last executing test programs: 28.144100758s ago: executing program 4 (id=622): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x140c, 0x335, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004081}, 0xc810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r4}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x44, 0x11, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x1001}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa1f1}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x82}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "17d7547d107b72"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 26.744983173s ago: executing program 4 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1880ffffffffffffff0000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.544271103s ago: executing program 4 (id=632): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000010000", 0x1c) 25.176772533s ago: executing program 4 (id=633): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x150) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}, {@nfs_export_off}], [{@fsname={'fsname', 0x3d, '/dev/cpu/#/msr\x00'}}, {@fowner_lt}, {@smackfshat}]}) rmdir(&(0x7f0000000240)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 23.94926379s ago: executing program 4 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4886) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, '\x00 '}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000080)={0x1, 0x100, 0x20a6}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001180)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000180)=@ethtool_eeprom={0x14, 0x9, 0x8, 0x8d, "9cd0678d67bf45138cdaf7ac843f00b679cf69efc4ba93abf40b684473c6f2305a0ae5854f6662d6820bb51e92c999e38ad16f5c4bd45368f774cee6aefb44c6d59db4c708437dd84ee5c946e2bb28e6f33b117a2418edc547b54030fe8c3a7d8cd01dc36a9285fbae0d3badb46e214bbdfe0b0b94cfca12e46a173ecab467ea848f9a9458d999f14c09f2d945"}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa40028, 0x0) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "d18d2d71bc6aa571", "c7a58a6fb3368e722f5cf613e9e2e4f0e06fce3e44da05831a6dfe0aaa1cc62d", "22690bf4", "f1aa0da86f644002"}, 0x38) 20.54949051s ago: executing program 4 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x300}, 0x20050800) 9.312857953s ago: executing program 3 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) clock_gettime(0x9, 0x0) 8.317098759s ago: executing program 1 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup(r4) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x8000000, 0x14000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000280)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r7, 0x0, 0xffffffff}, 0x18) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r10, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x90044d18, &(0x7f0000000000)) 7.228573501s ago: executing program 3 (id=706): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x0, 0x0, 0xfffffffffffffffd}) 7.138988326s ago: executing program 3 (id=707): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./bus\x00', 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3ff7fe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(&(0x7f0000000380)={0x0, 0x0, 0x2}, 0x18, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x9, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0xa, 0x4, 0x0, 0x1, 0xa}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4) landlock_restrict_self(r4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000140)={0xffffffff}) openat$audio1(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 6.460144998s ago: executing program 0 (id=709): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000070000ed010000"]) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000ffe0000028002002d1f", 0x2e}], 0x1}, 0x4) getpid() socket$kcm(0x11, 0x3, 0x0) r6 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r6], 0x2b) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000000, 0x71, 0x8000000009}) pread64(r8, 0x0, 0x0, 0xce2) sendfile(r7, r6, 0x0, 0x4000000053d2) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x2, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0x10001, 0x4, 0x6, 0x7, 0x18, 0x9, 0x3, 0x8, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xe}}]}}]}, 0x3c}}, 0x24044094) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 6.317971532s ago: executing program 1 (id=711): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004814}, 0x4004000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 5.563127142s ago: executing program 1 (id=712): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000001c0)="b1", 0x1, 0x0, 0x0, 0x8100000, r1}]) 5.526046157s ago: executing program 32 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x300}, 0x20050800) 5.453202621s ago: executing program 3 (id=714): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000002000000000000000000008500000023000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 4.785252513s ago: executing program 1 (id=715): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x0, 0x0, 0x7}, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x88, 0x8d, 0x22, 0x8, 0x64b, 0x7825, 0x1a98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x6, 0x40, 0x56, [{{0x9, 0x4, 0x91, 0xa, 0x0, 0xe1, 0x2f, 0xed, 0x6}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x5d, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xbcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xc, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x1df, 0x3, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0x9, 0x0, 0x40, 0x3}, 0xb, &(0x7f0000000080)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9d, &(0x7f0000000180)=@string={0x9d, 0x3, "1c720172b86b4ebb8cec5e81aacfbf79ef55dc9758527a3e25d9a57935b8f682848cb8151708da3dc54fc1fd7fc56bdb60744b60f934739785d8ac389ef749775b20a95629c48df506413379b73ed82a4f9b79c323a683aca3ed7c66b141297ba29db33217ccb2a71681b7e79c13b5975633da2f0b7100304c9dbd0f66cb4e8678331ef659cba0b91b7d7599f9d3f9cff65b3214b96ef6bdf0d47b"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc04}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "1c572e2e60258544e59370d56a2ac3aadd652a92bbaa1d6c98635e1d2eeba503f8ba1c30de9c1286"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1870}}, {0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "598887143b1ed1364194d6abcf7a9b458be41a71a2a463c5847ffb6240ba"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1f11a}}]}) 4.329224643s ago: executing program 0 (id=716): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffffffffffff]}, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x2010, r0, 0xb000) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default}) r1 = memfd_create(&(0x7f0000000080)=')---],\x00', 0x3) close(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000002c0)={{r0}, r2, 0x0, @unused=[0x0, 0xff, 0x5, 0x4], @name="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"}) r3 = syz_open_dev$dri(&(0x7f00000012c0), 0xffff, 0x28000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x200}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001440)=0x9, 0x4) syz_open_dev$dri(&(0x7f0000001480), 0x80, 0x20040) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000014c0)={0x3, r4, 'id1\x00'}) fcntl$getownex(r5, 0x10, &(0x7f0000001540)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000016c0)={0x24, &(0x7f0000001580)={0x60, 0xb, 0x72, {0x72, 0xc, "68afd7add4f07448e67506600832f292d6bd3154915148296092bbe284194c8d9e291824d603533ee15d86ec32db133e4bda468faceb5832785302fda5c633fc342baa217907b978d527ffa28f2054facccd48d9cac42576df1d4342a3676325538f1a778e090b67270741399a80e00b"}}, &(0x7f0000001600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000001640)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "9b253369"}, @global=@item_4={0x3, 0x1, 0xa, "b1dcf617"}, @main=@item_4={0x3, 0x0, 0x9, "fbedddb6"}]}}, &(0x7f0000001680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0xc96}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001700)={0x0, 0x13, 0xe4, "4162617b0b2d0691a140bcf22355fe2536d79930177503282fdeea12f9594d37aed7039a0b23f4da6baec76aae95eefb3ce933b796bbe4a6a5d52708379b8ab385666c06ae2c7f85b5776e0413cb3150cda9910a1d219f9900090ce0c99a7e3a1726e3eb1b6efb62f6c7a1581664137b8b1339b5bdeafa8309867487a878c6d25b4659c3ceaf2acb7e243eb06af1410e7ef4d941109e8bab1ef665e660add485fd0c9749955fedc62fbc2116ec4a8f59a906edee4aac14bd4f71f00fe1317f0b750fe5a9be3b06e04893d9619cbc46cd81b0dc712f54af23f015922071da7ce158b512b9"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001880)={0x20, 0x1, 0x23, "5b5d07f5c9c6dc33fc15f4c15f02e0d95b65f3c697e484b7f14eb1de93504e024725d3"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x35}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0xb7938000) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001940), 0x200, 0x0) r7 = accept(r6, 0x0, &(0x7f0000001980)) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001a40)=[@text16={0x10, &(0x7f00000019c0)="0f20e06635000100000f22e0260f320f01d8baf80c66b894d4068366efbafc0c66ed0f20e06635000002000f22e0f30fc7330f01caf00fb1aac75e66b9d10b000066b80d00000066ba000000000f30baf80c66b898f5b58d66efbafc0c66b804a7000066ef", 0x65}], 0x1, 0x1, &(0x7f0000001a80)=[@dstype0={0x6, 0x7}], 0x1) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000001b40)) sendto$rxrpc(r5, &(0x7f0000001b80)="a44006cf9430fcdee2a62caa1be658389bef8725687b1194f788d5d4d7f5adfb1c90f876c4d05b1bb56eec2c8c20dc24b7f89d5d382041e246fef91aab76052a2dc0973c99935e540c1d9b", 0x4b, 0x24044814, &(0x7f0000001c00)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @private0, 0x5f}}, 0x24) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000001c40)) syz_open_dev$dri(&(0x7f0000001c80), 0xffffffffffff9000, 0x200000) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r5, 0xc004ae0a, &(0x7f0000001cc0)={0x4, [0x0, 0x0, 0x0, 0x0]}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000001d40)=0x3) sendmsg$nl_route_sched(r5, &(0x7f0000001f40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)=@newqdisc={0x70, 0x24, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff3, 0xa}, {0x9, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0xf}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}, @qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000800) 3.75336041s ago: executing program 3 (id=717): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000ef00000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.381261898s ago: executing program 0 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0xe4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) close(0xffffffffffffffff) 2.512630871s ago: executing program 0 (id=720): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3b) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, 0x8, 0x800, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)=0x1) r1 = io_uring_setup(0x1b70, &(0x7f00000000c0)={0x0, 0x8b1f, 0x1000, 0x3, 0xa8}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000140)={0x0, 0xd83f, 0x1000, 0x1, 0x3c7, 0x0, r1}, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket(0x2a, 0x803, 0x9) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x6b9, 0x50, @mcast2, @empty, 0x8, 0x8, 0xfc1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x1, 0x700, 0x7fff, 0x4, {{0x2e, 0x4, 0x2, 0x7, 0xb8, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@end, @ssrr={0x89, 0x17, 0xb, [@remote, @rand_addr=0x64010100, @remote, @broadcast, @private=0xa010101]}, @rr={0x7, 0xb, 0x87, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp={0x44, 0x28, 0xc1, 0x0, 0x8, [0x1779, 0x4, 0x401, 0x1fcf1768, 0x2, 0xe7ce, 0x0, 0xc, 0xc]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x98, 0x0, 0x8, [0x6, 0x101, 0x2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x8b, 0x3, 0x5, [{@empty, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x1}, {@broadcast, 0x4}, {@broadcast, 0xe1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x10, 0x6, 0x5, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x66, 0x0, 0xc, 0x2f, 0x0, @multicast2, @remote, {[@noop, @noop, @ra={0x94, 0x4}, @generic={0x44, 0xa, "12db568668515019"}, @timestamp={0x44, 0x20, 0x75, 0x0, 0x6, [0x9, 0x100, 0x7, 0xb, 0x4, 0x97, 0x8]}, @timestamp={0x44, 0x14, 0xfb, 0x0, 0x1, [0xd, 0x5, 0x1, 0x9]}, @cipso={0x86, 0x30, 0x3, [{0x7, 0x6, "f5fc7281"}, {0x5, 0x10, "5ab7651cb5926ba46d09c1032e72"}, {0x3, 0x12, "5c9bc17c07482763a1fde01b5416dba0"}, {0x7, 0x2}]}, @ra={0x94, 0x4, 0x9}, @lsrr={0x83, 0xb, 0xf5, [@empty, @rand_addr=0x64010101]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000005c0)={@private0, 0x0}, &(0x7f0000000600)=0x14) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x87a0, 0x40, 0x8838, 0x101, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x65, 0x0, 0x6, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0x83, [@remote, @remote, @multicast1, @loopback, @loopback, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x6, [{@broadcast, 0x10000}, {@multicast2, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x14c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4e6c0cdfe110417b}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r13 = gettid() connect$ax25(r2, &(0x7f0000000a00)={{0x3, @null, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt$SO_COOKIE(r12, 0x1, 0x39, &(0x7f0000000a80), &(0x7f0000000ac0)=0x8) syz_open_dev$hidraw(&(0x7f0000000b00), 0x1, 0x400) ptrace(0x8, r13) preadv2(r1, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000000c00)}], 0x2, 0x6, 0xfffffe11, 0x5) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000cc0), r12) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002200)={&(0x7f0000000d00)={0x14c4, r14, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x1468, 0x8, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x66, @private0, 0xa}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdc}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @remote, 0xaff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xd, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4}]}]}, {0x74c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, @WGPEER_A_ALLOWEDIPS={0x6e0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}]}, {0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xc879, @local, 0xf}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, @WGPEER_A_ALLOWEDIPS={0x7c4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x43f6}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x24b869f211bfaf54}, 0x14000000) waitid$P_PIDFD(0x3, r12, &(0x7f0000002380), 0x4, &(0x7f0000002400)) openat(r12, &(0x7f00000024c0)='./file0\x00', 0x200600, 0xc0) 2.392374293s ago: executing program 0 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup(r4) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x8000000, 0x14000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000280)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r7, 0x0, 0xffffffff}, 0x18) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r9, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r10, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x90044d18, &(0x7f0000000000)) 2.243964196s ago: executing program 2 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsmount(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x7041, 0x0) write$UHID_INPUT(r6, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x16, &(0x7f0000000300), &(0x7f0000000240)=""/22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1, 0x0, 0xdc05}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x80d, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_mpls={0xa4, 