last executing test programs: 1m26.80798503s ago: executing program 1 (id=324): rseq(0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019880)=""/102380, 0xffcb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x8100, &(0x7f0000000240)={0xc, 0x0, 0x1e0000, {r4}}, 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440)={0x3000, 0x8000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000003c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYBLOB="0a58f5205674e72aecf3ee3f73cd68b0d34247a216ab6a96b2", @ANYBLOB="7f1b224b87de310f5217331c83f105451310f239c0be3dd03529337537607c76f6b0ebb0b2e18b06ddf005f4822e44ce31e2f93efe9de6ca5d492fad7196f0c59b64f57de9c90004039e22ffaf09be421fb0985aeb0abfb7effb9ecee2e06450ac66516090bf3ee0a8d93252ac5b39f5921d6ae0481ba417636b1e8a5e0224d98d83be29b5cd60e3da66d5a8b4e9a9a7cbeeb5318830269856527abaeb2569a08054e3a39205544d8f4f4bde9fa5b140f9fa", @ANYRESDEC=r3, @ANYBLOB="c1772103239d8e92075631b939cb18d2f9ff4db6b1314b764cc31e3d7f64e8619e795c7cbb57e4e76a6995c4282f90229ad6fabcce95357194cc1bba666131df6f52397b6175d309a9ce5d3b6afc3a6bd43e32c9b46ea7ee319c2e0207ebdcf1fcdc0c2053c811d0bcd6b371cd9a97b3fa71d9e8dd58a7ae109c161b7bd3f4b2036deca8b9f66754b22445763e8c8f9177b8a05599089f03196c29fa50c10a412609da8ce51abce7729c43f7d816bdabf6648a875721df03a05c7abb0f47a4e76886f2d776da0ae7d3f6f7ec4ce0feb17ef1ae731b25d4d556f898f58a48d1652911e23d6b8903736f9a31be", @ANYRES64=r4], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) dup(r0) mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) 1m26.465956808s ago: executing program 1 (id=326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="00e1000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) 1m25.59795989s ago: executing program 1 (id=330): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x400000000000000}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x3) write$bt_hci(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m25.010209948s ago: executing program 1 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet_mptcp(0x2, 0x1, 0x106) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40200, 0x0) socket$unix(0x1, 0x1, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0xff88}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1m23.785599007s ago: executing program 1 (id=339): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x6, 0x24, @mcast1, @loopback, 0x7, 0x80, 0x7, 0x9}}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) (async, rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x3, 0x28}, 0xc) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0x0, 0x2, 0x8}, 0xc) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000d00), 0x10d200) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x16, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x6, 0x2, 0x0, r5}, @alu={0x7, 0x1, 0xb, 0x8, 0x9, 0xfffffffffffffff4}, @ldst={0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x58, &(0x7f0000000700)=""/88, 0x41000, 0x0, '\x00', r6, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0x0, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)=[0x1, 0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000000d80)=[{0x4, 0x4, 0xa, 0xa}, {0x3, 0x1, 0x1, 0x4}, {0x2, 0x1, 0x2, 0x2}, {0x2, 0x4, 0x6, 0x6}, {0x4, 0x5, 0x8}, {0x2, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0xe}, 0x94) (async) r12 = syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x40, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "3198c652"}, {0x5, 0x24, 0x0, 0x60}, {0xd, 0x24, 0xf, 0x1, 0x8b, 0x200, 0x9, 0xc}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x0, [0xb]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xf9, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf, 0x1}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x6, 0x9, 0x2, 0x20, 0x2}, 0x35, &(0x7f0000000100)={0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0xa, 0xfffb}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7ff, 0x0, 0x52ce, [0x7e00, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x1, 0x0, 0x4, 0x4}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x40, 0xc, 0x48, {0x48, 0xd, "83a6c550bc4349a16672781f349142ebef399da5445cd9001a84812c726191f787f6977dbfe13b9e864ac9aab501ffd38d1292081fdf501ce1b9a2b83bc0a41aa1e53bc94de1"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000300)={0x0, 0x1, 0x76, "d8e1724f5e90f39193bf166b43de9bbac8e6ff4aea978981979021f470158d960ce20c3b5fe10823e0f9fae228499e0d5ef777987d0df94dd8ef3872bc47d5c449d769952282e9fa2deb44b19f5322b91e0f2c3af51ee533b6da300371b933fa1370cf2b92eee7295085d4bbff159032fa4b9de05ecb"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x23}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xd}}) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m21.57487584s ago: executing program 1 (id=347): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_clone3(&(0x7f0000000500)={0x8000400, &(0x7f0000000080), &(0x7f0000000180), 0x0, {0xd}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m6.19237916s ago: executing program 32 (id=347): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_clone3(&(0x7f0000000500)={0x8000400, &(0x7f0000000080), &(0x7f0000000180), 0x0, {0xd}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.588176327s ago: executing program 5 (id=567): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe800000000000f000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/101], 0x13c}}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4080, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x28) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 10.418425382s ago: executing program 2 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 10.052897294s ago: executing program 2 (id=570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@prinfo={0x14, 0x84, 0x5, {0x24f787d6bdf656a7, 0x4b1}}], 0x14, 0x840}, 0x4000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) fanotify_mark(0xffffffffffffffff, 0x601, 0x30, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r5, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@local}, {@my=0x0, 0x2800000}, 0x400, "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"}, 0x418}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0x2, 0x100059a, 0xbfc4bb97dfede4bd}) 7.81443661s ago: executing program 4 (id=574): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x3f}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r5 = accept$phonet_pipe(r1, &(0x7f0000000300), &(0x7f0000000340)=0x10) recvmsg(r5, &(0x7f00000007c0)={&(0x7f0000000440)=@caif=@dbg, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/134, 0x86}], 0x5, &(0x7f0000000780)=""/16, 0x10}, 0x12021) 7.267818083s ago: executing program 2 (id=576): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="23f00004000000080000000c00"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000400)=@x25={0x9, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/194, 0xc2}], 0x5}, 0x4}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x4, {0x9, 0x1, 0x80, 0xfffffffa}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kvm_ioapic_set_irq\x00'}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000c80)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="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"], 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0x18, 0x30, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) 7.246171732s ago: executing program 5 (id=577): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001180)={0x2c, &(0x7f0000000fc0)={0x20, 0xc, 0x1c, {0x1c, 0xf, "aa13c1e0c30541c237109ee7b257be3533e72decaa6eb34ae071"}}, 0x0, &(0x7f00000010c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x200, 0xf00, 0x2, [0xcf, 0xff0000, 0xf]}]}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x40, 0x5, "fef73c68", "5090fa4b"}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0xff, 0x6, 0x2, 0x400, 0x3}}}, &(0x7f00000015c0)={0x84, &(0x7f00000011c0)={0x40, 0x17, 0x7, "e0deda0ab19dbf"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xff00]}}, &(0x7f0000001300)={0x40, 0x7, 0x2, 0xf001}, &(0x7f0000001340)={0x40, 0x9, 0x1}, &(0x7f0000001380)={0x40, 0xb, 0x2, '4t'}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="5f6d48fc1a71"}, &(0x7f0000001440)={0x40, 0x17, 0x6, @random="ad3cef8a8e68"}, &(0x7f0000001480)={0x40, 0x19, 0x2, "cb94"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000001680)={0x0, 0xf, 0xfc, {0xfc, 0x11, "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"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000006c0)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0xd, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0xd0fd, 0xff00, 0xfff7, [0xc030, 0xff0030, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b85f2e2617687d6eb4790f72cab4974c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "b3c2f652c3b2b5f40e961512c1379e47"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc9, 0x2, 0xa, 0xdd, "f7de915c", "1eed1994"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x4, 0x30, 0x4, 0x2, 0x5, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0xa, 0x1, 'a'}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, 'M}'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "babb"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x20, 0xb, 0xf9, {0xf9, 0x1, "65ae2434bb5ff242232bcbca97b586f71b0126b906367811041b536e6e30cf2b378edb2b0929304a9e3c36da6e148fb29ab7d8f78e31a9688eb6e83c890bd3689ecfdb729ccf831960f11a6696b84b8aaab6dff737e3540c96e21e342a3cb1f55074963ebdbf55e6adb7c22c02290b71d0b3be2858ca91f456b954157fc756dd0e4e3c82030ebff52fb740219b83358188c44031816d14a57ec6f664696a7a554127b5fc9a8713b8f54c2499d900c92edebcaa269cca324c1cb78115ab9d1c37c7a2b6af77499522da121af7812a5726c6e3193f866290cd6177698c5d902ffc83dfcdd9753911a839821789c73aafaa8eac4a1bbfc0c6"}}, &(0x7f0000000100)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "8df09a9b825303a7e46aaefa31f13641dfb056f5fe4635ba9578b1f6ba5650c0551172e761741d4aad344f9b97c915e1044a72b62f80e7b34ddd94567f775f9ce559bf8a65f2b287a7316862cd0b1f0de9dd85805da76347401671ea17e5f168cda66dd9cbf25ba9dab61b2ad15c89482c259e3d3e355b92857b7a540a2b57ba5e53bb390c94dc7b2ea27e3ce60bea6db79bf5cbf54a489c418a0272f0d4c3bdf9d7a3a52b35e89dbfdae5d5f461b76b6fae1b230ec150dfc0"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x0, 0xe, 0xb9, "959a3a40321bd9faaa5435fbf93ab4684ded6e25035f9bf1acdd7e9a0e38f5ed408717e3cd82cfb567ff9962d0e892e17813441c8c96aebd611c27e8ac2a819be3b9a0afd4100ea4b3b9786f624ea00e132f81b77dc1ef33be3b4e46ef17eb10633f5fe2f1ed66a0760e8d4d653a34704743979ae785964c8187f48048949fdd440a4e54792bdf59924f4d629569a73f5f45f46172b4391c9819eb34bdeb2f81db1ea733599516e2af881e549e88daf1ac62e053c8204525cb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0xf8, {0xf6, "c6cfed0556f1e48b6aacd70a0df2ce4773798a03949ad0bde46cc5a362640a3a597545614e5b0a2c1f8114e67cb71295e1a820a46b97a4000e9f169b3d7ca266706efed022a8b537ee65cc3588d42d102a1c8bd90888f1eb50fb2e1a3317dc124761b41b96fc361fc1f42b884b48c61ad16a14b8121048dd129a57d481e2d3573b1df1178ae72bc27f84d2fcf0c78fba5f5694a72af156be8b7917da57d40a2a4066a66cb6fb0550eaa2f0b05365cf2dd49fbd49e8190149bc7ca8432108aed549c1a42bd641eaf904cb15d8ad57b6151f3fe7fe18bcabe643afa25ba3a5705d77ca422abb31653b7196582914ec67a3049a903bfffd"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000cc0)={0x40, 0xf, 0x93, {0x93, 0x23, "01b77c379fbe3381b5a3a07c61c13c569f8a32db6ad3a2b3427f114ccdb4cb91eb9802f0b26fe35128f7098fc91b9e1e88b3185a685f2d41fc7922979e69f05946b0c548fea7dfe4737bc070d974dfcaaf9b424995c4edc25bb9bb2a35c9ce2c768af27772090dc50b83135c2ae2f0b70db1d8a23aa95a894a35f26fad946c05fedaf3323a2ff9eb04e921090691c3a25a"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000e00)={0x20, 0x15, 0x77, "11d2809ec26212d102ab28dbaa6b3efbd6b969ec66e74eb63dd6bf6ea1985b94d367bb79ad1ebe13b556174c456ada01614572dd803e58d45790329e3164de5a857c5f5afbc517f0935f673a110bd2f74bcdb83daa8086308d1490a7834bb5fe85e4792ea86d859377b3748547dac0bb287e28fe7fe711"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000f00)={0xc0, 0x5, 0x3, "f485a7"}, &(0x7f0000000f40)={0x40, 0x5, 0x2, "3b89"}}) 7.201825669s ago: executing program 4 (id=578): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2b}}, './file0\x00'}) connect$unix(r0, 0x0, 0xffffffffffffff4d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) dup3(r2, r1, 0x0) modify_ldt$write(0x1, &(0x7f0000000240)={0xd6, 0x1000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x1fffffffffe, &(0x7f0000000280)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e740a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f49638af78cd0b6cc0956fd12d29590c6eee14a6c7bc9d5d9c26915315ab4f01f3b278e780") ptrace$cont(0x21, r3, 0x80000001, 0x4) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)='fd/3\x00', 0x5, 0x1) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x24d, 0x3, 0x6, 0x4, 0xf3, "3b2e4acfb6c0991c7a4706da15a6c3a488faeb", 0x0, 0x2}) 7.075828445s ago: executing program 0 (id=579): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x60, 0x0, 0xffffffffffffffb6, 0x20000841}, 0x8010) timer_create(0x3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = gettid() sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x80) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r7, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r6, 0x8) 6.110621413s ago: executing program 0 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4.768691744s ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020001f00000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.477302107s ago: executing program 4 (id=586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b113e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) 4.011344899s ago: executing program 4 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00B\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3.343647186s ago: executing program 0 (id=588): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe800000000080ff00000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/101], 0x13c}}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x4080, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x28) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 3.302383619s ago: executing program 2 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000013c0)}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) umount2(&(0x7f0000000000)='./file0\x00', 0xf) 3.254292094s ago: executing program 3 (id=591): socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000fffffff8000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 3.203255942s ago: executing program 5 (id=592): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000600)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0xff04000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, 0x0, 0x40040c4) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8000, 0x0) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 3.09871163s ago: executing program 3 (id=593): r0 = socket(0x27, 0xa, 0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 3.060016295s ago: executing program 4 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.774002338s ago: executing program 4 (id=595): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x2, 0x1, "6e6a022b19e9a2f416fb109e2be58b281178b8d46c5d87ebcdba051ac8086181", 0x33363248}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x10c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000102c0)=ANY=[@ANYBLOB="1201030195282004eb358452090904f502000000afeb09050f12400002e6010905030c0800090180"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 2.395994107s ago: executing program 5 (id=596): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0xf000000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.174786842s ago: executing program 2 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8=r0, @ANYBLOB="cc1d82b2444233a8d1d81693fcea5787f5cc34b69d5046dfc6bc08442151459fbf5e0c2d91027f3f90fa14fec7de88e850"], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000040)=0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f") ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 1.699864348s ago: executing program 5 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c0004802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}, 0x1, 0x0, 0x0, 0x300}, 0x0) 1.53174322s ago: executing program 2 (id=599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) unshare(0x22000600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x6}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000180)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 970.039466ms ago: executing program 33 (id=599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) unshare(0x22000600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x6}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000180)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 956.907414ms ago: executing program 0 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020003000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 956.374085ms ago: executing program 5 (id=602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001180)={0x2c, &(0x7f0000000fc0)={0x20, 0xc, 0x1c, {0x1c, 0xf, "aa13c1e0c30541c237109ee7b257be3533e72decaa6eb34ae071"}}, 0x0, &(0x7f00000010c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x200, 0xf00, 0x2, [0xcf, 0xff0000, 0xf]}]}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x40, 0x5, "fef73c68", "5090fa4b"}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0xff, 0x6, 0x2, 0x400, 0x3}}}, &(0x7f00000015c0)={0x84, &(0x7f00000011c0)={0x40, 0x17, 0x7, "e0deda0ab19dbf"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1000, 0x40, [0xff00]}}, &(0x7f0000001300)={0x40, 0x7, 0x2, 0xf001}, &(0x7f0000001340)={0x40, 0x9, 0x1}, &(0x7f0000001380)={0x40, 0xb, 0x2, '4t'}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001400)={0x40, 0x13, 0x6, @random="5f6d48fc1a71"}, &(0x7f0000001440)={0x40, 0x17, 0x6, @random="ad3cef8a8e68"}, &(0x7f0000001480)={0x40, 0x19, 0x2, "cb94"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000001680)={0x0, 0xf, 0xfc, {0xfc, 0x11, "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"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000006c0)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0xd, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0xd0fd, 0xff00, 0xfff7, [0xc030, 0xff0030, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b85f2e2617687d6eb4790f72cab4974c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "b3c2f652c3b2b5f40e961512c1379e47"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc9, 0x2, 0xa, 0xdd, "f7de915c", "1eed1994"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x4, 0x30, 0x4, 0x2, 0x5, 0x3}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0xa, 0x1, 'a'}, &(0x7f0000000840)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0xb, 0x2, 'M}'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000a40)={0x40, 0x13, 0x6}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "babb"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x20, 0xb, 0xf9, {0xf9, 0x1, "65ae2434bb5ff242232bcbca97b586f71b0126b906367811041b536e6e30cf2b378edb2b0929304a9e3c36da6e148fb29ab7d8f78e31a9688eb6e83c890bd3689ecfdb729ccf831960f11a6696b84b8aaab6dff737e3540c96e21e342a3cb1f55074963ebdbf55e6adb7c22c02290b71d0b3be2858ca91f456b954157fc756dd0e4e3c82030ebff52fb740219b83358188c44031816d14a57ec6f664696a7a554127b5fc9a8713b8f54c2499d900c92edebcaa269cca324c1cb78115ab9d1c37c7a2b6af77499522da121af7812a5726c6e3193f866290cd6177698c5d902ffc83dfcdd9753911a839821789c73aafaa8eac4a1bbfc0c6"}}, &(0x7f0000000100)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "8df09a9b825303a7e46aaefa31f13641dfb056f5fe4635ba9578b1f6ba5650c0551172e761741d4aad344f9b97c915e1044a72b62f80e7b34ddd94567f775f9ce559bf8a65f2b287a7316862cd0b1f0de9dd85805da76347401671ea17e5f168cda66dd9cbf25ba9dab61b2ad15c89482c259e3d3e355b92857b7a540a2b57ba5e53bb390c94dc7b2ea27e3ce60bea6db79bf5cbf54a489c418a0272f0d4c3bdf9d7a3a52b35e89dbfdae5d5f461b76b6fae1b230ec150dfc0"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x0, 0xe, 0xb9, "959a3a40321bd9faaa5435fbf93ab4684ded6e25035f9bf1acdd7e9a0e38f5ed408717e3cd82cfb567ff9962d0e892e17813441c8c96aebd611c27e8ac2a819be3b9a0afd4100ea4b3b9786f624ea00e132f81b77dc1ef33be3b4e46ef17eb10633f5fe2f1ed66a0760e8d4d653a34704743979ae785964c8187f48048949fdd440a4e54792bdf59924f4d629569a73f5f45f46172b4391c9819eb34bdeb2f81db1ea733599516e2af881e549e88daf1ac62e053c8204525cb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0xf8, {0xf6, "c6cfed0556f1e48b6aacd70a0df2ce4773798a03949ad0bde46cc5a362640a3a597545614e5b0a2c1f8114e67cb71295e1a820a46b97a4000e9f169b3d7ca266706efed022a8b537ee65cc3588d42d102a1c8bd90888f1eb50fb2e1a3317dc124761b41b96fc361fc1f42b884b48c61ad16a14b8121048dd129a57d481e2d3573b1df1178ae72bc27f84d2fcf0c78fba5f5694a72af156be8b7917da57d40a2a4066a66cb6fb0550eaa2f0b05365cf2dd49fbd49e8190149bc7ca8432108aed549c1a42bd641eaf904cb15d8ad57b6151f3fe7fe18bcabe643afa25ba3a5705d77ca422abb31653b7196582914ec67a3049a903bfffd"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000cc0)={0x40, 0xf, 0x93, {0x93, 0x23, "01b77c379fbe3381b5a3a07c61c13c569f8a32db6ad3a2b3427f114ccdb4cb91eb9802f0b26fe35128f7098fc91b9e1e88b3185a685f2d41fc7922979e69f05946b0c548fea7dfe4737bc070d974dfcaaf9b424995c4edc25bb9bb2a35c9ce2c768af27772090dc50b83135c2ae2f0b70db1d8a23aa95a894a35f26fad946c05fedaf3323a2ff9eb04e921090691c3a25a"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000e00)={0x20, 0x15, 0x77, "11d2809ec26212d102ab28dbaa6b3efbd6b969ec66e74eb63dd6bf6ea1985b94d367bb79ad1ebe13b556174c456ada01614572dd803e58d45790329e3164de5a857c5f5afbc517f0935f673a110bd2f74bcdb83daa8086308d1490a7834bb5fe85e4792ea86d859377b3748547dac0bb287e28fe7fe711"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000f00)={0xc0, 0x5, 0x3, "f485a7"}, &(0x7f0000000f40)={0x40, 0x5, 0x2, "3b89"}}) 741.801242ms ago: executing program 3 (id=603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) (fail_nth: 3) 226.765143ms ago: executing program 3 (id=604): socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000080ffffff000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 176.320555ms ago: executing program 3 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 638.638µs ago: executing program 0 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000393ec540457f856a752500000000000000000000950000ebffffff002d5815655d6c282004a7f2747d2578c0866a74c4125302e31a64220cffade4eab8741a0e9ac2ba9bede0cbecbe731bf21890b4c5ed93c535fefbc2b462149b5fd203a8b8eb2416b435ab1616f5862468f22cf3c224137ee1192141459ca7cf0560205b8c49"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) unshare(0x6020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000680)="65b05413c136da92c7e82414d6d044c7ea6f0cfc1db521", 0x17}, {&(0x7f00000006c0)="55c5e8032fcb209599f8c3dac610cc11bf8f2999d090484afd971ca3831e19e66382fa53705da258fe3a48266ffb244c7ceaa656754c1269a4918de5f8e024740543d7422e4d6df9634d37d2397917436e4d774cb3d0e75857e9444b", 0x5c}], 0x2, 0xb) setsockopt$inet_opts(r9, 0x0, 0x16, &(0x7f0000000480)="6558c9b03bf48d795027183bff1a3635c6cdc850a441c7", 0x17) sendmsg$nl_route(r8, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$rtc(&(0x7f0000000640), 0xc000000000000000, 0x242841) ioctl$RTC_WIE_OFF(r12, 0x7010) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e23, @loopback}}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r14 = syz_open_dev$vcsu(&(0x7f0000000440), 0x42, 0x82600) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x85, 0xffffffff, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x66, 0x0, 0xd, 0x2f, 0x0, @broadcast, @loopback, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xf4, [@private=0x6, @loopback, @local, @private=0xa010100, @multicast2]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r16, 0x29, 0x2, 0x7, 0x6, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x10, 0x9, 0xca}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028c67000fddb9b2507000000fb4f630f", @ANYRES32=r17, @ANYBLOB="1400040073797a6b616c6c6572300000000000000800050008000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24044884) ioctl$KVM_XEN_HVM_CONFIG(r14, 0x4038ae7a, &(0x7f0000000600)={0x0, 0x1de, &(0x7f00000004c0)="5fad940163eab625addaa34705c665435c99a2581e02b5444eed0428c1d8121aba20adb38bc87ebf247da2952d195a78a39b7cb119647f934b159226dc6b0f3c1bf2a90a3ac29cb6a6afba6fec533428612127a28c2e1ef20d1f507840c5ada910cf4ae63a6a8e67d55e58426b0ae2841a3ef962c43dde6f0f9d6fded576bd17a1adaf860102d249b97dd58ba51f3389058cf1abfb34be1388e38b632173b57d325cafd0a94d98f5f71cb366d8327748eccc14b0e19d365a5ca2341358c7650e7f14b55ca9ea91e41c500ea2", &(0x7f00000005c0)="5bd9f5391c2c68ed482848dcb872b77c952e241456cec46155330a675d9f88d1e28113cdfd40f7e501645af22ffa371dc940b0ef95", 0xcc, 0x35}) 0s ago: executing program 3 (id=607): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000024000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10000120}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) kernel console output (not intermixed with test programs): wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.955555][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.978047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.212976][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.283329][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.322763][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.349084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.372414][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.455525][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.470278][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.594889][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.625424][ T5993] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.663636][ T78] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.800427][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 68.812493][ T5920] usb 3-1: config 127 has an invalid interface number: 201 but max is 0 [ 68.834910][ T5998] sctp: [Deprecated]: syz.3.4 (pid 5998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.834910][ T5998] Use struct sctp_sack_info instead [ 68.949869][ T5920] usb 3-1: config 127 has no interface number 0 [ 69.480144][ T5920] usb 3-1: config 127 interface 201 has no altsetting 0 [ 69.515297][ T5920] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=2e.05 [ 69.576994][ T5849] Bluetooth: hci0: command tx timeout [ 69.579105][ T5859] Bluetooth: hci1: command tx timeout [ 69.644359][ T5859] Bluetooth: hci4: command tx timeout [ 69.644371][ T5849] Bluetooth: hci3: command tx timeout [ 69.644402][ T5849] Bluetooth: hci2: command tx timeout [ 69.660928][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.672430][ T5920] usb 3-1: Product: syz [ 69.676614][ T5920] usb 3-1: Manufacturer: syz [ 69.681492][ T5920] usb 3-1: SerialNumber: syz [ 69.705612][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 69.705627][ T30] audit: type=1400 audit(1757728482.636:146): avc: denied { create } for pid=6007 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.734005][ T6012] IPVS: stopping master sync thread 6013 ... [ 69.741881][ T6013] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 69.746690][ T30] audit: type=1400 audit(1757728482.636:147): avc: denied { setopt } for pid=6007 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.788288][ T30] audit: type=1400 audit(1757728482.716:148): avc: denied { read write } for pid=6007 comm="syz.4.13" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.821423][ T30] audit: type=1400 audit(1757728482.716:149): avc: denied { open } for pid=6007 comm="syz.4.13" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.847623][ T30] audit: type=1400 audit(1757728482.716:150): avc: denied { ioctl } for pid=6007 comm="syz.4.13" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.098211][ T5920] snd_usb_variax 3-1:127.201: Line 6 Variax Workbench found [ 70.106455][ T5920] usb 3-1: selecting invalid altsetting 1 [ 70.118631][ T5920] snd_usb_variax 3-1:127.201: set_interface failed [ 70.136563][ T5920] snd_usb_variax 3-1:127.201: Line 6 Variax Workbench now disconnected [ 70.145815][ T5920] snd_usb_variax 3-1:127.201: probe with driver snd_usb_variax failed with error -22 [ 70.198282][ T6019] debugfs: 'ttyS3' already exists in 'caif_serial' [ 70.231904][ T5920] usb 3-1: USB disconnect, device number 2 [ 70.297404][ T30] audit: type=1400 audit(1757728483.226:151): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.560754][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.628987][ T30] audit: type=1400 audit(1757728483.226:152): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.680397][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 70.716130][ T10] usb 4-1: device descriptor read/64, error -71 [ 70.788033][ T30] audit: type=1400 audit(1757728483.226:153): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.818298][ T30] audit: type=1400 audit(1757728483.336:154): avc: denied { read open } for pid=6024 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.848533][ T30] audit: type=1400 audit(1757728483.336:155): avc: denied { getattr } for pid=6024 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.917398][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.928518][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.117363][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.280630][ T10] usb 4-1: device descriptor read/64, error -71 [ 71.391286][ T10] usb usb4-port1: attempt power cycle [ 71.463104][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.621083][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 71.645396][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 71.679543][ T9] usb 3-1: config 0 has no interface number 0 [ 71.714692][ T9] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 71.754381][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.783603][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 71.812247][ T10] usb 4-1: device descriptor read/8, error -71 [ 71.823626][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 71.854863][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.893884][ T9] usb 3-1: Product: syz [ 71.909972][ T9] usb 3-1: Manufacturer: syz [ 71.934308][ T9] usb 3-1: SerialNumber: syz [ 71.968877][ T9] usb 3-1: config 0 descriptor?? [ 72.070845][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.110833][ T10] usb 4-1: device descriptor read/8, error -71 [ 72.210088][ T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 72.240475][ T10] usb usb4-port1: unable to enumerate USB device [ 72.859438][ T9] cx231xx 3-1:0.1: Failed to read PCB config [ 72.866225][ T9] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 72.881667][ T9] usb 3-1: USB disconnect, device number 3 [ 73.516679][ T6076] sp0: Synchronizing with TNC [ 73.559490][ T6078] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 73.622443][ T6081] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 73.776148][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 73.828207][ T6048] [U] è [ 74.021256][ T6094] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 74.604596][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.624792][ T6088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.638110][ T6088] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 74.742318][ T6088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.766116][ T6122] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 74.789737][ T6088] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 74.898194][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 74.898227][ T30] audit: type=1400 audit(1757728487.826:215): avc: denied { mount } for pid=6120 comm="syz.1.29" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.136573][ T30] audit: type=1400 audit(1757728488.066:216): avc: denied { create } for pid=6126 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.158339][ T6088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.165524][ T6088] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 75.174326][ T30] audit: type=1400 audit(1757728488.106:217): avc: denied { write } for pid=6126 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.510255][ T6128] binder: Bad value for 'max' [ 75.532713][ T30] audit: type=1400 audit(1757728488.136:218): avc: denied { read } for pid=6119 comm="syz.3.30" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.559660][ T30] audit: type=1400 audit(1757728488.136:219): avc: denied { open } for pid=6119 comm="syz.3.30" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.560426][ T6088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.591315][ T6088] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 75.627853][ T30] audit: type=1400 audit(1757728488.436:220): avc: denied { remount } for pid=6119 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.650209][ T30] audit: type=1400 audit(1757728488.446:221): avc: denied { mounton } for pid=6119 comm="syz.3.30" path="/4" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.682097][ T30] audit: type=1400 audit(1757728488.446:222): avc: denied { ioctl } for pid=6119 comm="syz.3.30" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.893879][ T6088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.904601][ T30] audit: type=1400 audit(1757728488.836:223): avc: