last executing test programs: 9.972287161s ago: executing program 2 (id=2386): r0 = socket$inet6(0xa, 0x80003, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2082}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x6}}], 0x10}, 0x1c7a50772457362a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) sched_setattr(0x0, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4004af61, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000040)=""/63) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r9 = socket$inet6(0xa, 0x80003, 0xfb) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 7.648666925s ago: executing program 1 (id=2401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$I2C_PEC(r2, 0x708, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8200, 0xf801, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xff, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 6.508635386s ago: executing program 1 (id=2403): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) fstat(r6, 0x0) setresuid(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000003e00)=[0xee01]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003e40)) lstat(&(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)) newfstatat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000004080), 0x202001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000580)="cf26432518a338c511c9482116a1f4885520d1a31de59ba45f59439d9f68efa42db385e0953d72983d63c67584eb9e9c71c132d3ecf70f715dd28b007dd805dc8842b2b75a384ea0a01c7a64e340a22dc4fb098980b589ba8c1120811bcf36c69e0a4dd0514e7e8e69a56a9e854f9c032d1f98853370a029f16583f3bf0584eab8bcfdf604588a8bab2dfa855f9090d02fd7fc74055eb7de74517d11458ba68d572e3f564d76a3714eae02be17deeb733b4921f8e084e331100cfd78a69875f00d9df06600e99f05052bd966b6664d0846", 0xd1}, {&(0x7f0000000180)="b72631385c5ec0b945800dd61f69bce766a3b5db167f38a1b11b", 0x1a}, {&(0x7f0000000440)="40a3df00dd0c83b4fc6590fe37893e9bad69", 0x12}, {&(0x7f0000000680)="027ecab2449bc1d460dc623b68654bcfd039e26f7b7759a1b3544e2a8e14308291e7c6e57157f299a9b7bff8d8810cf6c5b6f6f0011c16424a3d4ad80cb2ffb26e23041f7069c6176ebb972779d692311c4e1bb339133e78063d451473f776b0900d6d84ba55c62d", 0x68}, {&(0x7f0000000880)="be04a9926dbb05e1c5edfa1211d03d73c15c891b18fa4b39d6a1e71bda99e8dccab89a6ed7a632ce00e85228d2d1d3cb69f9ed230489d6e05e6c7aa64fb69a980e2d42e1fb74c4a070a4b2595660d2fdce9797934512b4cf16f85aab29bc9d0b07889a9420ed255f10b098542a4f85bc849c2eaa5e54c24f468c5db2c66206846f02db8387f9d57473217c13b4d1f4bb6d102edd0c5eca816812c06f3f555ff2d1e5b97089240d97a9084940b0f6c82db4ead576f998b1fd7a66d6d38e0b6d21acb1575033af3cf8198e88a6077d973e98b56f2c571ebd0d19d93252642048886cae0e2b521dfbf9af892b23e8e83de2db4c9279cbf72d1764d550b532015b5e16b790dc1154f067b1225abeb5d1b25a779f9ae60506f868a73b71e5b0ae41fea69548802b89581ec5d71ec021b6222a8f8212d2bd78464e4965cb92caff96cfd4f279a2acbe15e801e0874add1655a4e6df7e915f89dd690b0f2a02f65a8ef19553cb07336f03195209b7602f14755a09fd8df21fac99525a961028e4fa7f5cb8f8a18c613dc914cc57d1e95954b934c4c54f5127f947847731395bff280d3edd66f0b2c13e6fd67ee1b859e42f62fce238e6a20f8f29387010beaf8db93c931fcfa1fca832f50fbe33ac56e1652bd7de9418fb060fc5bc31ba3fa47e7f90d8e278b64d39dad3ba73a9d769dca3bcf5f1e7d0772dd1e7ae3d4b4bff83c44b794b4098614a04d99c93db2ef268874f85ec2be8136ef91bd5d90814f3686d90ab33f8ac91acbbfce96ac451b430edf91a0b5894fbef4e8e778e2f9d352fdd4e49a4651543ef0c93fa885ca344980845aa42cc692a32ba2c9aa357a6b5cf840813a88f71ec4d656aa25705213cd233cd4f4e1f6ee4027fa9daba3a2592f918f14012a36c6598527b9a3aadbee2fab8c5e956a51ca616381e288047fe21a0f3ecc86107a74bc5eb99b8282a8a8fbbd125dcd674f935c5750d86ced98de216823a6a857dcc069034ef3ae90864e9ff1375c12f4e7900506b813b9c1be673b9e7e99ad9b9179ff5dc8439ddaecef475733afee81155c3ab035c3ccc331916be3b968ddaab575a9b3a6890b6868bfbf54cf2006320b791fafb02530369afbdfed5a9fc37447b1bc2abf2346461af1c7100ac2961a22503b06ac915c29d17b5d5787565c91984e718eb473d01ba53851e6cbf299637dfe03a1c23f7cfd911d645f4665c62d3a87a7e2222debcfd165c8682df7fb3437676f246ce12ddc9ebd1ea143174e496a0996d5a9d6eb1d9fa46491c4280c3247629dddfa0c4ff064089e290879adccf47c8642c2120090891db37f597d2a7e09807d4a354a5c7522c80e94ac2bb2fa17c2da5c98e5f8f863abcf78bdd4368126febb2298749d0f93148e37f702dbad1dadb3e1a7f4d936e053fc7731cae5f290b3e993c60fb6a1609cd1c83b11865d9c416011bdadb1d858dfe46213879c5c14d67e9c573d9a0753619b432df11cf051d5fc3f00ac087b0c0902229ac88904f40822b886723efa3052e9b01d88ea117ef5fde83243dbf9a06f359916d674c9991b1b8009985884cb9d74a69e60a6a2e9829e514b9b7d2fecc7a5e957952874ae617739af7fbe6d1f17fc9162e12785fd42332ef2f39d62e7e1cbfe32e3dcc78918fe8fbd12c9e4e0f29249765e7e5d868653570d92920a34ad891283bca6645fa7a8391c6c477afbd61604009406219cce66d3f45acaae88effb4b79910db9e857eac4ea34999b51834d4e8ccefe7d478083d2dc3c1f78fdc2b01a968c6d3d677f1145c42ff95928fa532b43b7eb50774d02a33f58926f5a6c59f425f878d5e0e898b0ea1a8b5ab67a380808bbdf692c7de9bd8ff5ce2055e362c2af30f6049056dca452ca7dc6d237a780bc38641a8ef355eafc145d2be977ba1d600c19ff7da9b623bbff071d8b1c42eef1f4812a4f42dec2190500c1448af233c694a2b21bf9324e767bd2181bbca4f0791b1960366a9c265cf5b5d96ed627f753f8fb49e62848dfc04f2d6ede453943549f757505faa7b3039d3e6f1d42d96e3c1fb1ec5b8a2825967a903327a90cdf8849d9e0fc0799ca56f82c18e0c43e43fbfbc83d88fbe2c3b51237696ba7913e62b7da77b38f3d849bd542294fc615017688f145efe55e8def2c3c83718bfbc884444961b9fdc1d357c4b07266ec79aca87e25e4e0e49737fd8bddb53768f0f62fe8f29098cb4531a6e312eef675e2e5dc4f4d0667e7a072322d056134d42b59d57ade13a2443884a93c015e1adebed94ba23af4de78872bfab2c5bdb8cb4ff53ef659a640ddbb63c17dd76fed6f7e56768e509600bddf260fb31c6432dfde1034e384f488183832fa7ef6de212def3fc8f2200d68591322989beff63c489645804e1a7a3fd4107b139c48ddce03ee5029d9591e80218aa14b6c2209fc81f977dee2c29b7ee9eb73c113aa8cfacd825474a0ce78426341394a05653b20dd6591251381b58fcc2ad5c752852f4b27a5d4223f8f6390b21efaa765ba331be20f9b5fe4e677cc434c6c10813671210aae7f853aa8a9095226ee3faf4fbc488ce07a30ae9fc2a347b88b92b82a56a522a46a973d92eaf883902f66308e647243c47fb4dacc9486fbba8cbe5195f333f4eec1e642b84592c39a0ca492852a487e09f29126f2a241d11bb6748d22101a12bf65fdb7cc4a9ee99ea58e5cc88dea1577871245e77d13ea7b6f2bddd3624795a27d512ae8255b64cc9b0d7845d905c8aeab682d1caef0ce440f36e5b7c97de66606419a4d8823f607cc6a2aa9c3ea10f2d054ab03a8515ef3a3b65c2d6684fec5b00c71a4de94a13851ef933bc6399fce0b7f8e10f4d2ee89ae2f0fdec41158c4c99a206d67edc89beb24e4b15374746afa6397a4856e48652297d5c4d785e5404bbb11d13201f468e2e6b0b45e1a2dda26c95f1ba4a0932c8de65bb8308076c0dc7608ec28be960b7dadca11960e4651071261b5567a36083bf4b859ce3a97454af8a610ac79e579a9a8fad5078f2fcd73063fa462336496f1d16504ec16c22aa260c71bd386d9190932424259791b08df5ee0485505d41b4588a14bcf03dd0b53d66f4c5f64c46cad8c213f184672ef87f82f4e9a7993e965c70ec650a7b4a1fa4d9321eb2777ea3ec1fca37084bdeb94fcab408e65ef59d93a418a87236877796ea54104563084f356c2b05046630efaa391763cf6dce432d0e6615ce418cf86fd9f8b795df601223a1ef61b1ca79e5507b4aa9d3bfe43bf877db28f6752d494c3ccb634b6f8e9b08eb9dfc1697f6d1f3e7dbd402bed682a06813dbf2b9c824ed787d76e17e1dc66934b86e90de617e5f007ce7be4e96bd2c022f95cbdb42a734691d546088920af91befb75a03a32a53fef1decefc6419a2adf6c06123daf42bdbed8bdc46a42c69121115d69074c6b510089bf2b4f54bbc16ca8e77c1d75901ce1db40d8960371760715ce12c84cb02e92f3d34b1f412aff2224731d3534d5caa074d15e03a09e084c391edeb1b73321304563cc332e6ebbe41ccd834423d95cb8e5ef780484e82602cf74ac9aef99bf562264fed19fa0c13a3507f5f8e050259bb6d191c367e1ab16bf772592b437b41a4e8c3791f53807f1e873f182adefff553cce8343cabdea2131aca06a33294fc7651793baac900cac2064b02f3f6990d35c51e1544f57cd3257775ef99801dce87cba4c91800b66721fa841d2afb2165d6fac3480d490b781866dd128ae8e1aeb27439e6dabc8855696715af075edc701112fd158b9384aef3d7633ec5468a1c9537950e0e82912595191d439e3b2644d29484536bd0275d2f2b73ddd149801c2384576e0d20839dfd54065581335564f4f7db8b4c8fa15d439a392dab83b057f12b835f50571f30d384fd0f954280a3d13dc3ce54c60a0fe3d85d88c2372c9a50dfbc3834a1d8971d1c341a7feb5f90ba587296b8f2bd200428b7ad570d88f643620758b292ee06177673bc78cf1dad5f565f421d0b734bb627d31ed27aa8b3fd3a2aded1d04ff74b8650517d391de80dbcb5818ae0362cd0c76d7cf29d30b1700432ec597103e2e9f3b902e8095915861daa04dc3ca1a6c8d3c4fd027b776b0faabaa88305c0e7a00edb0b5cd725ad12fee4c781e3a726527ffe0b81fa46b74414d0d4982bfc978ae6912b63b3be079276b6b2d577b74a9426f87ec2fd3ba22b91e21b1097d257f3fb06b58505b39e71830dea79063b72545857a97fd4324743c2f340a4ee3d981da4be1322d65e9de2ce71288bb96a3146aa1471d54b52883ec3f1b91910dcd59e5b9a35e2c3064a4e5e691c704c024af3fe49b8e681d58eceee0a67a968e4e06735fb0bfab3b88f43594341619217b19804618e30aae321039c1a922808cab5178e5b155c67453612f4ba722d54317bee954fff4b192e7f0f5da9ce7c97f3da7c4f26fb81f4f7ec1e8a20696b74236fda5b4de545634afefe4a96ca585dbbc02d08ebefdc0270ca37f8def65361a8d4016b157e3df0d49cfe8b398e9182ad6a2c9d82f2021b087b7c632915c914fe210fffd52bab808146d33740cfb28bded9441844237ae363129defd9ef651c10eabdd10e919d66b46612aa6ae8a6015ca5da6a085f085b45435a40d87fd4289d317080e3845aacf3f4d577dd80ab1ddeff4a63edb2adfb8f241cc2165c89416e0c0111396c7e62e02acea6cc763cf3eaff9ef954caec3ce6c986aa7a56f74bc5287ba163a68eab0aaabac7b8939981c3eb369514f7d0b04eb45fc66a6e593318ad8d74171e4d88019616ce2def1406eb4e9822b0ceeaaaa9e9d881f362c03ab7f80234fd7d090aea3a4f25e2d3fb5a7a3ae64d18c5b56211aa555e8cb3d6cca871e70126bd6a85b56e0561d7b0c7a358f35a52bc93b85ad8e259b30cc46ec8ae7e319919749033cc7880af508386cdf7e715c801be34059608637d3b1c0b5432a7ac0916479ef14e72bd57975df52503b1f999dc6a69c314c765f672eccb4e27ae24d976895a4e138a572a1470aad0c0271701ac463718b3856a8b2ab2f86268732643e2b0afe99ebbb6ffde26f45b98620807c6be72320151aedc90467c78663e58f6a3d39f1e83298c7aea1e4534e3e2cc39b5857ced48ed782cef434c03b209954a07e94322398c775080837f3508b70927a9f9e254d250f57fea9d3c1650df4de1da9650c03978d7e2e99dcaa51a1f2efe3ff831c1992e9492664466130b133f48db48709884144770f0b4bca081bf0043178225afbcc763c0d40404f81f4789aa5107ace7dae73f0282895b62a22bce57959b688720eb03a118bbf7a93cd14362ad47217f049452fa489479c61460af98f9f2490fbc866a9b4eebbf9dfa051c0f181a5a3d5f12529e85046f79b8544ca6cb79a563ca90ed8140de84a9f1d026ed2c58c7b95f86bdab5bdc3ed63cad8b6a665c9312fc3baa8fee43420446553416996425269913fc18c43748d81d40a96056ab2fe462dd6a64f9be47e3655363afbd0f316fe11d6456ac9a602b03fd6c83fcb5e5d247554f8ead09c4ee4209c94293285cc27ea1f6c2f527902616eed9a1acc7d3378abf225139e0e88fcd95c091a4cda33b6c54f54c26ffc52afe41a9533facf9be4ce3dbb1df4ae8d54e0f331862650b2746d29690afe80af047b76939793cb256d0b269336443c3135aa55fcbd59ea553c26f10e575141572e4231e5b2863aa332a5af2deae1e602238fc61d5566377ff7dc2e8424c158e17905457d9a2d0753320b9c6", 0xff0}, {&(0x7f0000000700)="ab7b91079828ac615d5dc1c304f9c86631707ee9b6a1b1044ee285b99242ece36946b640ef1181022839eefe0a6e0590856f87421920eab1fa426eba087fd5a38f080a7d550ff6f428e5f54ca98f08a4fdc99e29404f33ac9f838efd542db4a2655c504a118f00055b5d132c7e8708719ff7656ee47c754be55760163a0d707f14cc729ace751721bbeb29e580e58f73037833938cb13d82ce324bc4345b355e7ff08c5736dd1144b9de773b51802eebff5bcf949944d0cafcebcea89552d02fe8dd3389a39e", 0xc6}], 0x6, &(0x7f0000003b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r3, r2]}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r1, r0, r1]}}], 0xa0, 0x4040094}}, {{&(0x7f0000003c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003cc0)="0ecf3b28a5304734cb7b33cbb7627a1fd5498b8549919c098e3b2d7ff09f0675a0178866225516889b52e165f94cc1fa5599ca066e0637", 0x37}], 0x1, &(0x7f00000040c0), 0x0, 0x48400}}], 0x2, 0x4004000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000f8ff320b89a51042d14cb4782e4a273bb4c24d28c7c8ebd43d9386563c9fc96c8033b3c91a4e9b29"], 0xfc}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0xfdff) 6.41776261s ago: executing program 2 (id=2405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000014e2e00850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 4) 5.390962877s ago: executing program 1 (id=2406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}]}, 0x2c}, 0x1, 0xb00}, 0x0) 5.350639627s ago: executing program 0 (id=2407): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000440)={{r0}, "bc6ab9a725d38e6b1c06d91f60bc8109b76bf99397642abbbceb78909020c4f5ad5b916372e87594d7c38a4daef314a553ffa6872db1546544d1bba75b35cba8bc446fbe630e191e8e8afa8b0464374ee529e549860e1212bfbb6a4d60aab529dd5e5a9f56e0046df8173b1e671190a6fa7e81bb273360851516315974bd9e1d51eedcb77a51866c6435b26d9de8e0846d2311b58dbeb3e9f62e73de8259e90bdec7eced0363aa53cd0858942c505db3fe3768ffc17580695223048321f723a5c65b29966d83c95e1417c8bf2e96394f92c3949bf46c64e14b21da9c542d1fc856d08930dff4a02f5b483675defd3f2273e2a3f67b3f84fcd0524ff96aa7c2923875e280156acee25d864e5a4015d044d195703a3f9a9fe094f7c5b776180109532f3792dcd0d11486b0c5fabbf6d6d1b3bfca026c8661db9d40b75a530fdcc0fda8a8a11aea0844c549ff7dd86bc6b9fc9a1b653317e893c59bdbd7875b4d7ee8b073522198ab779988d502a03d3fd78527ef65b5ed3c8fab5b09560fd5b549ed7300a36b071c9e28ae729d2b02801ca537ddcaa4c911947ee2cb56632896da8c70f35ea4dd911b8e6bffd7980c56aa9cc4c48fbc1c90479277a51a127e228cc017555595502139ad180d3f946923de9335aa7b3c2f31624277e41d163fff1b87bc284d5ae822bdb9146453a9a1704df1b43ba1b905bc55c9c79320144e6bb792675cf3cc505b31455773e111b4573b6c0690a83b8a278e09695c259b818e62511a8ed0799fa27a617a80b28eecb2bf918d6619c85d276b38fbc884e4f115a1562a47d283d5e9fae7678fc51b5c33e56cb301d369a340bfa16a8bf9ce9d268223b5424138c18304999fba3b93096405e9e2430ab74b536862111966226433ed32168b614e2b81135236a8b74a237a084893fb2d54c06c6170e456cdd2f6ab3d6015f641d9bee8a01e796ecfba9b777b0372b97a6db7f051d7f9b860814e363408f7641a70c18a885ece950c2ca3241c0b42d27d89f5d5364fdf7281fd328774cc70ec25cdc39c9598f5e48206f7c46c3e9972b60c0ed218ec2cf2e6ad93ac4e14dda23f046359895e225bbf71720169eefb661d684db9ae5549da94d835591e97969dfe2b04e83ca5d2288abbd4d12125e6b6823cdd81ed9c3c16d5dfadb5088f1abe450d688c82b46e70a68223148983fa20c31108d2b94c3761f96ddeee6c5b4f34173e37869e46f0c5cb0f9fe1f71893ef82dbd7a217fb5f5631539513b835217520db885fda18280bd45df935e6acfc18f7e8b0061f540a90fcc727e477b1f13515185d0531aa70612e3998afa7d87c7a2a59c151ad3cfa50f52a0819602c76c5db12192f89daadfb589ec125bb5bf85c1a07ac5135e46725a5e2e1ed12900ce53e84a593fee4c27c9d847e4f2dacaa3b90efde571a77634c48aa9cd151dd32f717949e2a6183eb048bf2043d4913d86d5f5c95aaec00043d6e3d93ffc1814450fb6e8a8666c662896ffefb13ed534211d92e5c672bb389f03fcabbef58de4e33116b5e9b3a01008fc0764ffaa7bdcbbc774bc9be564a478f84f4eedaa6f0e0eded136d391711c01872aec41a5b73ebf76fa166c59008a215604d9d013312a66469227d5204917c11e41e0554a4459b3a3d7e02f498d5e0adefc6729a8b10f4ce9cccd1aaee87e3cfab58fa0d502bb2c49eb9591ca79c35692fcb601bd25d1abdb3ebdcc6eb4cf635e4fe8f0d034270817d266681919af3131ebcd1ae57d2e65aab4589c0a46c8d1f70c85ce936a58b393afff00604e23b8f4f932fbbb043a3eb144ed77f7694e63206e42118d5c396ad65ce84f0015a3c4c86d92838464077f3de21e61d09bb9611691262b00b0454c1d9f144c1d64639e487a28670e05e4067de9dcaf2ff21980bf6368e272ef15004401f3d778767f4e63d54239e0f855f0ac0daa5521d79a50600f7f557c9a257fd563acc1b8f61eb54f1a808e3b1f110ea23738aa26b62312dd1341ebe2719c929a046a36aee40a851f091d30ee4bf04e148a60a85a80645863012dbfc1d8631b7e0a49e8bf726e8dd3d8a466768a05fc903d63ff76297620178cfad5733664d9c998b8ef3c24aa228897911474324b7905d05864099baa6c87017f2b85b54eade425b4ca814aefc89e697add49a27dba052970422b0754369c9e843d7932cbecd44d5a085bc71e4db5d0efd81444c8971c07ffd0dcaae5694ea48fee4933f9d91fb8a721c0271e13bf34bff744017e992457e8542a698c2d66805f1b31d8a99d157bdf5e56a636de1b69308df0461e96798df499efa726b7fd841916db1e7f2bf665684925321b6134494f7b7d80df2536ce0c133e2f1ea5b53edbbf637f303ea187fdbb556f55370f88c24779d754dda94ffe1dd6ceed068c8408c7bccaf7b7b2c116561cfef96ca7a1eed81ecfd741eca4ddeb69cb73e5b8c01a4a2da5497ce6a699ccf0005adc34f16d0e16adacbb6bf16dd93853e5c86468fceb68dde5ef50f60f91f167a67958fe3b17ec84f2387ab14053a30f87ea8e1e1a5fdff4dec7a59abb4abbfe6de733529031635aeea71b9219b8bd1b2a6c9daec1c01c3b4cd069826018fa8bdc27451bcf756b67a9948d7844b16888f9052045035351acb50239136848924e128116a98c0a1f7c176ad202e3d6c7a509673c5d7acdda39b0e4f361dcf4bf937bff2580179d8ad29dbd0e04c748d4dea322026a64402bb2ccecc44b0a198791bd671fdd95e9b54775be287e372dbd6ef014aa787b45269ed7a8ef9d276684560d40dbcecdf9b002cba3c55d26482da75f697c27076b62344fbca5997686d17880c300394e55594eb3ebb42f50c083231337ef76ed4f8fa33036bfd6281cbd32e904d181a9eb27591bfa69c19e5a2265c0097a86adfcf04fa06032b4a9ffd6019d6bb3228480d9d5f16ef5099a3174321e85742e281377d824b83fd48155dd674db3043ec345f257b452b0c1f679b494e86338c447452aba159dba3232d60c5841877e9b124cf5df56ba3bb965835fe674af2faae7054ceb58ebb82c0b3f9dd5e2cf382c359f0292d0dcece332a99f94fccaa3a57e50d174bbbd65b526876fe2f25256c251b8419a5bf144ac9f348313cf23f77ee8d7b26ed48b2a07cc9dc3e43d0b7deaf67b9b45355126d437071dbb1e0ad4e4e599183f3eb2092da64b8a391893b2bb9274fc4169868ab1bcb4b5f02e35f1dbf8a1c4998d6573b1eaa63fd85a12c0b1ce5716d480d976bdf40eebaa497598da4956a62f10cecb8017bb591bc267bb696eccccd7818d1500a003cb49f7562bdd6ca2361352d8158ed68a31cf0e4386d12c3ec1148390a9adadb9b9c32fa21c011a3c13e8471548b053e7d15b1e415163dc23da2ce2804f0a95d5d58432df9588faf241c496fc54e6f41171cddda7f1cfdc5a503b82748dc1e4c85ac842807e09ec41da5f733a5f5cfc2d357bbc41d6631ad9c88b193925ba669f1058f812a75a15b35506ac8514acf5317295a4e5dd73790843c9d9a69e1dee8432dd4b7968e8a8d0a54c2a28b303c8e6aa89ba339afc82707bb5ec3cb6d0668b2a2d6b2afe270bbe37b93e2dc184db344673674e0397b5bde93a47a5e3aadf98152fed049b3bf6f4f5fe8d6076ae248854e8eb254456d3f95961c2d62bf1d83562a8853e9ec2c4c1011c9437169b97817c4c1cf78f7a22c5e0fa0f0707665f59bd4506fdca6420abe1f14b4366c1ba6afc92d7f133b5ec41852fd2b0d6e70a764d916498d7ff60dc637a8d2534e8fa6be762efe5f21a19c4d833338c05ef186853905341c629d3542284e3b2490f17b22f987b46bf314fdea98eb223fc55c6b0c22ddef5062db83583de18d37b688062e751d066bdc9a71b82bbb0d84e7a205527f734c480b488c5e3acb581d2995d7c6a259c8395ae87ab637629171be5ad688ba7545dd9094d53f5276351f1ed67c67e1c8fb1ed5fdf5d5883ba72da60c95e4815a75ebcfc6f782ccdc571bdb048937c523b5aef81a7923a2b4fa434bda5323362f3c01a29efec388823dbf3d23d527e7b4c37fa2147b1126a931ee8c3405d71aa820ec3881be75f6e5f72b8e21c8f221767c7af88cb478062dac1f15ad09605360860db8d0c8270a5feae40fe92639200092ff236bc3db3f507a225e4fcc5b5deb91bc36ecc5fd83b1b491adc694a3751e3da12f2689468b6159d6ff6b8d1855f4a8747c96d53b6f093fad4503da80be07f2058e2419252765e57de013e65f71a2175ffa8cbe8e019a805bf329ba22305af36846d0ee8f166113353b751a844aca60a8d81f0520ae6b088641812e2d447f92ac0e3e315df0e60990c688c781f762f371c03033453f518df1fdfa24be3fcfb74d235f4b341f674538f9c448b70c7dba44388625cde545402a80d945fcbfda68ebc9caa5b9214c4dabc6a5d578fd9a63a6f05ef7f7a409864a3b40786c0e8e885a6893605219714332d988a31af0f1bf303a68db1360dd3516015d3258ef06b4cc7bf8665f4337c1aa01924051c274e97e2b707bd4a482c1e3dcd667901c2c64885e624bd59d73212bf6a26269f3e5fbe3e33ae4a95b3f97c6f2a51a5645d507e4d341af28399a17ae1eec68b496079471fc9ceb50cef9b9340c87d15d8e7002390196d942c13a5bde4c79aff428647755067b1316de5285a326b798140cfe3654bcd60a9d0bd1aacde2ac8e500b33cff48792976e3e7d1dbf19ccb63d9ffdcdcf0b31e95e014dd57593034ca3328b17c395b0bd850078846fced18aeb10d4b7142cb33d5c3076b7ff855761ff7105b7f8809e09f830576c6c82420db640f9b938a4e53480324b372c56d024f9c6837a572160162d2f708d1f3663c0693ea69fb84ab38b7ec85b2180f1558169872b07576b7abbefe181f7ffcdd7ba270586f48c92a781a27ed6704e17e1ae81383d199d0a1dd741ba959fb04cbe9583df705ff47097b3ebd7085fad73fb066db7cce3bfb49b68b987247f2698452688b52807b7ddbf772aa1491c1783d9e22f481f2d3825c6945cf376cb08a5e11c24136606a67c8fc29e783828850eb4cfee08b573b3eb921279a74b7fefd1bd2d4c58fd395e19a0b8bed324fafed3ff2c28e0b65dc75bcabfeaf981a8c89e4e267cfd25f45d948440d3e713adc0e5e856d4b6717d8f3331d3ebc838fcf980b484a57f04b1c637b1fcfade3ae732f449c40418346b7969d72b73d1bf3c34267a8f64c97ed19db66c94359475a986e37f1acce6f8ead73f6f8171c40886a15a37524043f017d1221133dd3b2f2dbda5a34fb8c2682ce4eb8a9e25ab0420ac8e904ebc10c19781306b70f1b3fec77838f0d986759fa09a5c4bab13c90c1e600aa654f5746c985eb71afbacf149cf80b9d896e9fd9fa7332859941cac622cf9edea69fe5bada88b9b709c32d015a1c2ab084b10090e4aeae161391dde0fff1a2a280a15c4109946f49bbb4c14bff99ddc3972c454ec6f35fa04f186b78c590785a55cba99e3ef5e5e350c81245560f5424e434ee1757bfad9a89a1f266db7d4787efd62d2ecc539663dcfdfbd7205dfa60f0590d94ff93958ce1f3b77fcfa01feab876402e60376ab52362cc1a734d037731ec2efe042674d74f295ad19e477586d6a2aa19e0c178b7cccb1e77c080cf9bb37c445fae997702b096434a79caf00b25a90b17ba1d0c91f0ad171e231777db38a15408a19b8e247989f62401dfedbf859172c1458ea4ee7ca746fea8d10b68c0fdc217bc404d87309dc2ee8489c5873009b6f"}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e0000000100"/16], 