last executing test programs: 10.27345736s ago: executing program 1 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x98, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x50) 9.071876708s ago: executing program 1 (id=632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(r1, 0x0, 0x0, 0x1000002, 0x9) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1270000ad) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54000}}, 0x20}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x400}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='qgroup_meta_free_all_pertrans\x00', r4}, 0x60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8571dc65f3bef38721e1a42be0f9a97028591ae0cec06bb389bd687bfeccb8d0d9168d50e12c0b7fc712cd65b6c57343b690e8dd73db1a2930ae11a36fb3502f9fd95f4e14f2ac0882a36a7087faad3a0e458a8d4ee86042609aba8bc2b6c6a05f55d8e713b6f6927c0b95a5c2549a9b000000", @ANYRES16=r6, @ANYBLOB="000425bd7002ffdbdf25010000000000000007410000004c00180000040165746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) write$vga_arbiter(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="6172676574205043493a303a383a31662e31002b6fcdfde7b4eea3307438270476cf5080acab95c85e3b6a9b4b3e85d320c4520f929b9465be018631a5421c66507b6c6aeed8f5f3ca0135fa6e641f4683991f65f3d03869fb42b743590e41339b86"], 0x14) syz_usb_connect(0x6, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet_sctp(0x2, 0x4, 0x84) r8 = socket$inet6(0xa, 0x80000, 0x4) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000000300)=""/194, &(0x7f0000000040)=0xc2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x10, 0x0, 0xb68, 0x8, 0x100}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000280)={r9, 0x7ff, 0x0, 0x6, 0x74e}, &(0x7f00000002c0)=0x18) r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r10, 0x0, 0x0, 0x1100) clock_gettime(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 8.392845031s ago: executing program 3 (id=637): r0 = socket$kcm(0x2, 0x1, 0x84) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x40000, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 8.129255245s ago: executing program 2 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "02f236a27896ef9f399e"}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x4, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (fail_nth: 9) 8.128458328s ago: executing program 3 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bf148a71cad4ed95ffffffffffffffff32ab9c320908000000000000007015210ba418d5c2a1e8e59f040000b4e24531f80629062bde23c0e84405000000b2f9b8203f83ec3632", @ANYRESOCT=r3], 0x20) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000300)=""/4096, 0x1000, 0x0, &(0x7f0000001300)=""/36, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="bdbf7374656d0e2e2325255c00"]) socket$inet(0x2, 0x1, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) 7.306075469s ago: executing program 2 (id=641): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x90, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, &(0x7f00000006c0)) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000006380)={0x0, "5a3b01db959d2cb212a8a3e877e0e9fd"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x4002, 0x7, 0x21ffd, 0x4d0efb15}, 0x14) (async) listen(r10, 0x9) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r11, &(0x7f0000000000)="ab6010e8e8457afa6be0a81c071400", 0xf, 0x45, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000007380)={0x3, 0x0, {0x36, @struct={0x9, 0x9}, 0x0, 0x1ff, 0x6, 0x4, 0x1, 0xb6, 0x40, @usage=0x8000000000000000, 0x3, 0x4, [0xff, 0xa, 0xffff, 0x0, 0x48d, 0x100]}, {0x4806, @struct={0x4, 0x6}, r8, 0x9, 0x8000000000000000, 0x8000000000000000, 0x48c9, 0x0, 0x405, @usage, 0x8, 0xffffffff, [0x4073, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x2]}, {0x7, @struct={0x7, 0x7}, r9, 0x5, 0x9, 0x5, 0x4, 0x2, 0x4, @struct={0x4}, 0x7ff, 0xfffffffc, [0x1, 0x52, 0x8001, 0x100000000, 0x80, 0x7fff]}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x6}}) (rerun: 64) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001980)={r9, 0x9, 0x75, 0x1}) (async, rerun: 64) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (rerun: 64) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (rerun: 64) setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffc, 0x4}, {0x0, 0x6}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.281832153s ago: executing program 3 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000380)={0x5, 0xd, 0x2, 0x2, '\x00', '\x00', '\x00', 0x3ff, 0x1, 0x5, 0xa8f8, "51b9b64e1681217964f3cd300fee84dd"}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074756e6c30"], 0x3c}}, 0x0) 6.997042406s ago: executing program 4 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000380)={0x5, 0xd, 0x2, 0x2, '\x00', '\x00', '\x00', 0x3ff, 0x1, 0x5, 0xa8f8, "51b9b64e1681217964f3cd300fee84dd"}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074756e6c30"], 0x3c}}, 0x0) 5.385198614s ago: executing program 3 (id=645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x80000001, 0x7fff, 0x0, 0x5, 0x94c, 0xa4, 0xff9, 0xc3cfbe86, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x10, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc60, 0xffffdfff], "d5f3c13d50480d23a2cf86f6c3be27"}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth1\x00', 0x20}) r2 = accept4(r0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0)="df21f0a6dbb1b350a5b5f9e27b2508088febecff9e1926774b1aacfb67", 0x1d, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000000000000"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000dc0)=ANY=[@ANYBLOB="01000000004000009104"]) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newchain={0x48, 0x64, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffef}, {0xffe0, 0x3}, {0x8, 0x9}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}}, 0x4000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x8}], 0x1, 0x40000161, 0x0) syz_clone(0x200800, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xffffffffffffff6c) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.831848243s ago: executing program 0 (id=646): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB="00000000000000943027", @ANYRES32], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006dac155d8a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r7, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x25, &(0x7f0000001600)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x14070, r8, 0x218b9000) 4.83036762s ago: executing program 2 (id=647): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) accept4$netrom(r0, 0x0, 0x0, 0x80800) 4.8197195s ago: executing program 4 (id=648): socket$xdp(0x2c, 0x3, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 3.975061238s ago: executing program 1 (id=649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c00000800428004000800"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) signalfd(r5, &(0x7f00000003c0)={[0x80000000]}, 0x8) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) 3.896855946s ago: executing program 4 (id=650): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0xdb88, 0xb, [{0xd, 0x1}, {0xb, 0x1}, {0x1, 0x1}, {0xb}, {0xa, 0x1}, {0xf, 0x1}, {0xc, 0x1}, {0x8, 0x1}, {0xc}, {0xe}, {0x1}]}) close_range(r0, r0, 0x0) r1 = mq_open(&(0x7f00000000c0)='/dev/null\x00', 0x40, 0x190, &(0x7f0000000100)={0x3, 0xffffffffffffffff, 0xa, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x2d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@exit, @call={0x85, 0x0, 0x0, 0x1a}, @ldst={0x3, 0x3, 0x2, 0x7, 0x3, 0xfffffffffffffff0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0xb7b0, 0x63, &(0x7f00000001c0)=""/99, 0x40f00, 0x4, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000940)=[r0, r5, r1, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0x7}, 0x94) r7 = openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@cgroup=r7, r0, 0x64, 0x2007, r6, @value=r0}, 0x20) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000b00)={'wlan1\x00', @ifru_settings={0x8238, 0x1, @cisco=&(0x7f0000000ac0)={0xe394, 0x4}}}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000b80)=@attr_other={0x0, 0x7, 0x400, &(0x7f0000000b40)=0xffffffff}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400480, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r8, 0x4947e000) syz_open_dev$ndb(&(0x7f0000000c40), 0x0, 0x480000) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000c80)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x31, 0x0, "209b547f308ca39aba7138e861466bf384b34ae919d08431d160dd79859ed15681367df203c7d1bf70592df88588d6fa1a3a2e2e89dc2e6220575088bebef3eb92a88bb8e50b6d1f8e88fda7ad893c29"}, 0xd8) close(r1) r10 = add_key$user(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, &(0x7f0000000e00)="626db94895556c828f60f819542fc794f42b08322c2450066ac0f7be9bc35c7969936ab839723a3604f69b9fe48164d8c336f8e68ed8f125d75b4fe149c6a2ee64e0b80361a67c99af0bf0bd24548e67006ae662cc241f0984e80bb73abecb5dd7edd7cd5aac4c3ef3c4e4479dce429bdfd7ff436536a5a64e75468174638808a2b9b04c5a2a9c559c8ce8704f0e", 0x8e, 0xfffffffffffffffb) keyctl$search(0xa, r10, &(0x7f0000000ec0)='.dead\x00', &(0x7f0000000f00)={'syz', 0x1}, 0xfffffffffffffffc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000f40)={'wlan1\x00'}) signalfd(r1, &(0x7f0000000f80)={[0x5]}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000fc0)={0x0, r7}, 0x8) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001000)={r2}, 0x4) socket(0xa, 0x12, 0x6) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f0000001040)) openat$full(0xffffffffffffff9c, &(0x7f0000001080), 0x3c3100, 0x0) copy_file_range(r12, &(0x7f00000010c0)=0x9, r5, 0x0, 0x9, 0x0) 3.841108455s ago: executing program 2 (id=651): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0xdba1, 0xff, 0x3, 0x3, 0xa, "24af06845b5b5cf3"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) socket$key(0xf, 0x3, 0x2) getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = dup(r3) read$FUSE(r4, &(0x7f0000005540)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d89161800000020000000000000000000000018110000", @ANYRES32, @ANYRES8=r3, @ANYRES64, @ANYRESOCT=r4], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000180)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(r5, 0x112, 0x13, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0x900}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b000000000000000"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) 3.788081968s ago: executing program 0 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "02f236a27896ef9f399e"}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x4, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (fail_nth: 10) 3.457065044s ago: executing program 4 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r7, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/226) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310002000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.105436173s ago: executing program 0 (id=654): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) close_range(r3, r5, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0xa0b5f1b4183a5aad, 0x3, 0xd}, 0x1000000}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd65cb87b40008cc4c3fc0c6e319bd19d97a682b2bff00000000000000000000000000000000ff02000000000000b47bea1a0000000187000400f76b0400"], 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 2.658653066s ago: executing program 1 (id=655): syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000400fea089713bd0054d1de02030109021b0001000000000904"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x13, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0xde2cc000) 1.722367175s ago: executing program 4 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) close(r8) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000097c77390000000001000000b7080000000000007b8af8ff00000000b7080000834400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000440)='GPL\x00', 0x2, 0x1000, &(0x7f0000001480)=""/4096, 0x100, 0x4, '\x00', 0x0, @fallback=0x14, r9, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x94) (async) r10 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x20000000) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x310, 0xbc, 0xc3, 0xd0, 0x40, 0x4dd, 0x9050, 0xfe17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb0, 0x1, 0x60, 0x49, [{{0x9, 0x4, 0xf5, 0x7, 0x0, 0x2, 0x6, 0x0, 0x6}}]}}]}}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0}) 1.333012308s ago: executing program 3 (id=657): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(r1, 0xfd77, &(0x7f00000002c0)=0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (rerun: 32) write$cgroup_int(r4, 0x0, 0x0) (async, rerun: 64) dup(0xffffffffffffffff) (rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e1f, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x3f8}, 0x9c) (async) bind$inet6(r5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r7 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) (rerun: 64) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) (async) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r8, 0x4004510f, &(0x7f0000000280)=0xfb9fa3e5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff000006000000000d01ffe7602b725aaeb301aaf1dbed320100002f748c202b992e967563a818cfe23ded642c24875e0e79dfd98a2d94fbef4b051649cb4142178baf52e17b1009f5f4e66b9029af602e8a5fa82eab14a938f70d1475d1e8af82fb6394abacd1b3c1de99cc946f8f3a091870de902b27a721008f58ffff0a57c230e95e54b5fd3b323d4a4a6f39ebb1f14ff1a835e03fe3f1ffe0890c01c760d7f5d5aa9f72b5be5de5b31024d32ba1d133978eb1903db895bda7e1ed48d4d867228ac6"], 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1.135988113s ago: executing program 2 (id=658): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r1], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40004580, 0x0) 962.652236ms ago: executing program 4 (id=659): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) write$input_event(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xc9f, &(0x7f0000019100)={0x0, 0x8abd, 0x200, 0x1, 0xab, 0x0, r2}, 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000019080)=ANY=[]) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) 913.147265ms ago: executing program 3 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) setns(r0, 0x8000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 907.102703ms ago: executing program 0 (id=661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 880.963995ms ago: executing program 2 (id=662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 759.05568ms ago: executing program 0 (id=663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 673.245667ms ago: executing program 1 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "02f236a27896ef9f399e"}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x4, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (fail_nth: 11) 196.48066ms ago: executing program 1 (id=665): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000200)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400000000000000000000ffe4", @ANYRES32=0x0, @ANYBLOB="2b03000000800000280012800b00010067656e65766500001800028014000700000000000000000000000000000000001400350067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x1, 0x7f}}) r7 = syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x4000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004001) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x2, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000380)={0x5, 0xd, 0x2, 0x2, '\x00', '\x00', '\x00', 0x3ff, 0x1, 0x5, 