2b7d65de88201f98aa7a7353e1ee130869d9dfa3416b91f3c7baf3675de9d0d9435faca3c205eec40e2da2db9b7e778ea9b064fe3af331eaac898dd8d7185dd13b01af482eed73c51b02732a18dc9b675b5fb3feb1531406a85861b199076467ad9ada8cc6256a53833f850dfe3bc6a636897a3f0371ea38591b083babc8035e8140ec70d32815ecb3623370a69538260a16ea5073e43dac053500a00067b7ea8dbae9c2006d37b0ff46b7bf00ab8529fab1f2b9afea250895e0b3608bcb0b14780981075de88200daf69d84277cd5109c6bbe8427bc1f0a101b636b985f880fee1b4881beb06a5a9c21f0432c2e83335f923d67662f5e5e4e8c88ad69befde7e57edd58cf4ae277968e30e866fe350277d1e4807596e31376abc97d021b9164a275962dc2980a2f7ed54bd3fca3cbf4de7e67ab115b73f3d4d2b9fdf8dbb66f1a4aadd8d81d316ac5f6cef6492cedf63f78f9724118c4407e903ee9450b440f73c96bac65caa67eaaf5d49fbe69ff34dc383a244e8d1c9b5a11b7b858a66a5898f91dbb87a221b54a8159a1bd969ecb9ca5a52b15b468d54d8add56c53c67f22737fd2827425feb5a3cc73d6600b534d3d5bbd41e81de0adb997412093fe183f25fa880bc584e40602129feae7eec82cdb4c27095c3444ef46174b02a7803830dcfba6a80f40e214cc00f8683d9dedadcfd3b1cbcd42f7080f6cc7cb4c2708865330e556aba6667cf6bad9611e0cf7e8373c40d65c92afda0167f2773e536ed780343374015f5d823cbe982235ce58f503a99520d6daadb0f724e4e93eee5cea5e87b8d7ec480866fbf981bd054783f01589e6f32a16150bc4f0bb17a792a1973a456829361b16ebaf1e320d75913aee8526dac17f6bd6d399e5c31888f42429489dbfc293c512ac9fded5236cf351408fcf857afb88dcd3ed85a30ba1b67dacc4bedd318897984d8c0b5f53361a4c351da35ae7c3b490743bbed6044ca6762cead6281fa89d5624961a7734ed0e6180d6d9eabf2a791a85b695dd4c7b1dd6dc3b9259698aaaff7b028d21b46629f0d99f8202d4fbda014564c610fee3bc46c95c5c03c8af4852fb737b6cc2739eb6a3957edbd3f90c2fb4782cc38621df54788047a22f5e8c905f33e9ba7a348f5d35836876af3602006f4873782e1ac6cd3aa99bc580277c746fd00b67b7d17214461e250e1bddc22cf13f76c01d9ce3c5ebedfb16eb91519f7deed3872afaf7ba1ea5824cc197674271a846fe63c68beb6247f802f4521263c42847159d4548321c1fc35ec579c3025fd83fae62dec3e505eb6d5d075e12352c40dcfa45da812a652c6be2eecddcaf81416a9fa007770178cbc869b7822baf3fc175aacc944ff449b09d1b00f17253074001aff1ab8287e122a29254d145cdb29b40a1b6a667c791369e43b4a0180fc828d7e9857ae54c64597214770aea8fa501d8ac70fa46f9741509adfbe68fe61c82b49bf0c09bddecae1d8a9158ed0231d70817ab74e9fc2fc4b7510e53a36be6768efc520a7cb03a313a1085e01816cc7030eba5bc08748d1e6b5782d32e8473cc97c6b3ded9f86786f38ba9c2343f23bc18e7ee1a94cbfd183ed1637e312b90e5e14ac58e69cf4a42e8f65e20e4f97f30306934321f80ef0bed28d9ceffd36ae91d30447b923290a3c89b3b1d823a0e5969ecb3ba62c40a8fd250772d631dfa2cfbe491d88c1864ba94851909e4c85eaf83781531425596afa699e92358ff3915948e33b0c8693cd7605fbed6042ef2d615351ce4fcc317b0a81d8dedbe29ab484e5c536d24048c5003dfdc4c48558bd3783b1f9fb71a6a17a459d83b9b5ebb53e7ecf9277073e45a4d2956993ca48c26f9f978ff221ca4b688cca50a6372b8c7a45482b95bc637b21e10dbb9531e6e639833528c0b565fcc340f0c6ff16d7b92812fcf51f2c1c0e91223f6db261a07ff296a3a52958d8dd652d774a5f1f8b7407faf19cd7f0d5c44ca5e3ff00e906f8a906b8f44ebaf52b2c9983c50215431f2a86e73fb0f5a2a7ac16d5056435fa36650c501c68fe840b5a1e4790d3a83697529778997704eb1f596bde1d8bce10ccdb426ef99929acde6f7561c804c5660959df73ea11ca49d8ea2aaebfb971d27803b31d37bf2e488f02635d971d8640722848803d0d9f2be750dbf6b9022ea6a78428436d4879920f832f29da8fbc996f663184296913fe632716bebf3eadb20310ea481391bba2481654e1ac8ec33e49dd6fb950b87134f4748edadead8261e09795afafa80ecfcc605c2c0f3c92b47465d2dbe47c86fafc1d0bb19e6ef966f543f022a065b76e6ca871e0a86c132accc9b2a2ad620722bab50f43061b823cfcf682b23f3c99ec20395d8a1d35bf506fe86f2660c0515d08cc34f885466edc472de5e2a8c7f9c6885d254407eeac72c4b2d0493dbbee76f44314ba6ad4c6e3f726d07921e637d66e0c70a3c23045dc6ee1879a55958dceda6ed55870179cb96910ed2295e220bb07ab78c69dbdef20634c08fad75be8388419b61436bbbe6bd611f383276a4d48280d584ecdebe1d07666ce45cb2ecec43c57d5bfc72614a792a6e885984ec27df8ccc6a8f34f323f0c4cf326559a2589184d114242ee7ef1a09c2e3d081de9ed3e764d6db5c04737e5c65ccb81eff1d3d0095d21f194954febf717cbd75523287542bb8f6b545aafa473128299a8a4fc123f3eda7472b5d69a6b614195ce2c538a478060ea3d470fb6413fae47fc9f150e024718204f1ca58af31e97e615254e2149bcfbf79b1e2704592adb02d4e30758aa9c92f6698e2b645a5675729594ccdc21bb5f1a89603bebf2176d5012bbfc2213ef6fa4ab363e86759a7ce80f8bb9fa73f19b5a855bbbe3f0f82dd38a84c8671e807e2bd3b825856f9c2462d5dff492a36047e8def156bd6d898dfa2b556ca293eb75d99bfbaeacb8d5c7def5daac34b1b99ec48d8c1d01711ad29763989b68227b86626521ab42bf692be583e2b58b7caba960c82ef119e81d6b4aa848d13e1a6d076fe366efbc0d0ac913fa820057003337b0ae2e05b61d7b4035ea5487508c007acd18065ebf8fbc2614554aec136720ea6937b1feb30924b1fa070221c819215e0d6c9e27a74cf0ee5655cc6c756b2f5655b203910b5cce02146d10226c2cfa5a69f102136bf57ccb40b94350b0ca8b45fe09935af417fc03d87ab84e82ec64c17b9cc65c316da457a9eaffdc367f9e0ca563fca626f59bfa3c3a6d94852f6b76e1c862a2e8c9d2a0f4cc510c258c62886cd7457cd856b9dadf514cd437a75ecb1baec2e97c8ee7aa733201c3781337aea51e786a8f33522a5d6cc3b41b09092ab66047f62dee93afb5b71fa046e1e91943518684f74ab94086cebb67ce4290e2641e3405020c6b44d698f171de96693af250b4dd568a53d6f8e2bebe582dc0fb5ec555c0ac9ea3148ff7684c541635f4c9ff5713aab3b511c039de633a25aa63d9e728529be1462ccfe3f441971686d71f55a484ee031872dd47299d75d28c20ebea01ef882227a5583796856427bb65aec4a0a6877d771673e5b5568feea4ffb7b4e02dc5565992d204cd4295034d4effc2ac7d9e701ceb5449ff0ddf7d98be5bc109869a448d820f62888edd412a621200f066fc13a4d474d8d4aab7c21f59f1fa02aad62ecb2c70741e28f5f30778547be9aedb94fc38bd2f2e24d76883db5adc5cfedf29af3b39e925be280da464b0111c2ae7261b663a3a7f86bfc75f14ecfb760cf4946f1c1666c24e0a2f8979c05674f2728b9966702c049305ca0c42d5eeff60952b5232cbd28ff27012cc8488ebe25631c6713a782793d06fcf9c975aebab9ad313de9b95a2ef6adfe6ce0a2c08d8413ab84d91d518b5335c041df5bb86456191f8cd2c6c5f48819da80a3dce19efb70d04625c90acbee61165a2897eb522603644a38c6bbdd1c8bdb0d90d3669b29336e9075399d526965cb7615bbb9eea53c98f5e724021b575780ed4ee705f5314e26846a1f02085f4bbd89c945414145b5c78dee58db828857442071e628454f7c1d332a4a628c3a1155ab582151bd81a1c7feca523bc0c64a47574283e568383f47b23ec76a77dabed9383862d12b405f3b9c610338c46a5132250cbec31784e62ae6e4e6e623afaf668faa527833ff1805a360d9872f07da63c78b1614d588e94e855b09e8e87aafc7a3c82e5cfe21045c47627f297c7dab159e8dfe8e06fa2e48d54656a510abdad70c83329600dda4ea6fd2329c68994cac53f104670639bebe4cec50e2b1ea0af5da3690223d99b56b019f154f8f912fc46596c89d5c9cd14eb5664c64a200bed6814b2f55fbb4d747d16d7378e17bdace28f81b16022d957e1013cba6abe2a48052fbfd8714edc360a0e9ed986a5e91c763e4b59f5bb9cd9d38f51ca430eb8741942bfd243b2194d1a6605a8746b58a462a8b445c198778b386a40ef22c9ebe23c34d0ea47dc1dc781fe334ffe365aec18f696871d79b018988d3be80836fe67337b41c5eedc4f7d2edadfc38c8b2fedfde14f2110311b857c92f33cc796c7e62a17d38ebe4c38b844238f99c44cb0b7a1deec9401fac936612bb061721e87a1106ed4db5eec643653a96bcb2c9f14ec36e988899d528066e80c6d502e5a8e5ed60814fe45d0f8c73e169a989d1e8eb2"}], 0x1f) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40010}, 0x20040040) 8.00358598s ago: executing program 1 (id=995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xb, 0x0, &(0x7f0000000280)="000000789dcd2e7a0c5488", 0x0, 0x4bc7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) accept4(r3, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x400000000001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x8000, 0xffff, 0x0, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @local, @remote, {[@noop]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000000040000020000000600000000400000", @ANYRES32, @ANYBLOB="060500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000000200000000000000000040000000e5ffffff000000000000"], 0x50) 7.677467445s ago: executing program 6 (id=997): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r1 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0xec72, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x3000000, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 7.393355797s ago: executing program 6 (id=999): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000020001f56512001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @private=0x4, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.381479356s ago: executing program 1 (id=1001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000090}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r3, 0x301, 0x70bd28, 0x0, {0x34}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004440)={0x1c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5da6982ca8fdfd5, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}}, 0x44004) 6.572246779s ago: executing program 0 (id=1003): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x25, 0x5, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 6.162787236s ago: executing program 2 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1000000004000000000000ee88a21f57f5d5ea465be993cf923a063a4a5b55668f002e155fe0f4cb3f72879f4e980000873bf51453a43cd8578bbb7e61507bc959d71454783c7fe6eb3000"/93, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x82, 0x2}]}}}], 0x18}, 0x20004084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e2b, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @empty, 0x2}, r7, 0xb}}, 0x48) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) get_robust_list(r1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r8, 0x509, 0x70bd29, 0x25cfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x0, 0xcb, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044000) 5.350057411s ago: executing program 1 (id=1005): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r2, &(0x7f0000002080)=0x64, 0x21c) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast1, @in=@multicast2}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 5.175092847s ago: executing program 2 (id=1006): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r7, r6, 0x0, 0xd0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.109086854s ago: executing program 3 (id=1007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "a81fbaa4b7db8bfc0d1e14667d2f4e325d3b712b1dfab5ab7605a3e2aaaeceb033ace7ef2f98b9106435c193d26186eab1b5ba94e9888127e9270d9477581f60d1d63bb8ba6e8181ae648bcdb578cf40449e7aee64c4dc92f0918ff4daa0b6787dedce5c14e09398ba5327aa53dd50233f9e4fafc859b43536be779736bc24d58c15"}, 0x92) 4.08223853s ago: executing program 2 (id=1008): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6db035d7920607, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x2, 0x983a}, {0x20, 0x0, 0xaf, 0xffeff024}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xfe33) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) 3.933593305s ago: executing program 0 (id=1009): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x7, 0x0, 0x0, 0xffff, 0x40cc5, 0x8, 0x7, 0xa, 0x6b, 0x0, 0x1, 0x9, 0x1, 0x9aa, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x9ee7, 0x2000004, 0xe69, 0x3c, 0x0, 0x10001, 0x0, 0xfffffff8]}) 3.745594068s ago: executing program 6 (id=1010): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x7, 0x0, 0x0, 0xffff, 0x40cc5, 0x8, 0x7, 0xa, 0x6b, 0x0, 0x1, 0x9, 0x1, 0x9aa, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x9ee7, 0x2000004, 0xe69, 0x3c, 0x0, 0x10001, 0x0, 0xfffffff8]}) (fail_nth: 1) 3.652909867s ago: executing program 0 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xb, 0x0, &(0x7f0000000280)="000000789dcd2e7a0c5488", 0x0, 0x4bc7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) accept4(r3, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x400000000001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x8000, 0xffff, 0x0, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @local, @remote, {[@noop]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000000040000020000000600000000400000", @ANYRES32, @ANYBLOB="060500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000000200000000000000000040000000e5ffffff000000000000"], 0x50) 3.173303942s ago: executing program 6 (id=1012): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x9, "84"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "96"}]}}, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x78, 0x0, 0x0, {0xc19a, 0x200008, 0x0, {0x0, 0x401, 0x3, 0xc, 0x8, 0x1ff, 0x6, 0x7, 0x0, 0x6000, 0x8, 0x0, 0x0, 0x1000000f, 0xffffbec9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x40, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0x6c}, {0x20, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newtfilter={0x30, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r8}, 0x18) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) write$6lowpan_control(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.170287118s ago: executing program 2 (id=1013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_ack\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() r4 = open(0x0, 0x147842, 0x1ef) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(r4, 0x400c620e, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe79) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000001c0)={0xf0f026, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff51ff7f0000a100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000240)={0x1}) 3.150283582s ago: executing program 0 (id=1014): connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x58e2, 0xfde4, 0x20, &(0x7f0000000340)={[0x6]}, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080009000b000000", 0x24) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180), 0x64, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@dellink={0x74, 0x11, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_IFALIASn={0x4}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48085}, 0x40800) 3.026424618s ago: executing program 3 (id=1015): rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24040004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f95f45e9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) 1.333240869s ago: executing program 2 (id=1016): syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a627448519486dd60ecff8000481100fe80000000002000000000000000001aff02000000000000000000000000000100004e220048907804000000030000007d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb0558fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf0d00bdc946"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @host, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x846}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) acct(&(0x7f0000000100)='./file1\x00') gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = fanotify_init(0xe, 0x1) fanotify_mark(r3, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) acct(0x0) 282.554009ms ago: executing program 0 (id=1017): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x300, &(0x7f0000000080)=[{&(0x7f0000000340)='5.0E', 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="5400000000000000000000000001000000027f000001000000016400000200000005ac1414360000020064010101000000070000000000000006830bc47f000001ac1414210000000000140000000000000000000000010000000500"], 0x70}}], 0x2, 0x20040801) 123.230719ms ago: executing program 0 (id=1018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000006440), 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x13) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "ddf98317e5a1149989fc8dbe43ea6acc96e3aa503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985888a073500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc40a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7]}}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500030001000000050003000200"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 65.673484ms ago: executing program 2 (id=1019): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="abab3b842f4a32c702afd6a3e288acd1a13115fb0816c3e5f71e50b6ca2389d874d3022f4838f5f5cc1656f097abbb9ee425cd7e3acc5b202d6540", 0x3b}, {&(0x7f0000000500)="c2b923c50b96a2a4d447062faa6acb4aae34c98667a231e92d517c804eacc3d0680879bbc03b82e20dd437b2f8b9e18bf94bec32e06ebbe1d8039a2b76528bf2a9b2f596b2e190ca6d4d0755eee6e25d9ebd9f6981e68376ac7bdd33247598fdd89b826b69", 