denied { add_name } for pid=6087 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.913687][ T6136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14218 sclass=netlink_route_socket pid=6136 comm=syz.4.33 [ 75.928319][ T30] audit: type=1400 audit(1757728488.836:224): avc: denied { create } for pid=6087 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.385325][ T92] cfg80211: failed to load regulatory.db [ 76.390996][ T6088] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 76.419196][ T6136] 9pnet_fd: Insufficient options for proto=fd [ 76.539446][ T6136] netlink: 'syz.4.33': attribute type 10 has an invalid length. [ 76.593008][ T6136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.33'. [ 77.193314][ T6136] team0: Port device geneve0 added [ 77.745289][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48426 sclass=netlink_route_socket pid=6169 comm=syz.3.37 [ 77.980973][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.988494][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.997379][ T6172] UHID_CREATE from different security context by process 22 (syz.2.39), this is not allowed. [ 78.057839][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.065353][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.073625][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.085840][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.095244][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.107432][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.115361][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.122895][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.130924][ T5903] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.147837][ T5903] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 78.235654][ T5920] usb 1-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 78.256450][ T5920] usb 1-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.297508][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.342195][ T5920] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 78.368709][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.383797][ T6177] fido_id[6177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.405256][ T5920] usb 1-1: config 0 descriptor?? [ 78.492357][ T6189] mmap: syz.4.41 (6189) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.629401][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 78.638818][ T6164] netlink: 788 bytes leftover after parsing attributes in process `syz.0.38'. [ 78.649539][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.702664][ T5920] usb 1-1: USB disconnect, device number 2 [ 79.041137][ T6208] Zero length message leads to an empty skb [ 79.068094][ T6208] tipc: Started in network mode [ 79.073382][ T6208] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 79.090278][ T6208] tipc: Enabled bearer , priority 10 [ 80.064115][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 80.070163][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 80.070177][ T30] audit: type=1400 audit(1757728492.996:255): avc: denied { ioctl } for pid=6218 comm="syz.3.46" path="socket:[9314]" dev="sockfs" ino=9314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.124645][ T30] audit: type=1400 audit(1757728493.056:256): avc: denied { ioctl } for pid=6223 comm="syz.2.48" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.170315][ T30] audit: type=1400 audit(1757728493.086:257): avc: denied { set_context_mgr } for pid=6223 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.193307][ T30] audit: type=1400 audit(1757728493.096:258): avc: denied { map } for pid=6223 comm="syz.2.48" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.217651][ T24] tipc: Node number set to 4269801488 [ 80.354431][ T30] audit: type=1400 audit(1757728493.096:259): avc: denied { name_bind } for pid=6223 comm="syz.2.48" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.383602][ T30] audit: type=1400 audit(1757728493.096:260): avc: denied { node_bind } for pid=6223 comm="syz.2.48" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.427203][ T6236] netlink: 596 bytes leftover after parsing attributes in process `syz.0.50'. [ 81.587367][ T30] audit: type=1400 audit(1757728493.206:261): avc: denied { sys_module } for pid=6223 comm="syz.2.48" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.608162][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.671808][ T30] audit: type=1400 audit(1757728494.086:262): avc: denied { watch } for pid=6237 comm="syz.1.51" path="/13/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.694262][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.902091][ T30] audit: type=1400 audit(1757728494.086:263): avc: denied { watch_sb watch_reads } for pid=6237 comm="syz.1.51" path="/13/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.925316][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.032909][ T30] audit: type=1400 audit(1757728494.556:264): avc: denied { read } for pid=6252 comm="syz.1.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.499414][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 82.550336][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.201002][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.224272][ T6355] bridge_slave_1: left allmulticast mode [ 84.242868][ T6355] bridge_slave_1: left promiscuous mode [ 84.253806][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.265595][ T6357] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 84.316109][ T6355] bridge_slave_0: left allmulticast mode [ 84.330856][ T6355] bridge_slave_0: left promiscuous mode [ 84.364735][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.752007][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 85.752024][ T30] audit: type=1400 audit(1757728498.656:287): avc: denied { setattr } for pid=6379 comm="syz.1.69" name="NETLINK" dev="sockfs" ino=9510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.864890][ T30] audit: type=1400 audit(1757728498.746:288): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.970241][ T30] audit: type=1400 audit(1757728498.896:289): avc: denied { open } for pid=6388 comm="syz.0.73" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.994709][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.028451][ T30] audit: type=1400 audit(1757728498.926:290): avc: denied { ioctl } for pid=6388 comm="syz.0.73" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 86.120218][ T5931] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.122419][ T30] audit: type=1400 audit(1757728498.936:291): avc: denied { nlmsg_tty_audit } for pid=6388 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 86.337651][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 86.393116][ T5931] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 86.420978][ T6384] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 86.428528][ T6384] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 86.436398][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.457083][ T30] audit: type=1400 audit(1757728499.346:292): avc: denied { create } for pid=6383 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.468563][ T5931] usb 4-1: Product: syz [ 86.483486][ T5931] usb 4-1: Manufacturer: syz [ 86.488093][ T5931] usb 4-1: SerialNumber: syz [ 86.530851][ T5931] usb 4-1: config 0 descriptor?? [ 86.555776][ T5931] gspca_main: se401-2.14.0 probing 047d:5003 [ 86.709217][ T30] audit: type=1400 audit(1757728499.346:293): avc: denied { bind } for pid=6383 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.728781][ T30] audit: type=1400 audit(1757728499.376:294): avc: denied { write } for pid=6383 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.751981][ T30] audit: type=1400 audit(1757728499.376:295): avc: denied { bind } for pid=6383 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.554441][ T5931] gspca_se401: Frame size: 0x2 bayer [ 87.590431][ T5931] gspca_se401: Frame size: 8782x127 bayer [ 87.610291][ T5931] gspca_se401: Frame size: 256x0 bayer [ 87.741328][ T30] audit: type=1400 audit(1757728499.376:296): avc: denied { ioctl } for pid=6383 comm="syz.1.70" path="socket:[9526]" dev="sockfs" ino=9526 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.823025][ T5931] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 87.876127][ T5931] usb 4-1: USB disconnect, device number 6 [ 89.637636][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 90.197620][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 90.826193][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 90.826206][ T30] audit: type=1400 audit(1757728503.756:315): avc: denied { write } for pid=6469 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.923583][ T30] audit: type=1400 audit(1757728503.856:316): avc: denied { setopt } for pid=6483 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.964939][ T30] audit: type=1400 audit(1757728503.876:317): avc: denied { write } for pid=6483 comm="syz.0.89" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.165685][ T30] audit: type=1400 audit(1757728504.096:318): avc: denied { call } for pid=6487 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.210329][ T30] audit: type=1400 audit(1757728504.096:319): avc: denied { transfer } for pid=6487 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.343316][ T6490] warning: `syz.2.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.523130][ T30] audit: type=1400 audit(1757728504.266:320): avc: denied { create } for pid=6481 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.673207][ T30] audit: type=1400 audit(1757728504.276:321): avc: denied { write } for pid=6481 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.710425][ T30] audit: type=1400 audit(1757728504.276:322): avc: denied { connect } for pid=6481 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.758498][ T30] audit: type=1400 audit(1757728504.376:323): avc: denied { watch } for pid=6491 comm="syz.4.92" path="/19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.804131][ T30] audit: type=1400 audit(1757728504.666:324): avc: denied { create } for pid=6485 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.243616][ T6503] capability: warning: `syz.3.93' uses 32-bit capabilities (legacy support in use) [ 93.140571][ T6511] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.197478][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.866747][ T6533] loop2: detected capacity change from 0 to 7 [ 94.878166][ T6533] Dev loop2: unable to read RDB block 7 [ 94.905877][ T6533] loop2: unable to read partition table [ 94.940377][ T6533] loop2: partition table beyond EOD, truncated [ 94.952456][ T6534] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 94.971549][ T6534] veth0_vlan: left promiscuous mode [ 94.978284][ T6534] veth0_vlan: entered promiscuous mode [ 94.987529][ T6534] team0: Device veth0_vlan failed to register rx_handler [ 95.192971][ T6533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.236871][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.672284][ T57] libceph: connect (1)[c::]:6789 error -101 [ 95.679907][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 95.838234][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 95.838247][ T30] audit: type=1400 audit(1757728508.766:331): avc: denied { getopt } for pid=6547 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.872825][ T6549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.032238][ T57] libceph: connect (1)[c::]:6789 error -101 [ 96.151609][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 96.489153][ T30] audit: type=1400 audit(1757728509.226:332): avc: denied { append } for pid=6547 comm="syz.1.108" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.562676][ T30] audit: type=1400 audit(1757728509.486:333): avc: denied { create } for pid=6556 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.648657][ T6558] input: syz0 as /devices/virtual/input/input7 [ 97.516664][ T24] libceph: connect (1)[c::]:6789 error -101 [ 97.520211][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 97.563317][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 98.216657][ T30] audit: type=1400 audit(1757728511.146:334): avc: denied { execute } for pid=6565 comm="syz.2.114" name="file1" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.378700][ T24] libceph: connect (1)[c::]:6789 error -101 [ 98.387215][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 98.664578][ T6542] ceph: No mds server is up or the cluster is laggy [ 98.927913][ T30] audit: type=1400 audit(1757728511.856:335): avc: denied { unlink } for pid=5843 comm="syz-executor" name="file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.401001][ T92] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 99.422260][ T6594] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 99.575531][ T6597] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.633344][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.680273][ T92] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 99.688285][ T2932] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.724623][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.812130][ T92] usb 3-1: can't read configurations, error -61 [ 99.830180][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 99.852226][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.883851][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 99.894865][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.912746][ T10] usb 4-1: Product: syz [ 99.924801][ T10] usb 4-1: Manufacturer: syz [ 99.937186][ T6601] IPVS: stopping master sync thread 6602 ... [ 99.990153][ T92] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 100.005456][ T30] audit: type=1400 audit(1757728512.866:336): avc: denied { create } for pid=6599 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.094192][ T10] usb 4-1: SerialNumber: syz [ 100.177193][ T10] usb 4-1: config 0 descriptor?? [ 100.205780][ T10] kobil_sct 4-1:0.0: required endpoints missing [ 100.221157][ T30] audit: type=1400 audit(1757728512.866:337): avc: denied { setopt } for pid=6599 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.342361][ T92] usb 3-1: too many configurations: 242, using maximum allowed: 8 [ 100.354204][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.379442][ T92] usb 3-1: can't read configurations, error -61 [ 100.452422][ T92] usb usb3-port1: attempt power cycle [ 100.802603][ T30] audit: type=1400 audit(1757728513.736:338): avc: denied { setopt } for pid=6582 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.851423][ T92] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 100.867020][ T30] audit: type=1400 audit(1757728513.796:339): avc: denied { read } for pid=6582 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.915001][ T92] usb 3-1: device descriptor read/8, error -71 [ 100.938084][ T30] audit: type=1400 audit(1757728513.796:340): avc: denied { create } for pid=6582 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.710330][ T5858] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.366662][ T10] usb 4-1: USB disconnect, device number 7 [ 104.302611][ T6638] 9pnet_fd: Insufficient options for proto=fd [ 104.464131][ T6646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 104.467024][ T6644] IPVS: stopping master sync thread 6646 ... [ 104.482708][ T6643] process 'syz.2.133' launched './file0' with NULL argv: empty string added [ 104.500507][ T30] audit: type=1400 audit(1757728517.416:341): avc: denied { wake_alarm } for pid=6635 comm="syz.2.133" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.521937][ T6645] netlink: 144 bytes leftover after parsing attributes in process `syz.1.131'. [ 104.542384][ T30] audit: type=1400 audit(1757728517.426:342): avc: denied { execute_no_trans } for pid=6635 comm="syz.2.133" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.599825][ T30] audit: type=1400 audit(1757728517.426:343): avc: denied { remount } for pid=6635 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.858088][ T30] audit: type=1400 audit(1757728517.726:344): avc: denied { read } for pid=6633 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.978047][ T6653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.137'. [ 105.053459][ T30] audit: type=1400 audit(1757728517.756:345): avc: denied { map } for pid=6633 comm="syz.1.131" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.106914][ T30] audit: type=1400 audit(1757728517.756:346): avc: denied { read } for pid=6633 comm="syz.1.131" path="socket:[10955]" dev="sockfs" ino=10955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.320314][ T30] audit: type=1326 