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x120, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x85, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd29, 0x70bd2c, 0x70bd26, 0x4}}]}, 0x120}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r5, 0x0, 0x0, 0x1ffffffff}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5.346642672s ago: executing program 3 (id=2408): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r1, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040d0479"], 0x7) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close(0x3) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000091}, 0x0) 5.266065272s ago: executing program 2 (id=2410): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/42, 0x2d) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) 5.193997008s ago: executing program 1 (id=2411): syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) 4.286252606s ago: executing program 3 (id=2412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 4.182959313s ago: executing program 2 (id=2413): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x4) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1, 0xfffffffffffffbaa, 0xffffffffffffffff, 0x1000000800010004, 0x80000000, 0x4002004c8, 0x4c88535d, 0xdf, 0x1, 0xa4a4, 0x5d, 0xfdfffffffffffffd, 0xb, 0x200000000000002, 0xfffffffffffffffe], 0xf000, 0x2805c0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xd000, 0x0, 0x10, 0x8, 0x0, 0x0, 0x3, 0x0, 0x7, 0x6}, {0xffff1000, 0x1000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0xeeef0000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x2, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x8, 0x8}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x80, 0x7, 0x8, 0x40, 0x26, 0x5, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000700)='net/dev_mcast\x00') setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES8=r3, @ANYRES16=r3, @ANYRES64=r3, @ANYRES64, @ANYRES8=r3, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x18) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008001) 3.954620534s ago: executing program 2 (id=2416): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x8100}, {0x4, 0x8}}}, 0x24}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x100102, 0x8) sendfile(r6, r6, 0x0, 0x6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x27}}}}, 0x108) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r9, r8, 0x0, 0x3a) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 3.744182665s ago: executing program 3 (id=2418): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$radio(&(0x7f0000002700), 0x0, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x78, 0x0, &(0x7f0000000480)=[@register_looper, @register_looper, @increfs_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/28, 0x1c, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/242, 0xf2, 0x0, 0x9}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x3}], 0xa2, 0x0, &(0x7f0000000500)="7650fe60eff6d0d56edd3bd9f3e5f6c20ce6b357c9d92b7f9034c341dcf9e22e790c8c8c7fe90ca9f52825089c0be0f12dda37732691cf121416e029cb1a28d699bd15a741683f3b550caf9f0fb3c96d30a3610b5f3877302d1a93542266cde04314e4f2d79477bc14bf8f3b7dae96024e53b0c04270b37dab8b5d63d7c2866e4d6ee246503854a39e604ea5c4e1d9fabf01693c0c0bf057c47a4caac15caa7c51a1"}) fcntl$getownex(r5, 0x10, &(0x7f00000028c0)={0x0, 0x0}) getresuid(&(0x7f0000002900)=0x0, &(0x7f0000002940), &(0x7f0000002980)=0x0) getgroups(0xa, &(0x7f00000029c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0xee00, 0xee01, 0xee01]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000700)={0xaa, 0x608}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000002a00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r7, {r9, r12}}, './file0\x00'}) sendmmsg$unix(r7, &(0x7f0000002840)=[{{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000800)="84bfd9c5f1cb4d5bc06a5775f5dd4c06e2098080b9d5016d4cf229ac730e503b485514e2a1ac950899f89f1e6f90893398c2034393b56b8a8288e44ba1adb957ef6de7cf1b851dd79ee929895b516ef1e5da5b74f6407239ec5994830b7673d76fd190066dcc028dd5fcff379863d1d1dd8e6e43bab8d0ab21ce3186ea71aa90bcdb95ed84fdeeb00b9c666332f8ea1f2ab18f5950fa7d49c417d054ae395e99269df9997ca914333e5806088f83c09cb3d9b77410327ec4d7f5e9cdcf4d6a963a5f3063287806eaa36a7454c5f3491995ca82d1fa32016d1fae219800bc56742efef701", 0xe4}, {&(0x7f0000001140)="5e1449021789c368f2a05e09e14beb809340750f648ca47f07fd66034fe4b472d448c772772346dabea27707253556256e7af16f4450c58c179c4aa9ba03b2ab74f018dc9c2f79ef2c7305882c88288bb51120a4fd3324e149d6e4d17146472a6347a9760e4fdca54a59f2bb49b8d14c26f3a187557aaf065216c0d3be9052e0e2544a511883ce550f0ad5ba6c5fcdc4a64487e4fe8ee260543c3ec06c1813a17bf5f7b5ed18ab0d2d5c88598096489d8e64f19e93fe3de7d44232942e400cf4951e522e053dee80b64c2393d7c582", 0xcf}, {&(0x7f00000005c0)="8da265a566fa798f04ef87b73ff02ac2475800ff828ea7eed42905b3121134d20d5bbc201c3527dbb6a2fa5fbbddf2f7cd380468bfad076156e312093bc04a3f93b658afa43c87557c320c045af57b4541b4fe403d3efdc05baed0ceed6a308b663d31fe6af497d8fdcc9950d4b3d9f80c812d4f1ccc78d6989e6f26ee47bd007b8d08170f893167dba1fbf5b40678e0397b01874436b1d7298133966bb2f04615118dd5b7c12a0933b7ad14062d0c914a167c33c7b5e85b97408c9392bf2cd47df7c526d3099d651eb85b19f4d65d9ee4a5538f1815f8173f815422839e2303da43569ad102fd9b43", 0xe9}, {&(0x7f0000001340)="b4203b778e", 0x5}, {&(0x7f0000001380)="6c2eccaf9ea78b6eb246e0efb3d63a7cb0c5ef87dd2a00a4c81070cce8c43bc97637d808fd47aa4087ea11f9f3cd4372a9124a8283c2ad02a2c31dd038718db40a3b60d86a0ff3f4dd04a10ac722e73dc758d4a55af05fbb1d6fffa2459c46db6f41ef610cf0433e821ecc702f0e844cabd4785df0bfd748d5d70d9a00bb0225478389625bcfc6cb5241d3871aa581e9a591fa76cd9a2d38f54c5b07029217cb7f012a8f71bcece6754746edf09d08a5074c3318db7866e80940fbb7b88c35d4af7664a11159ed033a74a8fe008f6741bfde52320452433e3f06b045b11a273e15ff7ca3", 0xe4}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="cd74831f6d82b0089e0964e1616de6231bbf737dcf3db0b0a17440dfdde6297f0edf82fef84b9da3e0b9979671a1258ba413b89652728592b8fa2b42daf5a03787dc1466cfd12d17b1bfc737e9e58627d27de73dd065941dc4dce08c", 0x5c}], 0x7, 0x0, 0x0, 0x4000051}}, {{&(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="18f35953fbb96fa3643463176afd2d8d3ead8e68ccde", 0x16}, {&(0x7f0000002640)="cbe7afedc3bbe9357efb08160d508638a5eb1396d3d5986246060e3a112fc8bd92726bf9251b04953a82c88b192514790e95ddd934ecccaaf6ea0614173cd673f8f332114cde4f1e6623288c9efc", 0x4e}], 0x2, &(0x7f0000003c40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES8=r10, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r14, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r17, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES64=r13, @ANYBLOB="96da4e2c4e21d35cf3ec7e28212d09dee39446568bec71820e7b4d180e81ab84f98a6451ade896ff496986bc136a7a72c9eeb3beba67a709d01a601d507bf41be7a44c4238c99c0ee93de25d7807da03a22058b754993ec85358effeb8048cd5e839758caa1dae65326a13375beaf2a7a35eaa92ffbd51b93b823966825de0a73a", @ANYRES8, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0b000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r4], 0xe8, 0x80}}], 0x2, 0x48010) syz_emit_ethernet(0xfdef, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0x0) r18 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='children\x00') lseek(r18, 0x9, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 3.523269195s ago: executing program 4 (id=2422): ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000080)=0xfffffffffffffff6) 3.489469728s ago: executing program 4 (id=2423): syz_emit_ethernet(0x9a, &(0x7f0000000000)={@random="856b1200ffff", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x64, 0x2f, 0x0, @private0, @mcast2, {[@dstopts={0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}, @dstopts={0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0xe}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) 3.401983219s ago: executing program 4 (id=2424): openat$mice(0xffffff9c, &(0x7f0000000080), 0x80201) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000040)) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 3.401604006s ago: executing program 4 (id=2425): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x2000001d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x1, r7, r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001840)=0x5d4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3}) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x19, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x58}, @call={0x85, 0x0, 0x0, 0x80}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x288}, @map_fd, @alu={0x4, 0x0, 0xa, 0x0, 0x6, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x5, 0x2, 0x1}], 0x10, 0x3}, 0x94) 3.356951836s ago: executing program 0 (id=2426): socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r7, 0xffffffffffffffff, 0x0) (async) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x7d776419}) (async) close(r1) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) (rerun: 64) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.307398065s ago: executing program 0 (id=2427): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6b", @ANYBLOB=',roo']) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="98c6f3a710eb9892318f6ee21fe2a35e1d5d86763b619d656c9100000000005db15ebb3c2c764bca289e57823ffaccdd4f6acba02fd9df3b503c", 0xfffffffffffffcc5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002740)="f78d9ca80000008f854ecbf4a77f9900058c2f7a7c35918a20806ae8adcaa823f254fbfcc677ad4fdcc8472682112162d9104f8e0ddd3028f31c46b8360c874eeffb39b227f22ceec98bbb4b5e691594", 0x50}, {&(0x7f0000002600)="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", 0x104}, {&(0x7f00000003c0)="e8700e584d50a969ff67347cff6127e6ef12ee3819271482a4977252c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000500)="d7f9a615ef78148bda5b24c258dbfc9642dc1dedf4bf0eac40f2d60cb4eb66f015dc1f05e64d0ccf1cf0d1bd8185f90c9c9d42b98f2a17fe2648aa5f82b71936450a33963ff910a4d8bbfe12f3ba6de640084ae8da2cf97eaf70bc1a77bea6953e", 0x61}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.049794489s ago: executing program 0 (id=2428): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x2) (async) socket(0x2, 0x3, 0xff) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) r1 = userfaultfd(0x801) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 64) r3 = userfaultfd(0x801) (rerun: 64) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x8}}}}}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x98, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x1, 0x2f}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/137, 0x89, 0x2, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/81, 0x51, 0x2, 0x1b}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}, 0x40}], 0x5e, 0x0, &(0x7f0000000740)="9f7c82e71af1ad03c06791e7c06d66b9a3fd84d97458e9b9336743fe739828518eeab671c5015f24df0a1202457b52309836081b330137aea5cceebcae7dec4cc703773b3e48d8f91f013950ba8f0ba3b5c438072ca780f102cc7f4744a4"}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r4, &(0x7f0000000880)=@xfs={0x1c, 0x81, {0x3, 0x7, 0x5, 0x3}}, 0x193000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.90200334s ago: executing program 2 (id=2429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='team\x00']}, &(0x7f0000000200)={[&(0x7f00000001c0)='\x00']}, 0x1000) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572d00000000000002000000000000000000000000000000000000004"], 0x68) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="e801028038000100240001"], 0x29c}, 0x1, 0x0, 0x0, 0x40}, 0x44084) syz_usb_connect(0x3, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000040000701feffffff00a70000017c0000040042800c000a"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.607449306s ago: executing program 0 (id=2430): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000004c0)={[0x0]}, 0x0, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000a80)={0xf0, 0x1f, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@empty}, @generic="652760e8b518cf22fd817cbd13ff9cf86dd7696340c294b204dd77c07ce9176bc0236d32453e78f3f01a82ca71314cba21dcacd0092227248eea92d83f437196901d7fe226375fbfea1f0ce928", @nested={0x88, 0xe0, 0x0, 0x1, [@typed={0x81, 0x84, 0x0, 0x0, @binary="31bc65bb01a915ff53e0c9aef167659f32b48023376c7b24dfa7bbaca984e72b9dce23e97b35182be40c624a78eb810f400d750641bab29d695273a0a742a642cebd645546427b210982020c8ebd9f10083bc1055684ae753f22d70ad0cc79f7bde6e30b890cf48e4fe5fb110a3f03f8bf55680178bc983700ffb1d92f"}]}]}, 0xf0}], 0x2}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGABS20(r9, 0x80184560, 0x0) 2.004378266s ago: executing program 4 (id=2431): r0 = inotify_init1(0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000001700)={0x3c0, 0x78, 0x0, 0x78, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x1, 0xfffffffe}, {}, 0x0, 0x4a, 0x0, 0x4, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x5b, 0x202, 0x1, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 1.376998769s ago: executing program 3 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x19) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x24000000) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 270.07723ms ago: executing program 3 (id=2433): ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000080)=0xfffffffffffffff6) 264.001651ms ago: executing program 3 (id=2434): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0xfff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x85, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa810018000004bc00d3789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xa2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x22, 0x101440) r3 = syz_io_uring_setup(0x17ad, &(0x7f0000000180)={0x0, 0x889, 0x200, 0x20000004, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 249.735822ms ago: executing program 1 (id=2435): syz_emit_ethernet(0x2b, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1d, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty, 'Y'}}}}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x36c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97f9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x138, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x320a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa975}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffea34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) 105.927509ms ago: executing program 0 (id=2436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x9, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000040)=0x3, 0x4) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 49.776449ms ago: executing program 4 (id=2437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a01"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES16, @ANYRES64=r0, @ANYRES8=r2, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000e000d14040029bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf0d0800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) unshare(0x64000600) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x109) 0s ago: executing program 1 (id=2438): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) set_mempolicy_home_node(&(0x7f00002f9000/0x1000)=nil, 0x1000, 0x2, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x30}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x11, 0x11000000, 0x1000000}], 0x0) kexec_load(0xe1d, 0xa, &(0x7f00000006c0)=[{&(0x7f0000000040)="542523c3a9d8db894bd32f3b5ad797a0402a8e3052794f151f9bf21607da77c0776672c5a208af28f4c309292d3ef301c619c1ac7252f15c61e75a58af95cabde883725e05e9757203166e14632afc651894dcbda388f06f9783", 0x5a, 0x1, 0xfff}, {&(0x7f00000000c0)="49d5ac18507c6e8fe909954df53c6b6fa7abd215bebd97de75954563e42c084da3e31f936566cf83469e6a2f1bed05c74e0ea3951bf82acc6d581c29f88c1fec58288506a63e50dc244b633f0c3aca556f461aa63e2a2538c1cd19de624d4e9b8acf93a7938c02598c5908f2e2099087a968a38f971b2cc4b98b58f63ed6495f32b39dae26c7df5d2417e145319b129d67", 0x91, 0x9, 0xffffffffffffffff}, {&(0x7f00000014c0)="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", 0x1000, 0x1cc, 