0xa8f8, "51b9b64e1681217964f3cd300fee84dd"}) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800200000000008003a80040007001400030074756e6c30"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device bond1 [ 134.969898][ T6960] vlan2: entered promiscuous mode [ 134.986161][ T6960] bond1: entered promiscuous mode [ 134.990753][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 134.990767][ T30] audit: type=1400 audit(1757263244.855:345): avc: denied { create } for pid=6953 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 134.995601][ T6960] vlan2: entered allmulticast mode [ 135.003009][ T30] audit: type=1400 audit(1757263244.855:346): avc: denied { write } for pid=6953 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 135.021859][ T6960] bond1: entered allmulticast mode [ 135.125872][ T6958] bond1: (slave gretap1): making interface the new active one [ 135.136030][ T6958] gretap1: entered promiscuous mode [ 135.145290][ T6958] gretap1: entered allmulticast mode [ 135.157616][ T6958] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.170242][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 135.177235][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.196208][ T48] usb 1-1: USB disconnect, device number 15 [ 135.205339][ T30] audit: type=1400 audit(1757263245.065:347): avc: denied { write } for pid=6963 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.239038][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 135.840971][ T5932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.237051][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.250409][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 136.440992][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 136.553763][ T5968] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 136.682088][ T6991] ======================================================= [ 136.682088][ T6991] WARNING: The mand mount option has been deprecated and [ 136.682088][ T6991] and is ignored by this kernel. Remove the mand [ 136.682088][ T6991] option from the mount to silence this warning. [ 136.682088][ T6991] ======================================================= [ 136.734221][ T6991] overlayfs: missing 'lowerdir' [ 136.986401][ T5932] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 136.998259][ T30] audit: type=1400 audit(1757263246.545:348): avc: denied { bind } for pid=6988 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.018001][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.026378][ T5932] usb 3-1: Product: syz [ 137.030528][ T5932] usb 3-1: Manufacturer: syz [ 137.035291][ T5932] usb 3-1: SerialNumber: syz [ 137.039927][ T30] audit: type=1400 audit(1757263246.595:349): avc: denied { mount } for pid=6988 comm="syz.4.258" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.098160][ T5932] usb 3-1: config 0 descriptor?? [ 137.147766][ T6972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.155557][ T5968] usb 1-1: Using ep0 maxpacket: 8 [ 137.162521][ T6972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.163916][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.178525][ T5932] usb 3-1: ucan: probing device on interface #0 [ 137.191075][ T5968] usb 1-1: config 8 has an invalid descriptor of length 86, skipping remainder of the config [ 137.202700][ T5968] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 137.224622][ T30] audit: type=1400 audit(1757263246.605:350): avc: denied { mounton } for pid=6988 comm="syz.4.258" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 137.253226][ T5968] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 137.262935][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.281117][ T5968] usb 1-1: Product: syz [ 137.293569][ T5968] usb 1-1: Manufacturer: syz [ 137.359021][ T5968] usb 1-1: SerialNumber: syz [ 137.412811][ T30] audit: type=1400 audit(1757263247.225:351): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 137.591789][ T5932] ucan 3-1:0.0 can0: registered device [ 137.607661][ T30] audit: type=1400 audit(1757263247.395:352): avc: denied { block_suspend } for pid=6994 comm="syz.4.260" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.628896][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.655637][ T5932] ucan 3-1:0.0 can0: firmware string: *yܾޝ'Fp}ZX*hVIG4C [ 137.714651][ T30] audit: type=1400 audit(1757263247.405:353): avc: denied { append } for pid=6994 comm="syz.4.260" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 137.774778][ T5932] usb 3-1: USB disconnect, device number 4 [ 137.820925][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.833620][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.111956][ T7009] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.124183][ T30] audit: type=1400 audit(1757263247.985:354): avc: denied { ioctl } for pid=7005 comm="syz.2.261" path="socket:[13267]" dev="sockfs" ino=13267 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.169176][ T5968] usb 1-1: USB disconnect, device number 16 [ 139.860974][ T5915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.991278][ T5968] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.013278][ T5915] usb 4-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 140.039478][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.050259][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.068916][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.079906][ T5915] usb 4-1: SerialNumber: syz [ 140.151064][ T5968] usb 1-1: Using ep0 maxpacket: 8 [ 140.161794][ T5968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.181342][ T30] audit: type=1326 audit(1757263250.045:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f142d58ebe9 code=0x0 [ 140.183658][ T5968] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 140.218039][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.231432][ T5968] usb 1-1: config 0 descriptor?? [ 140.239809][ T5968] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 140.308448][ T30] audit: type=1400 audit(1757263250.175:356): avc: denied { getopt } for pid=7052 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.316620][ T5915] usb 4-1: cannot find UAC_HEADER [ 140.327750][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.396387][ T5915] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.407661][ T7056] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.410193][ T5915] usb 4-1: USB disconnect, device number 10 [ 140.416028][ T30] audit: type=1400 audit(1757263250.265:357): avc: denied { mount } for pid=7052 comm="syz.1.274" name="/" dev="ramfs" ino=13653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.443686][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.454142][ T7056] overlayfs: failed to set xattr on upper [ 140.460336][ T7056] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.469933][ T7056] overlayfs: ...falling back to index=off. [ 140.475939][ T30] audit: type=1400 audit(1757263250.265:358): avc: denied { mounton } for pid=7052 comm="syz.1.274" path="/bus" dev="ramfs" ino=13656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 140.476247][ T7056] overlayfs: ...falling back to uuid=null. [ 140.505307][ T7056] overlayfs: ...falling back to xino=off. [ 140.857714][ T30] audit: type=1400 audit(1757263250.725:359): avc: denied { setopt } for pid=7031 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.660809][ T5915] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.687520][ T7068] syz_tun: refused to change device tx_queue_len [ 141.698235][ T7068] syz_tun: refused to change device tx_queue_len [ 141.808452][ T5968] gspca_vc032x: reg_w err -71 [ 141.813279][ T5968] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 141.823887][ T5968] usb 1-1: USB disconnect, device number 17 [ 141.901264][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.928166][ T7072] random: crng reseeded on system resumption [ 141.930812][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.951420][ T30] audit: type=1400 audit(1757263251.795:360): avc: denied { write } for pid=7071 comm="syz.1.278" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.989609][ T30] audit: type=1400 audit(1757263251.795:361): avc: denied { open } for pid=7071 comm="syz.1.278" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.015023][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 142.018512][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.036588][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.065441][ T30] audit: type=1400 audit(1757263251.905:362): avc: denied { setopt } for pid=7071 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.089074][ T5915] usb 5-1: Product: syz [ 142.093525][ T5915] usb 5-1: Manufacturer: syz [ 142.098213][ T5915] usb 5-1: SerialNumber: syz [ 142.107330][ T5915] cdc_mbim 5-1:1.0: skipping garbage [ 142.115590][ T5915] usb 5-1: selecting invalid altsetting 1 [ 142.128444][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.138027][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.323104][ T5932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.480781][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 142.541965][ T5915] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 142.542379][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.548108][ T5915] cdc_mbim 5-1:1.0: bind() failure [ 142.571918][ T5932] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 142.590639][ T7099] capability: warning: `syz.0.285' uses 32-bit capabilities (legacy support in use) [ 142.594173][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.609671][ T30] audit: type=1400 audit(1757263252.479:363): avc: denied { map } for pid=7096 comm="syz.0.285" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 142.622658][ T5932] usb 4-1: Product: syz [ 142.644727][ T5932] usb 4-1: Manufacturer: syz [ 142.649526][ T5932] usb 4-1: SerialNumber: syz [ 142.661973][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 142.672068][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 142.699784][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 142.700129][ T5932] usb 4-1: config 0 descriptor?? [ 142.715909][ T5967] usb 5-1: USB disconnect, device number 8 [ 142.730138][ T5932] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 142.736525][ T5932] usb 4-1: selecting invalid altsetting 1 [ 143.257195][ T5932] gspca_stk014: reg_r err -110 [ 143.262158][ T5932] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 143.284124][ T30] audit: type=1400 audit(1757263253.149:364): avc: denied { create } for pid=7110 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 143.330846][ T5932] usb 4-1: USB disconnect, device number 11 [ 143.691064][ T5915] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 143.910023][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.983991][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.022454][ T5915] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 144.044754][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.064067][ T7134] kernel read not supported for file / (pid: 7134 comm: syz.3.292) [ 144.065288][ T5915] usb 1-1: config 0 descriptor?? [ 144.310843][ T5932] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.460767][ T5932] usb 3-1: device descriptor read/64, error -71 [ 144.709645][ T5915] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 144.721387][ T5932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.746973][ T5915] usb 1-1: USB disconnect, device number 18 [ 144.860782][ T5932] usb 3-1: device descriptor read/64, error -71 [ 144.978365][ T5932] usb usb3-port1: attempt power cycle [ 144.990582][ T7141] netlink: 'syz.4.294': attribute type 4 has an invalid length. [ 145.319707][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 145.319719][ T30] audit: type=1400 audit(1757263255.179:370): avc: denied { ioctl } for pid=7154 comm="syz.0.298" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.368260][ T5932] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.391483][ T5932] usb 3-1: device descriptor read/8, error -71 [ 145.452709][ T7150] netlink: 'syz.4.294': attribute type 4 has an invalid length. [ 145.482815][ T5967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.640891][ T5932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.654511][ T5967] usb 2-1: config 0 has no interfaces? [ 145.671229][ T5932] usb 3-1: device descriptor read/8, error -71 [ 145.685164][ T5967] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.698288][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.708335][ T5967] usb 2-1: Product: syz [ 145.715127][ T5967] usb 2-1: Manufacturer: syz [ 145.719973][ T5967] usb 2-1: SerialNumber: syz [ 145.727746][ T5967] usb 2-1: config 0 descriptor?? [ 145.801025][ T5932] usb usb3-port1: unable to enumerate USB device [ 145.830860][ T5968] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.019935][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.090767][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 146.091322][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.102273][ T5968] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.113378][ T5968] usb 1-1: config 0 has no interface number 0 [ 146.119764][ T5968] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.133142][ T5968] usb 1-1: config 0 interface 12 has no altsetting 0 [ 146.146332][ T5968] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 146.155627][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.165047][ T5968] usb 1-1: Product: syz [ 146.169265][ T5968] usb 1-1: Manufacturer: syz [ 146.177598][ T5968] usb 1-1: SerialNumber: syz [ 146.191723][ T5968] usb 1-1: config 0 descriptor?? [ 146.242227][ T5968] f81534 1-1:0.12: required endpoints missing [ 146.480942][ T5967] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.632662][ T5967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.642902][ T5967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.655730][ T5967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.664916][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.673033][ T5967] usb 4-1: Product: syz [ 146.677207][ T5967] usb 4-1: Manufacturer: syz [ 146.681868][ T5967] usb 4-1: SerialNumber: syz [ 146.689315][ T5967] cdc_mbim 4-1:1.0: skipping garbage [ 146.694730][ T5967] usb 4-1: selecting invalid altsetting 1 [ 147.093187][ T5967] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 147.099817][ T5967] cdc_mbim 4-1:1.0: bind() failure [ 147.133313][ T5967] usb 4-1: USB disconnect, device number 12 [ 148.242225][ T7176] autofs4:pid:7176:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 148.398694][ T30] audit: type=1400 audit(1757263258.099:371): avc: denied { read } for pid=7172 comm="syz.3.302" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.427863][ T30] audit: type=1400 audit(1757263258.099:372): avc: denied { write } for pid=7172 comm="syz.3.302" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 148.471194][ T48] usb 1-1: USB disconnect, device number 19 [ 148.511286][ T30] audit: type=1400 audit(1757263258.379:373): avc: denied { read write } for pid=7177 comm="syz.2.303" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.566607][ T30] audit: type=1400 audit(1757263258.409:374): avc: denied { open } for pid=7177 comm="syz.2.303" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.613429][ T30] audit: type=1400 audit(1757263258.409:375): avc: denied { ioctl } for pid=7177 comm="syz.2.303" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.644762][ T5967] usb 2-1: USB disconnect, device number 10 [ 149.180806][ T5967] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 