last executing test programs: 22m16.87515761s ago: executing program 0 (id=138): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000080000000000000000000000000098958a93a1ef95c3376143a365a4367e3fda8c6e2dc637c51d1c37ebda3055bc1ec10d8462e95b3c4aa94e16174ad4e6665a169b9e87af0e8d5deef1e3003ca72004689c3cafca1dfd0b9a9421b1812dea1f7d976065a5b7ee1f5a73dce19ab84aaea106ca66cce5869fc67a3a4a5f5ee4c050c60dae86ca1add96e9eb3936e02706b37c36d8f56eb9589bf79eb33bd25d7601b0e8df24033109c938dea0c7991e4239e389a5"], 0x50) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='iocharset', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x309, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128001000100677470000cff03000000030001000080"], 0x38}}, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000140)="ab54", 0x2}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 22m13.798796523s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) setgroups(0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000100)="949d5fd1", 0x4}], 0x1) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 22m12.879732768s ago: executing program 0 (id=149): syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = dup(r0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 22m11.737871065s ago: executing program 0 (id=154): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r6, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x7000000) setns(r4, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000000c0)={0xc}) setns(r9, 0x24020000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) write$FUSE_WRITE(r2, 0x0, 0xeffd) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905821f0000000100090503"], 0x0) 22m9.394744961s ago: executing program 0 (id=166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) exit(0x2) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FITRIM(r2, 0xc0185879, 0x0) 22m7.426761212s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "49ec54bb6bf95a5ef9b6a5c228d5179e"}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0x485b]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20012, r0, 0x7b341000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 22m6.927999237s ago: executing program 32 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "49ec54bb6bf95a5ef9b6a5c228d5179e"}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0x485b]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20012, r0, 0x7b341000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) 11m32.356763124s ago: executing program 3 (id=2132): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x11002}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x1000000000000000, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) getpriority(0x1, r6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r8, 0x0, 0x0, 0x4}, 0x20) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20) 11m30.746713769s ago: executing program 3 (id=2137): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r2 = syz_clone(0x113600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000080), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0xd92, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000880)={{}, "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"}) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) syz_usbip_server_init(0x3) shmctl$IPC_RMID(r1, 0x0) socket$kcm(0x29, 0x2, 0x0) 11m25.204988976s ago: executing program 3 (id=2152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000173000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081718374b58e8cb7e8d8a3956e424a7b2badbc941abffcab8fc534600de02f805c99a7f0fd6aae285b0e0e0af2151677dd0028592d8a67ab8426c5a5b8e51be34137cfecbd9d5f82fdb18f249152afcfe38d19b952a291555234d218ec8571aa32f1e4b66972f1ba3638c51042cab125d23ddb63fcba"]) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000200001030000000000000000020000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) 11m21.465043826s ago: executing program 3 (id=2166): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0100"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000080000000000000000000000000098958a93a1ef95c3376143a365a4367e3fda8c6e2dc637c51d1c37ebda3055bc1ec10d8462e95b3c4aa94e16174ad4e6665a169b9e87af0e8d5deef1e3003ca72004689c3cafca1dfd0b9a9421b1812dea1f7d976065a5b7ee1f5a73dce19ab84aaea106ca66cce5869fc67a3a4a5f5ee4c050c60dae86ca1add96e9eb3936e02706b37c36d8f56eb9589bf79eb33bd25d7601b0e8df24033109c938dea0c7991e4239e389a5"], 0x50) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x309, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) r6 = syz_open_dev$I2C(0x0, 0x1, 0x402) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128001000100677470000cff03000000030001000080"], 0x38}}, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000140)="ab54", 0x2}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11m15.794741432s ago: executing program 3 (id=2180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) socket$nl_generic(0x10, 0x3, 0x10) 11m13.017493867s ago: executing program 3 (id=2188): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) r2 = fanotify_init(0x20, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r3, r4) fanotify_mark(r2, 0x1, 0x3, r3, &(0x7f0000000000)='./file0\x00') 10m56.613629827s ago: executing program 33 (id=2188): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) r2 = fanotify_init(0x20, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r3, r4) fanotify_mark(r2, 0x1, 0x3, r3, &(0x7f0000000000)='./file0\x00') 9.282686806s ago: executing program 1 (id=4296): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000514824650000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060e63a4a010770cd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x400000000000, {0x0, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x5}], 0x20) 9.119731978s ago: executing program 1 (id=4299): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2e2540}]}, 0x34}}, 0x0) 9.07442517s ago: executing program 1 (id=4300): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd25, 0x0, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x57447}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="b2c5c79f07ab3d9614d5c058db4a274ad23734c22ae51ea860b7ba11a89526f3e0", 0x21}], 0x1}}], 0x2, 0x8008801) writev(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)="88", 0x1}, {&(0x7f0000000780)="4695c2de74259ce04488b2", 0xb}], 0x2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$char_usb(r8, &(0x7f0000000040)="4012377c66f1952fb3fae3aa21bef74ca808611f28141049a582f87887a1546aad5a8f20768590a253d112", 0x2b) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) tee(r7, r9, 0xfffffffffffffc01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 8.694744663s ago: executing program 4 (id=4301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.58106402s ago: executing program 4 (id=4305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r0, 0xffffffffffffffff}, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, &(0x7f0000000440)=""/75, &(0x7f00000004c0)="a6c37c6da70aa49883d12758c8bbc8beb26b635a635bfae34151e939844f39f828373acb", &(0x7f0000000500)="7947f5f35aa923c091846eaf377bebeac194800a301e9eeab2397a866081bcb848eddadcaa74d4f2a86cd73d2314907b985a0dc696c585f8dc9654f31e9d36", 0x7, r1}, 0x38) 6.692005158s ago: executing program 6 (id=4308): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1) read(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 6.597195414s ago: executing program 2 (id=4309): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000514824650000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060e63a4a010770cd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x400000000000, {0x0, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x5}], 0x20) 6.3389106s ago: executing program 6 (id=4311): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8], 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x9, 0xfffffffffffffffd, 0x4000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x801, 0x9, 0x2000000000000000, 0x80000000b3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x1) 6.30514899s ago: executing program 4 (id=4312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfeffff7f, 0x1}, 0x50) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x70, 0x9, 0xfffffff8, 0x42, @loopback, @mcast2, 0x10, 0x80, 0x2, 0x8}}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="78000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800b000100697036677265000048000280060010004ea400000800040067a0000008000d000180000008000100", @ANYRES32=r8, @ANYBLOB="14000700fe80000000000000000000000000000f08000100", @ANYRES32=r8, @ANYBLOB="060010004e200000"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.850550846s ago: executing program 2 (id=4313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 5.026724187s ago: executing program 1 (id=4315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) clock_getres(0x8, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b000800010001000000ecf5c856ac6f47717b582b98e71e771ea8726408acffaae5cdcafa25d7e200be2a17ec504fd4cbcc4febb9cf81f133d1b24f6ebce7bc4fdabff581c2ebd13fef1feeeacfa087e5d44fbb0325ee0b4e7ce7d7c41d"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a000000", @ANYRES32=r8], 0x5c}}, 0x0) 5.022059454s ago: executing program 4 (id=4316): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sched_setaffinity(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {}, 0x1c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}, 0x45c) 4.938857056s ago: executing program 6 (id=4317): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1fd}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x70b525, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 4.274677782s ago: executing program 2 (id=4318): prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 3.951387164s ago: executing program 1 (id=4319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x4000, 0x10, 0x9, 0x865, 0x0, [{0x6, 0x4, 0x8, '\x00', 0xb}, {0x2, 0x8, 0xff, '\x00', 0x1}, {0x1f, 0x20, 0x24, '\x00', 0x8}, {0x1c, 0x1, 0x7, '\x00', 0x3}, {0xfc, 0x6, 0x59, '\x00', 0xf}, {0xe, 0x3, 0x6, '\x00', 0x81}, {0x3, 0xda}, {0x6, 0xb3, 0xf7, '\x00', 0xd0}, {0x9, 0xe6, 0x40, '\x00', 0x3}, {0xe7, 0xb, 0x3, '\x00', 0x11}, {0x3, 0xd0, 0x0, '\x00', 0x7}, {0x3, 0x9, 0xff, '\x00', 0x7}, {0x6, 0xe, 0x4, '\x00', 0xfa}, {0x3, 0x3, 0x9, '\x00', 0x2}, {0x1, 0x4, 0x2, '\x00', 0x6}, {0xf, 0x97, 0xc, '\x00', 0x5}, {0x1, 0xe, 0x0, '\x00', 0x3}, {0x94, 0xeb, 0x4b, '\x00', 0x4}, {0x4, 0x93, 0x4, '\x00', 0x8}, {0x2, 0x1, 0xdb, '\x00', 0x10}, {0x0, 0x3, 0xc4, '\x00', 0xff}, {0x2, 0xb1, 0x5, '\x00', 0x7}, {0x9, 0x5, 0x7, '\x00', 0x6}, {0x49, 0xad, 0xe, '\x00', 0x68}]}}) 2.738294329s ago: executing program 6 (id=4321): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1) read(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.935932707s ago: executing program 1 (id=4322): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b455018"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x8a, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) 1.854813309s ago: executing program 2 (id=4323): bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.685678749s ago: executing program 5 (id=4324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.673919496s ago: executing program 6 (id=4325): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.590497078s ago: executing program 2 (id=4326): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x100, 0xb38dcf3f7bb4b8a7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x340, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x2, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x9}, {}, {}, {}, {}, {}, {}, {0xf5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xffffffff, 0x6, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x5, 0x22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400)) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="4d8e3366fc4a644abcc82e05f0a77becca744f7e1f40494f9d56b40e3a77878bf7cbdc9e294a47248bea3f534440b9107bab184df01f6c26136e20286580c461f87a94108d30c451021e17d80db8515bf9827c1bb3", 0x55}], 0x1}}], 0x1, 0x4) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 1.321163645s ago: executing program 4 (id=4327): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) 782.608232ms ago: executing program 4 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xc4, 0xfa, 0xda, 0x20, 0x46d, 0xa0e, 0x6e65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x28, 0xe, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0xe0, 0x0, 0x3, 0x0, 0x0, 0xd}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 763.843633ms ago: executing program 5 (id=4329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 593.907098ms ago: executing program 5 (id=4330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 542.391584ms ago: executing program 6 (id=4331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000054cf000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="80"], 0x50) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4e, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080cf6f2f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x96}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r10, 0x8004ae98, &(0x7f0000000040)) 442.830724ms ago: executing program 2 (id=4332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 380.197512ms ago: executing program 5 (id=4333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[], 0x190) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) 282.490929ms ago: executing program 5 (id=4334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=4335): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x140, 0x0, 0x0) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1210.873777][T20551] vivid-007: disconnect [ 1210.886962][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1210.910172][T20550] vivid-007: reconnect [ 1211.386680][ T5887] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1211.512893][T20559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20559 comm=syz.2.3521 [ 1211.532134][T20559] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1211.545927][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3521'. [ 1211.925940][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1212.092718][ T5887] usb usb2-port1: attempt power cycle [ 1212.278026][T20570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.570042][T20568] Sensor B: ================= START STATUS ================= [ 1212.577847][T20568] Sensor B: Test Pattern: 75% Colorbar [ 1212.583553][T20568] Sensor B: Show Information: All [ 1212.589544][T20568] Sensor B: Vertical Flip: false [ 1212.596975][T20568] Sensor B: Horizontal Flip: false [ 1212.602405][T20568] Sensor B: Brightness: 128 [ 1212.607248][T20568] Sensor B: Contrast: 128 [ 1212.611869][T20568] Sensor B: Hue: 0 [ 1212.615784][T20568] Sensor B: Saturation: 128 [ 1212.620570][T20568] Sensor B: ================== END STATUS ================== [ 1212.903319][T20563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.931647][ T5887] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1213.166613][ T5887] usb 2-1: device descriptor read/8, error -71 [ 1213.434864][ T5887] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1213.442632][ T847] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1213.555265][T20586] Mount JFS Failure: -5 [ 1213.559553][T20586] jfs_mount failed w/return code = -5 [ 1213.643787][ T847] usb 3-1: Using ep0 maxpacket: 8 [ 1213.866472][ T847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.890099][ T847] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1213.905229][ T847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1213.916504][ T847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1213.926662][ T847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1213.942041][ T847] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1213.951860][ T847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1213.960235][ T847] usb 3-1: Product: syz [ 1213.964460][ T847] usb 3-1: Manufacturer: syz [ 1213.970171][ T847] usb 3-1: SerialNumber: syz [ 1213.976903][ T847] usb 3-1: config 0 descriptor?? [ 1213.996236][ T5887] usb 2-1: device descriptor read/8, error -71 [ 1214.115481][ T5887] usb usb2-port1: unable to enumerate USB device [ 1214.218330][ T847] radio-si470x 3-1:0.0: DeviceID=0x7478 ChipID=0x5b00 [ 1214.766303][ T847] radio-si470x 3-1:0.0: software version 116, hardware version 120 [ 1214.783714][ T30] audit: type=1400 audit(1764285451.097:1557): avc: denied { mount } for pid=20573 comm="syz.2.3526" name="/" dev="configfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1214.857857][ T30] audit: type=1400 audit(1764285451.144:1558): avc: denied { search } for pid=20573 comm="syz.2.3526" name="/" dev="configfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1214.888444][ T30] audit: type=1400 audit(1764285451.153:1559): avc: denied { search } for pid=20573 comm="syz.2.3526" name="/" dev="configfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1214.889972][T20575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.918011][ T30] audit: type=1400 audit(1764285451.153:1560): avc: denied { read open } for pid=20573 comm="syz.2.3526" path="/" dev="configfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1214.941529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.992049][T20575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.294890][T20605] netlink: 'syz.1.3532': attribute type 10 has an invalid length. [ 1215.406253][ T847] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1215.530469][ T847] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1215.566030][ T847] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1215.584955][ T847] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1215.664974][ T847] usb 3-1: USB disconnect, device number 124 [ 1215.991005][T20613] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1215.997535][T20613] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1216.005264][T20613] vhci_hcd vhci_hcd.0: Device attached [ 1216.015163][T20614] vhci_hcd: connection closed [ 1216.015572][ T7940] vhci_hcd: stop threads [ 1216.027896][ T7940] vhci_hcd: release socket [ 1216.033162][ T7940] vhci_hcd: disconnect device [ 1216.499049][T20618] Sensor B: ================= START STATUS ================= [ 1216.506799][T20618] Sensor B: Test Pattern: 75% Colorbar [ 1216.512295][T20618] Sensor B: Show Information: All [ 1216.517306][T20618] Sensor B: Vertical Flip: false [ 1216.522302][T20618] Sensor B: Horizontal Flip: false [ 1216.527483][T20618] Sensor B: Brightness: 128 [ 1216.531999][T20618] Sensor B: Contrast: 128 [ 1216.536307][T20618] Sensor B: Hue: 0 [ 1216.540003][T20618] Sensor B: Saturation: 128 [ 1216.544528][T20618] Sensor B: ================== END STATUS ================== [ 1216.558128][T20617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.817930][T20625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1217.348243][T20629] Sensor B: ================= START STATUS ================= [ 1217.356870][T20629] Sensor B: Test Pattern: 75% Colorbar [ 1217.365118][T20629] Sensor B: Show Information: All [ 1217.370255][T20629] Sensor B: Vertical Flip: false [ 1217.375333][T20629] Sensor B: Horizontal Flip: false [ 1217.380671][T20629] Sensor B: Brightness: 128 [ 1217.385294][T20629] Sensor B: Contrast: 128 [ 1217.389834][T20629] Sensor B: Hue: 0 [ 1217.393678][T20629] Sensor B: Saturation: 128 [ 1217.398380][T20629] Sensor B: ================== END STATUS ================== [ 1217.768004][T20624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.345270][T20641] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 1218.362950][T20641] netlink: 'syz.1.3542': attribute type 10 has an invalid length. [ 1218.398669][T20641] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1218.729141][ T30] audit: type=1326 audit(1764285454.792:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20638 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53e98f749 code=0x7ffc0000 [ 1218.752642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1218.812161][ T30] audit: type=1326 audit(1764285454.820:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20638 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53e98f749 code=0x7ffc0000 [ 1218.840976][ T30] audit: type=1326 audit(1764285454.848:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20638 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb53e98f749 code=0x7ffc0000 [ 1218.867548][ T30] audit: type=1326 audit(1764285454.848:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20638 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53e98f749 code=0x7ffc0000 [ 1218.892692][ T30] audit: type=1326 audit(1764285454.848:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20638 comm="syz.1.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb53e98f749 code=0x7ffc0000 [ 1219.520227][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1220.251173][T20657] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1220.270850][T20663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1220.277372][T20663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1220.284996][T20663] vhci_hcd vhci_hcd.0: Device attached [ 1220.293826][T20664] vhci_hcd: connection closed [ 1220.293988][ T7845] vhci_hcd: stop threads [ 1220.303223][ T7845] vhci_hcd: release socket [ 1220.311196][ T7845] vhci_hcd: disconnect device [ 1220.636454][T17517] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1221.192997][T20681] Sensor B: ================= START STATUS ================= [ 1221.200668][T20681] Sensor B: Test Pattern: 75% Colorbar [ 1221.206495][T20681] Sensor B: Show Information: All [ 1221.211799][T20681] Sensor B: Vertical Flip: false [ 1221.217166][T20681] Sensor B: Horizontal Flip: false [ 1221.222492][T20681] Sensor B: Brightness: 128 [ 1221.227439][T20681] Sensor B: Contrast: 128 [ 1221.232090][T20681] Sensor B: Hue: 0 [ 1221.236158][T20681] Sensor B: Saturation: 128 [ 1221.240959][T20681] Sensor B: ================== END STATUS ================== [ 1221.275423][T17517] usb 5-1: Using ep0 maxpacket: 8 [ 1221.480233][T20679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.521492][T17517] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1221.545351][T17517] usb 5-1: config 179 has no interface number 0 [ 1221.579628][T17517] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1221.667251][T17517] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1221.684923][T17517] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1221.714373][T17517] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1221.827822][T17517] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1221.844569][T17517] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1221.896387][T17517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.985706][T20688] netlink: 'syz.6.3555': attribute type 10 has an invalid length. [ 1222.006630][T20688] bridge0: entered promiscuous mode [ 1222.013524][T20688] bridge0: left promiscuous mode [ 1222.230929][T20667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1222.501684][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3560'. [ 1222.523530][ T5887] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input100 [ 1222.547216][T20700] tipc: Started in network mode [ 1222.572119][T20700] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1222.605173][T20703] ubi31: detaching mtd0 [ 1222.611919][T20700] tipc: Enabled bearer , priority 10 [ 1222.646409][T10419] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1222.661182][T20703] ubi31: mtd0 is detached [ 1222.712167][ T30] audit: type=1400 audit(1764285458.505:1566): avc: denied { map } for pid=20666 comm="syz.4.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1222.782473][ T42] usb 5-1: USB disconnect, device number 10 [ 1222.782597][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1222.797553][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1222.830670][T10419] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.962618][T10419] usb 7-1: config 0 has no interface number 0 [ 1222.972568][T10419] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8e.1e [ 1222.982718][T10419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.008292][T10419] usb 7-1: config 0 descriptor?? [ 1223.014019][ T30] audit: type=1400 audit(1764285458.515:1567): avc: denied { write } for pid=20666 comm="syz.4.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.077546][T20711] Mount JFS Failure: -5 [ 1223.081793][T20711] jfs_mount failed w/return code = -5 [ 1223.403302][T10419] usb 7-1: selecting invalid altsetting 1 [ 1223.411800][T10419] dvb_ttusb_budget: ttusb_init_controller: error [ 1223.419563][T10419] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1223.458882][ T30] audit: type=1400 audit(1764285458.533:1568): avc: denied { read } for pid=20666 comm="syz.4.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.539754][T20712] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 1223.670367][ T30] audit: type=1400 audit(1764285458.562:1569): avc: denied { call } for pid=20666 comm="syz.4.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1223.830523][ T42] tipc: Node number set to 1 [ 1223.952612][T10419] DVB: Unable to find symbol cx22700_attach() [ 1223.999926][T20716] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1224.006527][T20716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1224.014313][T20716] vhci_hcd vhci_hcd.0: Device attached [ 1224.117187][T10419] DVB: Unable to find symbol tda10046_attach() [ 1224.128756][T10419] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1224.239677][T20724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20724 comm=syz.4.3565 [ 1224.258675][T20724] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1224.275114][T20724] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 1224.291212][ T5887] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 1224.576700][T10419] usb 7-1: USB disconnect, device number 55 [ 1224.586984][T20720] vhci_hcd: connection reset by peer [ 1224.605885][T16759] vhci_hcd: stop threads [ 1224.621358][T16759] vhci_hcd: release socket [ 1224.628364][T16759] vhci_hcd: disconnect device [ 1226.254084][ T30] audit: type=1400 audit(1764285461.826:1570): avc: denied { ioctl } for pid=20744 comm="syz.2.3571" path="socket:[64723]" dev="sockfs" ino=64723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1226.655400][T20754] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3573'. [ 1226.704039][T20754] bridge0: entered promiscuous mode [ 1226.801114][T20747] bridge0: left promiscuous mode [ 1226.837092][T17517] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1227.023341][T17517] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1227.179162][T17517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.447326][T17517] usb 6-1: config 0 descriptor?? [ 1227.511198][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 1229.520394][ T30] audit: type=1400 audit(1764285464.801:1571): avc: denied { mount } for pid=20772 comm="syz.2.3578" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1229.715563][T17517] usb 6-1: Cannot read MAC address [ 1229.740323][T17517] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1230.209542][T20784] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1230.223186][T20784] bridge0: entered promiscuous mode [ 1230.389958][ T5887] vhci_hcd: vhci_device speed not set [ 1230.474284][T20782] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1230.480793][T20782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1230.488606][T20782] vhci_hcd vhci_hcd.0: Device attached [ 1230.497708][T20785] vhci_hcd: connection closed [ 1230.498294][ T13] vhci_hcd: stop threads [ 1230.517103][T20780] bridge0: left promiscuous mode [ 1230.525785][T17517] usb 6-1: USB disconnect, device number 124 [ 1230.533112][ T13] vhci_hcd: release socket [ 1230.546263][ T13] vhci_hcd: disconnect device [ 1230.712262][ T30] audit: type=1400 audit(1764285465.998:1572): avc: denied { accept } for pid=20793 comm="syz.4.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1230.720197][T20795] overlayfs: overlapping lowerdir path [ 1230.776742][ T30] audit: type=1400 audit(1764285466.054:1573): avc: denied { connect } for pid=20793 comm="syz.4.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1230.986188][ T30] audit: type=1400 audit(1764285466.251:1574): avc: denied { unmount } for pid=18004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1231.038601][ T847] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1231.242575][ T847] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1231.309459][ T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.342549][ T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.470697][T20804] ip6_vti0 speed is unknown, defaulting to 1000 [ 1231.487931][ T847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1231.591687][ T847] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1231.602206][ T847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.628906][ T847] usb 2-1: config 0 descriptor?? [ 1232.176889][T20814] Mount JFS Failure: -5 [ 1232.181105][T20814] jfs_mount failed w/return code = -5 [ 1232.546171][ T847] usbhid 2-1:0.0: can't add hid device: -71 [ 1232.552262][ T847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1232.671292][ T847] usb 2-1: USB disconnect, device number 118 [ 1232.851372][T20804] lo speed is unknown, defaulting to 1000 [ 1235.208664][T20841] block nbd1: NBD_DISCONNECT [ 1235.489206][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.495580][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1235.619461][T20843] block nbd2: NBD_DISCONNECT [ 1236.010501][T20845] pim6reg: entered allmulticast mode [ 1236.269740][T20848] pim6reg: entered allmulticast mode [ 1236.665286][ T5887] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1236.693898][T17517] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1237.209131][T17517] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1237.332708][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.340133][T17517] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1237.353352][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1237.364414][ T5887] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.376111][T17517] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1237.382926][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1237.394302][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1237.406157][T17517] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1237.415400][T17517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1237.423458][T17517] usb 6-1: SerialNumber: syz [ 1237.428142][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.499881][T20856] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1237.516932][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1237.564990][T17517] usb 6-1: bad CDC descriptors [ 1237.577575][ T5887] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.605663][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1237.661191][ T30] audit: type=1400 audit(1764285472.499:1575): avc: denied { ioctl } for pid=20866 comm="syz.1.3603" path="socket:[65707]" dev="sockfs" ino=65707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1237.741540][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1237.768877][ T5887] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.772307][T20852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.785376][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1237.785409][ T5887] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.785433][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1237.785457][ T5887] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1237.787856][ T5887] usb 7-1: string descriptor 0 read error: -22 [ 1237.800084][T20852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.816798][ T5887] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1237.836737][ T42] usb 6-1: USB disconnect, device number 125 [ 1237.884211][T20876] Mount JFS Failure: -5 [ 1237.888419][T20876] jfs_mount failed w/return code = -5 [ 1238.260326][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.286395][ T5887] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1238.581176][T20885] Mount JFS Failure: -5 [ 1238.585402][T20885] jfs_mount failed w/return code = -5 [ 1238.779167][T20886] Mount JFS Failure: -5 [ 1238.783478][T20886] jfs_mount failed w/return code = -5 [ 1238.958112][ T5887] usb 7-1: USB disconnect, device number 56 [ 1239.798872][ T30] audit: type=1400 audit(1764285474.501:1576): avc: denied { append } for pid=20899 comm="syz.1.3612" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1239.853406][ T30] audit: type=1400 audit(1764285474.548:1577): avc: denied { ioctl } for pid=20899 comm="syz.1.3612" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1240.217015][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1240.311230][T20909] block nbd6: NBD_DISCONNECT [ 1240.690914][T20915] netlink: 'syz.1.3616': attribute type 10 has an invalid length. [ 1240.734790][T20915] bridge0: entered promiscuous mode [ 1240.755541][T20915] bridge0: left promiscuous mode [ 1241.162512][ T30] audit: type=1400 audit(1764285475.764:1578): avc: denied { getopt } for pid=20924 comm="syz.1.