audit(1757728518.156:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde6698eba9 code=0x0 [ 105.774536][ T30] audit: type=1400 audit(1757728518.176:348): avc: denied { create } for pid=6657 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.751853][ T30] audit: type=1400 audit(1757728518.176:349): avc: denied { ioctl } for pid=6657 comm="syz.2.138" path="socket:[9870]" dev="sockfs" ino=9870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.117674][ T30] audit: type=1400 audit(1757728518.176:350): avc: denied { bind } for pid=6657 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.591249][ T30] audit: type=1400 audit(1757728518.176:351): avc: denied { connect } for pid=6657 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.836725][ T30] audit: type=1400 audit(1757728518.206:352): avc: denied { setopt } for pid=6657 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.013201][ T30] audit: type=1400 audit(1757728518.216:353): avc: denied { write } for pid=6657 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.033805][ T30] audit: type=1400 audit(1757728519.846:354): avc: denied { ioctl } for pid=6669 comm="syz.3.140" path="socket:[9908]" dev="sockfs" ino=9908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.356016][ T30] audit: type=1400 audit(1757728523.256:355): avc: denied { read write } for pid=6699 comm="syz.4.148" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.595091][ T30] audit: type=1400 audit(1757728523.256:356): avc: denied { open } for pid=6699 comm="syz.4.148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.630356][ T30] audit: type=1400 audit(1757728523.346:357): avc: denied { map } for pid=6699 comm="syz.4.148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.653310][ T30] audit: type=1400 audit(1757728523.346:358): avc: denied { execute } for pid=6699 comm="syz.4.148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.963926][ T6723] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.980711][ T6722] IPVS: stopping master sync thread 6723 ... [ 112.013502][ T6730] syz_tun: entered allmulticast mode [ 112.020582][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 112.020597][ T30] audit: type=1400 audit(1757728524.946:361): avc: denied { setopt } for pid=6729 comm="syz.3.155" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.790955][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.954238][ T30] audit: type=1400 audit(1757728525.886:362): avc: denied { unlink } for pid=6732 comm="syz.2.157" name="#1" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.110342][ T30] audit: type=1400 audit(1757728525.986:363): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.366132][ T6749] binder: BINDER_SET_CONTEXT_MGR already set [ 113.571171][ T6749] binder: 6748:6749 ioctl 4018620d 200000004a80 returned -16 [ 114.832660][ T30] audit: type=1400 audit(1757728527.696:364): avc: denied { listen } for pid=6753 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.013663][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 115.052902][ T30] audit: type=1400 audit(1757728527.976:365): avc: denied { mount } for pid=6759 comm="syz.2.163" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.259043][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 115.297262][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 115.306122][ T30] audit: type=1400 audit(1757728527.986:366): avc: denied { read write } for pid=6759 comm="syz.2.163" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.333171][ T30] audit: type=1400 audit(1757728527.986:367): avc: denied { open } for pid=6759 comm="syz.2.163" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.676968][ T6771] debugfs: 'ttyS3' already exists in 'caif_serial' [ 115.916975][ T30] audit: type=1400 audit(1757728528.396:368): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.974975][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.087762][ T6773] IPVS: stopping master sync thread 6775 ... [ 116.089555][ T6775] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.150163][ T10] usb 2-1: device descriptor read/64, error -71 [ 116.271019][ T30] audit: type=1800 audit(1757728529.196:369): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.167" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 116.394807][ T6785] gfs2: gfs2 mount does not exist [ 116.399944][ T30] audit: type=1400 audit(1757728529.326:370): avc: denied { mounton } for pid=6784 comm="syz.3.168" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.428681][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.579211][ T6785] binder_alloc: 6784: binder_alloc_buf, no vma [ 116.610208][ T10] usb 2-1: device descriptor read/64, error -71 [ 116.738112][ T10] usb usb2-port1: attempt power cycle [ 117.378471][ T6807] loop2: detected capacity change from 0 to 7 [ 117.404647][ T6807] Dev loop2: unable to read RDB block 7 [ 117.415621][ T6807] loop2: unable to read partition table [ 117.427763][ T6807] loop2: partition table beyond EOD, truncated [ 117.436111][ T6807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.301947][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.373174][ T30] audit: type=1400 audit(1757728531.286:371): avc: denied { bind } for pid=6796 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.429821][ T30] audit: type=1400 audit(1757728531.286:372): avc: denied { write } for pid=6796 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.539551][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 118.562874][ T10] usb 2-1: device not accepting address 5, error -71 [ 119.775963][ T1206] IPVS: starting estimator thread 0... [ 120.073876][ T6835] IPVS: using max 77 ests per chain, 184800 per kthread [ 120.152593][ T6820] syz.2.176 (6820): drop_caches: 2 [ 120.785346][ T6852] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 120.785379][ T6851] IPVS: stopping master sync thread 6852 ... [ 120.996920][ T30] audit: type=1400 audit(1757728533.916:373): avc: denied { ioctl } for pid=6848 comm="syz.2.181" path="mnt:[4026532804]" dev="nsfs" ino=4026532804 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.496802][ T30] audit: type=1400 audit(1757728534.266:374): avc: denied { bind } for pid=6853 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.565120][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 121.639352][ T30] audit: type=1400 audit(1757728534.276:375): avc: denied { name_bind } for pid=6853 comm="syz.0.182" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 121.800468][ T30] audit: type=1400 audit(1757728534.276:376): avc: denied { node_bind } for pid=6853 comm="syz.0.182" saddr=255.255.255.255 src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 122.560387][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 122.690446][ T30] audit: type=1400 audit(1757728534.276:377): avc: denied { read } for pid=6853 comm="syz.0.182" laddr=255.255.255.255 lport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.713618][ T30] audit: type=1400 audit(1757728534.496:378): avc: denied { write } for pid=6848 comm="syz.2.181" name="fib_trie" dev="proc" ino=4026533246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.513780][ T6887] debugfs: 'ttyS3' already exists in 'caif_serial' [ 124.230759][ T1206] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.165146][ T1206] usb 1-1: device descriptor read/64, error -71 [ 126.298067][ T6938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.197'. [ 126.877181][ T30] audit: type=1400 audit(1757728539.696:379): avc: denied { write } for pid=6929 comm="syz.2.196" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.272866][ T6951] netlink: 165 bytes leftover after parsing attributes in process `syz.4.199'. [ 127.351998][ T30] audit: type=1400 audit(1757728540.146:380): avc: denied { write } for pid=6945 comm="syz.4.199" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.386921][ T30] audit: type=1400 audit(1757728540.146:381): avc: denied { open } for pid=6945 comm="syz.4.199" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.520537][ T30] audit: type=1400 audit(1757728540.146:382): avc: denied { ioctl } for pid=6945 comm="syz.4.199" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.651147][ T6957] hub 9-0:1.0: USB hub found [ 127.653386][ T30] audit: type=1400 audit(1757728540.536:383): avc: denied { bind } for pid=6952 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.714655][ T6957] hub 9-0:1.0: 1 port detected [ 127.873030][ T5968] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.890261][ T30] audit: type=1400 audit(1757728540.536:384): avc: denied { name_bind } for pid=6952 comm="syz.3.200" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 127.911979][ T30] audit: type=1400 audit(1757728540.536:385): avc: denied { node_bind } for pid=6952 comm="syz.3.200" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 128.142358][ T6964] debugfs: 'ttyS3' already exists in 'caif_serial' [ 128.632528][ T5968] usb 3-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 128.650196][ T5968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.585290][ T30] audit: type=1400 audit(1757728542.516:386): avc: denied { write } for pid=6976 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.640204][ T30] audit: type=1400 audit(1757728542.516:387): avc: denied { listen } for pid=6976 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.129789][ T7006] QAT: failed to copy from user cfg_data. [ 131.595324][ T5968] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.657509][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 131.682883][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.794455][ T5968] usb 3-1: can't set config #1, error -71 [ 131.807193][ T5968] usb 3-1: USB disconnect, device number 8 [ 131.874250][ T7016] loop2: detected capacity change from 0 to 7 [ 131.887250][ T7016] Dev loop2: unable to read RDB block 7 [ 131.894245][ T7016] loop2: unable to read partition table [ 131.901695][ T7016] loop2: partition table beyond EOD, truncated [ 131.927220][ T30] audit: type=1400 audit(1757728544.856:388): avc: denied { read write } for pid=7017 comm="syz.2.213" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.960161][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.986000][ T30] audit: type=1400 audit(1757728544.886:389): avc: denied { open } for pid=7017 comm="syz.2.213" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.011937][ T30] audit: type=1400 audit(1757728544.896:390): avc: denied { ioctl } for pid=7017 comm="syz.2.213" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.012326][ T7016] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.160165][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 132.184150][ T24] usb 4-1: config 0 has an invalid interface number: 192 but max is 0 [ 132.200927][ T24] usb 4-1: config 0 has no interface number 0 [ 132.225150][ T24] usb 4-1: config 0 interface 192 has no altsetting 0 [ 132.253217][ T24] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 132.362957][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.369596][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.410203][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.418233][ T24] usb 4-1: Product: syz [ 132.423182][ T24] usb 4-1: Manufacturer: syz [ 132.428570][ T24] usb 4-1: SerialNumber: syz [ 132.451723][ T24] usb 4-1: config 0 descriptor?? [ 132.546483][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 132.567412][ T7030] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 132.567412][ T7030] program syz.4.215 not setting count and/or reply_len properly [ 132.802244][ T30] audit: type=1400 audit(1757728545.496:391): avc: denied { ioctl } for pid=7026 comm="syz.4.215" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.864702][ T7023] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 132.888006][ T24] kvaser_usb 4-1:0.192: error -ENODEV: Cannot get usb endpoint(s) [ 132.925142][ T24] usb 4-1: USB disconnect, device number 8 [ 132.939754][ T30] audit: type=1400 audit(1757728545.866:392): avc: denied { getopt } for pid=7034 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.480146][ T5968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.996668][ T30] audit: type=1400 audit(1757728547.926:393): avc: denied { read } for pid=7050 comm="syz.4.220" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.027573][ T30] audit: type=1400 audit(1757728547.956:394): avc: denied { open } for pid=7050 comm="syz.4.220" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.041040][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 135.063142][ T5968] usb 1-1: device descriptor read/64, error -71 [ 135.097112][ T7054] netlink: 'syz.4.220': attribute type 21 has an invalid length. [ 135.162893][ T30] audit: type=1400 audit(1757728547.956:395): avc: denied { ioctl } for pid=7050 comm="syz.4.220" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.350408][ T5968] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.392025][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 135.436691][ T7056] ======================================================= [ 135.436691][ T7056] WARNING: The mand mount option has been deprecated and [ 135.436691][ T7056] and is ignored by this kernel. Remove the mand [ 135.436691][ T7056] option from the mount to silence this warning. [ 135.436691][ T7056] ======================================================= [ 135.538968][ T30] audit: type=1400 audit(1757728548.466:396): avc: denied { mounton } for pid=7055 comm="syz.3.222" path="/38/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 135.573301][ T5968] usb 1-1: device descriptor read/64, error -71 [ 135.700165][ T30] audit: type=1400 audit(1757728548.626:397): avc: denied { append } for pid=7065 comm="syz.2.225" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.742764][ T5968] usb usb1-port1: attempt power cycle [ 136.444819][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 136.521787][ T5968] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.763024][ T5968] usb 1-1: device not accepting address 7, error -71 [ 138.753018][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 138.753056][ T30] audit: type=1400 audit(1757728551.686:400): avc: denied { getopt } for pid=7116 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.890352][ T7120] gretap0: entered promiscuous mode [ 138.929260][ T7116] gretap0: left promiscuous mode [ 139.241842][ T30] audit: type=1326 audit(1757728552.076:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1b58eba9 code=0x0 [ 140.062338][ T30] audit: type=1400 audit(1757728552.576:402): avc: denied { setopt } for pid=7128 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.751796][ T7136] syz.4.240: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.770575][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.4.240 Not tainted syzkaller #0 PREEMPT(full) [ 140.770600][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.770611][ T7136] Call Trace: [ 140.770616][ T7136] [ 140.770624][ T7136] dump_stack_lvl+0x16c/0x1f0 [ 140.770651][ T7136] warn_alloc+0x248/0x3a0 [ 140.770673][ T7136] ? __pfx_warn_alloc+0x10/0x10 [ 140.770702][ T7136] ? hash_netport4_resize+0x1d8/0x1c50 [ 140.770719][ T7136] ? __vmalloc_node_noprof+0xad/0xf0 [ 140.770750][ T7136] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 140.770785][ T7136] ? hash_netport4_resize+0x1d8/0x1c50 [ 140.770808][ T7136] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.770838][ T7136] ? ___kmalloc_large_node+0xed/0x160 [ 140.770867][ T7136] __kvmalloc_node_noprof+0x30a/0x620 [ 140.770885][ T7136] ? hash_netport4_resize+0x1d8/0x1c50 [ 140.770903][ T7136] ? __kmalloc_noprof+0x242/0x510 [ 140.770919][ T7136] ? hash_netport4_resize+0x1d8/0x1c50 [ 140.770941][ T7136] ? hash_netport4_resize+0x1d8/0x1c50 [ 140.770958][ T7136] hash_netport4_resize+0x1d8/0x1c50 [ 140.770978][ T7136] ? __pfx_hash_netport4_add+0x10/0x10 [ 140.770995][ T7136] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 140.771021][ T7136] ? __pfx___mutex_lock+0x10/0x10 [ 140.771055][ T7136] ? __pfx_hash_netport4_resize+0x10/0x10 [ 140.771078][ T7136] call_ad.constprop.0+0x36d/0x940 [ 140.771096][ T7136] ? __pfx_hash_netport4_resize+0x10/0x10 [ 140.771117][ T7136] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 140.771134][ T7136] ? __pfx___nla_validate_parse+0x10/0x10 [ 140.771173][ T7136] ? __nla_parse+0x40/0x60 [ 140.771192][ T7136] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 140.771216][ T7136] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 140.771236][ T7136] ? call_rcu_tasks_generic+0x400/0x920 [ 140.771294][ T7136] nfnetlink_rcv_msg+0x9fc/0x1200 [ 140.771321][ T7136] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.771342][ T7136] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.771365][ T7136] ? finish_task_switch.isra.0+0x221/0xc10 [ 140.771410][ T7136] ? __pfx___schedule+0x10/0x10 [ 140.771435][ T7136] netlink_rcv_skb+0x158/0x420 [ 140.771460][ T7136] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.771479][ T7136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.771520][ T7136] ? nfnetlink_rcv+0x14a/0x430 [ 140.771541][ T7136] nfnetlink_rcv+0x1b3/0x430 [ 140.771558][ T7136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 140.771584][ T7136] netlink_unicast+0x5a7/0x870 [ 140.771612][ T7136] ? __pfx_netlink_unicast+0x10/0x10 [ 140.771636][ T7136] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 140.771668][ T7136] netlink_sendmsg+0x8d1/0xdd0 [ 140.771696][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.771730][ T7136] ____sys_sendmsg+0xa95/0xc70 [ 140.771759][ T7136] ? copy_msghdr_from_user+0x10a/0x160 [ 140.771782][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.771817][ T7136] ? __pfx___schedule+0x10/0x10 [ 140.771840][ T7136] ___sys_sendmsg+0x134/0x1d0 [ 140.771865][ T7136] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.771920][ T7136] __sys_sendmsg+0x16d/0x220 [ 140.771943][ T7136] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.771965][ T7136] ? __x64_sys_futex+0x1e0/0x4c0 [ 140.771998][ T7136] do_syscall_64+0xcd/0x4e0 [ 140.772023][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.772041][ T7136] RIP: 0033:0x7fde6698eba9 [ 140.772056][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.772073][ T7136] RSP: 002b:00007fde6786b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.772089][ T7136] RAX: ffffffffffffffda RBX: 00007fde66bd6180 RCX: 00007fde6698eba9 [ 140.772100][ T7136] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 140.772110][ T7136] RBP: 00007fde66a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.772120][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.772130][ T7136] R13: 00007fde66bd6218 R14: 00007fde66bd6180 R15: 00007ffcfc25df58 [ 140.772155][ T7136] [ 140.772161][ T7136] Mem-Info: [ 141.158902][ T7136] active_anon:17773 inactive_anon:0 isolated_anon:0 [ 141.158902][ T7136] active_file:3344 inactive_file:40619 isolated_file:0 [ 141.158902][ T7136] unevictable:768 dirty:166 writeback:0 [ 141.158902][ T7136] slab_reclaimable:11798 slab_unreclaimable:100071 [ 141.158902][ T7136] mapped:38262 shmem:4225 pagetables:1302 [ 141.158902][ T7136] sec_pagetables:0 bounce:0 [ 141.158902][ T7136] kernel_misc_reclaimable:0 [ 141.158902][ T7136] free:1296178 free_pcp:21267 free_cma:0 [ 141.204266][ T7136] Node 0 active_anon:71092kB inactive_anon:0kB active_file:13336kB inactive_file:162276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153008kB dirty:664kB writeback:0kB shmem:15364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12748kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.236117][ T7136] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.266090][ T7136] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.294853][ T7136] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 141.300582][ T7136] Node 0 DMA32 free:1277268kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71080kB inactive_anon:0kB active_file:13336kB inactive_file:160948kB unevictable:1536kB writepending:664kB present:3129332kB managed:2539324kB mlocked:0kB bounce:0kB free_pcp:64680kB local_pcp:44032kB free_cma:0kB [ 141.332954][ T7136] lowmem_reserve[]: 0 0 1 1 1 [ 141.337628][ T7136] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 141.366641][ T7136] lowmem_reserve[]: 0 0 0 0 0 [ 141.371337][ T7136] Node 1 Normal free:3892072kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:10784kB free_cma:0kB [ 141.402848][ T7136] lowmem_reserve[]: 0 0 0 0 0 [ 141.407521][ T7136] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.420128][ T7136] Node 0 DMA32: 1*4kB (M) 2*8kB (ME) 20*16kB (UME) 381*32kB (UM) 91*64kB (UME) 26*128kB (UME) 6*256kB (UM) 7*512kB (M) 5*1024kB (UME) 2*2048kB (UE) 303*4096kB (M) = 1277108kB [ 141.437495][ T7136] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 141.449731][ T7136] Node 1 Normal: 204*4kB (UE) 53*8kB (UE) 51*16kB (UME) 71*32kB (UE) 26*64kB (UME) 8*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3892072kB [ 141.467439][ T7136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.477142][ T7136] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 141.486421][ T7136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.495955][ T7136] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.505227][ T7136] 48184 total pagecache pages [ 141.509871][ T7136] 0 pages in swap cache [ 141.514022][ T7136] Free swap = 124996kB [ 141.518140][ T7136] Total swap = 124996kB [ 141.522280][ T7136] 2097051 pages RAM [ 141.526052][ T7136] 0 pages HighMem/MovableOnly [ 141.530704][ T7136] 430258 pages reserved [ 141.534823][ T7136] 0 pages cma reserved [ 142.148480][ T7160] program syz.4.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.334769][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 142.425745][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.245'. [ 143.852378][ T7179] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 143.890211][ T1206] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 144.041580][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.052618][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 144.068924][ T1206] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 144.081585][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.085823][ T7179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.132323][ T1206] usb 4-1: config 0 descriptor?? [ 144.137912][ T7177] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 144.583245][ T1206] hid-rmi 0003:0461:4E72.0002: global environment stack underflow [ 144.755722][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 144.998176][ T1206] hid-rmi 0003:0461:4E72.0002: item 0 0 1 11 parsing failed [ 145.037218][ T1206] hid-rmi 0003:0461:4E72.0002: parse failed [ 145.058109][ T1206] hid-rmi 0003:0461:4E72.0002: probe with driver hid-rmi failed with error -22 [ 145.785336][ T7214] capability: warning: `syz.1.259' uses deprecated v2 capabilities in a way that may be insecure [ 146.211906][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.447773][ T5920] usb 4-1: USB disconnect, device number 9 [ 146.538298][ T30] audit: type=1400 audit(1757728559.466:403): avc: denied { read } for pid=7223 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.502720][ T7246] netlink: 'syz.1.261': attribute type 13 has an invalid length. [ 147.674349][ T30] audit: type=1400 audit(1757728560.526:404): avc: denied { block_suspend } for pid=7242 comm="syz.2.267" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.736869][ T7246] gretap0: refused to change device tx_queue_len [ 147.745449][ T7246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.817914][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 147.889930][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 147.913322][ T30] audit: type=1400 audit(1757728560.576:405): avc: denied { setattr } for pid=7242 comm="syz.2.267" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 150.245225][ T7285] bridge1: entered promiscuous mode [ 150.350906][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 150.792782][ T7288] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 151.010173][ T30] audit: type=1400 audit(1757728563.923:406): avc: denied { connect } for pid=7295 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.427951][ T57] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 152.140353][ T57] usb 1-1: device descriptor read/64, error -71 [ 152.886348][ T7318] sctp: [Deprecated]: syz.2.286 (pid 7318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.886348][ T7318] Use struct sctp_sack_info instead [ 153.000185][ T57] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 153.191523][ T30] audit: type=1400 audit(1757728566.113:407): avc: denied { create } for pid=7322 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 153.230268][ T57] usb 1-1: device descriptor read/64, error -71 [ 153.545540][ T57] usb usb1-port1: attempt power cycle [ 156.242850][ T7344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.294'. [ 156.287158][ T30] audit: type=1326 audit(1757728569.213:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde6698eba9 code=0x0 [ 156.343102][ T30] audit: type=1400 audit(1757728569.253:409): avc: denied { accept } for pid=7341 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.363182][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.565318][ T30] audit: type=1326 audit(1757728569.373:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7349 comm="syz.3.297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dbb18eba9 code=0x0 [ 156.892873][ T30] audit: type=1400 audit(1757728569.423:411): avc: denied { name_bind } for pid=7347 comm="syz.2.296" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 156.914331][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.135263][ T30] audit: type=1400 audit(1757728569.863:412): avc: denied { cmd } for pid=7367 comm="syz.0.300" path="socket:[13070]" dev="sockfs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.070206][ T92] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 158.689483][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 158.700037][ T92] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.724297][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.759922][ T92] usb 1-1: Product: syz [ 158.790770][ T92] usb 1-1: Manufacturer: syz [ 158.803552][ T30] audit: type=1400 audit(1757728571.733:413): avc: denied { write } for pid=7393 comm="syz.1.307" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 158.827011][ T92] usb 1-1: SerialNumber: syz [ 158.837721][ T92] usb 1-1: config 0 descriptor?? [ 158.853407][ T7394] binder: 7393:7394 ioctl c0306201 200000000080 returned -14 [ 159.140548][ T92] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.292479][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 159.488809][ T24] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 159.513628][ T24] usb 2-1: config 0 has no interface number 0 [ 159.859071][ T30] audit: type=1400 audit(1757728572.773:414): avc: denied { name_bind } for pid=7413 comm="syz.4.314" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 159.893682][ T24] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.946707][ T7412] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.313'. [ 159.959357][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 160.036629][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.047121][ T24] usb 2-1: Product: syz [ 160.054603][ T24] usb 2-1: Manufacturer: syz [ 160.059397][ T24] usb 2-1: SerialNumber: syz [ 160.079125][ T24] usb 2-1: config 0 descriptor?? [ 160.124820][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.316'. [ 160.145889][ T30] audit: type=1326 audit(1757728573.073:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dbb18eba9 code=0x0 [ 160.303632][ T24] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 160.336219][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 160.345128][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 160.363472][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 160.381107][ T24] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 160.511333][ T24] usb 2-1: USB disconnect, device number 7 [ 160.531624][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 160.558517][ T24] keyspan 2-1:0.133: device disconnected [ 161.859476][ T92] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.909307][ T92] usb 1-1: USB disconnect, device number 12 [ 162.389574][ T30] audit: type=1400 audit(1757728575.313:416): avc: denied { ioctl } for pid=7445 comm="syz.1.324" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.313609][ T30] audit: type=1400 audit(1757728576.223:417): avc: denied { ioctl } for pid=7455 comm="syz.0.327" path="socket:[12252]" dev="sockfs" ino=12252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.416341][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.426349][ T30] audit: type=1400 audit(1757728576.223:418): avc: denied { write } for pid=7455 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 163.548850][ T30] audit: type=1400 audit(1757728576.473:419): avc: denied { read write } for pid=7464 comm="syz.0.332" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 163.627015][ T30] audit: type=1400 audit(1757728576.473:420): avc: denied { open } for pid=7464 comm="syz.0.332" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 163.740139][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 163.916910][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 163.925505][ T5920] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.937437][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.981459][ T7477] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 164.050325][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.064734][ T5920] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.081551][ T5920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.090258][ T24] usb 4-1: device descriptor read/64, error -71 [ 164.097945][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.340337][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 164.340540][ T5920] usb 3-1: GET_CAPABILITIES returned 0 [ 164.491945][ T5920] usbtmc 3-1:16.0: can't read capabilities [ 164.535105][ T24] usb 4-1: device descriptor read/64, error -71 [ 164.775618][ T5903] usb 3-1: USB disconnect, device number 9 [ 164.803114][ T24] usb usb4-port1: attempt power cycle [ 164.822488][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7490 comm=syz.4.336 [ 164.847529][ T7492] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 165.166245][ T30] audit: type=1400 audit(1757728578.063:421): avc: denied { ioctl } for pid=7489 comm="syz.4.336" path="socket:[13496]" dev="sockfs" ino=13496 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.278056][ T30] audit: type=1400 audit(1757728578.203:422): avc: denied { setopt } for pid=7494 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 165.420402][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 165.451046][ T24] usb 4-1: device descriptor read/8, error -71 [ 165.560143][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.353880][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 166.380787][ T24] usb 4-1: device descriptor read/8, error -71 [ 166.520611][ T24] usb usb4-port1: unable to enumerate USB device [ 166.532783][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.566570][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 166.633797][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.646797][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.662713][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.690438][ T30] audit: type=1400 audit(1757728579.593:423): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.712513][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.732262][ T5920] usb 2-1: config 0 descriptor?? [ 166.784205][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 166.803418][ T7498] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 167.063782][ T30] audit: type=1400 audit(1757728579.983:424): avc: denied { mount } for pid=7497 comm="syz.1.339" name="/" dev="autofs" ino=13522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 167.361590][ T30] audit: type=1400 audit(1757728580.083:425): avc: denied { mounton } for pid=7497 comm="syz.1.339" path="/78/file1/file0" dev="autofs" ino=13523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 167.387592][ T30] audit: type=1400 audit(1757728580.143:426): avc: denied { mount } for pid=7497 comm="syz.1.339" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 167.419712][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 167.426032][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 167.454287][ T30] audit: type=1400 audit(1757728580.343:427): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 167.461121][ T5920] usb 2-1: USB disconnect, device number 8 [ 167.482355][ T30] audit: type=1400 audit(1757728580.363:428): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 168.804872][ T30] audit: type=1400 audit(1757728581.733:429): avc: denied { create } for pid=7544 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 168.829720][ T30] audit: type=1400 audit(1757728581.733:430): avc: denied { write } for pid=7544 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 169.083033][ T7550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.092304][ T7550] overlayfs: missing 'lowerdir' [ 169.562564][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 169.779716][ T7567] geneve2: entered allmulticast mode [ 169.850188][ T92] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.954560][ T7554] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 170.524603][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.714320][ T92] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.726374][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.836005][ T92] usb 1-1: config 0 descriptor?? [ 171.207193][ T7596] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 171.366726][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.540747][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.557355][ T92] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 171.588843][ T92] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input8 [ 171.704166][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 171.704181][ T30] audit: type=1400 audit(1757728584.633:434): avc: denied { connect } for pid=7598 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.809295][ T30] audit: type=1400 audit(1757728584.683:435): avc: denied { ioctl } for pid=7598 comm="syz.2.366" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 171.861958][ T7602] netlink: 6440 bytes leftover after parsing attributes in process `syz.2.367'. [ 171.922938][ T92] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 172.246152][ T92] usb 1-1: USB disconnect, device number 13 [ 172.383931][ T7603] fido_id[7603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 173.632124][ T7611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.370'. [ 173.690096][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 173.884633][ T30] audit: type=1326 audit(1757728586.813:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.2.