0x3, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_TTL={0x5, 0x7, 0xc0}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2c336}, @TCA_MPLS_TC={0x5}]}, {0x55, 0x6, "f7f1c3c51b7d00653ad5a1267809609d08f5b24a19bb30717b27791ef113cc5d665dc5bf40a673e4d09781b8254465aa62ad040f2eec4c7df8317cf38cc8be3944584203b44fa72151f2ad7bc82327909c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.360039938s ago: executing program 2 (id=724): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0300", 0x0, 0x6, 0x3, 0x0, 0x0, "01d0f78ea77000ebff00", "000300", '\x00', "798a202d", ["c2fffedbff00ffdfffffbfff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483d94574c99b9f16"]}) 1.265718289s ago: executing program 2 (id=725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r5, &(0x7f0000000180)=""/65}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000004000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 1.037212638s ago: executing program 1 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 455.848697ms ago: executing program 1 (id=727): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="dbc9923ebd01", 0x6}], 0x1}}], 0x2, 0x28048005) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="af0e7367f111e0", 0x7}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83300fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 240.807544ms ago: executing program 2 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004bd7000fcdbdf250f00000005002a0001000000050033000100000708000300", @ANYRES32=r2], 0x2c}}, 0x80) 131.756985ms ago: executing program 3 (id=729): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x17c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "0b70300c40f378db21493b8adde7fba7d4222bff4ab7d8b8468f1e939d1007000000047d773aa413421527cb498b861a2e22a678db82270dbed8d4df060000000b"}}]}, 0x17c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0xa, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f0000000000)={0x18, 0x0, r8, {0x5}}, 0x18) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) 124.608946ms ago: executing program 2 (id=730): close(0x3) 74.036265ms ago: executing program 0 (id=731): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) 0s ago: executing program 2 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0xc}]}, 0x34}, 0x1, 0x0, 0x100000000000000, 0x4c094}, 0x4040) kernel console output (not intermixed with test programs): block 0, async page read [ 146.121409][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.129181][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.198155][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 146.323260][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.424163][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.654581][ T7054] team2: entered promiscuous mode [ 146.659654][ T7054] team2: entered allmulticast mode [ 146.673034][ T3538] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.705366][ T3538] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.714643][ T3538] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.745107][ T3538] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.912313][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.277'. [ 146.921850][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.277'. [ 146.930858][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.0.277'. [ 147.093538][ T5848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.178020][ T7072] macvlan0: entered promiscuous mode [ 147.265360][ T7075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.658730][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.673688][ T5848] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 147.685210][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.739591][ T5848] usb 3-1: config 0 descriptor?? [ 147.994517][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 147.994531][ T30] audit: type=1400 audit(1757499191.877:771): avc: denied { sys_module } for pid=7066 comm="syz.1.279" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.189097][ T5848] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 148.201665][ T5848] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 148.279226][ T5848] aquacomputer_d5next 0003:0C70:F00B.0004: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 148.534574][ T5848] usb 3-1: USB disconnect, device number 4 [ 148.659067][ T30] audit: type=1400 audit(1757499192.537:772): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.083535][ T5849] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 149.094310][ T5903] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.237949][ T30] audit: type=1400 audit(1757499706.120:773): avc: denied { create } for pid=7088 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.521537][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 149.541707][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.554096][ T5903] usb 5-1: config 0 has no interfaces? [ 149.591222][ T5903] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.668184][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.680082][ T5903] usb 5-1: config 0 descriptor?? [ 149.852709][ T30] audit: type=1400 audit(1757499706.730:774): avc: denied { create } for pid=7088 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.061394][ T5849] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 150.874437][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 150.890232][ T7117] team2: entered promiscuous mode [ 150.895312][ T7117] team2: entered allmulticast mode [ 151.888413][ T30] audit: type=1400 audit(1757499708.410:775): avc: denied { execute } for pid=7118 comm="syz.1.291" name="file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.964586][ T30] audit: type=1400 audit(1757499708.830:776): avc: denied { bind } for pid=7124 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.218781][ T7138] misc userio: No port type given on /dev/userio [ 152.227633][ T30] audit: type=1400 audit(1757499709.090:777): avc: denied { create } for pid=7129 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.607464][ T30] audit: type=1400 audit(1757499709.460:778): avc: denied { create } for pid=7134 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.703124][ T30] audit: type=1400 audit(1757499709.460:779): avc: denied { bind } for pid=7134 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.704855][ T5848] usb 5-1: USB disconnect, device number 15 [ 152.722606][ T30] audit: type=1400 audit(1757499709.460:780): avc: denied { setopt } for pid=7134 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.174835][ T30] audit: type=1400 audit(1757499710.060:781): avc: denied { mount } for pid=7145 comm="syz.3.299" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.373205][ T30] audit: type=1400 audit(1757499710.190:782): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.426093][ T7150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.974432][ T7155] binder: 7154:7155 ioctl c0306201 0 returned -14 [ 154.052262][ T7158] binder: 7157:7158 ioctl c0306201 0 returned -14 [ 154.094957][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 154.110850][ T7159] team2: entered promiscuous mode [ 154.115927][ T7159] team2: entered allmulticast mode [ 154.247629][ T30] audit: type=1400 audit(1757499711.130:783): avc: denied { getopt } for pid=7161 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.336680][ T30] audit: type=1400 audit(1757499711.240:784): avc: denied { read write } for pid=7161 comm="syz.4.305" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.468791][ T7165] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 155.475534][ T7165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.490784][ T30] audit: type=1400 audit(1757499711.240:785): avc: denied { open } for pid=7161 comm="syz.4.305" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.521982][ T7166] vhci_hcd: connection closed [ 155.535092][ T7165] vhci_hcd vhci_hcd.0: Device attached [ 155.567002][ T7175] block nbd3: Attempted send on invalid socket [ 155.573475][ T7175] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 155.583290][ T7175] block nbd3: Attempted send on invalid socket [ 155.589546][ T7175] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 155.598934][ T7175] Mount JFS Failure: -5 [ 155.651932][ T30] audit: type=1400 audit(1757499712.380:786): avc: denied { write } for pid=7172 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.673248][ T3538] vhci_hcd: stop threads [ 155.720972][ T3538] vhci_hcd: release socket [ 155.783181][ T1206] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 155.784191][ T3538] vhci_hcd: disconnect device [ 156.612559][ T30] audit: type=1400 audit(1757499713.490:787): avc: denied { ioctl } for pid=7194 comm="syz.2.315" path="socket:[13273]" dev="sockfs" ino=13273 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.121092][ T30] audit: type=1400 audit(1757499714.000:788): avc: denied { write } for pid=7202 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.154467][ T7204] binder: 7199:7204 ioctl c0306201 0 returned -14 [ 157.379583][ T7216] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 157.388476][ T7216] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 157.716737][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.728083][ T30] audit: type=1400 audit(1757499714.560:789): avc: denied { create } for pid=7209 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.442193][ T5848] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 158.475685][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.611382][ T5848] usb 1-1: config 0 descriptor?? [ 158.622208][ T5848] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 158.717414][ T7224] tipc: Started in network mode [ 158.722298][ T7224] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 158.748873][ T7224] tipc: Enabled bearer , priority 0 [ 158.909341][ T7229] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.966504][ T7212] trusted_key: encrypted_key: master key parameter '0' is invalid [ 159.037646][ T30] audit: type=1400 audit(1757499715.920:790): avc: denied { setattr } for pid=7205 comm="syz.3.318" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.103687][ T7233] netlink: 92 bytes leftover after parsing attributes in process `syz.1.326'. [ 159.162683][ T7235] netlink: 96 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.173592][ T7235] netlink: 96 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.182799][ T7235] netlink: 96 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.292253][ T30] audit: type=1400 audit(1757499716.170:791): avc: denied { bind } for pid=7236 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.325216][ T7237] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 159.538398][ T30] audit: type=1400 audit(1757499716.410:792): avc: denied { create } for pid=7240 comm="syz.3.331" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.639784][ T5848] gspca_sunplus: reg_w_riv err -71 [ 159.645798][ T5848] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 159.675893][ T5848] usb 1-1: USB disconnect, device number 7 [ 159.686623][ T30] audit: type=1400 audit(1757499716.410:793): avc: denied { write } for pid=7240 comm="syz.3.331" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.762439][ T7245] binder: BC_ATTEMPT_ACQUIRE not supported [ 159.768374][ T7245] binder: 7240:7245 ioctl c0306201 200000000180 returned -22 [ 159.865003][ T5903] tipc: Node number set to 11578026 [ 160.102788][ T30] audit: type=1400 audit(1757499716.410:794): avc: denied { open } for pid=7240 comm="syz.3.331" path="/59/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.221993][ T30] audit: type=1400 audit(1757499716.410:795): avc: denied { ioctl } for pid=7240 comm="syz.3.331" path="/59/file0" dev="tmpfs" ino=325 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.275953][ T30] audit: type=1400 audit(1757499716.640:796): avc: denied { write } for pid=7240 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.505931][ T30] audit: type=1400 audit(1757499716.640:797): avc: denied { nlmsg_write } for pid=7240 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.658520][ T30] audit: type=1400 audit(1757499717.540:798): avc: denied { unlink } for pid=5853 comm="syz-executor" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 160.846260][ T7255] binder: 7251:7255 ioctl c0306201 0 returned -14 [ 161.022123][ T1206] vhci_hcd: vhci_device speed not set [ 161.198718][ T7257] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.995683][ T30] audit: type=1400 audit(1757499718.880:799): avc: denied { map_create } for pid=7262 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.021262][ T7263] program syz.0.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.866000][ T7298] 9pnet_fd: p9_fd_create_tcp (7298): problem binding to privport [ 163.884709][ T7289] delete_channel: no stack [ 164.082097][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 164.082112][ T30] audit: type=1400 audit(1757499720.960:843): avc: denied { ioctl } for pid=7300 comm="syz.2.349" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15493 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.489244][ T30] audit: type=1400 audit(1757499721.330:844): avc: denied { read write } for pid=7310 comm="syz.0.353" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.753511][ T30] audit: type=1400 audit(1757499721.330:845): avc: denied { open } for pid=7310 comm="syz.0.353" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.957972][ T30] audit: type=1400 audit(1757499721.670:846): avc: denied { create } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.025879][ T7309] befs: (nullb0): No write support. Marking filesystem read-only [ 165.731535][ T7309] befs: (nullb0): invalid magic header [ 165.741699][ T30] audit: type=1400 audit(1757499721.680:847): avc: denied { bind } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.787224][ T30] audit: type=1400 audit(1757499721.680:848): avc: denied { setopt } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.856883][ T30] audit: type=1400 audit(1757499721.680:849): avc: denied { accept } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.876524][ T30] audit: type=1400 audit(1757499721.910:850): avc: denied { mounton } for pid=7308 comm="syz.2.351" path="/71/bus" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 165.899576][ T30] audit: type=1400 audit(1757499722.120:851): avc: denied { write } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.946652][ T30] audit: type=1400 audit(1757499722.130:852): avc: denied { read } for pid=7313 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.580574][ T7331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.359'. [ 166.724914][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.734060][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.811769][ T7339] binder: 7338:7339 ioctl c0306201 0 returned -14 [ 168.571860][ T7358] binder: 7357:7358 ioctl c0306201 0 returned -14 [ 169.001527][ T7364] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.071704][ T7326] [U]  [ 169.189352][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 169.189363][ T30] audit: type=1400 audit(1757499726.070:883): avc: denied { mounton } for pid=7374 comm="syz.0.370" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 169.231726][ T7375] NILFS (loop0): device size too small [ 169.860442][ T30] audit: type=1400 audit(1757499726.240:884): avc: denied { create } for pid=7377 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.913218][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.253498][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 