0x266}, {&(0x7f0000000180)="5580134f7ff3b647fe14471a97268465d17d5c268b5cdfdc36ca018d850c075e2975972e92ebd503cfc496c5bfacd30d47c3e29f552ad032a13a8e4767f593d006115a3d8880b59fc8", 0x49, 0xffff, 0x90fe}, {&(0x7f0000000280)="1f1775d2c13faae4c3a8b341f2c2ef4ad160ac461c7a8cf198643e318cb444961034f674bd852604f6f13464d2d1fa71113efa52bfd2f04799d90982b27ad73e174e6f96c06621f53a13784e6d680fe7f7a9ee8e2b7132767fea76a86fa4b89dd66a79070887b8fd2d31233e94aef820b858cd9866ab874999a1a1bbee902d458be30426e30ce617046421b2cebb43593c3235868be3807928cc747b66659a11f12bd9a1d1fd4fd6169dc20c27254c9d4fd1279aa5bb8fff7464556c7a2c63", 0xbf, 0x6, 0x1}, {&(0x7f0000000800)="30b93dbbaeca4a17867b323bee9ed61a459ae5f562ac95840b7296e0cbf85d892dcaf5ea94f4c144067c4409ae9394db37f669b1eea8f07a7f7e23c145033fc24e028278384676174cbba6c1c8df7c72055d3a7d200af186863855c921b857a7c0c6e4ef52194ca902f567ababb9f30623e3bc45c692f012c32f8241c6fb8727e2a6477cb00b5b9db171959eb2c0d0c8eaddcdb2724f9c0e347eff1aa46a9fba18b0ae63ee584321af1cb25ca9ad068814d965862eb59c3df693826561c2673bcf8c1e1971ea86e1723545eefa81cff8114f990685b9e0dff624cd3271ff8b5f767cec20a4dd6976a46183e2397f59643f6c05c9addb3f962644f61d4a7e23416f4f0b80cd97d19ba816c23b0a4a436ed0bf30d56f6774932543bfcd2750746b35c5f2a4768b1f0f302055a95a20a64c24207cd83a468d4d3113b562da838ff6bace982cbb844cc42e4bfcc0108d757e5cc08d250ed5cd9471476d7623760bf8102324", 0x163, 0x3, 0x3}, {&(0x7f00000024c0)="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", 0x1000, 0x80000001, 0x1}, {&(0x7f00000004c0)="c73c1874319b38d5dde58c82f6a6a849c8c5eb7adb42e014babcbe943708cec42a7784fb9ffe6caa4800932e84d1971dca2597fb42102232919be0d6652c95ffbb9b0124707b7efb91ed6083a8fd848993b1be59dd146a03cde3d8bbb91221d91b45956d88448b0c0f9b985ff9202ef9dd7b310b5e5ce20f375a49c55af1ade909a3cccfd112aee93899984a8e", 0x8d, 0x800, 0x34c6}, {&(0x7f0000000580)="0cd25be7faef95cf7336d225aff1557af7614d4b2564dd8b1e26a0451eccd497942450703affc9db9a7223932bfee8f36924aeefb299a330586f422835bcca7ff51101371a17b821d52ca6595050a86758fbf7ccb747e84ff04b91699b76c447ef47a9a99e5ad43ceac23193885f6b0abf530f1054db43fddc60f152f9aa55a16f83ddf7b292042efc24a91350bcc34818cc770b1563c60cf8d1a4", 0x9b, 0x9, 0x6c}, {&(0x7f0000000640)="973a46b7bd288097dbb49e1359f32c6cf79ed43a59fa1b3477c6334850e8a7eab01a54f94465a0f61e61fa448ca2821fc0a5c7c1d316013b05463721e7fdc848853391044e384f0c151d1aee7ac2fe6af15d98", 0x53, 0x480000000000, 0x4}], 0x160000) kernel console output (not intermixed with test programs): 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.244427][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.254444][ T44] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 651.265203][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.286957][ T30] audit: type=1400 audit(1761739224.569:3586): avc: denied { bind } for pid=12967 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.312905][ T44] usb 4-1: config 0 descriptor?? [ 651.318133][ T30] audit: type=1400 audit(1761739224.634:3587): avc: denied { append } for pid=12967 comm="syz.2.1812" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 651.446101][ T30] audit: type=1400 audit(1761739224.690:3588): avc: denied { mount } for pid=12967 comm="syz.2.1812" name="/" dev="pstore" ino=4154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 651.541589][ T30] audit: type=1400 audit(1761739225.588:3589): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 651.570184][T12964] FAULT_INJECTION: forcing a failure. [ 651.570184][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 651.597093][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.3.1811 Not tainted syzkaller #0 PREEMPT(full) [ 651.597122][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.597134][T12964] Call Trace: [ 651.597141][T12964] [ 651.597150][T12964] dump_stack_lvl+0x16c/0x1f0 [ 651.597185][T12964] should_fail_ex+0x512/0x640 [ 651.597207][T12964] ? fs_reclaim_acquire+0xae/0x150 [ 651.597231][T12964] should_failslab+0xc2/0x120 [ 651.597253][T12964] __kmalloc_noprof+0xdd/0x880 [ 651.597282][T12964] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.597313][T12964] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.597336][T12964] tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.597362][T12964] ? tomoyo_profile+0x47/0x60 [ 651.597390][T12964] tomoyo_path_number_perm+0x245/0x580 [ 651.597419][T12964] ? tomoyo_path_number_perm+0x237/0x580 [ 651.597453][T12964] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.597486][T12964] ? find_held_lock+0x2b/0x80 [ 651.597548][T12964] ? find_held_lock+0x2b/0x80 [ 651.597577][T12964] ? hook_file_ioctl_common+0x145/0x410 [ 651.597609][T12964] ? __fget_files+0x20e/0x3c0 [ 651.597636][T12964] security_file_ioctl+0x9b/0x240 [ 651.597661][T12964] __x64_sys_ioctl+0xb7/0x210 [ 651.597690][T12964] do_syscall_64+0xcd/0xfa0 [ 651.597722][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.597744][T12964] RIP: 0033:0x7f693598efc9 [ 651.597761][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.597780][T12964] RSP: 002b:00007f6936761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.597799][T12964] RAX: ffffffffffffffda RBX: 00007f6935be5fa0 RCX: 00007f693598efc9 [ 651.597812][T12964] RDX: 0000200000000100 RSI: 00000000c0405602 RDI: 0000000000000003 [ 651.597825][T12964] RBP: 00007f6936761090 R08: 0000000000000000 R09: 0000000000000000 [ 651.597837][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.597849][T12964] R13: 00007f6935be6038 R14: 00007f6935be5fa0 R15: 00007ffc6feadd18 [ 651.597880][T12964] [ 651.603127][T12964] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.955522][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 652.003646][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 652.030780][ T44] usb 4-1: USB disconnect, device number 54 [ 652.699904][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1816'. [ 652.790183][ T30] audit: type=1400 audit(1761739226.850:3590): avc: denied { connect } for pid=12990 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 653.206516][ T44] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 653.380984][ T30] audit: type=1400 audit(1761739227.402:3591): avc: denied { cmd } for pid=13006 comm="syz.4.1824" path="socket:[42468]" dev="sockfs" ino=42468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 653.410990][ T44] usb 3-1: device descriptor read/64, error -71 [ 653.693517][ T44] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 653.897024][ T44] usb 3-1: device descriptor read/64, error -71 [ 654.029040][ T44] usb usb3-port1: attempt power cycle [ 654.109248][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 654.130943][T13011] fuse: Unknown parameter 'group_i00000000000000000000' [ 654.158968][T13018] openvswitch: netlink: Flow actions attr not present in new flow. [ 654.276824][T13021] netlink: 'syz.4.1827': attribute type 33 has an invalid length. [ 654.348027][T13021] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1827'. [ 654.881287][ T44] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 654.902367][ T44] usb 3-1: device descriptor read/8, error -71 [ 655.233553][ T44] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 655.287812][ T44] usb 3-1: device descriptor read/8, error -71 [ 655.435712][ T44] usb usb3-port1: unable to enumerate USB device [ 656.324498][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 656.452720][ T30] audit: type=1400 audit(1761739230.263:3592): avc: denied { checkpoint_restore } for pid=13039 comm="syz.2.1834" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 656.474649][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.620497][ T30] audit: type=1326 audit(1761739230.412:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 656.833916][ T30] audit: type=1326 audit(1761739230.412:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.224484][ T30] audit: type=1326 audit(1761739230.422:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.248337][ T30] audit: type=1326 audit(1761739230.422:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.272628][ T30] audit: type=1326 audit(1761739230.422:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.298217][ T30] audit: type=1326 audit(1761739230.422:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.327167][ T30] audit: type=1326 audit(1761739230.422:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.373244][ T30] audit: type=1326 audit(1761739230.422:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 657.766264][T13065] program syz.3.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.784345][ T30] audit: type=1326 audit(1761739230.422:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 658.082180][T13077] trusted_key: encrypted_key: master key parameter 'w29cn 5' is invalid [ 658.178893][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'. [ 658.220327][T13070] fuse: Unknown parameter 'group_i00000000000000000000' [ 658.329615][T13085] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 658.431667][ T5888] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 658.924981][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 658.935535][ T5888] usb 4-1: not running at top speed; connect to a high speed hub [ 658.952143][ T5888] usb 4-1: config 5 has an invalid interface number: 215 but max is 0 [ 658.960741][ T5888] usb 4-1: config 5 has no interface number 0 [ 658.971374][ T5888] usb 4-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 659.001871][ T5888] usb 4-1: config 5 interface 215 has no altsetting 0 [ 659.012567][ T5888] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 659.038813][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.075260][ T5888] usb 4-1: Product: syz [ 659.090742][ T5888] usb 4-1: Manufacturer: syz [ 659.105162][ T5888] usb 4-1: SerialNumber: syz [ 659.137717][T13083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 660.135617][T13113] netlink: 'syz.0.1855': attribute type 8 has an invalid length. [ 660.348200][T13112] netlink: 'syz.2.1856': attribute type 1 has an invalid length. [ 660.356112][T13112] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1856'. [ 661.846970][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1860'. [ 661.860281][ T5888] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 661.945958][ T5888] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 662.051843][ T5888] usb 4-1: USB disconnect, device number 55 [ 662.070987][ T5888] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 662.085525][ T5888] cypress_m8 4-1:5.215: device disconnected [ 662.744869][T13147] fuse: Unknown parameter 'group_id00000000000000000000' [ 663.875162][ T44] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 664.183247][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 664.328009][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.375004][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.420578][ T44] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 664.429759][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.474708][ T44] usb 3-1: config 0 descriptor?? [ 664.486216][ T44] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 664.588258][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1873'. [ 667.025969][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 667.182968][T13198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 667.247770][T13201] netlink: 'syz.4.1877': attribute type 8 has an invalid length. [ 668.162978][T13204] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1879'. [ 668.302137][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 668.302178][ T30] audit: type=1400 audit(1761739241.352:3612): avc: denied { ioctl } for pid=13205 comm="syz.1.1880" path="socket:[43972]" dev="sockfs" ino=43972 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 668.643555][ T44] usb 3-1: USB disconnect, device number 69 [ 668.691706][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 668.762498][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'. [ 668.923422][ T5888] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 669.276295][ T5888] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 669.285376][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.353354][T13224] delete_channel: no stack [ 669.359817][ T30] audit: type=1400 audit(1761739242.343:3613): avc: denied { connect } for pid=13225 comm="syz.4.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 669.379433][ T5888] usb 4-1: Product: syz [ 669.379457][ T5888] usb 4-1: Manufacturer: syz [ 669.379474][ T5888] usb 4-1: SerialNumber: syz [ 669.507626][ T5888] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 669.518020][T13227] syz_tun: entered allmulticast mode [ 669.635940][ T5896] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 669.709724][T13222] syz_tun: left allmulticast mode [ 669.760898][T13235] tipc: Enabling of bearer rejected, failed to enable media [ 670.066460][ T5866] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 670.784350][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 670.951102][ T5896] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 670.963106][ T5888] usb 4-1: USB disconnect, device number 56 [ 670.967701][ T24] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 670.974737][ T5896] ath9k_htc: Failed to initialize the device [ 670.998676][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 670.998691][ T24] usb 3-1: config 0 has no interface number 0 [ 670.998726][ T24] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 129, setting to 64 [ 671.007732][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.033797][ T5888] usb 4-1: ath9k_htc: USB layer deinitialized [ 671.044975][ T5866] usb 5-1: config 0 descriptor?? [ 671.054617][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 671.055791][ T5866] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 671.066428][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.217612][ T24] usb 3-1: Product: syz [ 671.222448][ T24] usb 3-1: Manufacturer: syz [ 671.227201][ T24] usb 3-1: SerialNumber: syz [ 671.266434][ T24] usb 3-1: config 0 descriptor?? [ 671.277534][T13249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 671.597598][ T5888] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 671.882183][ T5888] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 671.920888][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.015096][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'. [ 672.036541][ T30] audit: type=1400 audit(1761739244.746:3614): avc: denied { mount } for pid=13248 comm="syz.2.1893" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 672.072743][ T5888] usb 4-1: Product: syz [ 672.074103][ T24] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 672.076957][ T5888] usb 4-1: Manufacturer: syz [ 672.090121][ T5888] usb 4-1: SerialNumber: syz [ 672.101098][ T5888] usb 4-1: can't set config #1, error -71 [ 672.109313][ T5888] usb 4-1: USB disconnect, device number 57 [ 672.156693][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 672.172606][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 672.204706][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 672.216265][ T24] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 672.230818][T13266] binder: BINDER_SET_CONTEXT_MGR already set [ 672.236873][T13266] binder: 13262:13266 ioctl 4018620d 200000000040 returned -16 [ 672.255273][ T24] usb 3-1: USB disconnect, device number 70 [ 672.267483][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 672.289269][ T24] keyspan 3-1:0.133: device disconnected [ 672.354244][T13269] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 672.401551][T13269] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 672.433545][T13265] fuse: Bad value for 'user_id' [ 672.438427][T13265] fuse: Bad value for 'user_id' [ 673.167128][ T30] audit: type=1400 audit(1761739245.896:3615): avc: denied { ioctl } for pid=13281 comm="syz.3.1904" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 673.206915][ T5866] usb 5-1: USB disconnect, device number 49 [ 673.233954][ T24] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 673.397067][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 673.406371][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.414421][ T24] usb 3-1: Product: syz [ 673.418739][ T24] usb 3-1: Manufacturer: syz [ 673.423522][ T24] usb 3-1: SerialNumber: syz [ 673.430068][ T24] usb 3-1: config 0 descriptor?? [ 673.646948][ T30] audit: type=1400 audit(1761739246.354:3616): avc: denied { accept } for pid=13284 comm="syz.1.1905" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.946500][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 674.386371][ T44] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 674.562155][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 674.606652][ T44] usb 5-1: not running at top speed; connect to a high speed hub [ 674.617403][ T44] usb 5-1: config 6 has an invalid interface number: 228 but max is 0 [ 674.625878][ T44] usb 5-1: config 6 has no interface number 0 [ 674.632110][ T44] usb 5-1: config 6 interface 228 has no altsetting 0 [ 674.643287][ T44] usb 5-1: string descriptor 0 read error: -22 [ 674.650271][ T44] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice= 3.27 [ 674.660060][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.723632][ T44] hub 5-1:6.228: bad descriptor, ignoring hub [ 674.741696][ T44] hub 5-1:6.228: probe with driver hub failed with error -5 [ 674.754123][ T44] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 674.790351][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 674.873274][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 674.904910][T13316] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 674.926605][ T44] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 674.993697][ T44] usb 5-1: media controller created [ 675.002214][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.043729][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 675.051775][ T44] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 675.089175][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 675.122470][ T44] dvb-usb: schedule remote query interval to 150 msecs. [ 675.130285][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 