0x65}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="366a35b6f0a94801d64a78e89d70e23501a0052b36360f4df2547aa636982d33494edf44a36c2b0a5b87a52aa50acf63fee990df4def554f309187a8fe422c22b6014e44a971ac40aa24cf7117ebac7c37b77fd8751a10048b398e6ee0d2df7aac78ff", 0x63}, {&(0x7f0000000840)="48b3ff51eb5204e667207520afaa56345de440b527bfe642d45014afc790176d1c0dab7a51d5c6316d4d1327cba3a0a3ff082af634d542f8ccd07943934787d3e87ef05cc02b751d6eaf10680e64af195df7bce6e3f73cf91f93a68e43b78486ada7b42b1d42faa6d1f3ccdb88111a3b78ed079b7ac46463964a728333ac279710a718e6f35e6d83e691074cad45e351660b5eddeb837601d683bf963dc19557d9515ff68071b5", 0xa7}], 0x2}}], 0x2, 0x20000090) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0xc0000000000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404d018}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 1 (id=1020): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000100)={r3, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x2c, 0x8007ffe, 0x400102, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0x40000, 0x4}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x11ad, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00004e6000/0x3000)=nil, 0x3000, 0x2000004, 0x12, 0xffffffffffffffff, 0x203000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x10000005) kernel console output (not intermixed with test programs): 7][ T5894] usb 3-1: config 13 interface 177 has no altsetting 0 [ 239.972332][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 239.979114][ T5894] usb 3-1: New USB device found, idVendor=0413, idProduct=6f0f, bcdDevice=17.40 [ 240.002237][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.018160][ T8262] fido_id[8262]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.041125][ T5880] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 240.068706][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.110054][ T5880] usb 2-1: Product: syz [ 240.122292][ T5880] usb 2-1: Manufacturer: syz [ 240.138830][ T5880] usb 2-1: SerialNumber: syz [ 240.271235][ T5894] usb 3-1: USB disconnect, device number 15 [ 240.667162][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 240.679704][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 240.766598][ T30] audit: type=1400 audit(1762988336.524:474): avc: denied { setattr } for pid=8276 comm="syz.3.581" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 240.974511][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 240.981645][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 240.999845][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 241.012244][ T9] usb 1-1: USB disconnect, device number 18 [ 241.012726][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 241.040897][ T5880] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.052363][ T5880] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 241.217740][ T8280] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 242.176638][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 242.248444][ T8297] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 242.421594][ T8298] input: syz1 as /devices/virtual/input/input23 [ 242.437861][ T5894] usb 3-1: device descriptor read/64, error -71 [ 242.646771][ T975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.676979][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 242.816914][ T5894] usb 3-1: device descriptor read/64, error -71 [ 242.833542][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.865865][ T975] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.878781][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.917035][ T975] usb 6-1: config 0 descriptor?? [ 242.961024][ T5894] usb usb3-port1: attempt power cycle [ 243.097381][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 243.221317][ T975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 243.409087][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 243.416896][ T8310] ip6erspan0: entered promiscuous mode [ 243.461925][ T975] pwc: recv_control_msg error -71 req 02 val 2700 [ 243.650040][ T5894] usb 3-1: device descriptor read/8, error -71 [ 243.711500][ T975] pwc: recv_control_msg error -71 req 02 val 2c00 [ 243.767606][ T975] pwc: recv_control_msg error -71 req 04 val 1000 [ 243.775973][ T975] pwc: recv_control_msg error -71 req 04 val 1300 [ 243.784322][ T975] pwc: recv_control_msg error -71 req 04 val 1400 [ 243.842781][ T975] pwc: recv_control_msg error -71 req 02 val 2000 [ 243.874853][ T975] pwc: recv_control_msg error -71 req 02 val 2100 [ 243.897710][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.013623][ T975] pwc: recv_control_msg error -71 req 04 val 1500 [ 244.043086][ T5894] usb 3-1: device descriptor read/8, error -71 [ 244.049563][ T975] pwc: recv_control_msg error -71 req 02 val 2500 [ 244.128284][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 244.197028][ T9] usb 2-1: USB disconnect, device number 20 [ 244.201916][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.266995][ T8319] capability: warning: `syz.0.592' uses 32-bit capabilities (legacy support in use) [ 244.279636][ T5894] usb usb3-port1: unable to enumerate USB device [ 244.342555][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 244.367882][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.254667][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.255519][ T8324] Process accounting resumed [ 245.374560][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.383951][ T30] audit: type=1400 audit(1762988341.074:475): avc: denied { ioctl } for pid=8325 comm="syz.0.594" path="socket:[19064]" dev="sockfs" ino=19064 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 245.424692][ T975] pwc: Registered as video103. [ 245.431119][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 245.523073][ T8333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.594'. [ 245.904496][ T30] audit: type=1400 audit(1762988341.334:476): avc: denied { listen } for pid=8325 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.975923][ T975] usb 6-1: USB disconnect, device number 2 [ 246.336640][ T30] audit: type=1400 audit(1762988342.104:477): avc: denied { ioctl } for pid=8336 comm="syz.2.596" path="socket:[19080]" dev="sockfs" ino=19080 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.293247][ T8350] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 247.415702][ T8354] netlink: 64 bytes leftover after parsing attributes in process `syz.3.597'. [ 247.425152][ T30] audit: type=1400 audit(1762988343.204:478): avc: denied { kexec_image_load } for pid=8344 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 247.474795][ T8355] ./file0: Can't open blockdev [ 247.595924][ T30] audit: type=1400 audit(1762988343.204:479): avc: denied { connect } for pid=8344 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.973271][ T30] audit: type=1400 audit(1762988343.264:480): avc: denied { mounton } for pid=8339 comm="syz.3.597" path="/118/file0" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.164014][ T30] audit: type=1400 audit(1762988343.284:481): avc: denied { read } for pid=8339 comm="syz.3.597" name="file0" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.463646][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.858876][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 249.868163][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.876157][ T9] usb 6-1: Product: syz [ 249.882675][ T9] usb 6-1: Manufacturer: syz [ 249.892871][ T9] usb 6-1: SerialNumber: syz [ 250.086613][ T5929] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 250.275305][ T5929] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 250.290898][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.324287][ T5929] usb 1-1: config 0 descriptor?? [ 250.343714][ T5929] usb 1-1: selecting invalid altsetting 1 [ 250.353926][ T5929] flexcop_usb: set interface failed. [ 250.411397][ T5929] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 250.421768][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 250.433699][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 250.464360][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 250.478500][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 250.502015][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 250.554633][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 250.599793][ T5873] usb 1-1: USB disconnect, device number 19 [ 251.426825][ T5873] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 251.540781][ T8406] input: syz1 as /devices/virtual/input/input25 [ 251.704261][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 251.741206][ T5873] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 251.778335][ T5873] usb 2-1: config 0 has no interface number 0 [ 251.815043][ T5873] usb 2-1: config 0 interface 184 has no altsetting 0 [ 251.825100][ T975] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 251.904838][ T5873] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 251.923348][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.950642][ T5873] usb 2-1: Product: syz [ 251.965569][ T5873] usb 2-1: Manufacturer: syz [ 251.982571][ T5873] usb 2-1: SerialNumber: syz [ 252.001372][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 252.038611][ T975] usb 3-1: config 251 has an invalid interface number: 48 but max is 0 [ 252.059476][ T5873] usb 2-1: config 0 descriptor?? [ 252.079699][ T975] usb 3-1: config 251 has no interface number 0 [ 252.113047][ T5873] smsc75xx v1.0.0 [ 252.141350][ T975] usb 3-1: config 251 interface 48 has no altsetting 0 [ 252.153347][ T5880] Process accounting resumed [ 252.165040][ T5873] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 252.244808][ T5873] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 252.272725][ T975] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f6.07 [ 252.328399][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.421229][ T8411] FAULT_INJECTION: forcing a failure. [ 252.421229][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 252.442097][ T975] usb 3-1: Product: syz [ 252.472370][ T975] usb 3-1: Manufacturer: syz [ 252.491899][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT(full) [ 252.491924][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.491935][ T8411] Call Trace: [ 252.491941][ T8411] [ 252.491948][ T8411] dump_stack_lvl+0x16c/0x1f0 [ 252.491981][ T8411] should_fail_ex+0x512/0x640 [ 252.492000][ T8411] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 252.492025][ T8411] should_failslab+0xc2/0x120 [ 252.492045][ T8411] kmem_cache_alloc_noprof+0x75/0x6e0 [ 252.492071][ T8411] ? skb_clone+0x190/0x3f0 [ 252.492099][ T8411] ? skb_clone+0x190/0x3f0 [ 252.492120][ T8411] skb_clone+0x190/0x3f0 [ 252.492144][ T8411] netlink_deliver_tap+0xabd/0xd30 [ 252.492175][ T8411] netlink_unicast+0x71f/0x870 [ 252.492204][ T8411] ? __pfx_netlink_unicast+0x10/0x10 [ 252.492227][ T8411] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.492262][ T8411] netlink_ack+0x696/0xb80 [ 252.492296][ T8411] netlink_rcv_skb+0x332/0x420 [ 252.492321][ T8411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.492348][ T8411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.492371][ T8411] ? rcu_is_watching+0x12/0xc0 [ 252.492414][ T8411] netlink_unicast+0x5aa/0x870 [ 252.492443][ T8411] ? __pfx_netlink_unicast+0x10/0x10 [ 252.492467][ T8411] ? netlink_autobind.isra.0+0xa8/0x370 [ 252.492502][ T8411] netlink_sendmsg+0x8c8/0xdd0 [ 252.492531][ T8411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.492567][ T8411] ____sys_sendmsg+0xa98/0xc70 [ 252.492584][ T8411] ? copy_msghdr_from_user+0x10a/0x160 [ 252.492611][ T8411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.492630][ T8411] ? __lock_acquire+0xb8a/0x1c90 [ 252.492654][ T8411] ___sys_sendmsg+0x134/0x1d0 [ 252.492679][ T8411] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.492736][ T8411] __sys_sendmsg+0x16d/0x220 [ 252.492760][ T8411] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.492801][ T8411] do_syscall_64+0xcd/0xfa0 [ 252.492820][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.492838][ T8411] RIP: 0033:0x7fe0ff98f6c9 [ 252.492852][ T8411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.492873][ T8411] RSP: 002b:00007fe100752038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.492890][ T8411] RAX: ffffffffffffffda RBX: 00007fe0ffbe5fa0 RCX: 00007fe0ff98f6c9 [ 252.492901][ T8411] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 252.492912][ T8411] RBP: 00007fe100752090 R08: 0000000000000000 R09: 0000000000000000 [ 252.492921][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.492931][ T8411] R13: 00007fe0ffbe6038 R14: 00007fe0ffbe5fa0 R15: 00007ffcb4d46938 [ 252.492957][ T8411] [ 252.756439][ T975] usb 3-1: SerialNumber: syz [ 252.947973][ T5873] usb 6-1: USB disconnect, device number 3 [ 252.973446][ T5939] usb 2-1: USB disconnect, device number 21 [ 252.983801][ T8418] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 252.991906][ T8418] audit: out of memory in audit_log_start [ 253.403240][ T8405] wireguard0: entered promiscuous mode [ 253.408894][ T8405] wireguard0: entered allmulticast mode [ 253.438287][ T975] usb 3-1: USB disconnect, device number 20 [ 253.992922][ T30] audit: type=1400 audit(1762988349.684:482): avc: denied { firmware_load } for pid=8429 comm="syz.3.620" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 254.106315][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'. [ 254.178766][ T30] audit: type=1400 audit(1762988349.974:483): avc: denied { read } for pid=8422 comm="syz.0.618" path="socket:[19289]" dev="sockfs" ino=19289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.238834][ T8431] syz.3.620 (8431) used greatest stack depth: 19096 bytes left [ 254.331810][ T8439] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 254.402508][ T8448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 254.459428][ T30] audit: type=1326 audit(1762988350.254:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e738f6c9 code=0x7ffc0000 [ 254.587709][ T30] audit: type=1326 audit(1762988350.254:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e738f6c9 code=0x7ffc0000 [ 254.610922][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.899792][ T8463] Process accounting resumed [ 255.941537][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.946580][ T30] audit: type=1326 audit(1762988350.284:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18e738f6c9 code=0x7ffc0000 [ 255.948953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.074942][ T30] audit: type=1326 audit(1762988350.284:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e738f6c9 code=0x7ffc0000 [ 256.935086][ T30] audit: type=1326 audit(1762988350.284:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e738f6c9 code=0x7ffc0000 [ 256.958954][ T30] audit: type=1326 audit(1762988350.354:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8449 comm="syz.3.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18e73915e7 code=0x7ffc0000 [ 258.202676][ T8482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.380872][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 258.380912][ T30] audit: type=1400 audit(1762988354.174:517): avc: denied { create } for pid=8485 comm="syz.5.