last executing test programs: 9.853877495s ago: executing program 2 (id=1507): r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x8) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x14, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 8.85666087s ago: executing program 2 (id=1510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000880)="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", 0x15f}], 0x1}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1) ioctl$EVIOCGMASK(r7, 0x541b, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) msgget$private(0x4000000000000, 0x40) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000180)={0x2, 0xfc}, 0x2) 7.240524909s ago: executing program 0 (id=1520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff1000000008000600000000001800018014000200776c616e300000000000000000000000080007"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000026000/0x1000)=nil, &(0x7f000027a000/0x2000)=nil, &(0x7f0000498000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000710000/0x2000)=nil, &(0x7f000021e000/0x4000)=nil, &(0x7f0000070000/0x3000)=nil, &(0x7f0000686000/0x2000)=nil, &(0x7f0000789000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0)="84850f2b17e5d81b50d4b18761405c187c0ab04e68bac4b63c58f7829b513cd19bbc5ffd940dd6e3e219c5f6850f6e00fcbfb2b01de09bf3674b78f6f98c6bff9e8b5d0a128a34861984d3ed11bd04164376e34b8727e56695f8876bfa7be68ae0e509693257134ad75a351dd7c0ae02dfb9147a2986762316ad98b6c80b319e3055446e3724e2acf8f179b8de52912aea5b4772577e8f755928011f58e2cec066eac07deb5ad52a32df5924c4039918f245e4a23c69a4f223864391ed7db48a3ac2dd61661dbd9f167fc9bc3ec9a61f21bfdaf633400aaa84212c51a704371bbb93c1c83f9750cc431f4b", 0xeb, r3}, 0x68) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000200)=""/125, 0x7d) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x4e25, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r5, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$FIOCLEX(r3, 0x5451) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.492347547s ago: executing program 4 (id=1525): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) poll(&(0x7f0000001140)=[{r0, 0x2706}], 0x1, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) socket(0x40000000002, 0x3, 0x80000000002) timerfd_create(0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c02, 0x0) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) close(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8 \x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 5.889144717s ago: executing program 2 (id=1528): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) r3 = dup2(r2, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x3, 0x6, 0xb2, "f544ba"}) 5.794924594s ago: executing program 2 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, 0x0, 0x4044000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x80}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d61700000000000000000000008000000"], 0xa4}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00030100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02", 0x92) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000eefaf40d000905820349"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, &(0x7f0000000440)=""/236}, 0x20) 5.47968156s ago: executing program 0 (id=1530): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000"], 0x110) 5.354871817s ago: executing program 4 (id=1531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "a36ee6", 0x30, 0x3a, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @param_prob={0x4, 0x79a1c8f8f6de6eb3, 0x0, 0xb, {0x4, 0x6, "709eb1", 0xfff, 0xff, 0x1, @empty, @private2}}}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xc00d080) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000540)="660f3a0c37ef1ebaa100b00258f2adbad00466edbaf80c66b8dcebd28366efbafc0c66b80090000066efba4200edf020a2007826c70000800f01c53e660f388003"}], 0x1, 0x11, 0x0, 0x12) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, &(0x7f0000000240)={0x18, 0x0, {0x8002, @multicast, 'veth1_to_bridge\x00'}}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [{0x8f0, 0x0, 0x7}, {0x902}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r7 = syz_open_dev$media(&(0x7f0000000140), 0x6e, 0x240000) ioctl$MEDIA_IOC_DEVICE_INFO(r7, 0xc1007c00, &(0x7f00000001c0)) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) membarrier(0x40, 0x0) finit_module(r8, 0x0, 0x7) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000040)={0xd000, 0x102000}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.573585409s ago: executing program 0 (id=1532): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0xc4, 0x4, "c9f62a802cdc36139e6efabefc7781071705109539d35e0f85c9fad8beac209d12341f5e51f8ee093981896fb30cb66a6969ac350eeb1acf2ed6041ad938ad25ef6a356641ca50093e83eb53e561a1843cb9945ca38c8ec9a4f6fbabd5e16c3911a042400c7d20fab8da91a31adb0fe11cfbfd468e493622305228fd2f5d025c7c0d4975a22ec8db2a0be408e8dde0b7f7e4f86244ba6ac1241cbdef61cbe2dabb149834ef1f916569bedb81ac9c641ff1ae42d87f70849a485c7e5be0740285"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x10) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.755320672s ago: executing program 1 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x20, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500000000a405000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3.729948162s ago: executing program 2 (id=1535): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x143b) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800"], 0x44}, 0x1, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xd96a, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061197c00000000009500002000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="c62c6a59efc58554a299167571dfda23b4722828c16e35954b17ed5801c9e446a65526faa6e16dd2a3c50b51364e92a5181e45f6b8a415edce39b29619282d9ed0ccaf8e14b65fd477ed34258e62cb3848e1563a8b9faad11f5a8c24790c9a2288d76d0b8dc1972e4c4a59c015", @ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xb, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a010400000000000000000200e584edf7a1ee7fda010000000000000000000005000a"], 0x3c}}, 0x0) 3.659581067s ago: executing program 4 (id=1536): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000057e89720f20c50620610010203010902120008000000000000006693c25d7b11b25afd78c57b9e0bd14500"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 3.552410825s ago: executing program 1 (id=1538): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) 3.45279117s ago: executing program 0 (id=1539): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) r3 = dup2(r2, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x3, 0x6, 0xb2, "f544ba"}) 3.393271909s ago: executing program 3 (id=1540): socket(0x2, 0x80805, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r7, &(0x7f0000007480)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000001240)=""/70, 0x46}], 0x5}, 0x7}, {{&(0x7f00000013c0)=@generic, 0x80, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000001580)=""/50, 0x32}, 0x3ff}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/45, 0x2d}, {&(0x7f0000002600)=""/45, 0x2d}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000046c0)=""/32, 0x20}], 0x8, &(0x7f0000004780)=""/191, 0xbf}, 0xfff}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000048c0)=""/239, 0xef}], 0x1, &(0x7f0000004ac0)=""/192, 0xc0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000006e80)}, 0x7fff}, {{&(0x7f0000006f40)=@ax25={{0x3, @rose}, [@default, @null, @bcast, @null, @null, @default, @remote, @netrom]}, 0x80, &(0x7f00000073c0)=[{0x0}, {&(0x7f0000007080)=""/99, 0x63}, {0x0}, {&(0x7f0000007180)=""/206, 0xce}, {&(0x7f0000007280)=""/59, 0x3b}, {&(0x7f00000072c0)=""/247, 0xf7}], 0x6, &(0x7f0000007440)=""/53, 0x35}, 0x3}], 0x6, 0x40000040, 0x0) 3.280625908s ago: executing program 0 (id=1541): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0xfffffff8, 0x3}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x1cf1cd988231dbb, 0x3, 0x6, 0x9, 0xffff}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r4, 0x8b32, &(0x7f0000000040)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES8=r3], 0x20}}, 0x0) 2.718039206s ago: executing program 1 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0xc00000000000000) 2.584840267s ago: executing program 1 (id=1543): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.485811339s ago: executing program 3 (id=1544): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x1472000000000000, 0x0}) 2.143638577s ago: executing program 1 (id=1545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, 0x0, 0x4044000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x80}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d61700000000000000000000008000000"], 0xa4}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00030100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02", 0x92) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000eefaf40d000905820349"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, &(0x7f0000000440)=""/236}, 0x20) 2.049051567s ago: executing program 3 (id=1546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000f000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac000000000000000000000400000000000000000000000004000000000000000000000a"], 0xc4}}, 0x4c050) 1.961368561s ago: executing program 3 (id=1547): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0xc4, 0x4, "c9f62a802cdc36139e6efabefc7781071705109539d35e0f85c9fad8beac209d12341f5e51f8ee093981896fb30cb66a6969ac350eeb1acf2ed6041ad938ad25ef6a356641ca50093e83eb53e561a1843cb9945ca38c8ec9a4f6fbabd5e16c3911a042400c7d20fab8da91a31adb0fe11cfbfd468e493622305228fd2f5d025c7c0d4975a22ec8db2a0be408e8dde0b7f7e4f86244ba6ac1241cbdef61cbe2dabb149834ef1f916569bedb81ac9c641ff1ae42d87f70849a485c7e5be0740285"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x10) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="07000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.841164076s ago: executing program 4 (id=1548): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x580, @remote, 0x2}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000040), 0x0, 0x4040084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x2d7) close_range(r2, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x4de2, &(0x7f0000000240)={0x0, 0x4f72, 0x20, 0x1, 0x1e8}) syz_io_uring_setup(0x53a1, &(0x7f00000002c0)={0x0, 0x564c, 0x40, 0x3, 0x180, 0x0, r7}, &(0x7f0000000080), &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7fff, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.070550835s ago: executing program 2 (id=1549): ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x10001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x38}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 923.314762ms ago: executing program 4 (id=1550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 911.955509ms ago: executing program 3 (id=1551): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000a01000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 780.907449ms ago: executing program 4 (id=1552): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 780.011835ms ago: executing program 3 (id=1553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x5ec, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c0, 0x2, [@TCA_U32_SEL={0x384, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0xe595}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x2}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x224, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x5ec}}, 0x24040084) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000200e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000005000110000000000000000000093aef68b00000100000000000000000000ffff0a01010200000000000000000000000000000000fc0200000000000000000000000000003c0000000000000008000800f69421511bf8bc9408c9ec917143702cd9db6d2dbd0ca3c9f4ec6584b1fbd873d2a6b21b6be3dfd5cadb517443464da153df865f9e1363807597468943624cb233c274eac90f9446a7dc659d526108c6d7a137af05ae7140f9470d22bff17b598794007ea4efe763b6c616c5987a85f9f32a8f54512f2984de9019194becc450244992ecbe55f12131f961a323c25ca6e535700192e0c861c2d2e1e3feb4adf37ae893f22b59969563ae3bc27a9628b53060ec04d2"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) 539.392075ms ago: executing program 0 (id=1554): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x608203, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x270, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @remote, [0xff000000], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [0x0, 0x7000000], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 0s ago: executing program 1 (id=1555): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0xc4, 0x4, "c9f62a802cdc36139e6efabefc7781071705109539d35e0f85c9fad8beac209d12341f5e51f8ee093981896fb30cb66a6969ac350eeb1acf2ed6041ad938ad25ef6a356641ca50093e83eb53e561a1843cb9945ca38c8ec9a4f6fbabd5e16c3911a042400c7d20fab8da91a31adb0fe11cfbfd468e493622305228fd2f5d025c7c0d4975a22ec8db2a0be408e8dde0b7f7e4f86244ba6ac1241cbdef61cbe2dabb149834ef1f916569bedb81ac9c641ff1ae42d87f70849a485c7e5be0740285"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x10) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="07000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): ew USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 230.093360][ T5887] usb 2-1: Product: syz [ 230.098245][ T5887] usb 2-1: Manufacturer: syz [ 230.102878][ T5887] usb 2-1: SerialNumber: syz [ 230.113697][ T5887] usb 2-1: config 0 descriptor?? [ 230.121944][ T5887] smsusb:smsusb_probe: board id=2, interface number 0 [ 230.130632][ T5887] smsusb:smsusb_probe: Device initialized with return code -19 [ 230.323204][ T5812] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 230.365539][ T5970] usb 5-1: USB disconnect, device number 16 [ 230.375672][ T30] audit: type=1400 audit(1762712115.716:575): avc: denied { read write } for pid=8408 comm="syz.2.717" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 230.399196][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.436644][ T30] audit: type=1400 audit(1762712115.716:576): avc: denied { open } for pid=8408 comm="syz.2.717" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 230.581934][ T5920] usb 2-1: USB disconnect, device number 21 [ 230.675484][ T8420] netlink: 180 bytes leftover after parsing attributes in process `syz.0.720'. [ 230.686368][ T8420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 230.732646][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.719'. [ 230.761066][ T8383] block nbd3: NBD_DISCONNECT [ 230.837391][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.868449][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.992594][ T5812] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 231.011778][ T5812] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 231.031780][ T5812] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 231.090892][ T5812] usb 4-1: USB disconnect, device number 16 [ 231.170641][ T8435] netlink: 'syz.0.723': attribute type 4 has an invalid length. [ 232.999645][ T30] audit: type=1400 audit(1762712118.296:577): avc: denied { sqpoll } for pid=8460 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 233.108126][ T30] audit: type=1400 audit(1762712118.416:578): avc: denied { create } for pid=8460 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.163301][ T30] audit: type=1400 audit(1762712118.416:579): avc: denied { ioctl } for pid=8460 comm="syz.1.731" path="socket:[17636]" dev="sockfs" ino=17636 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.914363][ T8478] svc: failed to register nfsdv3 RPC service (errno 111). [ 233.987226][ T8478] svc: failed to register nfsaclv3 RPC service (errno 111). [ 234.389808][ T30] audit: type=1400 audit(1762712119.746:580): avc: denied { ioctl } for pid=8484 comm="syz.1.737" path="socket:[18642]" dev="sockfs" ino=18642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.715819][ T8496] wg1 speed is unknown, defaulting to 1000 [ 235.005539][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.079793][ T5970] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.142535][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 235.191309][ T5887] usb 5-1: config 0 has no interfaces? [ 235.238189][ T5887] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 235.247881][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 235.254147][ T5970] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.282614][ T5970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.307875][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.344398][ T8513] openvswitch: netlink: IP tunnel dst address not specified [ 235.731182][ T5970] usb 2-1: config 0 has no interface number 0 [ 235.743212][ T5887] usb 5-1: Product: syz [ 235.753172][ T5887] usb 5-1: Manufacturer: syz [ 235.757873][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.769098][ T5887] usb 5-1: SerialNumber: syz [ 235.778183][ T5887] usb 5-1: config 0 descriptor?? [ 235.783271][ T5970] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 235.794466][ T5970] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 235.805845][ T5970] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.815912][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.887808][ T5970] usb 2-1: config 0 descriptor?? [ 235.917295][ T5970] ldusb 2-1:0.55: Interrupt in endpoint not found [ 236.113368][ T5970] usb 5-1: USB disconnect, device number 17 [ 236.147194][ T5887] usb 2-1: USB disconnect, device number 22 [ 237.108886][ T30] audit: type=1400 audit(1762712122.466:581): avc: denied { setopt } for pid=8531 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.184766][ T8546] netlink: 64 bytes leftover after parsing attributes in process `syz.4.754'. [ 238.224492][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 238.660374][ T5812] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.951108][ T8559] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 239.053235][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 239.057829][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 239.073060][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.075365][ T8565] macvtap2: entered promiscuous mode [ 239.091587][ T5812] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 239.097990][ T8565] macvtap2: entered allmulticast mode [ 239.108248][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.117493][ T8565] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 239.136477][ T5812] usb 5-1: Product: syz [ 239.147829][ T5812] usb 5-1: Manufacturer: syz [ 239.152554][ T5812] usb 5-1: SerialNumber: syz [ 239.177393][ T5812] usb 5-1: config 0 descriptor?? [ 239.393787][ T5812] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 239.427801][ T5812] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 239.454851][ T5812] usb 5-1: USB disconnect, device number 18 [ 239.765083][ T8578] vcan0: entered promiscuous mode [ 239.972192][ T8580] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 240.642956][ T8593] svc: failed to register nfsdv3 RPC service (errno 111). [ 240.660570][ T8593] svc: failed to register nfsaclv3 RPC service (errno 111). [ 241.497830][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 241.497838][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 241.686343][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 241.968097][ T8611] netlink: 'syz.0.775': attribute type 23 has an invalid length. [ 242.171548][ T8618] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 242.200329][ T8612] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 242.214002][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 242.552438][ T30] audit: type=1400 audit(1762712127.896:582): avc: denied { execute } for pid=8635 comm="syz.2.784" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.665013][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 242.697852][ T30] audit: type=1400 audit(1762712128.046:583): avc: denied { mount } for pid=8624 comm="syz.1.780" name="/" dev="ramfs" ino=19018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.769252][ T30] audit: type=1804 audit(1762712128.046:584): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.780" name="file0" dev="ramfs" ino=19019 res=1 errno=0 [ 242.961243][ T5812] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 243.282572][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 243.368571][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 243.377077][ T5812] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 243.396836][ T5812] usb 3-1: config 0 has no interface number 0 [ 243.416011][ T5812] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 243.425766][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.435714][ T5812] usb 3-1: Product: syz [ 243.440325][ T5812] usb 3-1: Manufacturer: syz [ 243.445031][ T5812] usb 3-1: SerialNumber: syz [ 243.462793][ T5812] usb 3-1: config 0 descriptor?? [ 243.476853][ T5812] smsc95xx v2.0.0 [ 243.486438][ T5812] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 243.509339][ T5812] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 243.521292][ T30] audit: type=1400 audit(1762712128.876:585): avc: denied { setopt } for pid=8656 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.634686][ T30] audit: type=1400 audit(1762712128.986:586): avc: denied { read open } for pid=8660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.669510][ T30] audit: type=1400 audit(1762712128.986:587): avc: denied { getattr } for pid=8660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.515682][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8673 comm=syz.3.792 [ 244.527707][ T30] audit: type=1400 audit(1762712129.866:588): avc: denied { add_name } for pid=8658 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.550680][ T30] audit: type=1400 audit(1762712129.866:589): avc: denied { create } for pid=8658 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.573617][ T30] audit: type=1400 audit(1762712129.866:590): avc: denied { write } for pid=8658 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=4512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.600932][ T30] audit: type=1400 audit(1762712129.866:591): avc: denied { append } for pid=8658 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.840315][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 245.317928][ T5812] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 245.523058][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.540716][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.554345][ T8709] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 245.563397][ T8709] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 245.620093][ T5812] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 245.629420][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.658497][ T5812] usb 4-1: config 0 descriptor?? [ 246.532939][ T5812] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 246.548166][ T5920] usb 3-1: USB disconnect, device number 17 [ 246.767899][ T8733] xt_NFQUEUE: number of total queues is 0 [ 246.830237][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 246.851431][ T8739] netlink: 'syz.1.805': attribute type 7 has an invalid length. [ 246.870300][ T8739] netlink: 'syz.1.805': attribute type 8 has an invalid length. [ 246.884515][ T8741] wg1 speed is unknown, defaulting to 1000 [ 246.891525][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 246.963455][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 247.235068][ T5812] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 247.238680][ T8739] erspan0: entered promiscuous mode [ 247.247798][ T5812] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 247.267113][ T8739] gretap0: entered promiscuous mode [ 247.283354][ T5812] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 247.301440][ T8739] erspan0: left promiscuous mode [ 247.331704][ T5812] usb 4-1: USB disconnect, device number 17 [ 247.339386][ T8739] gretap0: left promiscuous mode [ 247.458194][ T5920] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.619455][ T5920] usb 3-1: config 0 has no interfaces? [ 247.623656][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 247.623670][ T30] audit: type=1400 audit(1762712132.976:596): avc: denied { write } for pid=8763 comm="syz.1.814" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 247.626844][ T5920] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 247.638053][ T30] audit: type=1400 audit(1762712132.986:597): avc: denied { open } for pid=8763 comm="syz.1.814" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 247.665350][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.703347][ T8766] random: crng reseeded on system resumption [ 247.768499][ T5920] usb 3-1: Product: syz [ 247.787769][ T5920] usb 3-1: Manufacturer: syz [ 247.810327][ T5920] usb 3-1: SerialNumber: syz [ 247.835224][ T30] audit: type=1400 audit(1762712133.146:598): avc: denied { relabelfrom } for pid=8763 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.884791][ T30] audit: type=1400 audit(1762712133.146:599): avc: denied { relabelto } for pid=8763 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.886438][ T5920] usb 3-1: config 0 descriptor?? [ 248.048091][ T5820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 248.073467][ T8784] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 248.297799][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 248.305003][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.315702][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 248.343588][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.362010][ T5820] usb 2-1: config 0 descriptor?? [ 248.434903][ T5820] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 248.863687][ T5887] usb 3-1: USB disconnect, device number 18 [ 249.141146][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.168221][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.208595][ T5820] gspca_vc032x: reg_r err -71 [ 249.224637][ T5820] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 249.250159][ T5820] usb 2-1: USB disconnect, device number 23 [ 249.528859][ T8803] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.558066][ T8803] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 253.442608][ T8845] netlink: 'syz.1.832': attribute type 32 has an invalid length. [ 253.464343][ T8845] netlink: 88 bytes leftover after parsing attributes in process `syz.1.832'. [ 253.482764][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 253.835482][ T8847] bridge3: entered promiscuous mode [ 254.218118][ T5820] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 254.537930][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 254.693727][ T5820] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 254.762152][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.783360][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.893861][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50761, setting to 1024 [ 254.999312][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 255.014695][ T5820] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.024289][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.042043][ T5820] usb 4-1: config 0 descriptor?? [ 255.059936][ T8854] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.280345][ T5820] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.418340][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.425482][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.524140][ T30] audit: type=1400 audit(1762712140.855:600): avc: denied { ioctl } for pid=8870 comm="syz.4.842" path="socket:[18287]" dev="sockfs" ino=18287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.608180][ T5820] usb 4-1: USB disconnect, device number 18 [ 255.621072][ T30] audit: type=1400 audit(1762712140.865:601): avc: denied { mount } for pid=8870 comm="syz.4.842" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 255.688042][ T30] audit: type=1400 audit(1762712140.875:602): avc: denied { search } for pid=8870 comm="syz.4.842" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 255.732062][ T8880] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 255.882583][ T8886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 256.531820][ T30] audit: type=1326 audit(1762712141.885:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 256.674849][ T30] audit: type=1326 audit(1762712141.915:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 256.841459][ T30] audit: type=1326 audit(1762712141.915:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 256.865444][ T30] audit: type=1326 audit(1762712141.915:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95f618f2cb code=0x7ffc0000 [ 257.164028][ T30] audit: type=1326 audit(1762712141.915:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 257.408399][ T30] audit: type=1326 audit(1762712141.915:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 257.505845][ T30] audit: type=1326 audit(1762712141.915:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 259.903317][ T8937] binder: 8934:8937 ioctl c0306201 2000000003c0 returned -14 [ 259.919235][ T8933] Bluetooth: hci0: unsupported parameter 6399 [ 259.925336][ T8933] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 260.151875][ T8946] binder: 8944:8946 ioctl 4018620d 0 returned -22 [ 260.664382][ T8951] netlink: 'syz.0.865': attribute type 32 has an invalid length. [ 260.673705][ T8951] netlink: 88 bytes leftover after parsing attributes in process `syz.0.865'. [ 260.803011][ T8958] netlink: 'syz.0.869': attribute type 2 has an invalid length. [ 262.309204][ T8974] xt_l2tp: unknown flags: 17 [ 262.742375][ T8978] binder: 8977:8978 ioctl 4018620d 0 returned -22 [ 262.905085][ T8983] bond1: (slave tunl0): Device is not bonding slave [ 262.930294][ T8983] bond1: option active_slave: invalid value (tunl0) [ 262.950248][ T8983] bond1 (unregistering): Released all slaves [ 263.086618][ T8990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.878'. [ 263.378833][ T8936] Set syz1 is full, maxelem 65536 reached [ 263.390932][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 264.112251][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 264.601320][ T9008] svc: failed to register nfsdv3 RPC service (errno 111). [ 264.632783][ T9026] netlink: 'syz.2.889': attribute type 32 has an invalid length. [ 264.641986][ T9026] netlink: 88 bytes leftover after parsing attributes in process `syz.2.889'. [ 264.698768][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 264.698786][ T30] audit: type=1400 audit(1762712150.038:630): avc: denied { connect } for pid=9022 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.698916][ T9008] svc: failed to register nfsaclv3 RPC service (errno 111). [ 264.830956][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.850949][ T9035] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 264.869556][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 265.168698][ T5920] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 265.184320][ T9042] svc: failed to register nfsdv3 RPC service (errno 111). [ 265.204094][ T9042] svc: failed to register nfsaclv3 RPC service (errno 111). [ 265.339427][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.354181][ T5920] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.365698][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.381356][ T5920] usb 3-1: config 0 descriptor?? [ 265.408730][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 265.740958][ T5920] pwc: recv_control_msg error -71 req 02 val 2b00 [ 266.271767][ T66] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.290270][ T5920] pwc: recv_control_msg error -71 req 02 val 2700 [ 266.292382][ T66] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.306529][ T5920] pwc: recv_control_msg error -71 req 02 val 2c00 [ 266.310746][ T66] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.322498][ T66] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.332763][ T5920] pwc: recv_control_msg error -71 req 04 val 1000 [ 266.341419][ T5920] pwc: recv_control_msg error -71 req 04 val 1300 [ 266.350299][ T5920] pwc: recv_control_msg error -71 req 04 val 1400 [ 266.357545][ T5920] pwc: recv_control_msg error -71 req 02 val 2000 [ 266.365031][ T5920] pwc: recv_control_msg error -71 req 02 val 2100 [ 266.372731][ T30] audit: type=1400 audit(1762712151.728:631): avc: denied { listen } for pid=9054 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 266.398949][ T5920] pwc: recv_control_msg error -71 req 04 val 1500 [ 266.406168][ T5920] pwc: recv_control_msg error -71 req 02 val 2500 [ 266.413286][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 266.466592][ T9072] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 266.495730][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 266.505053][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 266.509536][ T9072] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 266.513003][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 266.545318][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 266.555912][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 266.572980][ T5920] pwc: Registered as video103. [ 266.598587][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 266.671239][ T9077] binder: 9076:9077 ioctl c0306201 2000000003c0 returned -14 [ 266.709646][ T5920] usb 3-1: USB disconnect, device number 19 [ 266.746002][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 266.817760][ T5820] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 266.968529][ T9088] xt_connbytes: Forcing CT accounting to be enabled [ 266.977708][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 266.989786][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.007387][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.027900][ T5820] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 267.052661][ T5820] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.071308][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.090736][ T5820] usb 4-1: Product: ࠉⱆ͑쉴⏜⤱霙ᙥ꩕ᨶ뿘蝪拔牰奁泜ᮀ宰譐㺠ॐ幂颸뢿푈ﴯ섺彵鯧䚻얠玚ﭿ皣눇撳喥ꬴ썻롩䚖酺℮氰水䧛㕚䖬纅ᚘ䐾 뉍帴䠐隻隦뫭嘲토큛靥㽢쭶聸쨣쾻㭧꣍훨겧啝ﹽ [ 267.141281][ T5820] usb 4-1: Manufacturer: 벦ﺪϋ녀爚竲攖率Ṏ㴫ᨖ곺ᰃᬅ☫얧䞺ꠊ뜳ष䪪ᭅ飍纉鋃펖㲤赥⭆块䟒벨抅섔缦崒溹䙖刚㮕㨬≥ [ 267.157823][ T5820] usb 4-1: SerialNumber: syz [ 267.198490][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 267.361036][ T9093] netlink: 'syz.1.907': attribute type 23 has an invalid length. [ 267.370901][ T5920] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 267.386591][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.419559][ T5920] usb 3-1: config 0 descriptor?? [ 267.538912][ T9100] netlink: 'syz.4.911': attribute type 32 has an invalid length. [ 267.546882][ T9100] netlink: 88 bytes leftover after parsing attributes in process `syz.4.911'. [ 267.575521][ T9074] binder: Unknown parameter 'obj_type' [ 267.576923][ T30] audit: type=1400 audit(1762712152.928:632): avc: denied { mounton } for pid=9073 comm="syz.3.902" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.611785][ T5820] usb 4-1: 0:2 : does not exist [ 267.646696][ T5820] usb 4-1: USB disconnect, device number 19 [ 267.820403][ T9021] udevd[9021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.880189][ T5920] hackrf 3-1:0.0: Board ID: 00 [ 267.885065][ T5920] hackrf 3-1:0.0: Firmware version: [ 267.893726][ T5920] hackrf 3-1:0.0: Registered as swradio24 [ 267.899569][ T5920] videodev: could not get a free minor [ 267.908040][ T5920] hackrf 3-1:0.0: Failed to register as video device (-23) [ 268.314194][ T5920] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 268.369874][ T5920] usb 3-1: USB disconnect, device number 20 [ 268.506680][ T9110] svc: failed to register nfsdv3 RPC service (errno 111). [ 268.578639][ T9110] svc: failed to register nfsaclv3 RPC service (errno 111). [ 269.380218][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'. [ 269.687541][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 269.702827][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.710430][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.932475][ T30] audit: type=1400 audit(1762712155.288:633): avc: denied { shutdown } for pid=9143 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.803328][ T9137] dummy0: entered promiscuous mode [ 270.826596][ T9137] macvtap1: entered promiscuous mode [ 270.948147][ T9137] macvtap1: entered allmulticast mode [ 270.980869][ T9155] 9pnet_fd: Insufficient options for proto=fd [ 270.992370][ T9137] dummy0: entered allmulticast mode [ 271.009802][ T9156] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 271.043882][ T9156] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 271.499974][ T9173] netlink: 'syz.2.932': attribute type 23 has an invalid length. [ 271.629206][ T9177] fuse: Bad value for 'fd' [ 272.437711][ T5820] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 272.456580][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 272.575494][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'. [ 272.579365][ T9187] xt_NFQUEUE: number of total queues is 0 [ 272.647734][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 272.654296][ T5820] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 272.663169][ T5820] usb 2-1: config 179 has no interface number 0 [ 272.714153][ T5820] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 272.737109][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 272.757435][ T5820] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 272.783494][ T5820] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.837763][ T5820] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 272.855719][ T5820] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 272.873450][ T5820] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 272.882836][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.120273][ T9197] xt_l2tp: unknown flags: 17 [ 273.537313][ T9171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.800613][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 273.891259][ T5820] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18 [ 273.927752][ T5812] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 274.098016][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 274.109375][ T5812] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.119738][ T5812] usb 4-1: config 0 has no interface number 0 [ 274.138011][ T5812] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.223418][ T5812] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.277803][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 274.311750][ T5812] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 274.317243][ T9210] wg1 speed is unknown, defaulting to 1000 [ 274.328934][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.369827][ T5812] usb 4-1: config 0 descriptor?? [ 274.498394][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 274.679156][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 274.703257][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.752068][ T9] usb 3-1: Product: syz [ 274.754104][ T5820] usb 2-1: USB disconnect, device number 24 [ 274.756294][ T9] usb 3-1: Manufacturer: syz [ 274.756297][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 274.756313][ T9] usb 3-1: SerialNumber: syz [ 274.756341][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 274.759815][ T9] usb 3-1: config 0 descriptor?? [ 275.047769][ T5920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 275.797744][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 275.807283][ T5920] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 275.816627][ T5920] usb 5-1: config 0 has no interface number 0 [ 275.841679][ T5920] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 275.870001][ T5920] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 275.879988][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.893510][ T5920] usb 5-1: Product: syz [ 275.900280][ T5920] usb 5-1: Manufacturer: syz [ 275.904895][ T5920] usb 5-1: SerialNumber: syz [ 275.925355][ T5920] usb 5-1: config 0 descriptor?? [ 275.996207][ T9224] netlink: 'syz.1.949': attribute type 32 has an invalid length. [ 276.006315][ T9224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.949'. [ 276.060323][ T9227] wg1 speed is unknown, defaulting to 1000 [ 276.157443][ T5920] usbtouchscreen 5-1:0.214: Failed to read FW rev: 15 [ 276.168745][ T5920] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 276.418848][ T5920] usb 5-1: USB disconnect, device number 19 [ 276.477268][ T9243] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 276.561520][ T9243] bond3: entered promiscuous mode [ 276.568727][ T9243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.623551][ T9245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.631694][ T9245] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 276.665943][ T9245] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 276.703290][ T9245] bond3: (slave vcan0): making interface the new active one [ 276.712997][ T9245] vcan0: entered promiscuous mode [ 276.726429][ T9245] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 276.821013][ T9243] overlayfs: failed to clone upperpath [ 276.826991][ T5820] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 276.977880][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 276.986057][ T5820] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 277.070504][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.113162][ T9] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 277.113865][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50761, setting to 1024 [ 277.306351][ T9] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 277.331544][ T5812] usbhid 4-1:0.1: can't add hid device: -71 [ 277.338707][ T5812] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 277.392375][ T5812] usb 4-1: USB disconnect, device number 20 [ 277.464001][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 277.558406][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 277.599659][ T9] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 277.636031][ T9] usb 3-1: USB disconnect, device number 21 [ 277.913334][ T5820] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 277.971849][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.042370][ T5820] usb 2-1: config 0 descriptor?? [ 278.062881][ T9242] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 278.304698][ T9263] syzkaller0: entered promiscuous mode [ 278.310554][ T9263] syzkaller0: entered allmulticast mode [ 278.611883][ T5820] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.682110][ T5820] usb 2-1: USB disconnect, device number 25 [ 281.673218][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 281.814577][ T9298] netlink: 'syz.0.967': attribute type 32 has an invalid length. [ 281.823212][ T9298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.967'. [ 282.114634][ T9313] syzkaller0: entered promiscuous mode [ 282.120501][ T9313] syzkaller0: entered allmulticast mode [ 282.203120][ T9310] binder: 9309:9310 ioctl c0306201 2000000003c0 returned -14 [ 283.690603][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 283.721784][ T30] audit: type=1400 audit(1762712169.078:634): avc: denied { getopt } for pid=9335 comm="syz.4.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.906470][ T30] audit: type=1400 audit(1762712169.258:635): avc: denied { bind } for pid=9343 comm="syz.3.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 283.947836][ T30] audit: type=1400 audit(1762712169.298:636): avc: denied { ioctl } for pid=9343 comm="syz.3.981" path="socket:[20412]" dev="sockfs" ino=20412 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 285.961045][ T9358] ALSA: mixer_oss: invalid OSS volume '' [ 286.157658][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 286.170280][ T9390] overlayfs: missing 'lowerdir' [ 286.188326][ T9385] wg1 speed is unknown, defaulting to 1000 [ 286.208881][ T9390] overlayfs: failed to resolve './file1': -2 [ 286.389527][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'. [ 286.422553][ T9400] binder: BINDER_SET_CONTEXT_MGR already set [ 286.429447][ T9400] binder: 9397:9400 ioctl 4018620d 2000000002c0 returned -16 [ 286.430745][ T5820] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 286.438089][ T9400] binder: 9397:9400 ioctl c0306201 2000000003c0 returned -14 [ 286.640514][ T5820] usb 5-1: config 0 has no interfaces? [ 286.648439][ T5820] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 286.658444][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.666615][ T5820] usb 5-1: Product: syz [ 286.683009][ T5820] usb 5-1: Manufacturer: syz [ 286.687900][ T5820] usb 5-1: SerialNumber: syz [ 286.865055][ T5820] usb 5-1: config 0 descriptor?? [ 287.271624][ T9393] fuse: Bad value for 'fd' [ 287.386949][ T5812] usb 5-1: USB disconnect, device number 20 [ 288.169361][ T9423] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 288.389140][ T30] audit: type=1400 audit(1762712173.733:637): avc: denied { ioctl } for pid=9418 comm="syz.3.1001" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 289.706426][ T9447] program syz.2.