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d1b58eba9 code=0x0 [ 174.983417][ T30] audit: type=1400 audit(1757728587.913:437): avc: denied { read write } for pid=7632 comm="syz.3.376" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.014019][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.188761][ T30] audit: type=1400 audit(1757728587.993:438): avc: denied { open } for pid=7632 comm="syz.3.376" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.189266][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 175.675025][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 175.687626][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 175.705345][ T7646] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 175.705345][ T7646] program syz.2.379 not setting count and/or reply_len properly [ 176.701322][ T7656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.025944][ T7664] FAULT_INJECTION: forcing a failure. [ 177.025944][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.039072][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 177.039095][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.039104][ T7664] Call Trace: [ 177.039110][ T7664] [ 177.039117][ T7664] dump_stack_lvl+0x16c/0x1f0 [ 177.039143][ T7664] should_fail_ex+0x512/0x640 [ 177.039169][ T7664] _copy_from_user+0x2e/0xd0 [ 177.039195][ T7664] copy_msghdr_from_user+0x98/0x160 [ 177.039218][ T7664] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.039251][ T7664] ___sys_sendmsg+0xfe/0x1d0 [ 177.039273][ T7664] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.039323][ T7664] __sys_sendmsg+0x16d/0x220 [ 177.039345][ T7664] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.039381][ T7664] do_syscall_64+0xcd/0x4e0 [ 177.039405][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.039422][ T7664] RIP: 0033:0x7f9d1b58eba9 [ 177.039435][ T7664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.039451][ T7664] RSP: 002b:00007f9d1c3e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.039467][ T7664] RAX: ffffffffffffffda RBX: 00007f9d1b7d6180 RCX: 00007f9d1b58eba9 [ 177.039478][ T7664] RDX: 0000000024008890 RSI: 0000200000000680 RDI: 0000000000000006 [ 177.039488][ T7664] RBP: 00007f9d1c3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.039497][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.039507][ T7664] R13: 00007f9d1b7d6218 R14: 00007f9d1b7d6180 R15: 00007ffdb7d1d4f8 [ 177.039529][ T7664] [ 177.996102][ T30] audit: type=1400 audit(1757728590.923:439): avc: denied { create } for pid=7650 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.016137][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.022373][ T30] audit: type=1400 audit(1757728590.923:440): avc: denied { write } for pid=7650 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.618692][ T30] audit: type=1400 audit(1757728591.183:441): avc: denied { bind } for pid=7665 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.314358][ T30] audit: type=1400 audit(1757728591.183:442): avc: denied { connect } for pid=7665 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.333751][ T30] audit: type=1400 audit(1757728591.283:443): avc: denied { mount } for pid=7665 comm="syz.4.385" name="/" dev="ramfs" ino=14018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 179.844944][ T7687] overlay: ./file0 is not a directory [ 179.851566][ T57] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.011461][ T57] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.030838][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.050650][ T7690] afs: Unknown parameter 'dynv/kvm' [ 180.060423][ T57] usb 3-1: config 0 descriptor?? [ 180.108251][ T57] cp210x 3-1:0.0: cp210x converter detected [ 180.196118][ T30] audit: type=1400 audit(1757728593.123:444): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 180.516770][ T57] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.535353][ T57] usb 3-1: cp210x converter now attached to ttyUSB0 [ 180.618357][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 180.631451][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 180.648997][ T7706] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 180.648997][ T7706] program syz.0.393 not setting count and/or reply_len properly [ 181.644995][ T30] audit: type=1400 audit(1757728594.573:445): avc: denied { setopt } for pid=7716 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.376811][ T7723] FAULT_INJECTION: forcing a failure. [ 182.376811][ T7723] name failslab, interval 1, probability 0, space 0, times 1 [ 182.391094][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.3.396 Not tainted syzkaller #0 PREEMPT(full) [ 182.391115][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.391124][ T7723] Call Trace: [ 182.391130][ T7723] [ 182.391136][ T7723] dump_stack_lvl+0x16c/0x1f0 [ 182.391161][ T7723] should_fail_ex+0x512/0x640 [ 182.391180][ T7723] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 182.391200][ T7723] should_failslab+0xc2/0x120 [ 182.391220][ T7723] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 182.391237][ T7723] ? __alloc_skb+0x2b2/0x380 [ 182.391260][ T7723] __alloc_skb+0x2b2/0x380 [ 182.391278][ T7723] ? __pfx___alloc_skb+0x10/0x10 [ 182.391298][ T7723] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 182.391323][ T7723] netlink_alloc_large_skb+0x69/0x130 [ 182.391346][ T7723] netlink_sendmsg+0x6a1/0xdd0 [ 182.391370][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.391400][ T7723] ____sys_sendmsg+0xa95/0xc70 [ 182.391425][ T7723] ? copy_msghdr_from_user+0x10a/0x160 [ 182.391446][ T7723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.391481][ T7723] ___sys_sendmsg+0x134/0x1d0 [ 182.391502][ T7723] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.391549][ T7723] __sys_sendmsg+0x16d/0x220 [ 182.391569][ T7723] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.391604][ T7723] do_syscall_64+0xcd/0x4e0 [ 182.391627][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.391643][ T7723] RIP: 0033:0x7f2dbb18eba9 [ 182.391656][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.391677][ T7723] RSP: 002b:00007f2db93d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.391692][ T7723] RAX: ffffffffffffffda RBX: 00007f2dbb3d6180 RCX: 00007f2dbb18eba9 [ 182.391702][ T7723] RDX: 0000000024008890 RSI: 0000200000000680 RDI: 0000000000000006 [ 182.391712][ T7723] RBP: 00007f2db93d5090 R08: 0000000000000000 R09: 0000000000000000 [ 182.391721][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.391730][ T7723] R13: 00007f2dbb3d6218 R14: 00007f2dbb3d6180 R15: 00007ffff4b3fe38 [ 182.391751][ T7723] [ 183.203296][ T30] audit: type=1400 audit(1757728596.123:446): avc: denied { bind } for pid=7716 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.612459][ T57] usb 3-1: USB disconnect, device number 10 [ 183.643471][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.025710][ T57] cp210x 3-1:0.0: device disconnected [ 184.379156][ T57] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.724982][ T57] usb 3-1: device descriptor read/64, error -71 [ 184.741087][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.753253][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.761269][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.785258][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.910404][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.964714][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.973337][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.981702][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.989401][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.001940][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.016328][ T30] audit: type=1400 audit(1757728597.943:447): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 185.030472][ T57] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.068819][ T5849] block nbd3: Receive control failed (result -32) [ 185.078495][ T7744] block nbd3: shutting down sockets [ 185.093482][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.260161][ T57] usb 3-1: device descriptor read/64, error -71 [ 185.370592][ T57] usb usb3-port1: attempt power cycle [ 185.378489][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.602593][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.660979][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.708092][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.741256][ T57] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 185.783370][ T57] usb 3-1: device descriptor read/8, error -71 [ 185.818527][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 185.838355][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.850086][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.867805][ T5920] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 185.890119][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.919330][ T5920] usb 1-1: config 0 descriptor?? [ 186.016791][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.034078][ T57] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.043221][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.050775][ T7754] bridge_slave_0: entered allmulticast mode [ 186.058439][ T7754] bridge_slave_0: entered promiscuous mode [ 186.067803][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.075212][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.082505][ T7754] bridge_slave_1: entered allmulticast mode [ 186.090327][ T7754] bridge_slave_1: entered promiscuous mode [ 186.551531][ T7807] futex_wake_op: syz.4.407 tries to shift op by 36; fix this program [ 186.641455][ T57] usb 3-1: device not accepting address 14, error -71 [ 186.655892][ T57] usb usb3-port1: unable to enumerate USB device [ 186.930131][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 186.941400][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 186.955561][ T7809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 186.955561][ T7809] program syz.2.408 not setting count and/or reply_len properly [ 187.285933][ T5849] Bluetooth: hci3: command tx timeout [ 187.304163][ T30] audit: type=1400 audit(1757728599.473:448): avc: denied { create } for pid=7799 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.319152][ T5920] usb 1-1: string descriptor 0 read error: -22 [ 187.339452][ T30] audit: type=1800 audit(1757728599.533:449): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.407" name="bus" dev="overlay" ino=430 res=0 errno=0 [ 187.600646][ T5920] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input9 [ 187.627066][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.642725][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.524216][ T5920] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 188.722762][ T5920] usb 1-1: USB disconnect, device number 14 [ 189.122147][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 189.140888][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.412'. [ 189.206532][ T7754] team0: Port device team_slave_0 added [ 189.278538][ T7754] team0: Port device team_slave_1 added [ 189.310383][ T5849] Bluetooth: hci3: command tx timeout [ 189.893744][ T7828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.943506][ T13] bridge_slave_1: left allmulticast mode [ 189.949367][ T13] bridge_slave_1: left promiscuous mode [ 190.043803][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.157679][ T7844] 9pnet_virtio: no channels available for device syz [ 190.543971][ T13] bridge_slave_0: left allmulticast mode [ 190.556899][ T13] bridge_slave_0: left promiscuous mode [ 190.564922][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.577199][ T30] audit: type=1400 audit(1757728603.513:450): avc: denied { read } for pid=7842 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.880863][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.892824][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.903023][ T13] bond0 (unregistering): Released all slaves [ 190.995925][ T13] bond1 (unregistering): Released all slaves [ 191.015552][ T7836] vxcan3: entered promiscuous mode [ 191.410230][ T5849] Bluetooth: hci3: command tx timeout [ 191.554745][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.568582][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.758803][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.276389][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.300085][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.330845][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 192.358831][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.543755][ T5920] usb 1-1: device descriptor read/64, error -71 [ 193.168323][ T7754] hsr_slave_0: entered promiscuous mode [ 193.183527][ T7754] hsr_slave_1: entered promiscuous mode [ 193.189837][ T7754] debugfs: 'hsr0' already exists in 'hsr' [ 193.205783][ T7754] Cannot create hsr debugfs directory [ 193.340245][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 193.367109][ T7886] fuseblk: Bad value for 'fd' [ 193.494534][ T5849] Bluetooth: hci3: command tx timeout [ 193.570150][ T5920] usb 1-1: device descriptor read/64, error -71 [ 193.740555][ T13] hsr_slave_0: left promiscuous mode [ 193.748591][ T7890] sctp: [Deprecated]: syz.2.424 (pid 7890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.748591][ T7890] Use struct sctp_sack_info instead [ 193.771634][ T5920] usb usb1-port1: attempt power cycle [ 193.810525][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.816959][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.910099][ T13] hsr_slave_1: left promiscuous mode [ 193.916195][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.943715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.069967][ T7901] Bluetooth: hci5: Frame reassembly failed (-84) [ 194.097534][ T6329] Bluetooth: hci5: Frame reassembly failed (-84) [ 194.129564][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.144127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.398659][ T7906] 9pnet_virtio: no channels available for device syz [ 194.786359][ T13] veth1_macvtap: left promiscuous mode [ 194.792259][ T13] veth0_macvtap: left promiscuous mode [ 194.797862][ T13] veth1_vlan: left promiscuous mode [ 194.868671][ T13] veth0_vlan: left promiscuous mode [ 195.297342][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 195.682829][ T30] audit: type=1400 audit(1757728608.613:451): avc: denied { mounton } for pid=7907 comm="syz.3.427" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 196.117933][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.126260][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 197.234414][ T30] audit: type=1400 audit(1757728608.783:452): avc: denied { create } for pid=7907 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 197.254670][ T30] audit: type=1400 audit(1757728608.793:453): avc: denied { write } for pid=7907 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 197.422361][ T7926] xt_HMARK: proto mask must be zero with L3 mode [ 197.429486][ T7926] xt_HMARK: proto mask must be zero with L3 mode [ 197.444573][ T7926] xt_HMARK: proto mask must be zero with L3 mode [ 197.456285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 197.480564][ T13] team0 (unregistering): Port device team_slave_0 removed [ 197.654718][ T1206] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 197.743695][ T7925] veth0_vlan: entered allmulticast mode [ 197.840231][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 197.865987][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 197.904778][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.965308][ T1206] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.984038][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.100830][ T1206] usb 3-1: Product: syz [ 198.105022][ T1206] usb 3-1: Manufacturer: syz [ 198.109615][ T1206] usb 3-1: SerialNumber: syz [ 198.120469][ T7940] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 198.210509][ T1206] usb 3-1: config 0 descriptor?? [ 198.307321][ T1206] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.357703][ T7950] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.390208][ T1206] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 198.411586][ T6321] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.453269][ T7754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.527513][ T30] audit: type=1400 audit(1757728611.403:454): avc: denied { mount } for pid=7935 comm="syz.3.431" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 198.657069][ T7754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.754129][ T7754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.788002][ T7754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.845243][ T1206] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 198.852268][ T1206] em28xx 3-1:0.0: Config register raw data: 0x41 [ 199.221516][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.256596][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.436648][ T13] IPVS: stop unused estimator thread 0... [ 199.601718][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.673284][ T30] audit: type=1400 audit(1757728612.603:455): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.726982][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.753098][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.761039][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.803631][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.810766][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.005577][ T30] audit: type=1400 audit(1757728612.923:456): avc: denied { read } for pid=7982 comm="syz.3.437" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.335176][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.430610][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.459476][ T5968] usb 3-1: USB disconnect, device number 15 [ 200.504902][ T5968] em28xx 3-1:0.0: Disconnecting em28xx [ 200.602896][ T5968] em28xx 3-1:0.0: Freeing device [ 201.032146][ T30] audit: type=1400 audit(1757728613.953:457): avc: denied { write } for pid=8012 comm="syz.4.440" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.088164][ T8013] overlay: ./file0 is not a directory [ 201.097311][ T8013] overlay: ./file0 is not a directory [ 201.164318][ T30] audit: type=1400 audit(1757728613.993:458): avc: denied { open } for pid=8012 comm="syz.4.440" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.251076][ T30] audit: type=1400 audit(1757728613.993:459): avc: denied { read } for pid=8012 comm="syz.4.440" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.307225][ T7754] veth0_vlan: entered promiscuous mode [ 201.328713][ T30] audit: type=1400 audit(1757728614.013:460): avc: denied { mounton } for pid=8012 comm="syz.4.440" path="/86/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.333632][ T7754] veth1_vlan: entered promiscuous mode [ 201.553992][ T7754] veth0_macvtap: entered promiscuous mode [ 201.583065][ T7754] veth1_macvtap: entered promiscuous mode [ 201.635181][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.748936][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.773360][ T6319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.791809][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.823863][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.923609][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 201.989032][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.770692][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.780515][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.801909][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.809849][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.317107][ T30] audit: type=1400 audit(1757728616.233:461): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/root/syzkaller.Q0wDGZ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 203.363695][ T30] audit: type=1400 audit(1757728616.233:462): avc: denied { mount } for pid=7754 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.398248][ T30] audit: type=1400 audit(1757728616.283:463): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/root/syzkaller.Q0wDGZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 203.447516][ T30] audit: type=1400 audit(1757728616.283:464): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/root/syzkaller.Q0wDGZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.575974][ T30] audit: type=1400 audit(1757728616.503:465): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.645883][ T8057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 203.662003][ T30] audit: type=1400 audit(1757728616.503:466): avc: denied { mounton } for pid=7754 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 204.428659][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.399'. [ 204.732240][ T8075] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 204.804432][ T8075] SELinux: failed to load policy [ 205.334050][ T8085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.452'. [ 205.724370][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.454'. [ 206.322052][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 206.322064][ T30] audit: type=1400 audit(1757728619.183:469): avc: denied { bind } for pid=8094 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.584610][ T30] audit: type=1400 audit(1757728619.423:470): avc: denied { ioctl } for pid=8101 comm="syz.3.458" path="socket:[16424]" dev="sockfs" ino=16424 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.786887][ T8110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.794367][ T8110] IPv6: NLM_F_CREATE should be set when creating new route [ 206.801581][ T8110] IPv6: NLM_F_CREATE should be set when creating new route [ 206.808752][ T8110] IPv6: NLM_F_CREATE should be set when creating new route [ 208.592275][ T8122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.602134][ T8122] block device autoloading is deprecated and will be removed. [ 209.011023][ T1206] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.042870][ T8142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.468'. [ 209.054508][ T30] audit: type=1326 audit(1757728621.993:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.0.468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x0 [ 209.170471][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 209.193594][ T1206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.218004][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.264944][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.319513][ T1206] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.348806][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.466707][ T1206] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.494931][ T1206] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.530991][ T1206] usb 4-1: Manufacturer: syz [ 209.545031][ T1206] usb 4-1: config 0 descriptor?? [ 210.641825][ T1206] rc_core: IR keymap rc-hauppauge not found [ 210.678175][ T1206] Registered IR keymap rc-empty [ 210.850859][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.870988][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.332678][ T1206] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 211.406310][ T1206] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 211.426947][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.452681][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.523830][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.590173][ T8176] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 211.620186][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.728125][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.741666][ T8175] IPVS: stopping master sync thread 8176 ... [ 211.771314][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 211.804998][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.203760][ T8182] 9pnet_virtio: no channels available for device syz [ 212.240259][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.270376][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.311610][ T1206] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 212.376221][ T1206] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 212.384494][ T30] audit: type=1400 audit(1757728625.303:472): avc: denied { read } for pid=8190 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.409679][ T1206] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.428496][ T8192] 9pnet_virtio: no channels available for device syz [ 212.435845][ T30] audit: type=1400 audit(1757728625.353:473): avc: denied { write } for pid=8190 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.531696][ T1206] usb 4-1: USB disconnect, device number 14 [ 213.426948][ T8204] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 213.741045][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 214.152955][ T8210] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 214.225805][ T8215] block nbd5: Attempted send on invalid socket [ 214.249899][ T8215] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.264857][ T8215] block nbd5: Attempted send on invalid socket [ 214.294378][ T8215] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.954765][ T8215] Mount JFS Failure: -5 [ 215.585893][ T8225] comedi comedi1: c6xdigio: I/O port conflict (0x3c4,3) [ 215.930737][ T8234] 9pnet_virtio: no channels available for device syz [ 216.383320][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 217.041285][ T8243] netlink: 'syz.5.493': attribute type 1 has an invalid length. [ 217.054097][ T8240] veth0_vlan: entered allmulticast mode [ 217.301578][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.494'. [ 217.405581][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 217.421309][ T30] audit: type=1326 audit(1757728630.353:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.0.494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x0 [ 217.523451][ T8260] binder: BINDER_SET_CONTEXT_MGR already set [ 217.545117][ T8260] binder: 8257:8260 ioctl 4018620d 200000000100 returned -16 [ 217.920490][ T30] audit: type=1400 audit(1757728630.833:475): avc: denied { connect } for pid=8269 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.197682][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.500'. [ 219.226557][ T8296] netlink: 'syz.5.501': attribute type 12 has an invalid length. [ 219.710203][ T30] audit: type=1400 audit(1757728632.633:476): avc: denied { map } for pid=8288 comm="syz.5.501" path="socket:[17696]" dev="sockfs" ino=17696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.830232][ T30] audit: type=1400 audit(1757728632.633:477): avc: denied { accept } for pid=8288 comm="syz.5.501" path="socket:[17696]" dev="sockfs" ino=17696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.118937][ T8317] 9pnet_virtio: no channels available for device syz [ 220.926807][ T30] audit: type=1400 audit(1757728633.853:478): avc: denied { append } for pid=8324 comm="syz.3.506" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.029010][ T30] audit: type=1400 audit(1757728633.883:479): avc: denied { ioctl } for pid=8324 comm="syz.3.506" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 221.286328][ T30] audit: type=1400 audit(1757728634.213:480): avc: denied { execute } for pid=8332 comm="syz.3.509" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 221.369116][ T8337] netlink: 'syz.2.507': attribute type 39 has an invalid length. [ 222.050732][ T8353] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 222.089766][ T8347] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 222.866713][ T8352] trusted_key: encrypted_key: insufficient parameters specified [ 223.799329][ T8372] 9pnet_virtio: no channels available for device syz [ 224.454328][ T8382] netlink: 156 bytes leftover after parsing attributes in process `syz.3.518'. [ 224.929211][ T8386] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 225.216926][ T8393] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.225852][ T8393] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.049210][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 228.087593][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 228.504869][ T8441] 9pnet_virtio: no channels available for device syz [ 229.384255][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.396457][ T8457] team0: Port device batadv1 added [ 229.560135][ T30] audit: type=1400 audit(1757728642.393:481): avc: denied { bind } for pid=8451 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.863739][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 230.898831][ T30] audit: type=1400 audit(1757728643.823:482): avc: denied { mounton } for pid=8484 comm="syz.2.539" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.637529][ T30] audit: type=1400 audit(1757728645.553:483): avc: denied { getopt } for pid=8505 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.763652][ T8508] 9pnet_virtio: no channels available for device syz [ 233.892969][ T30] audit: type=1400 audit(1757728646.783:484): avc: denied { read } for pid=8502 comm="syz.2.544" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 233.956302][ T8506] infiniband syz2: set active [ 233.985994][ T30] audit: type=1400 audit(1757728646.783:485): avc: denied { open } for pid=8502 comm="syz.2.544" path="/113/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 234.130149][ T8506] infiniband syz2: added bond_slave_0 [ 234.187681][ T8506] syz2: rxe_create_cq: returned err = -12 [ 234.576610][ T8506] infiniband syz2: Couldn't create ib_mad CQ [ 234.612235][ T8506] infiniband syz2: Couldn't open port 1 [ 234.685765][ T8506] RDS/IB: syz2: added [ 234.699156][ T8506] smc: adding ib device syz2 with port count 1 [ 234.780427][ T8506] smc: ib device syz2 port 1 has pnetid [ 237.143699][ T8561] 9pnet_virtio: no channels available for device syz [ 238.521118][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.5.567'. [ 238.527602][ T30] audit: type=1326 audit(1757728651.453:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8588 comm="syz.5.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff1438eba9 code=0x0 [ 238.947612][ T30] audit: type=1400 audit(1757728651.863:487): avc: denied { remove_name } for pid=8594 comm="syz.2.568" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.984257][ T8580] netlink: 68 bytes leftover after parsing attributes in process `syz.4.565'. [ 239.079518][ T8580] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 239.095580][ T30] audit: type=1400 audit(1757728651.863:488): avc: denied { unlink } for pid=8594 comm="syz.2.568" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.188316][ T8601] loop2: detected capacity change from 0 to 7 [ 239.204257][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.212604][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.356251][ T8601] Dev loop2: unable to read RDB block 7 [ 239.385756][ T8601] loop2: unable to read partition table [ 239.468808][ T8601] loop2: partition table beyond EOD, truncated [ 239.510264][ T8601] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.859831][ T8613] 9pnet_virtio: no channels available for device syz [ 241.242809][ T8615] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 241.253335][ T30] audit: type=1326 audit(1757728654.173:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.320552][ T8615] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 241.366420][ T30] audit: type=1326 audit(1757728654.173:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.546055][ T30] audit: type=1326 audit(1757728654.173:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.727864][ T30] audit: type=1326 audit(1757728654.173:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.893561][ T30] audit: type=1326 audit(1757728654.173:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.926529][ T30] audit: type=1326 audit(1757728654.173:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 241.949912][ T30] audit: type=1326 audit(1757728654.173:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.0.