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1241.202823][T10419] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1241.460488][T20929] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1241.524563][T10419] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1241.581117][T10419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.678447][T10419] usb 6-1: config 0 descriptor?? [ 1241.753991][ T30] audit: type=1400 audit(1764285476.325:1579): avc: denied { create } for pid=20932 comm="syz.6.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1242.036485][T20943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20943 comm=syz.1.3623 [ 1242.520123][ T5887] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1243.300647][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 1243.310699][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1243.327180][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1243.338247][ T5887] usb 7-1: can't read configurations, error -61 [ 1243.452847][T20943] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1243.503714][ T5887] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1243.781884][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 1243.792078][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1243.977197][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1243.991192][ T5887] usb 7-1: can't read configurations, error -61 [ 1243.999893][ T5887] usb usb7-port1: attempt power cycle [ 1244.165859][T10419] usb 6-1: Cannot read MAC address [ 1244.171637][T10419] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1244.197760][T10419] usb 6-1: USB disconnect, device number 126 [ 1244.433770][ T5887] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1244.504004][T20959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20959 comm=syz.4.3627 [ 1244.531923][T20959] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1244.573402][T20959] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 1244.937337][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 1244.948295][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1244.961872][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1244.971537][ T5887] usb 7-1: can't read configurations, error -61 [ 1245.133261][ T5887] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1245.595311][T20967] netlink: 'syz.4.3629': attribute type 10 has an invalid length. [ 1245.651371][T20967] bridge0: entered promiscuous mode [ 1245.807180][ T5887] usb 7-1: device descriptor read/8, error -71 [ 1245.928665][T20964] bridge0: left promiscuous mode [ 1245.962746][ T5887] usb usb7-port1: unable to enumerate USB device [ 1245.998933][T20971] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1246.150458][T20975] Sensor B: ================= START STATUS ================= [ 1246.158218][T20975] Sensor B: Test Pattern: 75% Colorbar [ 1246.164069][T20975] Sensor B: Show Information: All [ 1246.170178][T20975] Sensor B: Vertical Flip: false [ 1246.175230][T20975] Sensor B: Horizontal Flip: false [ 1246.180535][T20975] Sensor B: Brightness: 128 [ 1246.185122][T20975] Sensor B: Contrast: 128 [ 1246.189602][T20975] Sensor B: Hue: 0 [ 1246.193435][T20975] Sensor B: Saturation: 128 [ 1246.198205][T20975] Sensor B: ================== END STATUS ================== [ 1246.483239][T20972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.520390][T20976] block nbd4: NBD_DISCONNECT [ 1247.814068][ T30] audit: type=1400 audit(1764285481.629:1580): avc: denied { getopt } for pid=20988 comm="syz.2.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1247.833960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.403941][T20999] ip6_vti0 speed is unknown, defaulting to 1000 [ 1248.748148][ T847] IPVS: starting estimator thread 0... [ 1248.849441][T21011] IPVS: using max 45 ests per chain, 108000 per kthread [ 1249.154418][T20999] lo speed is unknown, defaulting to 1000 [ 1249.319460][T17517] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1249.522379][T17517] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1249.541649][T17517] usb 5-1: config 0 has no interface number 0 [ 1249.561300][T17517] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1249.587574][T17517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.602236][T21019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1249.636147][T17517] usb 5-1: config 0 descriptor?? [ 1249.664174][T17517] usb 5-1: selecting invalid altsetting 1 [ 1249.679252][T17517] dvb_ttusb_budget: ttusb_init_controller: error [ 1249.696089][T17517] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1249.823950][T17517] DVB: Unable to find symbol ves1820_attach() [ 1250.448148][T17517] DVB: Unable to find symbol stv0297_attach() [ 1250.509776][T17517] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1250.640041][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1250.677100][ T30] audit: type=1400 audit(1764285484.669:1581): avc: denied { accept } for pid=21028 comm="syz.6.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1250.724121][ T30] audit: type=1400 audit(1764285484.697:1582): avc: denied { write } for pid=21028 comm="syz.6.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1250.754439][ T30] audit: type=1400 audit(1764285484.743:1583): avc: denied { read } for pid=21028 comm="syz.6.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1250.811589][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1252.022772][T16690] usb 5-1: USB disconnect, device number 11 [ 1252.188717][T21048] syzkaller0: entered promiscuous mode [ 1252.194291][T21048] syzkaller0: entered allmulticast mode [ 1252.342819][T21052] block nbd4: NBD_DISCONNECT [ 1252.726115][T21048] tipc: Started in network mode [ 1252.740526][T21048] tipc: Node identity 22e605918bd9, cluster identity 4711 [ 1252.754181][T21048] tipc: Enabled bearer , priority 0 [ 1252.770601][T21047] tipc: Resetting bearer [ 1252.801363][T21047] tipc: Disabling bearer [ 1252.818572][T21056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.825979][T21058] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1253.242922][T17517] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1253.445910][T17517] usb 3-1: Using ep0 maxpacket: 16 [ 1253.470206][T17517] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1253.513363][T17517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.526654][T17517] usb 3-1: config 0 descriptor?? [ 1253.542322][ T42] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1253.557664][T17517] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1253.795861][T17517] usb 3-1: Detected FT232B [ 1253.796330][ T42] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.808721][ T42] usb 7-1: config 0 has no interface number 0 [ 1253.819552][ T42] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8e.1e [ 1253.998668][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.020414][T17517] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1254.045256][T17517] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1254.054028][ T42] usb 7-1: config 0 descriptor?? [ 1254.069722][T17517] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1254.129220][ T42] usb 7-1: selecting invalid altsetting 1 [ 1254.148618][T17517] usb 3-1: USB disconnect, device number 125 [ 1254.164189][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 1254.186831][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1254.200891][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1254.213063][T17517] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1254.222464][T17547] Bluetooth: hci3: command 0x0406 tx timeout [ 1254.722674][T17517] ftdi_sio 3-1:0.0: device disconnected [ 1254.780503][ T42] DVB: Unable to find symbol cx22700_attach() [ 1255.238071][ T42] DVB: Unable to find symbol tda10046_attach() [ 1255.259959][T21090] FAULT_INJECTION: forcing a failure. [ 1255.259959][T21090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.273034][T21090] CPU: 0 UID: 0 PID: 21090 Comm: syz.4.3664 Not tainted syzkaller #0 PREEMPT(full) [ 1255.273050][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1255.273056][T21090] Call Trace: [ 1255.273060][T21090] [ 1255.273064][T21090] dump_stack_lvl+0x16c/0x1f0 [ 1255.273079][T21090] should_fail_ex+0x512/0x640 [ 1255.273096][T21090] _copy_from_user+0x2e/0xd0 [ 1255.273110][T21090] __keyctl_dh_compute+0x1b6/0x10e0 [ 1255.273126][T21090] ? get_pid_task+0xfc/0x250 [ 1255.273138][T21090] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1255.273152][T21090] ? get_pid_task+0x106/0x250 [ 1255.273161][T21090] ? proc_fail_nth_write+0x9f/0x220 [ 1255.273175][T21090] ? find_held_lock+0x2b/0x80 [ 1255.273192][T21090] ? ksys_write+0x190/0x250 [ 1255.273208][T21090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1255.273222][T21090] keyctl_dh_compute+0xd2/0x140 [ 1255.273236][T21090] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1255.273252][T21090] ? ksys_write+0x1ac/0x250 [ 1255.273261][T21090] ? __pfx_ksys_write+0x10/0x10 [ 1255.273273][T21090] __do_sys_keyctl+0x4df/0x590 [ 1255.273285][T21090] do_syscall_64+0xcd/0xfa0 [ 1255.273296][T21090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.273307][T21090] RIP: 0033:0x7fb06378f749 [ 1255.273316][T21090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.273327][T21090] RSP: 002b:00007fb0619f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1255.273338][T21090] RAX: ffffffffffffffda RBX: 00007fb0639e5fa0 RCX: 00007fb06378f749 [ 1255.273345][T21090] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 1255.273351][T21090] RBP: 00007fb0619f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.273358][T21090] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 1255.273364][T21090] R13: 00007fb0639e6038 R14: 00007fb0639e5fa0 R15: 00007ffe4602d3f8 [ 1255.273377][T21090] [ 1255.616211][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1255.914048][ T42] usb 7-1: USB disconnect, device number 61 [ 1256.709501][T21112] loop4: detected capacity change from 0 to 2560 [ 1256.715860][ T30] audit: type=1400 audit(1764285490.318:1584): avc: denied { append } for pid=21111 comm="syz.4.3671" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1256.765363][T21114] block nbd6: NBD_DISCONNECT [ 1256.771846][ T5993] buffer_io_error: 9 callbacks suppressed [ 1256.771856][ T5993] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1256.920605][ T42] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1257.085590][ T5993] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1257.091527][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 1257.105447][ T30] audit: type=1400 audit(1764285490.664:1585): avc: denied { ioctl } for pid=21111 comm="syz.4.3671" path="socket:[66334]" dev="sockfs" ino=66334 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1257.121364][ T5993] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1257.148918][ T42] usb 2-1: config index 0 descriptor too short (expected 804, got 36) [ 1257.157645][ T42] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.168747][ T42] usb 2-1: config 6 has no interfaces? [ 1257.177083][ T42] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1257.186407][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.204468][ T5993] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1257.213836][ T5993] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1257.223776][ T5993] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 1257.267840][ T5993] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 1257.285147][ T5993] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 1257.294037][ T5993] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 1257.307876][ T5993] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 1260.034021][ T30] audit: type=1400 audit(1764285493.424:1586): avc: denied { ioctl } for pid=21143 comm="syz.2.3676" path="socket:[66370]" dev="sockfs" ino=66370 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1260.098522][T16690] usb 2-1: USB disconnect, device number 119 [ 1260.221218][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'. [ 1260.369881][T21151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1260.596667][T21154] serio: Serial port ptm0 [ 1260.876197][T16690] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1261.799926][ T30] audit: type=1400 audit(1764285495.080:1587): avc: denied { execute } for pid=21166 comm="syz.5.3682" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1261.977041][T17517] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1261.987855][T16690] usb 5-1: Using ep0 maxpacket: 8 [ 1262.002645][T16690] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1262.015265][T16690] usb 5-1: config 0 has no interface number 0 [ 1262.023643][T16690] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1262.035462][T16690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.059815][T16690] usb 5-1: Product: syz [ 1262.066681][T16690] usb 5-1: Manufacturer: syz [ 1262.079209][T16690] usb 5-1: SerialNumber: syz [ 1262.102357][T16690] usb 5-1: config 0 descriptor?? [ 1262.139336][T17517] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.154422][T17517] usb 3-1: config 0 has no interface number 0 [ 1262.172143][T17517] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8e.1e [ 1262.193115][T17517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.213393][T17517] usb 