170.268930][ T9] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 170.290598][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 170.338590][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 170.490181][ T30] audit: type=1400 audit(1757499727.230:885): avc: denied { connect } for pid=7386 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.524721][ T30] audit: type=1400 audit(1757499727.240:886): avc: denied { write } for pid=7386 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.628807][ T30] audit: type=1400 audit(1757499727.290:887): avc: denied { write } for pid=7386 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.633609][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.799001][ T30] audit: type=1400 audit(1757499727.480:888): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.883626][ T30] audit: type=1400 audit(1757499727.490:889): avc: denied { open } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.003234][ T30] audit: type=1400 audit(1757499727.490:890): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.054319][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 171.078147][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.133598][ T30] audit: type=1400 audit(1757499727.630:891): avc: denied { prog_load } for pid=7393 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.167412][ T9] usb 2-1: Product: syz [ 171.209912][ T9] usb 2-1: Manufacturer: syz [ 171.231607][ T30] audit: type=1400 audit(1757499727.630:892): avc: denied { bpf } for pid=7393 comm="syz.2.374" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.258546][ T9] usb 2-1: SerialNumber: syz [ 171.390462][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.654384][ T7405] netlink: 92 bytes leftover after parsing attributes in process `syz.4.377'. [ 171.790786][ T9] usb 2-1: can't set config #1, error -71 [ 171.860619][ T9] usb 2-1: USB disconnect, device number 5 [ 173.298808][ T7422] binder: 7420:7422 ioctl c0306201 0 returned -14 [ 173.864386][ T7432] 9pnet_fd: Insufficient options for proto=fd [ 174.049617][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.232097][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 174.232110][ T30] audit: type=1400 audit(1757499731.110:945): avc: denied { create } for pid=7415 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.457142][ T7440] binder: BINDER_SET_CONTEXT_MGR already set [ 174.463171][ T7440] binder: 7434:7440 ioctl 4018620d 200000004a80 returned -16 [ 174.747222][ T30] audit: type=1400 audit(1757499731.150:946): avc: denied { ioctl } for pid=7415 comm="syz.0.381" path="socket:[15746]" dev="sockfs" ino=15746 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.772281][ T30] audit: type=1400 audit(1757499731.230:947): avc: denied { set_context_mgr } for pid=7434 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.792099][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.802849][ T30] audit: type=1400 audit(1757499731.330:948): avc: denied { map } for pid=7434 comm="syz.4.386" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.841426][ T30] audit: type=1400 audit(1757499731.680:949): avc: denied { create } for pid=7438 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.893783][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.916918][ T30] audit: type=1400 audit(1757499731.710:950): avc: denied { bind } for pid=7438 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.938042][ T30] audit: type=1400 audit(1757499731.760:951): avc: denied { setopt } for pid=7438 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.016383][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 175.072714][ T30] audit: type=1400 audit(1757499731.760:952): avc: denied { accept } for pid=7438 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.077726][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 175.147752][ T30] audit: type=1400 audit(1757499732.020:953): avc: denied { allowed } for pid=7447 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.173611][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 175.230961][ T30] audit: type=1400 audit(1757499732.020:954): avc: denied { create } for pid=7447 comm="syz.2.389" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.324005][ T10] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 175.334485][ T10] usb 2-1: Product: syz [ 175.338655][ T10] usb 2-1: Manufacturer: syz [ 175.343320][ T10] usb 2-1: SerialNumber: syz [ 175.395459][ T7453] blktrace: Concurrent blktraces are not allowed on loop6 [ 175.434772][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 175.562433][ T10] usb 2-1: config 0 descriptor?? [ 176.286572][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 176.495699][ T7454] team3: entered promiscuous mode [ 176.510980][ T7454] team3: entered allmulticast mode [ 176.538487][ T7436] loop8: detected capacity change from 0 to 7 [ 176.574667][ T7436] Dev loop8: unable to read RDB block 7 [ 176.580270][ T7436] loop8: unable to read partition table [ 176.615458][ T7436] loop8: partition table beyond EOD, truncated [ 176.635789][ T7436] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 176.862867][ T10] gspca_zc3xx: reg_w_i err -110 [ 176.904229][ T10] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 177.136608][ T1206] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.416630][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.441249][ T1206] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 177.456237][ T1206] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.475946][ T1206] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.563535][ T7476] overlayfs: failed to resolve './file1/file0': -2 [ 177.971113][ T1206] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.989173][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.008319][ T7479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.396'. [ 178.024335][ T7479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.396'. [ 178.033745][ T1206] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.041389][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 178.060911][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.088820][ T1206] usb 1-1: invalid MIDI out EP 0 [ 178.094577][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 178.107839][ T7479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.396'. [ 178.189015][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.239751][ T10] usb 3-1: config 0 descriptor?? [ 178.292116][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 178.340227][ T5931] usb 2-1: USB disconnect, device number 6 [ 178.430857][ T7467] delete_channel: no stack [ 178.451205][ T1206] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 178.484855][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.493954][ T1206] usb 1-1: USB disconnect, device number 8 [ 178.695376][ T6757] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 178.844643][ T6757] usb 5-1: device descriptor read/64, error -71 [ 179.394161][ T10] gspca_vc032x: reg_w err -110 [ 179.493544][ T6757] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.522377][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 179.633526][ T6757] usb 5-1: device descriptor read/64, error -71 [ 179.756312][ T6757] usb usb5-port1: attempt power cycle [ 179.819933][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 179.819949][ T30] audit: type=1400 audit(1757499736.700:996): avc: denied { create } for pid=7494 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.898578][ T30] audit: type=1400 audit(1757499736.730:997): avc: denied { bind } for pid=7494 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.964633][ T30] audit: type=1400 audit(1757499736.820:998): avc: denied { create } for pid=7498 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.008415][ T30] audit: type=1400 audit(1757499736.830:999): avc: denied { prog_run } for pid=7498 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.055221][ T30] audit: type=1400 audit(1757499736.940:1000): avc: denied { read } for pid=7497 comm="syz.0.402" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.082075][ T30] audit: type=1400 audit(1757499736.940:1001): avc: denied { open } for pid=7497 comm="syz.0.402" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.108408][ T6757] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.251349][ T7506] gfs2: not a GFS2 filesystem [ 180.472410][ T30] audit: type=1400 audit(1757499737.050:1002): avc: denied { read write } for pid=7497 comm="syz.0.402" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.495883][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.535920][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 180.536695][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 180.541972][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 180.542003][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 180.581120][ T5924] usb 3-1: USB disconnect, device number 5 [ 180.626697][ T6757] usb 5-1: device descriptor read/8, error -71 [ 180.647185][ T30] audit: type=1400 audit(1757499737.050:1003): avc: denied { open } for pid=7497 comm="syz.0.402" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.748651][ T30] audit: type=1400 audit(1757499737.070:1004): avc: denied { ioctl } for pid=7497 comm="syz.0.402" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.772856][ T7497] [U]  [ 180.773942][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.791243][ T30] audit: type=1400 audit(1757499737.090:1005): avc: denied { ioctl } for pid=7503 comm="syz.1.404" path="socket:[15116]" dev="sockfs" ino=15116 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.873526][ T6757] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.916023][ T7514] program syz.1.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.503778][ T6757] usb 5-1: device not accepting address 19, error -71 [ 181.791203][ T6757] usb usb5-port1: unable to enumerate USB device [ 182.231444][ T7522] fuse: Unknown parameter 'grou00000000000000000000' [ 182.408000][ T7517] 9pnet_fd: Insufficient options for proto=fd [ 182.637915][ T7536] binder: 7534:7536 ioctl c0306201 0 returned -14 [ 182.744985][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 182.865585][ T7540] team3: entered promiscuous mode [ 182.871494][ T7540] team3: entered allmulticast mode [ 183.036269][ T7547] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.774436][ T7543] delete_channel: no stack [ 185.093911][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 185.100155][ T30] audit: type=1400 audit(1757499741.890:1049): avc: denied { write } for pid=7564 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.806642][ T30] audit: type=1400 audit(1757499741.900:1050): avc: denied { read } for pid=7564 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.080801][ T7573] ceph: No mds server is up or the cluster is laggy [ 186.088342][ T6757] libceph: connect (1)[b::]:6789 error -101 [ 186.104917][ T30] audit: type=1400 audit(1757499742.690:1051): avc: denied { create } for pid=7568 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.116440][ T6757] libceph: mon0 (1)[b::]:6789 connect error [ 186.125039][ T30] audit: type=1400 audit(1757499742.690:1052): avc: denied { ioctl } for pid=7568 comm="syz.3.423" path="socket:[16505]" dev="sockfs" ino=16505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.157705][ T30] audit: type=1400 audit(1757499742.750:1053): avc: denied { bind } for pid=7568 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.180820][ T30] audit: type=1400 audit(1757499742.750:1054): avc: denied { setopt } for pid=7568 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.203533][ T30] audit: type=1400 audit(1757499742.750:1055): avc: denied { write } for pid=7568 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.329516][ T30] audit: type=1400 audit(1757499743.120:1056): avc: denied { read } for pid=7579 comm="syz.0.425" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.355441][ T30] audit: type=1400 audit(1757499743.120:1057): avc: denied { open } for pid=7579 comm="syz.0.425" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.871735][ T6757] libceph: connect (1)[b::]:6789 error -101 [ 186.883662][ T6757] libceph: mon0 (1)[b::]:6789 connect error [ 186.894003][ T30] audit: type=1400 audit(1757499743.340:1058): avc: denied { ioctl } for pid=7579 comm="syz.0.425" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.063104][ T7587] sctp: failed to load transform for md5: -2 [ 187.260429][ T5173] Bluetooth: hci0: Dropping invalid advertising data [ 187.267263][ T5173] Bluetooth: hci0: Malformed LE Event: 0x02 [ 187.390796][ T7580] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 187.533748][ T5931] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.716153][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.882355][ T5931] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 187.883660][ T7606] FAULT_INJECTION: forcing a failure. [ 187.883660][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 187.904372][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.961396][ T5931] usb 1-1: config 0 descriptor?? [ 187.963023][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT(full) [ 187.963043][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.963052][ T7606] Call Trace: [ 187.963057][ T7606] [ 187.963063][ T7606] dump_stack_lvl+0x16c/0x1f0 [ 187.963087][ T7606] should_fail_ex+0x512/0x640 [ 187.963106][ T7606] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 187.963124][ T7606] should_failslab+0xc2/0x120 [ 187.963141][ T7606] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 187.963157][ T7606] ? proc_alloc_inode+0x25/0x200 [ 187.963180][ T7606] ? __pfx_proc_alloc_inode+0x10/0x10 [ 187.963198][ T7606] proc_alloc_inode+0x25/0x200 [ 187.963216][ T7606] alloc_inode+0x61/0x240 [ 187.963238][ T7606] new_inode+0x22/0x1c0 [ 187.963260][ T7606] proc_pid_make_inode+0x22/0x160 [ 187.963280][ T7606] proc_pident_instantiate+0x85/0x310 [ 187.963306][ T7606] proc_fill_cache+0x35e/0x470 [ 187.963325][ T7606] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 187.963346][ T7606] ? __pfx_proc_fill_cache+0x10/0x10 [ 187.963388][ T7606] proc_pident_readdir+0x1bc/0x530 [ 187.963416][ T7606] iterate_dir+0x296/0xaf0 [ 187.963442][ T7606] __x64_sys_getdents+0x13c/0x2b0 [ 187.963457][ T7606] ? __pfx___x64_sys_getdents+0x10/0x10 [ 187.963471][ T7606] ? __pfx_filldir+0x10/0x10 [ 187.963500][ T7606] do_syscall_64+0xcd/0x4c0 [ 187.963520][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.963535][ T7606] RIP: 0033:0x7f39d818eba9 [ 187.963547][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.963561][ T7606] RSP: 002b:00007f39d8f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 187.963575][ T7606] RAX: ffffffffffffffda RBX: 00007f39d83d6090 RCX: 00007f39d818eba9 [ 187.963585][ T7606] RDX: 0000000000000ff5 RSI: 0000200000001000 RDI: 0000000000000003 [ 187.963593][ T7606] RBP: 00007f39d8f77090 R08: 0000000000000000 R09: 0000000000000000 [ 187.963601][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.963610][ T7606] R13: 00007f39d83d6128 R14: 00007f39d83d6090 R15: 00007ffe70bd18d8 [ 187.963631][ T7606] [ 188.263566][ T7610] autofs4:pid:7610:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373) [ 188.503663][ T1206] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 188.550673][ T7618] pim6reg: entered allmulticast mode [ 188.654874][ T5931] aquacomputer_d5next 0003:0C70:F00B.0005: unknown main item tag 0x0 [ 188.664203][ T1206] usb 5-1: Using ep0 maxpacket: 8 [ 188.695281][ T5931] aquacomputer_d5next 0003:0C70:F00B.0005: unknown main item tag 0x0 [ 188.704537][ T1206] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.713847][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.722975][ T1206] usb 5-1: Product: syz [ 188.729010][ T5931] aquacomputer_d5next 0003:0C70:F00B.0005: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.0-1/input0 [ 188.753147][ T1206] usb 5-1: Manufacturer: syz [ 188.853907][ T1206] usb 5-1: SerialNumber: syz [ 189.175042][ T5931] usb 1-1: USB disconnect, device number 9 [ 189.181816][ T1206] usb 5-1: config 0 descriptor?? [ 189.342303][ T7621] fido_id[7621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 189.401362][ T1206] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.434150][ T7613] pim6reg: left allmulticast mode [ 189.805352][ T7630] program syz.0.