675.165112][ T44] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 675.301415][ T5868] dvb-usb: bulk message failed: -22 (1/0) [ 675.309534][ T5868] dvb-usb: error while querying for an remote control event. [ 675.362166][ T44] usb 5-1: USB disconnect, device number 50 [ 675.490329][ T44] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 675.628585][T13320] fuse: Bad value for 'user_id' [ 675.634754][T13320] fuse: Bad value for 'user_id' [ 675.645428][T13326] CIFS: Unable to determine destination address [ 676.032574][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 676.042525][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1918'. [ 676.199312][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 676.221481][ T24] usb 3-1: USB disconnect, device number 71 [ 676.631422][T13338] openvswitch: netlink: Message has 4 unknown bytes. [ 677.428140][T13338] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 677.630430][T13356] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1924'. [ 677.641586][ T30] audit: type=1400 audit(1761739250.066:3617): avc: denied { create } for pid=13355 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.356973][ T30] audit: type=1400 audit(1761739250.075:3618): avc: denied { write } for pid=13355 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.401913][ T30] audit: type=1400 audit(1761739250.075:3619): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.495849][ T30] audit: type=1400 audit(1761739250.075:3620): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.738278][ T30] audit: type=1400 audit(1761739250.075:3621): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.768153][ T30] audit: type=1400 audit(1761739250.094:3622): avc: denied { prog_load } for pid=13355 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 678.805645][ T30] audit: type=1400 audit(1761739250.094:3623): avc: denied { bpf } for pid=13355 comm="syz.2.1924" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.887724][ T30] audit: type=1400 audit(1761739250.094:3624): avc: denied { perfmon } for pid=13355 comm="syz.2.1924" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.923135][T13361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.983382][ T30] audit: type=1400 audit(1761739250.094:3625): avc: denied { read } for pid=13355 comm="syz.2.1924" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 679.030446][ T5866] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 679.041563][ T30] audit: type=1400 audit(1761739250.094:3626): avc: denied { open } for pid=13355 comm="syz.2.1924" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 679.180400][ T5866] usb 3-1: device descriptor read/64, error -71 [ 679.335168][T13365] overlayfs: conflicting lowerdir path [ 679.436656][ T5866] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 680.110974][ T5866] usb 3-1: device descriptor read/64, error -71 [ 680.239173][ T5866] usb usb3-port1: attempt power cycle [ 680.773185][ T5866] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 681.779379][T13387] netlink: 'syz.3.1934': attribute type 5 has an invalid length. [ 681.800963][ T5866] usb 3-1: device not accepting address 74, error -71 [ 683.539487][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 683.539502][ T30] audit: type=1400 audit(1761739255.601:3683): avc: denied { bind } for pid=13393 comm="syz.0.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 683.595164][ T30] audit: type=1400 audit(1761739255.601:3684): avc: denied { name_bind } for pid=13393 comm="syz.0.1935" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 683.618829][ T30] audit: type=1400 audit(1761739255.601:3685): avc: denied { node_bind } for pid=13393 comm="syz.0.1935" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 683.643230][ T30] audit: type=1400 audit(1761739255.648:3686): avc: denied { write } for pid=13402 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 683.676478][ T30] audit: type=1400 audit(1761739255.732:3687): avc: denied { bind } for pid=13404 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.699233][ T30] audit: type=1400 audit(1761739255.751:3688): avc: denied { setopt } for pid=13404 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.761686][ T30] audit: type=1400 audit(1761739255.807:3689): avc: denied { getopt } for pid=13406 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 683.825938][ T30] audit: type=1400 audit(1761739255.826:3690): avc: denied { create } for pid=13406 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 683.845549][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 683.909391][ T30] audit: type=1400 audit(1761739255.891:3691): avc: denied { map_create } for pid=13408 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.909441][ T30] audit: type=1400 audit(1761739255.891:3692): avc: denied { map_read map_write } for pid=13408 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 684.006292][ T24] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 684.006324][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.008226][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.008264][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 684.008288][ T24] usb 2-1: Product: syz [ 684.008305][ T24] usb 2-1: Manufacturer: syz [ 684.008321][ T24] usb 2-1: SerialNumber: syz [ 684.011288][ T24] usb 2-1: config 0 descriptor?? [ 684.674473][ T24] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 684.723289][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.980308][ T2956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.142370][T13426] tmpfs: Bad value for 'mpol' [ 685.175342][ T2956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.247131][ T2956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.341119][ T2956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.933519][T13431] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 685.947472][T13431] netlink: 'syz.0.1948': attribute type 2 has an invalid length. [ 685.957233][T13431] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 686.010462][T13431] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 686.381565][T13431] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.423850][T13431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.431060][T13431] IPv6: NLM_F_CREATE should be set when creating new route [ 686.438316][T13431] IPv6: NLM_F_CREATE should be set when creating new route [ 686.653124][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.675387][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.684181][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.695707][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.704679][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.733203][ T2956] bond1 (unregistering): (slave bridge0): Releasing active interface [ 686.838732][ T5866] usb 2-1: USB disconnect, device number 49 [ 687.021122][ T2956] bond0 (unregistering): Released all slaves [ 687.033381][ T2956] bond1 (unregistering): Released all slaves [ 687.146976][ T2956] : left promiscuous mode [ 688.666543][ T5866] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 688.881363][ T5826] Bluetooth: hci2: command tx timeout [ 688.915758][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 688.925946][ T5866] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 688.937375][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.945423][ T5866] usb 4-1: Product: syz [ 688.949581][ T5866] usb 4-1: Manufacturer: syz [ 688.954173][ T5866] usb 4-1: SerialNumber: syz [ 688.994343][ T5866] usb 4-1: config 0 descriptor?? [ 689.002367][ T5866] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 689.422737][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 689.422769][ T30] audit: type=1400 audit(1761739261.099:3731): avc: denied { ioctl } for pid=13474 comm="syz.1.1960" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45688 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 689.799132][T13440] chnl_net:caif_netlink_parms(): no params data found [ 689.873980][ T9854] Bluetooth: hci5: Frame reassembly failed (-84) [ 689.896681][T13483] Bluetooth: hci5: Frame reassembly failed (-84) [ 690.071615][ T30] audit: type=1326 audit(1761739261.707:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.106786][ T2956] hsr_slave_0: left promiscuous mode [ 690.123601][ T2956] hsr_slave_1: left promiscuous mode [ 690.128174][ T30] audit: type=1326 audit(1761739261.707:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.185703][ T30] audit: type=1326 audit(1761739261.744:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693598d810 code=0x7ffc0000 [ 690.245342][ T30] audit: type=1326 audit(1761739261.744:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.269821][ T30] audit: type=1326 audit(1761739261.744:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.325509][ T30] audit: type=1326 audit(1761739261.744:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.398574][ T30] audit: type=1400 audit(1761739261.744:3738): avc: denied { ioctl } for pid=13460 comm="syz.3.1956" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 690.441451][ T30] audit: type=1326 audit(1761739261.744:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.511163][ T30] audit: type=1326 audit(1761739261.744:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13460 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693598efc9 code=0x7ffc0000 [ 690.992844][ T44] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 691.115745][T10074] Bluetooth: hci2: command tx timeout [ 691.330514][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 691.339703][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.349180][T13500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1964'. [ 691.389252][ T44] usb 5-1: config 0 descriptor?? [ 691.399459][ T44] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 691.660288][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 692.003865][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.014487][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.043351][T13440] bridge_slave_0: entered allmulticast mode [ 692.050068][T10074] Bluetooth: hci5: command 0xfc11 tx timeout [ 692.058045][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 692.072952][T13440] bridge_slave_0: entered promiscuous mode [ 692.081669][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.102240][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.299007][T13440] bridge_slave_1: entered allmulticast mode [ 692.478736][ T5866] usb 4-1: clie_3_5_startup: get config number failed: -110 [ 692.489545][ T5866] visor 4-1:0.0: probe with driver visor failed with error -110 [ 692.491467][T13440] bridge_slave_1: entered promiscuous mode [ 692.553196][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.586268][ T5896] usb 4-1: USB disconnect, device number 58 [ 692.612089][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.711807][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 692.778729][T13440] team0: Port device team_slave_0 added [ 692.804137][T13440] team0: Port device team_slave_1 added [ 692.811940][ T2956] IPVS: stop unused estimator thread 0... [ 692.930608][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.940940][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.967255][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.980416][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.988492][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.040693][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.291062][T13525] fuse: Unknown parameter ' ' [ 693.942333][ T5826] Bluetooth: hci2: command tx timeout [ 694.017578][T13440] hsr_slave_0: entered promiscuous mode [ 694.025790][T13440] hsr_slave_1: entered promiscuous mode [ 694.032070][T13440] debugfs: 'hsr0' already exists in 'hsr' [ 694.039523][T13440] Cannot create hsr debugfs directory [ 694.123755][T13539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13539 comm=syz.3.1974 [ 694.150950][ T44] usb 5-1: USB disconnect, device number 51 [ 695.154731][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 695.154779][ T30] audit: type=1400 audit(1761739266.307:3763): avc: denied { read } for pid=13545 comm="syz.1.1977" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 695.416713][ T30] audit: type=1400 audit(1761739266.307:3764): avc: denied { open } for pid=13545 comm="syz.1.1977" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 695.543868][ T30] audit: type=1400 audit(1761739266.344:3765): avc: denied { ioctl } for pid=13545 comm="syz.1.1977" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 695.605126][ T30] audit: type=1400 audit(1761739266.849:3766): avc: denied { create } for pid=13548 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 695.669455][ T30] audit: type=1400 audit(1761739266.849:3767): avc: denied { setopt } for pid=13548 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 695.842682][ T30] audit: type=1400 audit(1761739267.102:3768): avc: denied { name_bind } for pid=13562 comm="syz.3.1982" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 695.872739][ T30] audit: type=1400 audit(1761739267.102:3769): avc: denied { connect } for pid=13562 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 696.002233][ T30] audit: type=1400 audit(1761739267.102:3770): avc: denied { write } for pid=13562 comm="syz.3.1982" name="ip6_mr_cache" dev="proc" ino=4026533169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 696.028960][ T30] audit: type=1400 audit(1761739267.102:3771): avc: denied { read } for pid=13562 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 696.053586][ T30] audit: type=1400 audit(1761739267.158:3772): avc: denied { write } for pid=13560 comm="syz.1.1981" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 696.424684][ T5826] Bluetooth: hci2: command tx timeout [ 697.250357][T13440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 697.280159][T13440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 697.319397][T13440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 697.418452][T13440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 697.604550][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.648555][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.680849][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.688020][ T9799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.727128][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.734307][ T9799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.216205][T13440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.772371][T13440] veth0_vlan: entered promiscuous mode [ 698.846764][T13440] veth1_vlan: entered promiscuous mode [ 699.299235][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 699.308574][T13440] veth0_macvtap: entered promiscuous mode [ 699.312008][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 699.613892][T13440] veth1_macvtap: entered promiscuous mode [ 699.681215][T13440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.713351][T13440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.774241][ T9797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.789843][ T9797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.809562][ T9797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.869178][ T9797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.262974][ T9797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.282719][ T9797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.324557][ T9797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.343139][ T9797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.510645][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 700.510661][ T30] audit: type=1400 audit(2000000000.729:3793): avc: denied { create } for pid=13635 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 700.555340][ T30] audit: type=1400 audit(2000000000.748:3794): avc: denied { ioctl } for pid=13635 comm="syz.4.1996" path="socket:[44931]" dev="sockfs" ino=44931 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 700.624075][ T30] audit: type=1400 audit(2000000000.757:3795): avc: denied { ioctl } for pid=13635 comm="syz.4.1996" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 700.649548][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.903420][T13641] sd 0:0:1:0: device reset [ 701.175141][ T30] audit: type=1400 audit(2000000000.757:3796): avc: denied { set_context_mgr } for pid=13635 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 701.425380][ T30] audit: type=1400 audit(2000000001.524:3797): avc: denied { setopt } for pid=13633 comm="syz.0.1995" lport=55874 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 701.877273][ T30] audit: type=1400 audit(2000000002.010:3798): avc: denied { create } for pid=13629 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 701.936417][ T30] audit: type=1400 audit(2000000002.057:3799): avc: denied { ioctl } for pid=13629 comm="syz.1.1994" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 702.276383][ T30] audit: type=1400 audit(2000000002.103:3800): avc: denied { connect } for pid=13629 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.312499][ T30] audit: type=1400 audit(2000000002.103:3801): avc: denied { write } for pid=13629 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 702.337292][ T30] audit: type=1400 audit(2000000002.290:3802): avc: denied { mount } for pid=13649 comm="syz.4.1999" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 702.727461][T13662] net veth1_virt_wifi : renamed from virt_wifi0 [ 703.039013][T13671] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 703.214839][T13676] IPVS: sh: FWM 3 0x00000003 - no destination available [ 703.729047][ T5896] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 703.789208][T13671] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2006'. [ 703.875008][T13671] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 703.940407][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 