149.373380][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.383860][ T5967] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.407284][ T5967] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 149.439086][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.557129][ T5967] usb 2-1: config 0 descriptor?? [ 149.614900][ T5967] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.778602][ T5967] dvb-usb: bulk message failed: -22 (3/0) [ 149.863726][ T5967] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.886188][ T7188] dvb-usb: bulk message failed: -22 (2/0) [ 149.981802][ T5967] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 150.066724][ T5967] usb 2-1: media controller created [ 150.152566][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.361325][ T5967] dvb-usb: bulk message failed: -22 (6/0) [ 150.411015][ T5967] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 150.543601][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 150.558220][ T7206] syzkaller1: entered promiscuous mode [ 150.575727][ T7206] syzkaller1: entered allmulticast mode [ 150.642827][ T5967] dvb-usb: schedule remote query interval to 150 msecs. [ 150.681148][ T7252] netlink: 48 bytes leftover after parsing attributes in process `syz.3.309'. [ 150.705552][ T5967] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 150.714335][ T30] audit: type=1400 audit(1757263260.529:376): avc: denied { write } for pid=7246 comm="syz.0.310" name="file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.839363][ T30] audit: type=1400 audit(1757263260.529:377): avc: denied { open } for pid=7246 comm="syz.0.310" path="/48/file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.923764][ T30] audit: type=1400 audit(1757263260.529:378): avc: denied { ioctl } for pid=7246 comm="syz.0.310" path="/48/file0" dev="tmpfs" ino=271 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.948179][ T5967] usb 2-1: USB disconnect, device number 11 [ 151.078819][ T5967] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 151.100773][ T5932] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 151.438903][ T5932] usb 4-1: not running at top speed; connect to a high speed hub [ 151.453412][ T5932] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.467032][ T5932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 151.495964][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 151.509030][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.530975][ T5932] usb 4-1: Product: syz [ 151.535250][ T5932] usb 4-1: SerialNumber: syz [ 151.838526][ T5932] usbhid 4-1:1.0: can't add hid device: -71 [ 151.852618][ T5932] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 151.917280][ T5932] usb 4-1: USB disconnect, device number 13 [ 151.958290][ T30] audit: type=1400 audit(1757263261.819:379): avc: denied { connect } for pid=7266 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.978830][ T30] audit: type=1400 audit(1757263261.819:380): avc: denied { accept } for pid=7266 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.048195][ T30] audit: type=1400 audit(1757263261.819:381): avc: denied { read } for pid=7266 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.087023][ T7270] netlink: 112 bytes leftover after parsing attributes in process `syz.4.314'. [ 152.300780][ T5967] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 152.455319][ T30] audit: type=1400 audit(1757263262.299:382): avc: denied { setopt } for pid=7260 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.489782][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 152.499189][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 152.506851][ T5967] usb 1-1: can't read configurations, error -61 [ 152.514802][ T30] audit: type=1400 audit(1757263262.379:383): avc: denied { create } for pid=7277 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.692074][ T5967] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 153.239307][ T5968] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.270361][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 153.326695][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 153.335236][ T5967] usb 1-1: can't read configurations, error -61 [ 153.342953][ T5967] usb usb1-port1: attempt power cycle [ 153.545787][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.555700][ T5968] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 153.566456][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.589140][ T5968] usb 4-1: config 0 descriptor?? [ 153.683009][ T5967] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.791648][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 153.831503][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 153.926931][ T5967] usb 1-1: can't read configurations, error -61 [ 154.087953][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 154.140831][ T5967] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 154.171993][ T5967] usb 1-1: Using ep0 maxpacket: 8 [ 154.178779][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.190912][ T5967] usb 1-1: can't read configurations, error -61 [ 154.219549][ T5968] usbhid 4-1:0.0: can't add hid device: -71 [ 154.239649][ T5967] usb usb1-port1: unable to enumerate USB device [ 154.249438][ T5968] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.289509][ T5968] usb 4-1: USB disconnect, device number 14 [ 154.575939][ T30] audit: type=1400 audit(1757263264.439:384): avc: denied { connect } for pid=7317 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.691056][ T30] audit: type=1400 audit(1757263264.469:385): avc: denied { getopt } for pid=7317 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.757477][ T7323] netlink: 228 bytes leftover after parsing attributes in process `syz.4.325'. [ 154.784471][ T7323] vlan2: entered promiscuous mode [ 154.790071][ T7323] bridge0: entered promiscuous mode [ 154.819167][ T7323] vlan2: entered allmulticast mode [ 154.824998][ T7323] bridge0: entered allmulticast mode [ 155.963382][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.326'. [ 156.463792][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 156.491093][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 156.513866][ T7343] netlink: 'syz.0.330': attribute type 19 has an invalid length. [ 156.559167][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 156.616421][ T7347] block nbd4: Attempted send on invalid socket [ 156.623569][ T7347] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 156.634506][ T7347] hfsplus: unable to find HFS+ superblock [ 156.680771][ T48] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 156.703992][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 156.704007][ T30] audit: type=1400 audit(1757263266.569:388): avc: denied { read } for pid=7338 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.756840][ T7349] Bluetooth: MGMT ver 1.23 [ 156.837302][ T48] usb 2-1: not running at top speed; connect to a high speed hub [ 156.867759][ T48] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.909168][ T48] usb 2-1: config 1 interface 0 has no altsetting 0 [ 156.959551][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 156.983702][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.012926][ T48] usb 2-1: Product: syz [ 157.028001][ T48] usb 2-1: SerialNumber: syz [ 157.170782][ T5967] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 158.384086][ T5967] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 159.022146][ T5967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.038381][ T5967] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.047583][ T5967] usb 1-1: config 1 has no interface number 1 [ 159.053886][ T5967] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.068530][ T5967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.081951][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.090402][ T5967] usb 1-1: Product: syz [ 159.094948][ T5967] usb 1-1: Manufacturer: syz [ 159.099582][ T5967] usb 1-1: SerialNumber: syz [ 159.698452][ T48] usbhid 2-1:1.0: can't add hid device: -71 [ 159.704520][ T48] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 159.738421][ T48] usb 2-1: USB disconnect, device number 12 [ 159.986898][ T7368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.336'. [ 160.630789][ T5967] usb 1-1: USB disconnect, device number 24 [ 160.889730][ T30] audit: type=1400 audit(1757263270.609:389): avc: denied { remount } for pid=7376 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.058972][ T7404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.346'. [ 163.236296][ T30] audit: type=1400 audit(1757263273.099:390): avc: denied { create } for pid=7408 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 163.404929][ T5915] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 163.555073][ T7414] futex_wake_op: syz.0.347 tries to shift op by 35; fix this program [ 163.959457][ T30] audit: type=1800 audit(1757263273.819:391): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.347" name="bus" dev="overlay" ino=306 res=0 errno=0 [ 164.153018][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 164.194988][ T5915] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.729437][ T5915] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.811923][ T30] audit: type=1400 audit(1757263274.669:392): avc: denied { map } for pid=7418 comm="syz.0.350" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 164.815394][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 164.921004][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.929090][ T5915] usb 5-1: Product: syz [ 164.950777][ T5915] usb 5-1: SerialNumber: syz [ 165.213065][ T5915] usbhid 5-1:1.0: can't add hid device: -71 [ 165.230810][ T5915] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 165.404059][ T5915] usb 5-1: USB disconnect, device number 9 [ 166.362783][ T5932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.751965][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 167.291298][ T5932] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 167.299504][ T5932] usb 5-1: config 1 has no interface number 0 [ 167.305661][ T5932] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 167.318825][ T5932] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.339142][ T5932] usb 5-1: config 1 interface 105 has no altsetting 0 [ 167.384037][ T5932] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 167.425807][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.483102][ T5932] usb 5-1: Product: syz [ 167.555584][ T5932] usb 5-1: Manufacturer: syz [ 167.583659][ T5932] usb 5-1: SerialNumber: syz [ 168.729097][ T30] audit: type=1400 audit(1757263278.449:393): avc: denied { setopt } for pid=7459 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.810823][ T30] audit: type=1400 audit(1757263278.459:394): avc: denied { shutdown } for pid=7459 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.878077][ T7440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.885553][ T7440] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.124121][ T5932] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 169.179879][ T5932] usb 5-1: USB disconnect, device number 10 [ 169.225580][ T30] audit: type=1400 audit(1757263279.089:395): avc: denied { write } for pid=7470 comm="syz.1.362" path="socket:[15468]" dev="sockfs" ino=15468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.313143][ T7474] No control pipe specified [ 169.401282][ T30] audit: type=1400 audit(1757263279.249:396): avc: denied { read } for pid=7472 comm="syz.0.363" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 169.697440][ T30] audit: type=1400 audit(1757263279.249:397): avc: denied { open } for pid=7472 comm="syz.0.363" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 170.217838][ T30] audit: type=1400 audit(1757263280.079:398): avc: denied { getopt } for pid=7486 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.065914][ T30] audit: type=1400 audit(1757263280.929:399): avc: denied { map } for pid=7496 comm="syz.0.370" path="socket:[15493]" dev="sockfs" ino=15493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.118467][ T30] audit: type=1400 audit(1757263280.929:400): avc: denied { accept } for pid=7496 comm="syz.0.370" path="socket:[15493]" dev="sockfs" ino=15493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.711686][ T7515] /dev/nullb0: Can't open blockdev [ 173.669899][ T30] audit: type=1400 audit(1757263283.529:401): avc: denied { ioctl } for pid=7523 comm="syz.4.372" path="socket:[15553]" dev="sockfs" ino=15553 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 174.028105][ T7529] netlink: 48 bytes leftover after parsing attributes in process `syz.4.378'. [ 174.290486][ T7531] bpf: Bad value for 'uid' [ 174.296129][ T5968] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 174.450622][ T7532] GUP no longer grows the stack in syz.3.379 (7532): 200000004000-20000000a000 (200000002000) [ 174.461266][ T7532] CPU: 1 UID: 0 PID: 7532 Comm: syz.3.379 Not tainted syzkaller #0 PREEMPT(full) [ 174.461283][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 174.461290][ T7532] Call Trace: [ 174.461295][ T7532] [ 174.461299][ T7532] dump_stack_lvl+0x16c/0x1f0 [ 174.461319][ T7532] gup_vma_lookup+0x1d2/0x220 [ 174.461336][ T7532] __get_user_pages+0x243/0x34a0 [ 174.461355][ T7532] ? find_held_lock+0x2b/0x80 [ 174.461370][ T7532] ? __pfx___get_user_pages+0x10/0x10 [ 174.461390][ T7532] get_user_pages_remote+0x243/0xab0 [ 174.461404][ T7532] ? mas_parent_gap+0x6f0/0x7b0 [ 174.461419][ T7532] ? __pfx_get_user_pages_remote+0x10/0x10 [ 174.461434][ T7532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.461449][ T7532] __access_remote_vm+0x24d/0x850 [ 174.461464][ T7532] ? do_raw_spin_lock+0x12c/0x2b0 [ 174.461475][ T7532] ? __pfx___access_remote_vm+0x10/0x10 [ 174.461491][ T7532] proc_pid_cmdline_read+0x4de/0x8e0 [ 174.461505][ T7532] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 174.461518][ T7532] ? rw_verify_area+0xcf/0x6c0 [ 174.461534][ T7532] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 174.461545][ T7532] vfs_readv+0x5be/0x8b0 [ 174.461557][ T7532] ? __pfx_vfs_readv+0x10/0x10 [ 174.461567][ T7532] ? kmem_cache_free+0x2d1/0x4d0 [ 174.461584][ T7532] ? __fget_files+0x20e/0x3c0 [ 174.461599][ T7532] ? do_preadv+0x1a6/0x270 [ 174.461607][ T7532] do_preadv+0x1a6/0x270 [ 174.461617][ T7532] ? __pfx_do_preadv+0x10/0x10 [ 174.461630][ T7532] do_syscall_64+0xcd/0x4c0 [ 174.461652][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.461663][ T7532] RIP: 0033:0x7f260358ebe9 [ 174.461673][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.461684][ T7532] RSP: 002b:00007f26044bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 174.461695][ T7532] RAX: ffffffffffffffda RBX: 00007f26037c6090 RCX: 00007f260358ebe9 [ 174.461703][ T7532] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 174.461710][ T7532] RBP: 00007f2603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 174.461717][ T7532] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 174.461724][ T7532] R13: 00007f26037c6128 R14: 00007f26037c6090 R15: 00007fff7c016738 [ 174.461738][ T7532] [ 174.491476][ T5968] usb 5-1: not running at top speed; connect to a high speed hub [ 174.904181][ T5968] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.113637][ T5968] usb 5-1: config 1 interface 0 has no altsetting 0 [ 175.253774][ T5968] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 175.262940][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.282347][ T5968] usb 5-1: Product: syz [ 175.286527][ T5968] usb 5-1: SerialNumber: syz [ 175.806798][ T30] audit: type=1400 audit(1757263285.659:402): avc: denied { mount } for pid=7542 comm="syz.3.382" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 175.959138][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 176.038115][ T30] audit: type=1400 audit(1757263285.899:403): avc: denied { read } for pid=7551 comm="syz.1.384" path="socket:[15604]" dev="sockfs" ino=15604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.219367][ T5968] usbhid 5-1:1.0: can't add hid device: -71 [ 177.225572][ T5968] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 177.277027][ T5968] usb 5-1: USB disconnect, device number 11 [ 177.462190][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 177.498290][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 177.969163][ T30] audit: type=1400 audit(1757263287.829:404): avc: denied { create } for pid=7571 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 178.661033][ T5915] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 178.707948][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 178.831979][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.657901][ T7587] hfs: unable to load iocharset "io#harsetarbiter" [ 179.658254][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.675156][ T5915] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 179.684532][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.734913][ T5915] usb 1-1: config 0 descriptor?? [ 179.745421][ T7579] netlink: 116 bytes leftover after parsing attributes in process `syz.4.393'. [ 180.130780][ T5968] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 180.159908][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 180.169517][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.194841][ T7599] netlink: 148 bytes leftover after parsing attributes in process `syz.4.396'. [ 180.213467][ T5915] usb 1-1: USB disconnect, device number 25 [ 180.225514][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.397'. [ 180.256678][ T30] audit: type=1400 audit(1757263290.119:405): avc: denied { ioctl } for pid=7580 comm="syz.0.392" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 180.323244][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.334695][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 180.346017][ T5968] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 180.355389][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.380280][ T5968] usb 2-1: config 0 descriptor?? [ 180.386251][ T7594] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.496742][ T5967] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 180.743650][ T5967] usb 3-1: not running at top speed; connect to a high speed hub [ 180.771449][ T5967] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.784538][ T5967] usb 3-1: config 1 interface 0 has no altsetting 0 [ 180.796280][ T5967] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 180.805784][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.815474][ T5968] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 180.822697][ T5967] usb 3-1: Product: syz [ 180.827193][ T5968] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 180.834317][ T5967] usb 3-1: SerialNumber: syz [ 180.842463][ T5968] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 180.854358][ T5968] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 180.864767][ T5968] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 180.881097][ T5968] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 180.999054][ T7607] tipc: Started in network mode [ 181.005246][ T7607] tipc: Node identity f2c4d965f776, cluster identity 4711 [ 181.015472][ T7607] tipc: Enabled bearer , priority 0 [ 181.023883][ T48] usb 2-1: USB disconnect, device number 13 [ 181.050400][ T5967] usbhid 3-1:1.0: can't add hid device: -71 [ 181.193171][ T7607] tipc: Disabling bearer [ 181.219200][ T5967] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 181.240965][ T5967] usb 3-1: USB disconnect, device number 9 [ 181.752601][ T30] audit: type=1400 audit(1757263291.619:406): avc: denied { mounton } for pid=7611 comm="syz.4.400" path="/78/file0" dev="autofs" ino=16855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 182.025842][ T30] audit: type=1400 audit(1757263291.889:407): avc: denied { create } for pid=7624 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 182.104806][ T30] audit: type=1400 audit(1757263291.889:408): avc: denied { ioctl } for pid=7624 comm="syz.1.403" path="cgroup:[4026533100]" dev="nsfs" ino=4026533100 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.136185][ T30] audit: type=1400 audit(1757263291.919:409): avc: denied { getopt } for pid=7624 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.346607][ T30] audit: type=1400 audit(1757263292.209:410): avc: denied { read } for pid=7635 comm="syz.4.405" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.401461][ T7640] sctp: [Deprecated]: syz.4.405 (pid 7640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.401461][ T7640] Use struct sctp_sack_info instead [ 182.770007][ T7638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.927635][ T7638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.973129][ T7638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.991435][ T7638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.005515][ T7638] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.043470][ T7638] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.069733][ T7638] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.089787][ T7638] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.114885][ T7638] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.271048][ T7638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.302772][ T7638] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.476291][ T7638] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.610391][ T7638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.631076][ T7638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.664189][ T7638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.765289][ T30] audit: type=1400 audit(1757263293.629:411): avc: denied { watch } for pid=7659 comm="syz.1.411" path="/97/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.799270][ T7660] Bluetooth: MGMT ver 1.23 [ 183.837004][ T30] audit: type=1400 audit(1757263293.629:412): avc: denied { watch_sb watch_reads } for pid=7659 comm="syz.1.411" path="/97/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 184.517564][ T7675] netlink: 'syz.1.415': attribute type 8 has an invalid length. [ 184.601023][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.065234][ T7667] warning: `syz.0.413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.076718][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.076905][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.371158][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.371775][ T30] audit: type=1400 audit(1757263295.149:413): avc: denied { setopt } for pid=7679 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.468470][ T30] audit: type=1400 audit(1757263295.189:414): avc: denied { create } for pid=7662 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.489473][ T30] audit: type=1400 audit(1757263295.189:415): avc: denied { getopt } for pid=7662 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.580342][ T7685] netlink: 'syz.2.418': attribute type 12 has an invalid length. [ 185.650139][ T5852] Bluetooth: hci3: command 0x0405 tx timeout [ 185.858072][ T5932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.492482][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 186.532648][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.545507][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 186.872086][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.018949][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 187.018960][ T30] audit: type=1400 audit(1757263296.879:417): avc: denied { read write } for pid=7708 comm="syz.0.424" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.060847][ T30] audit: type=1400 audit(1757263296.879:418): avc: denied { open } for pid=7708 comm="syz.0.424" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.087747][ T7711] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 187.095698][ T7711] netlink: 75 bytes leftover after parsing attributes in process `syz.0.424'. [ 187.135242][ T5932] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 187.144460][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.152577][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.152583][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.158942][ T5932] usb 3-1: Product: syz [ 187.200340][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'. [ 187.209833][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 187.289365][ T30] audit: type=1400 audit(1757263297.059:419): avc: denied { ioctl } for pid=7706 comm="syz.3.423" path="socket:[16975]" dev="sockfs" ino=16975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.321846][ T7693] orangefs_mount: mount request failed with -4 [ 187.347306][ T5932] usb 3-1: Manufacturer: syz [ 187.392633][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.404771][ T5932] usb 3-1: SerialNumber: syz [ 187.441153][ T5932] usb 3-1: config 0 descriptor?? [ 187.631736][ T7719] netlink: 5884 bytes leftover after parsing attributes in process `syz.0.425'. [ 187.665142][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.425'. [ 187.674232][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 187.710825][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 187.969844][ T5932] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 188.513407][ T48] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 188.651046][ T48] usb 5-1: device descriptor read/64, error -71 [ 188.714472][ T30] audit: type=1400 audit(1757263298.569:420): avc: denied { setattr } for pid=7676 comm="syz.2.418" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 188.936551][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.992232][ T48] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 189.230851][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.236906][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.275225][ T48] usb 5-1: device descriptor read/64, error -71 [ 189.412222][ T48] usb usb5-port1: attempt power cycle [ 189.470842][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.541423][ T5857] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 189.737079][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 189.745028][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.756478][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.779183][ T48] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 189.800751][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 189.829741][ T30] audit: type=1400 audit(1757263299.689:421): avc: denied { rename } for pid=7740 comm="syz.3.431" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 189.833447][ T48] usb 5-1: device descriptor read/8, error -71 [ 189.918978][ T5857] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 189.929949][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.940452][ T5857] usb 2-1: config 0 descriptor?? [ 190.141716][ T24] usb 3-1: USB disconnect, device number 10 [ 190.250497][ T48] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 190.400627][ T48] usb 5-1: device descriptor read/8, error -71 [ 190.408935][ T5857] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 190.484160][ T7756] Bluetooth: MGMT ver 1.23 [ 190.521506][ T48] usb usb5-port1: unable to enumerate USB device [ 190.599571][ T5857] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 190.754842][ T7763] afs: Unknown parameter '0x0000000000000004' [ 190.800172][ T5857] ft260 0003:0403:6030.0004: failed to retrieve system status [ 190.820199][ T5857] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 190.842827][ T5857] usb 2-1: USB disconnect, device number 14 [ 190.893699][ T7764] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 190.973522][ T30] audit: type=1400 audit(1757263300.839:422): avc: denied { execute } for pid=7765 comm="syz.4.437" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 191.087617][ T30] audit: type=1400 audit(1757263300.839:423): avc: denied { append } for pid=7765 comm="syz.4.437" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 191.371765][ T48] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.646557][ T30] audit: type=1400 audit(1757263301.399:424): avc: denied { write } for pid=7767 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.876288][ T48] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 191.891848][ T48] usb 4-1: config 0 has no interface number 0 [ 191.903589][ T48] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.916645][ T48] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.995271][ T48] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 192.012046][ T48] usb 4-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 192.020306][ T48] usb 4-1: Product: syz [ 192.028950][ T48] usb 4-1: config 0 descriptor?? [ 192.131738][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 192.469289][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.721416][ T30] audit: type=1400 audit(1757263302.509:425): avc: denied { bind } for pid=7787 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.762067][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 192.850289][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 193.923108][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.927541][ T30] audit: type=1400 audit(1757263303.759:426): avc: denied { create } for pid=7801 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 194.066542][ T30] audit: type=1400 audit(1757263303.759:427): avc: denied { ioctl } for pid=7801 comm="syz.0.447" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.626673][ T48] usbhid 4-1:0.16: can't add hid device: -71 [ 194.633140][ T48] usbhid 4-1:0.16: probe with driver usbhid failed with error -71 [ 194.713278][ T48] usb 4-1: USB disconnect, device number 15 [ 194.740817][ T5932] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.890821][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 194.898603][ T5932] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.965483][ T7816] fuse: Bad value for 'user_id' [ 194.970769][ T7816] fuse: Bad value for 'user_id' [ 194.982599][ T7816] binder: 7813:7816 ioctl c0306201 200000000080 returned -14 [ 194.995392][ T7816] binder: BINDER_SET_CONTEXT_MGR already set [ 195.002968][ T7816] binder: 7813:7816 ioctl 4018620d 200000000040 returned -16 [ 195.295407][ T5932] usb 5-1: config 0 has no interface number 0 [ 195.439759][ T5932] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.544083][ T5932] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 17056, setting to 1024 [ 195.576281][ T5932] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.606439][ T5932] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.627006][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.635707][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 195.651193][ T24] usb 2-1: can't read configurations, error -71 [ 195.684102][ T5932] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 195.696706][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.730431][ T5932] usb 5-1: config 0 descriptor?? [ 195.742096][ T5932] ldusb 5-1:0.55: Interrupt in endpoint not found [ 196.137008][ T30] audit: type=1400 audit(1757263305.999:428): avc: denied { mount } for pid=7823 comm="syz.2.452" name="/" dev="rpc_pipefs" ino=17260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 196.170473][ T5907] usb 5-1: USB disconnect, device number 16 [ 197.256496][ T30] audit: type=1400 audit(1757263307.029:429): avc: denied { write } for pid=7833 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.239312][ T5932] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.291176][ T30] audit: type=1400 audit(1757263308.129:430): avc: denied { shutdown } for pid=7854 comm="syz.0.459" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.455052][ T30] audit: type=1400 audit(1757263308.129:431): avc: denied { read } for pid=7854 comm="syz.0.459" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.491753][ T5932] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 198.675052][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.684233][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.732763][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.770936][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.876471][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.903141][ T30] audit: type=1400 audit(1757263308.769:432): avc: denied { execute_no_trans } for pid=7859 comm="syz.2.460" path="/91/file0" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.972004][ T7861] program syz.2.