last executing test programs: 12.710316581s ago: executing program 4 (id=1984): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0xa) chmod(&(0x7f0000000000)='./file0\x00', 0x44) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.116270951s ago: executing program 4 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd3d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 11.070313738s ago: executing program 4 (id=1991): syz_init_net_socket$ax25(0x3, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000"], 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r0 = syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0416000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f90", 0x81}], 0x1}}], 0x2, 0x44088) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 7.696502483s ago: executing program 4 (id=2000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000140)={0x1, 0xffffffff, 0x4e2, 0xffff, 0x9, 0xd8}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000d70b024d564b"]) 6.938122601s ago: executing program 2 (id=2005): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0xa) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/97) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000001440)={&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000240)="d4522a8f920154bf2d90932a6b4c43e1db3b1d429bbdfe270710c3dce2613185e23c14e20a5b9b6afc2d0b81e96ca37eb3fb9149e9a3331cf859cb0ec54efc83d9269533e06fb8fe37c8a5425b9992e127ec5505dc294ca93d026a8a0cf3aca0a1e58bf831dd913a83e3f93a3b76522c91129f8e34dc7b0c9a50c42e9eb92f51285f9d05969ad617d36b558e0a24aa4e9117f8fea7fd5e0831b5dbd733e98f83adb7745135050bdb113048596746ffb13d5697085a02db49affbadde361ffba63b0eaee26ee27c2bebdb7c5eaad9b14e3315c2a427101de843d55f60127b3d6856d20894e49df0c08c36d2ae578d04eea2d50a1001c6de31c07b2264dd0b1e0f44b86a17d7d313605f2af50dede818aab460ea68330bedad69c776f7c5b8ca5d25b68d9aae047f2280503cdfdff35941cae8687e2ef1e304b9e3757cdace868b29be3dcf3d5d911fe823156266155a599233739fedd71e38f286758f82ffac45029859c8dffdc04c5e15e8b09bd49c1289313f8cf865e0347610247c1eec6c83e83daf48762200372b00f90a8e69fdd33d33bf7dc4f5cb8317dd8d7720541c21e36d1faaf415d8d752dddacf96f2dd3229bfbba8e58028167892108402bba19f6a870e7040ed606594506092183972bf73cdbf7e4cf2e4eda86abd7fb19231ed4ca12d3551b6572e6f4d00df704f9af3b62cbe7082cad71163ae0266e09e8c422de1727c2a8b40b8d3b0e9e02a55df1f37fcf8618e1a1f14a0454d909affd4eded06c8b60af167559ccb9133f2e70af256f9a249ca0923dc98efa73ff4da9287efb4a17f36232a327444d7eafebe161ac22de56ca9f96295632c105021dd392eacbcc205a041974bc986b1e1dcc5e188801fdaf485dd25c75d22f2cb11cc597e4e9d134ae894cfdc6281910ee8c26a1f7f7a8699eca93ff891f60ebf598becd7fad266a0ec7df4024bbd1fe910b236440e3973fcd441bf16dabd68e7c243927f18b5b7ec8676baacfa72cd4bfa54e833b10915434dbcf9fbb5587efe4c478a9b1e10d25619220ab859fef9c7a35ce1c304459fd533afbf89e34a2434c9ffd347aa2b7ef4758ea5e841ac086aacdf50c998c5eacc7e06d5efb3808e1fff26fb1a2ee6df66440a450bf01da3f86a4b4d0802b0abefc728daaa2afb2ba4af305060c45e8e87e7bacab0136b9effccf9c9355dfac4a2461555eaad96a9b5f61dcd5bd32d45bd3fbc5ac2bf593afe383988ed8f9625f6118def0013407d7699a722063f0dba89f90400a5189901d2be6b0e2467b61b423bcc9888bfd7fe6cdc6f4d93debc49c3f67ec9281ca65975d4b3e47f0a6d7154770bb6e689c14ca1e9bdf739dc670152f9948e1d2cc36d03bb5e551cb05841af5166ab31bd1feeec3866d8d17061528b654df325fbaf630d68491bc8cfde8e974be4a62195e775191cc07ec43024f094eb0c871266be19bb26a632fd0665d463749ea51e7b52300a264e7fba50a7362bbadf6b69401413a65972e56ee8ee652b5928f8ee75ad9c558a9c399aa930e5fca61e5649f82bda9bf34a23078d83cf1151becc2d5e16d17e9d583bf716cf76ef2e86cd289a9677d40ad53c0558cb8fd3d75fd1fa070ce9d4fd0d2775f4574c30e778e28bcba574705ea4997900e25784921ce19995c0d8f5ac51f2fed80936516665fe0ccd97c2fc2af38a10c1c429f3bd59132d542df67a520ee2903bcc7211960e577f6c3aa32967ca467859b75c87301f5ceb3f1f8e7fd015dda3b9c4a22a4321420db34e2dd7aea286584bf6fa3f35a546841c0a6ebd985520159a367e7b153fe7f1deb5d086cc53048cfea320c5d6ab2361d0cfa5dcfeb9254bb2be525ada2f4b9f90489e2a5f0e8131c365ea83e7b4da21c2be1360eee40e037fbb447f4d63e051ec6e7540b16b5f3ddf490618ac65a739931d5fa39bc791ce320b77449ff7a60dd966807e5eee21d3bc019cf5f5037681a929b677fa06f06bec3732d3dd1c6ac118ab0454204a152a259f461458c1230d86f74924a0ae045ed78e693e3e5cccf40433bfa5ee76864ff89cab7c66bb50aca3774cb819f84e5d3d068168af181bd2868e2b2fb4dafb712661c2849f850f6abfeab13dd08ad085861340558c30c4758540f14deade394559d507def6dbaa02e5b1bb0a46fc36651495baf1bdffcd632b758043707cd42a830c8af686cb2670b32b57b944c38ce1f400f51a5964c84f243dd2613b53d5d6a3f46da4c0866108be7f35d69137e0f19316f150d1dbd9d6d026cb7ba90aacdde10d539063f48476386288920030309062cfdef12533780ef7add8864acec49834076fece3441622600970a6ccdea8717bf32c56d5606db695bcd010e9e075d95952628bfbd50ae06fb4008ef059e4be5a0b9bec32ae0a1b3861933d6ec3b591e2a6a0bbfd0a8a2a0bd6b15dfd2a6d9d1f6f8cda0334e3eb431b4b578e56fda629cdda58c8801223de7062283cdc50efc87391aafc8210db0f345a0fe16903d168dd97d3716dc959355e369e9edddc124e8f276d44f5e8779aa7aee6fed10df7293d88784ad02d219022f0d251520c10f7f61d2005dd4a92ab5654bf848a3ce59950872539b650086eb3bda37619f78e9a451eb1c503931457ec57e37918902be88d5526f51860f5e03fe364d0ca1f4714608969cf4ae6632b09e954e505bc2e348394b49c489548dd9d8ad73f701977568662491c2ee3a66afe34cfb54e106cd76576130aaf823074a91cbef4f8e4f5949ed1b0efdc27f74fe4f5b2fa5097c40860244852dae89e3998052e040091e79d5aeb3fb2a41864918c54104b1efe299ebb6581dd79b68c14fa92465e7fc2eadd5ba0b87433412bcee3c583735106768e0e87ea6b208f97d35958fabde5c8db5fd11cd6303d62ce8cf5032514252dd5affa0c8e2994a18cefe660c8de4d2e4bfeaaa6379065a3b3b0bb51a5ad4dc43371ba7abda614480a7c5c9324495510c2f9daa51356fe2cd5495f00a882b05e5064a123158d700678c613f79ee0af7da5c0a37f1226c27c8b6b618354e0a5f5a2539e560f34f5bb998e83c32d1871e7b12e2a9dee186597ba86b0fec52b1546bd6bc42a23cf7d37a226a0d5c5079540a382c8b648efe38552564024c6c8a1d6c603e82e34a47452605ad777f5e22ae1f994e652497bcae8e04b111f4ffdc898c5ef0c46cf84c8c6786d013221eef490791ccb113ae24b2f4c49e40a7c26d3581c3c40e79b8e7f13b0e0ce72b5dc581060812afbba99763cc8f96696c6be7277aa82008c1ae1bb686da53e53005081c34c453bd40fc20c80e5a83a3eef1edcf35818d9036fb8a389812412e48e81fe3d8ca60364773fb6f0573ed76b758e4d2678a090ae17812057613380fe9f865ec2ade08b0f680a76e7a02074f9f56feda7a6e3491cc9e353e40cad5c34d4a7edb5ec9971bf5ced7f8867f0e34247b854578001b650d7a5686d066e445475de22a4e0038a75f02763928e8f7d844edd97c12931d7efab614fd966923aa4f591e8e8ea268c51fe7f8ad77e69442b5cfb9f59157c299aef911113c67ed6e95fc0173fef4c515663fe676f3177a1d1e86ffe6067de93de1be9647ba4f566a3ff740ac9edba0df0d778b5776295d5816c06741c19c1a5724d9481147561fe959ac7505a14046e3f3fbef91ff9f9fa4e9f1f4eaa6107aabcb288799994df3a819c6ee1c6d1b4b89178a2face5765e99657df8874cc9b2eedcf97cf4ec3b097d2285a5728864abc67de55e4efe45737a512c4b33471a7ec1938fcac03d787813cd8429e38a6518980ad2f860794c8fe01e1226b2027a6132e6671358a05c384088c9cc916505aa7caa6d6d13eb7666eecd6253d720882279f03602ddc58a2861b64fe5a3c82ccb0ea156eddda44c7158f859b868b3c897d9c86f43b2466012c7244cee25087401a18b35529cc99777d9b147406d4abb3777426e0350a95d14c67d87eafa2e23094dcceff6fb7d2e51a2c6ca04ad0ccd6e942954bca15d23a0dcb6396e86eb0ff14efee187d626087804e9263601649214b3dc30885728cfb2c1b3d93b0c7c72d18e49efdb8c5e279e9b7a770c7fd02129b541ff7b5abae26d79f73aff0e9f6f696e88645d4974729475d919bd201ab86d6d7489abe519423aa38f69388ff79ac7cfcdc447d91ab12c5715bb436f6507f54f83951b8082ba7ac8d83e05ff8c72a0a8a6d1d618dc9dd2ff997d9c342b6e108bf4cc72e337237640e7235e8ea5393918faa7948cefccd9b7b8a51a60120cbe97ace6852ea88a1fbea3672507324ad49d989057ca2144944742a982663523e90f2bd1cc2303adecbf27a3618e7d73529689b8973c49913569a447040d8d3ba1f403e1dd8d5490c890fbd548935f65827e7c11f22497f166669c602effeebda9a0381002b44e03670df0ea9a34f639a77ae3b2b77b6e92ecd158a3cf318a65b0c34ce03795cbb491de82bb139b4b80f0272ccd56f184084a743a6e7cc09aa9c69e37c085949f846bfe125e1f5e70619c6159542b9b84b8e724a57443ee90623692f8455de1271e59362df3c7b08aa0811cc9b33200f6d153d046c0b542b93f517da213c6b253e60af5854ee024a8c7349e71430b6128ba9dd76d32669599240adc98c577c20557e0a73be28894d52aa4c97a9546fe6b287a3dd0ca293771937dbaf4abf9082659951d011f4ae77bef90937c88f5b7a97a9caa118b7a92069fed52cc8c965cb66202eba999fadc3a583a534ae1bf81d9d5e9c0faa44dfc5be74f4aedcfc43884bab88aa38a952773e06f24e58abccc5bb5dd18453157d4f03da0f9d8e70360d883596a5943aded6483b37da333dba4b41d57589897682058aa25198be96eb42524d4f0ada8e567d09bf8b57fbfa6abad07995514585f83e085157891d1bb446b378a9afdd080b05161f08082c3d1bc18b5b9c3ad3a73a7d1a465c31c450decf3644b4b0b35df54b2229de9e1ff6d4b34f85be40f327efadd0634a9181d2824b3536e1d30a5b25e3060e3c890e09e927321bef6628f51fdacca7a385e9625d9b8d5f1426bd6b9a5aa224c148ccac4c595f9592e8a9d4376559c6b955fff6c3cdb1fbb83dd600a2fcb4fa8e80a611976299029cb90b3fa1cd8e8ffd739d010680bf9848d382fbb70472084d7eb3599f58d28f20b3425f0ca4b6cff9b06a1bdb07a387504cba6cfc55842c42aa260135d020ded0db16d412b190677b75f70c130358cbe533dd12ac795eb28a13b7e0e06a58b9b7160cca8c4257a4c20d57273e4bf04158a3fae9d45bd97fff92b595d29d75808e34ebd020b1602254d60ba699d70aa844c8ec0c5bf38d1db8280633681f53dd885a9880679fe78b0c5aa6793fccf90e67e322e90ef6c79778e0d33b8bced9a880391748452c07703dc1dfec1b5a0dc57dcfa3a3fdc9e3de733eb90972cab0cb63813212972d50bafee38538d18ab90fede7d7ac1ec3d8a2aecd85b6094e778e728b63405a343d61c31ad72331ece1a4755ae1958cf377db26a7c80de7b807627654751573d03c4eb7983d44db04f1246031a8f1d6ca9ebf06c240c69573b06e286804638d65545a590b738ccd9bf04f99697ac497b835369c2a91ef2ab062f4db9077bdd86bed53606610fb692b16e163f0bf5f42cb484af21bb824ecf9a9c2c5acb97838d836e81d8e03eba25ad30b26226fcaa668ec98fd8814c5f1dbac8032cd3f6e12e695dfb577bff275bb6da3e863e9eefd705f73e30854113310468e5fac681a2716471e2196fb88813e4683575d41224d5c4c", 0x1000}, {&(0x7f0000001240)="fefbada7b5aa005176de21180f3f0f378e97d9a80f657b16de275db9572e581ed959eb2010784fe00ec75aef27233330a008013f8459617ce68923614379ebd123c04a6308d00b9e500170599a1a600f0926a975171b8933c0107015f5fd9684448a9d3b99840d0a05df", 0x6a}, {&(0x7f00000012c0)="571506b90393466e68abff69a65f415fe2db001d0aef679d8c08a5a91c91264733aa3a2b9770e949aac75d8b2ec24b733bd214bfaf543bbb3695a64fcc04f89a41fb5d36942b9080f90e7f18b5cdbc057993449039bcc339a3e63df7827b37d0680df49427c949a792b310e0ebe771981ff36d57a05dce7425b9f52d7530551521803b2f935c23519e325a953d76019646", 0x91}], 0x3, &(0x7f00000013c0)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5276}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x60}, 0xc800) r3 = socket$alg(0x26, 0x5, 0x0) sendto(r3, &(0x7f0000001480)="5b71c91cbd2187a003076b2bd6dbe7049378c52cb52ad1813acbbe3f1b5829869fae414eca53380e5919197bf059407a9cbb46573ec1cff3e11bbc1515574a876ce4b624a330d240259bbcc2520bd5e1f40f40c3db9ca323fcb2234ef7d00c13e7ea3b360f09016eda72471350774cbfff3c73fefffe99", 0x77, 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) preadv(r2, &(0x7f0000001600)=[{&(0x7f0000001500)=""/220, 0xdc}], 0x1, 0x9a, 0x81) r4 = socket$unix(0x1, 0x2, 0x0) r5 = accept4(r4, &(0x7f0000001640)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000016c0)=0x80, 0xc0000) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000001700)=0xf773, 0x4) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001740)=[{}, {}], &(0x7f0000001780)=0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000017c0)={0x2, 0x3}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000001880)={0x0, 0x0, 0xf, r6, 0x2}, 0xc) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000018c0)) connect$inet6(r5, &(0x7f0000001900)={0xa, 0x4e23, 0x4, @mcast1, 0x9}, 0x1c) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000001940)=0xfffffffb) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000001980)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000001a00)=@attr_other={0x0, 0x387d8087, 0xffffffffffff1f7b, &(0x7f00000019c0)=0xc}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x108, &(0x7f0000001a40)=0x7, 0x0, 0x4) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000001ac0)=@usbdevfs_connect={0x8001}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001b00)={'wlan0\x00', 0x1000}) 6.797570328s ago: executing program 2 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x80ff}, 0x94) 6.53541658s ago: executing program 2 (id=2008): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0xa0, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x48, 0x1, {{'sha512-neon\x00'}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0xa7b}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) 5.54052287s ago: executing program 1 (id=2013): mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x5, 0x0) 5.427356178s ago: executing program 1 (id=2014): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(0x0, 0xfffffffffffffffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) listen(r0, 0x10000) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') recvmsg$kcm(r2, 0x0, 0x0) 4.904912361s ago: executing program 1 (id=2017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd3d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4.654679824s ago: executing program 0 (id=2019): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800000000000000000b000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 4.005646145s ago: executing program 2 (id=2020): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000a00000000000000fdffffffd40a000020000002950000000000000022d70825872c21cf77be7770506e540c51b814d1f9f87e3a8d7d202d0b94e7dfdd181ef9a9350e02c743b95852af59162444d862e4951aea9c65"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf000}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 4.004227845s ago: executing program 0 (id=2021): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000001"], 0x40}, 0x0) 3.826269668s ago: executing program 0 (id=2022): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x5000000, 0x0, 0x4000850}, 0x24000840) 3.810354305s ago: executing program 1 (id=2023): keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r4, r3}}, 0x18) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) faccessat(r5, &(0x7f0000000140)='./file0\x00', 0x102) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x80605414, 0xffffffffffffffff) 3.145565753s ago: executing program 4 (id=2024): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c0400000000003c0012800b000100697036746e6c00002c00028014000300fc02000000000000000000000000000014000200fc0100000000000000000000000006e311d826fef6005605ac8f5ba8f3196410dcc503009a4a97f8c656077159711b8d85638763b746ff3f4349a36fb7def54733cc023936a60d51fc883c09a3174ef04db1d262cf7bec9c91461862b1ecb506947a8d7ce9335ce6cc76462b272eb529febb2e80eec9753e6694139db14d129bb3c1f3f9ffef85e742ec7a1dde2c14e253dbe01845e729740644037a042fbc2b4d5c9a2be8c4349775fcbad78c"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)}, {&(0x7f0000000740)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313ab54967b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf2", 0x81}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="ff", 0x1}, {&(0x7f00000003c0)="04626eff6b00000000000000e965366c1f9500f5889b20ea1db50000000000000000000075916f2caacbc761691eceb77a134d7ea2851030c44ae28b4bd4a200607be7b95e2175a5cac5a80a4242e3864fff06", 0x53}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40488e1) 2.663412078s ago: executing program 0 (id=2025): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x470, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_ACT={0x438, 0x2, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x0, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x4, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x40000007, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x70, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x0, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0x0, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0xfffffffd, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (rerun: 32) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRESDEC=r9], 0x4c}}, 0x2) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r12 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() 2.660524668s ago: executing program 3 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b580000000f000020000700ff7ffffbfffffff0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000d4094da126914610d6864e85003ee9ee", @ANYRES32=0x0, @ANYBLOB="1301975784800000140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffff7f3f0f0000010000008100000028000100090000001b0600000000010081000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e23, @loopback}}) 1.821921787s ago: executing program 4 (id=2027): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, "c8"}, @global=@item_4={0x3, 0x1, 0x8, "2a9aad4f"}]}}, 0x0}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1.689126292s ago: executing program 3 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x13}, 0x94) 1.466245564s ago: executing program 3 (id=2029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:7-', @ANYRESOCT]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$sndctrl(0x0, 0x0, 0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40440) 1.378027234s ago: executing program 0 (id=2030): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x6, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$link(0x8, r3, r3) keyctl$search(0xa, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, r0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, 0x0, 0x4000010) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100)=0x47, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x190}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) 746.511006ms ago: executing program 1 (id=2031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfffff000}, 0x94) 473.962391ms ago: executing program 1 (id=2032): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000080), &(0x7f0000000dc0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040041, &(0x7f00000001c0)={0xa, 0x4, 0x398, @empty, 0xa9e1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(r1, 0x1) syz_usb_connect(0x5, 0xcda, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x57, 0x95, 0xf8, 0x8, 0x461, 0xa00, 0x797e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc8, 0x4, 0xa2, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xa5, 0xb, 0x7, 0x8a, 0x9e, 0x83, 0x5, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x5, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x7, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xb4, 0x3, 0x9}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4a, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x81}]}}, {{0x9, 0x5, 0xe, 0x4, 0x800, 0x40, 0x5, 0x6}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x10, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x8}]}}]}}, {{0x9, 0x4, 0x2c, 0xff, 0xb, 0x8a, 0xb5, 0x3d, 0xf, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '~'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x81, 0xc}, [@mdlm={0x15, 0x24, 0x12, 0x16a}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim={0xc, 0x24, 0x1b, 0x11, 0x0, 0x0, 0x9, 0x5, 0x4}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}, @mdlm_detail={0x5b, 0x24, 0x13, 0x67, "3c5cb0d2ec9fecc6395b75626c53377f505b0efeaf0a7e778ab34a1fdf7fa72c27d722315621f311fc28cadef25f4a04d8f1c4670dfc56d4161e467e9c5341c9ce1c3e392625957e85f1f407fd5074b42a4a229abf4ee7"}]}, @uac_as], [{{0x9, 0x5, 0xb, 0x2, 0x400, 0x8, 0x5, 0x7, [@generic={0x6b, 0xe, "a3ab7a9b0a53f2de890924b592942c618bbea562c2826e744ac9497e2c6970b50392758685dadd51b4ce87807eb5f4bad9ece6a00c426c10d5a754766e154bfd0cfd7560373ac15c581333169d64342bc19554dcd47a9fcf8d8982eb98e377ec9d084b708217284a21"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x3c, 0xb, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}, @generic={0xb9, 0x21, "6bd96db27fe30d40b7b6a0e3bfd14069663bd2aa6d3e6e1de49937b15bebdf69a8baabf6a2f7d144a0574e4ff4fb20dd5c983c0ed4ee9a6e50993a3b2761b44ebaf71833ede32585c132e14f1e3b47ed37eb6f01a97a057f2acb66b30ea48af88ea6a25391425a71321d4c674dd4096115c503f4712b0fa0a707b4f9d6f7342f520d856c1dedd1dfadba45dc8246eb26ef62598c68e3361e871ee2e57629cb3ba4bffd643a98179f0d5829fc862377978cec2a8deddee0"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x5, 0x3f, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4e}, @generic={0xf3, 0x8, "8ff38c808250637b0d71cb7fa5a777989b9f5a0225c08bd9301a526faa39bbbbaf4953ca938a73a18244b6ea83e0ca2b7863d76d320394c9f8fe31d0e78e243626754a309e6d5af086007582d616ba0e2e988349f12434ccb059dad28667ccb7929c29819d37d54bbe77af366e68eaeef0a62b8206c27f2e74207e6c1b87fd6906ccc28d6948c6cd9d327ec8ec3c2da2823a9768106c9ffba1cfaa968c56a956bb0fa6e3557dbd00be0c66e900a91e1e7308513399cf62c47cde9c02f2b9933097a429f831d3165d91702305b14a1917c4327bb22ad022394f5dd5952558ce3abf6a91ace61138ecfb3e01a6c4ae1497f5"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x3, 0x1, 0xf, [@generic={0xc5, 0x30, "1ff004905d64631c9315a1e610dd194d0bac835369d3f1694c9b432806918ba443fb0ab70588c7306c4de7c385afceae79f81b59b9a7c5232195f931439775c7bb500cace174f342f028c1ad7c9189a9dad4b06f2b1a3ceda29f6200da989e82d10dfc1a638fa0162296e4929dfdc7a719ce7e681c9e4978203a77dbbb5cfbbae20108c4943216a73446d6701dbcedd29e814bc00af283c34119586589ac637f4823b4ccb0f0e18f4fc172044aaca5ccecaf2bcab2a563087f972409cf3999d9dbcb56"}, @generic={0xac, 0x23, "e2204d92d88a6816d2a4c1bc15bb28c7274ec8ca6e2f1ad27168cde2686e12fb2f5a361274f8dddf29d2e4a20fdfd2aec40a13519f17d5ab9b726127fd048333bd8c320fe9a834486d4c447d9a498820c7f343c4517ac22eab62232daf722819aa4d3a3499a09ef1a724ad34db092320ca5553dcb2c29c25ec6683711d5bb08985b2c6e7d943c9c2d72c861b6bdb8bc81bafa15214820bef03dfd554f8a852e8b6ca6e2212235352b304"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x9, 0xf7, [@generic={0xe2, 0xd, "d1b562de59b90fe1219e4fda25939159507ad4b581e626e339ca079b64031e58cc7d3f689d87516e25fb60d0aa36ce2d61718563e796398160a678fed530549562a6dad91b4a31b932d42c37c1683018656b77376d0ba346876fed27385b69760187e11a4d63f306753875bc7c2bc49d363f7777d8bc3ce668fda945cfa124ab4015c8b6ae6fb7023223f8921e03719d4bd508f3b274d955fc3e7501305226d2414667ea371db4d9e87c434d5db2a79fddfce05054e421e265eeeaf26a5cd8816836289459e6ade807ca48591f3c8fa3af807c71d8f9c9ef5dc1065e59d6d13e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xfa, 0x0, [@generic={0x35, 0x21, "2285a6b615e3f23aad39f977105aeb43b8bcf64ebf0540cf7efcf0ddd5901985a9b547c721fef3a3357b6362d2069a4ef888f3"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xd5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x3, 0xd, 0x10, 0xf, 0x4, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x9, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0xbf6}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x0, 0x0, 0x1f, [@generic={0xd2, 0xd, "d2488141167978d10ac91a84ff8c2e2ab9415b654e688e42690ea689c4c192c0fc3d583bc7e6529eda94c7264fd9939ffe3b97cc08997a26e6620e77165c1ed2d79aa9699ac12a01f175eef4954bab6c790ee89dcd632e84fd5118b22b87d60406b959a2a78e4480d30d3d6f2f3445c2e8fda7ed964688bdf6810a75052a966db6682dbc53f40e763d4ff03ea2314c167f93b6bd3a32294203bc39cfdeb8b5f408b43463b9d2fa3466f825f2cfaa0a3ce5c1c6b8723d4843d2733517216e8ffa3874a5614781d799e4df8bf7f6278361"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x8, 0x5, [@generic={0xb9, 0xc, "e74f46c618b4e4b37c03646bf7525c88d7a44da3024e2dd8d5b5ae702b09e3d5aa8b3151ad93e614d8a14825ada788cad10dbd2705359a8b8aec9a1a42253f286f19365b12cac8daf511a2a5fa13f1b6f2fd3ec6a175dc8aa05514fdf5054781ff19c4f19d0e3e05ee9b938f54e24621bfab8b11293ce1c248bf7650f16693854f52092d4c04c45e4791b2efb4b8457b612cfd6dd7d73131bbaff121361ce157f6839d8c27035090a973f7186c77c53289ff86e14c28af"}]}}]}}, {{0x9, 0x4, 0xe5, 0x3, 0x4, 0xd7, 0x7e, 0x94, 0xe, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x1, 0x8}, [@country_functional={0x12, 0x24, 0x7, 0x8, 0x4, [0x7, 0x6, 0x16, 0x1, 0x5, 0xff]}]}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0xbb, 0xa, 0x1}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0xff, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x1, 0x3, 0x4}}]}}, {{0x9, 0x4, 0x9a, 0x81, 0xd, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x3, 0x4, 0x20, 0x5, 0xf, 0x40, [@generic={0x13, 0x22, "ca82d9fc6e542152f5e6b764ea0cf38a40"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x62, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4d5c}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x1, 0x8, [@generic={0xaa, 0x30, "3a856e4786ca9abb3d63756c758850728b23cfb999d53c8458cf7ae6d0281c354588a6814a5edf620d902ae11eec91d6154116d85e65332165a7c2bcba6e0fb3daee4ae57574bdd69f1a0a4d773bc68b16869d5ab6e5d441a99efce04b38f0f7181754d83039e252ebd7a02cf3b1e6a516a2da3936612087d8c3c96d8130d318cd820cc8188ed5754d7aaa9da9c65c4248d68fc90d59e12f1b9423258a29cb679eb9dd20ac2a2e52"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0xc, 0x57, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0xd, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xd, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe06}, @generic={0xb9, 0x5, "2812700d6a4859d4dcb255546cf50bd97b687c2c388a5555e17b0e1ea766151a47cc73ec20a35f8796eb29e4156ffb0ce31f78678eb41f92f62961f5954390cad97d27bfbadc04c20fc15ca495516e344bf673fad829197de911a4d8c872e50273be8cf123e28681f0afc1109e3c89eb15a293590890de1b4444e3eb5f4fc7e6807e2f18156a0b8a462f6712dcdfe911a2a1cadf3ff5194a8b1e818f2f5c4283a200c9520b2dfc1c2b43bbb0cfbeef880b9ac183339373"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x7, 0x7, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0x8, 0x5}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x93, 0x9, 0x8, [@generic={0xe1, 0x7, "e959a8a4d5adb9c18ca7ae17159f9bf5c330d9acdde4f5de71f37ed0ac5e824f9401b8013f4261afc33632199b5f45bf4e50dcf0228d68900cba84f85fff5f2c145f8caf3f5b94c1700a0cead78dc53079fb01d6bc74ccd52436cd74dca4f66319ce1f94a764b99ffac8c0a1f966e361c967090d8323de1f5fa1f52fcac0b1cf957cc6e40bbb25c554e3b0b634064d1081fa2623fb7f28f35c4986450b6a32a84487df76db49b30787385ee6ba1a034291efa6067206f377e80a351a898d2e4d45c6985e116a2bc591673ea9516f6b14214ad3785da592e30b8cf20fc699bc"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x5, 0x1e, 0x5, [@generic={0x63, 0x3, "ea4941ccb3ba90ac0d73c2bf28770926b6e9bb0261041a6e9e14d496dda8b5e8fa54087b73f923bf41d11542c472b5cdb89936c5fe40bee579b08fd1da67db584ce9e10421d6a2e0177121041f59381c999f605e525ff5ba3aa5c881bfc46fcaa7"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x1, 0x1, 0x6f, [@generic={0x35, 0x3, "ea03fa861031210cc5014c18be911f8e96f2e78826cd3a99325ba659b290b8365b8ac5ea1f2b2c2ef92d84bbb2a89d88ad54c0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x82, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x2, 0x0, 0xe0, [@generic={0xf3, 0x5, "79826e1157979ac87c5267c7b7fb28d058b366dfa491bd74e7fc6702ca6a068706c1f3f416890ee303c0da8b1028f26c449ec15060031b664af277ba7868cf0598513500f1bf8fbee2634a8f2f86c19f141c69f5467d455431d1e8390b5227040f597082a8c281884d5151c6a9a8b0b192315bfc74659b3723f1f647ed5262c342cb83551de53af6b63dd3aa062d237ed83ed6037b992070c15320d16e62b42784259420e0c0234abf885fb389818db19b629a64b3dcd56fd795fd7ff4b5dfdcfbc476f369c66dcd62dd910577f8877a03f12e8c51724fbe7c45971b20554cca797706ee6fad6491cac1a73b1db00a48f6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfffb}]}}]}}]}}]}}, 0x0) 302.293292ms ago: executing program 3 (id=2033): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800000000000000000c000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 201.212288ms ago: executing program 2 (id=2034): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)="85574b793d3510f7f8e2495f3bfc6696ab2cdccea538e29f5df58f6651650c3da2912d79ec240d152706f302a326095894f43d2b63d1841dd5b574cc47ee60c2adab2dfd77cbf0f1ff018b4844ac1392eda3124c837698e5620ac33e8addfb6d794aa6e27afbd334e8a90c9cc5e2e9a0514f064e5b51a756d096f45ce4fcf909b56ce2785de60d3a9597d58bea584a358ebd092d7186b4acee0059528868231f1f671e39e17a6ed3a6bcb0995e60afaaeb5ac41335df8b663ebda827dd1452bb3f3460bbbf935ed747e08cf4f2e1c34782f57e8eb9507cb4feb21ab3600acbe5", 0xe0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400080c) syz_emit_ethernet(0xda, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00083c0020010000000000000000000000000002ff020000000000000000000000000001670000000000000000000000009c90780100000000000000ec9623abcc4bd2ceffa36fadcd9330abb76fa7040ef919fc7b0f9b0da2e9e9296e35f0c80882f70000c08862205573dd2a5eb2f85b400000000000000000000000000000000000000000000000000000da1274d5285d85f9776ed87dab0d73f66c063c8bc0ea74bd2ef59e05b69bcf4bd1856a7a3a60c503f240ae8f00"/218], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/120, 0x78}, &(0x7f0000000380), 0x22}}], 0x30}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802ae2e97cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f8fbd71ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r4 = io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0x4655, 0x40, 0x2, 0x4800020}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r5, 0xa) close_range(r4, 0xffffffffffffffff, 0x200000000000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) 65.70303ms ago: executing program 2 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x95ff}, 0x94) 25.033282ms ago: executing program 0 (id=2036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x5480, &(0x7f00000006c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$^\x93'}}]}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 24.531624ms ago: executing program 3 (id=2037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4000001}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x300, 0x0, 0x75, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 3 (id=2038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40804) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000"], 0x50) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) close(r0) kernel console output (not intermixed with test programs): 0x480 [ 461.924392][T11391] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 461.924401][T11391] ? interval_tree_iter_first+0x1a5/0x250 [ 461.924418][T11391] ? iopt_area_contig_init+0x137/0x300 [ 461.924433][T11391] iommufd_access_rw+0x256/0x500 [ 461.924452][T11391] ? __pfx_iommufd_access_rw+0x10/0x10 [ 461.924474][T11391] iommufd_test+0x4447/0x61e0 [ 461.924491][T11391] ? __pfx_iommufd_test+0x10/0x10 [ 461.924505][T11391] ? find_held_lock+0x2b/0x80 [ 461.924517][T11391] ? __might_fault+0xe3/0x190 [ 461.924532][T11391] ? __might_fault+0xe3/0x190 [ 461.924546][T11391] ? __might_fault+0x13b/0x190 [ 461.924567][T11391] iommufd_fops_ioctl+0x34d/0x540 [ 461.924583][T11391] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 461.924600][T11391] ? hook_file_ioctl_common+0x145/0x410 [ 461.924618][T11391] ? selinux_file_ioctl+0x180/0x270 [ 461.924630][T11391] ? selinux_file_ioctl+0xb4/0x270 [ 461.924642][T11391] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 461.924658][T11391] __x64_sys_ioctl+0x18e/0x210 [ 461.924678][T11391] do_syscall_64+0xcd/0xfa0 [ 461.924690][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.924700][T11391] RIP: 0033:0x7f0cc0d8f6c9 [ 461.924710][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.924720][T11391] RSP: 002b:00007f0cc1b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.924730][T11391] RAX: ffffffffffffffda RBX: 00007f0cc0fe5fa0 RCX: 00007f0cc0d8f6c9 [ 461.924737][T11391] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 461.924743][T11391] RBP: 00007f0cc1b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.924749][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.924755][T11391] R13: 00007f0cc0fe6038 R14: 00007f0cc0fe5fa0 R15: 00007fffdba95ab8 [ 461.924769][T11391] [ 462.440513][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 462.457878][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 462.460181][ T30] audit: type=1400 audit(1762556406.134:884): avc: denied { ioctl } for pid=11399 comm="syz.1.1518" path="net:[4026533081]" dev="nsfs" ino=4026533081 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.279652][T11417] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 463.414315][T11418] gretap1: entered promiscuous mode [ 463.423907][T11413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1517'. [ 463.571422][ T30] audit: type=1400 audit(1762556407.144:885): avc: denied { connect } for pid=11425 comm="syz.3.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 463.680287][T11432] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 463.958447][T11435] loop6: detected capacity change from 0 to 524288000 [ 464.072328][ T30] audit: type=1400 audit(1762556407.684:886): avc: denied { getopt } for pid=11436 comm="syz.3.1525" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.415690][T11456] FAULT_INJECTION: forcing a failure. [ 464.415690][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 464.443292][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.3.1532 Not tainted syzkaller #0 PREEMPT(full) [ 464.443316][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.443326][T11456] Call Trace: [ 464.443332][T11456] [ 464.443338][T11456] dump_stack_lvl+0x16c/0x1f0 [ 464.443378][T11456] should_fail_ex+0x512/0x640 [ 464.443399][T11456] ? __kmalloc_cache_noprof+0x5f/0x780 [ 464.443427][T11456] should_failslab+0xc2/0x120 [ 464.443447][T11456] __kmalloc_cache_noprof+0x72/0x780 [ 464.443469][T11456] ? net_generic+0xea/0x2a0 [ 464.443486][T11456] ? ip_set_create+0x346/0x14d0 [ 464.443509][T11456] ? ip_set_create+0x346/0x14d0 [ 464.443528][T11456] ip_set_create+0x346/0x14d0 [ 464.443551][T11456] ? __pfx_ip_set_create+0x10/0x10 [ 464.443589][T11456] ? find_held_lock+0x2b/0x80 [ 464.443618][T11456] nfnetlink_rcv_msg+0x9fc/0x1200 [ 464.443650][T11456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 464.443673][T11456] ? __lock_acquire+0x622/0x1c90 [ 464.443723][T11456] ? avc_has_perm_noaudit+0x149/0x3b0 [ 464.443753][T11456] netlink_rcv_skb+0x158/0x420 [ 464.443778][T11456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 464.443800][T11456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.443838][T11456] ? ns_capable+0xd7/0x110 [ 464.443858][T11456] nfnetlink_rcv+0x1b3/0x430 [ 464.443877][T11456] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 464.443895][T11456] ? netlink_deliver_tap+0x1ae/0xd30 [ 464.443923][T11456] netlink_unicast+0x5aa/0x870 [ 464.443950][T11456] ? __pfx_netlink_unicast+0x10/0x10 [ 464.443982][T11456] netlink_sendmsg+0x8c8/0xdd0 [ 464.444011][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.444046][T11456] ____sys_sendmsg+0xa98/0xc70 [ 464.444064][T11456] ? copy_msghdr_from_user+0x10a/0x160 [ 464.444085][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.444110][T11456] ___sys_sendmsg+0x134/0x1d0 [ 464.444133][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.444153][T11456] ? __lock_acquire+0x622/0x1c90 [ 464.444206][T11456] __sys_sendmsg+0x16d/0x220 [ 464.444229][T11456] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.444269][T11456] do_syscall_64+0xcd/0xfa0 [ 464.444287][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.444314][T11456] RIP: 0033:0x7f9357b8f6c9 [ 464.444328][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.444343][T11456] RSP: 002b:00007f9355dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.444360][T11456] RAX: ffffffffffffffda RBX: 00007f9357de5fa0 RCX: 00007f9357b8f6c9 [ 464.444377][T11456] RDX: 0000000000040080 RSI: 0000200000000100 RDI: 0000000000000003 [ 464.444387][T11456] RBP: 00007f9355dee090 R08: 0000000000000000 R09: 