703.947631][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.242308][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.279813][ T5896] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 704.313359][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.399373][T13699] netlink: 'syz.3.2012': attribute type 29 has an invalid length. [ 704.407416][T13699] netlink: 'syz.3.2012': attribute type 3 has an invalid length. [ 704.415534][T13699] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2012'. [ 704.693442][ T5896] usb 3-1: config 0 descriptor?? [ 705.105360][ T5866] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 705.185333][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.263166][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.282382][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 705.328638][ T5866] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 705.389920][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.449453][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 705.475650][ T5866] usb 2-1: Product: syz [ 705.481070][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 705.488885][ T5866] usb 2-1: Manufacturer: syz [ 705.494823][ T5866] usb 2-1: SerialNumber: syz [ 705.502604][ T5896] usb 3-1: USB disconnect, device number 76 [ 705.523729][ T5866] usb 2-1: config 0 descriptor?? [ 705.540682][ T5866] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 705.927867][T13705] Bluetooth: hci5: Frame reassembly failed (-84) [ 706.270479][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 706.270495][ T30] audit: type=1400 audit(2000000006.105:3821): avc: denied { map } for pid=13741 comm="syz.2.2026" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 706.457188][ T30] audit: type=1400 audit(2000000006.152:3822): avc: denied { execute } for pid=13741 comm="syz.2.2026" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 706.615934][T13750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2027'. [ 707.452564][ T30] audit: type=1400 audit(2000000006.442:3823): avc: denied { write } for pid=13743 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 707.520191][ T30] audit: type=1326 audit(2000000007.218:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 707.647173][ T30] audit: type=1326 audit(2000000007.218:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 707.685402][T13768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13768 comm=syz.3.2034 [ 707.705701][ T30] audit: type=1326 audit(2000000007.218:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6223f8d810 code=0x7ffc0000 [ 707.730056][ T30] audit: type=1326 audit(2000000007.218:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 707.753966][ T30] audit: type=1326 audit(2000000007.218:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 707.785272][ T30] audit: type=1326 audit(2000000007.218:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 707.933976][ T30] audit: type=1326 audit(2000000007.218:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13704 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 708.131820][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 708.423854][T13786] Bluetooth: MGMT ver 1.23 [ 708.817341][ T5866] usb 2-1: clie_3_5_startup: get config number failed: -110 [ 708.824892][ T5866] visor 2-1:0.0: probe with driver visor failed with error -110 [ 708.870422][ T5866] usb 2-1: USB disconnect, device number 50 [ 709.352817][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2043'. [ 711.473554][T13838] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2055'. [ 711.585322][T13842] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 711.699057][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 711.699068][ T30] audit: type=1400 audit(2000000011.190:3859): avc: denied { map } for pid=13844 comm="syz.4.2058" path="socket:[47217]" dev="sockfs" ino=47217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.782064][ T30] audit: type=1400 audit(2000000011.190:3860): avc: denied { read } for pid=13844 comm="syz.4.2058" path="socket:[47217]" dev="sockfs" ino=47217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.839852][T13848] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 711.857895][T13848] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 711.920433][ T5866] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 712.400447][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 712.448020][ T5866] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 712.468422][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.718428][ T5866] usb 2-1: config 0 descriptor?? [ 712.970850][ T5866] usb 2-1: string descriptor 0 read error: -71 [ 712.998333][ T5888] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 713.056864][ T5866] usb 2-1: interface 1 not found [ 713.080671][ T5866] usb 2-1: USB disconnect, device number 51 [ 713.222766][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 713.229352][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 713.242269][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 713.258329][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.277888][ T5888] usb 3-1: Product: syz [ 713.286727][ T5888] usb 3-1: Manufacturer: syz [ 713.295185][ T5888] usb 3-1: SerialNumber: syz [ 713.311853][ T5888] usb 3-1: config 0 descriptor?? [ 713.327891][ T5888] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 713.353534][ T5888] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 713.974446][ T5888] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 714.413202][ T5888] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 714.949440][ T5888] em28xx 3-1:0.0: board has no eeprom [ 715.172594][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 715.195133][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 715.237860][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 715.283705][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 715.303966][T13886] ceph: No mds server is up or the cluster is laggy [ 715.651653][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 715.657964][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 715.702147][ T30] audit: type=1400 audit(2000000014.930:3861): avc: denied { listen } for pid=13885 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 715.888775][ T30] audit: type=1400 audit(2000000015.107:3862): avc: denied { mount } for pid=13895 comm="syz.3.2072" name="/" dev="ramfs" ino=48226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 716.381211][ T5888] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 716.389138][ T5888] em28xx 3-1:0.0: dvb set to bulk mode. [ 716.425630][ T5866] em28xx 3-1:0.0: Binding DVB extension [ 716.441503][ T5888] usb 3-1: USB disconnect, device number 77 [ 716.510631][ T5888] em28xx 3-1:0.0: Disconnecting em28xx [ 716.697660][ T5866] em28xx 3-1:0.0: Registering input extension [ 716.716540][ T5888] em28xx 3-1:0.0: Closing input extension [ 716.793876][ T30] audit: type=1400 audit(2000000015.874:3863): avc: denied { read write } for pid=13916 comm="syz.2.2077" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 716.868889][ T5888] em28xx 3-1:0.0: Freeing device [ 716.897364][ T30] audit: type=1400 audit(2000000015.883:3864): avc: denied { open } for pid=13916 comm="syz.2.2077" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 717.170383][ T30] audit: type=1400 audit(2000000016.304:3865): avc: denied { create } for pid=13919 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 717.200569][ T30] audit: type=1400 audit(2000000016.304:3866): avc: denied { write } for pid=13919 comm="syz.0.2078" path="socket:[48285]" dev="sockfs" ino=48285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 717.554257][ T30] audit: type=1400 audit(2000000016.538:3867): avc: denied { name_bind } for pid=13925 comm="syz.2.2080" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 718.085177][T13930] overlayfs: failed to clone upperpath [ 719.417349][T13950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.618924][ T30] audit: type=1400 audit(2000000018.595:3868): avc: denied { bind } for pid=13953 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 719.749177][ T30] audit: type=1400 audit(2000000018.614:3869): avc: denied { setopt } for pid=13953 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 719.834874][ T30] audit: type=1400 audit(2000000018.707:3870): avc: denied { create } for pid=13953 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 720.008381][ T30] audit: type=1400 audit(2000000018.707:3871): avc: denied { setopt } for pid=13953 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 720.150166][ T30] audit: type=1400 audit(2000000018.847:3872): avc: denied { view } for pid=13958 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 720.388493][ T5866] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 720.613150][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 721.044836][ T5866] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 721.445900][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 721.498974][ T5866] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 721.555411][ T5866] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.590240][ T5866] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 721.723039][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.173984][ T5888] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 722.358348][ T5888] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 722.367894][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.390096][ T5888] usb 3-1: config 0 descriptor?? [ 722.406399][ T5866] usb 4-1: usb_control_msg returned -32 [ 722.423533][ T5866] usbtmc 4-1:16.0: can't read capabilities [ 722.632712][T13992] No source specified [ 722.662435][T13995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 723.139340][T13999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2101'. [ 723.285658][ T5888] usb 3-1: string descriptor 0 read error: -71 [ 723.492795][ T5888] usb 3-1: USB disconnect, device number 78 [ 723.637440][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 725.002341][ T30] audit: type=1400 audit(2000000023.317:3873): avc: denied { append } for pid=14008 comm="syz.2.2105" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 725.025468][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.060519][ T30] audit: type=1400 audit(2000000023.401:3874): avc: denied { create } for pid=14008 comm="syz.2.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 726.349450][T14030] netlink: 'syz.4.2110': attribute type 10 has an invalid length. [ 726.395777][T14030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2110'. [ 726.430229][T14030] bridge0: port 4(team0) entered blocking state [ 726.460794][T14030] bridge0: port 4(team0) entered disabled state [ 726.498581][T14030] bridge0: port 4(team0) entered blocking state [ 726.504902][T14030] bridge0: port 4(team0) entered forwarding state [ 726.517629][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 726.636948][T11165] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 726.807462][T11165] usb 3-1: Using ep0 maxpacket: 32 [ 726.847260][T11165] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 726.886660][T14046] overlayfs: conflicting options: userxattr,metacopy=on [ 726.912729][T11165] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 726.951075][T11165] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.993822][T11165] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 727.052990][T11165] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 727.067695][T11165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.085906][T11165] usb 3-1: Product: syz [ 727.090836][T11165] usb 3-1: Manufacturer: syz [ 727.095654][T11165] usb 3-1: SerialNumber: syz [ 727.132406][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 727.168474][T11165] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input57 [ 727.233856][ T30] audit: type=1400 audit(2000000025.710:3875): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=3704 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.280121][ T30] audit: type=1400 audit(2000000025.720:3876): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3704 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.338631][ T30] audit: type=1400 audit(2000000025.720:3877): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3704 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 727.404029][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.464383][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.488040][ T30] audit: type=1400 audit(2000000025.944:3878): avc: denied { load_policy } for pid=14031 comm="syz.2.2111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 727.517940][T14032] SELinux: failed to load policy [ 727.554268][T11165] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 727.572038][T11165] (id 0x00) [ 727.704005][T11165] rc_core: IR keymap rc-imon-pad not found [ 727.709940][T11165] Registered IR keymap rc-empty [ 727.718262][T11165] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 727.745705][T11165] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 727.775999][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.800065][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.814298][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.833763][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.925167][T11165] imon:send_packet: packet tx failed (-71) [ 727.938027][ T5888] usb 4-1: USB disconnect, device number 59 [ 727.993034][T11165] imon 3-1:155.0: remote input dev register failed [ 728.016312][T11165] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 728.126133][T11165] imon 3-1:155.0: unable to initialize intf0, err 0 [ 728.143495][T11165] imon:imon_probe: failed to initialize context! [ 728.154089][T11165] imon 3-1:155.0: unable to register, err -19 [ 728.174784][T11165] usb 3-1: USB disconnect, device number 79 [ 728.880302][T14081] tmpfs: Unknown parameter 'grpquota-contr ' [ 728.973887][T14083] FAULT_INJECTION: forcing a failure. [ 728.973887][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 728.986721][T14083] CPU: 1 UID: 0 PID: 14083 Comm: syz.1.2128 Not tainted syzkaller #0 PREEMPT(full) [ 728.986749][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 728.986761][T14083] Call Trace: [ 728.986769][T14083] [ 728.986777][T14083] dump_stack_lvl+0x16c/0x1f0 [ 728.986812][T14083] should_fail_ex+0x512/0x640 [ 728.986836][T14083] ? fs_reclaim_acquire+0xae/0x150 [ 728.986862][T14083] should_failslab+0xc2/0x120 [ 728.986887][T14083] __kmalloc_noprof+0xdd/0x880 [ 728.986913][T14083] ? rcu_is_watching+0x12/0xc0 [ 728.986940][T14083] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 728.986971][T14083] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 728.986994][T14083] tomoyo_realpath_from_path+0xc2/0x6e0 [ 728.987021][T14083] ? tomoyo_profile+0x47/0x60 [ 728.987051][T14083] tomoyo_path_number_perm+0x245/0x580 [ 728.987080][T14083] ? tomoyo_path_number_perm+0x237/0x580 [ 728.987115][T14083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 728.987145][T14083] ? find_held_lock+0x2b/0x80 [ 728.987204][T14083] ? find_held_lock+0x2b/0x80 [ 728.987228][T14083] ? hook_file_ioctl_common+0x145/0x410 [ 728.987265][T14083] ? __fget_files+0x20e/0x3c0 [ 728.987292][T14083] security_file_ioctl+0x9b/0x240 [ 728.987316][T14083] __x64_sys_ioctl+0xb7/0x210 [ 728.987352][T14083] do_syscall_64+0xcd/0xfa0 [ 728.987384][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.987405][T14083] RIP: 0033:0x7f6223f8efc9 [ 728.987423][T14083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.987443][T14083] RSP: 002b:00007f6224d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.987464][T14083] RAX: ffffffffffffffda RBX: 00007f62241e6180 RCX: 00007f6223f8efc9 [ 728.987478][T14083] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 728.987491][T14083] RBP: 00007f6224d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 728.987505][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.987517][T14083] R13: 00007f62241e6218 R14: 00007f62241e6180 R15: 00007ffc5318ef98 [ 728.987550][T14083] [ 729.194534][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.203116][T14083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 729.371226][ T30] audit: type=1400 audit(2000000027.711:3879): avc: denied { read } for pid=14088 comm="syz.0.2130" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 729.458778][T14089] futex_wake_op: syz.0.2130 tries to shift op by -1; fix this program [ 730.031780][ T30] audit: type=1400 audit(2000000028.282:3880): avc: denied { setopt } for pid=14066 comm="syz.2.