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 258.479275][ T30] audit: type=1400 audit(1762988354.214:518): avc: denied { write } for pid=8485 comm="syz.5.635" path="socket:[19639]" dev="sockfs" ino=19639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 258.921116][ T30] audit: type=1400 audit(1762988354.584:519): avc: denied { write } for pid=8494 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.016914][ T5873] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 259.351570][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 259.528916][ T5873] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 259.596932][ T5873] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 259.623026][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.667161][ T5873] usb 1-1: Product: syz [ 259.671551][ T5873] usb 1-1: Manufacturer: syz [ 259.676300][ T5873] usb 1-1: SerialNumber: syz [ 259.768663][ T5873] usb 1-1: config 0 descriptor?? [ 259.799326][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 259.809853][ T5873] usb 1-1: setting power ON [ 259.818198][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 259.826928][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.841908][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 259.856900][ T5873] usb 1-1: media controller created [ 259.894027][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.923443][ T5873] usb 1-1: selecting invalid altsetting 6 [ 259.933097][ T5873] usb 1-1: digital interface selection failed (-22) [ 259.941909][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 259.955552][ T5873] usb 1-1: setting power OFF [ 259.973585][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 259.981016][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 259.991309][ T5873] (NULL device *): no alternate interface [ 260.011219][ T8499] dvb-usb: bulk message failed: -22 (3/0) [ 260.036840][ T8499] cxusb: i2c wr: len=80 is too big! [ 260.036840][ T8499] [ 260.053851][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 260.078026][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.085965][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.103342][ T975] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 260.135776][ T5873] usb 1-1: USB disconnect, device number 20 [ 260.248318][ T975] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 260.259561][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 260.310227][ T975] usb 2-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 260.323525][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.337373][ T975] usb 2-1: config 0 descriptor?? [ 260.339791][ T9] hid_parser_main: 18 callbacks suppressed [ 260.339805][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.365653][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.375901][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.383505][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.391721][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.399871][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.410214][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.418659][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.426097][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.454827][ T9] hid-generic 0007:0005:00A3.0003: unknown main item tag 0x0 [ 260.490005][ T9] hid-generic 0007:0005:00A3.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 260.589672][ T8520] fido_id[8520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.688633][ T5866] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 260.808332][ T975] thrustmaster 0003:044F:B320.0004: item fetching failed at offset 6/7 [ 260.949766][ T5866] usb 4-1: device descriptor read/64, error -71 [ 261.050955][ T30] audit: type=1400 audit(1762988356.734:520): avc: denied { shutdown } for pid=8521 comm="syz.5.646" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.106997][ T975] thrustmaster 0003:044F:B320.0004: parse failed [ 261.109909][ T8533] dlm: no local IP address has been set [ 261.120403][ T8533] dlm: cannot start dlm midcomms -107 [ 261.133827][ T975] thrustmaster 0003:044F:B320.0004: probe with driver thrustmaster failed with error -22 [ 261.164621][ T975] usb 2-1: USB disconnect, device number 22 [ 261.215011][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 261.223031][ T30] audit: type=1400 audit(1762988356.734:521): avc: denied { read } for pid=8521 comm="syz.5.646" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.259410][ T8535] netlink: 72 bytes leftover after parsing attributes in process `syz.5.646'. [ 261.663761][ T30] audit: type=1400 audit(1762988356.814:522): avc: denied { mount } for pid=8521 comm="syz.5.646" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.686270][ T5866] usb 4-1: device descriptor read/64, error -71 [ 261.719999][ T30] audit: type=1400 audit(1762988356.944:523): avc: denied { create } for pid=8523 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.753365][ T30] audit: type=1400 audit(1762988356.964:524): avc: denied { bind } for pid=8523 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.845687][ T5866] usb usb4-port1: attempt power cycle [ 262.206733][ T8546] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 262.396717][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 262.417848][ T5866] usb 4-1: device descriptor read/8, error -71 [ 262.658442][ T5866] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 262.716703][ T975] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 262.767079][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 262.846058][ T5866] usb 4-1: device descriptor read/8, error -71 [ 262.938660][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 262.949441][ T975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.022547][ T5873] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 263.043622][ T5866] usb usb4-port1: unable to enumerate USB device [ 263.056759][ T5873] usb 6-1: config 0 has no interface number 0 [ 263.139697][ T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.149161][ T5873] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.161832][ T5873] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 263.174689][ T975] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.184037][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.192522][ T975] usb 2-1: SerialNumber: syz [ 263.197595][ T5873] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.210838][ T5873] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.253687][ T5873] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 263.263955][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.493875][ T975] usb 2-1: skipping empty audio interface (v1) [ 264.051093][ T5873] usb 6-1: config 0 descriptor?? [ 264.226557][ T5873] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 264.240626][ T975] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.751141][ T975] usb 2-1: USB disconnect, device number 23 [ 264.787004][ T48] usb 6-1: USB disconnect, device number 4 [ 264.795910][ T48] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 264.823224][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.026362][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 265.195416][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.276533][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 265.308993][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 265.320278][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 265.340721][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.669593][ T5873] usb 3-1: config 0 descriptor?? [ 265.946739][ T48] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 265.958555][ T5873] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 266.025458][ T5873] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 266.166914][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 266.175568][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 266.181323][ T30] audit: type=1400 audit(1762988361.964:525): avc: denied { append } for pid=8606 comm="syz.0.669" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 266.217168][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.237460][ T48] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.249420][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.261166][ T8614] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 266.269024][ T48] usb 6-1: Product: syz [ 266.282186][ T48] usb 6-1: Manufacturer: syz [ 266.292561][ T48] usb 6-1: SerialNumber: syz [ 266.308720][ T48] usb 6-1: config 0 descriptor?? [ 266.321858][ T8610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.337094][ T8610] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.339421][ T48] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.357243][ T48] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 266.392439][ T8610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.399345][ T8610] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.410304][ T8610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.419401][ T8610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.425585][ T8610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.434962][ T8610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.997286][ T5873] usb 3-1: USB disconnect, device number 21 [ 267.009691][ T48] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 267.017517][ T48] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 267.987867][ T48] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 267.998920][ T8627] Process accounting resumed [ 268.406611][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 268.848689][ T5826] Bluetooth: hci3: command 0x040f tx timeout [ 268.875410][ T5821] Bluetooth: hci4: command 0x0405 tx timeout [ 268.881756][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 269.006561][ T30] audit: type=1400 audit(1762988364.784:526): avc: denied { create } for pid=8634 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 269.300736][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 269.327542][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 269.438660][ T30] audit: type=1400 audit(1762988364.794:527): avc: denied { read write } for pid=8634 comm="syz.2.675" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.438948][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 269.484844][ T30] audit: type=1400 audit(1762988364.794:528): avc: denied { open } for pid=8634 comm="syz.2.675" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.607807][ T30] audit: type=1400 audit(1762988364.824:529): avc: denied { read } for pid=8634 comm="syz.2.675" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 269.636773][ T30] audit: type=1400 audit(1762988364.824:530): avc: denied { open } for pid=8634 comm="syz.2.675" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 269.681126][ T30] audit: type=1400 audit(1762988364.904:531): avc: denied { write } for pid=8634 comm="syz.2.675" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.724420][ T30] audit: type=1400 audit(1762988364.904:532): avc: denied { open } for pid=8634 comm="syz.2.675" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.748406][ T5939] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 269.758017][ T30] audit: type=1400 audit(1762988364.904:533): avc: denied { ioctl } for pid=8634 comm="syz.2.675" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.801281][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 269.831005][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 269.835815][ T30] audit: type=1400 audit(1762988364.914:534): avc: denied { mounton } for pid=8634 comm="syz.2.675" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 269.918227][ T5939] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 269.927700][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.941403][ T5939] usb 2-1: config 0 descriptor?? [ 269.983404][ T5939] usb 2-1: selecting invalid altsetting 1 [ 270.078739][ T5939] flexcop_usb: set interface failed. [ 270.089859][ T5873] usb 6-1: USB disconnect, device number 5 [ 270.090380][ T5939] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 270.237028][ T5939] usb 2-1: USB disconnect, device number 24 [ 270.274536][ T8657] ip6erspan0: entered promiscuous mode [ 270.288939][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 270.437946][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 270.928878][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 270.934893][ T5826] Bluetooth: hci3: command 0x040f tx timeout [ 271.065378][ T8673] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 271.133582][ T8678] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 271.742071][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 271.742105][ T30] audit: type=1400 audit(1762988367.334:574): avc: denied { map_read map_write } for pid=8681 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.941974][ T30] audit: type=1400 audit(1762988367.344:575): avc: denied { prog_run } for pid=8681 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.961711][ T30] audit: type=1400 audit(1762988367.434:576): avc: denied { write } for pid=8648 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 271.983900][ T30] audit: type=1400 audit(1762988367.704:577): avc: denied { create } for pid=8669 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.598537][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 272.714509][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.786517][ T48] usb 2-1: device descriptor read/64, error -71 [ 272.831012][ T30] audit: type=1400 audit(1762988368.624:578): avc: denied { read } for pid=8699 comm="syz.2.694" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 272.888059][ T8700] binder: 8699:8700 ioctl 4008f510 200000000080 returned -22 [ 272.996726][ T5826] Bluetooth: hci3: command 0x040f tx timeout [ 273.024700][ T30] audit: type=1400 audit(1762988368.624:579): avc: denied { open } for pid=8699 comm="syz.2.694" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.053059][ T8701] binder: 8699:8701 ioctl c018620c 200000000240 returned -22 [ 273.151359][ T48] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.190118][ T30] audit: type=1400 audit(1762988368.684:580): avc: denied { ioctl } for pid=8699 comm="syz.2.694" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.330114][ T48] usb 2-1: device descriptor read/64, error -71 [ 273.660661][ T30] audit: type=1400 audit(1762988368.844:581): avc: denied { set_context_mgr } for pid=8699 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 273.684581][ T30] audit: type=1400 audit(1762988368.864:582): avc: denied { create } for pid=8702 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.711956][ T30] audit: type=1400 audit(1762988369.074:583): avc: denied { read } for pid=8702 comm="syz.5.695" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.810343][ T48] usb usb2-port1: attempt power cycle [ 274.100195][ T5939] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 274.327469][ T48] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 274.349984][ T5939] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 274.440818][ T48] usb 2-1: device descriptor read/8, error -71 [ 274.464804][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.496037][ T5939] usb 1-1: config 0 descriptor?? [ 274.624600][ T5939] usb 1-1: selecting invalid altsetting 1 [ 274.634953][ T8718] overlayfs: failed lookup in lower (newroot/37, name='bus', err=-40): overlapping layers [ 274.637718][ T5939] flexcop_usb: set interface failed. [ 274.928351][ T5939] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 274.948314][ T8724] overlayfs: failed lookup in lower (newroot/37, name='bus', err=-40): overlapping layers [ 274.975020][ T5873] usb 1-1: USB disconnect, device number 21 [ 275.598278][ T8747] netlink: 'syz.0.706': attribute type 12 has an invalid length. [ 275.606995][ T8747] netlink: 'syz.0.706': attribute type 29 has an invalid length. [ 275.630916][ T8747] netlink: 148 bytes leftover after parsing attributes in process `syz.0.706'. [ 275.641963][ T8747] netlink: 59 bytes leftover after parsing attributes in process `syz.0.706'. [ 275.764966][ T8750] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 275.772724][ T8750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.536715][ T5939] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 