0000000000000000 [ 464.444396][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.444407][T11456] R13: 00007f9357de6038 R14: 00007f9357de5fa0 R15: 00007ffec1499198 [ 464.444434][T11456] [ 464.768224][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 464.781808][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 465.544861][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 465.552435][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 465.869628][T11474] x_tables: ip_tables: osf match: only valid for protocol 6 [ 466.062569][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1540'. [ 466.216671][T10938] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 466.396727][T10938] usb 4-1: Using ep0 maxpacket: 8 [ 466.404797][T10938] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 466.413920][T10938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.422131][T10938] usb 4-1: Product: syz [ 466.426291][T10938] usb 4-1: Manufacturer: syz [ 466.431706][T10938] usb 4-1: SerialNumber: syz [ 466.438492][T10938] usb 4-1: config 0 descriptor?? [ 466.448300][T10938] gspca_main: se401-2.14.0 probing 047d:5003 [ 466.454423][T10926] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 466.643983][T10926] usb 1-1: config 0 has an invalid interface number: 62 but max is 0 [ 466.652187][T10926] usb 1-1: config 0 has no interface number 0 [ 466.660439][T10926] usb 1-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=1b.48 [ 466.671912][T10926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.679995][T10926] usb 1-1: Product: syz [ 466.684291][T10926] usb 1-1: Manufacturer: syz [ 466.688950][T10926] usb 1-1: SerialNumber: syz [ 466.694888][T10926] usb 1-1: config 0 descriptor?? [ 466.702889][T10926] snd-usb-caiaq 1-1:0.62: can't set alt interface. [ 466.709477][T10926] usb 1-1: unable to init card! (ret=-5) [ 466.715711][T10926] snd-usb-caiaq 1-1:0.62: probe with driver snd-usb-caiaq failed with error -5 [ 467.363701][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.373970][T11502] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 467.382335][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.441575][T10926] usb 1-1: USB disconnect, device number 27 [ 467.573443][ T30] audit: type=1400 audit(1762556411.145:887): avc: denied { mounton } for pid=11508 comm="syz.2.1547" path="/291/file1" dev="autofs" ino=34200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 467.698738][T10938] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 467.947231][ T30] audit: type=1400 audit(1762556411.491:888): avc: denied { ioctl } for pid=11519 comm="syz.1.1551" path="socket:[34885]" dev="sockfs" ino=34885 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 468.285462][ T30] audit: type=1400 audit(1762556411.641:889): avc: denied { map } for pid=11519 comm="syz.1.1551" path="socket:[34212]" dev="sockfs" ino=34212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.343408][ T30] audit: type=1400 audit(1762556411.641:890): avc: denied { read } for pid=11519 comm="syz.1.1551" path="socket:[34212]" dev="sockfs" ino=34212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.393973][ T30] audit: type=1400 audit(1762556411.837:891): avc: denied { ioctl } for pid=11519 comm="syz.1.1551" path="socket:[34887]" dev="sockfs" ino=34887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 468.437732][ T30] audit: type=1400 audit(1762556411.884:892): avc: denied { map } for pid=11519 comm="syz.1.1551" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.484835][ T30] audit: type=1400 audit(1762556411.884:893): avc: denied { ioctl } for pid=11519 comm="syz.1.1551" path="socket:[34212]" dev="sockfs" ino=34212 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.502049][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 468.531879][T10938] gspca_se401: read req failed req 0x06 error -71 [ 468.539660][T10938] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 468.551466][T10938] usb 4-1: USB disconnect, device number 28 [ 468.575937][ T30] audit: type=1400 audit(1762556411.977:894): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 468.603888][ T30] audit: type=1400 audit(1762556412.108:895): avc: denied { write } for pid=11536 comm="syz.2.1554" name="mouse0" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 469.088151][T11559] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 469.187940][T11558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.507843][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1564'. [ 470.630322][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 470.630322][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 471.272595][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 471.272924][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 471.654972][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1569'. [ 472.781557][T11616] ip6tnl5: entered allmulticast mode [ 472.887217][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 473.456506][T11638] FAULT_INJECTION: forcing a failure. [ 473.456506][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 473.510317][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.3.1582 Not tainted syzkaller #0 PREEMPT(full) [ 473.510343][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.510353][T11638] Call Trace: [ 473.510358][T11638] [ 473.510364][T11638] dump_stack_lvl+0x16c/0x1f0 [ 473.510394][T11638] should_fail_ex+0x512/0x640 [ 473.510412][T11638] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 473.510434][T11638] should_failslab+0xc2/0x120 [ 473.510454][T11638] __kvmalloc_node_noprof+0x141/0x9c0 [ 473.510472][T11638] ? hash_ipportip_create+0x459/0x1250 [ 473.510496][T11638] ? hash_ipportip_create+0x459/0x1250 [ 473.510514][T11638] hash_ipportip_create+0x459/0x1250 [ 473.510536][T11638] ? __pfx_hash_ipportip_create+0x10/0x10 [ 473.510556][T11638] ip_set_create+0x7e4/0x14d0 [ 473.510583][T11638] ? __pfx_ip_set_create+0x10/0x10 [ 473.510623][T11638] ? find_held_lock+0x2b/0x80 [ 473.510653][T11638] nfnetlink_rcv_msg+0x9fc/0x1200 [ 473.510683][T11638] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 473.510706][T11638] ? __lock_acquire+0x622/0x1c90 [ 473.510756][T11638] ? avc_has_perm_noaudit+0x149/0x3b0 [ 473.510789][T11638] netlink_rcv_skb+0x158/0x420 [ 473.510814][T11638] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 473.510835][T11638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.510873][T11638] ? ns_capable+0xd7/0x110 [ 473.510896][T11638] nfnetlink_rcv+0x1b3/0x430 [ 473.510915][T11638] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 473.510931][T11638] ? netlink_deliver_tap+0x1ae/0xd30 [ 473.510958][T11638] netlink_unicast+0x5aa/0x870 [ 473.510985][T11638] ? __pfx_netlink_unicast+0x10/0x10 [ 473.511016][T11638] netlink_sendmsg+0x8c8/0xdd0 [ 473.511044][T11638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.511076][T11638] ____sys_sendmsg+0xa98/0xc70 [ 473.511093][T11638] ? copy_msghdr_from_user+0x10a/0x160 [ 473.511115][T11638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.511142][T11638] ___sys_sendmsg+0x134/0x1d0 [ 473.511166][T11638] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.511185][T11638] ? __lock_acquire+0x622/0x1c90 [ 473.511251][T11638] __sys_sendmsg+0x16d/0x220 [ 473.511275][T11638] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.511315][T11638] do_syscall_64+0xcd/0xfa0 [ 473.511334][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.511351][T11638] RIP: 0033:0x7f9357b8f6c9 [ 473.511365][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.511382][T11638] RSP: 002b:00007f9355dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.511398][T11638] RAX: ffffffffffffffda RBX: 00007f9357de5fa0 RCX: 00007f9357b8f6c9 [ 473.511409][T11638] RDX: 0000000000040080 RSI: 0000200000000100 RDI: 0000000000000003 [ 473.511420][T11638] RBP: 00007f9355dee090 R08: 0000000000000000 R09: 0000000000000000 [ 473.511429][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.511439][T11638] R13: 00007f9357de6038 R14: 00007f9357de5fa0 R15: 00007ffec1499198 [ 473.511465][T11638] [ 473.830516][T11635] fuse: Invalid rootmode [ 473.838588][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1584'. [ 474.128651][T11657] FAULT_INJECTION: forcing a failure. [ 474.128651][T11657] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 474.169978][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.2.1586 Not tainted syzkaller #0 PREEMPT(full) [ 474.170006][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 474.170016][T11657] Call Trace: [ 474.170022][T11657] [ 474.170029][T11657] dump_stack_lvl+0x16c/0x1f0 [ 474.170062][T11657] should_fail_ex+0x512/0x640 [ 474.170083][T11657] ? temp_kmalloc+0xac/0x260 [ 474.170111][T11657] pfn_reader_user_pin+0x20c/0x10b0 [ 474.170144][T11657] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 474.170178][T11657] pfn_reader_next+0x92a/0x1600 [ 474.170217][T11657] ? __pfx_pfn_reader_next+0x10/0x10 [ 474.170243][T11657] ? __batch_init+0x1f0/0x2a0 [ 474.170267][T11657] ? __pfx___batch_init+0x10/0x10 [ 474.170291][T11657] ? interval_tree_iter_first+0x1a5/0x250 [ 474.170322][T11657] pfn_reader_first+0x491/0x640 [ 474.170352][T11657] iopt_pages_rw_slow+0xc4/0x3c0 [ 474.170383][T11657] ? __pfx_iopt_pages_rw_slow+0x10/0x10 [ 474.170410][T11657] ? __lock_acquire+0xb8a/0x1c90 [ 474.170479][T11657] iopt_pages_rw_access+0x38f/0x980 [ 474.170502][T11657] ? down_read+0x13d/0x480 [ 474.170521][T11657] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 474.170538][T11657] ? interval_tree_iter_first+0x1a5/0x250 [ 474.170563][T11657] ? iopt_area_contig_init+0x137/0x300 [ 474.170586][T11657] iommufd_access_rw+0x256/0x500 [ 474.170618][T11657] ? __pfx_iommufd_access_rw+0x10/0x10 [ 474.170655][T11657] iommufd_test+0x4447/0x61e0 [ 474.170686][T11657] ? __pfx_iommufd_test+0x10/0x10 [ 474.170710][T11657] ? find_held_lock+0x2b/0x80 [ 474.170730][T11657] ? __might_fault+0xe3/0x190 [ 474.170756][T11657] ? __might_fault+0xe3/0x190 [ 474.170779][T11657] ? __might_fault+0x13b/0x190 [ 474.170815][T11657] iommufd_fops_ioctl+0x34d/0x540 [ 474.170841][T11657] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 474.170869][T11657] ? hook_file_ioctl_common+0x145/0x410 [ 474.170901][T11657] ? selinux_file_ioctl+0x180/0x270 [ 474.170920][T11657] ? selinux_file_ioctl+0xb4/0x270 [ 474.170939][T11657] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 474.170966][T11657] __x64_sys_ioctl+0x18e/0x210 [ 474.170993][T11657] do_syscall_64+0xcd/0xfa0 [ 474.171012][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.171029][T11657] RIP: 0033:0x7f69e238f6c9 [ 474.171044][T11657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.171061][T11657] RSP: 002b:00007f69e3275038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.171077][T11657] RAX: ffffffffffffffda RBX: 00007f69e25e5fa0 RCX: 00007f69e238f6c9 [ 474.171089][T11657] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 474.171099][T11657] RBP: 00007f69e3275090 R08: 0000000000000000 R09: 0000000000000000 [ 474.171110][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.171119][T11657] R13: 00007f69e25e6038 R14: 00007f69e25e5fa0 R15: 00007ffcdf563708 [ 474.171145][T11657] [ 474.529101][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.538195][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.661637][T11672] bond4: entered allmulticast mode [ 474.666901][T11672] syztnl1: entered allmulticast mode [ 474.682606][T11672] ip6tnl1: entered allmulticast mode [ 474.726216][T11672] bond5: left promiscuous mode [ 474.731061][T11672] bond5: entered allmulticast mode [ 474.745779][T11672] ip6tnl2: entered allmulticast mode [ 474.753676][T11672] ip6tnl3: entered allmulticast mode [ 474.760461][T11672] bridge3: entered allmulticast mode [ 474.778194][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 474.796421][T11675] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 474.817849][T11679] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 474.839228][ T30] audit: type=1400 audit(1762556417.936:896): avc: denied { read write } for pid=11680 comm="syz.1.1595" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 474.877750][ T30] audit: type=1400 audit(1762556417.936:897): avc: denied { open } for pid=11680 comm="syz.1.1595" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 474.938715][ T55] usb 4-1: device descriptor read/64, error -71 [ 475.188508][T11693] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 475.248591][ T3461] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 475.451742][ T55] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 475.601451][ T55] usb 4-1: device descriptor read/64, error -71 [ 475.719385][ T55] usb usb4-port1: attempt power cycle [ 476.093152][ T55] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 476.115243][ T55] usb 4-1: device descriptor read/8, error -71 [ 476.277794][T11706] FAULT_INJECTION: forcing a failure. [ 476.277794][T11706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 476.291821][T11706] CPU: 0 UID: 0 PID: 11706 Comm: syz.1.1603 Not tainted syzkaller #0 PREEMPT(full) [ 476.291843][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.291853][T11706] Call Trace: [ 476.291860][T11706] [ 476.291866][T11706] dump_stack_lvl+0x16c/0x1f0 [ 476.291890][T11706] should_fail_ex+0x512/0x640 [ 476.291906][T11706] should_fail_alloc_page+0xe7/0x130 [ 476.291920][T11706] prepare_alloc_pages+0x3c2/0x610 [ 476.291935][T11706] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 476.291960][T11706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 476.291985][T11706] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.292001][T11706] ? policy_nodemask+0xea/0x4e0 [ 476.292015][T11706] alloc_pages_mpol+0x1fb/0x550 [ 476.292028][T11706] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 476.292044][T11706] alloc_pages_noprof+0x131/0x390 [ 476.292057][T11706] pte_alloc_one+0x1e/0x350 [ 476.292070][T11706] __pte_alloc+0x6d/0x380 [ 476.292081][T11706] ? __pfx___pte_alloc+0x10/0x10 [ 476.292091][T11706] ? __lock_acquire+0x622/0x1c90 [ 476.292111][T11706] do_pte_missing+0x282c/0x3ba0 [ 476.292126][T11706] ? mtree_range_walk+0x718/0xc00 [ 476.292142][T11706] ? find_held_lock+0x2b/0x80 [ 476.292156][T11706] __handle_mm_fault+0x1556/0x2aa0 [ 476.292175][T11706] ? __pfx___handle_mm_fault+0x10/0x10 [ 476.292202][T11706] handle_mm_fault+0x589/0xd10 [ 476.292221][T11706] __get_user_pages+0x54e/0x3530 [ 476.292238][T11706] ? down_read_killable+0x220/0x4b0 [ 476.292250][T11706] ? arch_stack_walk+0xa6/0x100 [ 476.292262][T11706] ? __pfx___get_user_pages+0x10/0x10 [ 476.292280][T11706] __gup_longterm_locked+0x2dd/0x17e0 [ 476.292308][T11706] ? __pfx___gup_longterm_locked+0x10/0x10 [ 476.292332][T11706] ? sanity_check_pinned_pages+0x23/0x11d0 [ 476.292348][T11706] gup_fast_fallback+0xee2/0x22a0 [ 476.292371][T11706] ? __pfx_gup_fast_fallback+0x10/0x10 [ 476.292391][T11706] pin_user_pages_fast+0xa7/0xf0 [ 476.292404][T11706] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 476.292418][T11706] ? temp_kmalloc+0xac/0x260 [ 476.292435][T11706] pfn_reader_user_pin+0xcd0/0x10b0 [ 476.292454][T11706] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 476.292479][T11706] pfn_reader_next+0x92a/0x1600 [ 476.292502][T11706] ? __pfx_pfn_reader_next+0x10/0x10 [ 476.292518][T11706] ? __batch_init+0x1f0/0x2a0 [ 476.292533][T11706] ? __pfx___batch_init+0x10/0x10 [ 476.292548][T11706] ? interval_tree_iter_first+0x1a5/0x250 [ 476.292566][T11706] pfn_reader_first+0x491/0x640 [ 476.292584][T11706] iopt_pages_rw_slow+0xc4/0x3c0 [ 476.292603][T11706] ? __pfx_iopt_pages_rw_slow+0x10/0x10 [ 476.292618][T11706] ? __lock_acquire+0xb8a/0x1c90 [ 476.292653][T11706] iopt_pages_rw_access+0x38f/0x980 [ 476.292666][T11706] ? down_read+0x13d/0x480 [ 476.292677][T11706] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 476.292687][T11706] ? interval_tree_iter_first+0x1a5/0x250 [ 476.292703][T11706] ? iopt_area_contig_init+0x137/0x300 [ 476.292716][T11706] iommufd_access_rw+0x256/0x500 [ 476.292735][T11706] ? __pfx_iommufd_access_rw+0x10/0x10 [ 476.292756][T11706] iommufd_test+0x4447/0x61e0 [ 476.292774][T11706] ? __pfx_iommufd_test+0x10/0x10 [ 476.292788][T11706] ? find_held_lock+0x2b/0x80 [ 476.292800][T11706] ? __might_fault+0xe3/0x190 [ 476.292815][T11706] ? __might_fault+0xe3/0x190 [ 476.292829][T11706] ? __might_fault+0x13b/0x190 [ 476.292861][T11706] iommufd_fops_ioctl+0x34d/0x540 [ 476.292886][T11706] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 476.292903][T11706] ? hook_file_ioctl_common+0x145/0x410 [ 476.292921][T11706] ? selinux_file_ioctl+0x180/0x270 [ 476.292932][T11706] ? selinux_file_ioctl+0xb4/0x270 [ 476.292944][T11706] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 476.292960][T11706] __x64_sys_ioctl+0x18e/0x210 [ 476.292976][T11706] do_syscall_64+0xcd/0xfa0 [ 476.292987][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.292997][T11706] RIP: 0033:0x7f0cc0d8f6c9 [ 476.293007][T11706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.293017][T11706] RSP: 002b:00007f0cc1b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.293028][T11706] RAX: ffffffffffffffda RBX: 00007f0cc0fe5fa0 RCX: 00007f0cc0d8f6c9 [ 476.293034][T11706] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 476.293041][T11706] RBP: 00007f0cc1b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 476.293047][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.293053][T11706] R13: 00007f0cc0fe6038 R14: 00007f0cc0fe5fa0 R15: 00007fffdba95ab8 [ 476.293067][T11706] [ 