3-1: config 0 descriptor?? [ 1262.227103][T17517] usb 3-1: selecting invalid altsetting 1 [ 1262.240743][T17517] dvb_ttusb_budget: ttusb_init_controller: error [ 1262.256537][T17517] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1262.318764][T21173] mmap: syz.1.3685 (21173): VmData 25841664 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1262.404066][T17517] DVB: Unable to find symbol cx22700_attach() [ 1262.505131][T17517] DVB: Unable to find symbol tda10046_attach() [ 1262.599259][T17517] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1262.626500][T17517] usb 3-1: USB disconnect, device number 126 [ 1262.712880][T16690] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1262.741302][T16690] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1262.757862][T16690] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 1262.781978][T16690] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 1262.805599][T16690] usb 5-1: USB disconnect, device number 12 [ 1263.211403][T21182] ip6_vti0 speed is unknown, defaulting to 1000 [ 1263.309898][ T30] audit: type=1400 audit(1764285496.483:1588): avc: denied { execute } for pid=21186 comm="syz.5.3688" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1263.360964][T21182] lo speed is unknown, defaulting to 1000 [ 1265.152354][T16690] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1265.263914][T21208] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1265.279017][T21208] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 1265.622799][T16690] usb 7-1: Using ep0 maxpacket: 32 [ 1265.640656][T16690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1265.648993][T16690] usb 7-1: config 0 has no interface number 0 [ 1265.658748][T16690] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1265.676131][T16690] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1265.685756][T16690] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1265.696079][T16690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.710355][T16690] usb 7-1: Product: syz [ 1265.714817][T16690] usb 7-1: Manufacturer: syz [ 1265.719961][T16690] usb 7-1: SerialNumber: syz [ 1265.755276][T16690] usb 7-1: config 0 descriptor?? [ 1266.019901][T16690] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1266.066638][T16690] cx231xx 7-1:0.1: Failed to read PCB config [ 1266.074946][T16690] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 1266.093903][T16690] usb 7-1: USB disconnect, device number 62 [ 1266.207630][T21216] block nbd4: NBD_DISCONNECT [ 1266.467459][T21224] UBIFS error (pid: 21224): cannot open "c:::", error -22 [ 1268.626630][ T5866] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1268.731320][T21248] bridge0: port 1(team0) entered disabled state [ 1268.968789][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 1269.125661][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1269.135062][ T5866] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1269.149183][ T5866] usb 3-1: Product: syz [ 1269.166092][ T5866] usb 3-1: Manufacturer: syz [ 1269.186885][ T5866] usb 3-1: SerialNumber: syz [ 1269.229596][ T5866] usb 3-1: config 0 descriptor?? [ 1269.265262][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1269.665015][T21261] Mount JFS Failure: -5 [ 1269.669247][T21261] jfs_mount failed w/return code = -5 [ 1269.899393][ T5866] gspca_zc3xx: reg_w_i err -110 [ 1269.904687][ T5866] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1269.974408][T21248] team0 (unregistering): left allmulticast mode [ 1269.992219][T21248] bridge0: port 1(team0) entered disabled state [ 1270.271002][T21260] netlink: 'syz.6.3711': attribute type 10 has an invalid length. [ 1270.501728][T21260] bridge0: entered promiscuous mode [ 1270.523276][T21260] bridge0: left promiscuous mode [ 1270.591089][T21272] fuse: Unknown parameter 'grou00000000000000000000' [ 1270.731625][ T30] audit: type=1400 audit(1764285503.423:1589): avc: denied { map } for pid=21273 comm="syz.6.3715" path="socket:[66920]" dev="sockfs" ino=66920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1270.770427][ T30] audit: type=1400 audit(1764285503.461:1590): avc: denied { read } for pid=21273 comm="syz.6.3715" path="socket:[66920]" dev="sockfs" ino=66920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1270.802093][T21279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.820923][T21279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.830741][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1271.468108][ T42] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1271.477420][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.489103][ T42] usb 5-1: config 0 descriptor?? [ 1271.969817][ T42] usb 5-1: Cannot read MAC address [ 1271.975741][ T42] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1271.990473][ T42] usb 5-1: USB disconnect, device number 13 [ 1272.025198][T21287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1272.272095][ T5866] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1272.357899][ T847] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1272.522742][T17517] usb 3-1: USB disconnect, device number 127 [ 1272.550412][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1272.559737][ T5866] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1272.591204][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.614782][ T847] usb 2-1: Using ep0 maxpacket: 8 [ 1272.919133][ T5866] usb 7-1: config 0 descriptor?? [ 1272.958330][ T5866] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1272.976936][ T847] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1273.119903][T17517] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1273.138060][ T847] usb 2-1: config 0 has no interface number 0 [ 1273.157313][ T847] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1273.179354][ T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.202334][ T847] usb 2-1: Product: syz [ 1273.267207][T21306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21306 comm=syz.4.3724 [ 1273.285602][T21306] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1273.299539][T21306] netlink: 'syz.4.3724': attribute type 1 has an invalid length. [ 1273.627200][ T847] usb 2-1: Manufacturer: syz [ 1273.640470][ T847] usb 2-1: SerialNumber: syz [ 1273.653958][ T847] usb 2-1: config 0 descriptor?? [ 1273.720088][T17517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.740158][T17517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.779709][T17517] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1273.803766][T17517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.833428][T17517] usb 3-1: config 0 descriptor?? [ 1274.096196][T21311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21311 comm=syz.5.3725 [ 1274.118634][T21311] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1274.139190][T21311] netlink: 'syz.5.3725': attribute type 1 has an invalid length. [ 1274.167022][ T5866] gspca_sunplus: reg_w_riv err -110 [ 1274.173351][ T5866] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1274.376034][T21314] fuse: Unknown parameter 'group_i00000000000000000000' [ 1274.537377][ T847] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1274.549071][ T847] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 1274.558642][ T847] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 1274.569383][ T847] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 1274.588343][ T847] usb 2-1: USB disconnect, device number 120 [ 1274.857403][ T5866] usb 7-1: USB disconnect, device number 63 [ 1274.874819][T17517] usbhid 3-1:0.0: can't add hid device: -71 [ 1275.148968][T17517] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1275.225556][T17517] usb 3-1: USB disconnect, device number 2 [ 1275.512713][T21334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21334 comm=syz.4.3729 [ 1275.533119][T21334] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1275.550751][T21334] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 1276.498914][T21347] Sensor B: ================= START STATUS ================= [ 1276.506922][T21347] Sensor B: Test Pattern: 75% Colorbar [ 1276.512641][T21347] Sensor B: Show Information: All [ 1276.518150][T21347] Sensor B: Vertical Flip: false [ 1276.523561][T21347] Sensor B: Horizontal Flip: false [ 1276.529073][T21347] Sensor B: Brightness: 128 [ 1276.533775][T21347] Sensor B: Contrast: 128 [ 1276.538376][T21347] Sensor B: Hue: 0 [ 1276.540931][T21349] tipc: Enabled bearer , priority 0 [ 1276.555859][T21347] Sensor B: Saturation: 128 [ 1276.557656][T21350] fuse: Unknown parameter 'group_i00000000000000000000' [ 1276.568086][T21347] Sensor B: ================== END STATUS ================== [ 1276.591632][T16690] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1276.791597][T16690] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1276.808173][T21342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.821271][T21349] tipc: Resetting bearer [ 1276.837951][T16690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.878809][T16690] usb 7-1: config 0 descriptor?? [ 1276.948659][T21348] tipc: Disabling bearer [ 1277.167550][T16690] usb 7-1: Cannot read MAC address [ 1277.198253][ T30] audit: type=1400 audit(1764285509.475:1591): avc: denied { kexec_image_load } for pid=21364 comm="syz.5.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1277.218435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1278.044493][T16690] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1278.058900][T16690] usb 7-1: USB disconnect, device number 64 [ 1278.258192][T21380] block nbd2: NBD_DISCONNECT [ 1278.263329][T21381] block nbd4: NBD_DISCONNECT [ 1278.464829][T21379] ip6_vti0 speed is unknown, defaulting to 1000 [ 1278.538656][T17517] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1278.899643][T17517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.223533][T17517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.259304][T17517] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1279.292229][T17517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.342457][T17517] usb 2-1: config 0 descriptor?? [ 1280.579710][T21379] lo speed is unknown, defaulting to 1000 [ 1280.833345][T21407] 9pnet_fd: Insufficient options for proto=fd [ 1280.946992][ T30] audit: type=1400 audit(1764285512.983:1592): avc: denied { ioctl } for pid=21412 comm="syz.2.3753" path="socket:[67870]" dev="sockfs" ino=67870 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1281.059389][ T5887] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 1281.241531][T21422] Sensor B: ================= START STATUS ================= [ 1281.249213][T21422] Sensor B: Test Pattern: 75% Colorbar [ 1281.255186][T21422] Sensor B: Show Information: All [ 1281.260428][T21422] Sensor B: Vertical Flip: false [ 1281.265600][T21422] Sensor B: Horizontal Flip: false [ 1281.270941][T21422] Sensor B: Brightness: 128 [ 1281.275764][T21422] Sensor B: Contrast: 128 [ 1281.280443][T21422] Sensor B: Hue: 0 [ 1281.284384][T21422] Sensor B: Saturation: 128 [ 1281.290044][T21422] Sensor B: ================== END STATUS ================== [ 1281.375803][T21419] bond0: (slave team0): Releasing backup interface [ 1281.409967][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1281.477137][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 1281.611722][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1281.619706][T21420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.634725][ T5887] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1281.644008][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.655944][ T5887] usb 7-1: config 0 descriptor?? [ 1281.672738][T16690] syz1: Port: 1 Link DOWN [ 1281.681906][T21404] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1281.689497][T21404] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1281.704416][ T5887] metro_usb 7-1:0.0: Metrologic USB to Serial converter detected [ 1281.732399][ T5887] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1282.033136][T17517] usbhid 2-1:0.0: can't add hid device: -71 [ 1282.070298][T17517] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1282.127903][T17517] usb 2-1: USB disconnect, device number 121 [ 1282.279226][T21429] netlink: 'syz.1.3756': attribute type 10 has an invalid length. [ 1282.301900][T21429] bridge0: entered promiscuous mode [ 1282.307769][T21429] bridge0: left promiscuous mode [ 1282.750726][T21435] block nbd4: NBD_DISCONNECT [ 1282.920085][T17517] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1283.153673][T21440] block nbd2: NBD_DISCONNECT [ 1283.292644][T17517] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1283.357076][T17517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.422713][T17517] usb 2-1: config 0 descriptor?? [ 1283.609167][T21444] netlink: 'syz.5.3761': attribute type 10 has an invalid length. [ 1283.618453][T21444] netlink: 'syz.5.3761': attribute type 10 has an invalid length. [ 1283.629755][T21444] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1283.710037][T17517] usb 2-1: Cannot read MAC address [ 1283.718446][T17517] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1283.732872][T17517] usb 2-1: USB disconnect, device number 122 [ 1283.862935][T21447] netlink: 'syz.4.3762': attribute type 10 has an invalid length. [ 1283.870867][T21447] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1283.879948][T21447] netlink: 'syz.4.3762': attribute type 10 has an invalid length. [ 1283.890447][T21447] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1283.901261][T16690] syz1: Port: 1 Link ACTIVE [ 1283.913134][ T30] audit: type=1326 audit(1764285515.761:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.4.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06378f749 code=0x7ffc0000 [ 1283.936885][ T30] audit: type=1326 audit(1764285515.761:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.4.