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.207451][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.241009][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.249921][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.452170][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.501897][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.883693][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.910784][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.929232][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.938229][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.951771][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.963031][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.974898][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.997013][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.015002][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.055996][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.068094][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.088645][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.097591][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.125596][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.286644][ T5932] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 200.669418][ T30] audit: type=1400 audit(1757263310.519:433): avc: denied { write } for pid=7867 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.686542][ T5932] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 200.716167][ T5932] usb 2-1: Product: syz [ 200.720601][ T5932] usb 2-1: Manufacturer: syz [ 200.728382][ T5932] usb 2-1: SerialNumber: syz [ 200.738031][ T5932] usb 2-1: config 0 descriptor?? [ 200.754725][ T7871] netlink: 'syz.2.463': attribute type 5 has an invalid length. [ 200.809470][ T5932] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 201.065335][ T5932] usb 2-1: USB disconnect, device number 17 [ 201.091561][ T5932] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 201.110363][ T30] audit: type=1400 audit(1757263310.969:434): avc: denied { append } for pid=7880 comm="syz.2.465" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.181166][ T7884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.467'. [ 201.203751][ T7886] dns_resolver: Unsupported server list version (0) [ 203.714698][ T7910] Invalid ELF header magic: != ELF [ 203.756649][ T30] audit: type=1400 audit(1757263313.549:435): avc: denied { getopt } for pid=7900 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.810824][ T30] audit: type=1400 audit(1757263313.579:436): avc: denied { module_load } for pid=7887 comm="syz.2.468" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 205.319437][ T30] audit: type=1400 audit(1757263314.809:437): avc: denied { read write } for pid=7927 comm="syz.4.473" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.475674][ T7934] /dev/nullb0: Can't open blockdev [ 205.551243][ T5857] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.821686][ T30] audit: type=1400 audit(1757263314.809:438): avc: denied { open } for pid=7927 comm="syz.4.473" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.900741][ T30] audit: type=1400 audit(1757263314.809:439): avc: denied { map } for pid=7927 comm="syz.4.473" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.925176][ T30] audit: type=1400 audit(1757263315.279:440): avc: denied { connect } for pid=7932 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 205.945252][ T30] audit: type=1400 audit(1757263315.339:441): avc: denied { ioctl } for pid=7932 comm="syz.0.476" path="socket:[17496]" dev="sockfs" ino=17496 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.649113][ T7947] netlink: 5884 bytes leftover after parsing attributes in process `syz.0.480'. [ 206.689054][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 206.700866][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 207.011142][ T5857] usb 5-1: device descriptor read/64, error -71 [ 207.253908][ T5857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.444742][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.452163][ T5857] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 207.505261][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.592963][ T5857] usb 5-1: config 0 descriptor?? [ 208.415795][ T5857] isku 0003:1E7D:3264.0005: unexpected long global item [ 208.481610][ T5857] isku 0003:1E7D:3264.0005: parse failed [ 208.552867][ T5857] isku 0003:1E7D:3264.0005: probe with driver isku failed with error -22 [ 208.624560][ T5857] usb 5-1: USB disconnect, device number 18 [ 209.122234][ T30] audit: type=1400 audit(1757263318.979:442): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 209.210261][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.219757][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 209.258153][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.272187][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.308364][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.361126][ T24] usb 1-1: device descriptor read/64, error -71 [ 209.571083][ T5857] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 209.731408][ T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 209.857155][ T30] audit: type=1400 audit(1757263319.699:443): avc: denied { write } for pid=7997 comm="syz.2.492" path="socket:[18659]" dev="sockfs" ino=18659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.918305][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 209.952182][ T24] usb 1-1: device descriptor read/64, error -71 [ 210.021320][ T5857] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 210.039327][ T5857] usb 5-1: config 0 has no interface number 0 [ 210.092204][ T24] usb usb1-port1: attempt power cycle [ 210.108807][ T5857] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 210.135678][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.145146][ T5857] usb 5-1: Product: syz [ 210.149397][ T5857] usb 5-1: Manufacturer: syz [ 210.154272][ T5857] usb 5-1: SerialNumber: syz [ 210.205742][ T5857] usb 5-1: config 0 descriptor?? [ 210.240256][ T5857] usb 5-1: bad CDC descriptors [ 210.481548][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 210.515208][ T24] usb 1-1: device descriptor read/8, error -71 [ 210.529472][ T8022] /dev/nullb0: Can't open blockdev [ 210.801439][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 210.863333][ T24] usb 1-1: device descriptor read/8, error -71 [ 210.971556][ T24] usb usb1-port1: unable to enumerate USB device [ 211.173636][ T30] audit: type=1400 audit(1757263321.039:444): avc: denied { ioctl } for pid=8020 comm="syz.3.496" path="socket:[18685]" dev="sockfs" ino=18685 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.641352][ T30] audit: type=1326 audit(1757263321.489:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.2.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb357b8ebe9 code=0x7ffe0000 [ 211.652862][ T30] audit: type=1400 audit(1757263321.519:446): avc: denied { accept } for pid=8020 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.854933][ T8046] netlink: 5884 bytes leftover after parsing attributes in process `syz.1.500'. [ 211.876320][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.500'. [ 211.885345][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'. [ 212.259976][ T30] audit: type=1400 audit(1757263322.089:447): avc: denied { read write } for pid=8049 comm="syz.3.501" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.604962][ T5932] usb 5-1: USB disconnect, device number 19 [ 212.632696][ T30] audit: type=1400 audit(1757263322.089:448): avc: denied { open } for pid=8049 comm="syz.3.501" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 213.331112][ T8066] overlay: Unknown parameter 'uid>00000000000000000000' [ 214.453946][ T8021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.690114][ T30] audit: type=1400 audit(1757263324.549:449): avc: denied { ioctl } for pid=8080 comm="syz.3.509" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 215.229184][ T30] audit: type=1400 audit(1757263325.089:450): avc: denied { read } for pid=8088 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.248329][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.423540][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 215.731738][ T5932] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.731736][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.900735][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 215.906032][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 215.920749][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.926891][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.932171][ T5932] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.932197][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.963702][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.987372][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.989181][ T5932] usb 4-1: config 0 descriptor?? [ 216.011922][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.026684][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.072723][ T48] usb 3-1: config 0 descriptor?? [ 216.306130][ T30] audit: type=1400 audit(1757263326.159:451): avc: denied { kexec_image_load } for pid=8108 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.484311][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.493156][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.509804][ T48] microsoft 0003:045E:07DA.0006: report is too long [ 216.531595][ T48] microsoft 0003:045E:07DA.0006: item 0 4 0 8 parsing failed [ 216.533158][ T5932] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 216.539455][ T48] microsoft 0003:045E:07DA.0006: parse failed [ 216.587052][ T48] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 216.810911][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 216.879979][ T30] audit: type=1400 audit(1757263326.739:452): avc: denied { bind } for pid=8119 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.901488][ T48] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 216.980532][ T30] audit: type=1400 audit(1757263326.829:453): avc: denied { write } for pid=8093 comm="syz.3.513" path="socket:[18011]" dev="sockfs" ino=18011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.264836][ T5932] usb 4-1: USB disconnect, device number 16 [ 217.276272][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.295228][ T9] usb 1-1: config 213 has an invalid interface number: 166 but max is 0 [ 217.307844][ T9] usb 1-1: config 213 has no interface number 0 [ 217.315634][ T9] usb 1-1: config 213 interface 166 has no altsetting 0 [ 217.332790][ T9] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0122, bcdDevice=e6.ef [ 217.344090][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.352181][ T9] usb 1-1: Product: syz [ 217.356454][ T9] usb 1-1: Manufacturer: syz [ 217.361474][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 217.365753][ T9] usb 1-1: SerialNumber: syz [ 217.374357][ T9] kvaser_usb 1-1:213.166: error -ENODEV: Cannot get usb endpoint(s) [ 217.389353][ T48] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.425536][ T48] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 217.441039][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.462581][ T48] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 217.474673][ T48] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 217.484803][ T48] usb 2-1: Product: syz [ 217.491661][ T48] usb 2-1: Manufacturer: syz [ 217.496400][ T48] usb 2-1: SerialNumber: syz [ 217.543119][ T48] usb 2-1: config 0 descriptor?? [ 217.682280][ T5857] usb 1-1: USB disconnect, device number 30 [ 218.140976][ T8135] erspan1: entered promiscuous mode [ 218.146290][ T8135] erspan1: entered allmulticast mode [ 218.308187][ T48] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 218.323910][ T48] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 218.355207][ T48] usb 2-1: USB disconnect, device number 19 [ 218.767693][ T9] usb 3-1: USB disconnect, device number 11 [ 218.823552][ T8146] ALSA: mixer_oss: invalid OSS volume '' [ 219.081247][ T48] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 219.194686][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.211696][ T5967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.245531][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.255169][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.264511][ T48] usb 4-1: Product: syz [ 219.269959][ T48] usb 4-1: Manufacturer: syz [ 219.277566][ T48] usb 4-1: SerialNumber: syz [ 219.312869][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.346588][ T5857] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.391108][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 219.396300][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 219.408366][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 219.420766][ T5967] usb 5-1: config 4 has an invalid interface number: 246 but max is 0 [ 219.432531][ T9] usb 3-1: config 0 has no interface number 0 [ 219.438798][ T5967] usb 5-1: config 4 has no interface number 0 [ 219.445386][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 219.460810][ T5967] usb 5-1: config 4 interface 246 altsetting 2 endpoint 0x5 has an invalid bInterval 36, changing to 9 [ 219.492326][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 219.501830][ T5967] usb 5-1: config 4 interface 246 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 219.512129][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.520253][ T5967] usb 5-1: config 4 interface 246 altsetting 2 endpoint 0xE has an invalid bInterval 185, changing to 11 [ 219.535749][ T9] usb 3-1: Product: syz [ 219.540253][ T9] usb 3-1: Manufacturer: syz [ 219.545118][ T9] usb 3-1: SerialNumber: syz [ 219.555102][ T5932] usb 4-1: USB disconnect, device number 17 [ 219.564021][ T5967] usb 5-1: config 4 interface 246 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 219.582155][ T9] usb 3-1: config 0 descriptor?? [ 219.591924][ T5967] usb 5-1: config 4 interface 246 altsetting 2 has a duplicate endpoint with address 0x81, skipping [ 219.605043][ T9] appletouch 3-1:0.85: Could not find int-in endpoint [ 219.612860][ T5967] usb 5-1: config 4 interface 246 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 