last executing test programs: 7m48.377365456s ago: executing program 2 (id=691): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffea9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x3000000) 7m45.099623101s ago: executing program 2 (id=701): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)={r2, 0xcfa000, 0x4}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) listen(0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 7m44.63951458s ago: executing program 2 (id=702): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) readlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000480)=""/136, 0x88) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="020000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000008000080000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$input_event(r1, &(0x7f0000000140)={{}, 0x1, 0x37, 0x6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) keyctl$setperm(0x5, 0x0, 0x280) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mmap(&(0x7f0000a7c000/0x4000)=nil, 0x4000, 0xc, 0x20010, 0xffffffffffffffff, 0xa000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x3, 0x52, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7800, 0x0, 0x9}}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000000540)={0x1cc, 0x13, 0x200, 0x70bd29, 0x25dfdbfb, {0x15, 0x5, 0x5, 0x7, {0x4e21, 0x4e20, [0x7, 0x400, 0xf33, 0xf5f3], [0x7, 0x3, 0x841, 0x7], r3, [0x23, 0x80000000]}, 0x9, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "90c87afd223874dad336ba98d488ef0aa23021dafc2a82ee9964b2ea4698fe40001a70364fe2db0812b433a91d90345812315f6d1033510c1aa5a8835ac16837fe6e74f2fd41cea1d5ae09704e3a1828d79860b6b34b585ea6fc1aad5c1b65566ca245dcb327b3"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "8c2f3b1b80dede8f15213025d10ed487fd0c2671d91f70667d0cd163b7be156d1abff3cc0e4d65c7eb5e166af518e269d0da8af4d825295a87c9f1975b386207be70dd5ee33395b20699edf7dd71849d9cae65e9ae44b96085c4a887462fdd1ec94ed19dbe6bdbf8308cc1cc42238ce5f1c217c4e86cadc99ab65287ab6f77f3be9cf43078be1b05f9a2"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "7d51a554f1be688f166f843493b42e7f598c7352c377e5e69b8cf4dade240c5f3cfe577dfb9762f3a5f1415495c9e7080501ff489c884a410feb630e52bef986dba71a7be23949b2fc1fd650a6a8950fe4b7921c1c2a0a08695d0dcec9bc14cab56f625c1fdee2aeaa22a1f70e7fcb867a5084"}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x0) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) 7m43.331262771s ago: executing program 2 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x8481) ioctl$TCXONC(r0, 0x540a, 0x2) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="e51ddf95a8dd82b3d4206aaa4b624818af441f6f3a7dcf9b7a8f6dfa107499476ce253771c0c89a22ad8362a01d6b393bc297af63dd4ca2dc8fd7f4bf3b449", 0x3f}, {0x0}, {}, {0x0}], 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x245) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000000000000000000016"]) ioctl$RTC_ALM_READ(r2, 0x40187014, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000240)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x72) 7m42.240831768s ago: executing program 2 (id=707): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, 0x0, &(0x7f00000002c0)=""/27}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) memfd_create(0x0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x800, 0x3, 0x34f}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x4, 0x11, 0x7, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0xb, 0x0, 0x6}]}, 0x20}}, 0x8000) memfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 7m41.174985824s ago: executing program 2 (id=709): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0xb, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000080)=[{}, {}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000200)={[0x5]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x8, &(0x7f0000000040)={0x5, 0x7f}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030003007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7m40.681445401s ago: executing program 32 (id=709): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0xb, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000080)=[{}, {}], 0x2, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000200)={[0x5]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x8, &(0x7f0000000040)={0x5, 0x7f}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030003007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 41.923383779s ago: executing program 0 (id=2019): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x28, r1, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 41.681781231s ago: executing program 0 (id=2023): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x33, 0x601, 0x70bd2a, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x18800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x8080) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "b427ececbbe6d400fd000002ffffffffff000000000000000000000000000002", 0x34363248}) syz_open_dev$video(&(0x7f0000000080), 