276.734290][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 276.800266][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 276.800278][ T30] audit: type=1400 audit(1762988372.594:613): avc: denied { watch watch_reads } for pid=8773 comm="syz.2.716" path="/151" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 276.830695][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 276.880229][ T5939] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 276.935906][ T8778] netlink: 'syz.2.716': attribute type 4 has an invalid length. [ 276.944581][ T8778] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.716'. [ 276.972226][ T5939] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 276.982305][ T30] audit: type=1400 audit(1762988372.784:614): avc: denied { ioctl } for pid=8757 comm="syz.0.710" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20274 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.996040][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.023886][ T30] audit: type=1400 audit(1762988372.814:615): avc: denied { egress } for pid=5939 comm="kworker/0:9" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 277.088425][ T5939] usb 2-1: Product: syz [ 277.119162][ T5939] usb 2-1: Manufacturer: syz [ 277.128780][ T5939] usb 2-1: SerialNumber: syz [ 277.269233][ T30] audit: type=1400 audit(1762988372.814:616): avc: denied { sendto } for pid=5939 comm="kworker/0:9" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 277.294399][ T30] audit: type=1400 audit(1762988372.814:617): avc: denied { ioctl } for pid=8757 comm="syz.0.710" path="/dev/radio0" dev="devtmpfs" ino=955 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.327162][ T5939] usb 2-1: config 0 descriptor?? [ 277.426597][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 277.629269][ T5939] usb 2-1: setting power ON [ 277.649442][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 277.691300][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.721934][ T30] audit: type=1400 audit(1762988373.514:618): avc: denied { write } for pid=8783 comm="syz.5.718" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 277.748835][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 277.758132][ T5939] usb 2-1: media controller created [ 277.779964][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.798233][ T5939] usb 2-1: selecting invalid altsetting 6 [ 277.804599][ T5939] usb 2-1: digital interface selection failed (-22) [ 277.819053][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 277.838234][ T30] audit: type=1400 audit(1762988373.614:619): avc: denied { shutdown } for pid=8785 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.874892][ T30] audit: type=1400 audit(1762988373.624:620): avc: denied { getopt } for pid=8785 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.894809][ T5939] usb 2-1: setting power OFF [ 277.899624][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 277.905961][ T30] audit: type=1400 audit(1762988373.624:621): avc: denied { connect } for pid=8785 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.925684][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 277.935090][ T5939] (NULL device *): no alternate interface [ 277.961627][ T30] audit: type=1400 audit(1762988373.624:622): avc: denied { name_connect } for pid=8785 comm="syz.0.720" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 277.995230][ T48] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 278.053581][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 278.097018][ T5939] usb 2-1: USB disconnect, device number 29 [ 278.148207][ T8792] vxcan1: entered promiscuous mode [ 278.198270][ T48] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 278.210118][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.237317][ T48] usb 3-1: config 0 descriptor?? [ 278.256737][ T48] usb 3-1: selecting invalid altsetting 1 [ 278.263410][ T48] flexcop_usb: set interface failed. [ 278.263472][ T48] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 278.341311][ T8798] netlink: 'syz.5.722': attribute type 11 has an invalid length. [ 278.341346][ T8798] netlink: 224 bytes leftover after parsing attributes in process `syz.5.722'. [ 278.341919][ T8798] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 278.513390][ T8802] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 278.553330][ T48] usb 3-1: USB disconnect, device number 22 [ 278.553531][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16207 sclass=netlink_route_socket pid=8802 comm=syz.1.725 [ 279.671612][ T5939] hid_parser_main: 59 callbacks suppressed [ 279.671628][ T5939] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 279.703869][ T5939] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.135546][ T8818] fido_id[8818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.496642][ T5939] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 280.536222][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.548812][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.556592][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.570549][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.587924][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.597147][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.604638][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.612498][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.620433][ T5866] hid-generic 0007:0005:00A3.0006: unknown main item tag 0x0 [ 280.629233][ T5866] hid-generic 0007:0005:00A3.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 280.656506][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 280.672005][ T5939] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 280.687783][ T5939] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 280.703359][ T8842] fido_id[8842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.709493][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.727307][ T5939] usb 1-1: Product: syz [ 280.731555][ T5939] usb 1-1: Manufacturer: syz [ 280.737041][ T5939] usb 1-1: SerialNumber: syz [ 280.744486][ T5939] usb 1-1: config 0 descriptor?? [ 280.752240][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 280.761886][ T5939] usb 1-1: setting power ON [ 280.769615][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 280.779684][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.789711][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 280.798557][ T5939] usb 1-1: media controller created [ 280.819120][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.841103][ T5939] usb 1-1: selecting invalid altsetting 6 [ 280.846964][ T5939] usb 1-1: digital interface selection failed (-22) [ 280.853936][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 280.858332][ T48] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 280.863207][ T5939] usb 1-1: setting power OFF [ 280.875145][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 280.881437][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 280.904154][ T5939] (NULL device *): no alternate interface [ 280.941658][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 280.963677][ T5939] usb 1-1: USB disconnect, device number 22 [ 280.972128][ T5812] udevd[5812]: setting mode of /dev/bus/usb/001/022 to 020664 failed: No such file or directory [ 280.996356][ T5812] udevd[5812]: setting owner of /dev/bus/usb/001/022 to uid=0, gid=0 failed: No such file or directory [ 281.039915][ T48] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 281.049335][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.070772][ T48] usb 3-1: Product: syz [ 281.085184][ T48] usb 3-1: Manufacturer: syz [ 281.096586][ T48] usb 3-1: SerialNumber: syz [ 281.175241][ T8851] FAULT_INJECTION: forcing a failure. [ 281.175241][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 281.189461][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.3.739 Not tainted syzkaller #0 PREEMPT(full) [ 281.189486][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.189497][ T8851] Call Trace: [ 281.189502][ T8851] [ 281.189509][ T8851] dump_stack_lvl+0x16c/0x1f0 [ 281.189541][ T8851] should_fail_ex+0x512/0x640 [ 281.189562][ T8851] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 281.189587][ T8851] should_failslab+0xc2/0x120 [ 281.189605][ T8851] kmem_cache_alloc_noprof+0x75/0x6e0 [ 281.189631][ T8851] ? skb_clone+0x190/0x3f0 [ 281.189660][ T8851] ? skb_clone+0x190/0x3f0 [ 281.189682][ T8851] skb_clone+0x190/0x3f0 [ 281.189705][ T8851] netlink_deliver_tap+0xabd/0xd30 [ 281.189736][ T8851] netlink_unicast+0x64c/0x870 [ 281.189763][ T8851] ? __pfx_netlink_unicast+0x10/0x10 [ 281.189798][ T8851] netlink_sendmsg+0x8c8/0xdd0 [ 281.189828][ T8851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.189863][ T8851] ____sys_sendmsg+0xa98/0xc70 [ 281.189880][ T8851] ? copy_msghdr_from_user+0x10a/0x160 [ 281.189902][ T8851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.189931][ T8851] ___sys_sendmsg+0x134/0x1d0 [ 281.189956][ T8851] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.189977][ T8851] ? __lock_acquire+0x622/0x1c90 [ 281.190024][ T8851] __sys_sendmsg+0x16d/0x220 [ 281.190047][ T8851] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.190088][ T8851] do_syscall_64+0xcd/0xfa0 [ 281.190107][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.190124][ T8851] RIP: 0033:0x7f18e738f6c9 [ 281.190138][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.190153][ T8851] RSP: 002b:00007f18e8303038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.190170][ T8851] RAX: ffffffffffffffda RBX: 00007f18e75e5fa0 RCX: 00007f18e738f6c9 [ 281.190181][ T8851] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000004 [ 281.190191][ T8851] RBP: 00007f18e8303090 R08: 0000000000000000 R09: 0000000000000000 [ 281.190200][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.190210][ T8851] R13: 00007f18e75e6038 R14: 00007f18e75e5fa0 R15: 00007ffc50342c48 [ 281.190236][ T8851] [ 281.190271][ T8851] netlink: 1 bytes leftover after parsing attributes in process `syz.3.739'. [ 281.329625][ T48] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 281.450177][ T48] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 281.461135][ T48] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 281.497918][ T48] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 281.676545][ T5939] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 281.785668][ T8867] veth1_to_bond: entered allmulticast mode [ 281.828113][ T5939] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 281.837412][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.852531][ T5939] usb 4-1: config 0 descriptor?? [ 281.864811][ T5939] usb 4-1: selecting invalid altsetting 1 [ 281.870698][ T5939] flexcop_usb: set interface failed. [ 281.876206][ T5939] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 281.901381][ T8866] veth1_to_bond: left allmulticast mode [ 282.121941][ T48] usb 4-1: USB disconnect, device number 17 [ 283.426956][ T8896] input: syz1 as /devices/virtual/input/input27 [ 283.492916][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 283.492930][ T30] audit: type=1400 audit(1762988379.274:670): avc: denied { read } for pid=5169 comm="acpid" name="js0" dev="devtmpfs" ino=3173 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.607871][ T30] audit: type=1400 audit(1762988379.284:671): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3173 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.915488][ T30] audit: type=1400 audit(1762988379.284:672): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3173 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.980792][ T30] audit: type=1400 audit(1762988379.404:673): avc: denied { create } for pid=8900 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 284.010181][ T30] audit: type=1400 audit(1762988379.524:674): avc: denied { getopt } for pid=8900 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 284.336729][ T5939] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 284.548688][ T30] audit: type=1400 audit(1762988380.344:675): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 284.575919][ T30] audit: type=1400 audit(1762988380.364:676): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.577040][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 284.623201][ T30] audit: type=1400 audit(1762988380.364:677): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.625964][ T5929] usb 3-1: USB disconnect, device number 23 [ 284.675436][ T5939] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 284.691866][ T5939] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 284.704778][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.719642][ T30] audit: type=1400 audit(1762988380.364:678): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.006286][ T30] audit: type=1400 audit(1762988380.364:679): avc: denied { read } for pid=5479 comm="dhcpcd" name="n104" dev="tmpfs" ino=5128 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.053705][ T5939] usb 4-1: Product: syz [ 285.847285][ T5939] usb 4-1: Manufacturer: syz [ 285.851907][ T5939] usb 4-1: SerialNumber: syz [ 285.919234][ T5939] usb 4-1: config 0 descriptor?? [ 285.978674][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 286.016571][ T5939] usb 4-1: setting power ON [ 286.055280][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 286.071340][ T8923] Process accounting resumed [ 286.116147][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.292246][ T8904] dvb-usb: bulk message failed: -22 (3/0) [ 286.391748][ T8945] tipc: Disabling bearer [ 286.435247][ T8904] cxusb: i2c wr: len=80 is too big! [ 286.435247][ T8904] [ 286.497495][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 286.529227][ T5939] usb 4-1: media controller created [ 286.627130][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.649604][ T5939] usb 4-1: selecting invalid altsetting 6 [ 286.655446][ T5939] usb 4-1: digital interface selection failed (-22) [ 286.774770][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 286.785339][ T5939] usb 4-1: setting power OFF [ 286.791953][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 286.798171][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 286.807849][ T5939] (NULL device *): no alternate interface [ 287.388988][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 287.576894][ T5939] usb 4-1: USB disconnect, device number 18 [ 287.783804][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.765'. [ 288.343570][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.501170][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.629721][ T5880] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 288.714975][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.495992][ T5880] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 289.533972][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.844071][ T5880] usb 1-1: config 0 descriptor?? [ 289.844262][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.944639][ T5880] usb 1-1: selecting invalid altsetting 1 [ 290.002923][ T5880] flexcop_usb: set interface failed. [ 290.013031][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 290.115680][ T5880] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 290.192181][ T5880] usb 1-1: USB disconnect, device number 23 [ 290.323219][ T9014] netlink: 104 bytes leftover after parsing attributes in process `syz.2.778'. [ 290.332338][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 290.332355][ T30] audit: type=1400 audit(1762988386.114:698): avc: denied { nlmsg_read } for pid=9012 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.398801][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.409313][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.412068][ T62] bridge_slave_1: left allmulticast mode [ 