476.731398][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.738895][T11707] netlink: 'syz.0.1602': attribute type 21 has an invalid length. [ 476.746756][T11707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1602'. [ 476.755797][T11707] netlink: 'syz.0.1602': attribute type 4 has an invalid length. [ 476.763522][T11707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1602'. [ 476.773434][ T55] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 476.788123][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 476.788341][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 476.805312][ T55] usb 4-1: device descriptor read/8, error -71 [ 476.911227][ T5137] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 476.930959][ T5824] Bluetooth: hci6: command 0x1003 tx timeout [ 476.938057][ T55] usb usb4-port1: unable to enumerate USB device [ 477.249745][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.288120][T11718] bridge2: entered allmulticast mode [ 478.295721][T11718] bond1: entered allmulticast mode [ 478.308775][T11718] ip6tnl1: entered allmulticast mode [ 478.316606][T11718] ip6tnl2: entered allmulticast mode [ 478.323867][T11718] d: entered allmulticast mode [ 478.330374][T11718] ip6tnl3: entered allmulticast mode [ 478.339093][T11718] bond2: entered allmulticast mode [ 478.344936][T11718] ip6tnl4: entered allmulticast mode [ 478.352603][T11718] ip6tnl5: entered allmulticast mode [ 478.360275][T11718] ipip0: entered allmulticast mode [ 478.366602][T11718] bond3: entered allmulticast mode [ 478.372482][T11718] ¬»: entered allmulticast mode [ 478.568853][T11727] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 479.023859][T11733] gretap1: entered promiscuous mode [ 479.123301][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 479.233143][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 479.325465][ T30] audit: type=1400 audit(1762556422.127:898): avc: denied { read } for pid=11745 comm="syz.2.1614" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 479.490912][ T30] audit: type=1400 audit(1762556422.127:899): avc: denied { open } for pid=11745 comm="syz.2.1614" path="/307/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 479.561771][ T30] audit: type=1400 audit(1762556422.127:900): avc: denied { ioctl } for pid=11745 comm="syz.2.1614" path="/307/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 479.610470][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 479.724583][ T30] audit: type=1400 audit(1762556422.510:901): avc: denied { read write } for pid=11756 comm="syz.4.1617" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 479.801853][ T30] audit: type=1400 audit(1762556422.510:902): avc: denied { open } for pid=11756 comm="syz.4.1617" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 479.919482][T11766] loop6: detected capacity change from 0 to 524288000 [ 479.968958][ T30] audit: type=1400 audit(1762556422.510:903): avc: denied { map } for pid=11756 comm="syz.4.1617" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.241385][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 480.782529][T11779] xfrm1: entered allmulticast mode [ 480.863647][T11779] geneve3: left promiscuous mode [ 480.902833][T11779] bond6: entered allmulticast mode [ 481.611467][T11779] bond7: entered allmulticast mode [ 481.616832][ T79] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 481.625865][ T79] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 481.635798][ T79] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 481.644601][ T79] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 481.880851][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.985053][T11792] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 482.198359][T11795] gretap1: entered promiscuous mode [ 482.540881][T11805] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 482.663568][ T1091] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 482.796131][ T5951] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 482.899459][T11810] FAULT_INJECTION: forcing a failure. [ 482.899459][T11810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 482.914101][T11810] CPU: 0 UID: 0 PID: 11810 Comm: syz.3.1633 Not tainted syzkaller #0 PREEMPT(full) [ 482.914131][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.914141][T11810] Call Trace: [ 482.914147][T11810] [ 482.914154][T11810] dump_stack_lvl+0x16c/0x1f0 [ 482.914186][T11810] should_fail_ex+0x512/0x640 [ 482.914211][T11810] should_fail_alloc_page+0xe7/0x130 [ 482.914232][T11810] prepare_alloc_pages+0x3c2/0x610 [ 482.914256][T11810] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 482.914282][T11810] ? kasan_save_stack+0x33/0x60 [ 482.914297][T11810] ? kasan_save_track+0x14/0x30 [ 482.914313][T11810] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 482.914337][T11810] ? ptlock_alloc+0x1f/0x70 [ 482.914357][T11810] ? pte_alloc_one+0x84/0x350 [ 482.914376][T11810] ? __pte_alloc+0x6d/0x380 [ 482.914390][T11810] ? do_pte_missing+0x282c/0x3ba0 [ 482.914410][T11810] ? __handle_mm_fault+0x1556/0x2aa0 [ 482.914431][T11810] ? handle_mm_fault+0x589/0xd10 [ 482.914452][T11810] ? __get_user_pages+0x54e/0x3530 [ 482.914470][T11810] ? __gup_longterm_locked+0x2dd/0x17e0 [ 482.914488][T11810] ? gup_fast_fallback+0xee2/0x22a0 [ 482.914506][T11810] ? pin_user_pages_fast+0xa7/0xf0 [ 482.914525][T11810] ? pfn_reader_user_pin+0xcd0/0x10b0 [ 482.914549][T11810] ? pfn_reader_next+0x92a/0x1600 [ 482.914573][T11810] ? pfn_reader_first+0x491/0x640 [ 482.914597][T11810] ? iopt_pages_rw_slow+0xc4/0x3c0 [ 482.914621][T11810] ? iopt_pages_rw_access+0x38f/0x980 [ 482.914636][T11810] ? iommufd_access_rw+0x256/0x500 [ 482.914660][T11810] ? iommufd_test+0x4447/0x61e0 [ 482.914678][T11810] ? iommufd_fops_ioctl+0x34d/0x540 [ 482.914702][T11810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 482.914743][T11810] ? __lock_acquire+0xb8a/0x1c90 [ 482.914773][T11810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 482.914798][T11810] ? policy_nodemask+0xea/0x4e0 [ 482.914821][T11810] alloc_pages_mpol+0x1fb/0x550 [ 482.914841][T11810] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 482.914859][T11810] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 482.914880][T11810] ? find_held_lock+0x2b/0x80 [ 482.914904][T11810] folio_alloc_mpol_noprof+0x36/0x2f0 [ 482.914928][T11810] vma_alloc_folio_noprof+0xed/0x1e0 [ 482.914950][T11810] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 482.914981][T11810] do_pte_missing+0x2202/0x3ba0 [ 482.915005][T11810] ? mtree_range_walk+0x718/0xc00 [ 482.915031][T11810] ? find_held_lock+0x2b/0x80 [ 482.915054][T11810] __handle_mm_fault+0x1556/0x2aa0 [ 482.915086][T11810] ? __pfx___handle_mm_fault+0x10/0x10 [ 482.915144][T11810] handle_mm_fault+0x589/0xd10 [ 482.915173][T11810] __get_user_pages+0x54e/0x3530 [ 482.915203][T11810] ? down_read_killable+0x220/0x4b0 [ 482.915222][T11810] ? arch_stack_walk+0xa6/0x100 [ 482.915241][T11810] ? __pfx___get_user_pages+0x10/0x10 [ 482.915269][T11810] __gup_longterm_locked+0x2dd/0x17e0 [ 482.915298][T11810] ? __pfx___gup_longterm_locked+0x10/0x10 [ 482.915325][T11810] ? sanity_check_pinned_pages+0x23/0x11d0 [ 482.915348][T11810] gup_fast_fallback+0xee2/0x22a0 [ 482.915389][T11810] ? __pfx_gup_fast_fallback+0x10/0x10 [ 482.915423][T11810] pin_user_pages_fast+0xa7/0xf0 [ 482.915444][T11810] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 482.915468][T11810] ? temp_kmalloc+0xac/0x260 [ 482.915493][T11810] pfn_reader_user_pin+0xcd0/0x10b0 [ 482.915525][T11810] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 482.915558][T11810] pfn_reader_next+0x92a/0x1600 [ 482.915597][T11810] ? __pfx_pfn_reader_next+0x10/0x10 [ 482.915623][T11810] ? __batch_init+0x1f0/0x2a0 [ 482.915647][T11810] ? __pfx___batch_init+0x10/0x10 [ 482.915670][T11810] ? interval_tree_iter_first+0x1a5/0x250 [ 482.915701][T11810] pfn_reader_first+0x491/0x640 [ 482.915730][T11810] iopt_pages_rw_slow+0xc4/0x3c0 [ 482.915762][T11810] ? __pfx_iopt_pages_rw_slow+0x10/0x10 [ 482.915788][T11810] ? __lock_acquire+0xb8a/0x1c90 [ 482.915849][T11810] iopt_pages_rw_access+0x38f/0x980 [ 482.915870][T11810] ? down_read+0x13d/0x480 [ 482.915888][T11810] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 482.915904][T11810] ? interval_tree_iter_first+0x1a5/0x250 [ 482.915927][T11810] ? iopt_area_contig_init+0x137/0x300 [ 482.915948][T11810] iommufd_access_rw+0x256/0x500 [ 482.915977][T11810] ? __pfx_iommufd_access_rw+0x10/0x10 [ 482.916015][T11810] iommufd_test+0x4447/0x61e0 [ 482.916045][T11810] ? __pfx_iommufd_test+0x10/0x10 [ 482.916069][T11810] ? find_held_lock+0x2b/0x80 [ 482.916090][T11810] ? __might_fault+0xe3/0x190 [ 482.916119][T11810] ? __might_fault+0xe3/0x190 [ 482.916143][T11810] ? __might_fault+0x13b/0x190 [ 482.916179][T11810] iommufd_fops_ioctl+0x34d/0x540 [ 482.916206][T11810] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 482.916234][T11810] ? hook_file_ioctl_common+0x145/0x410 [ 482.916266][T11810] ? selinux_file_ioctl+0x180/0x270 [ 482.916285][T11810] ? selinux_file_ioctl+0xb4/0x270 [ 482.916306][T11810] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 482.916332][T11810] __x64_sys_ioctl+0x18e/0x210 [ 482.916358][T11810] do_syscall_64+0xcd/0xfa0 [ 482.916375][T11810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.916389][T11810] RIP: 0033:0x7f9357b8f6c9 [ 482.916403][T11810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.916416][T11810] RSP: 002b:00007f9355dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.916431][T11810] RAX: ffffffffffffffda RBX: 00007f9357de5fa0 RCX: 00007f9357b8f6c9 [ 482.916441][T11810] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 482.916450][T11810] RBP: 00007f9355dee090 R08: 0000000000000000 R09: 0000000000000000 [ 482.916460][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.916469][T11810] R13: 00007f9357de6038 R14: 00007f9357de5fa0 R15: 00007ffec1499198 [ 482.916493][T11810] [ 483.466985][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.508809][ T5951] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 483.523113][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.533336][ T5951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.542291][ T5951] usb 5-1: config 0 has no interface number 0 [ 483.548950][ T5951] usb 5-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.608679][ T5951] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 483.618499][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.626077][T11816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 483.643785][ T5951] usb 5-1: Product: syz [ 483.671680][ T5951] usb 5-1: Manufacturer: syz [ 483.918663][ T5951] usb 5-1: SerialNumber: syz [ 483.928710][ T5951] usb 5-1: config 0 descriptor?? [ 486.709750][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 487.369885][T10933] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 487.492804][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 487.874396][T10933] usb 1-1: device descriptor read/64, error -32 [ 488.237403][ T5951] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 488.274754][ T5951] cyphidcom ttyUSB0: required endpoint is missing [ 488.315914][ T5951] usb 5-1: USB disconnect, device number 28 [ 488.323328][T10933] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 488.419510][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 488.674778][ T5951] cypress_m8 5-1:0.74: device disconnected [ 489.224892][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.237778][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.330316][ T30] audit: type=1400 audit(1762556431.499:904): avc: denied { create } for pid=11864 comm="syz.3.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 489.359737][T11860] fuse: Bad value for 'group_id' [ 489.365316][T11860] fuse: Bad value for 'group_id' [ 489.380924][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1648'. [ 489.404452][ T30] audit: type=1400 audit(1762556431.527:905): avc: denied { write } for pid=11864 comm="syz.3.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 489.431505][ T30] audit: type=1400 audit(1762556431.537:906): avc: denied { ioctl } for pid=11864 comm="syz.3.1648" path="socket:[35710]" dev="sockfs" ino=35710 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 489.456994][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.707362][T11865] Process accounting resumed [ 489.839174][T11874] loop7: detected capacity change from 0 to 7 [ 489.855593][T11874] Dev loop7: unable to read RDB block 7 [ 489.861447][T11874] loop7: AHDI p1 p2 [ 489.871178][T11874] loop7: partition table partially beyond EOD, truncated [ 489.923146][T11874] loop7: p1 start 1702000233 is beyond EOD, truncated [ 490.248657][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 490.259913][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1652'. [ 492.155919][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1659'. [ 492.635059][T11913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 492.641938][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 492.741724][T11913] vhci_hcd vhci_hcd.0: Device attached [ 492.751818][T11914] usbip_core: unknown command [ 492.756778][T11914] vhci_hcd: unknown pdu 234881024 [ 492.894248][T11914] usbip_core: unknown command [ 493.227501][ T5951] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 493.463597][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 493.479392][ T79] vhci_hcd: stop threads [ 493.493164][ T79] vhci_hcd: release socket [ 493.499214][ T79] vhci_hcd: disconnect device [ 493.505786][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.529870][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.539273][T11927] veth0_vlan: left promiscuous mode [ 493.555462][T11927] veth0_vlan: entered promiscuous mode [ 493.615544][T10926] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 493.786130][T10926] usb 4-1: Using ep0 maxpacket: 32 [ 493.795433][T10926] usb 4-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 493.809237][T10926] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.691955][T10926] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 494.716223][T10926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.731322][T10926] usb 4-1: Product: syz [ 494.735819][T10926] usb 4-1: Manufacturer: syz [ 494.741002][T10926] usb 4-1: SerialNumber: syz [ 494.747486][T10926] usb 4-1: config 0 descriptor?? [ 495.085108][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 495.101541][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1666'. [ 495.261472][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 495.831965][T11949] comedi comedi0: adq12b: I/O port conflict (0x3,16) [ 495.854418][T11951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 496.227487][T10933] usb 4-1: USB disconnect, device number 33 [ 497.875614][T11970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.893976][T11975] 9pnet_fd: Insufficient options for proto=fd [ 497.914399][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 497.934473][ T30] audit: type=1400 audit(1762556439.534:907): avc: denied { create } for pid=11966 comm="syz.4.1675" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 497.959060][ T30] audit: type=1400 audit(1762556439.544:908): avc: denied { link } for pid=11966 comm="syz.4.1675" name="#1d" dev="tmpfs" ino=1705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 498.053298][ T30] audit: type=1400 audit(1762556439.544:909): avc: denied { rename } for pid=11966 comm="syz.4.1675" name="#1e" dev="tmpfs" ino=1705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 498.559194][T11988] affs: No valid root block on device nullb0 [ 498.799991][T10933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 498.956338][ T5951] vhci_hcd: vhci_device speed not set [ 499.686364][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 499.753777][T10933] usb 5-1: config 0 has no interfaces? [ 499.773399][T10933] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 499.908360][T10933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.193964][T10933] usb 5-1: Product: syz [ 500.204800][T10933] usb 5-1: Manufacturer: syz [ 500.224341][T10933] usb 5-1: SerialNumber: syz [ 500.390029][T10933] usb 5-1: config 0 descriptor?? [ 500.607501][T10933] libceph: connect (1)[c::]:6789 error -101 [ 500.617168][T10933] libceph: mon0 (1)[c::]:6789 connect error [ 500.638482][T12010] ceph: No mds server is up or the cluster is laggy [ 501.150561][T10933] libceph: connect (1)[c::]:6789 error -101 [ 501.156777][T10933] libceph: mon0 (1)[c::]:6789 connect error [ 501.744180][T11987] veth0_vlan: left promiscuous mode [ 501.750078][T11987] veth0_vlan: entered promiscuous mode [ 501.789930][ T5951] usb 5-1: USB disconnect, device number 29 [ 502.073817][ T30] audit: type=1326 audit(1762556443.398:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.3.1691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9357b8f6c9 code=0x0 [ 502.199649][T10933] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 502.219776][T12041] input: syz1 as /devices/virtual/input/input18 [ 502.385345][T12040] netlink: 'syz.3.1691': attribute type 12 has an invalid length. [ 502.431561][T10933] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 502.440851][T10933] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 502.455487][T10933] usb 1-1: Product: syz [ 502.464764][T10933] usb 1-1: Manufacturer: syz [ 502.475265][T10933] usb 1-1: SerialNumber: syz [ 502.490437][T10933] usb 1-1: config 0 descriptor?? [ 502.508986][T10933] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 