0x0, 0x10800) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x2000003) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x3}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 38.186914786s ago: executing program 0 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.286571182s ago: executing program 0 (id=2040): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x0, @tid=r1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) r5 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003ac0)={0x38, r7, 0x203, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}}, 0x0) rmdir(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000002c00)=@mmap={0x401, 0x2, 0x4, 0x2, 0x0, {}, {0x1, 0xc, 0x4, 0x4c, 0x9, 0x8, "ad572b30"}, 0x4, 0x1, {}, 0x9, 0x0, r0}) ftruncate(0xffffffffffffffff, 0x3) 34.350883879s ago: executing program 0 (id=2042): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000280)) 34.347065908s ago: executing program 3 (id=2043): prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 33.689709229s ago: executing program 3 (id=2045): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@my=0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7a5, &(0x7f0000000140)={{@my=0x1}, 0x1}) 33.59926568s ago: executing program 3 (id=2046): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 33.528533899s ago: executing program 3 (id=2047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000480)="6639370f20d86635200000000f22d82ed07e5b66b9ff03000066b8acb2000066ba000000000f302e6767d0850a34e28766b8247300000f23d00f21f86635100000020f23f82e0f1c980000260f792c0f01f10fc73b", 0x55}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 33.077949173s ago: executing program 0 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000014c0)={0x0, 0x635, &(0x7f0000000480)="f9f6906954c7609e", &(0x7f00000004c0)="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", 0x8, 0x7fc}) 33.048554935s ago: executing program 3 (id=2049): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00006c"], 0x14}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 32.857511915s ago: executing program 3 (id=2051): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000080), 0x0, 0x4000001, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{0x9, 0x1, 0x1, [0x80, 0x10, 0x9, 0xffffffdd, 0x5, 0x3915, 0x0, 0x901]}]}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000001c0)={0x9, 0x9, 0x1, 0x0, 0x0, [{{r7}, 0xc}]}) 23.50107119s ago: executing program 5 (id=2072): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x94, 0x0, 0xd15, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x4a}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="d349d296da061211963282e65d0a7b114ee2a14d4634dee91f6b93e18641"}, {0xa, 0x0, @default_ap_ssid}, {0x11, 0x0, @random="e51310c871b66ee89e78287d1e"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4050}, 0x2400801c) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 23.10984376s ago: executing program 4 (id=2073): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40044) listen(r0, 0xc) connect$x25(r0, &(0x7f0000000a80), 0x12) 21.894412772s ago: executing program 5 (id=2074): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1c1301, 0xa2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f00000081c0)={0x2020}, 0x2020) 21.648509956s ago: executing program 4 (id=2075): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1801ebff000000000000000000000000850000006d000000747ccba0f43ec1ef44eb7f3f54c045633be2e7f3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 20.651119687s ago: executing program 4 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000083c0)=@newtaction={0x14, 0x30, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xd8, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xd, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x800}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf5a}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d330}, @TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 20.627974855s ago: executing program 5 (id=2078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 20.45376328s ago: executing program 4 (id=2079): r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x8080) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000100)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0xfffc, 0x2, @local, 0x7ac}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x101}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "b427ececbbe6d400fd000002ffffffffff000000000000000000000000000002", 0x34363248}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x2000003) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x3}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 19.338480778s ago: executing program 1 (id=2080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xd0}}, 0x0) 19.323335444s ago: executing program 5 (id=2081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 19.237847752s ago: executing program 4 (id=2082): capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) fanotify_init(0x1200, 0x0) 19.23277938s ago: executing program 4 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() time(&(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) close_range(r2, 0xffffffffffffffff, 0x0) 19.203535079s ago: executing program 5 (id=2084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)={0x14, r1, 0x201, 0xffffffff, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x40000) 18.985600523s ago: executing program 5 (id=2085): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000010000000000000000000000000000fe8000000000000000000000000000bbac22559832750056791414bb000000000000000000000000fc000000000000000800"/104, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="fc02000000e3ffffffffffffff000000ffffffff00b4921ecfa7ca1feb620c33f5defb00000000000000000000000000d27a5d5e2133", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"], 0x178}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x48, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x84) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r8, &(0x7f00000000c0), 0xfdf3) close_range(r0, 0xffffffffffffffff, 0x0) 18.219853593s ago: executing program 1 (id=2086): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x9f22}, &(0x7f0000000180)=0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) 17.475767712s ago: executing program 33 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000014c0)={0x0, 0x635, &(0x7f0000000480)="f9f6906954c7609e", &(0x7f00000004c0)="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", 0x8, 0x7fc}) 17.469697991s ago: executing program 1 (id=2088): socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2b, 0x80801, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x128, 0x5c, 0x160, 0x128, 0x3e0, 0x320, 0x228, 0x25a, 0x320, 0x228, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2e}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x4}, 0x5002, 0x100, 0x128, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh={{0x30}, {0x5e, 0x4, 0xfe, 0x8, 0x0, 0xb}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 17.419455875s ago: executing program 34 (id=2051): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401}) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000080), 0x0, 0x4000001, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{0x9, 0x1, 0x1, [0x80, 0x10, 0x9, 0xffffffdd, 0x5, 0x3915, 0x0, 0x901]}]}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000001c0)={0x9, 0x9, 0x1, 0x0, 0x0, [{{r7}, 0xc}]}) 17.030728708s ago: executing program 1 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) shutdown(r1, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x0) 16.059570673s ago: executing program 1 (id=2091): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r3, 0x6700000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 15.862022962s ago: executing program 1 (id=2092): syz_open_dev$vim2m(0x0, 0x7f, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0) 3.996702284s ago: executing program 35 (id=2085): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000010000000000000000000000000000fe8000000000000000000000000000bbac22559832750056791414bb000000000000000000000000fc000000000000000800"/104, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="fc02000000e3ffffffffffffff000000ffffffff00b4921ecfa7ca1feb620c33f5defb00000000000000000000000000d27a5d5e2133", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"], 0x178}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x48, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x84) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r8, &(0x7f00000000c0), 0xfdf3) close_range(r0, 0xffffffffffffffff, 0x0) 3.907313043s ago: executing program 36 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() time(&(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=2092): syz_open_dev$vim2m(0x0, 0x7f, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): mber: syz [ 519.233502][ T5833] usb 5-1: config 0 descriptor?? [ 519.244742][ T5833] ch341 5-1:0.0: ch341-uart converter detected [ 519.429149][ T5967] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 519.519213][T11103] FAULT_INJECTION: forcing a failure. [ 519.519213][T11103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.532675][T11103] CPU: 1 UID: 0 PID: 11103 Comm: syz.3.1359 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 519.532716][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 519.532727][T11103] Call Trace: [ 519.532737][T11103] [ 519.532744][T11103] dump_stack_lvl+0x16c/0x1f0 [ 519.532778][T11103] should_fail_ex+0x512/0x640 [ 519.532803][T11103] _copy_to_user+0x32/0xd0 [ 519.532827][T11103] inet_gifconf+0x2bc/0x5b0 [ 519.532857][T11103] ? __pfx_inet_gifconf+0x10/0x10 [ 519.532877][T11103] ? __might_fault+0xe3/0x190 [ 519.532910][T11103] dev_ifconf+0x1f7/0x390 [ 519.532936][T11103] ? __pfx_dev_ifconf+0x10/0x10 [ 519.532953][T11103] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 