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 730.051284][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.292500][T14092] binder: 14066:14092 ioctl c0306201 200000000080 returned -14 [ 733.067354][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 733.091124][T14144] netlink: 'syz.4.2140': attribute type 20 has an invalid length. [ 733.099360][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2143'. [ 733.212310][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2140'. [ 733.417476][ T30] audit: type=1400 audit(2000000031.395:3881): avc: denied { append } for pid=14149 comm="syz.1.2145" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 733.440379][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.736840][ T30] audit: type=1400 audit(2000000031.395:3882): avc: denied { ioctl } for pid=14149 comm="syz.1.2145" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 733.767514][ T30] audit: type=1400 audit(2000000031.395:3883): avc: denied { write } for pid=14149 comm="syz.1.2145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 733.831635][T14157] netlink: 'syz.3.2146': attribute type 15 has an invalid length. [ 733.844444][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 733.861666][ T9850] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 733.861769][T14157] netlink: 'syz.3.2146': attribute type 15 has an invalid length. [ 733.880939][ T9850] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 733.898179][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 734.046679][ T9850] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 734.524539][ T9797] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 734.679686][ T30] audit: type=1326 audit(2000000032.676:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6223f8efc9 code=0x7ffc0000 [ 734.703995][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.715124][ T30] audit: type=1326 audit(2000000032.704:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6223f8d810 code=0x7ffc0000 [ 734.738616][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.748152][ T30] audit: type=1326 audit(2000000032.704:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8ebcb code=0x7ffc0000 [ 734.781857][ T30] audit: type=1326 audit(2000000032.704:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8ebcb code=0x7ffc0000 [ 734.811758][ T30] audit: type=1326 audit(2000000032.704:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8ebcb code=0x7ffc0000 [ 734.836666][ T30] audit: type=1326 audit(2000000032.704:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8ebcb code=0x7ffc0000 [ 734.861381][ T30] audit: type=1326 audit(2000000032.826:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6223f8ebcb code=0x7ffc0000 [ 734.884744][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.976890][ T44] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 734.999857][T14174] overlayfs: missing 'lowerdir' [ 735.718373][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.837604][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.849096][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.859103][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.876985][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.886104][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.896540][ T44] usb 2-1: config 0 descriptor?? [ 736.871622][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2156'. [ 737.071833][ T44] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 737.128014][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2157'. [ 737.170618][T14196] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 737.186324][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 737.212220][T11165] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 737.212988][ T9797] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.228937][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 737.254808][ T9797] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.317822][ T9797] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.370717][ T9797] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.406849][T11165] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.408004][ T24] usb 2-1: USB disconnect, device number 52 [ 737.427024][T11165] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 737.462194][T11165] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 737.497333][T11165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.524078][T11165] usb 4-1: config 0 descriptor?? [ 738.006889][ T24] usb 4-1: USB disconnect, device number 60 [ 739.507371][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 739.507388][ T30] audit: type=1326 audit(2000000037.192:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3403f8efc9 code=0x7ffc0000 [ 739.543950][ T30] audit: type=1326 audit(2000000037.201:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3403f8d810 code=0x7ffc0000 [ 739.575775][ T30] audit: type=1326 audit(2000000037.201:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3403f8ebcb code=0x7ffc0000 [ 739.599618][ T30] audit: type=1326 audit(2000000037.201:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3403f8ebcb code=0x7ffc0000 [ 739.628559][ T30] audit: type=1326 audit(2000000037.201:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3403f8ebcb code=0x7ffc0000 [ 739.659543][ T30] audit: type=1326 audit(2000000037.201:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3403f8ebcb code=0x7ffc0000 [ 739.875396][ T5929] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 739.895085][ T30] audit: type=1400 audit(2000000037.370:3939): avc: denied { ioctl } for pid=14217 comm="syz.3.2166" path="socket:[47956]" dev="sockfs" ino=47956 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 739.959526][ T30] audit: type=1400 audit(2000000037.370:3940): avc: denied { getopt } for pid=14217 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 739.964288][ T30] audit: type=1400 audit(2000000037.445:3941): avc: denied { connect } for pid=14217 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 739.964331][ T30] audit: type=1326 audit(2000000037.482:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz.2.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3403f8ebcb code=0x7ffc0000 [ 740.138289][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.162343][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.190751][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 740.287074][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.370108][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.387479][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.411589][ T5929] usb 3-1: config 0 descriptor?? [ 740.498063][T14230] veth3: entered promiscuous mode [ 741.030039][ T5929] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 742.559579][T11165] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 742.618724][ T24] usb 3-1: USB disconnect, device number 80 [ 742.662920][T14266] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2179'. [ 742.705133][T14266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2179'. [ 742.741453][T11165] usb 2-1: Using ep0 maxpacket: 32 [ 742.763452][T11165] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 742.784389][T11165] usb 2-1: config 0 has no interface number 0 [ 742.797027][T11165] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 742.810790][T11165] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 742.828153][T11165] usb 2-1: Product: syz [ 742.835839][T11165] usb 2-1: Manufacturer: syz [ 742.845165][T11165] usb 2-1: SerialNumber: syz [ 742.863536][T11165] usb 2-1: config 0 descriptor?? [ 742.880732][T11165] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 742.899337][T11165] usb 2-1: selecting invalid altsetting 1 [ 742.910967][T11165] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 743.268013][T11165] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 743.299297][T11165] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 743.321042][T11165] usb 2-1: media controller created [ 743.347553][T11165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.372412][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 743.536364][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 743.545700][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.653991][ T24] usb 3-1: Product: syz [ 743.662249][ T24] usb 3-1: Manufacturer: syz [ 743.674823][ T24] usb 3-1: SerialNumber: syz [ 744.119692][ T24] usb 3-1: config 0 descriptor?? [ 744.172690][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 744.176568][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 744.495792][T11165] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 744.569563][T14259] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 744.577714][T11165] zl10353_read_register: readreg error (reg=127, ret==-110) [ 745.714925][T11165] usb 2-1: USB disconnect, device number 53 [ 746.442547][ T24] gspca_sunplus: reg_r err -110 [ 746.447481][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 746.474633][ T30] kauditd_printk_skb: 687 callbacks suppressed [ 746.474649][ T30] audit: type=1400 audit(2000000043.709:4630): avc: denied { module_load } for pid=14300 comm="syz.4.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 746.500684][T14301] Invalid ELF header type: 3 != 1 [ 746.789791][ T30] audit: type=1400 audit(2000000043.999:4631): avc: denied { read } for pid=14309 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.067788][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 747.257544][T14315] tipc: Started in network mode [ 747.262672][T14315] tipc: Node identity 82dbb4fa7797, cluster identity 4711 [ 747.272256][T14315] tipc: Enabled bearer , priority 0 [ 747.533471][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 747.582642][ T5929] usb 3-1: USB disconnect, device number 81 [ 747.833127][T14322] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 748.463351][ T5985] tipc: Node number set to 4115444986 [ 748.493254][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 748.517073][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 748.523765][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 748.533689][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.554041][ T24] usb 2-1: config 0 descriptor?? [ 748.567021][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 748.688168][ T44] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 748.837657][ T5929] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 748.849480][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 748.919620][ T44] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 748.928742][ T44] usb 4-1: config 1 has no interface number 1 [ 748.938250][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 748.954537][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 748.963776][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.973551][ T44] usb 4-1: Product: syz [ 748.978416][ T44] usb 4-1: Manufacturer: syz [ 748.983263][ T44] usb 4-1: SerialNumber: syz [ 749.000655][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.010883][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.023833][ T5929] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 749.034152][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.045593][ T5929] usb 3-1: config 0 descriptor?? [ 749.058343][ T5929] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 749.064789][ T5929] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 749.432570][T14315] syzkaller0: entered promiscuous mode [ 749.438191][ T30] audit: type=1400 audit(2000000046.467:4632): avc: denied { ioctl } for pid=14325 comm="syz.2.2196" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 749.463247][T14315] syzkaller0: entered allmulticast mode [ 749.689115][T14315] tipc: Resetting bearer [ 749.796997][T14314] tipc: Resetting bearer [ 749.811444][ T24] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 749.898161][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 749.918551][ T5985] usb 3-1: USB disconnect, device number 82 [ 749.930865][T14314] tipc: Disabling bearer [ 749.931740][ T24] usb 2-1: USB disconnect, device number 54 [ 750.031337][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 750.126958][ T30] audit: type=1326 audit(2000000047.094:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 750.162058][ T30] audit: type=1326 audit(2000000047.094:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 750.216708][ T30] audit: type=1326 audit(2000000047.094:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 750.352624][ T30] audit: type=1326 audit(2000000047.094:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 750.376580][ T30] audit: type=1326 audit(2000000047.094:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 750.533076][ T30] audit: type=1326 audit(2000000047.094:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 751.348564][ T44] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 751.415246][ T30] audit: type=1326 audit(2000000047.094:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb98efc9 code=0x7ffc0000 [ 751.493986][T14352] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2206'. [ 751.627884][T10074] Bluetooth: unknown link type 128 [ 751.725640][ T44] usb 4-1: USB disconnect, device number 61 [ 751.935324][ T7620] udevd[7620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.026119][T14365] batadv_slave_0: entered promiscuous mode [ 752.440512][ T5888] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 752.538620][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 752.538637][ T30] audit: type=1400 audit(2000000049.366:4643): avc: denied { write } for pid=14362 comm="syz.2.2209" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 752.570094][T14363] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 752.570094][T14363] program syz.2.2209 not setting count and/or reply_len properly [ 752.634457][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 752.641230][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.656249][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.763148][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.776469][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 752.785806][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.833438][ T5888] usb 2-1: config 0 descriptor?? [ 753.319099][ T30] audit: type=1400 audit(2000000050.058:4644): avc: denied { map } for pid=14373 comm="syz.3.2212" path="/proc/1514/net/fib_trie" dev="proc" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 753.720798][ T30] audit: type=1400 audit(2000000050.067:4645): avc: denied { execute } for pid=14373 comm="syz.3.2212" path="/proc/1514/net/fib_trie" dev="proc" ino=4026532995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 753.827741][T10074] Bluetooth: hci2: command tx timeout [ 754.315794][T14390] tipc: New replicast peer: 255.255.255.255 [ 754.323425][T14390] tipc: Enabled bearer , priority 10 [ 755.099616][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 755.127867][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 755.148066][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 755.161498][ T30] audit: type=1400 audit(2000000051.797:4646): avc: denied { ioctl } for pid=14385 comm="syz.0.2215" path="socket:[49290]" dev="sockfs" ino=49290 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.177639][ T5888] usb 2-1: USB disconnect, device number 55 [ 755.461185][T11165] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 756.002441][ T30] audit: type=1400 audit(2000000052.348:4647): avc: denied { read } for pid=14401 comm="syz.2.2221" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 756.013822][T11165] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 756.034871][ T30] audit: type=1400 audit(2000000052.348:4648): avc: denied { open } for pid=14401 comm="syz.2.2221" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 756.072655][T11165] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 756.080821][ T30] audit: type=1400 audit(2000000052.348:4649): avc: denied { ioctl } for pid=14401 comm="syz.2.2221" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 756.126992][T11165] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 756.142235][T11165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.657192][T14394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.677613][T14394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.755291][T11165] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 756.832930][T11165] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input61 [ 756.856213][T11165] input: failed to attach handler kbd to device input61, error: -5 [ 756.913212][T11165] usb 4-1: USB disconnect, device number 62 [ 757.194892][ T30] audit: type=1400 audit(2000000053.732:4650): avc: denied { create } for pid=14417 comm="syz.2.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 757.244235][ T30] audit: type=1400 audit(2000000053.751:4651): avc: denied { bind } for pid=14417 comm="syz.2.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 757.363925][ T5888] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 757.402731][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 757.534587][ T5888] usb 2-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df [ 757.544798][T14420] fuse: Unknown parameter 'user_id00000000000000000000' [ 757.551838][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.577943][ T5888] usb 2-1: config 0 descriptor?? [ 757.601308][ T5888] gspca_main: benq-2.14.0 probing 04a5:3035 [ 758.102591][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 759.581133][ T30] audit: type=1400 audit(2000000055.958:4652): avc: denied { setopt } for pid=14455 comm="syz.3.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 760.001312][T14462] tmpfs: Unknown parameter 'grpqota_inode_hardlimit' [ 760.031192][T11165] IPVS: starting estimator thread 0... [ 760.181835][T14463] IPVS: using max 42 ests per chain, 100800 per kthread [ 760.367430][T11165] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 760.410417][ T30] audit: type=1400 audit(2000000056.734:4653): avc: denied { read } for pid=14466 comm="syz.0.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 760.437613][T14467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.552655][T11165] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 760.569928][T11165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.577980][T11165] usb 3-1: Product: syz [ 760.582194][T11165] usb 3-1: Manufacturer: syz [ 760.586783][T11165] usb 3-1: SerialNumber: syz [ 760.599589][T11165] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 760.609406][ T30] audit: type=1400 audit(2000000056.921:4654): avc: denied { firmware_load } for pid=5888 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 760.637498][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 760.650830][ T5888] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 760.807074][ T24] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 760.815219][ T24] usb 4-1: config 1 has no interface number 0 [ 760.821454][ T24] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 760.833154][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 760.843086][ T24] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.856440][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 760.865825][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.883751][ T24] usb 4-1: Product: syz [ 760.890357][T11165] usb 3-1: USB disconnect, device number 83 [ 760.894681][ T24] usb 4-1: Manufacturer: syz [ 760.907530][ T24] usb 4-1: SerialNumber: syz [ 760.927622][T14469] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 760.950283][ T5866] usb 2-1: USB disconnect, device number 56 [ 761.057583][ T30] audit: type=1400 audit(2000000057.341:4655): avc: denied { write } for pid=14472 comm="syz.0.