290.425996][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.444061][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.451744][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.454384][ T62] bridge_slave_1: left promiscuous mode [ 290.478759][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.486355][ T30] audit: type=1400 audit(1762988386.274:699): avc: denied { mounton } for pid=9019 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 290.692338][ T30] audit: type=1400 audit(1762988386.404:700): avc: denied { append } for pid=9012 comm="syz.2.778" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.853366][ T62] bridge_slave_0: left allmulticast mode [ 290.859612][ T62] bridge_slave_0: left promiscuous mode [ 290.879159][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.436188][ T30] audit: type=1400 audit(1762988386.934:701): avc: denied { create } for pid=9015 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.520520][ T5821] Bluetooth: hci3: command tx timeout [ 292.581607][ T30] audit: type=1400 audit(1762988388.374:702): avc: denied { create } for pid=9037 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 292.616775][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.784'. [ 293.148161][ T30] audit: type=1400 audit(1762988388.934:703): avc: denied { setopt } for pid=9037 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.233687][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.246383][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.267225][ T62] bond0 (unregistering): Released all slaves [ 293.296570][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 293.426561][ T9] usb 2-1: device descriptor read/64, error -71 [ 293.776637][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 293.964481][ T9069] tipc: Started in network mode [ 293.976711][ T9] usb 2-1: device descriptor read/64, error -71 [ 293.986523][ T9069] tipc: Node identity 5ae8550c03c5, cluster identity 4711 [ 294.027325][ T9069] tipc: Enabled bearer , priority 0 [ 294.034191][ T9071] syzkaller0: entered promiscuous mode [ 294.039838][ T9071] syzkaller0: entered allmulticast mode [ 294.098950][ T9] usb usb2-port1: attempt power cycle [ 294.169138][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 294.190175][ T30] audit: type=1400 audit(1762988389.964:704): avc: denied { ioctl } for pid=9078 comm="syz.3.791" path="socket:[22869]" dev="sockfs" ino=22869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.227954][ T30] audit: type=1400 audit(1762988389.984:705): avc: denied { getopt } for pid=9061 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 294.269473][ T9062] tipc: Resetting bearer [ 294.292352][ T9061] tipc: Resetting bearer [ 294.311961][ T9061] tipc: Disabling bearer [ 294.476565][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 294.496950][ T9] usb 2-1: device descriptor read/8, error -71 [ 294.560645][ T62] hsr_slave_0: left promiscuous mode [ 294.568990][ T5873] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 294.586868][ T62] hsr_slave_1: left promiscuous mode [ 294.593081][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.643226][ T5821] Bluetooth: hci3: command tx timeout [ 294.648774][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.657011][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.689592][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.189097][ T5873] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 295.194523][ T62] veth1_macvtap: left promiscuous mode [ 295.214806][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.216737][ T9] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 295.235356][ T62] veth0_macvtap: left promiscuous mode [ 295.245366][ T5873] usb 1-1: config 0 descriptor?? [ 295.246742][ T62] veth1_vlan: left promiscuous mode [ 295.256040][ T5873] usb 1-1: selecting invalid altsetting 1 [ 295.262218][ T5873] flexcop_usb: set interface failed. [ 295.265849][ T62] veth0_vlan: left promiscuous mode [ 295.269931][ T5873] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 295.283275][ T9] usb 2-1: device descriptor read/8, error -71 [ 295.409031][ T9] usb usb2-port1: unable to enumerate USB device [ 295.552172][ T5873] usb 1-1: USB disconnect, device number 24 [ 295.843421][ T62] team0 (unregistering): Port device team_slave_1 removed [ 295.883172][ T62] team0 (unregistering): Port device team_slave_0 removed [ 295.906591][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 296.176557][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 296.183124][ T9] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 296.206603][ T9] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 296.218377][ T9] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.232240][ T9] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 296.340056][ T30] audit: type=1400 audit(1762988392.124:706): avc: denied { connect } for pid=9107 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.449817][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 296.499380][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.546028][ T9] usb 4-1: Product: syz [ 296.568349][ T9] usb 4-1: Manufacturer: syz [ 296.592074][ T9] usb 4-1: SerialNumber: syz [ 296.680713][ T5821] Bluetooth: hci3: command tx timeout [ 296.683522][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 296.700256][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input28 [ 296.906670][ T9] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 297.129714][ T30] audit: type=1400 audit(1762988392.914:707): avc: denied { getopt } for pid=9105 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.149265][ T9] (id 0x00) [ 297.181679][ T30] audit: type=1400 audit(1762988392.914:708): avc: denied { setopt } for pid=9105 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.252240][ T9] rc_core: IR keymap rc-imon-pad not found [ 297.370420][ T9] Registered IR keymap rc-empty [ 297.376179][ T9] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 297.398793][ T9] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 297.501307][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 297.629998][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input29 [ 297.701202][ T9] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:19> initialized [ 297.723179][ T9] usb 4-1: USB disconnect, device number 19 [ 298.105329][ T30] audit: type=1400 audit(1762988393.894:709): avc: denied { write } for pid=9127 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 298.223202][ T30] audit: type=1400 audit(1762988394.014:710): avc: denied { setopt } for pid=9124 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.249166][ T9125] 2: renamed from veth0_vlan (while UP) [ 298.767157][ T5821] Bluetooth: hci3: command tx timeout [ 298.888692][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 299.350884][ T9162] zonefs (nullb0) ERROR: Not a zoned block device [ 299.485822][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.500235][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.624000][ T30] audit: type=1400 audit(1762988395.394:711): avc: denied { bind } for pid=9160 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.922299][ T9019] bridge_slave_0: entered allmulticast mode [ 299.929908][ T9019] bridge_slave_0: entered promiscuous mode [ 299.962277][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.969689][ T30] audit: type=1400 audit(1762988395.394:712): avc: denied { name_bind } for pid=9160 comm="syz.3.809" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 300.001316][ T30] audit: type=1400 audit(1762988395.394:713): avc: denied { node_bind } for pid=9160 comm="syz.3.809" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 300.006666][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.048032][ T5939] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 300.096310][ T9019] bridge_slave_1: entered allmulticast mode [ 300.109645][ T9019] bridge_slave_1: entered promiscuous mode [ 300.147374][ T30] audit: type=1400 audit(1762988395.934:714): avc: denied { read } for pid=9169 comm="syz.2.810" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.172964][ T30] audit: type=1400 audit(1762988395.944:715): avc: denied { open } for pid=9169 comm="syz.2.810" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.264090][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.286544][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 300.297970][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.314930][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.339392][ T5939] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.349595][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.377942][ T5939] usb 2-1: config 0 descriptor?? [ 300.926988][ T9019] team0: Port device team_slave_0 added [ 300.937798][ T5939] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.979200][ T9019] team0: Port device team_slave_1 added [ 301.068019][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.085147][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.200798][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.514942][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.531046][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.539046][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.546890][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.616865][ T5939] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.622282][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.705304][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 301.705320][ T30] audit: type=1400 audit(1762988397.494:718): avc: denied { write } for pid=9159 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.786670][ T30] audit: type=1400 audit(1762988397.544:719): avc: denied { name_connect } for pid=9159 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 301.901173][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 301.925924][ T9019] hsr_slave_0: entered promiscuous mode [ 301.970973][ T5939] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 301.971255][ T9019] hsr_slave_1: entered promiscuous mode [ 301.986149][ T5939] usb 4-1: config 0 has no interface number 0 [ 302.002123][ T9019] debugfs: 'hsr0' already exists in 'hsr' [ 302.005341][ T30] audit: type=1400 audit(1762988397.644:720): avc: denied { listen } for pid=9159 comm="syz.1.808" lport=60876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.028775][ T5939] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.051993][ T9019] Cannot create hsr debugfs directory [ 302.186976][ T5939] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 302.251264][ T30] audit: type=1400 audit(1762988397.644:721): avc: denied { accept } for pid=9159 comm="syz.1.808" lport=60876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.286651][ T5939] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 302.314846][ T5939] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.339892][ T30] audit: type=1400 audit(1762988397.644:722): avc: denied { write } for pid=9159 comm="syz.1.808" name="iowarrior0" dev="devtmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 302.392101][ T5939] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 302.403709][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.433365][ T5939] usb 4-1: Product: syz [ 302.438287][ T30] audit: type=1400 audit(1762988397.744:723): avc: denied { mount } for pid=9201 comm="syz.2.816" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.465454][ T5939] usb 4-1: Manufacturer: syz [ 302.470340][ T5939] usb 4-1: SerialNumber: syz [ 302.507240][ T5939] usb 4-1: config 0 descriptor?? [ 302.521859][ T30] audit: type=1400 audit(1762988397.994:724): avc: denied { mount } for pid=9210 comm="syz.0.817" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 302.663846][ T30] audit: type=1400 audit(1762988398.034:725): avc: denied { search } for pid=9210 comm="syz.0.817" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.807390][ T5939] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 302.860940][ T5939] usb 4-1: USB disconnect, device number 20 [ 302.871026][ T30] audit: type=1400 audit(1762988398.034:726): avc: denied { search } for pid=9210 comm="syz.0.817" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.902464][ T30] audit: type=1400 audit(1762988398.034:727): avc: denied { read open } for pid=9210 comm="syz.0.817" path="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.949408][ T5866] usb 2-1: USB disconnect, device number 34 [ 303.266060][ T9019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.281293][ T9019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.299280][ T9019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.323870][ T9019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.133544][ T5939] Process accounting resumed [ 304.646408][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.730904][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.770868][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.777972][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.788616][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.795685][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.937565][ T9255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.823'. [ 304.962231][ T9255] ./file0: Can't open blockdev [ 306.296688][ T5939] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 306.594083][ T5939] usb 2-1: No LPM exit latency info found, disabling LPM. [ 306.626393][ T5939] usb 2-1: config 1 interface 0 altsetting 140 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 306.664157][ T5939] usb 2-1: config 1 interface 0 altsetting 140 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.684980][ T5939] usb 2-1: config 1 interface 0 has no altsetting 0 [ 306.711437][ T5939] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.40 [ 306.728896][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.896540][ T5939] usb 2-1: Product: Ҷ栊뷌刂喿Ẻ뻻彏类Ɗ㠰扵Ꮆⴈ硼㵆⍳枍힍ᶴ﬏わ顎衳묟쮟퍬돶絠ᠯ妭⋕퉣攂吕韘ச㱒츫ኗ籌诗綵ᯎ愻鸭st㾺厼ﺡ困쪥貊饧Ⱐ闊瀮⒴儚ᢥ稍굡纚棻앀ꩶ억ꆭ῿ᛂ鑐 [ 306.904504][ T9019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.081178][ T5939] usb 2-1: Manufacturer: У [ 307.089922][ T5939] usb 2-1: SerialNumber: ೼ƒ闷䍚庌㐿픗잲שּׁ遛뾌✽鱆笾觕ўᐝ뿜ꁱ仁唫흇≽蝿똣ꨎ䈷䛴嗖锸㞴괮汸뤐宙 [ 307.643793][ T9265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.061358][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 308.061396][ T30] audit: type=1400 audit(1762988403.854:734): avc: denied { append } for pid=9293 comm="syz.2.831" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.199296][ T5939] usbhid 2-1:1.0: can't add hid device: -71 [ 308.205315][ T5939] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 308.266697][ T5939] usb 2-1: USB disconnect, device number 35 [ 308.413077][ T9019] veth0_vlan: entered promiscuous mode [ 308.444586][ T9019] veth1_vlan: entered promiscuous mode [ 308.495787][ T9019] veth0_macvtap: entered promiscuous mode [ 308.508653][ T9019] veth1_macvtap: entered promiscuous mode [ 308.527343][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.540219][ T9019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.542921][ T30] audit: type=1400 audit(1762988404.334:735): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 308.572747][ T6879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.583497][ T6879] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.593068][ T6879] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.605410][ T6879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.659011][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.670458][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.675763][ T9308] FAULT_INJECTION: forcing a failure. [ 308.675763][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 308.684187][ T30] audit: type=1400 audit(1762988404.464:736): avc: denied { read } for pid=9307 