219.624324][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 219.634966][ T9] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 219.645299][ T5967] usb 5-1: config 4 interface 246 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 219.657806][ T5967] usb 5-1: config 4 interface 246 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 219.658182][ T8160] netlink: 13272 bytes leftover after parsing attributes in process `syz.0.532'. [ 219.671329][ T5967] usb 5-1: config 4 interface 246 has no altsetting 0 [ 219.673374][ T5967] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice= 6.28 [ 219.697107][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.705252][ T5967] usb 5-1: Product: syz [ 219.709586][ T5967] usb 5-1: Manufacturer: Е [ 219.714220][ T5967] usb 5-1: SerialNumber: syz [ 219.722983][ T8154] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 219.816113][ T30] audit: type=1326 audit(1757263329.679:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.2.527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb357b8ebe9 code=0x0 [ 219.874622][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.883404][ T8167] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.883464][ T8167] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 219.883719][ T8167] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.894467][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.901459][ T8167] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 219.955536][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.964116][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.000067][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 220.021519][ T5967] option 5-1:4.246: GSM modem (1-port) converter detected [ 220.039108][ T5967] usb 5-1: USB disconnect, device number 20 [ 220.057885][ T5967] option 5-1:4.246: device disconnected [ 220.071041][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 220.097374][ T30] audit: type=1400 audit(1757263329.959:455): avc: denied { ioctl } for pid=8174 comm="syz.4.536" path="socket:[18158]" dev="sockfs" ino=18158 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 220.173599][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 220.180334][ T8167] loop7: detected capacity change from 0 to 7 [ 220.250904][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 220.259705][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.585339][ T5857] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 220.654008][ T8167] Dev loop7: unable to read RDB block 7 [ 220.696466][ T5857] ath9k_htc: Failed to initialize the device [ 220.727014][ T8167] loop7: unable to read partition table [ 220.734960][ T8167] loop7: partition table beyond EOD, truncated [ 220.741339][ T8167] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 220.959041][ T8183] hfs: unable to load iocharset "io#harsetarbiter" [ 221.023497][ T5932] usb 4-1: ath9k_htc: USB layer deinitialized [ 221.031882][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.041266][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 221.052041][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.069265][ T9] usb 2-1: config 0 descriptor?? [ 221.399842][ T8195] netlink: 48 bytes leftover after parsing attributes in process `syz.4.540'. [ 221.458214][ T30] audit: type=1400 audit(1757263331.279:456): avc: denied { write } for pid=8189 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 221.497955][ T9] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 221.505707][ T9] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 221.513343][ T9] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 221.526959][ T9] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 221.534643][ T9] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 221.681779][ T9] hid-retrode 0003:0403:97C1.0008: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 221.781582][ T48] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 221.899909][ T5857] usb 3-1: USB disconnect, device number 12 [ 221.945934][ T48] usb 5-1: not running at top speed; connect to a high speed hub [ 221.958297][ T48] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.163514][ T48] usb 5-1: config 1 interface 0 has no altsetting 0 [ 222.201394][ T5907] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 222.267259][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 222.277773][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.287589][ T48] usb 5-1: Product: syz [ 222.292688][ T48] usb 5-1: SerialNumber: syz [ 222.341345][ T5907] usb 1-1: device descriptor read/64, error -71 [ 222.613493][ T48] usbhid 5-1:1.0: can't add hid device: -71 [ 222.619455][ T48] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 222.646767][ T48] usb 5-1: USB disconnect, device number 21 [ 222.653230][ T5907] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 223.217860][ T24] usb 2-1: USB disconnect, device number 20 [ 223.239655][ T8213] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 223.255722][ T30] audit: type=1400 audit(1757263333.119:457): avc: denied { firmware_load } for pid=8209 comm="syz.2.544" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 223.280494][ T8213] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 223.301457][ T5907] usb 1-1: device descriptor read/64, error -71 [ 223.412016][ T5907] usb usb1-port1: attempt power cycle [ 223.658878][ T8224] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 223.668672][ T5932] IPVS: starting estimator thread 0... [ 223.990894][ T8227] IPVS: using max 44 ests per chain, 105600 per kthread [ 224.391294][ T5907] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 224.438504][ T8240] netlink: 36 bytes leftover after parsing attributes in process `syz.4.550'. [ 224.452588][ T5907] usb 1-1: device descriptor read/8, error -71 [ 224.700944][ T5907] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 224.775150][ T8253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.971600][ T5907] usb 1-1: device not accepting address 34, error -71 [ 225.001765][ T5907] usb usb1-port1: unable to enumerate USB device [ 225.501151][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 225.674585][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 225.711364][ T5968] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 226.381759][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.389784][ T24] usb 2-1: Product: syz [ 226.394730][ T24] usb 2-1: Manufacturer: syz [ 226.399450][ T24] usb 2-1: SerialNumber: syz [ 226.510194][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 226.530630][ T5968] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 226.546325][ T5968] usb 4-1: config 0 has no interface number 0 [ 226.555174][ T5968] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 226.555202][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.555222][ T5968] usb 4-1: Product: syz [ 226.555236][ T5968] usb 4-1: Manufacturer: syz [ 226.555250][ T5968] usb 4-1: SerialNumber: syz [ 226.563599][ T5968] usb 4-1: config 0 descriptor?? [ 226.566098][ T5968] usb 4-1: bad CDC descriptors [ 226.639385][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 226.639433][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.672028][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.713392][ T8300] overlayfs: failed to resolve './file1': -2 [ 226.742022][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 226.762114][ T24] usb 2-1: USB disconnect, device number 21 [ 227.134577][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 229.339819][ T48] usb 4-1: USB disconnect, device number 18 [ 232.491116][ T30] audit: type=1400 audit(1757263342.359:458): avc: denied { ioctl } for pid=8322 comm="syz.2.573" path="socket:[19609]" dev="sockfs" ino=19609 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.610780][ T5932] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 232.780893][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 232.797968][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.912430][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.978558][ T5932] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.106202][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.124306][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.156898][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 233.186862][ T5932] usb 2-1: Product: syz [ 233.207069][ T5932] usb 2-1: Manufacturer: syz [ 233.595637][ T5932] usb 2-1: SerialNumber: syz [ 233.626885][ T5932] usb 2-1: config 0 descriptor?? [ 233.632297][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 233.648180][ T5932] usb 2-1: can't set config #0, error -71 [ 233.669914][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 233.692398][ T5932] usb 2-1: USB disconnect, device number 22 [ 233.708560][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.756976][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 234.423854][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.551493][ T8362] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 234.560924][ T8362] FAT-fs (loop7): unable to read boot sector [ 234.601361][ T30] audit: type=1400 audit(1757263344.409:459): avc: denied { mounton } for pid=8352 comm="syz.3.581" path="/117/file0" dev="tmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 234.899375][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.219461][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 235.232282][ T24] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 235.253103][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 235.262227][ T24] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 235.319360][ T24] usb 5-1: USB disconnect, device number 22 [ 235.328322][ T8348] netlink: 'syz.1.578': attribute type 30 has an invalid length. [ 235.384063][ T30] audit: type=1400 audit(1757263345.249:460): avc: denied { mounton } for pid=8344 comm="syz.1.578" path="/proc/487/task" dev="proc" ino=19642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 235.998045][ T30] audit: type=1400 audit(1757263345.509:461): avc: denied { mounton } for pid=8377 comm="syz.2.586" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.820118][ T8380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.044724][ T30] audit: type=1400 audit(1757263346.909:462): avc: denied { listen } for pid=8393 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.067173][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 237.220430][ T30] audit: type=1400 audit(1757263347.079:463): avc: denied { load_policy } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 237.243285][ T8401] netlink: 348 bytes leftover after parsing attributes in process `syz.1.590'. [ 237.257142][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 237.268156][ T8400] SELinux: policydb string does not match my string SE Linux [ 237.277652][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.286752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.294329][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 237.297822][ T8400] SELinux: failed to load policy [ 237.308803][ T10] usb 1-1: Product: syz [ 237.315860][ T10] usb 1-1: Manufacturer: syz [ 237.328893][ T10] usb 1-1: SerialNumber: syz [ 237.394680][ T30] audit: type=1400 audit(1757263347.259:464): avc: denied { create } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.464566][ T30] audit: type=1400 audit(1757263347.299:465): avc: denied { allowed } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 237.494186][ T30] audit: type=1400 audit(1757263347.299:466): avc: denied { create } for pid=8399 comm="syz.2.591" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.535809][ T30] audit: type=1400 audit(1757263347.299:467): avc: denied { map } for pid=8399 comm="syz.2.591" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.564447][ T30] audit: type=1400 audit(1757263347.299:468): avc: denied { read write } for pid=8399 comm="syz.2.591" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.591438][ T30] audit: type=1400 audit(1757263347.309:469): avc: denied { bind } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.655749][ T30] audit: type=1400 audit(1757263347.309:470): avc: denied { name_bind } for pid=8399 comm="syz.2.591" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 237.689178][ T30] audit: type=1400 audit(1757263347.309:471): avc: denied { node_bind } for pid=8399 comm="syz.2.591" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 237.722163][ T30] audit: type=1400 audit(1757263347.309:472): avc: denied { write } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.747342][ T30] audit: type=1400 audit(1757263347.309:473): avc: denied { connect } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.050816][ T30] audit: type=1400 audit(1757263347.309:474): avc: denied { name_connect } for pid=8399 comm="syz.2.591" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 238.077592][ T8392] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 238.097635][ T30] audit: type=1400 audit(1757263347.389:475): avc: denied { map_create } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.176719][ T30] audit: type=1400 audit(1757263347.389:476): avc: denied { map_read map_write } for pid=8399 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.268251][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 238.278815][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 238.296910][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 239.123603][ T8415] hfs: unable to load iocharset "io#harsetarbiter" [ 239.181153][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 239.234286][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 239.331228][ T10] usb 1-1: USB disconnect, device number 36 [ 241.927290][ T8445] block nbd4: Attempted send on invalid socket [ 241.934718][ T8445] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 242.749816][ T8469] netlink: 32 bytes leftover after parsing attributes in process `syz.2.605'. [ 242.812762][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 242.812777][ T30] audit: type=1400 audit(1757263352.679:541): avc: denied { sys_module } for pid=8465 comm="syz.2.605" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.890040][ T30] audit: type=1400 audit(1757263352.719:542): avc: denied { create } for pid=8470 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.011494][ T30] audit: type=1400 audit(1757263352.729:543): avc: denied { ioctl } for pid=8470 comm="syz.0.606" path="socket:[19832]" dev="sockfs" ino=19832 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.041546][ T30] audit: type=1400 audit(1757263352.879:544): avc: denied { read } for pid=8475 comm="syz.4.608" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.508879][ T30] audit: type=1400 audit(1757263352.879:545): avc: denied { open } for pid=8475 comm="syz.4.608" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.536951][ T30] audit: type=1400 audit(1757263352.879:546): avc: denied { ioctl } for pid=8475 comm="syz.4.608" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.700616][ T30] audit: type=1400 audit(1757263353.449:547): avc: denied { setopt } for pid=8480 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.146248][ T30] audit: type=1400 audit(1757263353.659:548): avc: denied { mounton } for pid=8481 comm="syz.0.609" path="/109/file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.169748][ T30] audit: type=1400 audit(1757263353.699:549): avc: denied { mount } for pid=8481 comm="syz.0.609" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 244.235373][ T8492] FAULT_INJECTION: forcing a failure. [ 244.235373][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 