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.975424][ T1206] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 190.033659][ T1206] usb 5-1: USB disconnect, device number 20 [ 190.484805][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 190.484824][ T30] audit: type=1400 audit(1757499747.300:1104): avc: denied { read append } for pid=7634 comm="syz.1.438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 190.579756][ T30] audit: type=1400 audit(1757499747.310:1105): avc: denied { open } for pid=7634 comm="syz.1.438" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 190.629129][ T30] audit: type=1400 audit(1757499747.320:1106): avc: denied { ioctl } for pid=7634 comm="syz.1.438" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 190.667128][ T1206] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 190.704001][ T30] audit: type=1400 audit(1757499747.580:1107): avc: denied { read } for pid=7638 comm="syz.1.440" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.710172][ T7639] binder_alloc: 7638: binder_alloc_buf, no vma [ 190.768691][ T30] audit: type=1400 audit(1757499747.580:1108): avc: denied { open } for pid=7638 comm="syz.1.440" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.822138][ T30] audit: type=1400 audit(1757499747.580:1109): avc: denied { ioctl } for pid=7638 comm="syz.1.440" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.833618][ T1206] usb 5-1: Using ep0 maxpacket: 32 [ 190.907784][ T1206] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.923307][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 190.949655][ T1206] usb 5-1: config 3 has an invalid interface number: 187 but max is 0 [ 191.041188][ T1206] usb 5-1: config 3 has no interface number 0 [ 191.066817][ T1206] usb 5-1: config 3 interface 187 has no altsetting 0 [ 191.107041][ T1206] usb 5-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 191.126442][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.178628][ T30] audit: type=1400 audit(1757499747.590:1110): avc: denied { set_context_mgr } for pid=7638 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.199775][ T1206] usb 5-1: Product: syz [ 191.405031][ T7656] 9pnet_fd: Insufficient options for proto=fd [ 191.591246][ T1206] usb 5-1: Manufacturer: syz [ 192.133774][ T1206] usb 5-1: SerialNumber: syz [ 192.179008][ T7649] team4: entered promiscuous mode [ 192.186340][ T7649] team4: entered allmulticast mode [ 192.227592][ T30] audit: type=1400 audit(1757499747.590:1111): avc: denied { call } for pid=7638 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 192.345619][ T30] audit: type=1400 audit(1757499748.000:1112): avc: denied { create } for pid=7651 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 192.513490][ T6757] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 192.781944][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.792122][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.410337][ T7666] nvme_fabrics: missing parameter 'transport=%s' [ 193.416861][ T7666] nvme_fabrics: missing parameter 'nqn=%s' [ 193.423314][ T30] audit: type=1400 audit(1757499748.090:1113): avc: denied { write } for pid=7653 comm="syz.1.446" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.809078][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.818501][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.919666][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 194.357930][ T7670] team2: entered promiscuous mode [ 194.358540][ T6757] usb 2-1: Using ep0 maxpacket: 16 [ 194.367250][ T7670] team2: entered allmulticast mode [ 194.813800][ T6757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.858467][ T6757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.881942][ T1206] HFC-S_USB 5-1:3.187: probe with driver HFC-S_USB failed with error -5 [ 194.922261][ T6757] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.975592][ T6757] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.993898][ T1206] usb 5-1: USB disconnect, device number 21 [ 195.062025][ T6757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.214084][ T6757] usb 2-1: config 0 descriptor?? [ 195.715167][ T6757] usb 2-1: can't set config #0, error -71 [ 195.782050][ T6757] usb 2-1: USB disconnect, device number 7 [ 195.952808][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 195.952824][ T30] audit: type=1400 audit(1757499752.830:1127): avc: denied { write } for pid=7684 comm="syz.0.453" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.102406][ T30] audit: type=1400 audit(1757499752.910:1128): avc: denied { map } for pid=7684 comm="syz.0.453" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.635743][ T30] audit: type=1400 audit(1757499753.520:1129): avc: denied { read } for pid=7687 comm="syz.0.454" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.702152][ T30] audit: type=1400 audit(1757499753.520:1130): avc: denied { open } for pid=7687 comm="syz.0.454" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.708946][ T7680] [U]  [ 196.800396][ T30] audit: type=1400 audit(1757499753.680:1131): avc: denied { name_bind } for pid=7687 comm="syz.0.454" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 196.822517][ T30] audit: type=1400 audit(1757499753.680:1132): avc: denied { node_bind } for pid=7687 comm="syz.0.454" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 196.893287][ T30] audit: type=1400 audit(1757499753.770:1133): avc: denied { append } for pid=7697 comm="syz.4.456" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.918294][ T30] audit: type=1400 audit(1757499753.800:1134): avc: denied { ioctl } for pid=7697 comm="syz.4.456" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.320321][ T7705] netlink: 120 bytes leftover after parsing attributes in process `syz.0.458'. [ 197.456770][ T7708] binder_alloc: 7706: pid 7706 spamming oneway? 1 buffers allocated for a total size of 4096 [ 197.696189][ T30] audit: type=1400 audit(1757499754.410:1135): avc: denied { read write } for pid=7710 comm="syz.3.461" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 197.721756][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.979002][ T7715] netlink: 'syz.3.461': attribute type 15 has an invalid length. [ 197.986865][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 198.014102][ T7715] new mount options do not match the existing superblock, will be ignored [ 198.309787][ T30] audit: type=1400 audit(1757499754.410:1136): avc: denied { open } for pid=7710 comm="syz.3.461" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.334246][ T7709] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 199.628710][ T7734] veth0_to_team: entered promiscuous mode [ 199.642945][ T7735] FAULT_INJECTION: forcing a failure. [ 199.642945][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.693713][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT(full) [ 199.693739][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.693749][ T7735] Call Trace: [ 199.693755][ T7735] [ 199.693762][ T7735] dump_stack_lvl+0x16c/0x1f0 [ 199.693788][ T7735] should_fail_ex+0x512/0x640 [ 199.693813][ T7735] _copy_from_user+0x2e/0xd0 [ 199.693837][ T7735] __sys_bpf+0x21d/0x4de0 [ 199.693864][ T7735] ? __pfx___sys_bpf+0x10/0x10 [ 199.693887][ T7735] ? ksys_write+0x190/0x250 [ 199.693908][ T7735] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 199.693944][ T7735] ? fput+0x9b/0xd0 [ 199.693966][ T7735] ? ksys_write+0x1ac/0x250 [ 199.693982][ T7735] ? __pfx_ksys_write+0x10/0x10 [ 199.694003][ T7735] __x64_sys_bpf+0x78/0xc0 [ 199.694025][ T7735] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.694045][ T7735] do_syscall_64+0xcd/0x4c0 [ 199.694067][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.694085][ T7735] RIP: 0033:0x7f39d818eba9 [ 199.694098][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.694113][ T7735] RSP: 002b:00007f39d8f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.694130][ T7735] RAX: ffffffffffffffda RBX: 00007f39d83d6090 RCX: 00007f39d818eba9 [ 199.694141][ T7735] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0008000000000000 [ 199.694152][ T7735] RBP: 00007f39d8f77090 R08: 0000000000000000 R09: 0000000000000000 [ 199.694161][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.694171][ T7735] R13: 00007f39d83d6128 R14: 00007f39d83d6090 R15: 00007ffe70bd18d8 [ 199.694193][ T7735] [ 199.869831][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.140755][ T7745] warning: `syz.3.470' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.185352][ T7745] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 200.397797][ T7731] [U]  [ 200.919457][ T7757] 9pnet_fd: Insufficient options for proto=fd [ 201.232321][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 201.232340][ T30] audit: type=1400 audit(1757499757.800:1170): avc: denied { mounton } for pid=7751 comm="syz.0.472" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 201.922460][ T30] audit: type=1400 audit(1757499757.820:1171): avc: denied { create } for pid=7751 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.189064][ T30] audit: type=1400 audit(1757499757.830:1172): avc: denied { bind } for pid=7751 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.223730][ T30] audit: type=1400 audit(1757499757.840:1173): avc: denied { create } for pid=7751 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.250101][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 202.283177][ T30] audit: type=1400 audit(1757499759.120:1174): avc: denied { create } for pid=7763 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.319244][ T30] audit: type=1400 audit(1757499759.120:1175): avc: denied { write } for pid=7763 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.342102][ T30] audit: type=1400 audit(1757499759.150:1176): avc: denied { prog_load } for pid=7766 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 202.361337][ T30] audit: type=1400 audit(1757499759.150:1177): avc: denied { bpf } for pid=7766 comm="syz.3.477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.382294][ T30] audit: type=1400 audit(1757499759.180:1178): avc: denied { read write } for pid=7766 comm="syz.3.477" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.414810][ T30] audit: type=1400 audit(1757499759.180:1179): avc: denied { open } for pid=7766 comm="syz.3.477" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.579023][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 202.592696][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 202.602692][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 202.614165][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 202.919639][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.113599][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 203.128208][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.148922][ T5931] usb 4-1: config 3 has an invalid interface number: 187 but max is 0 [ 203.197599][ T5931] usb 4-1: config 3 has no interface number 0 [ 203.231175][ T5931] usb 4-1: config 3 interface 187 has no altsetting 0 [ 203.247896][ T5931] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 203.261382][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.271062][ T5931] usb 4-1: Product: syz [ 203.368356][ T5931] usb 4-1: Manufacturer: syz [ 203.373292][ T5931] usb 4-1: SerialNumber: syz [ 204.258498][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.268107][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.355613][ T7791] ntfs3(nullb0): Primary boot signature is not NTFS. [ 205.514315][ T7791] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 205.590878][ T7799] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.629580][ T7786] nvme_fabrics: missing parameter 'transport=%s' [ 205.636059][ T7786] nvme_fabrics: missing parameter 'nqn=%s' [ 205.690942][ T7802] overlayfs: failed to resolve './file1': -2 [ 205.769315][ T5931] HFC-S_USB 4-1:3.187: probe with driver HFC-S_USB failed with error -5 [ 205.804059][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 206.084172][ T5931] usb 4-1: USB disconnect, device number 5 [ 206.138817][ T7811] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 206.155455][ T7811] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 206.491089][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 206.491109][ T30] audit: type=1400 audit(1757499763.370:1222): avc: denied { read write } for pid=7805 comm="syz.1.486" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.723477][ T30] audit: type=1400 audit(1757499763.370:1223): avc: denied { open } for pid=7805 comm="syz.1.486" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.913475][ T30] audit: type=1400 audit(1757499763.420:1224): avc: denied { map_read map_write } for pid=7816 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.978250][ T30] audit: type=1400 audit(1757499763.450:1225): avc: denied { create } for pid=7816 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.043510][ T7828] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 207.063879][ T7828] batman_adv: batadv0: Adding interface: team0 [ 207.070156][ T7828] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.165543][ T30] audit: type=1400 audit(1757499763.460:1226): avc: denied { listen } for pid=7816 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.196831][ T7828] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 207.249176][ T7834] binder: 7833:7834 ioctl c0306201 0 returned -14 [ 207.536203][ T30] audit: type=1400 audit(1757499763.460:1227): avc: denied { sys_module } for pid=7805 comm="syz.1.486" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.683912][ T30] audit: type=1400 audit(1757499763.580:1228): avc: denied { shutdown } for pid=7816 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.723242][ T30] audit: type=1400 audit(1757499763.760:1229): avc: denied { read } for pid=7821 comm="syz.0.488" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.745768][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.753843][ T30] audit: type=1400 audit(1757499763.760:1230): avc: denied { open } for pid=7821 comm="syz.0.488" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.777291][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.615168][ T30] audit: type=1400 audit(1757499763.830:1231): avc: denied { add_name } for pid=7777 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.253739][ T7840] bridge_slave_0: left allmulticast mode [ 209.260858][ T7840] bridge_slave_0: left promiscuous mode [ 209.276833][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.317246][ T7840] bridge_slave_1: left allmulticast mode [ 209.332838][ T7840] bridge_slave_1: left promiscuous mode [ 209.358702][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.558254][ T7840] bond0: (slave bond_slave_0): Releasing backup interface [ 209.668537][ T7856] 9pnet_fd: Insufficient options for proto=fd [ 210.057135][ T7859] netlink: 'syz.4.495': attribute type 27 has an invalid length. [ 210.156286][ T7840] bond0: (slave bond_slave_1): Releasing backup interface [ 210.175589][ T7840] team0: Port device team_slave_0 removed [ 210.185674][ T7840] team0: Port device team_slave_1 removed [ 210.193826][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.716622][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.916723][ T5848] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.134342][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 211.188132][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.198311][ T5848] usb 4-1: config 0 has no interfaces? [ 211.334312][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.366220][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.389954][ T5848] usb 4-1: config 0 descriptor?? [ 211.654600][ T7881] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.867551][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 211.867577][ T30] audit: type=1400 audit(1757499768.750:1272): avc: denied { create } for pid=7854 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.140551][ T7864] [U]  [ 212.588015][ T7898] binder: 7896:7898 ioctl c0306201 0 returned -14 [ 212.808448][ T30] audit: type=1400 audit(1757499769.680:1273): avc: denied { read } for pid=7899 comm="syz.1.503" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.827919][ T7904] netlink: 'syz.1.503': attribute type 3 has an invalid length. [ 212.860550][ T30] audit: type=1400 audit(1757499769.680:1274): avc: denied { open } for pid=7899 comm="syz.1.503" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 212.886788][ T7904] netlink: 'syz.1.503': attribute type 3 has an invalid length. [ 213.130840][ T5848] usb 4-1: USB disconnect, device number 6 [ 213.749304][ T30] audit: type=1400 audit(1757499770.630:1275): avc: denied { create } for pid=7910 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.787863][ T30] audit: type=1400 audit(1757499770.650:1276): avc: denied { mount } for pid=7910 comm="syz.0.506" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.817217][ T30] audit: type=1400 audit(1757499770.660:1277): avc: denied { create } for pid=7910 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.849421][ T30] audit: type=1400 audit(1757499770.660:1278): avc: denied { create } for pid=7910 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.869042][ T5848] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.877037][ T30] audit: type=1400 audit(1757499770.660:1279): avc: denied { ioctl } for pid=7910 comm="syz.0.506" path="socket:[17960]" dev="sockfs" ino=17960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.903253][ T30] audit: type=1400 audit(1757499770.660:1280): avc: denied { bind } for pid=7910 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.922645][ T30] audit: type=1400 audit(1757499770.660:1281): avc: denied { setopt } for pid=7910 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.038342][ T7919] tmpfs: Unknown parameter '' [ 214.065678][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.093483][ T5848] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 214.102535][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.127564][ T5848] usb 4-1: config 0 descriptor?? [ 214.534061][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c5800: rx timeout, send abort [ 214.975225][ T5848] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 214.983339][ T5848] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 214.994493][ T5848] aquacomputer_d5next 0003:0C70:F00B.0006: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 215.043156][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579c5800: abort rx timeout. Force session deactivation [ 215.135525][ T5848] usb 4-1: USB disconnect, device number 7 [ 215.151710][ T7936] program syz.2.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.236767][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 216.523328][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 216.691812][ T7946] team5: entered promiscuous mode [ 216.697006][ T7946] team5: entered allmulticast mode [ 217.596748][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 217.596763][ T30] audit: type=1400 audit(1757499774.480:1311): avc: denied { create } for pid=7952 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.656929][ T30] audit: type=1400 audit(1757499774.510:1312): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.656973][ T30] audit: type=1400 audit(1757499774.510:1313): avc: denied { open } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.656996][ T30] audit: type=1400 audit(1757499774.510:1314): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.820138][ T7965] loop7: detected capacity change from 0 to 7 [ 217.859650][ T7965] Dev loop7: unable to read RDB block 7 [ 217.859673][ T7965] loop7: unable to read partition table [ 217.859764][ T7965] loop7: partition table beyond EOD, truncated [ 217.859780][ T7965] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.860787][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 217.860806][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 217.991036][ T30] audit: type=1400 audit(1757499774.870:1315): avc: denied { read write } for pid=7966 comm="syz.4.523" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.991089][ T30] audit: type=1400 audit(1757499774.870:1316): avc: denied { open } for pid=7966 comm="syz.4.523" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 218.001099][ T30] audit: type=1400 audit(1757499774.880:1317): avc: denied { read } for pid=7966 comm="syz.4.523" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.001128][ T30] audit: type=1400 audit(1757499774.880:1318): avc: denied { open } for pid=7966 comm="syz.4.523" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.062227][ T30] audit: type=1400 audit(1757499774.940:1319): avc: denied { read write } for pid=7966 comm="syz.4.523" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.062540][ T30] audit: type=1400 audit(1757499774.940:1320): avc: denied { open } for pid=7966 comm="syz.4.523" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.726177][ T7980] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 218.726254][ T7980] macvlan0: entered promiscuous mode [ 220.565267][ T6796] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.881457][ T8005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.975429][ T6796] usb 1-1: Using ep0 maxpacket: 32 [ 221.001628][ T6796] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 221.115680][ T6796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.179563][ T6796] usb 1-1: config 0 has no interface number 0 [ 221.196895][ T6796] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 221.402374][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 221.465928][ T6796] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 221.479400][ T6796] usb 1-1: config 0 interface 86 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.688961][ T6796] usb 1-1: config 0 interface 86 has no altsetting 0 [ 221.699579][ T6796] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 221.709770][ T6796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.721969][ T6796] usb 1-1: Product: syz [ 221.726745][ T6796] usb 1-1: Manufacturer: syz [ 221.732655][ T6796] usb 1-1: SerialNumber: syz [ 221.762292][ T6796] usb 1-1: config 0 descriptor?? [ 221.956080][ T8018] fuse: Bad value for 'fd' [ 222.353527][ T7998] IPVS: set_ctl: invalid protocol: 19 172.20.20.170:20001 [ 222.420049][ T7996] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.470953][ T5931] usb 1-1: USB disconnect, device number 10 [ 222.609174][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 222.609190][ T30] audit: type=1400 audit(1757499779.490:1379): avc: denied { create } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 222.759446][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 223.343545][ T30] audit: type=1400 audit(1757499779.490:1380): avc: denied { bind } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.369718][ T30] audit: type=1400 audit(1757499779.490:1381): avc: denied { setopt } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.409399][ T30] audit: type=1400 audit(1757499779.490:1382): avc: denied { accept } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 223.472753][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 223.498631][ T30] audit: type=1400 audit(1757499779.490:1383): avc: denied { map_create } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.528773][ T30] audit: type=1400 audit(1757499779.490:1384): avc: denied { map_read map_write } for pid=8033 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.548516][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.568153][ T30] audit: type=1400 audit(1757499779.640:1385): avc: denied { name_bind } for pid=8022 comm="syz.3.538" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 223.595031][ T30] audit: type=1400 audit(1757499779.640:1386): avc: denied { node_bind } for pid=8022 comm="syz.3.538" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 223.615653][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.637622][ T30] audit: type=1400 audit(1757499779.740:1387): avc: denied { read } for pid=8022 comm="syz.3.538" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.675051][ T30] audit: type=1400 audit(1757499779.740:1388): avc: denied { open } for pid=8022 comm="syz.3.538" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.697936][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.734050][ T8041] vlan2: entered promiscuous mode [ 224.862998][ T8059] 9pnet_fd: Insufficient options for proto=fd [ 225.222500][ T6757] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 225.351163][ T8061] fuse: Bad value for 'fd' [ 225.506595][ T8063] 9pnet_fd: Insufficient options for proto=fd [ 225.799326][ T6757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.799371][ T6757] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.901077][ T6757] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 225.901213][ T6757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 225.901278][ T6757] usb 4-1: Product: syz [ 225.901336][ T6757] usb 4-1: Manufacturer: syz [ 225.901393][ T6757] usb 4-1: SerialNumber: syz [ 225.961432][ T6757] usb 4-1: config 0 descriptor?? [ 226.182099][ T8067] befs: (nullb0): No write support. Marking filesystem read-only [ 226.192479][ T8067] befs: (nullb0): invalid magic header [ 226.233526][ T8067] netlink: 68 bytes leftover after parsing attributes in process `syz.1.550'. [ 226.492551][ T5173] Bluetooth: hci2: Unable to find connection for big 0x00 [ 226.529707][ T8073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.552'. [ 226.529857][ T8073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.552'. [ 226.532706][ T8073] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 226.533194][ T8073] bond0: (slave wlan1): Opening slave failed [ 227.154186][ T8077] netlink: 'syz.4.554': attribute type 9 has an invalid length. [ 227.222778][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 227.299768][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.664547][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 227.665624][ T30] audit: type=1400 audit(1757499784.550:1413): avc: denied { create } for pid=8083 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.863461][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 227.872537][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.889994][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.900083][ T9] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.922213][ T8082] team4: entered promiscuous mode [ 227.948276][ T8082] team4: entered allmulticast mode [ 227.960063][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.983264][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.993623][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.414286][ T30] audit: type=1400 audit(1757499785.140:1414): avc: denied { read } for pid=8087 comm="syz.4.557" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.974216][ T2140] usb 4-1: USB disconnect, device number 8 [ 229.064054][ T30] audit: type=1400 audit(1757499785.160:1415): avc: denied { open } for pid=8087 comm="syz.4.557" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.093058][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 229.109768][ T30] audit: type=1400 audit(1757499785.220:1416): avc: denied { ioctl } for pid=8087 comm="syz.4.557" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.155678][ T30] audit: type=1400 audit(1757499785.230:1417): avc: denied { create } for pid=8087 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 229.262788][ T8105] fuse: Bad value for 'fd' [ 229.426016][ T8107] 9pnet_fd: Insufficient options for proto=fd [ 230.240729][ T30] audit: type=1400 audit(1757499787.030:1418): avc: denied { read write } for pid=8098 comm="syz.1.561" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 230.264345][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.268237][ T5931] usb 1-1: USB disconnect, device number 11 [ 230.322862][ T30] audit: type=1400 audit(1757499787.030:1419): avc: denied { open } for pid=8098 comm="syz.1.561" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 230.346887][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.396024][ T8117] 9pnet_fd: Insufficient options for proto=fd [ 230.413038][ T30] audit: type=1400 audit(1757499787.290:1420): avc: denied { create } for pid=8113 comm="syz.0.565" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.434180][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.464191][ T30] audit: type=1400 audit(1757499787.290:1421): avc: denied { create } for pid=8111 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.532105][ T30] audit: type=1400 audit(1757499787.290:1422): avc: denied { connect } for pid=8111 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.743664][ T5903] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 230.801557][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 230.823627][ T5924] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 230.886826][ T8134] team6: entered promiscuous mode [ 230.892160][ T8134] team6: entered allmulticast mode [ 230.973765][ T5924] usb 5-1: device descriptor read/64, error -71 [ 231.065088][ T5903] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 231.073198][ T5903] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 231.116936][ T5903] usb 3-1: config 8 has no interface number 0 [ 231.123054][ T5903] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.167201][ T5903] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 231.253172][ T5903] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 231.296933][ T5924] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 231.300672][ T5903] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 231.322577][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.358987][ T5903] usb 3-1: NFC: intf ffff8880534f9000 id ffffffff8f569f00 [ 231.443596][ T5924] usb 5-1: device descriptor read/64, error -71 [ 231.555935][ T5924] usb usb5-port1: attempt power cycle [ 231.943552][ T6757] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 231.963781][ T5924] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 231.995595][ T5924] usb 5-1: device descriptor read/8, error -71 [ 232.054872][ T5903] usb 3-1: USB disconnect, device number 6 [ 232.176549][ T6757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.211009][ T6757] usb 4-1: config 0 has no interfaces? [ 