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x7ffc0000 [ 242.832486][ T92] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.859730][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 243.170099][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 243.350726][ T92] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 243.359837][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.374396][ T92] usb 6-1: Product: syz [ 243.374414][ T92] usb 6-1: Manufacturer: syz [ 243.374427][ T92] usb 6-1: SerialNumber: syz [ 243.376356][ T92] usb 6-1: config 0 descriptor?? [ 243.518363][ T92] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 244.204539][ T92] gspca_stk1135: reg_w 0x2 err -110 [ 244.210779][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.217094][ T92] gspca_stk1135: Sensor write failed [ 244.222438][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.231906][ T92] gspca_stk1135: Sensor write failed [ 244.239104][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.269042][ T92] gspca_stk1135: Sensor read failed [ 244.279492][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.287198][ T92] gspca_stk1135: Sensor read failed [ 244.307888][ T92] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.325272][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.332291][ T92] gspca_stk1135: Sensor read failed [ 244.337899][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.345598][ T92] gspca_stk1135: Sensor read failed [ 244.356254][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.364614][ T92] gspca_stk1135: Sensor write failed [ 244.371650][ T92] gspca_stk1135: serial bus timeout: status=0x00 [ 244.378046][ T92] gspca_stk1135: Sensor write failed [ 244.464110][ T92] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 245.749908][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 245.749924][ T30] audit: type=1326 audit(1757728658.673:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 245.824000][ T92] usb 6-1: USB disconnect, device number 2 [ 245.831737][ T8676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.588'. [ 245.850331][ T30] audit: type=1326 audit(1757728658.713:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 245.924188][ T30] audit: type=1326 audit(1757728658.713:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 246.045209][ T30] audit: type=1326 audit(1757728658.713:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 246.070544][ T30] audit: type=1326 audit(1757728658.713:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 246.098300][ T30] audit: type=1326 audit(1757728658.713:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 246.128512][ T30] audit: type=1326 audit(1757728658.713:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbb18eba9 code=0x7ffc0000 [ 246.213111][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 246.330139][ T5903] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.524457][ T30] audit: type=1326 audit(1757728658.953:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.0.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663bf8eba9 code=0x0 [ 246.600214][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 246.620588][ T5903] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.632429][ T5903] usb 4-1: config 0 has no interface number 0 [ 246.666106][ T5903] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 246.687463][ T30] audit: type=1400 audit(1757728659.033:516): avc: denied { mounton } for pid=8681 comm="syz.2.590" path="/121/file0/cgroup" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 246.710286][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.718783][ T5903] usb 4-1: Product: syz [ 246.808757][ T5903] usb 4-1: Manufacturer: syz [ 246.813812][ T5903] usb 4-1: SerialNumber: syz [ 246.889575][ T5903] usb 4-1: config 0 descriptor?? [ 247.370992][ T5903] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 247.578525][ T5903] gspca_spca1528: reg_w err -71 [ 247.641472][ T5903] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 247.669355][ T5903] usb 4-1: USB disconnect, device number 15 [ 247.855924][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.121321][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.410162][ T5931] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 248.743408][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.826341][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.883241][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 248.903867][ T5931] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 248.928670][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.945123][ T5931] usb 6-1: Product: syz [ 248.959492][ T5931] usb 6-1: Manufacturer: syz [ 249.056223][ T5931] usb 6-1: SerialNumber: syz [ 249.075460][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.091223][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.109488][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.117511][ T5931] usb 6-1: config 0 descriptor?? [ 249.124895][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.133601][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.146428][ T5931] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 249.191550][ T8729] ================================================================== [ 249.199644][ T8729] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 249.207638][ T8729] Read of size 8 at addr ffff8880625baa30 by task syz.3.607/8729 [ 249.215355][ T8729] [ 249.217679][ T8729] CPU: 1 UID: 0 PID: 8729 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT(full) [ 249.217705][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.217716][ T8729] Call Trace: [ 249.217722][ T8729] [ 249.217729][ T8729] dump_stack_lvl+0x116/0x1f0 [ 249.217774][ T8729] print_report+0xcd/0x630 [ 249.217800][ T8729] ? __virt_addr_valid+0x81/0x610 [ 249.217824][ T8729] ? __phys_addr+0xe8/0x180 [ 249.217848][ T8729] ? sysfs_remove_file_ns+0x63/0x70 [ 249.217867][ T8729] kasan_report+0xe0/0x110 [ 249.217887][ T8729] ? sysfs_remove_file_ns+0x63/0x70 [ 249.217909][ T8729] sysfs_remove_file_ns+0x63/0x70 [ 249.217928][ T8729] driver_remove_file+0x4a/0x60 [ 249.217953][ T8729] bus_remove_driver+0x224/0x2c0 [ 249.217975][ T8729] driver_unregister+0x76/0xb0 [ 249.217996][ T8729] comedi_device_detach_locked+0x12c/0xa50 [ 249.218020][ T8729] do_devconfig_ioctl+0x555/0x710 [ 249.218044][ T8729] ? __mutex_lock+0x1c5/0x1060 [ 249.218067][ T8729] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 249.218098][ T8729] ? find_held_lock+0x2b/0x80 [ 249.218122][ T8729] comedi_unlocked_ioctl+0x165d/0x2f00 [ 249.218144][ T8729] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 249.218165][ T8729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.218185][ T8729] ? do_vfs_ioctl+0x128/0x14f0 [ 249.218210][ T8729] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.218236][ T8729] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.218268][ T8729] ? hook_file_ioctl_common+0x145/0x410 [ 249.218290][ T8729] ? selinux_file_ioctl+0x180/0x270 [ 249.218315][ T8729] ? selinux_file_ioctl+0xb4/0x270 [ 249.218341][ T8729] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 249.218359][ T8729] __x64_sys_ioctl+0x18e/0x210 [ 249.218385][ T8729] do_syscall_64+0xcd/0x4e0 [ 249.218406][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.218424][ T8729] RIP: 0033:0x7f2dbb18eba9 [ 249.218440][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.218456][ T8729] RSP: 002b:00007f2dbbf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.218475][ T8729] RAX: ffffffffffffffda RBX: 00007f2dbb3d5fa0 RCX: 00007f2dbb18eba9 [ 249.218486][ T8729] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 249.218497][ T8729] RBP: 00007f2dbb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.218507][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.218516][ T8729] R13: 00007f2dbb3d6038 R14: 00007f2dbb3d5fa0 R15: 00007ffff4b3fe38 [ 249.218532][ T8729] [ 249.218538][ T8729] [ 249.469715][ T8729] Allocated by task 26: [ 249.473854][ T8729] kasan_save_stack+0x33/0x60 [ 249.478525][ T8729] kasan_save_track+0x14/0x30 [ 249.483178][ T8729] __kasan_kmalloc+0xaa/0xb0 [ 249.487743][ T8729] __kmalloc_noprof+0x223/0x510 [ 249.492569][ T8729] security_inode_init_security+0x13f/0x390 [ 249.498445][ T8729] shmem_mknod+0x22e/0x450 [ 249.502844][ T8729] vfs_mknod+0x5d7/0x8e0 [ 249.507065][ T8729] devtmpfs_work_loop+0x1b0/0xd90 [ 249.512069][ T8729] devtmpfsd+0x4c/0x50 [ 249.516115][ T8729] kthread+0x3c2/0x780 [ 249.520160][ T8729] ret_from_fork+0x56a/0x730 [ 249.524728][ T8729] ret_from_fork_asm+0x1a/0x30 [ 249.529474][ T8729] [ 249.531773][ T8729] Freed by task 26: [ 249.535551][ T8729] kasan_save_stack+0x33/0x60 [ 249.540204][ T8729] kasan_save_track+0x14/0x30 [ 249.544857][ T8729] kasan_save_free_info+0x3b/0x60 [ 249.549860][ T8729] __kasan_slab_free+0x60/0x70 [ 249.554605][ T8729] kfree+0x2b4/0x4d0 [ 249.558484][ T8729] security_inode_init_security+0x2eb/0x390 [ 249.564354][ T8729] shmem_mknod+0x22e/0x450 [ 249.568751][ T8729] vfs_mknod+0x5d7/0x8e0 [ 249.572975][ T8729] devtmpfs_work_loop+0x1b0/0xd90 [ 249.577999][ T8729] devtmpfsd+0x4c/0x50 [ 249.582067][ T8729] kthread+0x3c2/0x780 [ 249.586120][ T8729] ret_from_fork+0x56a/0x730 [ 249.590695][ T8729] ret_from_fork_asm+0x1a/0x30 [ 249.595441][ T8729] [ 249.597758][ T8729] The buggy address belongs to the object at ffff8880625baa00 [ 249.597758][ T8729] which belongs to the cache kmalloc-256 of size 256 [ 249.611814][ T8729] The buggy address is located 48 bytes inside of [ 249.611814][ T8729] freed 256-byte region [ffff8880625baa00, ffff8880625bab00) [ 249.625520][ T8729] [ 249.627823][ T8729] The buggy address belongs to the physical page: [ 249.634209][ T8729] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x625ba [ 249.642946][ T8729] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 249.651435][ T8729] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 249.658955][ T8729] page_type: f5(slab) [ 249.662931][ T8729] raw: 00fff00000000040 ffff88801b841b40 ffffea0000d36f80 dead000000000002 [ 249.671491][ T8729] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 249.680050][ T8729] head: 00fff00000000040 ffff88801b841b40 ffffea0000d36f80 dead000000000002 [ 249.688697][ T8729] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 249.697345][ T8729] head: 00fff00000000001 ffffea0001896e81 00000000ffffffff 00000000ffffffff [ 249.705991][ T8729] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 249.714639][ T8729] page dumped because: kasan: bad access detected [ 249.721024][ T8729] page_owner tracks the page as allocated [ 249.726719][ T8729] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5855, tgid 5855 (syz-executor), ts 63922928459, free_ts 63836874589 [ 249.748068][ T8729] post_alloc_hook+0x1c0/0x230 [ 249.752829][ T8729] get_page_from_freelist+0x132b/0x38e0 [ 249.758352][ T8729] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 249.764222][ T8729] alloc_pages_mpol+0x1fb/0x550 [ 249.769049][ T8729] new_slab+0x247/0x330 [ 249.773189][ T8729] ___slab_alloc+0xcf2/0x1750 [ 249.777849][ T8729] __slab_alloc.constprop.0+0x56/0xb0 [ 249.783206][ T8729] __kmalloc_cache_noprof+0xfb/0x3e0 [ 249.788472][ T8729] ____ip_mc_inc_group+0x403/0x10f0 [ 249.793652][ T8729] ip_mc_up+0x154/0x3b0 [ 249.797790][ T8729] inetdev_event+0xafb/0x18a0 [ 249.802468][ T8729] notifier_call_chain+0xb9/0x410 [ 249.807478][ T8729] call_netdevice_notifiers_info+0xbe/0x140 [ 249.813354][ T8729] __dev_notify_flags+0x12c/0x2e0 [ 249.818365][ T8729] netif_change_flags+0x108/0x160 [ 249.823375][ T8729] do_setlink.constprop.0+0xb53/0x4380 [ 249.828838][ T8729] page last free pid 5855 tgid 5855 stack trace: [ 249.835139][ T8729] __free_frozen_pages+0x7d5/0x10f0 [ 249.840323][ T8729] qlist_free_all+0x4d/0x120 [ 249.844887][ T8729] kasan_quarantine_reduce+0x195/0x1e0 [ 249.850323][ T8729] __kasan_slab_alloc+0x69/0x90 [ 249.855149][ T8729] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 249.860517][ T8729] register_netdevice+0x4eb/0x2270 [ 249.865613][ T8729] nsim_create+0xdd5/0x1260 [ 249.870096][ T8729] __nsim_dev_port_add+0x435/0x7d0 [ 249.875192][ T8729] nsim_drv_probe+0xe40/0x1520 [ 249.879950][ T8729] really_probe+0x241/0xa90 [ 249.884434][ T8729] __driver_probe_device+0x1de/0x440 [ 249.889697][ T8729] driver_probe_device+0x4c/0x1b0 [ 249.894704][ T8729] __device_attach_driver+0x1df/0x310 [ 249.900056][ T8729] bus_for_each_drv+0x159/0x1e0 [ 249.904909][ T8729] __device_attach+0x1e4/0x4b0 [ 249.909654][ T8729] bus_probe_device+0x17f/0x1c0 [ 249.914499][ T8729] [ 249.916798][ T8729] Memory state around the buggy address: [ 249.922402][ T8729] ffff8880625ba900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.930439][ T8729] ffff8880625ba980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.938477][ T8729] >ffff8880625baa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.946511][ T8729] ^ [ 249.952114][ T8729] ffff8880625baa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.960177][ T8729] ffff8880625bab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.968298][ T8729] ================================================================== [ 250.010297][ T8729] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 250.017517][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT(full) [ 250.026716][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.036778][ T8729] Call Trace: [ 250.040052][ T8729] [ 250.042975][ T8729] dump_stack_lvl+0x3d/0x1f0 [ 250.047566][ T8729] vpanic+0x6e8/0x7a0 [ 250.051548][ T8729] ? __pfx_vpanic+0x10/0x10 [ 250.056051][ T8729] ? __pfx_vprintk_emit+0x10/0x10 [ 250.061077][ T8729] ? sysfs_remove_file_ns+0x63/0x70 [ 250.066272][ T8729] panic+0xca/0xd0 [ 250.069975][ T8729] ? __pfx_panic+0x10/0x10 [ 250.074371][ T8729] ? sysfs_remove_file_ns+0x63/0x70 [ 250.079559][ T8729] ? preempt_schedule_common+0x44/0xc0 [ 250.085004][ T8729] ? preempt_schedule_thunk+0x16/0x30 [ 250.090363][ T8729] check_panic_on_warn+0xab/0xb0 [ 250.095283][ T8729] end_report+0x107/0x170 [ 250.099598][ T8729] kasan_report+0xee/0x110 [ 250.104001][ T8729] ? sysfs_remove_file_ns+0x63/0x70 [ 250.109185][ T8729] sysfs_remove_file_ns+0x63/0x70 [ 250.114189][ T8729] driver_remove_file+0x4a/0x60 [ 250.119022][ T8729] bus_remove_driver+0x224/0x2c0 [ 250.123938][ T8729] driver_unregister+0x76/0xb0 [ 250.128688][ T8729] comedi_device_detach_locked+0x12c/0xa50 [ 250.134476][ T8729] do_devconfig_ioctl+0x555/0x710 [ 250.139489][ T8729] ? __mutex_lock+0x1c5/0x1060 [ 250.144234][ T8729] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 250.149770][ T8729] ? find_held_lock+0x2b/0x80 [ 250.154431][ T8729] comedi_unlocked_ioctl+0x165d/0x2f00 [ 250.159868][ T8729] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 250.165655][ T8729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.171535][ T8729] ? do_vfs_ioctl+0x128/0x14f0 [ 250.176302][ T8729] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.181332][ T8729] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.188174][ T8729] ? hook_file_ioctl_common+0x145/0x410 [ 250.193703][ T8729] ? selinux_file_ioctl+0x180/0x270 [ 250.198883][ T8729] ? selinux_file_ioctl+0xb4/0x270 [ 250.203979][ T8729] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 250.209765][ T8729] __x64_sys_ioctl+0x18e/0x210 [ 250.214516][ T8729] do_syscall_64+0xcd/0x4e0 [ 250.219002][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.224872][ T8729] RIP: 0033:0x7f2dbb18eba9 [ 250.229266][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.248859][ T8729] RSP: 002b:00007f2dbbf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.257249][ T8729] RAX: ffffffffffffffda RBX: 00007f2dbb3d5fa0 RCX: 00007f2dbb18eba9 [ 250.265194][ T8729] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 250.273139][ T8729] RBP: 00007f2dbb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.281087][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.289031][ T8729] R13: 00007f2dbb3d6038 R14: 00007f2dbb3d5fa0 R15: 00007ffff4b3fe38 [ 250.296984][ T8729] [ 250.300169][ T8729] Kernel Offset: disabled [ 250.304464][ T8729] Rebooting in 86400 seconds..