519.532987][T11103] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 519.533021][T11103] sock_ioctl+0x388/0x6b0 [ 519.533045][T11103] ? __pfx_sock_ioctl+0x10/0x10 [ 519.533070][T11103] ? security_file_ioctl+0xa6/0x240 [ 519.533103][T11103] ? selinux_file_ioctl+0x180/0x270 [ 519.533126][T11103] ? selinux_file_ioctl+0xb4/0x270 [ 519.533153][T11103] ? __pfx_sock_ioctl+0x10/0x10 [ 519.533178][T11103] __x64_sys_ioctl+0x190/0x200 [ 519.533206][T11103] do_syscall_64+0xcd/0x260 [ 519.533231][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.533250][T11103] RIP: 0033:0x7f382238e169 [ 519.533266][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.533282][T11103] RSP: 002b:00007f3823293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.533300][T11103] RAX: ffffffffffffffda RBX: 00007f38225b6160 RCX: 00007f382238e169 [ 519.533310][T11103] RDX: 0000200000002c00 RSI: 0000000000008912 RDI: 0000000000000005 [ 519.533321][T11103] RBP: 00007f3823293090 R08: 0000000000000000 R09: 0000000000000000 [ 519.533330][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.533340][T11103] R13: 0000000000000000 R14: 00007f38225b6160 R15: 00007fffe8690fc8 [ 519.533364][T11103] [ 519.740393][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.914436][ T5967] usb 1-1: device not accepting address 35, error -71 [ 520.215347][ T30] audit: type=1400 audit(1745164859.540:745): avc: denied { ioctl } for pid=11096 comm="syz.1.1358" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32465 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 520.296419][ T30] audit: type=1400 audit(1745164859.540:746): avc: denied { ioctl } for pid=11096 comm="syz.1.1358" path="socket:[32430]" dev="sockfs" ino=32430 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 520.333039][T11110] netlink: ct family unspecified [ 520.338145][T11110] openvswitch: netlink: Actions may not be safe on all matching packets [ 521.083203][T11126] syzkaller1: entered promiscuous mode [ 521.089949][T11126] syzkaller1: entered allmulticast mode [ 521.901763][ T5833] ch341-uart ttyUSB0: break control not supported, using simulated break [ 521.950033][ T5833] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 521.979456][ T5833] usb 5-1: USB disconnect, device number 26 [ 522.010373][ T5833] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 522.055824][ T5833] ch341 5-1:0.0: device disconnected [ 522.872050][ T9044] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 523.029104][ T9044] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 523.063466][ T9044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.382385][ T9044] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 523.405026][ T9044] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 523.428177][ T9044] usb 1-1: Manufacturer: syz [ 523.451681][ T9044] usb 1-1: config 0 descriptor?? [ 523.532903][ T9044] rc_core: IR keymap rc-hauppauge not found [ 523.558869][ T9044] Registered IR keymap rc-empty [ 523.580734][ T9044] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 523.628692][ T9044] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 523.937156][ T5967] usb 1-1: USB disconnect, device number 37 [ 524.148613][T11178] validate_nla: 43 callbacks suppressed [ 524.148646][T11178] netlink: 'syz.5.1376': attribute type 1 has an invalid length. [ 524.462921][ T972] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 524.585463][ T5873] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 524.699513][ T972] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.727706][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.757559][ T972] usb 6-1: Product: syz [ 524.766431][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.790196][ T972] usb 6-1: Manufacturer: syz [ 524.809775][ T972] usb 6-1: SerialNumber: syz [ 524.815810][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.860561][ T972] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 524.871616][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.919527][ T5967] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 524.943113][ T5873] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.987279][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.001784][ T5873] usb 2-1: config 0 descriptor?? [ 525.292252][ T5833] usb 6-1: USB disconnect, device number 18 [ 525.536377][T11210] netlink: 'syz.0.1380': attribute type 3 has an invalid length. [ 525.558678][ T5873] plantronics 0003:047F:FFFF.0008: invalid report_count 65280 [ 525.600229][ T5873] plantronics 0003:047F:FFFF.0008: item 0 2 1 9 parsing failed [ 525.630390][ T30] audit: type=1400 audit(1745164864.950:747): avc: denied { getopt } for pid=11214 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 525.652871][ T5873] plantronics 0003:047F:FFFF.0008: parse failed [ 525.668262][ T5873] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 526.005696][ T5967] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 526.123679][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1375'. [ 526.143146][ T5967] ath9k_htc: Failed to initialize the device [ 526.150608][ T5833] usb 6-1: ath9k_htc: USB layer deinitialized [ 526.256530][ T5873] usb 2-1: USB disconnect, device number 28 [ 526.278758][ T30] audit: type=1400 audit(1745164865.590:748): avc: denied { create } for pid=11222 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 528.163265][ T5967] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 528.576647][T11238] netlink: 'syz.0.1384': attribute type 1 has an invalid length. [ 528.586466][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 529.206575][ T5967] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 529.217482][ T5967] usb 6-1: config 150 has no interface number 0 [ 529.228704][ T5967] usb 6-1: config 150 interface 204 has no altsetting 0 [ 529.482902][ T5967] usb 6-1: config 150 interface 1 has no altsetting 0 [ 529.548237][ T5967] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 529.572831][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.572884][ T5967] usb 6-1: Product: syz [ 529.572915][ T5967] usb 6-1: Manufacturer: syz [ 529.572930][ T5967] usb 6-1: SerialNumber: syz [ 530.017267][ T5836] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 530.040173][T11261] afs: Unknown parameter 'fsmagic' [ 531.151434][ T5967] xr_serial 6-1:150.204: xr_serial converter detected [ 531.161304][ T5967] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 531.161379][ T5967] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 531.197890][ T5967] usb 6-1: USB disconnect, device number 19 [ 531.252986][ T5967] xr_serial 6-1:150.204: device disconnected [ 531.363506][T11269] FAULT_INJECTION: forcing a failure. [ 531.363506][T11269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.404638][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.5.1395 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 531.404669][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.404679][T11269] Call Trace: [ 531.404686][T11269] [ 531.404693][T11269] dump_stack_lvl+0x16c/0x1f0 [ 531.404729][T11269] should_fail_ex+0x512/0x640 [ 531.404755][T11269] _copy_from_user+0x2e/0xd0 [ 531.404779][T11269] copy_mount_options+0x76/0x190 [ 531.404807][T11269] __x64_sys_mount+0x1ac/0x310 [ 531.404828][T11269] ? __pfx___x64_sys_mount+0x10/0x10 [ 531.404845][T11269] ? rcu_is_watching+0x12/0xc0 [ 531.404877][T11269] do_syscall_64+0xcd/0x260 [ 531.404902][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.404921][T11269] RIP: 0033:0x7f83ca78e169 [ 531.404935][T11269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.404951][T11269] RSP: 002b:00007f83cb6af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.404970][T11269] RAX: ffffffffffffffda RBX: 00007f83ca9b5fa0 RCX: 00007f83ca78e169 [ 531.404981][T11269] RDX: 0000200000002340 RSI: 00002000000025c0 RDI: 0000000000000000 [ 531.404992][T11269] RBP: 00007f83cb6af090 R08: 0000200000000280 R09: 0000000000000000 [ 531.405002][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.405017][T11269] R13: 0000000000000000 R14: 00007f83ca9b5fa0 R15: 00007ffdd599d5e8 [ 531.405040][T11269] [ 531.554233][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.661512][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 531.751482][ T30] audit: type=1400 audit(1745164871.070:749): avc: denied { shutdown } for pid=11271 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 532.044196][ T5967] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 532.207788][ T5967] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 532.219265][ T5967] usb 2-1: config 8 has no interface number 0 [ 532.482902][ T5967] usb 2-1: config 8 interface 177 has no altsetting 0 [ 532.498830][ T5967] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 532.519423][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.262968][ T30] audit: type=1400 audit(1745164872.540:750): avc: denied { getopt } for pid=11292 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 533.282694][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.022788][ T5873] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 534.432961][ T5967] usb 2-1: string descriptor 0 read error: -71 [ 534.507865][ T5873] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 534.529981][ T5967] ir_toy 2-1:8.177: required endpoints not found [ 534.537715][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 534.549873][ T5967] usb 2-1: USB disconnect, device number 29 [ 534.559198][ T5873] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 534.559245][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 534.559265][ T5873] usb 5-1: Product: syz [ 534.559295][ T5873] usb 5-1: Manufacturer: syz [ 534.559309][ T5873] usb 5-1: SerialNumber: syz [ 534.564801][ T5873] usb 5-1: config 0 descriptor?? [ 534.571408][ T5873] usb 5-1: selecting invalid altsetting 0 [ 534.950176][ T30] audit: type=1400 audit(1745164874.270:751): avc: denied { bind } for pid=11311 comm="syz.5.