502.519520][T10933] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 503.315287][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 503.372606][T12064] fuse: Unknown parameter '0xffffffffffffffff' [ 503.494640][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.501624][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.705089][ T30] audit: type=1400 audit(1762556444.941:911): avc: denied { map } for pid=12065 comm="syz.4.1701" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 503.771105][ T30] audit: type=1400 audit(1762556444.941:912): avc: denied { execute } for pid=12065 comm="syz.4.1701" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 504.006861][ T30] audit: type=1400 audit(1762556445.231:913): avc: denied { create } for pid=12081 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.089604][ T30] audit: type=1400 audit(1762556445.240:914): avc: denied { allowed } for pid=12077 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 504.141736][ T30] audit: type=1400 audit(1762556445.240:915): avc: denied { create } for pid=12077 comm="syz.1.1705" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 504.196408][ T30] audit: type=1400 audit(1762556445.250:916): avc: denied { write } for pid=12081 comm="syz.3.1707" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.237066][ T30] audit: type=1400 audit(1762556445.250:917): avc: denied { ioctl } for pid=12077 comm="syz.1.1705" path="socket:[37231]" dev="sockfs" ino=37231 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 504.530615][ T30] audit: type=1400 audit(1762556445.306:918): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.570980][ T30] audit: type=1400 audit(1762556445.306:919): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.608617][ T30] audit: type=1400 audit(1762556445.306:920): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.840301][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 505.044102][T10926] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 505.142143][ T55] usb 1-1: USB disconnect, device number 30 [ 505.227245][T10926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.236757][T10926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 505.245721][T10926] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 505.259195][T10926] usb 4-1: config 1 interface 0 has no altsetting 1 [ 505.268432][T10926] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 505.277908][T10926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.286911][T10926] usb 4-1: Product: syz [ 505.291739][T10926] usb 4-1: Manufacturer: Ї [ 505.296305][T10926] usb 4-1: SerialNumber: syz [ 505.313152][T10926] smsusb:smsusb_probe: board id=8, interface number 0 [ 505.524534][ T55] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 505.534684][T10926] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 505.553014][T10926] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 505.566461][T10926] usb 4-1: USB disconnect, device number 34 [ 505.771200][ T55] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 505.810686][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.822061][ T55] usb 1-1: config 0 descriptor?? [ 506.311679][ T55] waltop 0003:172F:0038.000A: item fetching failed at offset 3/5 [ 506.319721][T10933] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 506.320990][ T55] waltop 0003:172F:0038.000A: probe with driver waltop failed with error -22 [ 506.737526][T10933] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.747486][T10933] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.760877][T10933] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.764304][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1723'. [ 506.770258][T10933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.914050][T12141] bond6: entered allmulticast mode [ 507.027030][T10933] usb 5-1: usb_control_msg returned -32 [ 507.033349][T10933] usbtmc 5-1:16.0: can't read capabilities [ 507.133922][T12146] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 507.260042][T10933] usb 1-1: USB disconnect, device number 31 [ 509.140226][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 509.476677][ T30] audit: type=1400 audit(1762556449.973:980): avc: denied { mount } for pid=12166 comm="syz.2.1732" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 509.535321][ T30] audit: type=1400 audit(1762556449.983:981): avc: denied { read } for pid=12166 comm="syz.2.1732" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 509.559932][ T30] audit: type=1400 audit(1762556449.983:982): avc: denied { open } for pid=12166 comm="syz.2.1732" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 509.591709][ T30] audit: type=1400 audit(1762556449.983:983): avc: denied { ioctl } for pid=12166 comm="syz.2.1732" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 509.656298][ T30] audit: type=1400 audit(1762556450.001:984): avc: denied { create } for pid=12166 comm="syz.2.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.680928][ T30] audit: type=1400 audit(1762556450.011:985): avc: denied { write } for pid=12166 comm="syz.2.1732" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 509.710513][ T30] audit: type=1400 audit(1762556450.011:986): avc: denied { ioctl } for pid=12166 comm="syz.2.1732" path="socket:[37507]" dev="sockfs" ino=37507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.231031][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 510.376621][ T30] audit: type=1400 audit(1762556450.843:987): avc: denied { mounton } for pid=12173 comm="syz.0.1735" path="/366/file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 510.432532][T10933] usb 5-1: USB disconnect, device number 30 [ 510.670186][ T30] audit: type=1400 audit(1762556451.030:988): avc: denied { ioctl } for pid=12173 comm="syz.0.1735" path="socket:[36300]" dev="sockfs" ino=36300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.718884][T12185] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 510.783235][ T30] audit: type=1400 audit(1762556451.096:989): avc: denied { unlink } for pid=12173 comm="syz.0.1735" name="#27" dev="tmpfs" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 511.104963][T12193] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 511.926550][T12200] FAULT_INJECTION: forcing a failure. [ 511.926550][T12200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.940254][T12200] CPU: 0 UID: 0 PID: 12200 Comm: syz.3.1739 Not tainted syzkaller #0 PREEMPT(full) [ 511.940278][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.940288][T12200] Call Trace: [ 511.940296][T12200] [ 511.940304][T12200] dump_stack_lvl+0x16c/0x1f0 [ 511.940328][T12200] should_fail_ex+0x512/0x640 [ 511.940343][T12200] _copy_to_user+0x32/0xd0 [ 511.940357][T12200] simple_read_from_buffer+0xcb/0x170 [ 511.940375][T12200] proc_fail_nth_read+0x197/0x240 [ 511.940388][T12200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.940401][T12200] ? rw_verify_area+0xcf/0x6c0 [ 511.940416][T12200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.940428][T12200] vfs_read+0x1e4/0xcf0 [ 511.940439][T12200] ? __pfx___mutex_lock+0x10/0x10 [ 511.940450][T12200] ? __pfx_vfs_read+0x10/0x10 [ 511.940464][T12200] ? __fget_files+0x20e/0x3c0 [ 511.940485][T12200] ksys_read+0x12a/0x250 [ 511.940501][T12200] ? __pfx_ksys_read+0x10/0x10 [ 511.940516][T12200] ? fput+0x9b/0xd0 [ 511.940539][T12200] do_syscall_64+0xcd/0xfa0 [ 511.940553][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.940564][T12200] RIP: 0033:0x7f9357b8e0dc [ 511.940574][T12200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 511.940584][T12200] RSP: 002b:00007f9355dcd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.940594][T12200] RAX: ffffffffffffffda RBX: 00007f9357de6090 RCX: 00007f9357b8e0dc [ 511.940600][T12200] RDX: 000000000000000f RSI: 00007f9355dcd0a0 RDI: 0000000000000007 [ 511.940606][T12200] RBP: 00007f9355dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 511.940612][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.940617][T12200] R13: 00007f9357de6128 R14: 00007f9357de6090 R15: 00007ffec1499198 [ 511.940632][T12200] [ 512.123918][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.366460][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 513.047368][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 513.051120][T12191] Bluetooth: hci5: command 0x1003 tx timeout [ 513.060169][ T5824] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 513.178859][ T5951] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 513.587163][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 513.597458][ T5951] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 513.606688][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.617037][ T5951] usb 4-1: Product: syz [ 513.625669][ T5951] usb 4-1: Manufacturer: syz [ 513.632030][ T5951] usb 4-1: SerialNumber: syz [ 513.638175][ T5951] usb 4-1: config 0 descriptor?? [ 513.838185][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.848726][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.861244][ T5951] usb 4-1: USB disconnect, device number 35 [ 514.564027][ T5951] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 514.836885][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 514.843088][ T30] audit: type=1400 audit(1762556455.240:1016): avc: denied { write } for pid=12229 comm="syz.1.1750" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.056278][ T30] audit: type=1400 audit(1762556455.240:1017): avc: denied { open } for pid=12229 comm="syz.1.1750" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.080329][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.147015][ T30] audit: type=1400 audit(1762556455.249:1018): avc: denied { ioctl } for pid=12229 comm="syz.1.1750" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.172823][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.179258][ T5951] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 515.187621][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.198181][ T5951] usb 5-1: config 0 has no interfaces? [ 515.204869][ T5951] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 515.214254][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.222338][ T30] audit: type=1400 audit(1762556455.352:1019): avc: denied { create } for pid=12229 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 515.255158][ T5951] usb 5-1: config 0 descriptor?? [ 515.484712][ T5951] usb 5-1: USB disconnect, device number 31 [ 515.603117][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 515.614697][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 515.995893][ T30] audit: type=1400 audit(1762556456.437:1020): avc: denied { bind } for pid=12247 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 516.331694][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.458602][ T30] audit: type=1400 audit(1762556456.783:1021): avc: denied { execute_no_trans } for pid=12249 comm="syz.0.1757" path="/370/file0" dev="tmpfs" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 516.689033][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.878452][ T30] audit: type=1400 audit(1762556457.270:1022): avc: denied { read write } for pid=12259 comm="syz.2.1761" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 516.902370][ T30] audit: type=1400 audit(1762556457.270:1023): avc: denied { open } for pid=12259 comm="syz.2.1761" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 516.926160][ T30] audit: type=1400 audit(1762556457.270:1024): avc: denied { write } for pid=12259 comm="syz.2.1761" path="socket:[36403]" dev="sockfs" ino=36403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 517.017448][ T5951] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 517.201460][ T30] audit: type=1400 audit(1762556457.531:1025): avc: denied { ioctl } for pid=12259 comm="syz.2.1761" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 517.434049][ T5951] usb 5-1: Invalid ep0 maxpacket: 64 [ 518.076739][ T5951] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 518.110331][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.140111][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.451877][ T5951] usb 5-1: Invalid ep0 maxpacket: 64 [ 518.556749][ T5951] usb usb5-port1: attempt power cycle [ 518.724118][T12280] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 518.724635][ T13] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 519.154567][T12287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 519.165661][ T5951] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 519.188211][ T5951] usb 5-1: Invalid ep0 maxpacket: 64 [ 519.358187][ T5951] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 519.412629][ T5951] usb 5-1: Invalid ep0 maxpacket: 64 [ 519.418661][ T5951] usb usb5-port1: unable to enumerate USB device [ 519.721095][T12301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.034733][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 522.051524][ T30] audit: type=1400 audit(1762556462.068:1038): avc: denied { bind } for pid=12311 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.180319][ T30] audit: type=1400 audit(1762556462.077:1039): avc: denied { write } for pid=12311 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.241568][T12317] Process accounting paused [ 522.759364][ T30] audit: type=1400 audit(1762556462.760:1040): avc: denied { read write } for pid=12322 comm="syz.3.1779" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 522.786124][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 522.883716][ T30] audit: type=1400 audit(1762556462.760:1041): avc: denied { open } for pid=12322 comm="syz.3.1779" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 522.959025][ T30] audit: type=1400 audit(1762556462.760:1042): avc: denied { ioctl } for pid=12322 comm="syz.3.1779" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 522.987821][ T30] audit: type=1400 audit(1762556462.770:1043): avc: denied { mount } for pid=12322 comm="syz.3.1779" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 523.044584][ T30] audit: type=1400 audit(1762556462.798:1044): avc: denied { ioctl } for pid=12322 comm="syz.3.1779" path="socket:[38237]" dev="sockfs" ino=38237 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 523.265605][T12339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 523.399140][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 523.495536][ T49] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 523.514717][ T30] audit: type=1400 audit(1762556463.443:1045): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 523.994739][T12349] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 524.071147][T12353] nfs4: Unknown parameter 'barrier' [ 524.213444][ T30] audit: type=1400 audit(1762556464.126:1046): avc: denied { setopt } for pid=12360 comm="syz.4.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.001784][ T30] audit: type=1400 audit(1762556464.828:1047): avc: denied { kexec_image_load } for pid=12369 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 525.317457][T12377] loop7: detected capacity change from 0 to 7 [ 525.336333][T12377] Dev loop7: unable to read RDB block 7 [ 525.355614][T12377] loop7: AHDI p1 p2 [ 525.359899][T12377] loop7: partition table partially beyond EOD, truncated [ 525.367163][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 525.379096][T12377] loop7: p1 start 1702000233 is beyond EOD, truncated [ 525.406713][T12381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1793'. [ 525.416549][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 525.483496][T12384] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 525.688988][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.028977][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 526.039902][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 526.116088][T12392] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 526.621158][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1798'. [ 527.118856][T12408] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 527.126718][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1802'. [ 527.674578][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 527.674590][ T30] audit: type=1400 audit(1762556467.353:1056): avc: denied { watch } for pid=12404 comm="syz.3.1801" path="/378/control" dev="tmpfs" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 527.846445][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 527.867742][T10533] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 528.532104][ T30] audit: type=1400 audit(1762556468.148:1057): avc: denied { create } for pid=12420 comm="syz.3.