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.677791][ T5820] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 291.028196][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.214498][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.373051][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.402950][ T5820] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.414673][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.426846][ T5820] usb 2-1: config 0 descriptor?? [ 291.586842][ T9467] netlink: 'syz.2.1013': attribute type 23 has an invalid length. [ 291.681788][ T9470] syz.0.1014 (9470) used greatest stack depth: 17928 bytes left [ 291.895712][ T5820] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.931628][ T9494] ip6t_REJECT: ECHOREPLY is not supported [ 293.287207][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 294.007744][ T30] audit: type=1400 audit(1762712179.289:638): avc: denied { listen } for pid=9500 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.056174][ T9508] wireguard0: entered promiscuous mode [ 294.061719][ T9508] wireguard0: entered allmulticast mode [ 294.096679][ T9505] wg1 speed is unknown, defaulting to 1000 [ 294.170830][ T5882] usb 2-1: USB disconnect, device number 26 [ 294.247724][ T5812] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 294.294062][ T9517] x_tables: ip_tables: osf match: only valid for protocol 6 [ 294.479348][ T5812] usb 3-1: config 0 has no interfaces? [ 294.497769][ T5812] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.518077][ T9523] bond1: (slave tunl0): Device is not bonding slave [ 294.525362][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.533522][ T9523] bond1: option active_slave: invalid value (tunl0) [ 294.964779][ T5812] usb 3-1: Product: syz [ 294.967095][ T9523] bond1 (unregistering): Released all slaves [ 294.969079][ T5812] usb 3-1: Manufacturer: syz [ 294.979700][ T5812] usb 3-1: SerialNumber: syz [ 294.987250][ T5812] usb 3-1: config 0 descriptor?? [ 295.329192][ T9532] loop3: detected capacity change from 0 to 7 [ 295.349524][ T9411] Dev loop3: unable to read RDB block 7 [ 295.360313][ T9411] loop3: AHDI p1 [ 295.364115][ T9411] loop3: partition table partially beyond EOD, truncated [ 295.381839][ T9532] Dev loop3: unable to read RDB block 7 [ 295.396591][ T5812] usb 3-1: USB disconnect, device number 22 [ 295.409051][ T9532] loop3: AHDI p1 [ 295.412707][ T9532] loop3: partition table partially beyond EOD, truncated [ 295.447271][ T9536] netlink: 'syz.1.1028': attribute type 23 has an invalid length. [ 295.534812][ T30] audit: type=1400 audit(1762712180.889:639): avc: denied { setopt } for pid=9542 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 295.561453][ T5134] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 295.877761][ T5812] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 296.030358][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.047093][ T5812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.322139][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.347770][ T5812] usb 4-1: SerialNumber: syz [ 298.194770][ T30] audit: type=1400 audit(1762712182.149:640): avc: denied { bind } for pid=9546 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 298.600561][ T979] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.758505][ T979] usb 5-1: device descriptor read/64, error -71 [ 299.007880][ T979] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 299.144489][ T5812] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 299.218007][ T979] usb 5-1: device descriptor read/64, error -71 [ 299.348732][ T979] usb usb5-port1: attempt power cycle [ 299.364359][ T5812] usb 4-1: USB disconnect, device number 21 [ 299.394402][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 299.468093][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1047'. [ 299.857717][ T979] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 300.333277][ T979] usb 5-1: device descriptor read/8, error -71 [ 300.339966][ T9586] geneve3: entered promiscuous mode [ 300.371444][ T9586] geneve3: entered allmulticast mode [ 301.266829][ T9608] syzkaller0: entered promiscuous mode [ 301.272531][ T9608] syzkaller0: entered allmulticast mode [ 302.780010][ T30] audit: type=1400 audit(1762712188.139:641): avc: denied { create } for pid=9616 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.825873][ T9637] netlink: 'syz.2.1059': attribute type 23 has an invalid length. [ 303.834349][ T30] audit: type=1400 audit(1762712189.179:642): avc: denied { create } for pid=9627 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.904418][ T30] audit: type=1400 audit(1762712189.179:643): avc: denied { write } for pid=9627 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.927384][ T30] audit: type=1400 audit(1762712189.239:644): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.952234][ T30] audit: type=1400 audit(1762712189.239:645): avc: denied { open } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.965892][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'. [ 304.007757][ T30] audit: type=1400 audit(1762712189.239:646): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.145674][ T30] audit: type=1400 audit(1762712189.319:647): avc: denied { read append } for pid=9638 comm="syz.1.1062" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 304.178219][ T30] audit: type=1400 audit(1762712189.319:648): avc: denied { open } for pid=9638 comm="syz.1.1062" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 304.468544][ T30] audit: type=1400 audit(1762712189.319:649): avc: denied { name_bind } for pid=9638 comm="syz.1.1062" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 304.517855][ T5820] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 304.531697][ T30] audit: type=1400 audit(1762712189.319:650): avc: denied { node_bind } for pid=9638 comm="syz.1.1062" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 304.576014][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 305.185278][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 305.220830][ T5820] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 305.276315][ T5820] usb 2-1: config 0 has no interface number 0 [ 305.362336][ T5820] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 305.688380][ T5820] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 305.700238][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.987776][ T5820] usb 2-1: Product: syz [ 305.997952][ T5820] usb 2-1: Manufacturer: syz [ 306.007713][ T5820] usb 2-1: SerialNumber: syz [ 306.030167][ T5820] usb 2-1: config 0 descriptor?? [ 306.116673][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1074'. [ 306.558737][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.566205][ T9684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.574740][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.581896][ T9684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.589813][ T9684] bridge0: left promiscuous mode [ 306.594779][ T9684] bridge0: left allmulticast mode [ 307.074603][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 307.092267][ T9684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.451884][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.472004][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.565574][ T5820] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 307.617314][ T5820] usb 2-1: USB disconnect, device number 27 [ 307.771461][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1083'. [ 307.780829][ T9704] netlink: 'syz.3.1083': attribute type 7 has an invalid length. [ 308.729849][ T9704] netlink: 'syz.3.1083': attribute type 8 has an invalid length. [ 309.160238][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 309.160253][ T30] audit: type=1400 audit(1762712194.519:703): avc: denied { ioctl } for pid=9696 comm="syz.4.1082" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.242231][ T9691] svc: failed to register nfsdv3 RPC service (errno 111). [ 309.250633][ T9691] svc: failed to register nfsaclv3 RPC service (errno 111). [ 309.275465][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 309.337233][ T30] audit: type=1400 audit(1762712194.519:704): avc: denied { map } for pid=9696 comm="syz.4.1082" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.372223][ T9704] erspan0: entered promiscuous mode [ 309.391808][ T9704] gretap0: entered promiscuous mode [ 309.407928][ T9711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.422234][ T9711] xt_HMARK: spi-set and port-set can't be combined [ 309.439144][ T9704] erspan0: left promiscuous mode [ 309.450551][ T30] audit: type=1400 audit(1762712194.799:705): avc: denied { create } for pid=9712 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.473087][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 309.492955][ T9704] gretap0: left promiscuous mode [ 309.508399][ T30] audit: type=1400 audit(1762712194.829:706): avc: denied { write } for pid=9712 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.529217][ T30] audit: type=1400 audit(1762712194.829:707): avc: denied { nlmsg_write } for pid=9712 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.630243][ T9718] binder: 9717:9718 ioctl c0306201 0 returned -14 [ 309.637076][ T30] audit: type=1400 audit(1762712194.839:708): avc: denied { create } for pid=9710 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 309.657390][ T30] audit: type=1400 audit(1762712194.849:709): avc: denied { setopt } for pid=9710 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.697408][ T9723] netlink: 'syz.0.1090': attribute type 4 has an invalid length. [ 309.704878][ T30] audit: type=1400 audit(1762712194.849:710): avc: denied { read } for pid=9710 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.732882][ T30] audit: type=1400 audit(1762712194.909:711): avc: denied { write } for pid=9710 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.768536][ T30] audit: type=1400 audit(1762712194.979:712): avc: denied { set_context_mgr } for pid=9717 comm="syz.4.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 309.806281][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 309.937945][ T979] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 310.097818][ T979] usb 2-1: device descriptor read/64, error -71 [ 310.269448][ T9733] svc: failed to register nfsdv3 RPC service (errno 111). [ 310.297377][ T9733] svc: failed to register nfsaclv3 RPC service (errno 111). [ 310.610054][ T979] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 310.927731][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 310.996957][ T9756] vlan3: entered allmulticast mode [ 311.118140][ T979] usb 2-1: device descriptor read/64, error -71 [ 311.233888][ T979] usb usb2-port1: attempt power cycle [ 311.577793][ T979] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 312.028221][ T979] usb 2-1: device descriptor read/8, error -71 [ 312.294257][ T979] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 312.346756][ T979] usb 2-1: device descriptor read/8, error -71 [ 312.716045][ T979] usb usb2-port1: unable to enumerate USB device [ 312.886760][ T9788] bond2: (slave tunl0): Device is not bonding slave [ 312.912513][ T9788] bond2: option active_slave: invalid value (tunl0) [ 313.025659][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1109'. [ 313.061697][ T9788] bond2 (unregistering): Released all slaves [ 313.079784][ T9798] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1112'. [ 313.138137][ T9783] vlan0: entered allmulticast mode [ 313.143610][ T9783] macvtap0: entered allmulticast mode [ 313.153753][ T9783] veth0_macvtap: entered allmulticast mode [ 313.261117][ T9803] netlink: 'syz.0.1113': attribute type 4 has an invalid length. [ 313.632516][ T9814] x_tables: ip_tables: osf match: only valid for protocol 6 [ 313.672240][ T9816] netlink: 'syz.0.1117': attribute type 3 has an invalid length. [ 313.697691][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 313.949776][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 313.972644][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 31) [ 313.987936][ T9] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 313.992353][ T9822] overlayfs: missing 'lowerdir' [ 314.018685][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.052032][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 314.077858][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.096928][ T9827] overlayfs: failed to resolve './file1': -2 [ 314.098920][ T9] usb 5-1: config 0 descriptor?? [ 314.129910][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 314.222317][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 314.222332][ T30] audit: type=1400 audit(1762712199.579:730): avc: denied { setopt } for pid=9832 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.280094][ T30] audit: type=1400 audit(1762712199.619:731): avc: denied { ioctl } for pid=9832 comm="syz.2.1124" path="socket:[23389]" dev="sockfs" ino=23389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.330297][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 314.344307][ T30] audit: type=1400 audit(1762712199.679:732): avc: denied { create } for pid=9836 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.366183][ T9837] dummy0: entered promiscuous mode [ 314.374119][ T9837] macvtap1: entered promiscuous mode [ 314.386146][ T9837] macvtap1: entered allmulticast mode [ 314.391992][ T30] audit: type=1400 audit(1762712199.679:733): avc: denied { create } for pid=9836 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 314.407709][ T9842] netlink: 'syz.1.1128': attribute type 32 has an invalid length. [ 314.420525][ T9842] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1128'. [ 314.428468][ T9837] dummy0: entered allmulticast mode [ 314.461039][ T30] audit: type=1400 audit(1762712199.689:734): avc: denied { create } for pid=9836 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 314.496714][ T9847] 9pnet_fd: Insufficient options for proto=fd [ 314.565608][ T30] audit: type=1400 audit(1762712199.849:735): avc: denied { append } for pid=9846 comm="syz.1.1130" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.677805][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 314.817752][ T9] usb 4-1: device descriptor read/64, error -71 [ 315.088399][ T9847] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1130'. [ 315.778959][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 