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 535.220552][T11316] FAULT_INJECTION: forcing a failure. [ 535.220552][T11316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.233867][T11316] CPU: 1 UID: 0 PID: 11316 Comm: syz.1.1410 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 535.233893][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.233903][T11316] Call Trace: [ 535.233913][T11316] [ 535.233923][T11316] dump_stack_lvl+0x16c/0x1f0 [ 535.233963][T11316] should_fail_ex+0x512/0x640 [ 535.233988][T11316] _copy_from_user+0x2e/0xd0 [ 535.234009][T11316] restore_altstack+0x93/0x170 [ 535.234030][T11316] ? __pfx_restore_altstack+0x10/0x10 [ 535.234046][T11316] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.234065][T11316] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.234087][T11316] ? _raw_spin_unlock_irq+0x2e/0x50 [ 535.234103][T11316] ? set_current_blocked+0xdd/0x120 [ 535.234125][T11316] __do_sys_rt_sigreturn+0x13c/0x230 [ 535.234154][T11316] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 535.234182][T11316] do_syscall_64+0xcd/0x260 [ 535.234206][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.234239][T11316] RIP: 0033:0x7f2325d2a359 [ 535.234254][T11316] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 535.234268][T11316] RSP: 002b:00007f2326c9f340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 535.234285][T11316] RAX: ffffffffffffffda RBX: 00007f2325fb5fa0 RCX: 00007f2325d2a359 [ 535.234296][T11316] RDX: 00007f2326c9f340 RSI: 00007f2326c9f470 RDI: 0000000000000021 [ 535.234306][T11316] RBP: 00007f2326ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 535.234314][T11316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 535.234323][T11316] R13: 0000000000000000 R14: 00007f2325fb5fa0 R15: 00007ffcff4e79d8 [ 535.234344][T11316] [ 535.411894][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.764887][T11323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.008014][ T5967] usb 5-1: USB disconnect, device number 27 [ 536.076472][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 536.084551][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 538.571870][T11347] trusted_key: encrypted_key: key user:syz not found [ 539.724401][T11342] kvm: user requested TSC rate below hardware speed [ 539.960915][ T5873] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 540.383177][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 540.414404][ T5873] usb 5-1: config 8 has an invalid interface number: 164 but max is 0 [ 540.439866][ T5873] usb 5-1: config 8 has no interface number 0 [ 540.466176][ T5873] usb 5-1: too many endpoints for config 8 interface 164 altsetting 65: 149, using maximum allowed: 30 [ 540.510345][ T5873] usb 5-1: config 8 interface 164 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 540.510423][ T5873] usb 5-1: config 8 interface 164 has no altsetting 0 [ 540.536934][ T5873] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 540.536984][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.537006][ T5873] usb 5-1: Product: syz [ 540.537034][ T5873] usb 5-1: Manufacturer: syz [ 540.537050][ T5873] usb 5-1: SerialNumber: syz [ 541.294842][T11377] netlink: 'syz.5.1427': attribute type 3 has an invalid length. [ 541.984592][ T5873] ums-onetouch 5-1:8.164: USB Mass Storage device detected [ 542.126662][ T5873] usb 5-1: USB disconnect, device number 28 [ 543.052020][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 543.065321][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 543.549274][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 543.634374][T11409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1436'. [ 544.489698][ T30] audit: type=1400 audit(1745164883.810:752): avc: denied { bind } for pid=11417 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.530627][T11418] netlink: 'syz.0.1439': attribute type 4 has an invalid length. [ 544.540448][T11418] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1439'. [ 544.550140][ T30] audit: type=1400 audit(1745164883.810:753): avc: denied { setopt } for pid=11417 comm="syz.0.1439" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.576624][ T30] audit: type=1400 audit(1745164883.810:754): avc: denied { write } for pid=11417 comm="syz.0.1439" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 544.589053][T11418] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.598960][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.630834][ T30] audit: type=1400 audit(1745164883.810:755): avc: denied { connect } for pid=11417 comm="syz.0.1439" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.138158][T11433] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1444'. [ 546.163023][ T30] audit: type=1400 audit(1745164885.460:756): avc: denied { write } for pid=11431 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 546.250569][ T30] audit: type=1400 audit(1745164885.460:757): avc: denied { nlmsg_read } for pid=11431 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 546.491810][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 546.503752][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 