232.246078][ T5924] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 232.262124][ T6757] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.274066][ T6757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.287020][ T6757] usb 4-1: config 0 descriptor?? [ 232.296434][ T5924] usb 5-1: device descriptor read/8, error -71 [ 232.471721][ T5924] usb usb5-port1: unable to enumerate USB device [ 232.575106][ T5903] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.733595][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 232.751213][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 232.762399][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 232.782852][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.794238][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.840294][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.863395][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 232.879969][ T30] audit: type=1400 audit(1757499789.740:1468): avc: denied { read write } for pid=8165 comm="syz.0.578" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.905258][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.914478][ T30] audit: type=1400 audit(1757499789.740:1469): avc: denied { open } for pid=8165 comm="syz.0.578" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.943816][ T5903] usbtmc 3-1:16.0: bulk endpoints not found [ 232.965540][ T30] audit: type=1400 audit(1757499789.760:1470): avc: denied { ioctl } for pid=8165 comm="syz.0.578" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.202760][ T30] audit: type=1400 audit(1757499790.080:1471): avc: denied { setopt } for pid=8169 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.309342][ T5903] usb 3-1: USB disconnect, device number 7 [ 233.426789][ T30] audit: type=1400 audit(1757499790.310:1472): avc: denied { create } for pid=8171 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.528007][ T8165] [U]  [ 234.104299][ T30] audit: type=1400 audit(1757499790.660:1473): avc: denied { create } for pid=8176 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.136308][ T8181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.442166][ T6757] usb 4-1: string descriptor 0 read error: -71 [ 234.457206][ T6757] usb 4-1: USB disconnect, device number 9 [ 234.463577][ T30] audit: type=1400 audit(1757499791.260:1474): avc: denied { module_request } for pid=8187 comm="syz.4.585" kmod="crypto-lrw(ecb-aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 234.771122][ T8197] overlayfs: failed to resolve './file1/file0': -2 [ 234.865411][ T30] audit: type=1400 audit(1757499791.730:1475): avc: denied { read } for pid=8190 comm="syz.1.586" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.114996][ T8196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.125413][ T8145] delete_channel: no stack [ 235.188010][ T30] audit: type=1400 audit(1757499791.730:1476): avc: denied { open } for pid=8190 comm="syz.1.586" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.330492][ T30] audit: type=1400 audit(1757499791.730:1477): avc: denied { ioctl } for pid=8190 comm="syz.1.586" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.753833][ T5903] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 235.876769][ T8222] bridge_slave_0: left allmulticast mode [ 235.882462][ T8222] bridge_slave_0: left promiscuous mode [ 235.888832][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.852006][ T8222] bridge_slave_1: left allmulticast mode [ 237.858064][ T8222] bridge_slave_1: left promiscuous mode [ 237.864900][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.949765][ T8222] bond0: (slave bond_slave_0): Releasing backup interface [ 238.005947][ T8222] bond0: (slave bond_slave_1): Releasing backup interface [ 238.020938][ T8222] team0: Port device team_slave_0 removed [ 238.039935][ T8229] xt_limit: Overflow, try lower: 2498045675/2726951205 [ 238.050475][ T8222] team0: Port device team_slave_1 removed [ 238.061173][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.113561][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.162484][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.181767][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.198442][ T5903] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 238.206907][ T8222] bond0: (slave macvlan0): Releasing backup interface [ 238.257858][ T5903] usb 5-1: config 0 has no interface number 0 [ 238.283578][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.284225][ T74] tipc: Resetting bearer [ 238.294799][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 238.340601][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 238.366489][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 238.435477][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 238.452781][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 238.502189][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.507678][ T8234] vlan2: entered promiscuous mode [ 238.516090][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 238.529634][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.550890][ T5903] usb 5-1: config 0 descriptor?? [ 238.563242][ T5903] usb 5-1: can't set config #0, error -71 [ 238.601468][ T5903] usb 5-1: USB disconnect, device number 26 [ 239.306820][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 239.312919][ T30] audit: type=1400 audit(1757499795.760:1485): avc: denied { write } for pid=8239 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.407273][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 240.009099][ T8247] team2: entered promiscuous mode [ 240.813486][ T6757] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 240.834635][ T8247] team2: entered allmulticast mode [ 240.878250][ T30] audit: type=1400 audit(1757499797.730:1486): avc: denied { relabelfrom } for pid=8250 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.202717][ T6757] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.234649][ T8269] binder: 8268:8269 ioctl c0306201 0 returned -14 [ 241.325194][ T6757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.336987][ T30] audit: type=1400 audit(1757499797.730:1487): avc: denied { relabelto } for pid=8250 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.405727][ T6757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.440768][ T30] audit: type=1400 audit(1757499798.120:1488): avc: denied { ioctl } for pid=8268 comm="syz.1.608" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 241.458552][ T6757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.511179][ T8276] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 241.520028][ T30] audit: type=1400 audit(1757499798.390:1489): avc: denied { ioctl } for pid=8274 comm="syz.3.610" path="socket:[19337]" dev="sockfs" ino=19337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.530817][ T8277] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 241.548171][ T30] audit: type=1400 audit(1757499798.410:1490): avc: denied { bind } for pid=8275 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.552593][ T6757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.577112][ T8278] fuse: Bad value for 'fd' [ 241.592917][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.594434][ T6757] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.601001][ T8276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.616386][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.623475][ T8276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.644541][ T6757] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.653046][ T6757] usb 5-1: Product: syz [ 241.706547][ T8276] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 241.786530][ T6757] usb 5-1: Manufacturer: syz [ 241.959047][ T6757] usb 5-1: can't set config #1, error -71 [ 241.993718][ T6757] usb 5-1: USB disconnect, device number 27 [ 242.349774][ T8295] netlink: 'syz.1.616': attribute type 13 has an invalid length. [ 242.363833][ T30] audit: type=1400 audit(1757499799.240:1491): avc: denied { name_connect } for pid=8287 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 242.495575][ T30] audit: type=1400 audit(1757499799.270:1492): avc: denied { write } for pid=8292 comm="syz.0.618" path="socket:[19797]" dev="sockfs" ino=19797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.532095][ T30] audit: type=1400 audit(1757499799.300:1493): avc: denied { read } for pid=8287 comm="syz.2.615" lport=51525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.583496][ T5903] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.616454][ T8305] program syz.4.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.088736][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 243.486260][ T30] audit: type=1400 audit(1757499799.350:1494): avc: denied { read } for pid=8292 comm="syz.0.618" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 243.530758][ T5903] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 243.538951][ T5903] usb 4-1: config 0 has no interface number 0 [ 243.545093][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 243.554919][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 243.564828][ T5903] usb 4-1: config 0 interface 41 has no altsetting 0 [ 243.584023][ T5903] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 243.596849][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.604941][ T5903] usb 4-1: Product: syz [ 243.611662][ T5903] usb 4-1: Manufacturer: syz [ 243.655986][ T5903] usb 4-1: SerialNumber: syz [ 243.769953][ T5903] usb 4-1: config 0 descriptor?? [ 243.817695][ T8300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.844769][ T8300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.137859][ T8298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.165767][ T8298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.189808][ T8317] binder: 8315:8317 ioctl c0306201 0 returned -14 [ 244.349178][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 244.352543][ T30] audit: type=1400 audit(1757499801.230:1506): avc: denied { write } for pid=8320 comm="syz.1.625" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.389800][ T5903] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 244.689887][ T30] audit: type=1400 audit(1757499801.570:1507): avc: denied { write } for pid=8291 comm="syz.3.617" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 244.863988][ T8331] fuse: Invalid rootmode [ 244.868084][ T2140] usb 4-1: USB disconnect, device number 10 [ 244.921804][ T30] audit: type=1400 audit(1757499801.570:1508): avc: denied { open } for pid=8291 comm="syz.3.617" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.158323][ T30] audit: type=1400 audit(1757499802.040:1509): avc: denied { create } for pid=8332 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.411472][ T30] audit: type=1400 audit(1757499802.210:1510): avc: denied { setopt } for pid=8332 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.751094][ T30] audit: type=1400 audit(1757499802.340:1511): avc: denied { getopt } for pid=8340 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.770670][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.584749][ T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 246.743530][ T9] usb 4-1: device descriptor read/64, error -71 [ 246.796025][ T8353] overlay: Unknown parameter 'fsname' [ 247.038709][ T9] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 247.085846][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 247.108683][ T30] audit: type=1400 audit(1757499803.990:1512): avc: denied { sys_module } for pid=8352 comm="syz.4.633" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 247.195320][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 247.274624][ T9] usb 4-1: device descriptor read/64, error -71 [ 247.540288][ T9] usb usb4-port1: attempt power cycle [ 247.573571][ T30] audit: type=1400 audit(1757499804.450:1513): avc: denied { create } for pid=8362 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.606524][ T30] audit: type=1400 audit(1757499804.450:1514): avc: denied { setopt } for pid=8362 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.816089][ T8371] fuse: Invalid rootmode [ 247.876577][ T8373] netlink: 'syz.0.637': attribute type 3 has an invalid length. [ 247.886488][ T8373] netlink: 'syz.0.637': attribute type 3 has an invalid length. [ 247.903609][ T2140] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 247.969268][ T30] audit: type=1400 audit(1757499804.740:1515): avc: denied { read } for pid=8370 comm="syz.0.637" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.124836][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 248.209367][ T9] usb 4-1: device descriptor read/8, error -71 [ 248.323869][ T2140] usb 2-1: Using ep0 maxpacket: 8 [ 248.363079][ T2140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.491487][ T2140] usb 2-1: config 0 has no interfaces? [ 248.506593][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 248.506590][ T2140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.506617][ T2140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.002777][ T2140] usb 2-1: config 0 descriptor?? [ 249.043603][ T5848] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 249.269550][ T9] usb 4-1: device not accepting address 14, error -71 [ 249.269637][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.283655][ T9] usb usb4-port1: unable to enumerate USB device [ 249.323629][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.346664][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.359837][ T5848] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.455171][ T10] usb 2-1: USB disconnect, device number 8 [ 249.491783][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 249.491797][ T30] audit: type=1400 audit(1757499806.370:1531): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 249.500593][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.555907][ T30] audit: type=1400 audit(1757499806.410:1532): avc: denied { bpf } for pid=8383 comm="syz.3.642" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.607208][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 249.675574][ T30] audit: type=1400 audit(1757499806.410:1533): avc: denied { prog_load } for pid=8383 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.677619][ T5848] usb 5-1: config 0 descriptor?? [ 249.698999][ T30] audit: type=1400 audit(1757499806.410:1534): avc: denied { perfmon } for pid=8383 comm="syz.3.642" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 249.721318][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.729409][ T30] audit: type=1400 audit(1757499806.430:1535): avc: denied { prog_run } for pid=8383 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.768509][ T8392] binder: 8391:8392 ioctl c0306201 0 returned -14 [ 249.845560][ T30] audit: type=1400 audit(1757499806.480:1536): avc: denied { create } for pid=8383 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.867031][ T30] audit: type=1400 audit(1757499806.490:1537): avc: denied { write } for pid=8383 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.887442][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.894160][ T30] audit: type=1400 audit(1757499806.650:1538): avc: denied { read } for pid=8391 comm="syz.2.644" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 249.982434][ T30] audit: type=1400 audit(1757499806.650:1539): avc: denied { open } for pid=8391 comm="syz.2.644" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.006219][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.013586][ T30] audit: type=1400 audit(1757499806.650:1540): avc: denied { ioctl } for