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06378f749 code=0x7ffc0000 [ 1284.025545][T16690] usb 7-1: USB disconnect, device number 65 [ 1284.048716][T16690] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1284.060251][T16690] metro_usb 7-1:0.0: device disconnected [ 1284.405974][T16690] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1284.504134][T21458] FAULT_INJECTION: forcing a failure. [ 1284.504134][T21458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.517565][T21458] CPU: 0 UID: 0 PID: 21458 Comm: syz.5.3767 Not tainted syzkaller #0 PREEMPT(full) [ 1284.517594][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.517604][T21458] Call Trace: [ 1284.517611][T21458] [ 1284.517618][T21458] dump_stack_lvl+0x16c/0x1f0 [ 1284.517639][T21458] should_fail_ex+0x512/0x640 [ 1284.517663][T21458] _copy_from_user+0x2e/0xd0 [ 1284.517687][T21458] copy_msghdr_from_user+0x98/0x160 [ 1284.517711][T21458] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1284.517747][T21458] ___sys_sendmsg+0xfe/0x1d0 [ 1284.517771][T21458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.517798][T21458] ? __lock_acquire+0x622/0x1c90 [ 1284.517845][T21458] __sys_sendmsg+0x16d/0x220 [ 1284.517868][T21458] ? __pfx___sys_sendmsg+0x10/0x10 [ 1284.517903][T21458] do_syscall_64+0xcd/0xfa0 [ 1284.517920][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.517935][T21458] RIP: 0033:0x7fe823b8f749 [ 1284.517948][T21458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.517964][T21458] RSP: 002b:00007fe8249c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1284.517980][T21458] RAX: ffffffffffffffda RBX: 00007fe823de5fa0 RCX: 00007fe823b8f749 [ 1284.517992][T21458] RDX: 0000000024000080 RSI: 0000200000000780 RDI: 0000000000000003 [ 1284.518002][T21458] RBP: 00007fe8249c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.518012][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.518022][T21458] R13: 00007fe823de6038 R14: 00007fe823de5fa0 R15: 00007fff6aca0498 [ 1284.518045][T21458] [ 1284.555667][T10422] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1284.653776][T21462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1284.659346][T16690] usb 7-1: Using ep0 maxpacket: 8 [ 1284.711398][ T30] audit: type=1400 audit(1764285516.407:1595): avc: denied { block_suspend } for pid=21459 comm="syz.5.3768" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1284.741340][T17517] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1284.749596][T16690] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1284.759945][T16690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.775961][T16690] usb 7-1: config 0 descriptor?? [ 1284.785586][T16690] gm12u320 7-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1284.796424][T16690] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 1284.807548][T16690] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1284.819288][T16690] usb-storage 7-1:0.0: device ignored [ 1284.919113][T10422] usb 2-1: Using ep0 maxpacket: 8 [ 1284.924278][T17517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.937717][T10422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.948004][T17517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.948431][T10422] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1284.974105][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1284.985431][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1284.995782][T10422] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1285.015587][ T5887] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1285.032866][ T30] audit: type=1400 audit(1764285516.809:1596): avc: denied { connect } for pid=21448 comm="syz.6.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1285.056653][T21449] macsec1: entered promiscuous mode [ 1285.061982][T21449] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1285.069151][T21449] macsec1: entered allmulticast mode [ 1285.074415][T21449] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 1285.107964][T10422] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1285.117794][T10422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1285.136331][T10422] usb 2-1: Product: syz [ 1285.147197][T10422] usb 2-1: Manufacturer: syz [ 1285.151878][T10422] usb 2-1: SerialNumber: syz [ 1285.158786][T16690] usb 7-1: USB disconnect, device number 66 [ 1285.174136][T10422] usb 2-1: config 0 descriptor?? [ 1285.185881][T17517] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1285.210925][T17517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.251990][T17517] usb 3-1: config 0 descriptor?? [ 1285.337221][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 1285.345693][ T5887] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1285.354873][ T5887] usb 6-1: config 0 has no interface number 0 [ 1285.363869][ T5887] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1285.374800][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.383224][ T5887] usb 6-1: Product: syz [ 1285.387627][ T5887] usb 6-1: Manufacturer: syz [ 1285.392805][ T5887] usb 6-1: SerialNumber: syz [ 1285.411783][ T5887] usb 6-1: config 0 descriptor?? [ 1285.412854][T10422] radio-si470x 2-1:0.0: DeviceID=0x7478 ChipID=0x5b00 [ 1285.627724][T10422] radio-si470x 2-1:0.0: software version 116, hardware version 120 [ 1286.566010][ T5887] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1286.575499][T21454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.679565][ T5887] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 1286.716309][T21454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.745928][ T5887] uvcvideo 6-1:0.31: Failed to create links for entity 5 [ 1286.782324][T10422] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1286.791663][T10422] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1286.811378][T10422] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1286.824886][ T5887] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 1286.834195][T21481] tipc: Started in network mode [ 1286.839083][T21481] tipc: Node identity 868abe8706, cluster identity 4711 [ 1286.847367][T10422] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1286.881388][T21481] tipc: Enabled bearer , priority 0 [ 1287.014299][T10422] usb 2-1: USB disconnect, device number 123 [ 1287.045411][T21484] syzkaller0: entered promiscuous mode [ 1287.049333][ T5887] usb 6-1: USB disconnect, device number 127 [ 1287.239004][T21484] syzkaller0: entered allmulticast mode [ 1287.297626][T21479] tipc: Resetting bearer [ 1287.318646][T21479] tipc: Disabling bearer [ 1287.348322][T21477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.740142][ T30] audit: type=1400 audit(1764285519.306:1597): avc: denied { bind } for pid=21493 comm="syz.1.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1287.787470][ T30] audit: type=1400 audit(1764285519.316:1598): avc: denied { listen } for pid=21493 comm="syz.1.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1288.455356][T17517] usbhid 3-1:0.0: can't add hid device: -71 [ 1288.468430][T17517] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1288.931830][T17517] usb 3-1: USB disconnect, device number 3 [ 1289.388667][T21524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1290.299126][T17517] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1291.130468][T21533] Sensor B: ================= START STATUS ================= [ 1291.138140][T21533] Sensor B: Test Pattern: 75% Colorbar [ 1291.156304][T21533] Sensor B: Show Information: All [ 1291.161787][T21533] Sensor B: Vertical Flip: false [ 1291.162186][T21527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.218110][T21533] Sensor B: Horizontal Flip: false [ 1291.277312][T21533] Sensor B: Brightness: 128 [ 1291.293251][T21533] Sensor B: Contrast: 128 [ 1291.300285][T21533] Sensor B: Hue: 0 [ 1291.305438][T21533] Sensor B: Saturation: 128 [ 1291.328128][T21533] Sensor B: ================== END STATUS ================== [ 1291.356520][T17517] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1291.372347][T17517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.380856][T17517] usb 3-1: Product: syz [ 1291.385115][T17517] usb 3-1: Manufacturer: syz [ 1291.389986][T17517] usb 3-1: SerialNumber: syz [ 1291.407104][T17517] usb 3-1: config 0 descriptor?? [ 1291.482450][T21540] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1291.701820][T17517] usb_8dev 3-1:0.0 can0: sending command message failed [ 1291.715061][T17517] usb_8dev 3-1:0.0 can0: can't get firmware version [ 1291.762908][ T5866] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1291.833845][T17517] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 1291.874528][T17517] usb 3-1: USB disconnect, device number 4 [ 1291.964962][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 1291.987300][ T5866] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1292.067200][T21546] Sensor B: ================= START STATUS ================= [ 1292.075025][T21546] Sensor B: Test Pattern: 75% Colorbar [ 1292.080600][T21546] Sensor B: Show Information: All [ 1292.085842][T21546] Sensor B: Vertical Flip: false [ 1292.090932][T21546] Sensor B: Horizontal Flip: false [ 1292.096892][T21546] Sensor B: Brightness: 128 [ 1292.101819][T21546] Sensor B: Contrast: 128 [ 1292.106579][T21546] Sensor B: Hue: 0 [ 1292.110598][T21546] Sensor B: Saturation: 128 [ 1292.115441][T21546] Sensor B: ================== END STATUS ================== [ 1292.143495][ T5866] usb 7-1: config 0 has no interface number 0 [ 1292.336683][ T5866] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1292.359173][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.511173][ T5866] usb 7-1: Product: syz [ 1292.609336][ T5866] usb 7-1: Manufacturer: syz [ 1292.628106][ T5866] usb 7-1: SerialNumber: syz [ 1292.676770][ T5866] usb 7-1: config 0 descriptor?? [ 1292.698948][T21544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.118352][ T5866] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1293.148480][ T5866] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 1293.157526][ T5866] uvcvideo 7-1:0.31: Failed to create links for entity 5 [ 1293.218624][ T5866] uvcvideo 7-1:0.31: Failed to register entities (-22). [ 1293.234208][ T5866] usb 7-1: USB disconnect, device number 67 [ 1294.122141][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1294.465046][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.564249][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.575586][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1294.587715][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.671633][ T9] usb 5-1: config 0 descriptor?? [ 1295.637629][T21583] block nbd6: NBD_DISCONNECT [ 1295.864945][T21587] Sensor B: ================= START STATUS ================= [ 1295.872673][T21587] Sensor B: Test Pattern: 75% Colorbar [ 1295.878379][T21587] Sensor B: Show Information: All [ 1295.883677][T21587] Sensor B: Vertical Flip: false [ 1295.889089][T21587] Sensor B: Horizontal Flip: false [ 1295.895491][T21587] Sensor B: Brightness: 128 [ 1295.900300][T21587] Sensor B: Contrast: 128 [ 1295.904857][T21587] Sensor B: Hue: 0 [ 1295.908794][T21587] Sensor B: Saturation: 128 [ 1295.913645][T21587] Sensor B: ================== END STATUS ================== [ 1296.115427][T21584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.527738][T21593] Mount JFS Failure: -5 [ 1296.532056][T21593] jfs_mount failed w/return code = -5 [ 1297.058601][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1297.064836][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1297.462558][ T9] usb 5-1: USB disconnect, device number 14 [ 1297.590952][T21599] netlink: 'syz.6.3802': attribute type 10 has an invalid length. [ 1297.596543][T21599] bridge0: entered promiscuous mode [ 1298.126598][T21595] bridge0: left promiscuous mode [ 1298.462307][T21605] Sensor B: ================= START STATUS ================= [ 1298.469986][T21605] Sensor B: Test Pattern: 75% Colorbar [ 1298.475500][T21605] Sensor B: Show Information: All [ 1298.480511][T21605] Sensor B: Vertical Flip: false [ 1298.485497][T21605] Sensor B: Horizontal Flip: false [ 1298.490621][T21605] Sensor B: Brightness: 128 [ 1298.495099][T21605] Sensor B: Contrast: 128 [ 1298.499439][T21605] Sensor B: Hue: 0 [ 1298.503146][T21605] Sensor B: Saturation: 128 [ 1298.507727][T21605] Sensor B: ================== END STATUS ================== [ 1298.575719][T21604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.931978][ T30] audit: type=1400 audit(1764285529.802:1599): avc: denied { setopt } for pid=21617 comm="syz.4.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1299.991419][T21632] block nbd2: NBD_DISCONNECT [ 1300.828027][T21646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.877236][T21642] ip6_vti0 speed is unknown, defaulting to 1000 [ 1301.009004][ T30] audit: type=1400 audit(1764285531.757:1600): avc: denied { map } for pid=21643 comm="syz.5.3817" path="socket:[68314]" dev="sockfs" ino=68314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1301.178926][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.187571][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.215036][T21642] lo speed is unknown, defaulting to 1000 [ 1302.158623][ T30] audit: type=1400 audit(1764285532.823:1601): avc: denied { append } for pid=21663 comm="syz.1.3820" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1302.268709][ T30] audit: type=1804 audit(1764285532.926:1602): pid=21664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3820" name="/newroot/190/bus/file0" dev="overlay" ino=1027 res=1 errno=0 [ 1302.311434][ T30] audit: type=1400 audit(1764285532.954:1603): avc: denied { shutdown } for pid=21663 comm="syz.1.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1302.362050][T21670] netlink: 'syz.2.3822': attribute type 10 has an invalid length. [ 1302.420138][T21673] netlink: 'syz.2.3822': attribute type 10 has an invalid length. [ 1302.532922][ T30] audit: type=1326 audit(1764285533.178:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21667 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1302.566147][ T30] audit: type=1326 audit(1764285533.206:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21667 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1302.592945][ T30] audit: type=1326 audit(1764285533.206:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21667 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1302.618722][ T30] audit: type=1326 audit(1764285533.206:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21667 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1302.644317][ T30] audit: type=1326 audit(1764285533.206:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21667 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1302.698692][T21673] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1302.735943][T21675] ip6_vti0 speed is unknown, defaulting to 1000 [ 1303.017132][T21675] lo speed is unknown, defaulting to 1000 [ 1303.479911][T21685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.586262][T21695] block nbd4: NBD_DISCONNECT [ 1304.681797][ T30] audit: type=1326 audit(1764285535.190:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1304.781411][T21701] Mount JFS Failure: -5 [ 1304.785775][T21701] jfs_mount failed w/return code = -5 [ 1305.149261][ T30] audit: type=1326 audit(1764285535.190:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.173847][ T30] audit: type=1326 audit(1764285535.190:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.197448][ T30] audit: type=1326 audit(1764285535.190:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.238723][ T30] audit: type=1326 audit(1764285535.190:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.307941][ T30] audit: type=1326 audit(1764285535.190:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.334730][ T30] audit: type=1326 audit(1764285535.676:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.360091][ T30] audit: type=1326 audit(1764285535.676:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.384603][ T30] audit: type=1326 audit(1764285535.779:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.408876][ T30] audit: type=1326 audit(1764285535.779:1618): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1305.603168][T21709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3830'. [ 1305.626994][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3830'. [ 1305.698274][T21713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21713 comm=syz.6.3831 [ 1305.721982][T21713] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1306.843025][T21726] FAULT_INJECTION: forcing a failure. [ 1306.843025][T21726] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.243986][T21726] CPU: 0 UID: 0 PID: 21726 Comm: syz.4.3835 Not tainted syzkaller #0 PREEMPT(full) [ 1307.244014][T21726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1307.244025][T21726] Call Trace: [ 1307.244031][T21726] [ 1307.244039][T21726] dump_stack_lvl+0x16c/0x1f0 [ 1307.244062][T21726] should_fail_ex+0x512/0x640 [ 1307.244084][T21726] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1307.244115][T21726] should_failslab+0xc2/0x120 [ 1307.244137][T21726] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1307.244164][T21726] ? __alloc_skb+0x2b2/0x380 [ 1307.244192][T21726] ? __alloc_skb+0x2b2/0x380 [ 1307.244211][T21726] __alloc_skb+0x2b2/0x380 [ 1307.244233][T21726] ? __pfx___alloc_skb+0x10/0x10 [ 1307.244256][T21726] ? genl_rcv_msg+0x4bb/0x800 [ 1307.244281][T21726] netlink_ack+0x15d/0xb80 [ 1307.244310][T21726] ? __lock_acquire+0x622/0x1c90 [ 1307.244332][T21726] netlink_rcv_skb+0x332/0x420 [ 1307.244358][T21726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1307.244377][T21726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1307.244419][T21726] ? netlink_deliver_tap+0x1ae/0xd30 [ 1307.244449][T21726] genl_rcv+0x28/0x40 [ 1307.244464][T21726] netlink_unicast+0x5aa/0x870 [ 1307.244495][T21726] ? __pfx_netlink_unicast+0x10/0x10 [ 1307.244521][T21726] ? security_netlink_send+0x1ee/0x210 [ 1307.244551][T21726] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1307.244581][T21726] netlink_sendmsg+0x8c8/0xdd0 [ 1307.244612][T21726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.244648][T21726] ____sys_sendmsg+0xa98/0xc70 [ 1307.244666][T21726] ? copy_msghdr_from_user+0x10a/0x160 [ 1307.244690][T21726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1307.244712][T21726] ? __pfx_css_rstat_updated+0x10/0x10 [ 1307.244744][T21726] ___sys_sendmsg+0x134/0x1d0 [ 1307.244770][T21726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.244792][T21726] ? __lock_acquire+0x622/0x1c90 [ 1307.244840][T21726] __sys_sendmsg+0x16d/0x220 [ 1307.244865][T21726] ? __pfx___sys_sendmsg+0x10/0x10 [ 1307.244906][T21726] do_syscall_64+0xcd/0xfa0 [ 1307.244927][T21726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.244945][T21726] RIP: 0033:0x7fb06378f749 [ 1307.244964][T21726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.244982][T21726] RSP: 002b:00007fb0619f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.244999][T21726] RAX: ffffffffffffffda RBX: 00007fb0639e5fa0 RCX: 00007fb06378f749 [ 1307.245011][T21726] RDX: 0000000000040080 RSI: 0000200000000200 RDI: 0000000000000004 [ 1307.245022][T21726] RBP: 00007fb0619f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.245032][T21726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.245042][T21726] R13: 00007fb0639e6038 R14: 00007fb0639e5fa0 R15: 00007ffe4602d3f8 [ 1307.245067][T21726] [ 1309.006842][T21719] GUP no longer grows the stack in syz.6.3833 (21719): 200000004000-20000000a000 (200000002000) [ 1309.018102][T21719] CPU: 1 UID: 0 PID: 21719 Comm: syz.6.3833 Not tainted syzkaller #0 PREEMPT(full) [ 1309.018119][T21719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1309.018127][T21719] Call Trace: [ 1309.018132][T21719] [ 1309.018136][T21719] dump_stack_lvl+0x16c/0x1f0 [ 1309.018152][T21719] gup_vma_lookup+0x1d2/0x220 [ 1309.018165][T21719] __get_user_pages+0x241/0x3530 [ 1309.018183][T21719] ? find_held_lock+0x2b/0x80 [ 1309.018199][T21719] ? __pfx___get_user_pages+0x10/0x10 [ 1309.018217][T21719] get_user_pages_remote+0x243/0xab0 [ 1309.018231][T21719] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 1309.018245][T21719] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1309.018260][T21719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1309.018278][T21719] __access_remote_vm+0x250/0xaa0 [ 1309.018294][T21719] ? do_raw_spin_lock+0x12c/0x2b0 [ 1309.018306][T21719] ? __pfx___access_remote_vm+0x10/0x10 [ 1309.018321][T21719] proc_pid_cmdline_read+0x4de/0x8e0 [ 1309.018343][T21719] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1309.018361][T21719] ? rw_verify_area+0xcf/0x6c0 [ 1309.018379][T21719] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1309.018392][T21719] vfs_readv+0x5c1/0x8b0 [ 1309.018413][T21719] ? __pfx_vfs_readv+0x10/0x10 [ 1309.018440][T21719] ? __fget_files+0x20e/0x3c0 [ 1309.018457][T21719] ? do_preadv+0x1a6/0x270 [ 1309.018472][T21719] do_preadv+0x1a6/0x270 [ 1309.018490][T21719] ? __pfx_do_preadv+0x10/0x10 [ 1309.018511][T21719] do_syscall_64+0xcd/0xfa0 [ 1309.018522][T21719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.018534][T21719] RIP: 0033:0x7f2d0478f749 [ 1309.018544][T21719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.018555][T21719] RSP: 002b:00007f2d05554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1309.018566][T21719] RAX: ffffffffffffffda RBX: 00007f2d049e5fa0 RCX: 00007f2d0478f749 [ 1309.018573][T21719] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 1309.018580][T21719] RBP: 00007f2d04813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1309.018586][T21719] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1309.018592][T21719] R13: 00007f2d049e6038 R14: 00007f2d049e5fa0 R15: 00007ffdbf7e6be8 [ 1309.018607][T21719] [ 1309.272806][T21734] Sensor B: ================= START STATUS ================= [ 1309.280390][T21734] Sensor B: Test Pattern: 75% Colorbar [ 1309.286083][T21734] Sensor B: Show Information: All [ 1309.291095][T21734] Sensor B: Vertical Flip: false [ 1309.296046][T21734] Sensor B: Horizontal Flip: false [ 1309.301134][T21734] Sensor B: Brightness: 128 [ 1309.305638][T21734] Sensor B: Contrast: 128 [ 1309.309957][T21734] Sensor B: Hue: 0 [ 1309.313652][T21734] Sensor B: Saturation: 128 [ 1309.318151][T21734] Sensor B: ================== END STATUS ================== [ 1310.629900][T21732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1311.029023][T21763] input: syz1 as /devices/virtual/input/input105 [ 1311.130361][T21765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21765 comm=syz.1.3844 [ 1311.148832][T21765] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1311.465145][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1311.465162][ T30] audit: type=1400 audit(1764285541.111:1631): avc: denied { read } for pid=21756 comm="syz.2.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1312.155356][T21768] Sensor B: ================= START STATUS ================= [ 1312.162982][T21768] Sensor B: Test Pattern: 75% Colorbar [ 1312.168435][T21768] Sensor B: Show Information: All [ 1312.173488][T21768] Sensor B: Vertical Flip: false [ 1312.178413][T21768] Sensor B: Horizontal Flip: false [ 1312.183603][T21768] Sensor B: Brightness: 128 [ 1312.188082][T21768] Sensor B: Contrast: 128 [ 1312.192419][T21768] Sensor B: Hue: 0 [ 1312.196130][T21768] Sensor B: Saturation: 128 [ 1312.200618][T21768] Sensor B: ================== END STATUS ================== [ 1312.322213][T21767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1312.471332][T21776] ip6_vti0 speed is unknown, defaulting to 1000 [ 1312.573097][T21781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21781 comm=syz.2.3848 [ 1312.646649][T21782] netlink: 'syz.2.3848': attribute type 1 has an invalid length. [ 1313.493856][T21776] lo speed is unknown, defaulting to 1000 [ 1313.896818][T21790] random: crng reseeded on system resumption [ 1314.905056][T21781] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1315.889823][T21824] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3858'. [ 1317.513161][T21857] syz.5.3870 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1317.614796][T21858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.956922][ T30] audit: type=1400 audit(1764285549.473:1632): avc: denied { wake_alarm } for pid=21883 comm="syz.2.3879" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1320.005985][T21887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1320.142218][T21890] serio: Serial port ttyS3 [ 1320.308476][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'. [ 1321.199568][ T30] audit: type=1400 audit(1764285550.614:1633): avc: denied { read } for pid=21912 comm="syz.5.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1323.802948][T21948] wg2: entered promiscuous mode [ 1323.807925][T21948] wg2: entered allmulticast mode [ 1323.854979][ T30] audit: type=1400 audit(1764285553.121:1634): avc: denied { setopt } for pid=21926 comm="syz.2.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1325.346507][ T30] audit: type=1400 audit(1764285554.113:1635): avc: denied { write } for pid=21971 comm="syz.4.3908" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1325.415608][ T30] audit: type=1326 audit(1764285554.580:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.5.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1325.440060][ T30] audit: type=1326 audit(1764285554.580:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.5.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1325.465766][ T30] audit: type=1326 audit(1764285554.590:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.5.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1325.529756][ T30] audit: type=1326 audit(1764285554.590:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.5.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1326.083180][T10422] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1326.291912][T10422] usb 3-1: Using ep0 maxpacket: 32 [ 1326.384067][T10422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.530047][T10422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.551101][T10422] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1326.579568][T10422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.608237][T10422] usb 3-1: config 0 descriptor?? [ 1326.622777][T10422] hub 3-1:0.0: USB hub found [ 1326.839237][T10422] hub 3-1:0.0: 1 port detected [ 1327.325211][T22023] syzkaller0: entered promiscuous mode [ 1327.331172][T22023] syzkaller0: entered allmulticast mode [ 1327.338823][ T50] syzkaller0: tun_net_xmit 70 [ 1327.344753][ T50] syzkaller0: tun_net_xmit 14 [ 1327.405276][T10422] usb 3-1: USB disconnect, device number 5 [ 1327.843065][ T847] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1328.023138][ T30] audit: type=1400 audit(1764285557.022:1640): avc: denied { setattr } for pid=22033 comm="syz.5.3928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1329.489287][ T847] usb 7-1: Using ep0 maxpacket: 32 [ 1329.562675][T22069] overlayfs: overlapping lowerdir path [ 1329.929799][ T847] usb 7-1: config 0 has no interfaces? [ 1329.938099][ T847] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1329.947156][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.959556][ T847] usb 7-1: Product: syz [ 1329.963742][ T847] usb 7-1: Manufacturer: syz [ 1329.968344][ T847] usb 7-1: SerialNumber: syz [ 1329.977699][ T847] usb 7-1: config 0 descriptor?? [ 1330.027067][T22074] ip6_vti0 speed is unknown, defaulting to 1000 [ 1330.220749][ T5887] usb 7-1: USB disconnect, device number 68 [ 1330.256348][ T30] audit: type=1400 audit(1764285559.108:1641): avc: denied { unmount } for pid=18004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1330.546812][T22074] lo speed is unknown, defaulting to 1000 [ 1331.113374][T22092] tipc: Started in network mode [ 1331.118282][T22092] tipc: Node identity 36e338510712, cluster identity 4711 [ 1331.145403][T22092] tipc: Enabled bearer , priority 0 [ 1331.166649][T22092] syzkaller0: entered promiscuous mode [ 1331.172142][T22092] syzkaller0: entered allmulticast mode [ 1331.357311][T22092] tipc: Resetting bearer [ 1331.442828][T22089] tipc: Resetting bearer [ 1331.503821][T22089] tipc: Disabling bearer [ 1331.605126][ T847] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1331.776013][ T847] usb 3-1: Using ep0 maxpacket: 8 [ 1331.789787][ T847] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1332.234541][ T847] usb 3-1: config 179 has no interface number 0 [ 1332.796051][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1332.809124][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1332.820857][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1333.255910][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1333.266351][ T847] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1333.279937][ T847] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1333.287377][ T847] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1333.296701][ T847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.354906][ T847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input107 [ 1333.603978][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1333.605364][T10419] usb 3-1: USB disconnect, device number 6 [ 1333.613068][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1333.646463][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1333.724468][T22119] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3947'. [ 1335.749348][ T30] audit: type=1400 audit(1764285564.019:1642): avc: denied { mount } for pid=22140 comm="syz.6.3954" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1336.284102][ T5866] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x4 [ 1336.343304][ T5866] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x2 [ 1336.366989][ T5866] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x3 [ 1336.446177][T22154] overlayfs: overlapping lowerdir path [ 1336.875583][T10419] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1336.904191][ T5866] hid-generic 0000:3000000:0000.005F: hidraw0: HID v0.00 Device [sy] on syz0 [ 1337.100020][T10419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.151924][T10419] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.200680][T22157] fido_id[22157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1337.323885][T10419] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1337.345838][T10419] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1337.353946][T10419] usb 3-1: Product: syz [ 1337.369449][T10419] usb 3-1: config 0 descriptor?? [ 1338.882294][T22170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1339.673621][T10419] usb 3-1: USB disconnect, device number 7 [ 1341.228570][T22196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1341.318383][T22204] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1343.544348][T22241] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 1343.846142][T22241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=22241 comm=syz.4.3976 [ 1343.944376][ T30] audit: type=1400 audit(1764285571.820:1643): avc: denied { read } for pid=22224 comm="syz.4.