244.260494][ T30] audit: type=1400 audit(1757263353.979:550): avc: denied { setopt } for pid=8484 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.281222][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.1.612 Not tainted syzkaller #0 PREEMPT(full) [ 244.281246][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 244.281255][ T8492] Call Trace: [ 244.281268][ T8492] [ 244.281276][ T8492] dump_stack_lvl+0x16c/0x1f0 [ 244.281300][ T8492] should_fail_ex+0x512/0x640 [ 244.281319][ T8492] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 244.281343][ T8492] should_failslab+0xc2/0x120 [ 244.281360][ T8492] __kmalloc_cache_noprof+0x6a/0x3e0 [ 244.281381][ T8492] ? net_generic+0xf4/0x2a0 [ 244.281399][ T8492] ? nf_tables_newtable+0xd67/0x1b40 [ 244.281416][ T8492] nf_tables_newtable+0xd67/0x1b40 [ 244.281433][ T8492] ? __pfx___nla_validate_parse+0x10/0x10 [ 244.281457][ T8492] ? __pfx_nf_tables_newtable+0x10/0x10 [ 244.281477][ T8492] ? __nla_parse+0x40/0x60 [ 244.281501][ T8492] nfnetlink_rcv_batch+0x18ed/0x2330 [ 244.281528][ T8492] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 244.281558][ T8492] ? avc_has_perm_noaudit+0x149/0x3b0 [ 244.281598][ T8492] ? __nla_parse+0x40/0x60 [ 244.281622][ T8492] nfnetlink_rcv+0x3c1/0x430 [ 244.281639][ T8492] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.281663][ T8492] netlink_unicast+0x5aa/0x870 [ 244.281689][ T8492] ? __pfx_netlink_unicast+0x10/0x10 [ 244.281713][ T8492] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 244.281743][ T8492] netlink_sendmsg+0x8d1/0xdd0 [ 244.281768][ T8492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.281797][ T8492] ____sys_sendmsg+0xa98/0xc70 [ 244.281822][ T8492] ? copy_msghdr_from_user+0x10a/0x160 [ 244.281842][ T8492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.281872][ T8492] ___sys_sendmsg+0x134/0x1d0 [ 244.281892][ T8492] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.281942][ T8492] __sys_sendmsg+0x16d/0x220 [ 244.281961][ T8492] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.281994][ T8492] do_syscall_64+0xcd/0x4c0 [ 244.282014][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.282026][ T8492] RIP: 0033:0x7f99bbf8ebe9 [ 244.282041][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.282055][ T8492] RSP: 002b:00007f99ba1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.282069][ T8492] RAX: ffffffffffffffda RBX: 00007f99bc1c5fa0 RCX: 00007f99bbf8ebe9 [ 244.282078][ T8492] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 244.282088][ T8492] RBP: 00007f99ba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.282097][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.282106][ T8492] R13: 00007f99bc1c6038 R14: 00007f99bc1c5fa0 R15: 00007ffe0b36ce88 [ 244.282132][ T8492] [ 245.834116][ T8521] mkiss: ax0: crc mode is auto. [ 245.970224][ T8524] ubi31: attaching mtd0 [ 245.977850][ T8524] ubi31: scanning is finished [ 245.983448][ T8524] ubi31: empty MTD device detected [ 246.104333][ T8524] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 246.112284][ T8524] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 246.119571][ T8524] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 246.127561][ T8524] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 246.135536][ T8524] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 246.142859][ T8524] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 246.151402][ T8524] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3056339519 [ 246.162002][ T8524] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 246.173658][ T8527] ubi31: background thread "ubi_bgt31d" started, PID 8527 [ 247.156320][ T8541] FAULT_INJECTION: forcing a failure. [ 247.156320][ T8541] name failslab, interval 1, probability 0, space 0, times 0 [ 247.169333][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.0.628 Not tainted syzkaller #0 PREEMPT(full) [ 247.169356][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 247.169365][ T8541] Call Trace: [ 247.169371][ T8541] [ 247.169378][ T8541] dump_stack_lvl+0x16c/0x1f0 [ 247.169405][ T8541] should_fail_ex+0x512/0x640 [ 247.169425][ T8541] ? __kmalloc_noprof+0xbf/0x510 [ 247.169445][ T8541] ? nla_strdup+0xc6/0x150 [ 247.169466][ T8541] should_failslab+0xc2/0x120 [ 247.169487][ T8541] __kmalloc_noprof+0xd2/0x510 [ 247.169509][ T8541] nla_strdup+0xc6/0x150 [ 247.169534][ T8541] nf_tables_newtable+0xdeb/0x1b40 [ 247.169555][ T8541] ? __pfx___nla_validate_parse+0x10/0x10 [ 247.169584][ T8541] ? __pfx_nf_tables_newtable+0x10/0x10 [ 247.169607][ T8541] ? __nla_parse+0x40/0x60 [ 247.169635][ T8541] nfnetlink_rcv_batch+0x18ed/0x2330 [ 247.169665][ T8541] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 247.169693][ T8541] ? avc_has_perm_noaudit+0x149/0x3b0 [ 247.169719][ T8541] ? __nla_parse+0x40/0x60 [ 247.169737][ T8541] nfnetlink_rcv+0x3c1/0x430 [ 247.169746][ T8541] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 247.169760][ T8541] netlink_unicast+0x5aa/0x870 [ 247.169776][ T8541] ? __pfx_netlink_unicast+0x10/0x10 [ 247.169790][ T8541] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 247.169808][ T8541] netlink_sendmsg+0x8d1/0xdd0 [ 247.169824][ T8541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.169843][ T8541] ____sys_sendmsg+0xa98/0xc70 [ 247.169859][ T8541] ? copy_msghdr_from_user+0x10a/0x160 [ 247.169872][ T8541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.169894][ T8541] ___sys_sendmsg+0x134/0x1d0 [ 247.169907][ T8541] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.169938][ T8541] __sys_sendmsg+0x16d/0x220 [ 247.169951][ T8541] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.169973][ T8541] do_syscall_64+0xcd/0x4c0 [ 247.169987][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.169998][ T8541] RIP: 0033:0x7f476eb8ebe9 [ 247.170007][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.170017][ T8541] RSP: 002b:00007f476fa38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.170027][ T8541] RAX: ffffffffffffffda RBX: 00007f476edc5fa0 RCX: 00007f476eb8ebe9 [ 247.170034][ T8541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.170040][ T8541] RBP: 00007f476fa38090 R08: 0000000000000000 R09: 0000000000000000 [ 247.170046][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.170052][ T8541] R13: 00007f476edc6038 R14: 00007f476edc5fa0 R15: 00007fff384d9c38 [ 247.170065][ T8541] [ 247.479567][ T8547] netlink: 'syz.4.626': attribute type 10 has an invalid length. [ 247.530371][ T8549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.627'. [ 247.544641][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.626'. [ 247.562913][ T8550] input: syz0 as /devices/virtual/input/input10 [ 247.648697][ T8547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.917539][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 247.917551][ T30] audit: type=1400 audit(1757263357.779:571): avc: denied { connect } for pid=8554 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.970758][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 248.108423][ T30] audit: type=1400 audit(1757263357.819:572): avc: denied { getopt } for pid=8554 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.242640][ T30] audit: type=1400 audit(1757263357.829:573): avc: denied { write } for pid=8554 comm="syz.0.630" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 248.271644][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 248.313946][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 248.352395][ T30] audit: type=1400 audit(1757263357.829:574): avc: denied { open } for pid=8554 comm="syz.0.630" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 248.405907][ T10] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.440581][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 248.482610][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.511433][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 248.520619][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.530801][ T10] usb 3-1: Product: syz [ 248.536668][ T10] usb 3-1: SerialNumber: syz [ 248.584274][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.662876][ T30] audit: type=1400 audit(1757263357.829:575): avc: denied { ioctl } for pid=8554 comm="syz.0.630" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 248.688900][ T5857] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 248.708843][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.760361][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.806405][ T8560] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 248.814563][ T30] audit: type=1400 audit(1757263358.219:576): avc: denied { create } for pid=8561 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.871320][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.883830][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.894639][ T5857] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.910849][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 248.914522][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.931552][ T5857] usb 1-1: config 0 descriptor?? [ 248.938255][ T5857] pwc: Askey VC010 type 2 USB webcam detected. [ 248.989484][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 249.045323][ T10] usb 3-1: USB disconnect, device number 13 [ 249.073658][ T30] audit: type=1400 audit(1757263358.939:577): avc: denied { write } for pid=8565 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.221892][ T30] audit: type=1400 audit(1757263358.939:578): avc: denied { nlmsg_read } for pid=8565 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.243193][ T5857] pwc: recv_control_msg error -32 req 02 val 2b00 [ 249.260529][ T5857] pwc: recv_control_msg error -32 req 02 val 2700 [ 249.268362][ T5857] pwc: recv_control_msg error -71 req 02 val 2c00 [ 249.321620][ T30] audit: type=1400 audit(1757263359.149:579): avc: denied { read write } for pid=8556 comm="syz.1.632" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 249.354658][ T5857] pwc: recv_control_msg error -71 req 04 val 1000 [ 249.375261][ T5857] pwc: recv_control_msg error -71 req 04 val 1300 [ 249.409869][ T5857] pwc: recv_control_msg error -71 req 04 val 1400 [ 249.420145][ T5857] pwc: recv_control_msg error -71 req 02 val 2000 [ 249.475306][ T8577] No source specified [ 249.502201][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 249.531381][ T30] audit: type=1400 audit(1757263359.149:580): avc: denied { open } for pid=8556 comm="syz.1.632" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 249.558249][ T5857] pwc: recv_control_msg error -71 req 02 val 2100 [ 249.566321][ T5857] pwc: recv_control_msg error -71 req 04 val 1500 [ 249.574086][ T5857] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.646038][ T5857] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.712444][ T5857] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.723952][ T5857] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.773951][ T5857] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.891592][ T5857] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.928623][ T8589] FAULT_INJECTION: forcing a failure. [ 249.928623][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 249.965127][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.2.639 Not tainted syzkaller #0 PREEMPT(full) [ 249.965143][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 249.965151][ T8589] Call Trace: [ 249.965156][ T8589] [ 249.965163][ T8589] dump_stack_lvl+0x16c/0x1f0 [ 249.965188][ T8589] should_fail_ex+0x512/0x640 [ 249.965208][ T8589] ? __kvmalloc_node_noprof+0x124/0x620 [ 249.965226][ T8589] should_failslab+0xc2/0x120 [ 249.965243][ T8589] __kvmalloc_node_noprof+0x137/0x620 [ 249.965254][ T8589] ? bucket_table_alloc.isra.0+0x83/0x460 [ 249.965270][ T8589] ? bucket_table_alloc.isra.0+0x83/0x460 [ 249.965283][ T8589] bucket_table_alloc.isra.0+0x83/0x460 [ 249.965300][ T8589] rhashtable_init_noprof+0x41a/0x7e0 [ 249.965325][ T8589] rhltable_init_noprof+0x20/0x60 [ 249.965346][ T8589] nf_tables_newtable+0xf94/0x1b40 [ 249.965365][ T8589] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.965388][ T8589] ? __pfx_nf_tables_newtable+0x10/0x10 [ 249.965401][ T8589] ? __nla_parse+0x40/0x60 [ 249.965418][ T8589] nfnetlink_rcv_batch+0x18ed/0x2330 [ 249.965436][ T8589] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 249.965466][ T8589] ? avc_has_perm_noaudit+0x149/0x3b0 [ 249.965518][ T8589] ? __nla_parse+0x40/0x60 [ 249.965538][ T8589] nfnetlink_rcv+0x3c1/0x430 [ 249.965547][ T8589] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 249.965561][ T8589] netlink_unicast+0x5aa/0x870 [ 249.965578][ T8589] ? __pfx_netlink_unicast+0x10/0x10 [ 249.965594][ T8589] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 249.965622][ T8589] netlink_sendmsg+0x8d1/0xdd0 [ 249.965647][ T8589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.965674][ T8589] ____sys_sendmsg+0xa98/0xc70 [ 249.965691][ T8589] ? copy_msghdr_from_user+0x10a/0x160 [ 249.965707][ T8589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.965730][ T8589] ___sys_sendmsg+0x134/0x1d0 [ 249.965749][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.965800][ T8589] __sys_sendmsg+0x16d/0x220 [ 249.965819][ T8589] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.965842][ T8589] do_syscall_64+0xcd/0x4c0 [ 249.965856][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.965867][ T8589] RIP: 0033:0x7fb357b8ebe9 [ 249.965877][ T8589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.965891][ T8589] RSP: 002b:00007fb3589aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.965908][ T8589] RAX: ffffffffffffffda RBX: 00007fb357dc5fa0 RCX: 00007fb357b8ebe9 [ 249.965918][ T8589] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 249.965928][ T8589] RBP: 00007fb3589aa090 R08: 0000000000000000 R09: 0000000000000000 [ 249.965936][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.965945][ T8589] R13: 00007fb357dc6038 R14: 00007fb357dc5fa0 R15: 00007ffd020f3c78 [ 249.965966][ T8589] [ 249.967220][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 250.272054][ T5857] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.296970][ T5857] pwc: Registered as video103. [ 250.308487][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 250.718533][ T5857] usb 1-1: USB disconnect, device number 37 [ 253.252173][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 253.252189][ T30] audit: type=1400 audit(1757263363.119:588): avc: denied { create } for pid=8611 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.990296][ T30] audit: type=1400 audit(1757263363.479:589): avc: denied { read write } for pid=8611 comm="syz.4.648" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.043843][ T5857] usb 2-1: USB disconnect, device number 23 [ 254.137524][ T30] audit: type=1400 audit(1757263363.479:590): avc: denied { open } for pid=8611 comm="syz.4.648" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.169658][ T30] audit: type=1400 audit(1757263363.479:591): avc: denied { map } for pid=8611 comm="syz.4.648" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.265791][ T30] audit: type=1400 audit(1757263363.479:592): avc: denied { execute } for pid=8611 comm="syz.4.648" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.355261][ T8626] netlink: 5884 bytes leftover after parsing attributes in process `syz.1.649'. [ 254.392778][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.649'. [ 254.402194][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 254.503461][ T30] audit: type=1400 audit(1757263363.689:593): avc: denied { create } for pid=8615 