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.155027][T14469] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 761.171042][ T30] audit: type=1400 audit(2000000057.444:4656): avc: denied { mount } for pid=14475 comm="syz.1.2245" name="/" dev="overlay" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 761.537774][ T30] audit: type=1400 audit(2000000057.706:4657): avc: denied { write } for pid=14477 comm="syz.0.2246" path="socket:[50433]" dev="sockfs" ino=50433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 761.770497][ T24] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 761.789906][ T5888] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 761.799490][ T5888] ath9k_htc: Failed to initialize the device [ 761.807138][T11165] usb 3-1: ath9k_htc: USB layer deinitialized [ 761.990762][ T24] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 762.112604][ T30] audit: type=1400 audit(2000000058.304:4658): avc: denied { map } for pid=14486 comm="syz.4.2248" path="socket:[50510]" dev="sockfs" ino=50510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 762.138555][ T24] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 762.170440][ T30] audit: type=1400 audit(2000000058.304:4659): avc: denied { accept } for pid=14486 comm="syz.4.2248" path="socket:[50510]" dev="sockfs" ino=50510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 762.178847][ T24] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 762.254852][ T30] audit: type=1400 audit(2000000058.445:4660): avc: denied { create } for pid=14494 comm="syz.0.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 762.282248][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2250'. [ 762.302796][ T24] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 762.367221][ T24] usb 4-1: USB disconnect, device number 63 [ 762.442930][ T24] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 762.476518][T14492] fuse: Unknown parameter 'user_id00000000000000000000' [ 762.545999][ T24] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 763.277503][ T30] audit: type=1400 audit(2000000059.408:4661): avc: denied { shutdown } for pid=14499 comm="syz.0.2252" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 763.939380][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 764.655885][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 764.817950][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 764.849176][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 764.859734][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 764.868870][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 764.880229][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 764.947687][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 764.957923][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 764.988340][ T24] usb 2-1: Product: syz [ 764.998138][ T24] usb 2-1: Manufacturer: syz [ 765.003461][T14532] No source specified [ 765.022262][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 765.038350][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 765.054027][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 765.066063][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 765.097666][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 765.097682][ T30] audit: type=1400 audit(2000000061.119:4664): avc: denied { connect } for pid=14531 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.143200][ T30] audit: type=1400 audit(2000000061.137:4665): avc: denied { read } for pid=14531 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.193990][ T30] audit: type=1400 audit(2000000061.194:4666): avc: denied { write } for pid=14531 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.268708][ T30] audit: type=1400 audit(2000000061.278:4667): avc: denied { read write } for pid=14523 comm="syz.1.2259" name="cdc-wdm0" dev="devtmpfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 765.445408][ T30] audit: type=1400 audit(2000000061.278:4668): avc: denied { open } for pid=14523 comm="syz.1.2259" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 765.486104][ T30] audit: type=1400 audit(2000000061.474:4669): avc: denied { ioctl } for pid=14523 comm="syz.1.2259" path="socket:[50623]" dev="sockfs" ino=50623 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 766.164062][ T30] audit: type=1400 audit(2000000062.110:4670): avc: denied { ioctl } for pid=14523 comm="syz.1.2259" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3772 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 766.189463][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.229083][ T5985] usb 2-1: USB disconnect, device number 57 [ 766.669158][T14551] x_tables: duplicate underflow at hook 2 [ 766.891208][T11165] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 767.148449][T11165] usb 3-1: Using ep0 maxpacket: 16 [ 767.479065][T11165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.490456][T11165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.500290][T11165] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 767.509508][T11165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.521098][T11165] usb 3-1: config 0 descriptor?? [ 767.678619][T14565] x_tables: duplicate underflow at hook 2 [ 767.920389][T14577] overlayfs: missing 'lowerdir' [ 768.025444][T11165] kye 0003:0458:5016.001C: control desc unexpectedly large [ 768.082299][T11165] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001C/input/input62 [ 768.087129][T14568] fuse: Unknown parameter 'user_id00000000000000000000' [ 768.605401][T14584] erofs (device nbd2): cannot find valid erofs superblock [ 768.852358][T11165] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.001C/input/input63 [ 769.158800][T11165] kye 0003:0458:5016.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 769.345805][ T30] audit: type=1400 audit(2000000064.962:4671): avc: denied { connect } for pid=14585 comm="syz.1.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 769.715663][ T30] audit: type=1400 audit(2000000065.429:4672): avc: denied { ioctl } for pid=14597 comm="syz.0.2282" path="socket:[49673]" dev="sockfs" ino=49673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.842803][T14607] netlink: 'syz.1.2286': attribute type 6 has an invalid length. [ 769.851297][ T30] audit: type=1400 audit(2000000065.560:4673): avc: denied { bind } for pid=14602 comm="syz.3.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 770.099767][ T5985] usb 3-1: reset high-speed USB device number 84 using dummy_hcd [ 770.107921][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 770.121219][ T5896] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 770.283511][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 770.292770][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.302902][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 770.310843][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.323146][ T24] usb 4-1: config 0 descriptor?? [ 770.324706][ T5896] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 770.344047][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.352456][ T5896] usb 2-1: Product: syz [ 770.361074][ T5896] usb 2-1: Manufacturer: syz [ 770.365957][ T5896] usb 2-1: SerialNumber: syz [ 770.377448][ T5896] usb 2-1: config 0 descriptor?? [ 770.387106][ T5896] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 770.641864][ T5896] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 770.648998][ T5896] quatech2 2-1:0.0: probe with driver quatech2 failed with error -8 [ 770.806372][ T24] kye 0003:0458:0153.001D: hidraw1: USB HID v1.01 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0 [ 770.864107][T14607] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2286'. [ 770.888200][ T30] audit: type=1400 audit(2000000066.523:4674): avc: denied { map } for pid=14606 comm="syz.1.2286" path="socket:[49707]" dev="sockfs" ino=49707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 770.914564][ T5896] usb 2-1: USB disconnect, device number 58 [ 770.963101][ T30] audit: type=1400 audit(2000000066.523:4675): avc: denied { read } for pid=14606 comm="syz.1.2286" path="socket:[49707]" dev="sockfs" ino=49707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 771.029304][ T24] usb 4-1: USB disconnect, device number 64 [ 771.059511][T14620] fido_id[14620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 771.065843][ T30] audit: type=1400 audit(2000000066.560:4676): avc: denied { read write } for pid=14617 comm="syz.2.2289" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 771.109734][ T30] audit: type=1400 audit(2000000066.560:4677): avc: denied { open } for pid=14617 comm="syz.2.2289" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 771.383792][ T44] usb 3-1: USB disconnect, device number 84 [ 771.509871][T14626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2290'. [ 771.719014][T14628] macsec1: entered promiscuous mode [ 771.735032][T14628] macsec1: entered allmulticast mode [ 771.917473][T14638] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 771.976265][T14638] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 773.145723][ T30] audit: type=1400 audit(2000000068.617:4678): avc: denied { ioctl } for pid=14653 comm="syz.0.2300" path="socket:[50851]" dev="sockfs" ino=50851 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 774.205888][ T30] audit: type=1400 audit(2000000068.842:4679): avc: denied { map } for pid=14668 comm="syz.3.2307" path="socket:[49834]" dev="sockfs" ino=49834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 774.260421][T14677] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 775.248986][ T30] audit: type=1400 audit(2000000070.609:4680): avc: denied { write } for pid=14682 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 775.718271][ T30] audit: type=1400 audit(2000000071.048:4681): avc: denied { accept } for pid=14691 comm="syz.0.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 775.753471][T14695] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2313'. [ 776.551466][ T5985] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 777.052335][ T5985] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 777.079731][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.103474][ T5985] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 777.230591][ T5985] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 777.239396][T14720] x_tables: duplicate underflow at hook 2 [ 777.245344][ T5985] usb 3-1: Manufacturer: syz [ 777.839939][ T5985] usb 3-1: config 0 descriptor?? [ 778.463278][ T5985] rc_core: IR keymap rc-hauppauge not found [ 778.505877][ T5985] Registered IR keymap rc-empty [ 778.522464][ T5985] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 778.535272][ T5985] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input64 [ 778.641677][ T5985] usb 3-1: USB disconnect, device number 85 [ 778.705632][T14745] FAULT_INJECTION: forcing a failure. [ 778.705632][T14745] name failslab, interval 1, probability 0, space 0, times 0 [ 778.718842][T14745] CPU: 1 UID: 0 PID: 14745 Comm: syz.2.2328 Not tainted syzkaller #0 PREEMPT(full) [ 778.718866][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 778.718882][T14745] Call Trace: [ 778.718889][T14745] [ 778.718896][T14745] dump_stack_lvl+0x116/0x1f0 [ 778.718926][T14745] should_fail_ex+0x512/0x640 [ 778.718950][T14745] should_failslab+0xc2/0x120 [ 778.718970][T14745] kmem_cache_alloc_noprof+0x75/0x6e0 [ 778.718996][T14745] ? __send_signal_locked+0x159/0x12c0 [ 778.719019][T14745] ? __send_signal_locked+0x159/0x12c0 [ 778.719036][T14745] __send_signal_locked+0x159/0x12c0 [ 778.719060][T14745] send_sig+0xd7/0x170 [ 778.719081][T14745] ? __pfx_send_sig+0x10/0x10 [ 778.719102][T14745] ? __pfx_woken_wake_function+0x10/0x10 [ 778.719128][T14745] sk_stream_error+0xb8/0x120 [ 778.719150][T14745] tcp_sendmsg_locked+0xea7/0x42e0 [ 778.719171][T14745] ? avc_has_perm+0x144/0x1f0 [ 778.719198][T14745] ? __lock_acquire+0xb8a/0x1c90 [ 778.719230][T14745] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 778.719252][T14745] ? do_raw_spin_lock+0x12c/0x2b0 [ 778.719271][T14745] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 778.719296][T14745] ? __local_bh_enable_ip+0xa4/0x120 [ 778.719320][T14745] tcp_sendmsg+0x2e/0x50 [ 778.719336][T14745] ? __pfx_tcp_sendmsg+0x10/0x10 [ 778.719354][T14745] inet6_sendmsg+0xb9/0x140 [ 778.719381][T14745] ____sys_sendmsg+0x705/0xc70 [ 778.719408][T14745] ? copy_msghdr_from_user+0x10a/0x160 [ 778.719429][T14745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.719458][T14745] ? __pfx__kstrtoull+0x10/0x10 [ 778.719490][T14745] ___sys_sendmsg+0x134/0x1d0 [ 778.719513][T14745] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.719547][T14745] ? find_held_lock+0x2b/0x80 [ 778.719584][T14745] __sys_sendmmsg+0x200/0x420 [ 778.719609][T14745] ? __pfx___sys_sendmmsg+0x10/0x10 [ 778.719640][T14745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 778.719677][T14745] ? fput+0x9b/0xd0 [ 778.719698][T14745] ? ksys_write+0x1ac/0x250 [ 778.719714][T14745] ? __pfx_ksys_write+0x10/0x10 [ 778.719735][T14745] __x64_sys_sendmmsg+0x9c/0x100 [ 778.719755][T14745] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.719779][T14745] do_syscall_64+0xcd/0xfa0 [ 778.719805][T14745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.719822][T14745] RIP: 0033:0x7f3403f8efc9 [ 778.719837][T14745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.719852][T14745] RSP: 002b:00007f3404d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 778.719869][T14745] RAX: ffffffffffffffda RBX: 00007f34041e5fa0 RCX: 00007f3403f8efc9 [ 778.719887][T14745] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 778.719898][T14745] RBP: 00007f3404d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 778.719909][T14745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.719919][T14745] R13: 00007f34041e6038 R14: 00007f34041e5fa0 R15: 00007ffd5ea15818 [ 778.719947][T14745] [ 780.679811][T14776] comedi comedi1: ni_at_a2150: I/O port conflict (0x8001,28) [ 780.734859][ T30] audit: type=1400 audit(2000000075.714:4682): avc: denied { watch } for pid=14774 comm="syz.2.2338" path="/49/file1" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 780.936344][ T30] audit: type=1400 audit(2000000075.714:4683): avc: denied { watch_sb watch_reads } for pid=14774 comm="syz.2.2338" path="/49/file1" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 781.157584][T14781] bond0: Removing last arp target with arp_interval on [ 781.166572][T14781] bond0: entered promiscuous mode [ 781.171633][T14781] bond0: entered allmulticast mode [ 781.177023][T14781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.457982][T11165] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 781.914387][T11165] usb 4-1: Using ep0 maxpacket: 16 [ 781.941335][T11165] usb 4-1: unable to get BOS descriptor or descriptor too short [ 781.953030][T11165] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 781.971190][T11165] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 781.973135][T14794] netlink: 755 bytes leftover after parsing attributes in process `syz.0.2342'. [ 782.145542][T11165] usb 4-1: config 13 has no interface number 0 [ 782.152352][T11165] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 782.162738][T11165] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 782.172814][T11165] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 782.183763][T11165] usb 4-1: config 13 interface 50 has no altsetting 0 [ 782.195998][T11165] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 782.205051][T11165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.227987][T11165] usb 4-1: Product: syz [ 782.232174][T11165] usb 4-1: Manufacturer: syz [ 782.236766][T11165] usb 4-1: SerialNumber: syz [ 782.699266][T14781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 782.818964][ T30] audit: type=1400 audit(2000000077.687:4684): avc: denied { execute_no_trans } for pid=14797 comm="syz.1.2345" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 783.055778][T11165] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.070957][T11165] usb 4-1: MIDIStreaming interface descriptor not found [ 783.186238][T11165] usb 4-1: USB disconnect, device number 65 [ 783.288196][ T7620] udevd[7620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.430878][T14807] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 784.085808][ T30] audit: type=1400 audit(2000000078.865:4685): avc: denied { map } for pid=14810 comm="syz.3.2350" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 785.546947][ T30] audit: type=1400 audit(2000000080.127:4686): avc: denied { ioctl } for pid=14823 comm="syz.1.2354" path="socket:[51111]" dev="sockfs" ino=51111 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 785.572935][T14828] x_tables: duplicate underflow at hook 2 [ 786.372511][T14835] bond0: (slave caif0): Error: Device type is different from other slaves [ 786.854352][ T30] audit: type=1400 audit(2000000081.044:4687): avc: denied { create } for pid=14834 comm="syz.0.