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1344.146810][T22247] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1344.221825][ T30] audit: type=1400 audit(1764285572.166:1644): avc: denied { watch_reads } for pid=22239 comm="syz.6.3979" path="/342" dev="tmpfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1346.437618][ T847] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1347.164060][ T847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.177027][ T847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1347.189206][ T847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1347.209780][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.227857][ T847] usb 6-1: Product: syz [ 1347.236573][ T847] usb 6-1: Manufacturer: syz [ 1347.246719][ T847] usb 6-1: SerialNumber: syz [ 1347.587059][ T847] usb 6-1: 0:2 : does not exist [ 1347.695261][ T847] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1347.891234][ T847] usb 6-1: USB disconnect, device number 2 [ 1348.464294][ T30] audit: type=1400 audit(1764285576.057:1645): avc: denied { read write } for pid=22283 comm="syz.4.3992" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1348.522436][ T30] audit: type=1400 audit(1764285576.057:1646): avc: denied { open } for pid=22283 comm="syz.4.3992" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1348.718968][T22298] ip6_vti0 speed is unknown, defaulting to 1000 [ 1348.726858][T22299] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1348.741039][ T30] audit: type=1400 audit(1764285576.394:1647): avc: denied { load_policy } for pid=22296 comm="syz.1.3997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1348.746473][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1348.776846][T22299] SELinux: failed to load policy [ 1348.830287][T22306] tipc: New replicast peer: 255.255.255.255 [ 1348.837027][T22306] tipc: Enabled bearer , priority 10 [ 1348.856647][T22306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1349.316715][T22317] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1349.326055][T22317] tipc: Enabled bearer , priority 10 [ 1349.884167][T22298] lo speed is unknown, defaulting to 1000 [ 1349.890046][ T30] audit: type=1400 audit(1764285577.470:1648): avc: denied { setcheckreqprot } for pid=22321 comm="syz.1.4005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1350.125629][ T30] audit: type=1400 audit(1764285577.694:1649): avc: denied { module_load } for pid=22328 comm="syz.1.4007" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1350.516721][ T42] tipc: Node number set to 837892177 [ 1350.961087][T22347] ip6_vti0 speed is unknown, defaulting to 1000 [ 1351.389313][T22347] lo speed is unknown, defaulting to 1000 [ 1351.866999][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4014'. [ 1352.122298][T22363] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1352.735524][T22361] ip6_vti0 speed is unknown, defaulting to 1000 [ 1352.915880][T22361] lo speed is unknown, defaulting to 1000 [ 1353.339306][T22377] pim6reg1: entered promiscuous mode [ 1353.350651][T22377] pim6reg1: entered allmulticast mode [ 1355.252289][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4028'. [ 1355.643106][ T30] audit: type=1400 audit(1764285582.857:1650): avc: denied { ioctl } for pid=22409 comm="syz.6.4033" path="socket:[72827]" dev="sockfs" ino=72827 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1355.688547][ T30] audit: type=1400 audit(1764285582.895:1651): avc: denied { mount } for pid=22413 comm="syz.5.4035" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1355.711331][ T30] audit: type=1400 audit(1764285582.895:1652): avc: denied { mounton } for pid=22413 comm="syz.5.4035" path="/158/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1355.743751][ T30] audit: type=1400 audit(1764285582.951:1653): avc: denied { remount } for pid=22413 comm="syz.5.4035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1355.860864][ T30] audit: type=1400 audit(1764285583.054:1654): avc: denied { unmount } for pid=18937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1355.997652][T22424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1356.469925][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1357.744632][ T30] audit: type=1326 audit(1764285584.625:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1357.805227][ T30] audit: type=1326 audit(1764285584.625:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1358.020484][ T30] audit: type=1326 audit(1764285584.644:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1358.117945][ T30] audit: type=1326 audit(1764285584.644:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1358.171238][ T30] audit: type=1326 audit(1764285584.644:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22437 comm="syz.2.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1358.465009][T22456] vlan0: entered allmulticast mode [ 1361.534075][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1363.089898][T22528] netlink: 'syz.4.4069': attribute type 3 has an invalid length. [ 1366.822210][T22558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1366.839731][T22557] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1366.979795][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.012332][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.029995][T22584] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1374.220654][T22641] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1375.819304][T22667] ip6_vti0 speed is unknown, defaulting to 1000 [ 1376.293043][T22667] lo speed is unknown, defaulting to 1000 [ 1382.142625][T22719] tipc: Enabled bearer , priority 0 [ 1382.157530][T22719] syzkaller0: entered promiscuous mode [ 1382.163558][T22719] syzkaller0: entered allmulticast mode [ 1382.175611][T22719] tipc: Resetting bearer [ 1382.252195][T22718] tipc: Resetting bearer [ 1382.330500][T22718] tipc: Disabling bearer [ 1382.364245][ T847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1382.378497][T22730] veth0: entered promiscuous mode [ 1382.395861][T22730] batadv_slave_1: entered promiscuous mode [ 1382.654132][T22729] batadv_slave_1: left promiscuous mode [ 1382.811556][T22729] veth0: left promiscuous mode [ 1382.897126][T22738] bridge0: port 3(veth0_to_bond) entered blocking state [ 1382.905072][T22738] bridge0: port 3(veth0_to_bond) entered disabled state [ 1382.915410][T22738] veth0_to_bond: entered allmulticast mode [ 1382.923451][T22738] veth0_to_bond: entered promiscuous mode [ 1382.975024][ T847] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1382.992748][ T847] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1383.099744][ T847] usb 6-1: config 0 has no interface number 0 [ 1383.278615][T22741] input: syz0 as /devices/virtual/input/input108 [ 1384.027955][ T847] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1384.037373][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.045591][ T847] usb 6-1: Product: syz [ 1384.049770][ T847] usb 6-1: Manufacturer: syz [ 1384.054592][ T847] usb 6-1: SerialNumber: syz [ 1385.255293][ T847] usb 6-1: config 0 descriptor?? [ 1385.759038][ T847] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1385.781815][ T847] uvcvideo 6-1:0.64: No valid video chain found. [ 1385.805066][ T847] usb 6-1: USB disconnect, device number 3 [ 1386.747518][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1386.747535][ T30] audit: type=1400 audit(1764285611.930:1665): avc: denied { bind } for pid=22779 comm="syz.1.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1387.217909][T10419] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1387.398205][T22791] lo: Caught tx_queue_len zero misconfig [ 1387.454288][T10419] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1387.629107][T10419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.645819][T10419] usb 7-1: config 0 descriptor?? [ 1388.461947][T22801] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1388.480866][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x3 [ 1388.488379][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.506914][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.515930][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.523653][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.531169][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.546462][T10419] smartjoyplus 0003:0925:8866.0060: unknown main item tag 0x0 [ 1388.597666][T10419] smartjoyplus 0003:0925:8866.0060: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.6-1/input0 [ 1388.714226][T10419] smartjoyplus 0003:0925:8866.0060: no output reports found [ 1389.355335][T10419] usb 7-1: USB disconnect, device number 69 [ 1395.058061][T22884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.065422][T22884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.137050][T22884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.170039][T22884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.641901][ T5887] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1395.803452][T22884] bridge1: left promiscuous mode [ 1395.808517][T22884] bridge1: left allmulticast mode [ 1395.869838][T22884] mac80211_hwsim hwsim15 wlan0: left allmulticast mode [ 1395.877063][T22884] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 1395.885217][T22884] macsec1: left promiscuous mode [ 1395.890328][T22884] macsec1: left allmulticast mode [ 1396.168464][T22059] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.186412][ T5887] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1396.228104][T22059] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.241202][ T5887] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1396.264446][ T5887] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1396.294505][T22059] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.319292][T22059] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.327035][ T5887] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1396.346010][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.583049][ T5887] usb 6-1: Product: syz [ 1396.587521][ T5887] usb 6-1: Manufacturer: syz [ 1396.645209][ T5887] usb 6-1: SerialNumber: syz [ 1396.701380][ T30] audit: type=1400 audit(1764285621.237:1666): avc: denied { setopt } for pid=22900 comm="syz.4.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1396.872261][T22890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1396.909349][T22890] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1397.330838][ T30] audit: type=1326 audit(1764285621.845:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22922 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1397.408530][ T30] audit: type=1326 audit(1764285621.845:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22922 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1397.491522][ T30] audit: type=1326 audit(1764285621.882:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22922 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1397.550287][ T30] audit: type=1326 audit(1764285621.882:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22922 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1397.608877][ T30] audit: type=1326 audit(1764285621.882:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22922 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1398.269558][ T5887] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:8a:9a:57:ec:1f [ 1398.330944][ T5887] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 1398.359438][ T5887] usb 6-1: USB disconnect, device number 4 [ 1398.725433][T22942] overlayfs: overlapping lowerdir path [ 1399.172237][ T42] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1399.573158][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.583746][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1399.657904][ T42] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1399.669778][ T42] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1399.681390][ T42] usb 3-1: Product: syz [ 1399.750205][ T42] usb 3-1: config 0 descriptor?? [ 1399.985357][T22958] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1400.135600][ T30] audit: type=1400 audit(1764285624.473:1672): avc: denied { bind } for pid=22964 comm="syz.5.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1401.237664][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4197'. [ 1402.434420][T10419] usb 3-1: USB disconnect, device number 8 [ 1403.366185][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1403.375346][T22989] bridge_slave_1: left allmulticast mode [ 1403.381419][T22989] bridge_slave_1: left promiscuous mode [ 1403.389967][T22989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.427963][T22989] bridge_slave_0: left promiscuous mode [ 1403.470673][T22989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.260959][T23002] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1404.270106][T23002] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1404.310654][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 1404.346713][T23005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4205'. [ 1405.085844][T23023] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1405.823297][T23033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1405.856020][T23033] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1406.175410][T10419] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1406.204274][ T5887] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1406.369140][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.382079][ T5887] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1406.471828][ T5887] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1406.474507][ T42] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1406.481673][ T5887] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1406.502599][ T5887] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1406.503469][T10419] usb 3-1: Using ep0 maxpacket: 32 [ 1406.516634][ T5887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1406.529238][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.530870][T10419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.537703][ T5887] usb 6-1: Product: syz [ 1406.553176][ T5887] usb 6-1: Manufacturer: syz [ 1406.553337][T10419] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1406.557826][ T5887] usb 6-1: SerialNumber: syz [ 1406.572336][T10419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.580527][T10419] usb 3-1: Product: syz [ 1406.606742][T10419] usb 3-1: Manufacturer: syz [ 1406.615882][T10419] usb 3-1: SerialNumber: syz [ 1406.628872][T10419] usb 3-1: config 0 descriptor?? [ 1406.653108][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 1406.662436][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1406.678902][ T42] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 1406.695983][ T42] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.717231][ T42] usb 7-1: config 13 has no interface number 0 [ 1406.730120][ T42] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1406.751319][ T42] usb 7-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1406.777780][ T42] usb 7-1: config 13 interface 50 has no altsetting 0 [ 1406.801524][ T42] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1406.810860][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.818965][ T42] usb 7-1: Product: syz [ 1406.823178][ T42] usb 7-1: Manufacturer: syz [ 1406.828000][ T42] usb 7-1: SerialNumber: syz [ 1406.837396][T23043] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1406.923667][T23063] 9pnet_fd: Insufficient options for proto=fd [ 1406.943635][T23063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1407.012841][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4216'. [ 1407.057938][T23039] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4216'. [ 1407.208180][ T5887] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1407.238494][ T5887] usb 6-1: 2:1 : format type 228 is not supported yet [ 1407.247413][ T5887] usb 6-1: unit 5 not found! [ 1407.289479][ T5887] usb 6-1: USB disconnect, device number 5 [ 1407.359099][T10419] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1407.369015][T23065] udevd[23065]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1407.405926][T10419] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1407.416599][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1407.427697][ T42] usb 7-1: MIDIStreaming interface descriptor not found [ 1407.438820][T10419] usb 3-1: USB disconnect, device number 9 [ 1407.502322][T23065] udevd[23065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1407.548455][ T42] usb 7-1: USB disconnect, device number 70 [ 1407.563310][T23071] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1407.601658][T23071] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1407.695502][T22721] udevd[22721]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.150697][ T42] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1408.387938][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.399125][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.414996][ T42] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1408.425825][ T42] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1408.441142][ T42] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.466063][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.503592][ T42] usb 7-1: Product: syz [ 1408.735381][ T42] usb 7-1: Manufacturer: syz [ 1408.778326][ T42] usb 7-1: SerialNumber: syz [ 1408.987187][ T42] cdc_mbim 7-1:1.0: skipping garbage [ 1409.199094][T23076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1410.054112][T23076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1410.258441][ T30] audit: type=1400 audit(1764285633.893:1673): avc: denied { write } for pid=23088 comm="syz.5.4233" path="socket:[74232]" dev="sockfs" ino=74232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1410.358186][ T42] cdc_mbim 7-1:1.0: bind() failure [ 1410.387204][ T30] audit: type=1400 audit(1764285634.061:1674): avc: denied { unmount } for pid=18004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1410.412992][ T42] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1410.463712][ T42] cdc_ncm 7-1:1.1: bind() failure [ 1412.140486][ T30] audit: type=1326 audit(1764285635.651:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.140751][ T30] audit: type=1326 audit(1764285635.651:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.140958][ T30] audit: type=1326 audit(1764285635.661:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.141148][ T30] audit: type=1326 audit(1764285635.670:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.141318][ T30] audit: type=1326 audit(1764285635.670:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.141504][ T30] audit: type=1326 audit(1764285635.689:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.141694][ T30] audit: type=1326 audit(1764285635.689:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.141900][ T30] audit: type=1326 audit(1764285635.689:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23108 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59018f749 code=0x7ffc0000 [ 1412.247774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.318636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1412.516864][T10419] usb 7-1: USB disconnect, device number 71 [ 1413.325963][T23130] bridge0: port 1(veth0_to_bond) entered blocking state [ 1413.333062][T23130] bridge0: port 1(veth0_to_bond) entered disabled state [ 1413.351152][T23130] veth0_to_bond: entered allmulticast mode [ 1413.371556][T23130] veth0_to_bond: entered promiscuous mode [ 1414.313476][T23145] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1414.856884][T23151] input: syz0 as /devices/virtual/input/input109 [ 1417.908174][T23164] can0: slcan on ttyS3. [ 1418.017780][T23164] can0 (unregistered): slcan off ttyS3. [ 1421.229826][T23196] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.245750][ T847] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1421.711531][T23196] lo speed is unknown, defaulting to 1000 [ 1421.833748][ T847] usb 2-1: Using ep0 maxpacket: 16 [ 1421.845893][ T847] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1421.854006][ T847] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1421.881091][ T847] usb 2-1: config 0 has no interface number 0 [ 1421.887678][ T9] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1421.906034][ T847] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1421.920868][ T847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.962448][ T847] usb 2-1: config 0 descriptor?? [ 1422.211691][T23211] ip6_vti0 speed is unknown, defaulting to 1000 [ 1422.593005][ T847] usb 2-1: string descriptor 0 read error: -71 [ 1422.608279][ T847] uvcvideo 2-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1422.625706][ T9] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1422.657738][ T847] uvcvideo 2-1:0.64: No valid video chain found. [ 1422.665389][ T9] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1422.689368][ T9] usb 7-1: config 0 has no interface number 0 [ 1422.707280][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1422.720736][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.729211][ T9] usb 7-1: Product: syz [ 1422.733794][ T9] usb 7-1: Manufacturer: syz [ 1422.738400][ T9] usb 7-1: SerialNumber: syz [ 1423.473465][ T847] usb 2-1: USB disconnect, device number 124 [ 1423.784956][ T9] usb 7-1: config 0 descriptor?? [ 1423.840863][T23211] lo speed is unknown, defaulting to 1000 [ 1424.345175][ T9] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1424.352783][ T9] uvcvideo 7-1:0.64: No valid video chain found. [ 1424.565855][ T847] usb 7-1: USB disconnect, device number 72 [ 1425.897807][T23243] ip6_vti0 speed is unknown, defaulting to 1000 [ 1426.231891][T23255] raw_sendmsg: syz.1.4281 forgot to set AF_INET. Fix it! [ 1426.240284][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1427.526428][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 1427.956031][T23243] lo speed is unknown, defaulting to 1000 [ 1428.293754][T23269] ip6_vti0 speed is unknown, defaulting to 1000 [ 1428.953550][T23271] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1429.286729][T23269] lo speed is unknown, defaulting to 1000 [ 1430.169101][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1430.169119][ T30] audit: type=1400 audit(1764285652.339:1686): avc: denied { name_bind } for pid=23281 comm="syz.5.4289" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1432.570156][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.609929][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.930454][T23322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1433.091817][T23322] lo speed is unknown, defaulting to 1000 [ 1433.162099][T23320] ip6_vti0 speed is unknown, defaulting to 1000 [ 1433.471057][T23333] pim6reg1: entered promiscuous mode [ 1433.487687][T23333] pim6reg1: entered allmulticast mode [ 1434.189655][T23320] lo speed is unknown, defaulting to 1000 [ 1434.821893][T23343] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1434.861458][T23346] input: syz0 as /devices/virtual/input/input110 [ 1435.818006][T23366] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 1435.940409][T23368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=23368 comm=syz.4.4312 [ 1438.439073][T23394] input: syz0 as /devices/virtual/input/input111 [ 1439.150955][T23387] fuse: Bad value for 'fd' [ 1440.392815][T10422] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1440.570823][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.654540][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.774209][T10422] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1440.802633][T10422] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.821933][T10422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.876833][T10422] usb 2-1: config 0 descriptor?? [ 1441.140637][ T30] audit: type=1400 audit(1764285662.825:1687): avc: denied { mount } for pid=23425 comm="syz.6.4331" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1441.172094][T23424] veth1_macvtap: left promiscuous mode [ 1441.178410][T23424] macsec0: entered promiscuous mode [ 1441.245845][T23428] xt_bpf: check failed: parse error [ 1441.278158][T23430] binder: 23429:23430 ioctl c0306201 0 returned -14 [ 1441.345009][ T30] audit: type=1326 audit(1764285663.031:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.399978][ T30] audit: type=1326 audit(1764285663.031:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.400905][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.432054][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.440011][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.450450][ T30] audit: type=1326 audit(1764285663.031:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.461736][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.477482][ T30] audit: type=1326 audit(1764285663.049:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.492419][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.506009][ T30] audit: type=1326 audit(1764285663.049:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.525969][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.554857][ T30] audit: type=1326 audit(1764285663.049:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.557919][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.596645][ T30] audit: type=1326 audit(1764285663.049:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.630306][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.637260][ T30] audit: type=1326 audit(1764285663.049:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.659480][T10422] plantronics 0003:047F:FFFF.0061: unknown main item tag 0x0 [ 1441.665078][ T30] audit: type=1326 audit(1764285663.049:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23431 comm="syz.5.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe823b8f749 code=0x7ffc0000 [ 1441.780510][T23435] ------------[ cut here ]------------ [ 1441.786113][T23435] WARNING: CPU: 0 PID: 23435 at arch/x86/kvm/lapic.c:3483 kvm_apic_accept_events+0x444/0x4c0 [ 1441.796442][T23435] Modules linked in: [ 1441.801143][T23435] CPU: 0 UID: 0 PID: 23435 Comm: syz.6.4331 Not tainted syzkaller #0 PREEMPT(full) [ 1441.810716][T23435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1441.820936][T23435] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 1441.826728][T10422] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1441.827286][T23435] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 b1 af de 00 e9 33 fc ff ff e8 77 af de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 8f af de 00 e9 de fb ff ff e8 55 af de [ 1441.851049][T10422] usb 2-1: USB disconnect, device number 125 [ 1441.859206][T23435] RSP: 0018:ffffc9000cb37c38 EFLAGS: 00010283 [ 1441.871351][T23435] RAX: 0000000000000710 RBX: 0000000000000002 RCX: ffffc9001f313000 [ 1441.879595][T23435] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 1441.887577][T23435] RBP: ffff8880595c1a00 R08: 0000000000000005 R09: 0000000000000002 [ 1441.895854][T23435] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 1441.903909][T23435] R13: ffff8880595c1ae0 R14: ffff88805cb652b0 R15: 0000000000000001 [ 1441.911919][T23435] FS: 00007f2d029d56c0(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 1441.920871][T23435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.927487][T23435] CR2: 0000001b30ceaff8 CR3: 000000007e5e2000 CR4: 00000000003526f0 [ 1441.936047][T23435] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1441.944142][T23435] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1441.952121][T23435] Call Trace: [ 1441.955424][T23435] [ 1441.958356][T23435] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 1441.964537][T23435] kvm_vcpu_ioctl+0x7b8/0x1690 [ 1441.969310][T23435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1441.974518][T23435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1441.980474][T23435] ? do_vfs_ioctl+0x128/0x14f0 [ 1441.985271][T23435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1441.990354][T23435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1441.997321][T23435] ? hook_file_ioctl_common+0x145/0x410 [ 1442.002907][T23435] ? selinux_file_ioctl+0x180/0x270 [ 1442.008170][T23435] ? selinux_file_ioctl+0xb4/0x270 [ 1442.013297][T23435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1442.018784][T23435] __x64_sys_ioctl+0x18e/0x210 [ 1442.023578][T23435] do_syscall_64+0xcd/0xfa0 [ 1442.028257][T23435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.034164][T23435] RIP: 0033:0x7f2d0478f749 [ 1442.038603][T23435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.058284][T23435] RSP: 002b:00007f2d029d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.066743][T23435] RAX: ffffffffffffffda RBX: 00007f2d049e6180 RCX: 00007f2d0478f749 [ 1442.074762][T23435] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 000000000000000b [ 1442.082776][T23435] RBP: 00007f2d04813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1442.090773][T23435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.098819][T23435] R13: 00007f2d049e6218 R14: 00007f2d049e6180 R15: 00007ffdbf7e6be8 [ 1442.107283][T23435] [ 1442.110317][T23435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1442.117604][T23435] CPU: 0 UID: 0 PID: 23435 Comm: syz.6.4331 Not tainted syzkaller #0 PREEMPT(full) [ 1442.126984][T23435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1442.137046][T23435] Call Trace: [ 1442.140318][T23435] [ 1442.143230][T23435] dump_stack_lvl+0x3d/0x1f0 [ 1442.147808][T23435] vpanic+0x640/0x6f0 [ 1442.151780][T23435] ? kvm_apic_accept_events+0x444/0x4c0 [ 1442.157323][T23435] panic+0xca/0xd0 [ 1442.161033][T23435] ? __pfx_panic+0x10/0x10 [ 1442.165445][T23435] check_panic_on_warn+0xab/0xb0 [ 1442.170361][T23435] __warn+0xf6/0x3c0 [ 1442.174236][T23435] ? kvm_apic_accept_events+0x444/0x4c0 [ 1442.179772][T23435] report_bug+0x3c3/0x580 [ 1442.184101][T23435] ? kvm_apic_accept_events+0x444/0x4c0 [ 1442.189629][T23435] handle_bug+0x184/0x210 [ 1442.193964][T23435] exc_invalid_op+0x17/0x50 [ 1442.198452][T23435] asm_exc_invalid_op+0x1a/0x20 [ 1442.203281][T23435] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 1442.209420][T23435] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 b1 af de 00 e9 33 fc ff ff e8 77 af de 00 e9 17 fd ff ff e8 ed 0b 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 8f af de 00 e9 de fb ff ff e8 55 af de [ 1442.229009][T23435] RSP: 0018:ffffc9000cb37c38 EFLAGS: 00010283 [ 1442.235056][T23435] RAX: 0000000000000710 RBX: 0000000000000002 RCX: ffffc9001f313000 [ 1442.243009][T23435] RDX: 0000000000080000 RSI: ffffffff8146dbf3 RDI: 0000000000000005 [ 1442.250957][T23435] RBP: ffff8880595c1a00 R08: 0000000000000005 R09: 0000000000000002 [ 1442.258905][T23435] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 1442.266857][T23435] R13: ffff8880595c1ae0 R14: ffff88805cb652b0 R15: 0000000000000001 [ 1442.274814][T23435] ? kvm_apic_accept_events+0x443/0x4c0 [ 1442.280369][T23435] ? kvm_apic_accept_events+0x443/0x4c0 [ 1442.285901][T23435] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x450 [ 1442.292044][T23435] kvm_vcpu_ioctl+0x7b8/0x1690 [ 1442.296799][T23435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1442.301988][T23435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1442.307867][T23435] ? do_vfs_ioctl+0x128/0x14f0 [ 1442.312620][T23435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1442.317630][T23435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1442.324468][T23435] ? hook_file_ioctl_common+0x145/0x410 [ 1442.330007][T23435] ? selinux_file_ioctl+0x180/0x270 [ 1442.335190][T23435] ? selinux_file_ioctl+0xb4/0x270 [ 1442.340286][T23435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1442.345473][T23435] __x64_sys_ioctl+0x18e/0x210 [ 1442.350227][T23435] do_syscall_64+0xcd/0xfa0 [ 1442.354712][T23435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.360584][T23435] RIP: 0033:0x7f2d0478f749 [ 1442.364980][T23435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.384568][T23435] RSP: 002b:00007f2d029d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.392961][T23435] RAX: ffffffffffffffda RBX: 00007f2d049e6180 RCX: 00007f2d0478f749 [ 1442.400916][T23435] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 000000000000000b [ 1442.408868][T23435] RBP: 00007f2d04813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1442.416820][T23435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.424769][T23435] R13: 00007f2d049e6218 R14: 00007f2d049e6180 R15: 00007ffdbf7e6be8 [ 1442.432736][T23435] [ 1442.436042][T23435] Kernel Offset: disabled [ 1442.440340][T23435] Rebooting in 86400 seconds..