546.820333][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 546.966027][ T30] audit: type=1400 audit(1745164886.290:758): avc: denied { remount } for pid=11451 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 546.966115][T11453] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 550.077211][ T30] audit: type=1400 audit(1745164889.400:759): avc: denied { wake_alarm } for pid=11488 comm="syz.4.1460" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.618872][ T30] audit: type=1400 audit(1745164889.940:760): avc: denied { recv } for pid=11497 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.0.75 dest=40206 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 550.736144][ T30] audit: type=1400 audit(1745164890.060:761): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.806710][ T30] audit: type=1400 audit(1745164890.090:762): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.315364][ T30] audit: type=1400 audit(1745164890.090:763): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.340859][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.706861][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 551.716068][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 551.809944][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 551.956738][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1467'. [ 552.512545][T11528] syzkaller1: entered promiscuous mode [ 552.518208][T11528] syzkaller1: entered allmulticast mode [ 553.462485][ T2147] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 553.462927][ T5967] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 553.832840][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 553.847765][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.872830][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.923106][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.007573][ T5967] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.007628][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.016786][ T5967] usb 1-1: config 0 descriptor?? [ 554.024062][ T2147] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 554.024100][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.029045][ T2147] usb 2-1: config 0 descriptor?? [ 554.701525][ T5967] HID 045e:07da: Invalid code 65791 type 1 [ 554.710104][ T30] audit: type=1400 audit(1745164894.020:764): avc: denied { mount } for pid=11536 comm="syz.1.1476" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 554.716372][ T5967] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input22 [ 554.736175][ T2147] usb 2-1: USB disconnect, device number 30 [ 554.750968][ T5967] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 554.811799][T11555] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 554.826194][ T30] audit: type=1400 audit(1745164894.110:765): avc: denied { mount } for pid=11554 comm="syz.3.1479" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 554.911501][ T9044] usb 1-1: USB disconnect, device number 38 [ 554.919480][ T30] audit: type=1400 audit(1745164894.220:766): avc: denied { nlmsg_write } for pid=11522 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 555.009424][ T30] audit: type=1400 audit(1745164894.330:767): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 556.858365][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 556.870461][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 557.023885][ T53] wlan1: Trigger new scan to find an IBSS to join [ 557.089045][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 559.123371][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 559.315647][ T5873] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 559.533349][T11616] syzkaller1: entered promiscuous mode [ 559.538923][T11616] syzkaller1: entered allmulticast mode [ 560.119461][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 560.134830][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 560.165112][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 560.208756][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.239806][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.402213][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.452712][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 560.470619][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 560.524480][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.539439][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.554975][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.573306][ T5873] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 560.618024][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 560.673877][ T5873] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.729467][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.770397][ T30] audit: type=1400 audit(1745164900.090:768): avc: denied { shutdown } for pid=11617 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 560.771485][ T5873] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.971431][ T5873] usb 5-1: string descriptor 0 read error: -22 [ 560.984205][ T5873] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 561.006058][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.072845][ T5951] wlan1: Trigger new scan to find an IBSS to join [ 561.130834][ T5873] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 561.714338][T11607] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 561.733965][T11607] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 561.779098][ T30] audit: type=1400 audit(1745164901.100:769): avc: denied { read } for pid=11605 comm="syz.4.