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 528.579130][T10533] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 528.703910][T10533] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 529.141286][T10533] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 529.150366][T10533] usb 5-1: config 1 has no interface number 0 [ 529.157723][T10533] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 529.168998][T10533] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 529.188613][T10533] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 529.213494][T10533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.239183][T10533] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 529.298019][T12435] delete_channel: no stack [ 529.309539][ T30] audit: type=1400 audit(1762556468.887:1058): avc: denied { setopt } for pid=12434 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 529.336766][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.375619][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.717316][ T5951] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 529.738828][ T30] audit: type=1400 audit(1762556469.299:1059): avc: denied { write } for pid=12411 comm="syz.4.1803" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 529.806339][T12444] loop7: detected capacity change from 0 to 7 [ 529.813578][T12444] Dev loop7: unable to read RDB block 7 [ 529.819152][T12444] loop7: AHDI p1 p2 [ 529.823871][T12444] loop7: partition table partially beyond EOD, truncated [ 529.831370][T12444] loop7: p1 start 1702000233 is beyond EOD, truncated [ 529.890604][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.910330][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 529.931029][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 529.978520][ T5951] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 529.988675][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.996818][ T30] audit: type=1400 audit(1762556469.495:1060): avc: denied { remount } for pid=12445 comm="syz.0.1815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 530.017649][ T5951] usb 4-1: Product: syz [ 530.021837][ T5951] usb 4-1: Manufacturer: syz [ 530.026464][ T5951] usb 4-1: SerialNumber: syz [ 530.034727][ T5951] usb 4-1: config 0 descriptor?? [ 530.041941][T12431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 530.123458][T10533] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 530.130869][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 530.302323][T12431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 530.314020][T12458] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 530.373473][T10533] usb 5-1: USB disconnect, device number 36 [ 530.383255][T10533] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 530.612165][ T30] audit: type=1400 audit(1762556470.103:1061): avc: denied { write } for pid=12430 comm="syz.3.1809" name="tcp6" dev="proc" ino=4026532913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 530.637397][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 530.646332][T12461] netlink: 'syz.1.1820': attribute type 2 has an invalid length. [ 530.654083][T12461] netlink: 'syz.1.1820': attribute type 1 has an invalid length. [ 530.661885][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1820'. [ 532.208237][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 532.255126][ T30] audit: type=1400 audit(1762556471.647:1062): avc: denied { write } for pid=12469 comm="syz.1.1821" name="mouse0" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 532.403643][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 532.415245][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'. [ 532.477283][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 533.025146][T10533] usb 4-1: USB disconnect, device number 36 [ 533.574007][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 534.564973][ T30] audit: type=1400 audit(1762556473.714:1063): avc: denied { listen } for pid=12494 comm="syz.3.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 534.598350][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.609272][ T30] audit: type=1400 audit(1762556473.835:1064): avc: denied { ioctl } for pid=12496 comm="syz.1.1829" path="socket:[38660]" dev="sockfs" ino=38660 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 534.639919][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.659253][ T30] audit: type=1400 audit(1762556473.835:1065): avc: denied { write } for pid=12496 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 534.684784][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'. [ 534.876465][ T30] audit: type=1400 audit(1762556474.097:1066): avc: denied { create } for pid=12496 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 534.942669][ T30] audit: type=1400 audit(1762556474.097:1067): avc: denied { ioctl } for pid=12496 comm="syz.1.1829" path="socket:[38670]" dev="sockfs" ino=38670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.096490][ T30] audit: type=1400 audit(1762556474.097:1068): avc: denied { bind } for pid=12496 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.116195][ T30] audit: type=1400 audit(1762556474.097:1069): avc: denied { connect } for pid=12496 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.199283][ T30] audit: type=1400 audit(1762556474.097:1070): avc: denied { write } for pid=12496 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.908008][T12512] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 536.051290][ T3461] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 536.346744][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1836'. [ 536.387031][T12520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1836'. [ 536.997624][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 537.604135][T12523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.366026][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 538.426732][T12526] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1838'. [ 538.469020][ T30] audit: type=1400 audit(1762556477.455:1071): avc: denied { read } for pid=12525 comm="syz.1.1838" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 538.492142][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.668006][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.679168][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.837347][ T30] audit: type=1400 audit(1762556477.455:1072): avc: denied { open } for pid=12525 comm="syz.1.1838" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 538.885729][T12533] xt_bpf: check failed: parse error [ 539.941024][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 540.333104][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.440825][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 540.440842][ T30] audit: type=1400 audit(1762556478.438:1080): avc: denied { prog_load } for pid=12536 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.606092][ T30] audit: type=1400 audit(1762556478.447:1081): avc: denied { bpf } for pid=12536 comm="syz.4.1841" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 540.626704][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.732532][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1839'. [ 540.751119][ T30] audit: type=1400 audit(1762556478.447:1082): avc: denied { perfmon } for pid=12536 comm="syz.4.1841" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 540.813723][ T30] audit: type=1400 audit(1762556478.456:1083): avc: denied { prog_run } for pid=12536 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 540.862800][ T30] audit: type=1400 audit(1762556478.597:1084): avc: denied { mounton } for pid=12536 comm="syz.4.1841" path="/348/file0" dev="tmpfs" ino=1854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 540.931693][ T30] audit: type=1400 audit(1762556478.690:1085): avc: denied { create } for pid=12536 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 540.963818][ T30] audit: type=1400 audit(1762556478.690:1086): avc: denied { write } for pid=12536 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.008298][ T30] audit: type=1400 audit(1762556478.690:1087): avc: denied { read } for pid=12536 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.029203][ T30] audit: type=1400 audit(1762556478.812:1088): avc: denied { ioctl } for pid=12536 comm="syz.4.1841" path="socket:[38989]" dev="sockfs" ino=38989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.058537][ T30] audit: type=1400 audit(1762556478.887:1089): avc: denied { unlink } for pid=12536 comm="syz.4.1841" name="#30" dev="tmpfs" ino=1860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 541.185280][T10533] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 541.241723][ T5951] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 541.384676][ T5951] usb 4-1: device descriptor read/64, error -71 [ 541.412936][T10533] usb 1-1: Using ep0 maxpacket: 32 [ 541.456287][T10533] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 541.470992][T10533] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 541.511490][T10533] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.608547][T10533] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.620545][T10533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.635395][T10533] usb 1-1: Product: syz [ 541.652003][T10533] usb 1-1: Manufacturer: Ь [ 541.658631][T10533] usb 1-1: SerialNumber: syz [ 541.744795][ T5951] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 541.946203][T10533] usb 1-1: 0:2 : does not exist [ 542.082306][T10533] usb 1-1: USB disconnect, device number 32 [ 542.141249][ T5951] usb 4-1: device descriptor read/64, error -71 [ 542.241376][T12555] syz.1.1844 (12555): drop_caches: 2 [ 542.259501][ T5951] usb usb4-port1: attempt power cycle [ 542.309231][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 542.322315][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1850'. [ 542.336141][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 542.345815][T12570] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1849'. [ 542.385774][T10933] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 542.760655][T10933] usb 3-1: Using ep0 maxpacket: 8 [ 542.788589][T10933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.802834][ T5951] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 542.953578][T12579] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1851'. [ 543.134235][ T5951] usb 4-1: device descriptor read/8, error -71 [ 543.140567][T10933] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 543.164803][T10933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.183082][T10933] usb 3-1: config 0 descriptor?? [ 543.197551][T10933] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 544.033163][ T5951] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 544.040997][T10933] gspca_vc032x: reg_r err -110 [ 544.046188][T10933] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 544.333724][ T5951] usb 4-1: device descriptor read/8, error -71 [ 544.459830][ T5951] usb usb4-port1: unable to enumerate USB device [ 545.412437][T12611] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 545.425804][T12611] tmpfs: Unknown parameter 'nr_blocksûöH' [ 546.379084][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.387056][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 546.387073][ T30] audit: type=1400 audit(541.148:1150): avc: denied { read write } for pid=12620 comm="syz.3.1861" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 546.423135][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.431105][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.439289][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.453178][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.460948][ T30] audit: type=1400 audit(541.148:1151): avc: denied { open } for pid=12620 comm="syz.3.1861" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 546.500587][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 546.521767][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.530821][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.580233][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 546.615797][T10933] usb 3-1: USB disconnect, device number 15 [ 546.648249][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.667609][ T30] audit: type=1400 audit(541.222:1152): avc: denied { mount } for pid=12620 comm="syz.3.1861" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 546.717463][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.780149][ T5951] hid-generic 0003:0003:0000.000B: unknown main item tag 0x0 [ 546.799300][ T5951] hid-generic 0003:0003:0000.000B: hidraw0: USB HID v100.00 Device [syz0] on syz1 [ 546.928341][ T30] audit: type=1400 audit(541.662:1153): avc: denied { read } for pid=12632 comm="syz.3.1865" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 547.159217][T12635] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 547.194788][T10933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 547.197179][ T3461] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 547.300243][ T30] audit: type=1400 audit(541.662:1154): avc: denied { open } for pid=12632 comm="syz.3.1865" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 547.560321][T10933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.570438][T10933] usb 3-1: config 0 has no interfaces? [ 547.570597][ T30] audit: type=1400 audit(541.699:1155): avc: denied { create } for pid=12632 comm="syz.3.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 547.602874][T10933] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 547.611927][T10933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.755198][T10933] usb 3-1: config 0 descriptor?? [ 547.867080][T12647] FAULT_INJECTION: forcing a failure. [ 547.867080][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 547.879864][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.4.1866 Not tainted syzkaller #0 PREEMPT(full) [ 547.879887][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.879894][T12647] Call Trace: [ 547.879898][T12647] [ 547.879902][T12647] dump_stack_lvl+0x16c/0x1f0 [ 547.879923][T12647] should_fail_ex+0x512/0x640 [ 547.879936][T12647] ? __kmalloc_cache_noprof+0x5f/0x780 [ 547.879953][T12647] should_failslab+0xc2/0x120 [ 547.879966][T12647] __kmalloc_cache_noprof+0x72/0x780 [ 547.879980][T12647] ? rcu_is_watching+0x12/0xc0 [ 547.879994][T12647] ? kasan_quarantine_put+0x10a/0x240 [ 547.880003][T12647] ? alloc_fs_context+0x57/0x9c0 [ 547.880018][T12647] ? alloc_fs_context+0x57/0x9c0 [ 547.880029][T12647] ? __x64_sys_fsopen+0xd3/0x240 [ 547.880049][T12647] alloc_fs_context+0x57/0x9c0 [ 547.880072][T12647] __x64_sys_fsopen+0xeb/0x240 [ 547.880093][T12647] do_syscall_64+0xcd/0xfa0 [ 547.880110][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.880125][T12647] RIP: 0033:0x7fce8e98f6c9 [ 547.880138][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.880151][T12647] RSP: 002b:00007fce8f7e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 547.880161][T12647] RAX: ffffffffffffffda RBX: 00007fce8ebe6090 RCX: 00007fce8e98f6c9 [ 547.880168][T12647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 547.880174][T12647] RBP: 00007fce8f7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.880180][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.880186][T12647] R13: 00007fce8ebe6128 R14: 00007fce8ebe6090 R15: 00007fff928d6ee8 [ 547.880201][T12647] [ 548.364579][ T30] audit: type=1400 audit(543.018:1156): avc: denied { create } for pid=12648 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 548.417524][ T30] audit: type=1400 audit(543.065:1157): avc: denied { execute } for pid=12652 comm="syz.4.1870" path="/357/cpuacct.usage_percpu" dev="tmpfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 548.509327][T10933] usb 3-1: string descriptor 0 read error: -71 [ 548.545259][T10933] usb 3-1: USB disconnect, device number 16 [ 548.629029][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 548.698550][ T30] audit: type=1400 audit(543.327:1158): avc: denied { read write } for pid=12649 comm="syz.1.1869" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 548.722267][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.789838][T10926] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 548.832216][ T30] audit: type=1400 audit(543.355:1159): avc: denied { open } for pid=12649 comm="syz.1.1869" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 549.017163][T10926] usb 4-1: config 0 has no interfaces? [ 549.120911][ T5951] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 549.135812][T10926] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 549.151600][T10926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.163604][T10926] usb 4-1: Product: syz [ 549.313207][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 549.315150][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'. [ 549.653512][T10926] usb 4-1: Manufacturer: syz [ 549.659280][T10926] usb 4-1: SerialNumber: syz [ 549.671118][T10926] usb 4-1: config 0 descriptor?? [ 549.719881][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 549.738365][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 549.750047][ T5951] usb 5-1: config 233 has an invalid interface number: 78 but max is 0 [ 549.765022][ T5951] usb 5-1: config 233 has no interface number 0 [ 549.773466][ T5951] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=f2.04 [ 549.804559][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.813000][ T5951] usb 5-1: Product: syz [ 549.817249][ T5951] usb 5-1: Manufacturer: syz [ 549.821846][ T5951] usb 5-1: SerialNumber: syz [ 549.933316][T10933] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 550.331257][ T5951] usb 5-1: invalid MIDI EP [ 550.335939][ T5951] usb 5-1: snd-bcd2000: error during probing [ 550.353562][ T5951] snd-bcd2000 5-1:233.78: probe with driver snd-bcd2000 failed with error -22 [ 550.364943][ T5951] usb 5-1: USB disconnect, device number 37 [ 550.493112][T12651] veth0_vlan: left promiscuous mode [ 550.499027][T12651] veth0_vlan: entered promiscuous mode [ 550.527338][ T55] usb 4-1: USB disconnect, device number 41 [ 550.563901][T10933] usb 3-1: Using ep0 maxpacket: 32 [ 550.573225][T10933] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 550.582681][T10933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.590943][T10933] usb 3-1: Product: syz [ 550.595437][T10933] usb 3-1: Manufacturer: syz [ 551.051056][T10933] usb 3-1: SerialNumber: syz [ 551.057904][T10933] usb 3-1: config 0 descriptor?? [ 551.068907][T10933] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 551.690602][T12694] FAULT_INJECTION: forcing a failure. [ 551.690602][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 551.703580][T12694] CPU: 0 UID: 0 PID: 12694 Comm: syz.3.1881 Not tainted syzkaller #0 PREEMPT(full) [ 551.703603][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.703612][T12694] Call Trace: [ 551.703617][T12694] [ 551.703623][T12694] dump_stack_lvl+0x16c/0x1f0 [ 551.703661][T12694] should_fail_ex+0x512/0x640 [ 551.703681][T12694] ? __kmalloc_cache_noprof+0x5f/0x780 [ 551.703703][T12694] should_failslab+0xc2/0x120 [ 551.703719][T12694] __kmalloc_cache_noprof+0x72/0x780 [ 551.703737][T12694] ? qnx6_init_fs_context+0x3f/0xd0 [ 551.703761][T12694] ? __pfx_qnx6_init_fs_context+0x10/0x10 [ 551.703779][T12694] ? qnx6_init_fs_context+0x3f/0xd0 [ 551.703797][T12694] qnx6_init_fs_context+0x3f/0xd0 [ 551.703815][T12694] ? __pfx_qnx6_init_fs_context+0x10/0x10 [ 551.703833][T12694] alloc_fs_context+0x54d/0x9c0 [ 551.703853][T12694] __x64_sys_fsopen+0xeb/0x240 [ 551.703872][T12694] do_syscall_64+0xcd/0xfa0 [ 551.703886][T12694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.703900][T12694] RIP: 0033:0x7f9357b8f6c9 [ 551.703912][T12694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.703925][T12694] RSP: 002b:00007f9355dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 551.703938][T12694] RAX: ffffffffffffffda RBX: 00007f9357de6090 RCX: 00007f9357b8f6c9 [ 551.703947][T12694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 551.703955][T12694] RBP: 00007f9355dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 551.703963][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.703971][T12694] R13: 00007f9357de6128 R14: 00007f9357de6090 R15: 00007ffec1499198 [ 551.703991][T12694] [ 551.964491][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 552.129369][T10933] gspca_topro: reg_w err -110 [ 552.163922][T10933] gspca_topro: Sensor soi763a [ 552.240918][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.264685][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.514559][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 552.520839][ T30] audit: type=1400 audit(546.863:1161): avc: denied { ioctl } for pid=12699 comm="syz.3.1884" path="socket:[40170]" dev="sockfs" ino=40170 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 553.278579][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 553.360485][ T30] audit: type=1400 audit(547.658:1162): avc: denied { create } for pid=12701 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.563703][ T30] audit: type=1400 audit(547.873:1163): avc: denied { accept } for pid=12720 comm="syz.0.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 553.688211][T10933] usb 3-1: USB disconnect, device number 17 [ 553.716136][T12728] xt_bpf: check failed: parse error [ 554.097386][ T30] audit: type=1400 audit(548.229:1164): avc: denied { create } for pid=12717 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.148119][ T30] audit: type=1400 audit(548.238:1165): avc: denied { setopt } for pid=12717 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 554.191054][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 554.265300][ T30] audit: type=1400 audit(548.537:1166): avc: denied { bind } for pid=12737 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 554.291494][ T30] audit: type=1400 audit(548.556:1167): avc: denied { setopt } for pid=12737 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 554.348487][ T30] audit: type=1400 audit(548.556:1168): avc: denied { create } for pid=12737 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 554.367754][ T5951] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 554.394527][ T30] audit: type=1400 audit(548.603:1169): avc: denied { ioctl } for pid=12737 comm="syz.0.1895" path="socket:[40283]" dev="sockfs" ino=40283 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 554.454098][ T30] audit: type=1400 audit(548.603:1170): avc: denied { setopt } for pid=12737 comm="syz.0.1895" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 554.650147][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 554.801552][ T5951] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 554.809737][ T5951] usb 4-1: config 0 has no interface number 0 [ 554.818401][ T5951] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 554.849522][ T5951] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 554.869476][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.878355][ T5951] usb 4-1: Product: syz [ 554.888687][ T5951] usb 4-1: Manufacturer: syz [ 554.897439][ T5951] usb 4-1: SerialNumber: syz [ 554.903307][T12749] loop7: detected capacity change from 0 to 7 [ 554.912424][ T5951] usb 4-1: config 0 descriptor?? [ 554.921048][T12749] Dev loop7: unable to read RDB block 7 [ 554.926840][T12749] loop7: AHDI p1 p2 [ 554.930804][T12749] loop7: partition table partially beyond EOD, truncated [ 554.938967][T12749] loop7: p1 start 1702000233 is beyond EOD, truncated [ 554.988601][T12750] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 1, id = 0 [ 555.061039][T12740] ip6tnl6: entered allmulticast mode [ 555.068300][T12740] bond2: entered allmulticast mode [ 555.074598][T12740] ip6tnl7: entered allmulticast mode [ 555.086789][T12745] vlan0: entered promiscuous mode [ 555.471017][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 556.215463][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 556.770335][T12729] Process accounting resumed [ 556.860706][ T5951] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 556.885185][ T5951] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 556.906375][ T5951] usb 4-1: USB disconnect, device number 42 [ 557.563877][T12774] loop6: detected capacity change from 0 to 524288000 [ 557.711712][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 558.133266][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 558.133288][ T30] audit: type=1400 audit(552.148:1177): avc: denied { ioctl } for pid=12769 comm="syz.0.1902" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.241838][ T30] audit: type=1400 audit(552.185:1178): avc: denied { map } for pid=12769 comm="syz.0.1902" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.311723][ T30] audit: type=1400 audit(552.185:1179): avc: denied { execute } for pid=12769 comm="syz.0.1902" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.359364][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.293314][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.314727][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 559.354146][ T30] audit: type=1400 audit(553.289:1180): avc: denied { create } for pid=12787 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.398084][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.399438][T12797] 9pnet_fd: Insufficient options for proto=fd [ 559.437158][ T30] audit: type=1400 audit(553.298:1181): avc: denied { write } for pid=12787 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.483152][ T30] audit: type=1400 audit(553.298:1182): avc: denied { nlmsg_write } for pid=12787 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.516857][ T30] audit: type=1400 audit(553.336:1183): avc: denied { mounton } for pid=12795 comm="syz.3.1909" path="/395/file0" dev="tmpfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 559.542491][ T30] audit: type=1400 audit(553.373:1184): avc: denied { name_bind } for pid=12799 comm="syz.4.1908" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 559.640530][ T30] audit: type=1400 audit(553.373:1185): avc: denied { node_bind } for pid=12799 comm="syz.4.1908" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 559.663410][ T30] audit: type=1400 audit(553.448:1186): avc: denied { create } for pid=12799 comm="syz.4.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 559.823380][T12811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.151148][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'. [ 561.486735][T12824] FAULT_INJECTION: forcing a failure. [ 561.486735][T12824] name failslab, interval 1, probability 0, space 0, times 0 [ 561.501755][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.0.1914 Not tainted syzkaller #0 PREEMPT(full) [ 561.501778][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.501788][T12824] Call Trace: [ 561.501794][T12824] [ 561.501800][T12824] dump_stack_lvl+0x16c/0x1f0 [ 561.501830][T12824] should_fail_ex+0x512/0x640 [ 561.501850][T12824] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 561.501880][T12824] should_failslab+0xc2/0x120 [ 561.501901][T12824] kmem_cache_alloc_node_noprof+0x78/0x770 [ 561.501927][T12824] ? __alloc_skb+0x2b2/0x380 [ 561.501954][T12824] ? __alloc_skb+0x2b2/0x380 [ 561.501972][T12824] __alloc_skb+0x2b2/0x380 [ 561.501993][T12824] ? __pfx___alloc_skb+0x10/0x10 [ 561.502018][T12824] ? rcu_is_watching+0x12/0xc0 [ 561.502040][T12824] ? trace_sched_exit_tp+0xd1/0x120 [ 561.502064][T12824] alloc_skb_with_frags+0xe0/0x860 [ 561.502089][T12824] ? __lock_acquire+0xb8a/0x1c90 [ 561.502121][T12824] virtio_transport_alloc_skb+0x7e9/0x10d0 [ 561.502153][T12824] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 561.502185][T12824] virtio_transport_send_pkt_info+0x7d7/0x1020 [ 561.502212][T12824] ? irqentry_exit+0x3b/0x90 [ 561.502236][T12824] virtio_transport_stream_enqueue+0xbb/0x100 [ 561.502261][T12824] ? __pfx_virtio_transport_stream_enqueue+0x10/0x10 [ 561.502290][T12824] ? mark_held_locks+0x49/0x80 [ 561.502316][T12824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.502340][T12824] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.502369][T12824] vsock_connectible_sendmsg+0xe49/0x1280 [ 561.502399][T12824] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 561.502428][T12824] ? __pfx_woken_wake_function+0x10/0x10 [ 561.502448][T12824] ? security_socket_sendmsg+0x21c/0x240 [ 561.502483][T12824] ____sys_sendmsg+0xa98/0xc70 [ 561.502501][T12824] ? copy_msghdr_from_user+0x10a/0x160 [ 561.502530][T12824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.502552][T12824] ? kvm_sched_clock_read+0x11/0x20 [ 561.502577][T12824] ? sched_clock+0x38/0x60 [ 561.502600][T12824] ? sched_clock_cpu+0x6c/0x530 [ 561.502628][T12824] ___sys_sendmsg+0x134/0x1d0 [ 561.502653][T12824] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.502690][T12824] ? find_held_lock+0x2b/0x80 [ 561.502732][T12824] __sys_sendmmsg+0x200/0x420 [ 561.502759][T12824] ? __pfx___sys_sendmmsg+0x10/0x10 [ 561.502780][T12824] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 561.502827][T12824] ? fput+0x9b/0xd0 [ 561.502847][T12824] ? ksys_write+0x1ac/0x250 [ 561.502863][T12824] ? __pfx_ksys_write+0x10/0x10 [ 561.502884][T12824] __x64_sys_sendmmsg+0x9c/0x100 [ 561.502907][T12824] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.502933][T12824] do_syscall_64+0xcd/0xfa0 [ 561.502951][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.502968][T12824] RIP: 0033:0x7f5578b8f6c9 [ 561.502983][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.502999][T12824] RSP: 002b:00007f55799d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.503017][T12824] RAX: ffffffffffffffda RBX: 00007f5578de6090 RCX: 00007f5578b8f6c9 [ 561.503029][T12824] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000008 [ 561.503039][T12824] RBP: 00007f55799d1090 R08: 0000000000000000 R09: 0000000000000000 [ 561.503050][T12824] R10: 0000000000044088 R11: 0000000000000246 R12: 0000000000000001 [ 561.503061][T12824] R13: 00007f5578de6128 R14: 00007f5578de6090 R15: 00007ffca42652e8 [ 561.503087][T12824] [ 561.671531][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 561.885287][ T5137] Bluetooth: hci5: command 0x1003 tx timeout [ 561.910312][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 562.207259][T12833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.762026][T12851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.076957][ T55] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 564.365806][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 564.871447][ T55] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.075667][ T55] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 565.111584][ T55] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 565.143549][ T55] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 565.154810][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.247900][ T55] usb 1-1: Product: syz [ 565.252708][ T55] usb 1-1: Manufacturer: Ї [ 565.258450][ T55] usb 1-1: SerialNumber: syz [ 565.268672][ T55] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 565.277798][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 565.277809][ T30] audit: type=1400 audit(558.827:1199): avc: denied { write } for pid=12868 comm="syz.4.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 565.303512][ T55] usb 1-1: no configuration chosen from 1 choice [ 565.561619][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 565.977474][ T30] audit: type=1400 audit(559.481:1200): avc: denied { read } for pid=12876 comm="syz.3.1929" path="socket:[40524]" dev="sockfs" ino=40524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 566.636016][ T30] audit: type=1400 audit(560.080:1201): avc: denied { create } for pid=12885 comm="syz.2.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 566.825193][T12890] FAULT_INJECTION: forcing a failure. [ 566.825193][T12890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.838782][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.4.1933 Not tainted syzkaller #0 PREEMPT(full) [ 566.838804][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.838814][T12890] Call Trace: [ 566.838820][T12890] [ 566.838826][T12890] dump_stack_lvl+0x16c/0x1f0 [ 566.838859][T12890] should_fail_ex+0x512/0x640 [ 566.838884][T12890] _copy_from_user+0x2e/0xd0 [ 566.838907][T12890] kstrtouint_from_user+0xd6/0x1d0 [ 566.838935][T12890] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 566.838961][T12890] ? __lock_acquire+0xb8a/0x1c90 [ 566.839001][T12890] proc_fail_nth_write+0x83/0x220 [ 566.839023][T12890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.839046][T12890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 566.839062][T12890] vfs_write+0x2a0/0x11d0 [ 566.839082][T12890] ? __pfx___mutex_lock+0x10/0x10 [ 566.839099][T12890] ? __pfx_vfs_write+0x10/0x10 [ 566.839121][T12890] ? __fget_files+0x20e/0x3c0 [ 566.839146][T12890] ksys_write+0x12a/0x250 [ 566.839162][T12890] ? __pfx_ksys_write+0x10/0x10 [ 566.839188][T12890] do_syscall_64+0xcd/0xfa0 [ 566.839207][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.839224][T12890] RIP: 0033:0x7fce8e98e17f [ 566.839237][T12890] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 566.839254][T12890] RSP: 002b:00007fce8f7c6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 566.839270][T12890] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce8e98e17f [ 566.839281][T12890] RDX: 0000000000000001 RSI: 00007fce8f7c60a0 RDI: 000000000000000a [ 566.839291][T12890] RBP: 00007fce8f7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.839301][T12890] R10: 0000000000044088 R11: 0000000000000293 R12: 0000000000000001 [ 566.839312][T12890] R13: 00007fce8ebe6218 R14: 00007fce8ebe6180 R15: 00007fff928d6ee8 [ 566.839339][T12890] [ 567.187285][T10926] usb 1-1: USB disconnect, device number 33 [ 567.212397][ T30] audit: type=1400 audit(560.632:1202): avc: denied { create } for pid=12892 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.265518][T12898] Invalid ELF header magic: != ELF [ 567.283383][ T30] audit: type=1400 audit(560.697:1203): avc: denied { module_load } for pid=12885 comm="syz.2.1931" path="/372/bus" dev="tmpfs" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 567.349899][ T30] audit: type=1400 audit(560.707:1204): avc: denied { shutdown } for pid=12885 comm="syz.2.1931" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 567.669830][ T30] audit: type=1400 audit(561.072:1205): avc: denied { bind } for pid=12905 comm="syz.1.