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 254.532514][ T8632] FAULT_INJECTION: forcing a failure. [ 254.532514][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 254.556887][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(full) [ 254.556908][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 254.556915][ T8632] Call Trace: [ 254.556919][ T8632] [ 254.556923][ T8632] dump_stack_lvl+0x16c/0x1f0 [ 254.556941][ T8632] should_fail_ex+0x512/0x640 [ 254.556955][ T8632] ? __kmalloc_noprof+0xbf/0x510 [ 254.556967][ T8632] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 254.556980][ T8632] should_failslab+0xc2/0x120 [ 254.556993][ T8632] __kmalloc_noprof+0xd2/0x510 [ 254.557003][ T8632] ? lockdep_init_map_type+0x5c/0x280 [ 254.557014][ T8632] ? rhashtable_init_noprof+0x55e/0x7e0 [ 254.557030][ T8632] nft_trans_alloc_gfp+0x26/0x2e0 [ 254.557043][ T8632] nf_tables_newtable+0x1387/0x1b40 [ 254.557057][ T8632] ? __pfx_nf_tables_newtable+0x10/0x10 [ 254.557071][ T8632] ? __nla_parse+0x40/0x60 [ 254.557088][ T8632] nfnetlink_rcv_batch+0x18ed/0x2330 [ 254.557106][ T8632] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 254.557126][ T8632] ? avc_has_perm_noaudit+0x149/0x3b0 [ 254.557152][ T8632] ? __nla_parse+0x40/0x60 [ 254.557169][ T8632] nfnetlink_rcv+0x3c1/0x430 [ 254.557179][ T8632] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 254.557193][ T8632] netlink_unicast+0x5aa/0x870 [ 254.557209][ T8632] ? __pfx_netlink_unicast+0x10/0x10 [ 254.557227][ T8632] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 254.557244][ T8632] netlink_sendmsg+0x8d1/0xdd0 [ 254.557261][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.557280][ T8632] ____sys_sendmsg+0xa98/0xc70 [ 254.557297][ T8632] ? copy_msghdr_from_user+0x10a/0x160 [ 254.557310][ T8632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.557332][ T8632] ___sys_sendmsg+0x134/0x1d0 [ 254.557345][ T8632] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.557375][ T8632] __sys_sendmsg+0x16d/0x220 [ 254.557388][ T8632] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.557410][ T8632] do_syscall_64+0xcd/0x4c0 [ 254.557426][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.557437][ T8632] RIP: 0033:0x7f476eb8ebe9 [ 254.557446][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.557456][ T8632] RSP: 002b:00007f476fa38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.557466][ T8632] RAX: ffffffffffffffda RBX: 00007f476edc5fa0 RCX: 00007f476eb8ebe9 [ 254.557472][ T8632] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 254.557478][ T8632] RBP: 00007f476fa38090 R08: 0000000000000000 R09: 0000000000000000 [ 254.557484][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.557490][ T8632] R13: 00007f476edc6038 R14: 00007f476edc5fa0 R15: 00007fff384d9c38 [ 254.557504][ T8632] [ 254.822568][ T30] audit: type=1400 audit(1757263363.839:594): avc: denied { read write } for pid=8611 comm="syz.4.648" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 254.846968][ T30] audit: type=1400 audit(1757263363.839:595): avc: denied { open } for pid=8611 comm="syz.4.648" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 254.872389][ T30] audit: type=1400 audit(1757263364.359:596): avc: denied { write } for pid=8625 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.314816][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.343680][ T30] audit: type=1400 audit(1757263365.209:597): avc: denied { read } for pid=8635 comm="syz.4.653" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.642413][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 255.653563][ T5968] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 256.191308][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 256.201860][ T5968] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.219985][ T5968] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d1.54 [ 256.233250][ T5968] usb 2-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 256.302740][ T8659] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 256.381622][ T5968] usb 2-1: Product: syz [ 256.403090][ T5968] usb 2-1: Manufacturer: syz [ 256.426087][ T5968] usb 2-1: SerialNumber: syz [ 256.450133][ T5968] usb 2-1: config 0 descriptor?? [ 256.469252][ T5968] usb 2-1: invalid MIDI EP [ 256.479655][ T8648] "syz.3.645" (8648) uses obsolete ecb(arc4) skcipher [ 256.487027][ T5968] usb 2-1: snd-bcd2000: error during probing [ 256.498744][ T5968] snd-bcd2000 2-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 256.807805][ T24] usb 2-1: USB disconnect, device number 24 [ 257.362105][ T8690] FAULT_INJECTION: forcing a failure. [ 257.362105][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 257.380833][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.1.664 Not tainted syzkaller #0 PREEMPT(full) [ 257.380858][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 257.380868][ T8690] Call Trace: [ 257.380874][ T8690] [ 257.380881][ T8690] dump_stack_lvl+0x16c/0x1f0 [ 257.380908][ T8690] should_fail_ex+0x512/0x640 [ 257.380930][ T8690] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 257.380960][ T8690] should_failslab+0xc2/0x120 [ 257.380980][ T8690] __kmalloc_cache_noprof+0x6a/0x3e0 [ 257.381006][ T8690] ? nfnl_err_add+0x4e/0x350 [ 257.381037][ T8690] nfnl_err_add+0x4e/0x350 [ 257.381064][ T8690] nfnetlink_rcv_batch+0xc95/0x2330 [ 257.381095][ T8690] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 257.381130][ T8690] ? avc_has_perm_noaudit+0x149/0x3b0 [ 257.381177][ T8690] ? __nla_parse+0x40/0x60 [ 257.381212][ T8690] nfnetlink_rcv+0x3c1/0x430 [ 257.381229][ T8690] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 257.381253][ T8690] netlink_unicast+0x5aa/0x870 [ 257.381280][ T8690] ? __pfx_netlink_unicast+0x10/0x10 [ 257.381300][ T8690] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 257.381330][ T8690] netlink_sendmsg+0x8d1/0xdd0 [ 257.381357][ T8690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.381390][ T8690] ____sys_sendmsg+0xa98/0xc70 [ 257.381418][ T8690] ? copy_msghdr_from_user+0x10a/0x160 [ 257.381438][ T8690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.381475][ T8690] ___sys_sendmsg+0x134/0x1d0 [ 257.381498][ T8690] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.381553][ T8690] __sys_sendmsg+0x16d/0x220 [ 257.381574][ T8690] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.381612][ T8690] do_syscall_64+0xcd/0x4c0 [ 257.381638][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.381657][ T8690] RIP: 0033:0x7f99bbf8ebe9 [ 257.381671][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.381688][ T8690] RSP: 002b:00007f99ba1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.381704][ T8690] RAX: ffffffffffffffda RBX: 00007f99bc1c5fa0 RCX: 00007f99bbf8ebe9 [ 257.381715][ T8690] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 257.381725][ T8690] RBP: 00007f99ba1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.381735][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.381745][ T8690] R13: 00007f99bc1c6038 R14: 00007f99bc1c5fa0 R15: 00007ffe0b36ce88 [ 257.381770][ T8690] [ 257.625762][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.840550][ T5968] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 258.085918][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.151861][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.133154][ T5968] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.163791][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.231484][ T5968] usb 4-1: config 0 descriptor?? [ 259.317868][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 259.317886][ T30] audit: type=1400 audit(1757263369.169:609): avc: denied { accept } for pid=8694 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 259.787589][ T8707] page: refcount:515 mapcount:0 mapping:ffff8880232deaa0 index:0x200 pfn:0x44400 [ 259.797409][ T8707] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 259.805914][ T8707] aops:hugetlbfs_aops ino:5408 dentry name(?):"anon_hugepage" [ 259.813392][ T8707] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 259.822226][ T8707] page_type: f4(hugetlb) [ 259.826447][ T8707] raw: 00fff000000000c1 ffffea0001128008 ffffea0001118008 ffff8880232deaa0 [ 259.835010][ T8707] raw: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 259.843574][ T8707] head: 00fff000000000c1 ffffea0001128008 ffffea0001118008 ffff8880232deaa0 [ 259.852224][ T8707] head: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 259.860874][ T8707] head: 00fff00000000009 ffffea0001110001 0000000000000000 0000000000000000 [ 259.869525][ T8707] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 259.878169][ T8707] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 259.885427][ T8707] page_owner tracks the page as allocated [ 259.891761][ T8707] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 8348, tgid 8344 (syz.1.578), ts 234234215774, free_ts 15316467843 [ 259.912159][ T8707] post_alloc_hook+0x1c0/0x230 [ 259.916925][ T8707] get_page_from_freelist+0x132b/0x38e0 [ 259.922473][ T8707] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 259.928365][ T8707] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 259.934155][ T8707] alloc_hugetlb_folio+0xed4/0x1560 [ 259.939338][ T8707] hugetlb_fault+0x1bce/0x2f40 [ 259.944086][ T8707] handle_mm_fault+0xbfa/0xd10 [ 259.948839][ T8707] __get_user_pages+0x551/0x34a0 [ 259.953758][ T8707] populate_vma_page_range+0x267/0x3f0 [ 259.959199][ T8707] __mm_populate+0x1d8/0x380 [ 259.963772][ T8707] vm_mmap_pgoff+0x37f/0x470 [ 259.968342][ T8707] ksys_mmap_pgoff+0x1c8/0x5c0 [ 259.973086][ T8707] __x64_sys_mmap+0x125/0x190 [ 259.977740][ T8707] do_syscall_64+0xcd/0x4c0 [ 259.982225][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.988097][ T8707] page last free pid 1 tgid 1 stack trace: [ 259.993881][ T8707] __free_frozen_pages+0x7d5/0x10f0 [ 259.999062][ T8707] free_contig_range+0x183/0x4b0 [ 260.003989][ T8707] destroy_args+0x794/0xc10 [ 260.008478][ T8707] debug_vm_pgtable+0x1a32/0x3640 [ 260.013480][ T8707] do_one_initcall+0x120/0x6e0 [ 260.018239][ T8707] kernel_init_freeable+0x5c2/0x910 [ 260.023420][ T8707] kernel_init+0x1c/0x2b0 [ 260.027739][ T8707] ret_from_fork+0x5d4/0x6f0 [ 260.032309][ T8707] ret_from_fork_asm+0x1a/0x30 [ 260.037144][ T8707] ------------[ cut here ]------------ [ 260.042573][ T8707] kernel BUG at mm/filemap.c:154! [ 260.047584][ T8707] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 260.053978][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 260.063154][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 260.073188][ T8707] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 260.079334][ T8707] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 260.098923][ T8707] RSP: 0018:ffffc9000bbc7310 EFLAGS: 00010046 [ 260.104969][ T8707] RAX: 0000000000080000 RBX: ffffea0001110000 RCX: ffffc90014503000 [ 260.112919][ T8707] RDX: 0000000000080000 RSI: ffffffff81f26f5e RDI: ffff888030414cc4 [ 260.120891][ T8707] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 260.128846][ T8707] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880232deaa0 [ 260.136837][ T8707] R13: ffffea0001110030 R14: 0000000000000240 R15: ffffea0001110000 [ 260.144788][ T8707] FS: 00007fb3551f06c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 260.153702][ T8707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.160272][ T8707] CR2: 00007fb3551eff98 CR3: 0000000030395000 CR4: 00000000003526f0 [ 260.168263][ T8707] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 000000000000000a [ 260.176214][ T8707] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.184163][ T8707] Call Trace: [ 260.187419][ T8707] [ 260.190331][ T8707] filemap_remove_folio+0xf1/0x250 [ 260.195427][ T8707] remove_inode_hugepages+0x74a/0xed0 [ 260.200782][ T8707] ? kernel_text_address+0x8d/0x100 [ 260.205963][ T8707] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 260.211848][ T8707] ? up_write+0x1b2/0x520 [ 260.216160][ T8707] hugetlbfs_fallocate+0xf3f/0x12e0 [ 260.221340][ T8707] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 260.226962][ T8707] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 260.232574][ T8707] ? vfs_fallocate+0x5b1/0x10e0 [ 260.237405][ T8707] vfs_fallocate+0x5b1/0x10e0 [ 260.242059][ T8707] ? __pfx_vfs_fallocate+0x10/0x10 [ 260.247147][ T8707] ? madvise_vma_behavior+0x2b20/0x2d60 [ 260.252676][ T8707] madvise_vma_behavior+0x2ad7/0x2d60 [ 260.258028][ T8707] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 260.263813][ T8707] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 260.269517][ T8707] ? __pfx_mas_prev+0x10/0x10 [ 260.274177][ T8707] ? find_vma_prev+0xda/0x160 [ 260.278836][ T8707] ? __pfx_find_vma_prev+0x10/0x10 [ 260.283927][ T8707] ? page_table_check_set+0x627/0x750 [ 260.289283][ T8707] madvise_walk_vmas+0x31f/0x9c0 [ 260.294203][ T8707] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 260.299645][ T8707] madvise_do_behavior+0x1e2/0x530 [ 260.304738][ T8707] ? __pfx_madvise_do_behavior+0x10/0x10 [ 260.310351][ T8707] ? down_read+0x13d/0x480 [ 260.314752][ T8707] ? __lock_acquire+0x62e/0x1ce0 [ 260.319677][ T8707] do_madvise+0x176/0x240 [ 260.324001][ T8707] ? __pfx_do_madvise+0x10/0x10 [ 260.328852][ T8707] ? handle_mm_fault+0x2ab/0xd10 [ 260.333781][ T8707] ? do_user_addr_fault+0x843/0x1370 [ 260.339046][ T8707] __x64_sys_madvise+0xa9/0x110 [ 260.343881][ T8707] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.349062][ T8707] do_syscall_64+0xcd/0x4c0 [ 260.353549][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.359419][ T8707] RIP: 0033:0x7fb357b8ebe9 [ 260.363810][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.383396][ T8707] RSP: 002b:00007fb3551f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 260.391785][ T8707] RAX: ffffffffffffffda RBX: 00007fb357dc6450 RCX: 00007fb357b8ebe9 [ 260.399734][ T8707] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 260.407681][ T8707] RBP: 00007fb357c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 260.415628][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.423574][ T8707] R13: 00007fb357dc64e8 R14: 00007fb357dc6450 R15: 00007ffd020f3c78 [ 260.431535][ T8707] [ 260.434531][ T8707] Modules linked in: [ 260.438403][ T8707] ---[ end trace 0000000000000000 ]--- [ 260.443830][ T8707] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 260.449970][ T8707] Code: 17 1f c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 4a 1a c9 ff 85 ed 7e 17 e8 01 1f c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 ea 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 260.469555][ T8707] RSP: 0018:ffffc9000bbc7310 EFLAGS: 00010046 [ 260.475599][ T8707] RAX: 0000000000080000 RBX: ffffea0001110000 RCX: ffffc90014503000 [ 260.483547][ T8707] RDX: 0000000000080000 RSI: ffffffff81f26f5e RDI: ffff888030414cc4 [ 260.491496][ T8707] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 260.499444][ T8707] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880232deaa0 [ 260.507393][ T8707] R13: ffffea0001110030 R14: 0000000000000240 R15: ffffea0001110000 [ 260.515351][ T8707] FS: 00007fb3551f06c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 260.524275][ T8707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.530843][ T8707] CR2: 00007fb3551eff98 CR3: 0000000030395000 CR4: 00000000003526f0 [ 260.538796][ T8707] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 000000000000000a [ 260.546829][ T8707] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.554778][ T8707] Kernel panic - not syncing: Fatal exception [ 260.561131][ T8707] Kernel Offset: disabled [ 260.565428][ T8707] Rebooting in 86400 seconds..