comm="syz.3.834" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.690931][ T5880] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 308.714962][ T30] audit: type=1400 audit(1762988404.464:737): avc: denied { open } for pid=9307 comm="syz.3.834" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.737975][ T9308] CPU: 1 UID: 0 PID: 9308 Comm: syz.3.834 Not tainted syzkaller #0 PREEMPT(full) [ 308.737998][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.738006][ T9308] Call Trace: [ 308.738011][ T9308] [ 308.738017][ T9308] dump_stack_lvl+0x16c/0x1f0 [ 308.738049][ T9308] should_fail_ex+0x512/0x640 [ 308.738070][ T9308] should_failslab+0xc2/0x120 [ 308.738088][ T9308] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 308.738106][ T9308] ? sidtab_sid2str_get+0x17a/0x680 [ 308.738128][ T9308] ? kmemdup_noprof+0x29/0x60 [ 308.738142][ T9308] kmemdup_noprof+0x29/0x60 [ 308.738156][ T9308] sidtab_sid2str_get+0x17a/0x680 [ 308.738176][ T9308] sidtab_entry_to_string+0x33/0x110 [ 308.738195][ T9308] security_sid_to_context_core+0x35c/0x640 [ 308.738214][ T9308] avc_audit_post_callback+0x109/0x8f0 [ 308.738236][ T9308] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 308.738255][ T9308] ? skb_put+0x138/0x1b0 [ 308.738270][ T9308] ? audit_log_n_string+0x253/0x550 [ 308.738294][ T9308] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 308.738313][ T9308] common_lsm_audit+0x24e/0x300 [ 308.738336][ T9308] ? __pfx_common_lsm_audit+0x10/0x10 [ 308.738361][ T9308] slow_avc_audit+0x186/0x210 [ 308.738382][ T9308] ? __pfx_slow_avc_audit+0x10/0x10 [ 308.738408][ T9308] ? find_held_lock+0x2b/0x80 [ 308.738428][ T9308] ? avc_has_extended_perms+0x33a/0x1090 [ 308.738451][ T9308] avc_has_extended_perms+0xa40/0x1090 [ 308.738480][ T9308] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 308.738501][ T9308] ? kasan_quarantine_put+0x10a/0x240 [ 308.738514][ T9308] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.738532][ T9308] ? find_held_lock+0x2b/0x80 [ 308.738556][ T9308] ? tomoyo_path_number_perm+0x18d/0x580 [ 308.738591][ T9308] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 308.738612][ T9308] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 308.738637][ T9308] ? hook_file_ioctl_common+0x145/0x410 [ 308.738664][ T9308] ? selinux_file_ioctl+0x180/0x270 [ 308.738679][ T9308] selinux_file_ioctl+0x180/0x270 [ 308.738698][ T9308] security_file_ioctl+0xc6/0x240 [ 308.738716][ T9308] __x64_sys_ioctl+0xb7/0x210 [ 308.738740][ T9308] do_syscall_64+0xcd/0xfa0 [ 308.738756][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.738771][ T9308] RIP: 0033:0x7f18e738f6c9 [ 308.738783][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.738797][ T9308] RSP: 002b:00007f18e8303038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.738813][ T9308] RAX: ffffffffffffffda RBX: 00007f18e75e5fa0 RCX: 00007f18e738f6c9 [ 308.738823][ T9308] RDX: 0000200000001680 RSI: 0000000050009404 RDI: 0000000000000003 [ 308.738832][ T9308] RBP: 00007f18e8303090 R08: 0000000000000000 R09: 0000000000000000 [ 308.738841][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.738849][ T9308] R13: 00007f18e75e6038 R14: 00007f18e75e5fa0 R15: 00007ffc50342c48 [ 308.738871][ T9308] [ 308.750022][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.781764][ T30] audit: type=1400 audit(1762988404.464:738): avc: denied { ioctl } for pid=9307 comm="syz.3.834" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 ssid=148 tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 308.816515][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.667516][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.692065][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.702268][ T5880] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 309.740357][ T30] audit: type=1400 audit(1762988405.534:739): avc: denied { mounton } for pid=9019 comm="syz-executor" path="/root/syzkaller.HElSZW/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 309.741777][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.814778][ T30] audit: type=1400 audit(1762988405.534:740): avc: denied { mount } for pid=9019 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 309.853821][ T5880] usb 3-1: config 0 descriptor?? [ 309.899606][ T30] audit: type=1400 audit(1762988405.534:741): avc: denied { mounton } for pid=9019 comm="syz-executor" path="/root/syzkaller.HElSZW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 310.099702][ T48] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 310.111711][ T30] audit: type=1400 audit(1762988405.564:742): avc: denied { mounton } for pid=9019 comm="syz-executor" path="/root/syzkaller.HElSZW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 310.141228][ T30] audit: type=1400 audit(1762988405.664:743): avc: denied { mounton } for pid=9019 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 310.266726][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 310.273889][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 310.286124][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 310.298981][ T5880] hid_parser_main: 60 callbacks suppressed [ 310.299000][ T5880] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 310.398445][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 310.487446][ T5880] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 310.499663][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.509419][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.552491][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 310.635153][ T48] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 310.649077][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.675936][ T48] usb 1-1: Product: syz [ 310.683886][ T5880] cp2112 0003:10C4:EA90.0007: error requesting version [ 310.727858][ T48] usb 1-1: Manufacturer: syz [ 310.743144][ T5880] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 310.770825][ T48] usb 1-1: SerialNumber: syz [ 310.813692][ T48] usb 1-1: config 0 descriptor?? [ 310.822461][ T9324] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 310.845884][ T48] port100 1-1:0.0: NFC: Could not get supported command types [ 310.855246][ T5880] usb 3-1: USB disconnect, device number 24 [ 311.101342][ T5880] usb 1-1: USB disconnect, device number 25 [ 311.939571][ T5880] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 312.107898][ T9374] sp0: Synchronizing with TNC [ 312.117450][ T9374] sp0: Found TNC [ 312.144267][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.847'. [ 312.217133][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 312.240440][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.268044][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.278394][ T5880] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 312.289707][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.305808][ T5880] usb 4-1: config 0 descriptor?? [ 312.346578][ T48] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 312.376641][ T5866] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 312.476746][ T48] usb 1-1: device descriptor read/64, error -71 [ 312.538007][ T5866] usb 3-1: No LPM exit latency info found, disabling LPM. [ 312.546393][ T5866] usb 3-1: config 1 interface 0 altsetting 140 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 312.559885][ T5866] usb 3-1: config 1 interface 0 altsetting 140 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.576505][ T5866] usb 3-1: config 1 interface 0 has no altsetting 0 [ 312.632245][ T5866] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.40 [ 312.641560][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.649767][ T5866] usb 3-1: Product: Ҷ栊뷌刂喿Ẻ뻻彏类Ɗ㠰扵Ꮆⴈ硼㵆⍳枍힍ᶴ﬏わ顎衳묟쮟퍬돶絠ᠯ妭⋕퉣攂吕韘ச㱒츫ኗ籌诗綵ᯎ愻鸭st㾺厼ﺡ困쪥貊饧Ⱐ闊瀮⒴儚ᢥ稍굡纚棻앀ꩶ억ꆭ῿ᛂ鑐 [ 312.705018][ T5866] usb 3-1: Manufacturer: У [ 312.709745][ T5866] usb 3-1: SerialNumber: ೼ƒ闷䍚庌㐿픗잲שּׁ遛뾌✽鱆笾觕ўᐝ뿜ꁱ仁唫흇≽蝿똣ꨎ䈷䛴嗖锸㞴괮汸뤐宙 [ 312.758795][ T48] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 312.760969][ T9367] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.860021][ T5880] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 312.911409][ T5880] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 312.932684][ T5880] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 313.043951][ T5880] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 313.052108][ T5866] usbhid 3-1:1.0: can't add hid device: -71 [ 313.058414][ T5866] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 313.066575][ T48] usb 1-1: device descriptor read/64, error -71 [ 313.080174][ T5880] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 313.081617][ T5866] usb 3-1: USB disconnect, device number 25 [ 313.224741][ T48] usb usb1-port1: attempt power cycle [ 313.532018][ T5880] savu 0003:1E7D:2D5A.0008: unbalanced collection at end of report description [ 313.557200][ T5880] savu 0003:1E7D:2D5A.0008: parse failed [ 313.572131][ T5880] savu 0003:1E7D:2D5A.0008: probe with driver savu failed with error -22 [ 313.896583][ T48] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 313.917017][ T48] usb 1-1: device descriptor read/8, error -71 [ 314.076762][ T975] usb 4-1: USB disconnect, device number 21 [ 314.156651][ T48] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 314.189253][ T48] usb 1-1: device descriptor read/8, error -71 [ 314.366350][ T9384] macsec1: entered promiscuous mode [ 314.406942][ T48] usb usb1-port1: unable to enumerate USB device [ 314.590409][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 314.590426][ T30] audit: type=1400 audit(1762988410.334:752): avc: denied { ioctl } for pid=9385 comm="syz.1.852" path="socket:[24790]" dev="sockfs" ino=24790 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.722458][ T9399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 314.727883][ T30] audit: type=1400 audit(1762988410.514:753): avc: denied { connect } for pid=9383 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.000757][ T30] audit: type=1400 audit(1762988410.564:754): avc: denied { shutdown } for pid=9383 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.024023][ T30] audit: type=1400 audit(1762988410.604:755): avc: denied { read } for pid=9383 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.687481][ T30] audit: type=1326 audit(1762988412.474:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98f6c9 code=0x7fc00000 [ 316.711192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.721245][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.731317][ T48] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 316.885324][ T30] audit: type=1400 audit(1762988412.654:757): avc: denied { ioctl } for pid=9426 comm="syz.0.860" path="socket:[24032]" dev="sockfs" ino=24032 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 316.967128][ T48] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 317.036603][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.077828][ T48] usb 2-1: config 0 descriptor?? [ 317.122238][ T9432] FAULT_INJECTION: forcing a failure. [ 317.122238][ T9432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.188045][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.0.861 Not tainted syzkaller #0 PREEMPT(full) [ 317.188070][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.188080][ T9432] Call Trace: [ 317.188087][ T9432] [ 317.188094][ T9432] dump_stack_lvl+0x16c/0x1f0 [ 317.188126][ T9432] should_fail_ex+0x512/0x640 [ 317.188151][ T9432] _copy_from_user+0x2e/0xd0 [ 317.188172][ T9432] memdup_user+0x6b/0xe0 [ 317.188189][ T9432] strndup_user+0x78/0xe0 [ 317.188205][ T9432] __x64_sys_mount+0x136/0x310 [ 317.188228][ T9432] ? __pfx___x64_sys_mount+0x10/0x10 [ 317.188256][ T9432] do_syscall_64+0xcd/0xfa0 [ 317.188274][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.188292][ T9432] RIP: 0033:0x7fe0ff98f6c9 [ 317.188306][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.188321][ T9432] RSP: 002b:00007fe100752038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.188338][ T9432] RAX: ffffffffffffffda RBX: 00007fe0ffbe5fa0 RCX: 00007fe0ff98f6c9 [ 317.188349][ T9432] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000200000000100 [ 317.188359][ T9432] RBP: 00007fe100752090 R08: 00002000000003c0 R09: 0000000000000000 [ 317.188370][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.188380][ T9432] R13: 00007fe0ffbe6038 R14: 00007fe0ffbe5fa0 R15: 00007ffcb4d46938 [ 317.188404][ T9432] [ 317.517032][ T30] audit: type=1400 audit(1762988413.304:758): avc: denied { setopt } for pid=9440 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 317.570898][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.680397][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.852719][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 317.859015][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 317.880115][ T48] usb 2-1: USB disconnect, device number 36 [ 318.117711][ T30] audit: type=1400 audit(1762988413.734:759): avc: denied { read } for pid=9446 comm="syz.6.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 318.687762][ T30] audit: type=1400 audit(1762988413.784:760): avc: denied { read write } for pid=9447 comm="syz.0.866" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 318.748433][ T9456] netlink: get zone limit has 4 unknown bytes [ 318.788745][ T30] audit: type=1400 audit(1762988413.784:761): avc: denied { open } for pid=9447 comm="syz.0.866" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 319.032567][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.865'. [ 319.286586][ T48] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 319.720514][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 319.735704][ T48] usb 2-1: config index 0 descriptor too short (expected 65532, got 18) [ 319.774874][ T48] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 319.865465][ T48] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 320.079729][ T48] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 320.111024][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.130443][ T48] usb 2-1: Product: syz [ 320.239614][ T48] usb 2-1: Manufacturer: syz [ 320.252188][ T48] usb 2-1: SerialNumber: syz [ 320.266637][ T48] r8152-cfgselector 2-1: Unknown version 0x0000 [ 320.327551][ T9484] Process accounting resumed [ 320.353507][ T48] r8152-cfgselector 2-1: config 0 descriptor?? [ 321.347907][ T5866] Process accounting resumed [ 321.364688][ T9456] PKCS8: Unsupported PKCS#8 version [ 321.417971][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 321.417986][ T30] audit: type=1326 audit(1762988417.214:768): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 321.467359][ T5929] r8152-cfgselector 2-1: USB disconnect, device number 37 [ 321.527313][ T30] audit: type=1326 audit(1762988417.214:769): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 321.569987][ T30] audit: type=1326 audit(1762988417.214:770): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 321.678984][ T30] audit: type=1326 audit(1762988417.214:771): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 321.723187][ T30] audit: type=1326 audit(1762988417.214:772): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 321.890456][ T9506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.876'. [ 321.915140][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.255944][ T30] audit: type=1326 audit(1762988417.274:773): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33f8f6c9 code=0x7ffc0000 [ 322.583663][ T9510] syzkaller0: entered promiscuous mode [ 322.604389][ T30] audit: type=1400 audit(1762988418.374:774): avc: denied { ioctl } for pid=9508 comm="syz.0.879" path="socket:[24175]" dev="sockfs" ino=24175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.636596][ T9510] syzkaller0: entered allmulticast mode [ 322.726491][ T30] audit: type=1400 audit(1762988418.454:775): avc: denied { read write } for pid=9520 