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 567.670332][T12906] netlink: 'syz.1.1938': attribute type 10 has an invalid length. [ 568.524882][T12912] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 568.555468][T12918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1940'. [ 569.054274][T12923] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 569.233304][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 569.472523][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.489797][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.534467][T12923] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 569.609442][T12923] gretap1: entered promiscuous mode [ 569.823358][T12935] macsec1: entered promiscuous mode [ 569.903271][T12935] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 570.185039][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 570.208862][T12935] macsec1: entered allmulticast mode [ 570.244094][T12935] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 570.430979][T12944] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 570.445817][T12944] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 570.783616][T12949] loop7: detected capacity change from 0 to 7 [ 570.803858][T12949] Dev loop7: unable to read RDB block 7 [ 570.814260][T12949] loop7: AHDI p1 p2 [ 570.826210][T12949] loop7: partition table partially beyond EOD, truncated [ 570.844894][T12949] loop7: p1 start 1702000233 is beyond EOD, truncated [ 570.958873][T12948] gretap1: entered promiscuous mode [ 571.007476][ T30] audit: type=1400 audit(564.186:1206): avc: denied { mounton } for pid=12953 comm="syz.1.1950" path="/proc/1307/task" dev="proc" ino=40660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 571.196265][ T30] audit: type=1400 audit(564.196:1207): avc: denied { mount } for pid=12953 comm="syz.1.1950" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 571.876057][ T30] audit: type=1400 audit(564.299:1208): avc: denied { ioctl } for pid=12951 comm="syz.2.1949" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40727 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 571.904109][ T30] audit: type=1400 audit(564.598:1209): avc: denied { execute_no_trans } for pid=12961 comm="syz.4.1953" path="/374/file0" dev="tmpfs" ino=2003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 571.960625][ T30] audit: type=1400 audit(565.066:1210): avc: denied { read } for pid=12965 comm="syz.0.1954" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.983467][ T30] audit: type=1400 audit(565.066:1211): avc: denied { open } for pid=12965 comm="syz.0.1954" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 572.085729][ T30] audit: type=1400 audit(565.197:1212): avc: denied { associate } for pid=12971 comm="syz.1.1950" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 572.654642][T12970] SELinux: failed to load policy [ 572.669002][ T30] audit: type=1400 audit(565.721:1213): avc: denied { load_policy } for pid=12965 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 573.316157][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 574.318460][ T5951] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 574.444390][ T30] audit: type=1400 audit(567.404:1214): avc: denied { map } for pid=12997 comm="syz.1.1962" path="socket:[41132]" dev="sockfs" ino=41132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.501812][T13001] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 574.543165][ T30] audit: type=1400 audit(567.404:1215): avc: denied { read } for pid=12997 comm="syz.1.1962" path="socket:[41132]" dev="sockfs" ino=41132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 574.571901][ T5951] usb 4-1: config 0 has no interfaces? [ 574.579472][ T5951] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 574.598441][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.606885][ T5951] usb 4-1: Product: syz [ 574.611507][ T5951] usb 4-1: Manufacturer: syz [ 574.616573][ T5951] usb 4-1: SerialNumber: syz [ 574.646219][T13004] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 574.731592][ T5951] usb 4-1: config 0 descriptor?? [ 575.034768][ T5951] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 575.136115][T10533] usb 4-1: USB disconnect, device number 43 [ 575.196961][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.232157][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.248557][ T5951] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 575.259242][T10933] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 575.287639][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.302712][ T5951] usb 5-1: config 0 descriptor?? [ 575.430349][T10933] usb 3-1: Using ep0 maxpacket: 32 [ 575.442568][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.473170][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.483003][T10933] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 575.512467][T10933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.529480][T10933] usb 3-1: config 0 descriptor?? [ 575.536491][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.548245][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.823116][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 576.115250][T13029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13029 comm=syz.4.1964 [ 576.171779][T10933] uclogic 0003:28BD:0074.000C: interface is invalid, ignoring [ 576.610428][T10933] usb 3-1: USB disconnect, device number 18 [ 576.621244][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1973'. [ 576.666703][T13039] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 576.681301][T13039] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 576.707993][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 576.734978][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 576.744326][ T5951] usb 5-1: USB disconnect, device number 38 [ 577.177993][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.189158][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.588547][T13040] gretap1: entered promiscuous mode [ 577.815484][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 577.815499][ T30] audit: type=1400 audit(570.566:1223): avc: denied { listen } for pid=13054 comm="syz.0.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 577.827525][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1979'. [ 579.435559][T13079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.779734][T13083] bond0: entered promiscuous mode [ 579.785438][T13083] bond_slave_0: entered promiscuous mode [ 579.791799][T13083] bond_slave_1: entered promiscuous mode [ 579.798086][T13083] team0: entered promiscuous mode [ 579.806999][T13083] team_slave_0: entered promiscuous mode [ 579.813051][T13083] team_slave_1: entered promiscuous mode [ 579.822078][T13083] batadv0: entered promiscuous mode [ 579.829749][T13083] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 579.840232][T13083] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 579.852456][T13083] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 579.863640][T13083] bond0: left promiscuous mode [ 579.868629][T13083] bond_slave_0: left promiscuous mode [ 579.874304][T13083] bond_slave_1: left promiscuous mode [ 579.880130][T13083] team0: left promiscuous mode [ 579.884995][T13083] team_slave_0: left promiscuous mode [ 579.890732][T13083] team_slave_1: left promiscuous mode [ 579.897161][T13083] batadv0: left promiscuous mode [ 580.102159][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 580.331159][ T30] audit: type=1400 audit(572.914:1224): avc: denied { block_suspend } for pid=13088 comm="syz.0.1986" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.359727][ T30] audit: type=1400 audit(572.942:1225): avc: denied { ioctl } for pid=13088 comm="syz.0.1986" path="socket:[42058]" dev="sockfs" ino=42058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 582.412397][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 583.947167][T13103] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 583.956625][T13103] team0: Device ipvlan1 failed to register rx_handler [ 583.983161][ T30] audit: type=1400 audit(576.291:1226): avc: denied { write } for pid=13120 comm="syz.3.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.081856][T13124] loop6: detected capacity change from 0 to 524288000 [ 584.256237][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 584.908460][T13151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.083920][T10926] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 585.132363][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2003'. [ 585.152423][T13154] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 585.498441][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.517609][T10926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.567638][T10926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.591960][T13162] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 585.632890][ T30] audit: type=1400 audit(577.853:1227): avc: denied { bind } for pid=13158 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 585.652186][T10926] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.661602][ T30] audit: type=1400 audit(577.853:1228): avc: denied { getopt } for pid=13158 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 585.682924][T10926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.696628][T10926] usb 5-1: config 0 descriptor?? [ 585.706363][ T30] audit: type=1400 audit(577.862:1229): avc: denied { create } for pid=13158 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 585.726007][ T30] audit: type=1400 audit(577.862:1230): avc: denied { write } for pid=13158 comm="syz.0.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 585.874060][T13170] geneve2: entered promiscuous mode [ 585.879446][T13170] geneve2: entered allmulticast mode [ 585.944014][ T30] audit: type=1400 audit(577.909:1231): avc: denied { create } for pid=13163 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 585.967547][ T30] audit: type=1400 audit(577.909:1232): avc: denied { write } for pid=13163 comm="syz.2.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 586.188239][ T30] audit: type=1400 audit(578.395:1233): avc: denied { write } for pid=13173 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 586.266593][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'. [ 586.307483][T10926] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 586.338878][ T30] audit: type=1400 audit(578.395:1234): avc: denied { write } for pid=13173 comm="syz.0.2009" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.216782][ T30] audit: type=1400 audit(579.359:1235): avc: denied { listen } for pid=13190 comm="syz.1.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 587.575363][T13196] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 587.864864][ C0] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 588.415040][T13207] vlan0: left promiscuous mode [ 588.423202][T13207] ip6tnl5: entered allmulticast mode [ 588.430060][ T5951] usb 5-1: reset high-speed USB device number 39 using dummy_hcd [ 588.430281][T13207] erspan0.1: entered allmulticast mode [ 588.446593][T13207] ip6tnl6: entered allmulticast mode [ 588.459735][T13207] vlan1.1: entered allmulticast mode [ 589.605119][T13224] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 589.742506][ T7711] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 589.827853][T13170] Process accounting paused [ 589.984362][T10933] usb 5-1: USB disconnect, device number 39 [ 590.635349][T13229] tipc: Started in network mode [ 590.648186][T13229] tipc: Node identity 8ab3c94c183a, cluster identity 4711 [ 590.661213][T13229] tipc: Enabled bearer , priority 0 [ 590.824964][T13233] syzkaller0: entered promiscuous mode [ 590.830457][T13233] syzkaller0: entered allmulticast mode [ 590.889139][T13233] tipc: Resetting bearer [ 590.983318][T13233] tipc: Disabling bearer [ 591.029884][T13241] tmpfs: Bad value for 'mpol' [ 591.069157][ T30] audit: type=1400 audit(582.923:1236): avc: denied { mounton } for pid=13240 comm="syz.3.2029" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 591.145078][T13243] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 591.479273][T10933] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 591.788576][T10933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.808306][T10933] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 591.853297][T10933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.895429][T10933] usb 5-1: config 0 descriptor?? [ 592.083575][ T30] audit: type=1400 audit(583.905:1237): avc: denied { name_bind } for pid=13255 comm="syz.1.2032" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 592.117361][T10933] greenasia 0003:0E8F:0012.000E: report_id 1336777258 is invalid [ 592.126156][T13256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.139712][T10933] greenasia 0003:0E8F:0012.000E: item 0 4 1 8 parsing failed [ 592.147407][T10933] greenasia 0003:0E8F:0012.000E: parse failed [ 592.164488][T13256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.182535][T10933] greenasia 0003:0E8F:0012.000E: probe with driver greenasia failed with error -22 [ 592.315147][T13258] bond4: entered allmulticast mode [ 592.320576][T13258] ipvlan2: entered allmulticast mode [ 592.327907][T13258] ip6tnl6: entered allmulticast mode [ 592.335583][ T30] audit: type=1400 audit(584.148:1238): avc: denied { listen } for pid=13259 comm="syz.2.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 592.359190][T13258] bond5: entered allmulticast mode [ 592.364628][ T30] audit: type=1400 audit(584.167:1239): avc: denied { getopt } for pid=13242 comm="syz.4.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 592.384683][T13258] bond6: entered allmulticast mode [ 592.428430][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 592.465704][T13243] sp0: Synchronizing with TNC [ 592.478668][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 592.485024][ C0] CPU: 0 UID: 0 PID: 13243 Comm: syz.4.2027 Not tainted syzkaller #0 PREEMPT(full) [ 592.494485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.504544][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 592.510883][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 a6 53 fa f8 48 8d 7b 34 48 b8 00 00 [ 592.530492][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 592.536629][ C0] RAX: 0000000000000001 RBX: ffff8880776fe600 RCX: 1ffff1100eedfcd0 [ 592.544674][ C0] RDX: 0000000000000000 RSI: ffffffff88c2b988 RDI: ffff8880776fe680 [ 592.552644][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 592.560596][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 592.568549][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 592.576517][ C0] FS: 00007fce8f8086c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 592.585441][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.592093][ C0] CR2: 00007f5578db12f8 CR3: 0000000050b1d000 CR4: 00000000003526f0 [ 592.600046][ C0] Call Trace: [ 592.603303][ C0] [ 592.606134][ C0] comedi_buf_write_samples+0x406/0x640 [ 592.611665][ C0] parport_interrupt+0xec/0x150 [ 592.616493][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 592.621935][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 592.627379][ C0] __handle_irq_event_percpu+0x236/0x920 [ 592.633009][ C0] handle_irq_event+0xab/0x1e0 [ 592.637753][ C0] handle_edge_irq+0x3ca/0x9e0 [ 592.642519][ C0] __common_interrupt+0xd0/0x2f0 [ 592.647438][ C0] common_interrupt+0xba/0xe0 [ 592.652097][ C0] [ 592.655006][ C0] [ 592.657915][ C0] asm_common_interrupt+0x26/0x40 [ 592.662935][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 592.669332][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 8a 35 f6 48 89 df e8 1e de 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 e6 25 f6 65 8b 05 7e 25 3e 08 85 c0 74 16 5b [ 592.688919][ C0] RSP: 0018:ffffc90003dcfba0 EFLAGS: 00000246 [ 592.694987][ C0] RAX: 0000000000000006 RBX: ffffffff9add9280 RCX: 0000000000000006 [ 592.702937][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b754 RDI: ffffffff8bf07040 [ 592.710909][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 592.719302][ C0] R10: ffffffff90820cd7 R11: 0000000000000001 R12: 0000000000000001 [ 592.727337][ C0] R13: ffffffff9add9388 R14: 0000000000000000 R15: 0000000000000003 [ 592.735378][ C0] uart_write+0x2a4/0xb30 [ 592.739695][ C0] sixpack_open+0x7cd/0x990 [ 592.744182][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 592.749202][ C0] ? tty_set_ldisc+0x398/0x780 [ 592.753946][ C0] ? down_write+0x14d/0x200 [ 592.758429][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 592.763433][ C0] tty_ldisc_open+0x9f/0x120 [ 592.768008][ C0] tty_set_ldisc+0x32b/0x780 [ 592.772677][ C0] tty_ioctl+0xc2d/0x1680 [ 592.776988][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 592.781732][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 592.788563][ C0] ? hook_file_ioctl_common+0x145/0x410 [ 592.794092][ C0] ? selinux_file_ioctl+0x180/0x270 [ 592.799266][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 592.804352][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 592.809113][ C0] __x64_sys_ioctl+0x18e/0x210 [ 592.813861][ C0] do_syscall_64+0xcd/0xfa0 [ 592.818340][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.824208][ C0] RIP: 0033:0x7fce8e98f6c9 [ 592.828604][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.848276][ C0] RSP: 002b:00007fce8f808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.856752][ C0] RAX: ffffffffffffffda RBX: 00007fce8ebe5fa0 RCX: 00007fce8e98f6c9 [ 592.864702][ C0] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 592.872740][ C0] RBP: 00007fce8ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.880779][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.888725][ C0] R13: 00007fce8ebe6038 R14: 00007fce8ebe5fa0 R15: 00007fff928d6ee8 [ 592.896678][ C0] [ 592.899677][ C0] Modules linked in: [ 592.903549][ C0] ---[ end trace 0000000000000000 ]--- [ 592.908977][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 592.915287][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 a6 53 fa f8 48 8d 7b 34 48 b8 00 00 [ 592.934871][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 592.940915][ C0] RAX: 0000000000000001 RBX: ffff8880776fe600 RCX: 1ffff1100eedfcd0 [ 592.948871][ C0] RDX: 0000000000000000 RSI: ffffffff88c2b988 RDI: ffff8880776fe680 [ 592.956825][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 592.964859][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 592.972809][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 592.980846][ C0] FS: 00007fce8f8086c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 592.989755][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.996345][ C0] CR2: 00007f5578db12f8 CR3: 0000000050b1d000 CR4: 00000000003526f0 [ 593.004338][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 593.011611][ C0] Kernel Offset: disabled [ 593.015905][ C0] Rebooting in 86400 seconds..