pid=8391 comm="syz.2.644" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 250.038804][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.276847][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 250.496983][ T5848] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 250.518245][ T8398] team7: entered promiscuous mode [ 250.584005][ T8398] team7: entered allmulticast mode [ 250.715110][ T8395] netlink: 96 bytes leftover after parsing attributes in process `syz.1.645'. [ 250.742904][ T8395] netlink: 96 bytes leftover after parsing attributes in process `syz.1.645'. [ 250.764611][ T8395] netlink: 96 bytes leftover after parsing attributes in process `syz.1.645'. [ 250.973216][ T5848] usb 5-1: USB disconnect, device number 28 [ 250.976391][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 251.080076][ T8411] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 251.095849][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.104201][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.680248][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.854911][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.866445][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.878690][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.898694][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.918268][ T10] usb 1-1: Product: syz [ 251.922739][ T10] usb 1-1: Manufacturer: syz [ 251.935064][ T10] usb 1-1: SerialNumber: syz [ 251.949589][ T10] usb 1-1: config 0 descriptor?? [ 251.973550][ T10] usb 1-1: selecting invalid altsetting 0 [ 252.297726][ T8424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.429561][ T8437] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 252.437322][ T8437] netlink: 17 bytes leftover after parsing attributes in process `syz.0.653'. [ 252.873501][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 252.955707][ T8442] binder: BC_ATTEMPT_ACQUIRE not supported [ 252.961529][ T8442] binder: 8441:8442 ioctl c0306201 200000000180 returned -22 [ 253.025281][ T10] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 253.044513][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 253.058266][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 253.109653][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.119015][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.127148][ T10] usb 3-1: SerialNumber: syz [ 253.136373][ T8432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 253.146097][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 253.154017][ T10] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 253.160747][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 253.239696][ T8446] loop6: detected capacity change from 0 to 2560 [ 253.253200][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.262264][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.271288][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.280336][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.289528][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.298750][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.308021][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.316922][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.325704][ T8446] ldm_validate_partition_table(): Disk read failed. [ 253.332798][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.341805][ T8446] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.362829][ T8446] Dev loop6: unable to read RDB block 0 [ 253.372543][ T8446] loop6: unable to read partition table [ 253.380220][ T8446] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 254.252565][ T5903] libceph: connect (1)[b::]:6789 error -101 [ 254.278905][ T5903] libceph: mon0 (1)[b::]:6789 connect error [ 254.375154][ T5848] usb 1-1: USB disconnect, device number 12 [ 254.563734][ T5903] libceph: connect (1)[b::]:6789 error -101 [ 254.576098][ T5903] libceph: mon0 (1)[b::]:6789 connect error [ 254.621780][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 254.621796][ T30] audit: type=1400 audit(1757499811.500:1596): avc: denied { mounton } for pid=8458 comm="syz.3.665" path="/127/file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.650590][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.677440][ T30] audit: type=1400 audit(1757499811.560:1597): avc: denied { mount } for pid=8458 comm="syz.3.665" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.737296][ T2140] usb 3-1: USB disconnect, device number 8 [ 254.779947][ T8463] FAULT_INJECTION: forcing a failure. [ 254.779947][ T8463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.793633][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT(full) [ 254.793656][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.793665][ T8463] Call Trace: [ 254.793671][ T8463] [ 254.793677][ T8463] dump_stack_lvl+0x16c/0x1f0 [ 254.793704][ T8463] should_fail_ex+0x512/0x640 [ 254.793728][ T8463] should_fail_alloc_page+0xe7/0x130 [ 254.793749][ T8463] prepare_alloc_pages+0x3c2/0x610 [ 254.793776][ T8463] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 254.793796][ T8463] ? __cgroup_account_cputime+0xcc/0x120 [ 254.793822][ T8463] ? rcu_is_watching+0x12/0xc0 [ 254.793846][ T8463] ? __resched_curr+0x2ac/0x3b0 [ 254.793865][ T8463] ? find_held_lock+0x2b/0x80 [ 254.793888][ T8463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 254.793909][ T8463] ? trace_sched_exit_tp+0xd1/0x120 [ 254.793927][ T8463] ? __schedule+0x11a3/0x5de0 [ 254.793944][ T8463] ? do_syscall_64+0xcd/0x4c0 [ 254.793975][ T8463] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.793995][ T8463] ? policy_nodemask+0xea/0x4e0 [ 254.794017][ T8463] alloc_pages_mpol+0x1fb/0x550 [ 254.794037][ T8463] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 254.794063][ T8463] alloc_pages_noprof+0x131/0x390 [ 254.794084][ T8463] get_free_pages_noprof+0x10/0xb0 [ 254.794102][ T8463] kasan_populate_vmalloc+0x89/0x1f0 [ 254.794135][ T8463] alloc_vmap_area+0x959/0x29c0 [ 254.794166][ T8463] ? __pfx_alloc_vmap_area+0x10/0x10 [ 254.794193][ T8463] __get_vm_area_node+0x1ca/0x330 [ 254.794221][ T8463] __vmalloc_node_range_noprof+0x271/0x14b0 [ 254.794245][ T8463] ? reuseport_array_alloc+0xbd/0x110 [ 254.794268][ T8463] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.794292][ T8463] ? reuseport_array_alloc+0xbd/0x110 [ 254.794316][ T8463] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.794346][ T8463] ? rcu_is_watching+0x12/0xc0 [ 254.794367][ T8463] ? irqentry_exit+0x3b/0x90 [ 254.794387][ T8463] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.794414][ T8463] ? reuseport_array_alloc+0xbd/0x110 [ 254.794431][ T8463] __bpf_map_area_alloc+0x12e/0x200 [ 254.794455][ T8463] ? reuseport_array_alloc+0xbd/0x110 [ 254.794477][ T8463] reuseport_array_alloc+0xbd/0x110 [ 254.794496][ T8463] map_create+0x592/0x1f80 [ 254.794520][ T8463] ? __pfx_avc_has_perm+0x10/0x10 [ 254.794539][ T8463] ? __pfx_map_create+0x10/0x10 [ 254.794558][ T8463] ? __might_fault+0xe3/0x190 [ 254.794574][ T8463] ? __might_fault+0xe3/0x190 [ 254.794588][ T8463] ? __might_fault+0x13b/0x190 [ 254.794608][ T8463] ? selinux_bpf+0xde/0x130 [ 254.794629][ T8463] __sys_bpf+0x44d2/0x4de0 [ 254.794654][ T8463] ? __pfx___sys_bpf+0x10/0x10 [ 254.794681][ T8463] ? __pfx___schedule+0x10/0x10 [ 254.794698][ T8463] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.794742][ T8463] __x64_sys_bpf+0x78/0xc0 [ 254.794765][ T8463] do_syscall_64+0xcd/0x4c0 [ 254.794788][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.794805][ T8463] RIP: 0033:0x7f050e78eba9 [ 254.794820][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.794843][ T8463] RSP: 002b:00007f050c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.794861][ T8463] RAX: ffffffffffffffda RBX: 00007f050e9d6090 RCX: 00007f050e78eba9 [ 254.794873][ T8463] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0008000000000000 [ 254.794883][ T8463] RBP: 00007f050c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.794893][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.794903][ T8463] R13: 00007f050e9d6128 R14: 00007f050e9d6090 R15: 00007ffe3a196dc8 [ 254.794927][ T8463] [ 255.150826][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.159166][ T5903] libceph: connect (1)[b::]:6789 error -101 [ 255.165204][ T5903] libceph: mon0 (1)[b::]:6789 connect error [ 255.179046][ T8454] ceph: No mds server is up or the cluster is laggy [ 255.299319][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.306264][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.383491][ T6757] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 255.421777][ T30] audit: type=1400 audit(1757499812.300:1598): avc: denied { read append } for pid=8467 comm="syz.2.668" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.484124][ T30] audit: type=1400 audit(1757499812.300:1599): avc: denied { open } for pid=8467 comm="syz.2.668" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.507154][ T30] audit: type=1400 audit(1757499812.330:1600): avc: denied { ioctl } for pid=8467 comm="syz.2.668" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.555120][ T6757] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 255.558212][ T8472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.564605][ T6757] usb 4-1: config 65 has no interface number 0 [ 255.573861][ T8471] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 255.603655][ T6757] usb 4-1: string descriptor 0 read error: -22 [ 255.612060][ T6757] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 255.622751][ T6757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.656252][ T6757] usbtest 4-1:65.95: Linux gadget zero [ 255.662693][ T6757] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt) [ 255.672827][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 255.709668][ T8476] vlan2: entered promiscuous mode [ 255.714904][ T8476] gretap0: entered promiscuous mode [ 255.849927][ T30] audit: type=1400 audit(1757499812.730:1601): avc: denied { create } for pid=8477 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 255.869333][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.879943][ T30] audit: type=1400 audit(1757499812.760:1602): avc: denied { ioctl } for pid=8477 comm="syz.1.671" path="socket:[20131]" dev="sockfs" ino=20131 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 255.883225][ T10] usb 4-1: USB disconnect, device number 15 [ 255.904571][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.938674][ T30] audit: type=1400 audit(1757499812.800:1603): avc: denied { create } for pid=8477 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.959321][ T30] audit: type=1400 audit(1757499812.800:1604): avc: denied { ioctl } for pid=8477 comm="syz.1.671" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20132 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 255.985004][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.023505][ T30] audit: type=1400 audit(1757499812.800:1605): avc: denied { write } for pid=8477 comm="syz.1.671" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.102863][ T8480] binder_alloc: 8479: pid 8479 spamming oneway? 1 buffers allocated for a total size of 4096 [ 256.127875][ T8480] binder_alloc: 8479: binder_alloc_buf size 12312 failed, no address space [ 256.137143][ T8480] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 256.149997][ T8480] FAULT_INJECTION: forcing a failure. [ 256.149997][ T8480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.165910][ T8480] CPU: 1 UID: 0 PID: 8480 Comm: syz.1.672 Not tainted syzkaller #0 PREEMPT(full) [ 256.165933][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.165943][ T8480] Call Trace: [ 256.165948][ T8480] [ 256.165955][ T8480] dump_stack_lvl+0x16c/0x1f0 [ 256.165981][ T8480] should_fail_ex+0x512/0x640 [ 256.166007][ T8480] _copy_to_user+0x32/0xd0 [ 256.166034][ T8480] simple_read_from_buffer+0xcb/0x170 [ 256.166054][ T8480] proc_fail_nth_read+0x197/0x240 [ 256.166075][ T8480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.166096][ T8480] ? rw_verify_area+0xcf/0x6c0 [ 256.166121][ T8480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.166141][ T8480] vfs_read+0x1e1/0xcf0 [ 256.166161][ T8480] ? __pfx___mutex_lock+0x10/0x10 [ 256.166184][ T8480] ? __pfx_vfs_read+0x10/0x10 [ 256.166208][ T8480] ? __fget_files+0x20e/0x3c0 [ 256.166234][ T8480] ksys_read+0x12a/0x250 [ 256.166250][ T8480] ? __pfx_ksys_read+0x10/0x10 [ 256.166275][ T8480] do_syscall_64+0xcd/0x4c0 [ 256.166298][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.166316][ T8480] RIP: 0033:0x7fb4f858d5bc [ 256.166336][ T8480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 256.166352][ T8480] RSP: 002b:00007fb4f93e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.166368][ T8480] RAX: ffffffffffffffda RBX: 00007fb4f87d5fa0 RCX: 00007fb4f858d5bc [ 256.166378][ T8480] RDX: 000000000000000f RSI: 00007fb4f93e00a0 RDI: 0000000000000006 [ 256.166388][ T8480] RBP: 00007fb4f93e0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.166398][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.166407][ T8480] R13: 00007fb4f87d6038 R14: 00007fb4f87d5fa0 R15: 00007ffd5f6a0bc8 [ 256.166430][ T8480] [ 256.531541][ T8488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 258.602609][ T8515] netlink: 'syz.1.684': attribute type 9 has an invalid length. [ 258.712424][ T8490] [U]  [ 258.753643][ T6757] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.343809][ T6757] usb 1-1: Using ep0 maxpacket: 8 [ 259.355444][ T6757] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.376113][ T6757] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.388425][ T6757] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.399977][ T6757] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.443585][ T6757] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.452651][ T6757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.531644][ T6757] usbtmc 1-1:16.0: bulk endpoints not found [ 259.729911][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 259.729971][ T30] audit: type=1400 audit(1757499816.560:1633): avc: denied { write } for pid=8527 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.793338][ T30] audit: type=1400 audit(1757499816.660:1634): avc: denied { read } for pid=8527 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.800061][ T8529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.945606][ T30] audit: type=1400 audit(1757499816.670:1635): avc: denied { write } for pid=8527 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.986073][ T30] audit: type=1400 audit(1757499816.870:1636): avc: denied { read write } for pid=8521 comm="syz.1.686" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 260.278536][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 260.353849][ T8529] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.362485][ T30] audit: type=1400 audit(1757499816.870:1637): avc: denied { open } for pid=8521 comm="syz.1.686" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 260.537570][ T5931] usb 1-1: USB disconnect, device number 13 [ 260.910698][ T30] audit: type=1400 audit(1757499817.790:1638): avc: denied { write } for pid=8537 comm="syz.1.691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.145503][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 261.391009][ T8543] team3: entered promiscuous mode [ 261.433918][ T8543] team3: entered allmulticast mode [ 261.467878][ T8545] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 262.090459][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 262.190226][ T8553] team8: entered promiscuous mode [ 262.195437][ T8553] team8: entered allmulticast mode [ 262.498815][ T30] audit: type=1400 audit(1757499819.360:1639): avc: denied { create } for pid=8554 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 262.533796][ T8557] syz.2.696 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 262.565285][ T8557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8557 comm=syz.2.696 [ 262.584472][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 262.596731][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.696'. [ 262.614556][ T30] audit: type=1400 audit(1757499819.490:1640): avc: denied { read } for pid=8554 comm="syz.1.695" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.641016][ T30] audit: type=1400 audit(1757499819.520:1641): avc: denied { listen } for pid=8554 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.686698][ T30] audit: type=1400 audit(1757499819.520:1642): avc: denied { write } for pid=8554 comm="syz.1.695" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.699845][ T8582] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 263.707757][ T8582] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.703'. [ 263.830985][ T8583] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.838421][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'. [ 265.090977][ T8593] team5: entered promiscuous mode [ 265.096137][ T8593] team5: entered allmulticast mode [ 265.200055][ T8598] netlink: 'syz.3.707': attribute type 8 has an invalid length. [ 265.645684][ T8606] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 265.765376][ T8606] macvlan0: entered promiscuous mode [ 265.793483][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 265.793497][ T30] audit: type=1400 audit(1757499822.660:1653): avc: denied { read } for pid=8599 comm="syz.0.709" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 265.956270][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 266.070112][ T8614] team3: entered promiscuous mode [ 266.075338][ T8614] team3: entered allmulticast mode [ 266.220967][ T30] audit: type=1400 audit(1757499822.660:1654): avc: denied { open } for pid=8599 comm="syz.0.709" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 266.466058][ T8620] loop7: detected capacity change from 0 to 7 [ 266.489140][ T30] audit: type=1400 audit(1757499822.660:1655): avc: denied { ioctl } for pid=8599 comm="syz.0.709" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 266.514216][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.560313][ T8620] Dev loop7: unable to read RDB block 7 [ 266.572111][ T8620] loop7: unable to read partition table [ 266.572142][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 266.587545][ C1] buffer_io_error: 11 callbacks suppressed [ 266.587560][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 266.602003][ T8620] loop7: partition table beyond EOD, truncated [ 266.612035][ T8620] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 267.003756][ T30] audit: type=1400 audit(1757499823.870:1656): avc: denied { bind } for pid=8621 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.193847][ T30] audit: type=1400 audit(1757499823.870:1657): avc: denied { setopt } for pid=8621 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.214754][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.623859][ T30] audit: type=1400 audit(1757499824.510:1658): avc: denied { setopt } for pid=8647 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.644542][ T2140] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.945637][ T2140] usb 2-1: Using ep0 maxpacket: 8 [ 267.985433][ T2140] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.996503][ T2140] usb 2-1: config 247 has an invalid interface number: 145 but max is 0 [ 268.029866][ T2140] usb 2-1: config 247 has no interface number 0 [ 268.043727][ T2140] usb 2-1: config 247 interface 145 has no altsetting 0 [ 268.050173][ T30] audit: type=1400 audit(1757499824.720:1659): avc: denied { map } for pid=8647 comm="syz.0.716" path="socket:[20390]" dev="sockfs" ino=20390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.103327][ T2140] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 268.113231][ T2140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.122936][ T2140] usb 2-1: Product: syz [ 268.133250][ T2140] usb 2-1: Manufacturer: syz [ 268.149829][ T30] audit: type=1400 audit(1757499825.030:1660): avc: denied { read } for pid=8650 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 268.150166][ T2140] usb 2-1: SerialNumber: syz [ 268.202759][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.224265][ T30] audit: type=1400 audit(1757499825.030:1661): avc: denied { open } for pid=8650 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 268.247907][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.254118][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.267794][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.276463][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.284976][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.314244][ T30] audit: type=1400 audit(1757499825.180:1662): avc: denied { mounton } for pid=8650 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 269.525010][ T74] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.639271][ T74] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.799808][ T8672] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.893939][ T8673] overlayfs: failed to resolve './file1/file0': -2 [ 270.375477][ T5851] Bluetooth: hci5: command tx timeout [ 270.708292][ T2140] upd78f0730 2-1:247.145: upd78f0730 converter detected [ 270.878393][ T2140] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 270.963139][ T8682] loop6: detected capacity change from 0 to 2560 [ 270.974790][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.984026][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.992815][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.001624][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.010451][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.019467][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.029234][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.038369][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.046833][ T8682] ldm_validate_partition_table(): Disk read failed. [ 271.053959][ T8682] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.064632][ T8682] Dev loop6: unable to read RDB block 0 [ 271.073723][ T8682] loop6: unable to read partition table [ 271.080925][ T8682] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 271.215106][ T2140] usb 2-1: USB disconnect, device number 9 [ 271.250789][ T2140] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 271.262934][ T74] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.297852][ T2140] upd78f0730 2-1:247.145: device disconnected [ 271.638046][ T74] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.811741][ T8691] overlay: ./file0 is not a directory [ 271.853522][ T2140] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 271.888073][ T8691] ------------[ cut here ]------------ [ 271.893899][ T8691] WARNING: CPU: 1 PID: 8691 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 271.904203][ T8691] Modules linked in: [ 271.908325][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 271.917581][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.927677][ T8691] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 271.934535][ T8691] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 271.954216][ T8691] RSP: 0018:ffffc90003d4f7f0 EFLAGS: 00010246 [ 271.960298][ T8691] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 271.960862][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 271.960873][ T30] audit: type=1400 audit(1757499828.840:1666): avc: denied { write } for pid=5835 comm="syz-executor" path="pipe:[3982]" dev="pipefs" ino=3982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 271.968353][ T8691] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 271.968386][ T8691] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 271.968398][ T8691] R10: 000000000000001c R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 271.968412][ T8691] R13: 1ffff920007a9f13 R14: ffffffff9ae7fa24 R15: 000000000000001c [ 271.968425][ T8691] FS: 00007f460396d6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 271.968445][ T8691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.968457][ T8691] CR2: 00007f2c1c6b3890 CR3: 0000000073e16000 CR4: 00000000003526f0 [ 271.968469][ T8691] Call Trace: [ 271.968476][ T8691] [ 271.968482][ T8691] ? do_syscall_64+0xcd/0x4c0 [ 271.968510][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.968541][ T8691] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.022143][ T30] audit: type=1400 audit(1757499828.860:1667): avc: denied { create } for pid=8697 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.023448][ T8691] ? kasan_quarantine_put+0x10a/0x240 [ 272.055623][ T8650] chnl_net:caif_netlink_parms(): no params data found [ 272.058642][ T8691] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.116263][ T8691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.122172][ T8691] ? policy_nodemask+0xea/0x4e0 [ 272.127248][ T8691] alloc_pages_mpol+0x1fb/0x550 [ 272.132107][ T8691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 272.137833][ T8691] ? v9fs_fid_get_acl+0x7a/0x120 [ 272.142996][ T8691] ___kmalloc_large_node+0xed/0x160 [ 272.148497][ T8691] ? v9fs_fid_get_acl+0x7a/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.153694][ T8691] __kmalloc_large_node_noprof+0x1c/0x70 [ 272.159548][ T8691] __kmalloc_noprof.cold+0xc/0x61 [ 272.164867][ T8691] ? __pfx_iget5_locked+0x10/0x10 [ 272.169898][ T8691] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 272.176175][ T8691] v9fs_fid_get_acl+0x7a/0x120 [ 272.180957][ T8691] v9fs_get_acl+0xee/0x530 [ 272.185705][ T8691] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 272.191514][ T8691] v9fs_mount+0x4fd/0xa90 [ 272.196202][ T8691] ? __pfx_v9fs_mount+0x10/0x10 [ 272.201055][ T8691] ? cap_capable+0xb3/0x250 [ 272.207187][ T8691] ? __pfx_v9fs_mount+0x10/0x10 [ 272.212056][ T8691] legacy_get_tree+0x10c/0x220 [ 272.216869][ T8691] vfs_get_tree+0x8b/0x340 [ 272.221291][ T8691] path_mount+0x1513/0x2000 [ 272.225864][ T8691] ? __pfx_path_mount+0x10/0x10 [ 272.230720][ T8691] ? kmem_cache_free+0x2d1/0x4d0 [ 272.235682][ T8691] ? putname+0x154/0x1a0 [ 272.239946][ T8691] ? putname+0x154/0x1a0 [ 272.244286][ T8691] ? __x64_sys_mount+0x28d/0x310 [ 272.249233][ T8691] __x64_sys_mount+0x28d/0x310 [ 272.254230][ T8691] ? __pfx___x64_sys_mount+0x10/0x10 [ 272.259647][ T8691] do_syscall_64+0xcd/0x4c0 [ 272.264194][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.270092][ T8691] RIP: 0033:0x7f4602b8eba9 [ 272.274521][ T8691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.294242][ T8691] RSP: 002b:00007f460396d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.302630][ T8691] RAX: ffffffffffffffda RBX: 00007f4602dd5fa0 RCX: 00007f4602b8eba9 [ 272.310603][ T8691] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 272.318575][ T8691] RBP: 00007f4602c11e19 R08: 0000200000000500 R09: 0000000000000000 [ 272.326535][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.334523][ T8691] R13: 00007f4602dd6038 R14: 00007f4602dd5fa0 R15: 00007ffe94b541b8 [ 272.342489][ T8691] [ 272.345513][ T8691] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.352771][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 272.361942][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.371971][ T8691] Call Trace: [ 272.375226][ T8691] [ 272.378130][ T8691] dump_stack_lvl+0x3d/0x1f0 [ 272.382698][ T8691] vpanic+0x6e8/0x7a0 [ 272.386658][ T8691] ? __pfx_vpanic+0x10/0x10 [ 272.391141][ T8691] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 272.397187][ T8691] panic+0xca/0xd0 [ 272.400887][ T8691] ? __pfx_panic+0x10/0x10 [ 272.405305][ T8691] check_panic_on_warn+0xab/0xb0 [ 272.410222][ T8691] __warn+0xf6/0x3c0 [ 272.414088][ T8691] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 272.420126][ T8691] report_bug+0x3c3/0x580 [ 272.424426][ T8691] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 272.430464][ T8691] handle_bug+0x184/0x210 [ 272.434771][ T8691] exc_invalid_op+0x17/0x50 [ 272.439249][ T8691] asm_exc_invalid_op+0x1a/0x20 [ 272.444070][ T8691] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 272.450726][ T8691] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 272.470314][ T8691] RSP: 0018:ffffc90003d4f7f0 EFLAGS: 00010246 [ 272.476355][ T8691] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 272.484302][ T8691] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 272.492245][ T8691] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 272.500188][ T8691] R10: 000000000000001c R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 272.508141][ T8691] R13: 1ffff920007a9f13 R14: ffffffff9ae7fa24 R15: 000000000000001c [ 272.516084][ T8691] ? do_syscall_64+0xcd/0x4c0 [ 272.520747][ T8691] ? do_syscall_64+0xcd/0x4c0 [ 272.525408][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.531451][ T8691] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.537754][ T8691] ? kasan_quarantine_put+0x10a/0x240 [ 272.543096][ T8691] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.548266][ T8691] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.554133][ T8691] ? policy_nodemask+0xea/0x4e0 [ 272.558958][ T8691] alloc_pages_mpol+0x1fb/0x550 [ 272.563782][ T8691] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 272.569129][ T8691] ? v9fs_fid_get_acl+0x7a/0x120 [ 272.574043][ T8691] ___kmalloc_large_node+0xed/0x160 [ 272.579232][ T8691] ? v9fs_fid_get_acl+0x7a/0x120 [ 272.584145][ T8691] __kmalloc_large_node_noprof+0x1c/0x70 [ 272.589753][ T8691] __kmalloc_noprof.cold+0xc/0x61 [ 272.594757][ T8691] ? __pfx_iget5_locked+0x10/0x10 [ 272.599758][ T8691] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 272.605727][ T8691] v9fs_fid_get_acl+0x7a/0x120 [ 272.610469][ T8691] v9fs_get_acl+0xee/0x530 [ 272.614855][ T8691] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 272.620376][ T8691] v9fs_mount+0x4fd/0xa90 [ 272.624687][ T8691] ? __pfx_v9fs_mount+0x10/0x10 [ 272.629517][ T8691] ? cap_capable+0xb3/0x250 [ 272.633995][ T8691] ? __pfx_v9fs_mount+0x10/0x10 [ 272.638815][ T8691] legacy_get_tree+0x10c/0x220 [ 272.643551][ T8691] vfs_get_tree+0x8b/0x340 [ 272.647944][ T8691] path_mount+0x1513/0x2000 [ 272.652420][ T8691] ? __pfx_path_mount+0x10/0x10 [ 272.657247][ T8691] ? kmem_cache_free+0x2d1/0x4d0 [ 272.662155][ T8691] ? putname+0x154/0x1a0 [ 272.666371][ T8691] ? putname+0x154/0x1a0 [ 272.670589][ T8691] ? __x64_sys_mount+0x28d/0x310 [ 272.675497][ T8691] __x64_sys_mount+0x28d/0x310 [ 272.680235][ T8691] ? __pfx___x64_sys_mount+0x10/0x10 [ 272.685499][ T8691] do_syscall_64+0xcd/0x4c0 [ 272.689980][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.695855][ T8691] RIP: 0033:0x7f4602b8eba9 [ 272.700242][ T8691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.719819][ T8691] RSP: 002b:00007f460396d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.728204][ T8691] RAX: ffffffffffffffda RBX: 00007f4602dd5fa0 RCX: 00007f4602b8eba9 [ 272.736146][ T8691] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 272.744093][ T8691] RBP: 00007f4602c11e19 R08: 0000200000000500 R09: 0000000000000000 [ 272.752045][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.759991][ T8691] R13: 00007f4602dd6038 R14: 00007f4602dd5fa0 R15: 00007ffe94b541b8 [ 272.767939][ T8691] [ 272.771144][ T8691] Kernel Offset: disabled [ 272.775449][ T8691] Rebooting in 86400 seconds..