comm="syz.1.880" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.991655][ T30] audit: type=1400 audit(1762988418.454:776): avc: denied { open } for pid=9520 comm="syz.1.880" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 323.116682][ T30] audit: type=1400 audit(1762988418.484:777): avc: denied { ioctl } for pid=9520 comm="syz.1.880" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 323.926922][ T5880] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 324.096553][ T48] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 324.124395][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 324.141776][ T5880] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 324.156554][ T5880] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 324.188270][ T5880] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 324.254788][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.298875][ T9561] loop6: detected capacity change from 0 to 524288000 [ 324.321718][ T5880] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.338094][ T48] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.585740][ T5880] usb 4-1: config 1 interface 0 has no altsetting 0 [ 324.595519][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 324.645508][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.656012][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.675548][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.690617][ T48] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.706518][ T5880] usb 4-1: Product: syz [ 324.710862][ T48] usb 3-1: Product: syz [ 324.715027][ T48] usb 3-1: Manufacturer: syz [ 324.736523][ T5880] usb 4-1: Manufacturer: syz [ 324.746547][ T5880] usb 4-1: SerialNumber: syz [ 324.751467][ T48] usb 3-1: SerialNumber: syz [ 324.782395][ T9544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.810717][ T48] usb 3-1: config 0 descriptor?? [ 324.822129][ T9544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.933937][ T48] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 325.211673][ T5880] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 325.228256][ T6404] udevd[6404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.408444][ T5929] usb 3-1: USB disconnect, device number 26 [ 325.528894][ T5880] usb 4-1: USB disconnect, device number 22 [ 325.846892][ T5894] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 326.139635][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 326.155322][ T5894] usb 2-1: config 0 has no interfaces? [ 326.181296][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 326.253094][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.311754][ T5894] usb 2-1: config 0 descriptor?? [ 326.553477][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 326.553491][ T30] audit: type=1400 audit(1762988422.344:782): avc: denied { write } for pid=9586 comm="syz.3.892" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 326.599682][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.608832][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.834771][ T30] audit: type=1400 audit(1762988422.624:783): avc: denied { call } for pid=9586 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 326.834820][ T30] audit: type=1400 audit(1762988422.624:784): avc: denied { transfer } for pid=9586 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 326.869880][ T5894] usb 2-1: USB disconnect, device number 38 [ 328.228742][ T30] audit: type=1400 audit(1762988424.004:785): avc: denied { getopt } for pid=9609 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.590244][ T9630] binder: 9629:9630 ioctl c0306201 200000000640 returned -22 [ 330.265454][ T9661] ip6erspan0: entered promiscuous mode [ 331.367606][ T9680] binder: 9677:9680 ioctl c0306201 200000000640 returned -22 [ 334.338049][ T9716] bridge0: entered allmulticast mode [ 334.360075][ T9716] pim6reg: entered allmulticast mode [ 334.371616][ T9716] bridge0: left allmulticast mode [ 334.408168][ T9716] overlayfs: failed to get inode (-116) [ 334.414035][ T9716] overlayfs: failed to get inode (-116) [ 334.557470][ T9713] pim6reg: left allmulticast mode [ 334.727552][ T9727] FAULT_INJECTION: forcing a failure. [ 334.727552][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.757471][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.3.925 Not tainted syzkaller #0 PREEMPT(full) [ 334.757486][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.757493][ T9727] Call Trace: [ 334.757496][ T9727] [ 334.757501][ T9727] dump_stack_lvl+0x16c/0x1f0 [ 334.757521][ T9727] should_fail_ex+0x512/0x640 [ 334.757536][ T9727] _copy_to_user+0x32/0xd0 [ 334.757551][ T9727] simple_read_from_buffer+0xcb/0x170 [ 334.757568][ T9727] proc_fail_nth_read+0x197/0x240 [ 334.757581][ T9727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.757594][ T9727] ? rw_verify_area+0xcf/0x6c0 [ 334.757609][ T9727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.757620][ T9727] vfs_read+0x1e4/0xcf0 [ 334.757632][ T9727] ? __pfx___mutex_lock+0x10/0x10 [ 334.757642][ T9727] ? __pfx_vfs_read+0x10/0x10 [ 334.757655][ T9727] ? __fget_files+0x20e/0x3c0 [ 334.757669][ T9727] ksys_read+0x12a/0x250 [ 334.757679][ T9727] ? __pfx_ksys_read+0x10/0x10 [ 334.757692][ T9727] do_syscall_64+0xcd/0xfa0 [ 334.757703][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.757713][ T9727] RIP: 0033:0x7f18e738e0dc [ 334.757722][ T9727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.757732][ T9727] RSP: 002b:00007f18e8303030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.757742][ T9727] RAX: ffffffffffffffda RBX: 00007f18e75e5fa0 RCX: 00007f18e738e0dc [ 334.757748][ T9727] RDX: 000000000000000f RSI: 00007f18e83030a0 RDI: 0000000000000004 [ 334.757754][ T9727] RBP: 00007f18e8303090 R08: 0000000000000000 R09: 0000000000000000 [ 334.757760][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.757765][ T9727] R13: 00007f18e75e6038 R14: 00007f18e75e5fa0 R15: 00007ffc50342c48 [ 334.757779][ T9727] [ 334.944227][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.180216][ T9722] netlink: 'syz.2.924': attribute type 11 has an invalid length. [ 335.198370][ T9722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.924'. [ 335.274721][ T9734] binder: 9733:9734 ioctl c0306201 200000000640 returned -22 [ 335.323773][ T30] audit: type=1804 audit(1762988430.964:786): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.924" name="/newroot/189/file0" dev="tmpfs" ino=1033 res=1 errno=0 [ 335.676732][ T30] audit: type=1400 audit(1762988431.434:787): avc: denied { ioctl } for pid=9740 comm="syz.3.928" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.834954][ T30] audit: type=1400 audit(1762988431.624:788): avc: denied { create } for pid=9747 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 335.887337][ T9750] FAULT_INJECTION: forcing a failure. [ 335.887337][ T9750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.913747][ T30] audit: type=1400 audit(1762988431.684:789): avc: denied { ioctl } for pid=9747 comm="syz.1.929" path="socket:[25440]" dev="sockfs" ino=25440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.031695][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.1.929 Not tainted syzkaller #0 PREEMPT(full) [ 336.031718][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.031726][ T9750] Call Trace: [ 336.031732][ T9750] [ 336.031739][ T9750] dump_stack_lvl+0x16c/0x1f0 [ 336.031768][ T9750] should_fail_ex+0x512/0x640 [ 336.031791][ T9750] _copy_from_user+0x2e/0xd0 [ 336.031813][ T9750] get_user_ifreq+0xf1/0x250 [ 336.031837][ T9750] sock_do_ioctl+0x16b/0x280 [ 336.031852][ T9750] ? __pfx_sock_do_ioctl+0x10/0x10 [ 336.031873][ T9750] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 336.031896][ T9750] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 336.031920][ T9750] sock_ioctl+0x227/0x6b0 [ 336.031937][ T9750] ? __pfx_sock_ioctl+0x10/0x10 [ 336.031950][ T9750] ? hook_file_ioctl_common+0x145/0x410 [ 336.031978][ T9750] ? selinux_file_ioctl+0x180/0x270 [ 336.031994][ T9750] ? selinux_file_ioctl+0xb4/0x270 [ 336.032012][ T9750] ? __pfx_sock_ioctl+0x10/0x10 [ 336.032035][ T9750] __x64_sys_ioctl+0x18e/0x210 [ 336.032059][ T9750] do_syscall_64+0xcd/0xfa0 [ 336.032076][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.032091][ T9750] RIP: 0033:0x7f8d33f8f6c9 [ 336.032104][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.032119][ T9750] RSP: 002b:00007f8d34d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.032134][ T9750] RAX: ffffffffffffffda RBX: 00007f8d341e5fa0 RCX: 00007f8d33f8f6c9 [ 336.032145][ T9750] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000004 [ 336.032153][ T9750] RBP: 00007f8d34d85090 R08: 0000000000000000 R09: 0000000000000000 [ 336.032163][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.032172][ T9750] R13: 00007f8d341e6038 R14: 00007f8d341e5fa0 R15: 00007ffc83b56a28 [ 336.032195][ T9750] [ 336.221465][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.225333][ T9770] fuse: Bad value for 'fd' [ 337.826978][ T9778] input: syz1 as /devices/virtual/input/input31 [ 338.746144][ T30] audit: type=1400 audit(1762988434.084:790): avc: denied { getopt } for pid=9784 comm="syz.1.939" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.746178][ T30] audit: type=1400 audit(1762988434.104:791): avc: denied { write } for pid=9784 comm="syz.1.939" path="socket:[25478]" dev="sockfs" ino=25478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.792549][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.386560][ T5880] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 340.566559][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 340.618783][ T5880] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 340.629834][ T5880] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 340.643291][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.656667][ T5880] usb 2-1: Product: syz [ 340.661130][ T5880] usb 2-1: Manufacturer: syz [ 340.665982][ T5880] usb 2-1: SerialNumber: syz [ 340.949173][ T5880] usb 2-1: config 0 descriptor?? [ 340.962168][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 341.556537][ T5880] usb 2-1: setting power ON [ 341.561159][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 341.915604][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 341.948312][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 342.165398][ T5880] usb 2-1: media controller created [ 342.813081][ T9817] Process accounting resumed [ 342.843242][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.150010][ T9831] FAULT_INJECTION: forcing a failure. [ 343.150010][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 343.150100][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(full) [ 343.150120][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.150129][ T9831] Call Trace: [ 343.150135][ T9831] [ 343.150139][ T9831] dump_stack_lvl+0x16c/0x1f0 [ 343.150159][ T9831] should_fail_ex+0x512/0x640 [ 343.150172][ T9831] ? __kmalloc_cache_noprof+0x5f/0x780 [ 343.150188][ T9831] should_failslab+0xc2/0x120 [ 343.150201][ T9831] __kmalloc_cache_noprof+0x72/0x780 [ 343.150216][ T9831] ? snd_info_text_entry_write+0x3d3/0x510 [ 343.150230][ T9831] ? snd_info_text_entry_write+0x3d3/0x510 [ 343.150240][ T9831] snd_info_text_entry_write+0x3d3/0x510 [ 343.150252][ T9831] ? __pfx_snd_info_text_entry_write+0x10/0x10 [ 343.150263][ T9831] proc_reg_write+0x240/0x330 [ 343.150279][ T9831] ? __pfx_proc_reg_write+0x10/0x10 [ 343.150292][ T9831] vfs_write+0x2a0/0x11d0 [ 343.150304][ T9831] ? __pfx___mutex_lock+0x10/0x10 [ 343.150315][ T9831] ? __pfx_vfs_write+0x10/0x10 [ 343.150329][ T9831] ? __fget_files+0x20e/0x3c0 [ 343.150344][ T9831] ksys_write+0x12a/0x250 [ 343.150353][ T9831] ? __pfx_ksys_write+0x10/0x10 [ 343.150367][ T9831] do_syscall_64+0xcd/0xfa0 [ 343.150378][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.150388][ T9831] RIP: 0033:0x7fe0ff98f6c9 [ 343.150397][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.150407][ T9831] RSP: 002b:00007fe0fdbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.150417][ T9831] RAX: ffffffffffffffda RBX: 00007fe0ffbe6090 RCX: 00007fe0ff98f6c9 [ 343.150424][ T9831] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000005 [ 343.150429][ T9831] RBP: 00007fe0fdbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.150435][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.150441][ T9831] R13: 00007fe0ffbe6128 R14: 00007fe0ffbe6090 R15: 00007ffcb4d46938 [ 343.150455][ T9831] [ 343.440282][ T5880] usb 2-1: selecting invalid altsetting 6 [ 343.440651][ T5880] usb 2-1: digital interface selection failed (-22) [ 343.440666][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 343.448807][ T5880] usb 2-1: setting power OFF [ 343.776096][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 343.782311][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 343.792055][ T5880] (NULL device *): no alternate interface [ 344.518418][ T9844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36770 sclass=netlink_route_socket pid=9844 comm=syz.3.953 [ 344.560316][ T9844] fuse: Bad value for 'fd' [ 344.787950][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 344.857510][ T5880] usb 2-1: USB disconnect, device number 39 [ 345.065471][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'. [ 345.828393][ T5880] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 345.935463][ T975] Process accounting resumed [ 346.066803][ T5880] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 346.129982][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.245888][ T5880] usb 2-1: config 0 descriptor?? [ 346.384985][ T5880] usb 2-1: selecting invalid altsetting 1 [ 346.450049][ T5880] flexcop_usb: set interface failed. [ 346.488269][ T5880] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 346.946384][ T9] usb 2-1: USB disconnect, device number 40 [ 347.329835][ T30] audit: type=1400 audit(1762988443.124:792): avc: denied { write } for pid=9878 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.480509][ T9882] fuse: Bad value for 'fd' [ 347.829565][ T9] Process accounting resumed [ 348.985004][ T30] audit: type=1400 audit(1762988444.694:793): avc: denied { map } for pid=9884 comm="syz.6.966" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 349.008398][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.014635][ T30] audit: type=1400 audit(1762988444.694:794): avc: denied { execute } for pid=9884 comm="syz.6.966" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 349.301871][ T30] audit: type=1400 audit(1762988445.094:795): avc: denied { write } for pid=9899 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.436815][ T9915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 351.913581][ T5821] Bluetooth: hci3: link tx timeout [ 351.921624][ T5821] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.526652][ T48] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 353.054518][ T30] audit: type=1400 audit(1762988448.844:796): avc: denied { write } for pid=9958 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.096513][ T5894] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 353.145082][ T48] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 353.153667][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.202918][ T9961] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 353.203452][ T48] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 353.246527][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 353.266669][ T48] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 353.276378][ T5894] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 353.295278][ T5894] usb 2-1: config 1 has no interface number 0 [ 353.306509][ T48] usb 7-1: Manufacturer: syz [ 353.312693][ T5894] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 353.350089][ T48] usb 7-1: config 0 descriptor?? [ 