315.917766][ T9] usb 4-1: device descriptor read/64, error -71 [ 316.057539][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 316.066687][ T9866] openvswitch: netlink: EtherType 0 is less than min 600 [ 316.085667][ T979] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 316.145631][ T30] audit: type=1400 audit(1762712201.439:736): avc: denied { write } for pid=9861 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 316.301565][ T979] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 316.350635][ T9] usb usb4-port1: attempt power cycle [ 316.356025][ T979] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 316.366100][ T979] usb 2-1: config 0 has no interface number 0 [ 316.375937][ T979] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 316.386410][ T979] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.397384][ T979] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 316.406639][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.423742][ T979] usb 2-1: config 0 descriptor?? [ 316.449059][ T889] usb 5-1: USB disconnect, device number 25 [ 316.460489][ T9869] FAULT_INJECTION: forcing a failure. [ 316.460489][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 316.474052][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.2.1136 Not tainted syzkaller #0 PREEMPT(full) [ 316.474076][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.474085][ T9869] Call Trace: [ 316.474091][ T9869] [ 316.474097][ T9869] dump_stack_lvl+0x16c/0x1f0 [ 316.474129][ T9869] should_fail_ex+0x512/0x640 [ 316.474149][ T9869] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 316.474169][ T9869] should_failslab+0xc2/0x120 [ 316.474188][ T9869] __kvmalloc_node_noprof+0x141/0x9c0 [ 316.474206][ T9869] ? io_alloc_cache_init+0x38/0x170 [ 316.474230][ T9869] ? io_alloc_cache_init+0x38/0x170 [ 316.474245][ T9869] io_alloc_cache_init+0x38/0x170 [ 316.474265][ T9869] io_uring_setup+0x62f/0x2170 [ 316.474293][ T9869] ? __pfx_io_uring_setup+0x10/0x10 [ 316.474315][ T9869] ? avc_has_perm_noaudit+0x117/0x3b0 [ 316.474342][ T9869] ? avc_has_perm_noaudit+0x149/0x3b0 [ 316.474374][ T9869] ? ksys_write+0x1ac/0x250 [ 316.474390][ T9869] ? __pfx_ksys_write+0x10/0x10 [ 316.474409][ T9869] __x64_sys_io_uring_setup+0xc2/0x170 [ 316.474436][ T9869] do_syscall_64+0xcd/0xfa0 [ 316.474452][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.474468][ T9869] RIP: 0033:0x7f380ad8f6c9 [ 316.474482][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.474499][ T9869] RSP: 002b:00007f380bc28038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 316.474516][ T9869] RAX: ffffffffffffffda RBX: 00007f380afe5fa0 RCX: 00007f380ad8f6c9 [ 316.474527][ T9869] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 316.474537][ T9869] RBP: 00007f380bc28090 R08: 0000000000000000 R09: 0000000000000000 [ 316.474570][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.474580][ T9869] R13: 00007f380afe6038 R14: 00007f380afe5fa0 R15: 00007ffd914513f8 [ 316.474602][ T9869] [ 316.747710][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 316.768722][ T9] usb 4-1: device descriptor read/8, error -71 [ 316.793446][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.800156][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.030348][ T9873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 317.201721][ T30] audit: type=1400 audit(1762712202.269:737): avc: denied { create } for pid=9876 comm="syz.2.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 317.225521][ T9873] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 317.234737][ T9873] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 317.243195][ T9873] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 317.251994][ T9873] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 317.260344][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 317.269209][ T9873] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 317.279356][ T9873] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 317.281397][ T30] audit: type=1400 audit(1762712202.279:738): avc: denied { accept } for pid=9876 comm="syz.2.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 317.312042][ T9] usb 4-1: device descriptor read/8, error -71 [ 317.342171][ T9873] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 317.410117][ T9873] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 317.428476][ T9] usb usb4-port1: unable to enumerate USB device [ 317.476632][ T9873] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 317.545199][ T30] audit: type=1400 audit(1762712202.899:739): avc: denied { create } for pid=9886 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 317.675062][ T9891] bond4: (slave tunl0): Device is not bonding slave [ 317.682840][ T9891] bond4: option active_slave: invalid value (tunl0) [ 317.693061][ T9891] bond4 (unregistering): Released all slaves [ 318.009565][ T9898] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.018529][ T9900] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.283964][ T979] usb 2-1: USB disconnect, device number 32 [ 319.036680][ T9922] syzkaller0: entered promiscuous mode [ 319.043845][ T9922] syzkaller0: entered allmulticast mode [ 319.108045][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 319.120600][ T9922] io-wq is not configured for unbound workers [ 319.257954][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 319.273584][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 319.283065][ T9] usb 3-1: config 0 has no interface number 0 [ 319.291748][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 319.311387][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.328475][ T9] usb 3-1: Product: syz [ 319.339767][ T9] usb 3-1: Manufacturer: syz [ 319.348952][ T9] usb 3-1: SerialNumber: syz [ 319.363044][ T9] usb 3-1: config 0 descriptor?? [ 319.377283][ T9] smsc95xx v2.0.0 [ 319.385563][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 319.397556][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 319.940449][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 319.940468][ T30] audit: type=1400 audit(1762712204.985:759): avc: denied { read } for pid=9925 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.085186][ T30] audit: type=1400 audit(1762712205.435:760): avc: denied { read write } for pid=9941 comm="syz.1.1158" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 320.218985][ T30] audit: type=1400 audit(1762712205.435:761): avc: denied { open } for pid=9941 comm="syz.1.1158" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 321.946783][ T9] usb 3-1: USB disconnect, device number 23 [ 322.595026][ T9960] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 322.800986][ T9970] syzkaller0: entered promiscuous mode [ 322.806607][ T9970] syzkaller0: entered allmulticast mode [ 323.028199][ T30] audit: type=1400 audit(1762712208.365:762): avc: denied { block_suspend } for pid=9971 comm="syz.0.1169" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.440318][ T30] audit: type=1400 audit(1762712208.795:763): avc: denied { accept } for pid=9988 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 323.473343][ T30] audit: type=1400 audit(1762712208.815:764): avc: denied { ioctl } for pid=9988 comm="syz.1.1172" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 323.997466][ T30] audit: type=1400 audit(1762712209.345:765): avc: denied { getopt } for pid=10003 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.136006][ T30] audit: type=1400 audit(1762712209.485:766): avc: denied { mounton } for pid=10008 comm="syz.3.1180" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 324.935843][T10018] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 327.168408][ T30] audit: type=1400 audit(1762712212.520:767): avc: denied { sqpoll } for pid=10055 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 327.394005][ T30] audit: type=1400 audit(1762712212.750:768): avc: denied { watch watch_reads } for pid=10063 comm="syz.4.1197" path="/234" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 327.496232][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 328.797069][T10086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1201'. [ 328.893617][ T30] audit: type=1400 audit(1762712214.250:769): avc: denied { bind } for pid=10087 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.537403][T10095] overlayfs: failed to resolve './file0': -2 [ 329.658230][ T30] audit: type=1400 audit(1762712214.990:770): avc: denied { write } for pid=10091 comm="syz.1.1203" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.368087][ T30] audit: type=1400 audit(1762712216.723:771): avc: denied { getopt } for pid=10115 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.421530][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 332.682247][ T30] audit: type=1326 audit(1762712216.763:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.1.1209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facf3b8f6c9 code=0x0 [ 332.754858][ T30] audit: type=1400 audit(1762712218.093:773): avc: denied { getopt } for pid=10115 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.793026][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 332.797585][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 332.810877][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 332.879074][T10129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10129 comm=syz.0.1213 [ 332.918743][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.026010][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 333.036646][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.131015][T10139] xt_NFQUEUE: number of total queues is 0 [ 333.153702][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 333.179559][ T9] usb 3-1: Product: syz [ 333.191387][ T9] usb 3-1: Manufacturer: syz [ 333.203848][ T9] usb 3-1: SerialNumber: syz [ 333.216799][ T9] usb 3-1: config 0 descriptor?? [ 333.225793][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 333.233336][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 333.242424][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 333.253775][ T30] audit: type=1400 audit(1762712218.613:774): avc: denied { read } for pid=5168 comm="acpid" name="mouse1" dev="devtmpfs" ino=3257 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.281896][ T30] audit: type=1400 audit(1762712218.633:775): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3257 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.450097][ T30] audit: type=1400 audit(1762712218.793:776): avc: denied { read } for pid=10107 comm="syz.2.1207" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 334.211822][ T30] audit: type=1400 audit(1762712218.793:777): avc: denied { open } for pid=10107 comm="syz.2.1207" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 334.309167][ T979] usb 3-1: USB disconnect, device number 24 [ 334.689474][T10149] x_tables: ip_tables: osf match: only valid for protocol 6 [ 335.142299][ T30] audit: type=1400 audit(1762712220.483:778): avc: denied { mount } for pid=10146 comm="syz.3.1219" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 335.222371][ T30] audit: type=1400 audit(1762712220.543:779): avc: denied { write } for pid=10146 comm="syz.3.1219" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 335.245998][ T30] audit: type=1400 audit(1762712220.543:780): avc: denied { open } for pid=10146 comm="syz.3.1219" path="/243/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 335.331514][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1221'. [ 335.836786][ T30] audit: type=1400 audit(1762712221.183:781): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 337.827321][T10181] trusted_key: encrypted_key: insufficient parameters specified [ 338.969462][ T30] audit: type=1326 audit(1762712223.503:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.626780][ T30] audit: type=1326 audit(1762712223.503:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.663560][ T30] audit: type=1326 audit(1762712223.513:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.688929][ T30] audit: type=1326 audit(1762712223.513:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.714189][ T30] audit: type=1326 audit(1762712223.513:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.738236][ T30] audit: type=1326 audit(1762712223.523:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.814167][ T30] audit: type=1326 audit(1762712223.523:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.857837][ T30] audit: type=1326 audit(1762712223.523:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.900579][ T30] audit: type=1326 audit(1762712223.533:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 339.953595][T10212] xt_l2tp: unknown flags: 17 [ 340.281652][ T30] audit: type=1326 audit(1762712223.533:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10195 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f618f6c9 code=0x7ffc0000 [ 340.335631][T10213] 9pnet_fd: Insufficient options for proto=fd [ 340.741032][T10220] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1243'. [ 340.751813][T10220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1243'. [ 341.591328][T10229] netlink: 'syz.0.1246': attribute type 23 has an invalid length. [ 341.733038][T10240] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 341.746527][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.007733][ T979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 342.122567][T10246] svc: failed to register nfsdv3 RPC service (errno 111). [ 342.141022][T10246] svc: failed to register nfsaclv3 RPC service (errno 111). [ 342.167668][ T979] usb 3-1: device descriptor read/64, error -71 [ 342.507668][ T979] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 342.584093][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 342.607111][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1253'. [ 342.637103][T10251] geneve4: entered promiscuous mode [ 342.642482][ T979] usb 3-1: device descriptor read/64, error -71 [ 342.653306][T10251] geneve4: entered allmulticast mode [ 342.768974][ T979] usb usb3-port1: attempt power cycle [ 343.117869][ T979] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.357741][ T5866] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 343.659890][ T979] usb 3-1: device descriptor read/8, error -71 [ 343.777680][ T5866] usb 2-1: device descriptor read/64, error -71 [ 343.817963][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.907897][ T979] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 343.934006][ T979] usb 3-1: device descriptor read/8, error -71 [ 344.027679][ T5866] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 344.047964][ T979] usb usb3-port1: unable to enumerate USB device [ 344.082959][T10289] loop3: detected capacity change from 0 to 7 [ 344.094512][ T9411] Dev loop3: unable to read RDB block 7 [ 344.095192][T10290] evm: overlay not supported [ 344.101090][ T9411] loop3: AHDI p1 [ 344.107737][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 344.107748][ T30] audit: type=1400 audit(1762712229.438:809): avc: denied { unlink } for pid=10287 comm="syz.4.1270" name="#9" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.108759][ T9411] loop3: partition table partially beyond EOD, [ 344.115779][ T30] audit: type=1400 audit(1762712229.448:810): avc: denied { mount } for pid=10287 comm="syz.4.1270" name="/" dev="overlay" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 344.144398][ T9411] truncated [ 344.172344][ T5866] usb 2-1: device descriptor read/64, error -71 [ 344.189209][T10289] Dev loop3: unable to read RDB block 7 [ 344.194913][T10289] loop3: AHDI p1 [ 344.200032][T10289] loop3: partition table partially beyond EOD, truncated [ 344.288426][ T5866] usb usb2-port1: attempt power cycle [ 344.322203][T10296] fuse: Unknown parameter 'grou00000000000000000000' [ 344.401669][ T30] audit: type=1400 audit(1762712229.758:811): avc: denied { write } for pid=10297 comm="syz.3.1275" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.424546][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.427738][ T979] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.467372][ T30] audit: type=1400 audit(1762712229.818:812): avc: denied { read } for pid=10300 comm="syz.3.1276" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.490364][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.496914][ T30] audit: type=1400 audit(1762712229.818:813): avc: denied { open } for pid=10300 comm="syz.3.1276" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.521187][ T30] audit: type=1400 audit(1762712229.818:814): avc: denied { ioctl } for pid=10300 comm="syz.3.1276" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.546039][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.597833][T10304] x_tables: ip_tables: osf match: only valid for protocol 6 [ 344.607668][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 344.614514][ T979] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 344.627707][ T5866] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 344.627737][ T979] usb 5-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 344.648219][ T5866] usb 2-1: device descriptor read/8, error -71 [ 344.685198][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.828528][ T30] audit: type=1400 audit(1762712230.178:815): avc: denied { read write } for pid=10307 comm="syz.2.1278" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 344.867478][T10308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 344.874232][T10308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 344.885135][ T30] audit: type=1400 audit(1762712230.178:816): avc: denied { open } for pid=10307 comm="syz.2.1278" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 344.909364][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.921265][ T5866] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 344.933846][T10308] vhci_hcd vhci_hcd.0: Device attached [ 344.959933][ T5866] usb 2-1: device descriptor read/8, error -71 [ 344.991161][T10309] vhci_hcd: connection closed [ 344.994526][ T37] vhci_hcd: stop threads [ 345.004872][ T37] vhci_hcd: release socket [ 345.013296][ T30] audit: type=1400 audit(1762712230.178:817): avc: denied { ioctl } for pid=10307 comm="syz.2.1278" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 345.049980][ T37] vhci_hcd: disconnect device [ 345.078040][ T5866] usb usb2-port1: unable to enumerate USB device [ 345.105984][ T30] audit: type=1400 audit(1762712230.218:818): avc: denied { setattr } for pid=10307 comm="syz.2.1278" name="controlC0" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 345.123063][ T979] usb 5-1: string descriptor 0 read error: -71 [ 345.130163][ T9] vhci_hcd: vhci_device speed not set [ 345.145781][ T979] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 345.159424][ T979] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 345.286494][ T979] usb 5-1: USB disconnect, device number 26 [ 345.963287][T10332] fuse: Unknown parameter 'grou00000000000000000000' [ 346.266753][T10333] wg1 speed is unknown, defaulting to 1000 [ 346.977758][ T889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 347.150106][ T889] usb 4-1: Using ep0 maxpacket: 16 [ 347.150273][T10359] FAULT_INJECTION: forcing a failure. [ 347.150273][T10359] name failslab, interval 1, probability 0, space 0, times 0 [ 347.156804][ T889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.168201][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 347.202921][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.4.1293 Not tainted syzkaller #0 PREEMPT(full) [ 347.202948][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.202958][T10359] Call Trace: [ 347.202964][T10359] [ 347.202972][T10359] dump_stack_lvl+0x16c/0x1f0 [ 347.203013][T10359] should_fail_ex+0x512/0x640 [ 347.203037][T10359] ? fs_reclaim_acquire+0xae/0x150 [ 347.203060][T10359] should_failslab+0xc2/0x120 [ 347.203080][T10359] __kmalloc_noprof+0xdd/0x880 [ 347.203104][T10359] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.203130][T10359] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.203149][T10359] tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.203171][T10359] ? tomoyo_profile+0x47/0x60 [ 347.203196][T10359] tomoyo_path_number_perm+0x245/0x580 [ 347.203221][T10359] ? tomoyo_path_number_perm+0x237/0x580 [ 347.203250][T10359] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.203278][T10359] ? find_held_lock+0x2b/0x80 [ 347.203323][T10359] ? find_held_lock+0x2b/0x80 [ 347.203343][T10359] ? hook_file_ioctl_common+0x145/0x410 [ 347.203372][T10359] ? __fget_files+0x20e/0x3c0 [ 347.203394][T10359] security_file_ioctl+0x9b/0x240 [ 347.203415][T10359] __x64_sys_ioctl+0xb7/0x210 [ 347.203439][T10359] do_syscall_64+0xcd/0xfa0 [ 347.203457][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.203475][T10359] RIP: 0033:0x7fcf2d78f6c9 [ 347.203489][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.203505][T10359] RSP: 002b:00007fcf2e60e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.203522][T10359] RAX: ffffffffffffffda RBX: 00007fcf2d9e5fa0 RCX: 00007fcf2d78f6c9 [ 347.203533][T10359] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 347.203544][T10359] RBP: 00007fcf2e60e090 R08: 0000000000000000 R09: 0000000000000000 [ 347.203554][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.203564][T10359] R13: 00007fcf2d9e6038 R14: 00007fcf2d9e5fa0 R15: 00007fffb75bf018 [ 347.203589][T10359] [ 347.203598][T10359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.441555][ T889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.461439][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 347.481336][ T889] usb 4-1: SerialNumber: syz [ 347.574701][T10363] vlan3: entered allmulticast mode [ 347.807234][T10371] fuse: Unknown parameter 'grou00000000000000000000' [ 347.820767][ T889] usb 4-1: USB disconnect, device number 26 [ 349.083134][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1303'. [ 349.557477][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 349.557493][ T30] audit: type=1400 audit(1762712234.908:830): avc: denied { getopt } for pid=10394 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.497766][T10399] svc: failed to register nfsdv3 RPC service (errno 111). [ 350.511577][T10399] svc: failed to register nfsaclv3 RPC service (errno 111). [ 351.110313][T10421] overlayfs: missing 'lowerdir' [ 351.197025][T10425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1317'. [ 351.466825][ T30] audit: type=1400 audit(1762712236.768:831): avc: denied { create } for pid=10419 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.667810][ T30] audit: type=1400 audit(1762712236.798:832): avc: denied { getopt } for pid=10419 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.841456][T10435] netlink: 'syz.1.1319': attribute type 5 has an invalid length. [ 352.060343][ T5866] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 352.079453][ T30] audit: type=1400 audit(1762712237.438:833): avc: denied { setopt } for pid=10436 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.217811][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 352.224822][ T5866] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 352.243193][ T5866] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 352.284311][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 352.299367][ T5866] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 352.308862][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.326934][ T5866] usb 5-1: config 0 descriptor?? [ 352.459503][T10448] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1321'. [ 352.530289][T10450] vlan0: entered allmulticast mode [ 352.605967][T10448] sp0: Synchronizing with TNC [ 352.625597][T10448] sp0: Found TNC [ 354.407576][ C0] hrtimer: interrupt took 13960 ns [ 354.626054][ T5866] usb 5-1: string descriptor 0 read error: -71 [ 354.672509][ T5866] usb 5-1: USB disconnect, device number 27 [ 356.247702][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 356.788055][ T30] audit: type=1400 audit(1762712242.128:834): avc: denied { create } for pid=10487 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.788069][ T9] usb 5-1: device descriptor read/64, error -71 [ 356.852979][T10490] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1335'. [ 356.978175][ T30] audit: type=1400 audit(1762712242.208:835): avc: denied { ioctl } for pid=10487 comm="syz.1.1335" path="socket:[25582]" dev="sockfs" ino=25582 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.003261][ T30] audit: type=1400 audit(1762712242.238:836): avc: denied { write } for pid=10487 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 357.041171][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 357.047662][ T30] audit: type=1400 audit(1762712242.388:837): avc: denied { bind } for pid=10475 comm="syz.0.1332" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.202983][ T30] audit: type=1400 audit(1762712242.388:838): avc: denied { name_bind } for pid=10475 comm="syz.0.1332" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 357.207809][ T9] usb 5-1: device descriptor read/64, error -71 [ 357.324653][ T30] audit: type=1400 audit(1762712242.388:839): avc: denied { node_bind } for pid=10475 comm="syz.0.1332" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 357.382539][ T9] usb usb5-port1: attempt power cycle [ 357.539146][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 357.643062][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 358.069521][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 358.715635][ T9] usb 5-1: device not accepting address 30, error -71 [ 358.880507][T10523] loop3: detected capacity change from 0 to 7 [ 359.019644][T10523] Dev loop3: unable to read RDB block 7 [ 359.034075][T10523] loop3: AHDI p1 [ 359.052659][T10523] loop3: partition table partially beyond EOD, truncated [ 359.056694][T10527] fuse: Unknown parameter 'group_id00000000000000000000' [ 359.183987][T10533] xt_l2tp: unknown flags: 17 [ 359.666912][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1348'. [ 359.999510][T10542] xt_NFQUEUE: number of total queues is 0 [ 360.038812][ T30] audit: type=1400 audit(1762712245.388:840): avc: denied { ioctl } for pid=10546 comm="syz.4.1353" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 360.185507][T10550] siw: device registration error -23 [ 360.847742][ T5882] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 361.028030][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 361.206270][ T5882] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.218995][ T5882] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.230477][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.263342][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 361.273679][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.286459][ T5882] usb 3-1: config 0 descriptor?? [ 361.583294][T10588] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1367'. [ 361.597893][T10588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1367'. [ 361.841949][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 364.182268][T10610] 9pnet: Unknown protocol version 9p20\++} [ 364.183554][T10607] bond1: (slave tunl0): Device is not bonding slave [ 364.239575][T10607] bond1: option active_slave: invalid value (tunl0) [ 364.249395][T10607] bond1 (unregistering): Released all slaves [ 364.466710][T10612] ipt_ECN: cannot use operation on non-tcp rule [ 364.953961][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'. [ 364.963940][T10617] netlink: 'syz.0.1375': attribute type 7 has an invalid length. [ 364.971906][T10617] netlink: 'syz.0.1375': attribute type 8 has an invalid length. [ 364.980224][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 365.004917][T10617] erspan0: entered promiscuous mode [ 365.013732][T10617] gretap0: entered promiscuous mode [ 365.055253][T10617] erspan0: left promiscuous mode [ 365.066191][T10617] gretap0: left promiscuous mode [ 365.228173][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.254326][T10627] netlink: 'syz.4.1378': attribute type 32 has an invalid length. [ 365.262645][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1378'. [ 365.356182][T10629] xt_l2tp: unknown flags: 17 [ 366.257706][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 366.267541][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.277845][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 366.290225][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 366.303980][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 366.628502][ T5882] usbhid 3-1:0.0: can't add hid device: -32 [ 366.634720][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 366.661036][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.812806][ T9] usb 4-1: config 0 descriptor?? [ 366.896955][ T9] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 367.229081][ T30] audit: type=1400 audit(1762712252.501:841): avc: denied { ioctl } for pid=10641 comm="syz.1.1382" path="socket:[26158]" dev="sockfs" ino=26158 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.259976][ T9] usb 4-1: USB disconnect, device number 27 [ 367.763668][ T30] audit: type=1400 audit(1762712253.088:842): avc: denied { bind } for pid=10655 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.848792][ T30] audit: type=1400 audit(1762712253.088:843): avc: denied { name_bind } for pid=10655 comm="syz.0.1387" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 367.876195][ T30] audit: type=1400 audit(1762712253.088:844): avc: denied { node_bind } for pid=10655 comm="syz.0.1387" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 368.046369][T10665] tipc: Enabled bearer , priority 0 [ 368.074253][T10664] syzkaller0: entered promiscuous mode [ 368.080383][T10664] syzkaller0: entered allmulticast mode [ 368.088055][ T30] audit: type=1400 audit(1762712253.188:845): avc: denied { connect } for pid=10658 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 368.296404][T10658] tipc: Resetting bearer [ 368.449644][ T30] audit: type=1400 audit(1762712253.658:846): avc: denied { write } for pid=10666 comm="syz.3.1389" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 368.614511][ T30] audit: type=1400 audit(1762712253.668:847): avc: denied { ioctl } for pid=10666 comm="syz.3.1389" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 368.693756][ T30] audit: type=1400 audit(1762712253.738:848): avc: denied { connect } for pid=10666 comm="syz.3.