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 786.874305][ T30] audit: type=1400 audit(2000000081.062:4688): avc: denied { sys_admin } for pid=14834 comm="syz.0.2356" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 786.895451][ T30] audit: type=1400 audit(2000000081.062:4689): avc: denied { associate } for pid=14836 comm="syz.0.2356" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 788.884458][T14840] fuse: Bad value for 'fd' [ 789.278415][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 789.803321][ T30] audit: type=1326 audit(2000000084.213:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 789.873545][ T30] audit: type=1326 audit(2000000084.213:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 789.930579][ T30] audit: type=1326 audit(2000000084.213:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 789.981315][ T30] audit: type=1326 audit(2000000084.213:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 790.025830][ T30] audit: type=1326 audit(2000000084.213:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 790.075578][ T30] audit: type=1326 audit(2000000084.213:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 790.100565][ T30] audit: type=1326 audit(2000000084.213:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04d58efc9 code=0x7ffc0000 [ 791.144546][T14886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.290129][T14886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.438397][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 792.438413][ T30] audit: type=1400 audit(2000000086.682:4736): avc: denied { open } for pid=14906 comm="syz.2.2378" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 792.749591][T14886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.074369][T14916] wg1: entered promiscuous mode [ 793.079279][T14916] wg1: entered allmulticast mode [ 793.794000][T14886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.721772][ T9797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.730002][ T9797] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.779334][ T9797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.794255][ T9797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.183323][T14955] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 795.566063][ T30] audit: type=1400 audit(2000000089.590:4737): avc: denied { write } for pid=14952 comm="syz.3.2390" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 795.728069][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.325550][T14993] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 798.124478][T14995] overlay: ./file1 is not a directory [ 798.266639][T15000] FAULT_INJECTION: forcing a failure. [ 798.266639][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 798.308230][T15000] CPU: 1 UID: 0 PID: 15000 Comm: syz.2.2405 Not tainted syzkaller #0 PREEMPT(full) [ 798.308260][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 798.308272][T15000] Call Trace: [ 798.308279][T15000] [ 798.308288][T15000] dump_stack_lvl+0x16c/0x1f0 [ 798.308323][T15000] should_fail_ex+0x512/0x640 [ 798.308346][T15000] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 798.308372][T15000] should_failslab+0xc2/0x120 [ 798.308396][T15000] __kvmalloc_node_noprof+0x141/0x9c0 [ 798.308420][T15000] ? bpf_test_run_xdp_live+0x139/0x770 [ 798.308446][T15000] ? find_held_lock+0x2b/0x80 [ 798.308483][T15000] ? bpf_test_run_xdp_live+0x139/0x770 [ 798.308508][T15000] bpf_test_run_xdp_live+0x139/0x770 [ 798.308535][T15000] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 798.308564][T15000] ? find_held_lock+0x2b/0x80 [ 798.308595][T15000] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 798.308640][T15000] ? bpf_dispatcher_xdp+0x800/0x1000 [ 798.308662][T15000] ? bpf_dispatcher_xdp+0x800/0x1000 [ 798.308681][T15000] ? bpf_dispatcher_xdp+0x800/0x1000 [ 798.308699][T15000] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 798.308733][T15000] bpf_prog_test_run_xdp+0xd38/0x1660 [ 798.308768][T15000] ? __fget_files+0x204/0x3c0 [ 798.308790][T15000] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 798.308819][T15000] ? __might_fault+0xb0/0x190 [ 798.308853][T15000] ? fput+0x9b/0xd0 [ 798.308878][T15000] ? __bpf_prog_get+0x97/0x2a0 [ 798.308902][T15000] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 798.308930][T15000] __sys_bpf+0x1035/0x4980 [ 798.308964][T15000] ? __pfx___sys_bpf+0x10/0x10 [ 798.308991][T15000] ? find_held_lock+0x2b/0x80 [ 798.309021][T15000] ? find_held_lock+0x2b/0x80 [ 798.309053][T15000] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 798.309102][T15000] ? fput+0x9b/0xd0 [ 798.309126][T15000] ? ksys_write+0x1ac/0x250 [ 798.309144][T15000] ? __pfx_ksys_write+0x10/0x10 [ 798.309169][T15000] __x64_sys_bpf+0x78/0xc0 [ 798.309199][T15000] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.309227][T15000] do_syscall_64+0xcd/0xfa0 [ 798.309258][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.309280][T15000] RIP: 0033:0x7f3403f8efc9 [ 798.309296][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.309315][T15000] RSP: 002b:00007f3404d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.309335][T15000] RAX: ffffffffffffffda RBX: 00007f34041e5fa0 RCX: 00007f3403f8efc9 [ 798.309349][T15000] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 798.309362][T15000] RBP: 00007f3404d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.309374][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.309386][T15000] R13: 00007f34041e6038 R14: 00007f34041e5fa0 R15: 00007ffd5ea15818 [ 798.309415][T15000] [ 798.906813][T15003] x_tables: duplicate underflow at hook 2 [ 800.396587][T15013] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 800.410994][T15016] : entered promiscuous mode [ 800.471837][T15013] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 800.602084][T15028] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 800.603019][T15026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 800.619181][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 800.655983][T15028] openvswitch: netlink: Flow key attr not present in new flow. [ 800.762837][T11165] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 800.901866][T11165] usb 2-1: device descriptor read/64, error -71 [ 801.054304][ T30] audit: type=1400 audit(2000000094.741:4738): avc: denied { read } for pid=15042 comm="syz.4.2419" path="socket:[52577]" dev="sockfs" ino=52577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 801.179905][T11165] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 801.205510][T15055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 801.223436][ T44] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 801.329825][T11165] usb 2-1: device descriptor read/64, error -71 [ 801.384961][ T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 801.404750][ T44] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 801.417413][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 801.497706][T11165] usb usb2-port1: attempt power cycle [ 801.508587][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 801.574655][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 801.638612][ T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 801.648397][ T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 801.657139][ T44] usb 4-1: Product: syz [ 801.661637][ T44] usb 4-1: Manufacturer: syz [ 801.675303][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 801.681114][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 801.690561][ T44] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 801.696828][ T44] cdc_wdm 4-1:1.0: Unknown control protocol [ 802.062924][T11165] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 802.117220][T11165] usb 2-1: device descriptor read/8, error -71 [ 802.164111][ T44] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 802.388470][T11165] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 802.508684][ T5896] usb 4-1: USB disconnect, device number 66 [ 802.564529][T11165] usb 2-1: device descriptor read/8, error -71 [ 802.666505][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 802.704349][ T44] usb 3-1: config 0 has no interfaces? [ 802.725777][T11165] usb usb2-port1: unable to enumerate USB device [ 802.742749][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 802.774266][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 802.791143][ T44] usb 3-1: Manufacturer: syz [ 802.821805][ T44] usb 3-1: config 0 descriptor?? [ 803.817303][ T30] audit: type=1400 audit(2000000096.901:4739): avc: denied { ioctl } for pid=15091 comm="syz.3.2432" path="socket:[52657]" dev="sockfs" ino=52657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 804.340883][ T30] audit: type=1400 audit(2000000096.901:4740): avc: denied { connect } for pid=15091 comm="syz.3.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 804.401353][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 804.442374][T15077] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2429'. [ 804.451528][T15077] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2429'. [ 804.509009][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.543100][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 804.555272][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.565046][T15097] netlink: 'syz.2.2429': attribute type 10 has an invalid length. [ 804.574785][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'. [ 804.574890][ T30] audit: type=1400 audit(2000000098.023:4741): avc: denied { listen } for pid=15099 comm="syz.3.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 804.585180][T15097] openvswitch: netlink: Flow key attr not present in new flow. [ 804.641585][ T30] audit: type=1400 audit(2000000098.079:4742): avc: denied { accept } for pid=15099 comm="syz.3.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 804.668439][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 804.763981][ T30] audit: type=1400 audit(2000000098.154:4743): avc: denied { sqpoll } for pid=15104 comm="syz.4.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 805.256270][T15112] smc: removing ib device syz2 [ 805.584180][ T30] audit: type=1400 audit(2000000098.659:4744): avc: denied { write } for pid=15104 comm="syz.4.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 806.667909][T15112] ------------[ cut here ]------------ [ 806.673449][T15112] WARNING: CPU: 0 PID: 15112 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 806.684386][T15112] Modules linked in: [ 806.692251][T15112] CPU: 0 UID: 0 PID: 15112 Comm: syz.4.2437 Not tainted syzkaller #0 PREEMPT(full) [ 806.701720][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.711817][T15112] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 806.717264][T15112] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 28 38 f9 e8 40 28 38 f9 90 <0f> 0b 90 5b e9 36 28 38 f9 e8 e1 b4 a0 f9 eb da 66 66 2e 0f 1f 84 [ 806.737021][T15112] RSP: 0018:ffffc9000465f1b8 EFLAGS: 00010246 [ 806.743142][T15112] RAX: 0000000000080000 RBX: ffff888078429358 RCX: ffffc9000d7fc000 [ 806.751113][T15112] RDX: 0000000000080000 RSI: ffffffff8884e350 RDI: ffff8880784293d8 [ 806.759098][T15112] RBP: ffffffff888347f0 R08: 0000000000000005 R09: 0000000000000001 [ 806.767077][T15112] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888078428698 [ 806.775058][T15112] R13: ffff888078427fe0 R14: ffff888078427fe0 R15: ffff8880784290b8 [ 806.783004][T15112] FS: 00007fd04e45e6c0(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 806.791962][T15112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.798558][T15112] CR2: 00007f707a4ea445 CR3: 000000003d32c000 CR4: 00000000003526f0 [ 806.806543][T15112] Call Trace: [ 806.809802][T15112] [ 806.812710][T15112] rxe_dealloc+0x25/0xc0 [ 806.816952][T15112] ib_dealloc_device+0x49/0x230 [ 806.821780][T15112] __ib_unregister_device+0x396/0x480 [ 806.827155][T15112] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 806.833027][T15112] ib_unregister_device_and_put+0x5a/0x80 [ 806.838752][T15112] nldev_dellink+0x21f/0x320 [ 806.843319][T15112] ? __pfx_nldev_dellink+0x10/0x10 [ 806.848466][T15112] ? cap_capable+0xb3/0x250 [ 806.852950][T15112] ? bpf_lsm_capable+0x9/0x10 [ 806.857599][T15112] ? security_capable+0x7e/0x260 [ 806.862548][T15112] ? ns_capable+0xd7/0x110 [ 806.866938][T15112] ? __pfx_nldev_dellink+0x10/0x10 [ 806.872104][T15112] rdma_nl_rcv_msg+0x38a/0x6e0 [ 806.876842][T15112] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 806.882123][T15112] ? __lock_acquire+0x622/0x1c90 [ 806.887042][T15112] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 806.893453][T15112] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 806.900366][T15112] ? netlink_deliver_tap+0x1ae/0xd30 [ 806.905660][T15112] netlink_unicast+0x5aa/0x870 [ 806.910406][T15112] ? __pfx_netlink_unicast+0x10/0x10 [ 806.915690][T15112] netlink_sendmsg+0x8c8/0xdd0 [ 806.920433][T15112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.925731][T15112] ____sys_sendmsg+0xa98/0xc70 [ 806.930477][T15112] ? copy_msghdr_from_user+0x10a/0x160 [ 806.935928][T15112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.941194][T15112] ? __pfx_futex_wake_mark+0x10/0x10 [ 806.946473][T15112] ___sys_sendmsg+0x134/0x1d0 [ 806.951126][T15112] ? futex_private_hash_put+0x176/0x300 [ 806.956690][T15112] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.961862][T15112] ? __lock_acquire+0x622/0x1c90 [ 806.966837][T15112] __sys_sendmsg+0x16d/0x220 [ 806.971405][T15112] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.976495][T15112] ? __x64_sys_futex+0x1e0/0x4c0 [ 806.981436][T15112] do_syscall_64+0xcd/0xfa0 [ 806.985919][T15112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.991818][T15112] RIP: 0033:0x7fd04d58efc9 [ 806.996207][T15112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.015812][T15112] RSP: 002b:00007fd04e45e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.024220][T15112] RAX: ffffffffffffffda RBX: 00007fd04d7e6090 RCX: 00007fd04d58efc9 [ 807.032204][T15112] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 807.040152][T15112] RBP: 00007fd04d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 807.048119][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.056081][T15112] R13: 00007fd04d7e6128 R14: 00007fd04d7e6090 R15: 00007ffdd3f6e928 [ 807.064049][T15112] [ 807.067044][T15112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 807.074297][T15112] CPU: 0 UID: 0 PID: 15112 Comm: syz.4.2437 Not tainted syzkaller #0 PREEMPT(full) [ 807.083634][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 807.093659][T15112] Call Trace: [ 807.096911][T15112] [ 807.099817][T15112] dump_stack_lvl+0x3d/0x1f0 [ 807.104388][T15112] vpanic+0x640/0x6f0 [ 807.108350][T15112] ? rxe_pool_cleanup+0x41/0x60 [ 807.113172][T15112] panic+0xca/0xd0 [ 807.116871][T15112] ? __pfx_panic+0x10/0x10 [ 807.121270][T15112] check_panic_on_warn+0xab/0xb0 [ 807.126186][T15112] __warn+0xf6/0x3c0 [ 807.130052][T15112] ? rxe_pool_cleanup+0x41/0x60 [ 807.134879][T15112] report_bug+0x3c3/0x580 [ 807.139184][T15112] ? rxe_pool_cleanup+0x41/0x60 [ 807.144009][T15112] handle_bug+0x184/0x210 [ 807.148309][T15112] exc_invalid_op+0x17/0x50 [ 807.152784][T15112] asm_exc_invalid_op+0x1a/0x20 [ 807.157607][T15112] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 807.163036][T15112] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 28 38 f9 e8 40 28 38 f9 90 <0f> 0b 90 5b e9 36 28 38 f9 e8 e1 b4 a0 f9 eb da 66 66 2e 0f 1f 84 [ 807.182616][T15112] RSP: 0018:ffffc9000465f1b8 EFLAGS: 00010246 [ 807.188654][T15112] RAX: 0000000000080000 RBX: ffff888078429358 RCX: ffffc9000d7fc000 [ 807.196603][T15112] RDX: 0000000000080000 RSI: ffffffff8884e350 RDI: ffff8880784293d8 [ 807.204545][T15112] RBP: ffffffff888347f0 R08: 0000000000000005 R09: 0000000000000001 [ 807.212489][T15112] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888078428698 [ 807.220430][T15112] R13: ffff888078427fe0 R14: ffff888078427fe0 R15: ffff8880784290b8 [ 807.228378][T15112] ? __pfx_rxe_dealloc+0x10/0x10 [ 807.233299][T15112] ? rxe_pool_cleanup+0x40/0x60 [ 807.238140][T15112] ? rxe_pool_cleanup+0x40/0x60 [ 807.242960][T15112] rxe_dealloc+0x25/0xc0 [ 807.247173][T15112] ib_dealloc_device+0x49/0x230 [ 807.251996][T15112] __ib_unregister_device+0x396/0x480 [ 807.257340][T15112] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 807.263212][T15112] ib_unregister_device_and_put+0x5a/0x80 [ 807.268908][T15112] nldev_dellink+0x21f/0x320 [ 807.273472][T15112] ? __pfx_nldev_dellink+0x10/0x10 [ 807.278601][T15112] ? cap_capable+0xb3/0x250 [ 807.283082][T15112] ? bpf_lsm_capable+0x9/0x10 [ 807.287730][T15112] ? security_capable+0x7e/0x260 [ 807.292644][T15112] ? ns_capable+0xd7/0x110 [ 807.297033][T15112] ? __pfx_nldev_dellink+0x10/0x10 [ 807.302117][T15112] rdma_nl_rcv_msg+0x38a/0x6e0 [ 807.306854][T15112] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 807.312114][T15112] ? __lock_acquire+0x622/0x1c90 [ 807.317033][T15112] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 807.323422][T15112] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 807.330337][T15112] ? netlink_deliver_tap+0x1ae/0xd30 [ 807.335601][T15112] netlink_unicast+0x5aa/0x870 [ 807.340344][T15112] ? __pfx_netlink_unicast+0x10/0x10 [ 807.345611][T15112] netlink_sendmsg+0x8c8/0xdd0 [ 807.350351][T15112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.355619][T15112] ____sys_sendmsg+0xa98/0xc70 [ 807.360364][T15112] ? copy_msghdr_from_user+0x10a/0x160 [ 807.365812][T15112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.371093][T15112] ? __pfx_futex_wake_mark+0x10/0x10 [ 807.376376][T15112] ___sys_sendmsg+0x134/0x1d0 [ 807.381040][T15112] ? futex_private_hash_put+0x176/0x300 [ 807.386572][T15112] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.391750][T15112] ? __lock_acquire+0x622/0x1c90 [ 807.396689][T15112] __sys_sendmsg+0x16d/0x220 [ 807.401255][T15112] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.406342][T15112] ? __x64_sys_futex+0x1e0/0x4c0 [ 807.411261][T15112] do_syscall_64+0xcd/0xfa0 [ 807.415744][T15112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.421610][T15112] RIP: 0033:0x7fd04d58efc9 [ 807.426005][T15112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.445583][T15112] RSP: 002b:00007fd04e45e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.453970][T15112] RAX: ffffffffffffffda RBX: 00007fd04d7e6090 RCX: 00007fd04d58efc9 [ 807.461913][T15112] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 807.469856][T15112] RBP: 00007fd04d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 807.477803][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.485748][T15112] R13: 00007fd04d7e6128 R14: 00007fd04d7e6090 R15: 00007ffdd3f6e928 [ 807.493702][T15112] [ 807.496924][T15112] Kernel Offset: disabled [ 807.501230][T15112] Rebooting in 86400 seconds..