353.365373][ T5894] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 353.413417][ T5894] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 353.440427][ T48] rc_core: IR keymap rc-hauppauge not found [ 353.449481][ T5894] usb 2-1: config 1 interface 105 has no altsetting 0 [ 353.456360][ T48] Registered IR keymap rc-empty [ 353.465424][ T5894] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 353.477250][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 353.493812][ T5894] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 353.502517][ T5894] usb 2-1: Product: syz [ 353.508731][ T5894] usb 2-1: Manufacturer: syz [ 353.513543][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input36 [ 353.524481][ T5894] usb 2-1: SerialNumber: syz [ 353.630105][ T9949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.735683][ T9973] xt_socket: unknown flags 0x4c [ 354.035618][ T9949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 354.042901][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 354.091400][ T30] audit: type=1400 audit(1762988449.884:797): avc: denied { module_load } for pid=9966 comm="syz.3.988" path="/205/bus" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 354.114879][ T9975] Invalid ELF header magic: != ELF [ 354.211619][ T30] audit: type=1400 audit(1762988449.994:798): avc: denied { bind } for pid=9945 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.335319][ T48] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 354.603033][ T9949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 354.610287][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 354.617980][ T9981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9981 comm=syz.0.990 [ 354.618224][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.640978][ T9949] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 354.757224][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 354.769052][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 354.800279][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.857823][ T48] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 354.867036][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 354.883586][ T48] usb 3-1: Product: syz [ 354.899001][ T48] usb 3-1: Manufacturer: syz [ 354.920012][ T48] usb 3-1: SerialNumber: syz [ 354.931277][ T48] usb 3-1: config 0 descriptor?? [ 354.942605][ T48] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 354.957138][ T48] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 354.976463][ T48] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 355.099996][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 355.178107][ T30] audit: type=1400 audit(1762988450.974:799): avc: denied { recv } for pid=48 comm="kworker/1:1" saddr=10.128.0.169 src=39760 daddr=10.128.1.60 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 355.236637][ T5894] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 355.312330][ T5894] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 355.344011][ T5894] usb 2-1: USB disconnect, device number 41 [ 355.430125][ T48] usb 7-1: USB disconnect, device number 2 [ 355.796572][ T9973] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 355.886751][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 355.963999][T10005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10005 comm=syz.6.994 [ 356.125636][T10009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.996'. [ 356.883357][ T5866] usb 3-1: USB disconnect, device number 27 [ 357.377887][ T30] audit: type=1400 audit(1762988453.154:800): avc: denied { sqpoll } for pid=10029 comm="syz.2.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 357.422670][T10030] 9pnet_fd: Insufficient options for proto=fd [ 357.489433][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'. [ 357.568273][ T30] audit: type=1400 audit(1762988453.214:801): avc: denied { mounton } for pid=10029 comm=272C7B7D24AC267E3A2E2D25252E path="/204/file0" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 358.102797][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 359.575883][ T13] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 360.399301][T10070] FAULT_INJECTION: forcing a failure. [ 360.399301][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 360.465742][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.6.1010 Not tainted syzkaller #0 PREEMPT(full) [ 360.465759][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.465766][T10070] Call Trace: [ 360.465769][T10070] [ 360.465774][T10070] dump_stack_lvl+0x16c/0x1f0 [ 360.465801][T10070] should_fail_ex+0x512/0x640 [ 360.465814][T10070] ? fs_reclaim_acquire+0xae/0x150 [ 360.465827][T10070] should_failslab+0xc2/0x120 [ 360.465840][T10070] __kmalloc_noprof+0xdd/0x880 [ 360.465855][T10070] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 360.465871][T10070] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 360.465882][T10070] tomoyo_realpath_from_path+0xc2/0x6e0 [ 360.465895][T10070] ? tomoyo_profile+0x47/0x60 [ 360.465910][T10070] tomoyo_path_number_perm+0x245/0x580 [ 360.465920][T10070] ? tomoyo_path_number_perm+0x237/0x580 [ 360.465931][T10070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.465942][T10070] ? find_held_lock+0x2b/0x80 [ 360.465966][T10070] ? find_held_lock+0x2b/0x80 [ 360.465978][T10070] ? hook_file_ioctl_common+0x145/0x410 [ 360.465995][T10070] ? __fget_files+0x20e/0x3c0 [ 360.466008][T10070] security_file_ioctl+0x9b/0x240 [ 360.466020][T10070] __x64_sys_ioctl+0xb7/0x210 [ 360.466036][T10070] do_syscall_64+0xcd/0xfa0 [ 360.466047][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.466058][T10070] RIP: 0033:0x7f7fc138f6c9 [ 360.466066][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.466076][T10070] RSP: 002b:00007f7fc2305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.466086][T10070] RAX: ffffffffffffffda RBX: 00007f7fc15e5fa0 RCX: 00007f7fc138f6c9 [ 360.466092][T10070] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 360.466098][T10070] RBP: 00007f7fc2305090 R08: 0000000000000000 R09: 0000000000000000 [ 360.466104][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.466110][T10070] R13: 00007f7fc15e6038 R14: 00007f7fc15e5fa0 R15: 00007ffcd6685578 [ 360.466123][T10070] [ 360.466127][T10070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.736501][ T5880] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 361.028647][ T5880] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 361.053420][ T5880] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 361.183165][T10083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.207361][ T5880] usb 2-1: config 220 has no interface number 2 [ 361.213707][ T30] audit: type=1400 audit(1762988456.994:802): avc: denied { write } for pid=10077 comm="syz.0.1014" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 361.237143][ T5880] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 361.287053][ T5880] usb 2-1: config 220 interface 0 has no altsetting 0 [ 361.296527][ T5880] usb 2-1: config 220 interface 76 has no altsetting 0 [ 361.297962][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 361.303394][ T5880] usb 2-1: config 220 interface 1 has no altsetting 0 [ 361.472104][ T5880] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 361.635858][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.646645][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.654639][ T5880] usb 2-1: Product: syz [ 361.660143][ T5880] usb 2-1: Manufacturer: syz [ 361.682981][ T5880] usb 2-1: SerialNumber: syz [ 361.707227][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 361.723660][T10084] binder: 10075:10084 ioctl c018620c 200000000240 returned -1 [ 361.745791][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.775523][ T9] usb 7-1: config 0 descriptor?? [ 362.428640][ T9] logitech-djreceiver 0003:046D:C71F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 363.693373][T10089] nvme_fabrics: missing parameter 'transport=%s' [ 363.705964][T10089] nvme_fabrics: missing parameter 'nqn=%s' [ 363.707897][ T5894] Process accounting resumed [ 363.754932][T10056] syz.1.1005 (10056): drop_caches: 2 [ 363.807094][ T5866] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 363.898816][ T5880] usb 2-1: selecting invalid altsetting 0 [ 363.938045][ T5880] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 363.970129][ T5880] uvcvideo 2-1:220.0: No valid video chain found. [ 364.003907][ T5880] usb 2-1: selecting invalid altsetting 0 [ 364.024396][ T5880] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 364.059958][ T5880] usb 2-1: USB disconnect, device number 42 [ 364.107136][T10104] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 364.117453][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 364.118097][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 364.123691][ C0] CPU: 0 UID: 0 PID: 10099 Comm: syz.0.1018 Not tainted syzkaller #0 PREEMPT(full) [ 364.141854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.151952][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 364.158269][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 d6 4a fa f8 48 8d 7b 34 48 b8 00 00 [ 364.177865][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 364.183928][ C0] RAX: 0000000000000001 RBX: ffff888024daa600 RCX: 1ffff110049b54d0 [ 364.191887][ C0] RDX: 0000000000000000 RSI: ffffffff88c29d88 RDI: ffff888024daa680 [ 364.199842][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 364.207796][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 364.215746][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000010000000 [ 364.223696][ C0] FS: 00007fe1007526c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 364.232606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.239170][ C0] CR2: 000020000003a030 CR3: 0000000035324000 CR4: 00000000003526f0 [ 364.247123][ C0] Call Trace: [ 364.250408][ C0] [ 364.253236][ C0] comedi_buf_write_samples+0x406/0x640 [ 364.258770][ C0] aio_iiro_16_cos+0x132/0x160 [ 364.263525][ C0] ? __pfx_aio_iiro_16_cos+0x10/0x10 [ 364.268811][ C0] ? __pfx_aio_iiro_16_cos+0x10/0x10 [ 364.274169][ C0] __handle_irq_event_percpu+0x236/0x920 [ 364.279788][ C0] handle_irq_event+0xab/0x1e0 [ 364.284530][ C0] handle_edge_irq+0x3ca/0x9e0 [ 364.289295][ C0] __common_interrupt+0xd0/0x2f0 [ 364.294216][ C0] common_interrupt+0x61/0xe0 [ 364.298875][ C0] asm_common_interrupt+0x26/0x40 [ 364.303878][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 364.310308][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 78 35 f6 48 89 df e8 0e cc 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 d4 25 f6 65 8b 05 7e 35 3e 08 85 c0 74 16 5b [ 364.329911][ C0] RSP: 0018:ffffc90000007f10 EFLAGS: 00000246 [ 364.335972][ C0] RAX: 0000000000000002 RBX: ffff8880b8427c80 RCX: ffffffff81c4e99f [ 364.343925][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 364.351873][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 364.359821][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: 0000000000000100 [ 364.367767][ C0] R13: 0000000080000101 R14: 0000000000000000 R15: ffffffff8e00c100 [ 364.375724][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 364.381697][ C0] handle_softirqs+0x219/0x8e0 [ 364.386445][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 364.391710][ C0] __irq_exit_rcu+0x109/0x170 [ 364.396383][ C0] irq_exit_rcu+0x9/0x30 [ 364.400621][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 364.406241][ C0] [ 364.409153][ C0] [ 364.412076][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 364.418036][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 364.424455][ C0] Code: fb 09 00 00 44 8b 05 49 28 f8 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 7f d4 3a 00 fb 65 48 8b 1d ee 69 17 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 364.444037][ C0] RSP: 0018:ffffc900036374a8 EFLAGS: 00000202 [ 364.450083][ C0] RAX: 000000000000158f RBX: ffff888053304900 RCX: ffffffff81c4e99f [ 364.458031][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 364.465980][ C0] RBP: ffffc900036374f0 R08: 0000000000000001 R09: 0000000000000001 [ 364.473928][ C0] R10: ffffffff90820dd7 R11: 0000000000000001 R12: ffff8880b843a380 [ 364.481893][ C0] R13: ffff88802ce00000 R14: ffff8880b843a380 R15: ffff8880b843b1b0 [ 364.489845][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 364.495826][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 364.501611][ C0] ? __switch_to+0x7af/0x11b0 [ 364.506270][ C0] __schedule+0x1198/0x5de0 [ 364.510772][ C0] ? __pfx___schedule+0x10/0x10 [ 364.515608][ C0] ? find_held_lock+0x2b/0x80 [ 364.520280][ C0] ? schedule+0x2d7/0x3a0 [ 364.524592][ C0] schedule+0xe7/0x3a0 [ 364.528653][ C0] schedule_timeout+0x257/0x290 [ 364.533484][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 364.538838][ C0] ? unix_wait_for_peer+0x246/0x280 [ 364.544015][ C0] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 364.549716][ C0] unix_wait_for_peer+0x24e/0x280 [ 364.554717][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 364.560235][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 364.566299][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.571651][ C0] unix_dgram_sendmsg+0x1419/0x17f0 [ 364.576861][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 364.582421][ C0] ____sys_sendmsg+0xa98/0xc70 [ 364.587181][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 364.592621][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.597887][ C0] ? kfree+0x252/0x6d0 [ 364.601939][ C0] ___sys_sendmsg+0x134/0x1d0 [ 364.606613][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.611800][ C0] ? __pfx___might_resched+0x10/0x10 [ 364.617066][ C0] __sys_sendmmsg+0x200/0x420 [ 364.621725][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 364.626903][ C0] ? unix_dgram_connect+0x4e5/0xc80 [ 364.632085][ C0] ? __pfx_do_futex+0x10/0x10 [ 364.636744][ C0] ? xfd_validate_state+0x61/0x180 [ 364.641842][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 364.646785][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.651958][ C0] do_syscall_64+0xcd/0xfa0 [ 364.656539][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.662413][ C0] RIP: 0033:0x7fe0ff98f6c9 [ 364.666805][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.686387][ C0] RSP: 002b:00007fe100752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.694779][ C0] RAX: ffffffffffffffda RBX: 00007fe0ffbe5fa0 RCX: 00007fe0ff98f6c9 [ 364.702736][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 364.710709][ C0] RBP: 00007fe0ffa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.718668][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.726617][ C0] R13: 00007fe0ffbe6038 R14: 00007fe0ffbe5fa0 R15: 00007ffcb4d46938 [ 364.734580][ C0] [ 364.737577][ C0] Modules linked in: [ 364.741453][ C0] ---[ end trace 0000000000000000 ]--- [ 364.746894][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 364.753221][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 d6 4a fa f8 48 8d 7b 34 48 b8 00 00 [ 364.772812][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 364.778862][ C0] RAX: 0000000000000001 RBX: ffff888024daa600 RCX: 1ffff110049b54d0 [ 364.786813][ C0] RDX: 0000000000000000 RSI: ffffffff88c29d88 RDI: ffff888024daa680 [ 364.794762][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 364.802708][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 364.810654][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000010000000 [ 364.818602][ C0] FS: 00007fe1007526c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 364.827515][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.834081][ C0] CR2: 000020000003a030 CR3: 0000000035324000 CR4: 00000000003526f0 [ 364.842036][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 364.849531][ C0] Kernel Offset: disabled [ 364.853857][ C0] Rebooting in 86400 seconds..