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.717703][ T30] audit: type=1400 audit(1762712253.738:849): avc: denied { ioctl } for pid=10666 comm="syz.3.1389" path="socket:[26821]" dev="sockfs" ino=26821 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 368.785761][T10658] tipc: Disabling bearer [ 368.817833][ T30] audit: type=1400 audit(1762712254.168:850): avc: denied { accept } for pid=10675 comm="syz.0.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.103932][T10683] svc: failed to register nfsdv3 RPC service (errno 111). [ 369.756466][T10683] svc: failed to register nfsaclv3 RPC service (errno 111). [ 369.798310][ T889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 369.997682][ T889] usb 4-1: Using ep0 maxpacket: 32 [ 370.017145][ T889] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.265345][ T889] usb 4-1: config 0 has no interface number 0 [ 370.298713][ T889] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.308443][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.324797][ T889] usb 4-1: Product: syz [ 370.370642][ T889] usb 4-1: Manufacturer: syz [ 370.439028][ T889] usb 4-1: SerialNumber: syz [ 370.492262][ T889] usb 4-1: config 0 descriptor?? [ 370.515954][ T889] smsc95xx v2.0.0 [ 370.527925][ T889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 370.559894][ T889] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 370.593845][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.604914][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.350116][T10717] tipc: Enabled bearer , priority 0 [ 371.363997][T10717] syzkaller0: entered promiscuous mode [ 371.369653][T10717] syzkaller0: entered allmulticast mode [ 371.587104][T10715] tipc: Resetting bearer [ 371.623914][T10715] tipc: Disabling bearer [ 371.857980][T10728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 372.206814][T10730] svc: failed to register nfsdv3 RPC service (errno 111). [ 372.318897][T10730] svc: failed to register nfsaclv3 RPC service (errno 111). [ 372.859057][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 372.859075][ T30] audit: type=1400 audit(1762712257.778:857): avc: denied { setopt } for pid=10736 comm="syz.4.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.102864][ T889] usb 4-1: USB disconnect, device number 28 [ 373.727863][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 373.787467][ T30] audit: type=1400 audit(1762712259.138:858): avc: denied { write } for pid=10756 comm="syz.2.1415" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 373.937657][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 373.951584][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.968015][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 373.979561][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 373.992624][ T889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 374.001644][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.012066][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.030927][ T9] usb 5-1: config 0 descriptor?? [ 374.050662][ T9] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 374.085995][T10762] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 374.139667][ T889] usb 4-1: device descriptor read/64, error -71 [ 374.333567][ T9] usb 5-1: USB disconnect, device number 32 [ 374.482684][ T889] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 374.688221][ T30] audit: type=1400 audit(1762712260.048:859): avc: denied { name_bind } for pid=10773 comm="syz.0.1421" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 374.717679][ T889] usb 4-1: device descriptor read/64, error -71 [ 375.219796][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1423'. [ 375.279203][ T889] usb usb4-port1: attempt power cycle [ 375.631093][ T889] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 375.665074][ T889] usb 4-1: device descriptor read/8, error -71 [ 375.926775][T10791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10791 comm=syz.1.1427 [ 375.947754][ T889] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 375.961661][T10791] 9pnet_fd: Insufficient options for proto=fd [ 375.978154][ T889] usb 4-1: device descriptor read/8, error -71 [ 375.978292][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.021275][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.046673][T10794] SELinux: security_context_str_to_sid (ueue0) failed with errno=-22 [ 376.088074][ T889] usb usb4-port1: unable to enumerate USB device [ 376.142248][ T30] audit: type=1400 audit(1762712261.398:860): avc: denied { mounton } for pid=10786 comm="syz.1.1427" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 376.558081][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'. [ 376.670692][T10798] Bluetooth: MGMT ver 1.23 [ 376.760303][ T30] audit: type=1400 audit(1762712262.118:861): avc: denied { write } for pid=10796 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 376.922651][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 376.931727][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'. [ 376.954365][T10804] geneve5: entered promiscuous mode [ 376.955917][T10806] fuse: Bad value for 'fd' [ 376.959865][T10804] geneve5: entered allmulticast mode [ 377.003347][T10810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.281035][ T30] audit: type=1400 audit(1762712262.508:862): avc: denied { mounton } for pid=10819 comm="syz.2.1438" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 378.220959][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.227387][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.780267][T10842] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1442'. [ 378.878067][T10842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1442'. [ 379.315414][ T30] audit: type=1400 audit(1762712264.668:863): avc: denied { mount } for pid=10849 comm="syz.1.1445" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 380.089254][T10854] fuse: Bad value for 'fd' [ 380.439817][ T30] audit: type=1400 audit(1762712264.718:864): avc: denied { mounton } for pid=10849 comm="syz.1.1445" path="/259/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 380.493324][T10855] fuse: Bad value for 'fd' [ 380.683977][ T30] audit: type=1400 audit(1762712266.038:865): avc: denied { remount } for pid=10849 comm="syz.1.1445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.779094][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 381.027175][T10864] netlink: 'syz.4.1449': attribute type 21 has an invalid length. [ 381.054512][ T30] audit: type=1400 audit(1762712266.268:866): avc: denied { create } for pid=10857 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 381.077485][T10864] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1449'. [ 381.187711][ T30] audit: type=1400 audit(1762712266.368:867): avc: denied { setopt } for pid=10857 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 381.248872][ T30] audit: type=1400 audit(1762712266.538:868): avc: denied { ioctl } for pid=10860 comm="syz.4.1449" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 381.359870][ T30] audit: type=1400 audit(1762712266.658:869): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 381.701392][T10880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1453'. [ 381.815314][T10880] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1453'. [ 381.910797][T10880] netlink: 'syz.1.1453': attribute type 5 has an invalid length. [ 381.925620][T10880] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1453'. [ 382.371498][T10895] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 382.518347][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'. [ 382.627739][ T30] audit: type=1400 audit(1762712267.978:870): avc: denied { bind } for pid=10892 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.761932][ T30] audit: type=1400 audit(1762712268.018:871): avc: denied { setopt } for pid=10892 comm="syz.2.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.855035][ T30] audit: type=1400 audit(1762712268.208:872): avc: denied { map } for pid=10892 comm="syz.2.1460" path="socket:[27136]" dev="sockfs" ino=27136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 382.880991][T10905] SET target dimension over the limit! [ 383.731174][T10905] xt_hashlimit: max too large, truncated to 1048576 [ 384.335086][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'. [ 384.966894][T10922] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 385.164907][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 385.165008][ T30] audit: type=1400 audit(1762712270.468:874): avc: denied { setopt } for pid=10896 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.729366][T10925] tipc: Started in network mode [ 385.734374][T10925] tipc: Node identity 2e0c7ba4b2d8, cluster identity 4711 [ 385.748304][T10925] tipc: Enabled bearer , priority 0 [ 385.777191][T10925] syzkaller0: entered promiscuous mode [ 385.787489][T10925] syzkaller0: entered allmulticast mode [ 386.042692][T10918] tipc: Resetting bearer [ 386.087432][T10918] tipc: Disabling bearer [ 386.113393][T10922] team0: Device dummy0 failed to register rx_handler [ 386.363705][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.438258][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.663994][T10940] x_tables: ip_tables: osf match: only valid for protocol 6 [ 387.266595][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 387.407642][ T30] audit: type=1400 audit(1762712272.688:875): avc: denied { mount } for pid=10936 comm="syz.2.1471" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 387.535359][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1474'. [ 387.688400][ T30] audit: type=1400 audit(1762712272.978:876): avc: denied { bind } for pid=10949 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.715148][ T30] audit: type=1400 audit(1762712273.018:877): avc: denied { ioctl } for pid=10953 comm="syz.1.1475" path="socket:[28030]" dev="sockfs" ino=28030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 387.809364][T10960] xt_NFQUEUE: number of total queues is 0 [ 387.909382][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 388.414312][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.435915][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.448625][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.463113][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.477256][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.545819][ T9] usb 5-1: config 0 descriptor?? [ 389.011615][T10950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.022432][T10950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.237641][ T979] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 389.407686][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 389.424363][ T979] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.455976][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 389.466293][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 389.467829][ T979] usb 4-1: config 0 has no interface number 0 [ 389.473778][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 389.487474][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 389.494910][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 389.499616][ T979] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 389.515526][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 389.523752][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.529322][ T5866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 389.550476][ T979] usb 4-1: Product: syz [ 389.559948][ T979] usb 4-1: Manufacturer: syz [ 389.568425][ T9] usb 5-1: USB disconnect, device number 33 [ 389.576903][ T979] usb 4-1: SerialNumber: syz [ 389.593423][ T979] usb 4-1: config 0 descriptor?? [ 389.597644][ T30] audit: type=1400 audit(1762712274.948:878): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 389.603607][ T979] smsc95xx v2.0.0 [ 389.634541][ T979] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 389.639730][T10984] fido_id[10984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 389.655127][ T979] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 389.698076][ T5866] usb 2-1: device descriptor read/64, error -71 [ 390.398685][ T5866] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 390.537995][ T5866] usb 2-1: device descriptor read/64, error -71 [ 390.686387][ T5866] usb usb2-port1: attempt power cycle [ 391.099821][T11005] FAULT_INJECTION: forcing a failure. [ 391.099821][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.112970][T11005] CPU: 1 UID: 0 PID: 11005 Comm: syz.2.1490 Not tainted syzkaller #0 PREEMPT(full) [ 391.112993][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.113004][T11005] Call Trace: [ 391.113011][T11005] [ 391.113019][T11005] dump_stack_lvl+0x16c/0x1f0 [ 391.113051][T11005] should_fail_ex+0x512/0x640 [ 391.113075][T11005] _copy_from_user+0x2e/0xd0 [ 391.113097][T11005] __sys_bpf+0x248/0x4980 [ 391.113123][T11005] ? finish_task_switch.isra.0+0x21c/0xc10 [ 391.113148][T11005] ? __pfx___sys_bpf+0x10/0x10 [ 391.113171][T11005] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.113203][T11005] ? finish_task_switch.isra.0+0x221/0xc10 [ 391.113225][T11005] ? rcu_is_watching+0x12/0xc0 [ 391.113247][T11005] ? trace_sched_exit_tp+0xd1/0x120 [ 391.113265][T11005] ? __schedule+0x11a3/0x5de0 [ 391.113302][T11005] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.113339][T11005] ? fput+0x9b/0xd0 [ 391.113360][T11005] ? ksys_write+0x1ac/0x250 [ 391.113381][T11005] __x64_sys_bpf+0x78/0xc0 [ 391.113406][T11005] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.113430][T11005] do_syscall_64+0xcd/0xfa0 [ 391.113447][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.113464][T11005] RIP: 0033:0x7f380ad8f6c9 [ 391.113478][T11005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.113494][T11005] RSP: 002b:00007f380bbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.113511][T11005] RAX: ffffffffffffffda RBX: 00007f380afe6180 RCX: 00007f380ad8f6c9 [ 391.113522][T11005] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 391.113531][T11005] RBP: 00007f380bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.113541][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.113551][T11005] R13: 00007f380afe6218 R14: 00007f380afe6180 R15: 00007ffd914513f8 [ 391.113575][T11005] [ 391.317668][ T5866] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 391.338608][ T5866] usb 2-1: device descriptor read/8, error -71 [ 391.917659][ T5866] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 391.938128][ T5866] usb 2-1: device descriptor read/8, error -71 [ 392.048958][ T5866] usb usb2-port1: unable to enumerate USB device [ 392.076680][ T979] usb 4-1: USB disconnect, device number 33 [ 392.160101][T11015] xt_l2tp: unknown flags: 17 [ 393.257910][ T979] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 393.961321][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 393.982930][T11033] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 393.990362][T11033] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 394.089590][ T979] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 394.148147][ T979] usb 4-1: config 0 has no interface number 0 [ 394.164750][T11027] svc: failed to register nfsdv3 RPC service (errno 111). [ 394.174480][ T979] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 394.195878][T11027] svc: failed to register nfsaclv3 RPC service (errno 111). [ 394.209464][ T979] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 394.223757][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.233495][ T979] usb 4-1: Product: syz [ 394.238150][ T979] usb 4-1: Manufacturer: syz [ 394.243142][ T979] usb 4-1: SerialNumber: syz [ 394.262138][ T979] usb 4-1: config 0 descriptor?? [ 394.272825][T11018] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 394.563353][ T979] asix 4-1:0.188: probe with driver asix failed with error -71 [ 394.571302][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1495'. [ 394.842433][ T979] usb 4-1: USB disconnect, device number 34 [ 395.238359][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'. [ 395.644511][T11062] netlink: 'syz.3.1505': attribute type 23 has an invalid length. [ 396.177618][ T979] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 396.674436][T11072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 396.681013][T11072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 396.689967][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 396.700072][ T979] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.716949][ T979] usb 2-1: config 179 has no interface number 0 [ 396.720284][T11072] vhci_hcd vhci_hcd.0: Device attached [ 396.731537][ T979] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 396.750512][ T979] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 396.782190][ T979] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 396.796663][ T979] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 396.827686][T11073] vhci_hcd: connection closed [ 396.839277][ T80] vhci_hcd: stop threads [ 396.841295][ T979] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 396.843975][ T80] vhci_hcd: release socket [ 396.852496][ T979] usb 2-1: config 179 interface 65 has no altsetting 0 [ 396.907625][ T979] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 396.926915][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.937619][ T889] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 396.985436][ T80] vhci_hcd: disconnect device [ 397.013887][ T979] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 397.089659][ T5168] input input24: unable to receive magic message: -110 [ 397.200146][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.219748][T11085] misc userio: The device must be registered before sending interrupts [ 397.254661][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.255680][ T30] audit: type=1400 audit(1762712282.568:879): avc: denied { write } for pid=11081 comm="syz.2.1510" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 397.335339][ T979] usb 2-1: USB disconnect, device number 41 [ 397.341407][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 397.413546][ T30] audit: type=1400 audit(1762712282.568:880): avc: denied { open } for pid=11081 comm="syz.2.1510" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 397.535084][T11097] loop3: detected capacity change from 0 to 7 [ 397.555725][T11097] Dev loop3: unable to read RDB block 7 [ 397.632142][T11097] loop3: AHDI p1 [ 397.662593][T11097] loop3: partition table partially beyond EOD, truncated [ 397.779068][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 397.803440][T11101] fuse: Bad value for 'fd' [ 398.281942][T11103] fuse: Unknown parameter '00000000000000000000' [ 398.620306][T11108] netlink: 'syz.4.1518': attribute type 23 has an invalid length. [ 398.680742][ T30] audit: type=1400 audit(1762712284.028:881): avc: denied { open } for pid=11091 comm="syz.3.1513" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 398.794462][ T30] audit: type=1400 audit(1762712284.028:882): avc: denied { ioctl } for pid=11091 comm="syz.3.1513" path="/dev/ttyqa" dev="devtmpfs" ino=385 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 398.853879][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 398.990561][T11123] overlayfs: failed to clone upperpath [ 399.437920][ T5866] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 399.525478][ T30] audit: type=1400 audit(1762712284.878:883): avc: denied { name_bind } for pid=11120 comm="syz.0.1520" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 399.889741][T11130] syzkaller0: entered promiscuous mode [ 399.895297][T11130] syzkaller0: entered allmulticast mode [ 399.987623][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 400.006401][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 400.024770][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 400.045238][T11137] fuse: Unknown parameter '00000000000000000000' [ 400.052924][ T5866] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.067617][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.082395][ T5866] usb 4-1: Product: syz [ 400.086815][ T5866] usb 4-1: Manufacturer: syz [ 400.115299][ T5866] usb 4-1: SerialNumber: syz [ 400.369814][ T5866] usb 4-1: config 0 descriptor?? [ 400.400681][ T5866] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 400.421010][ T5866] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 400.552321][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.649812][ T5866] em28xx 4-1:0.0: unknown em28xx chip ID (180) [ 400.860077][ T5866] em28xx 4-1:0.0: Config register raw data: 0xb4 [ 400.956638][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.958686][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.975983][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.993695][ T5866] em28xx 4-1:0.0: I2S Audio (5 sample rate(s)) [ 401.011836][ T5866] em28xx 4-1:0.0: No AC97 audio processor [ 401.234379][ T30] audit: type=1400 audit(1762712286.588:884): avc: denied { module_load } for pid=11144 comm="syz.4.1531" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 401.261894][ T5866] usb 4-1: USB disconnect, device number 35 [ 401.565646][T11155] nfs4: Deprecated parameter 'intr' [ 401.570931][T11155] nfs4: Unknown parameter 'smackfsrootocfs2' [ 402.018832][ T30] audit: type=1400 audit(1762712286.738:885): avc: denied { write } for pid=11154 comm="syz.1.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.097853][ T889] vhci_hcd: vhci_device speed not set [ 402.105383][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 402.115016][T11159] netlink: 'syz.1.1534': attribute type 7 has an invalid length. [ 402.126236][T11159] netlink: 'syz.1.1534': attribute type 8 has an invalid length. [ 402.134526][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 402.153919][T11159] erspan0: entered promiscuous mode [ 402.160972][T11159] gretap0: entered promiscuous mode [ 402.168877][T11159] erspan0: left promiscuous mode [ 402.175524][T11159] gretap0: left promiscuous mode [ 402.488092][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 402.541207][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 402.573397][T11171] fuse: Unknown parameter '00000000000000000000' [ 402.728580][ T30] audit: type=1400 audit(1762712288.078:886): avc: denied { mount } for pid=11175 comm="syz.0.1541" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.087332][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 403.094799][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.107105][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 403.123424][ T9] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06 [ 403.134167][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.153724][ T9] usb 5-1: Product: syz [ 403.164504][ T9] usb 5-1: Manufacturer: syz [ 403.182815][ T9] usb 5-1: SerialNumber: syz [ 403.195387][ T9] usb 5-1: config 0 descriptor?? [ 403.547760][ T9] usb 5-1: USB disconnect, device number 34 [ 403.846351][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 404.057747][ T5866] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 404.748310][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 404.791500][ T5866] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 404.804090][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.817710][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 404.831508][ T5866] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.998791][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.038227][ T5866] usb 2-1: config 0 descriptor?? [ 405.167481][T11216] wg1 speed is unknown, defaulting to 1000 [ 405.360198][ T5866] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 405.485954][ T5866] usb 2-1: USB disconnect, device number 42 [ 405.667704][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 406.348553][ T12] ------------[ cut here ]------------ [ 406.354490][ T12] WARNING: CPU: 1 PID: 12 at io_uring/io_uring.c:3036 io_ring_exit_work+0x3fc/0x10f0 [ 406.364079][ T12] Modules linked in: [ 406.368339][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 406.378108][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.388478][ T12] Workqueue: iou_exit io_ring_exit_work [ 406.394065][ T12] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 406.400018][ T12] Code: 0f 85 0a 0b 00 00 48 8b 05 81 14 68 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 af f6 23 fd 4d 85 f6 79 12 e8 35 fb 23 fd 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 23 fb 23 fd 48 8b 74 24 60 [ 406.420138][ T12] RSP: 0018:ffffc90000117a80 EFLAGS: 00010293 [ 406.426226][ T12] RAX: 0000000000000000 RBX: ffff8880530786c8 RCX: ffffffff8498fd91 [ 406.434335][ T12] RDX: ffff88801d2e4900 RSI: ffffffff8498fd9b RDI: 0000000000000007 [ 406.440121][ T9] usb 5-1: config 0 has no interfaces? [ 406.442359][ T12] RBP: ffffc90000117c40 R08: 0000000000000007 R09: 0000000000000000 [ 406.455943][ T12] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff888053078000 [ 406.458647][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 406.464224][ T12] R13: dffffc0000000000 R14: fffffffffffffffd R15: ffff888053078040 [ 406.481566][ T12] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 406.490846][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.497762][ T12] CR2: 000000110c38eb82 CR3: 000000003a783000 CR4: 00000000003526f0 [ 406.505743][ T12] Call Trace: [ 406.509060][ T12] [ 406.511995][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 406.517650][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 406.522886][ T12] ? try_to_wake_up+0x160/0x1870 [ 406.527877][ T12] ? debug_object_deactivate+0x1ec/0x3a0 [ 406.533732][ T12] ? rcu_is_watching+0x12/0xc0 [ 406.538579][ T12] process_one_work+0x9cf/0x1b70 [ 406.543624][ T12] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 406.549698][ T12] ? __pfx_process_one_work+0x10/0x10 [ 406.555069][ T12] ? assign_work+0x1a0/0x250 [ 406.559686][ T12] worker_thread+0x6c8/0xf10 [ 406.564422][ T12] ? __pfx_worker_thread+0x10/0x10 [ 406.569786][ T12] kthread+0x3c5/0x780 [ 406.573935][ T12] ? __pfx_kthread+0x10/0x10 [ 406.578871][ T12] ? rcu_is_watching+0x12/0xc0 [ 406.583673][ T12] ? __pfx_kthread+0x10/0x10 [ 406.588492][ T12] ret_from_fork+0x675/0x7d0 [ 406.593086][ T12] ? __pfx_kthread+0x10/0x10 [ 406.597695][ T12] ret_from_fork_asm+0x1a/0x30 [ 406.602579][ T12] [ 406.605610][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.612872][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 406.622151][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.632233][ T12] Workqueue: iou_exit io_ring_exit_work [ 406.637771][ T12] Call Trace: [ 406.641092][ T12] [ 406.644023][ T12] dump_stack_lvl+0x3d/0x1f0 [ 406.648626][ T12] vpanic+0x640/0x6f0 [ 406.652598][ T12] ? io_ring_exit_work+0x3fc/0x10f0 [ 406.657788][ T12] panic+0xca/0xd0 [ 406.661548][ T12] ? __pfx_panic+0x10/0x10 [ 406.665964][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 406.671064][ T12] check_panic_on_warn+0xab/0xb0 [ 406.676001][ T12] __warn+0xf6/0x3c0 [ 406.679897][ T12] ? io_ring_exit_work+0x3fc/0x10f0 [ 406.685126][ T12] report_bug+0x3c3/0x580 [ 406.689460][ T12] ? io_ring_exit_work+0x3fc/0x10f0 [ 406.694674][ T12] handle_bug+0x184/0x210 [ 406.698998][ T12] exc_invalid_op+0x17/0x50 [ 406.703489][ T12] asm_exc_invalid_op+0x1a/0x20 [ 406.708325][ T12] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 406.714123][ T12] Code: 0f 85 0a 0b 00 00 48 8b 05 81 14 68 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 af f6 23 fd 4d 85 f6 79 12 e8 35 fb 23 fd 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 23 fb 23 fd 48 8b 74 24 60 [ 406.733719][ T12] RSP: 0018:ffffc90000117a80 EFLAGS: 00010293 [ 406.739771][ T12] RAX: 0000000000000000 RBX: ffff8880530786c8 RCX: ffffffff8498fd91 [ 406.747721][ T12] RDX: ffff88801d2e4900 RSI: ffffffff8498fd9b RDI: 0000000000000007 [ 406.755770][ T12] RBP: ffffc90000117c40 R08: 0000000000000007 R09: 0000000000000000 [ 406.763730][ T12] R10: fffffffffffffffd R11: 0000000000000000 R12: ffff888053078000 [ 406.771778][ T12] R13: dffffc0000000000 R14: fffffffffffffffd R15: ffff888053078040 [ 406.779855][ T12] ? io_ring_exit_work+0x3f1/0x10f0 [ 406.785053][ T12] ? io_ring_exit_work+0x3fb/0x10f0 [ 406.790255][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 406.795714][ T12] ? __lock_acquire+0xb8a/0x1c90 [ 406.800659][ T12] ? try_to_wake_up+0x160/0x1870 [ 406.805584][ T12] ? debug_object_deactivate+0x1ec/0x3a0 [ 406.811218][ T12] ? rcu_is_watching+0x12/0xc0 [ 406.815992][ T12] process_one_work+0x9cf/0x1b70 [ 406.820932][ T12] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 406.826903][ T12] ? __pfx_process_one_work+0x10/0x10 [ 406.832293][ T12] ? assign_work+0x1a0/0x250 [ 406.836882][ T12] worker_thread+0x6c8/0xf10 [ 406.841495][ T12] ? __pfx_worker_thread+0x10/0x10 [ 406.846602][ T12] kthread+0x3c5/0x780 [ 406.850663][ T12] ? __pfx_kthread+0x10/0x10 [ 406.855252][ T12] ? rcu_is_watching+0x12/0xc0 [ 406.860007][ T12] ? __pfx_kthread+0x10/0x10 [ 406.864589][ T12] ret_from_fork+0x675/0x7d0 [ 406.869176][ T12] ? __pfx_kthread+0x10/0x10 [ 406.874202][ T12] ret_from_fork_asm+0x1a/0x30 [ 406.878969][ T12] [ 406.882813][ T12] Kernel Offset: disabled [ 406.887128][ T12] Rebooting in 86400 seconds..