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.799589][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.867586][ T963] Bluetooth: (null): Invalid header checksum [ 561.876769][ T963] Bluetooth: (null): Invalid header checksum [ 561.883757][ T5873] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 561.973937][ T963] Bluetooth: (null): Invalid header checksum [ 562.057958][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.086181][ T36] Bluetooth: (null): Invalid header checksum [ 562.104168][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.118188][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.160930][ T5873] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 562.180827][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.190232][ T5873] usb 2-1: Product: syz [ 562.197168][ T963] Bluetooth: (null): Invalid header checksum [ 562.206419][ T5873] usb 2-1: Manufacturer: syz [ 562.211300][ T5873] usb 2-1: SerialNumber: syz [ 562.226595][ T5873] usb 2-1: config 0 descriptor?? [ 562.271668][ T5873] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 562.304927][ T963] Bluetooth: (null): Invalid header checksum [ 562.413964][ T963] Bluetooth: (null): Invalid header checksum [ 562.468710][ T5873] usb 2-1: USB disconnect, device number 31 [ 562.531900][ T13] Bluetooth: (null): Invalid header checksum [ 562.691582][ T82] Bluetooth: (null): Invalid header checksum [ 562.701424][T11642] tipc: Enabling of bearer rejected, failed to enable media [ 562.750414][ T963] Bluetooth: (null): Invalid header checksum [ 562.883762][ T82] Bluetooth: (null): Invalid header checksum [ 562.981034][ T30] audit: type=1400 audit(1745164902.270:770): avc: denied { create } for pid=11641 comm="syz.3.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 563.000579][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.185282][ T5856] usb 5-1: USB disconnect, device number 29 [ 563.627863][ T30] audit: type=1400 audit(1745164902.700:771): avc: denied { ioctl } for pid=11641 comm="syz.3.1506" path="socket:[34589]" dev="sockfs" ino=34589 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 563.652694][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.796803][T11652] dccp_v6_rcv: dropped packet with invalid checksum [ 563.919219][T11652] use of bytesused == 0 is deprecated and will be removed in the future, [ 563.946020][T11652] use the actual size instead. [ 564.991504][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.002173][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.878643][T11661] veth3: entered promiscuous mode [ 565.907394][T11661] veth3: entered allmulticast mode [ 566.140239][ T30] audit: type=1400 audit(1745164905.460:772): avc: denied { shutdown } for pid=11675 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.140917][T11679] FAULT_INJECTION: forcing a failure. [ 566.140917][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 566.185609][T11679] CPU: 0 UID: 0 PID: 11679 Comm: syz.3.1515 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 566.185641][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.185652][T11679] Call Trace: [ 566.185659][T11679] [ 566.185666][T11679] dump_stack_lvl+0x16c/0x1f0 [ 566.185703][T11679] should_fail_ex+0x512/0x640 [ 566.185723][T11679] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 566.185753][T11679] should_failslab+0xc2/0x120 [ 566.185772][T11679] __kmalloc_cache_noprof+0x6a/0x3e0 [ 566.185792][T11679] ? get_device_parent+0x274/0x4e0 [ 566.185838][T11679] ? get_device_parent+0x2b1/0x4e0 [ 566.185863][T11679] get_device_parent+0x2b1/0x4e0 [ 566.185888][T11679] device_add+0xbed/0x1a70 [ 566.185903][T11679] ? __pfx_dev_set_name+0x10/0x10 [ 566.185925][T11679] ? __pfx_device_add+0x10/0x10 [ 566.185947][T11679] ? lockdep_init_map_type+0x5c/0x280 [ 566.185967][T11679] ? __init_waitqueue_head+0xca/0x150 [ 566.185995][T11679] wakeup_source_device_create+0x214/0x2a0 [ 566.186026][T11679] wakeup_source_sysfs_add+0x1c/0x90 [ 566.186053][T11679] wakeup_source_register+0xaa/0x140 [ 566.186075][T11679] ep_create_wakeup_source+0x1dd/0x2e0 [ 566.186103][T11679] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 566.186132][T11679] ? do_epoll_ctl+0x154d/0x3590 [ 566.186163][T11679] do_epoll_ctl+0x1d6a/0x3590 [ 566.186199][T11679] ? __pfx_do_epoll_ctl+0x10/0x10 [ 566.186221][T11679] ? find_held_lock+0x2b/0x80 [ 566.186241][T11679] ? __might_fault+0xe3/0x190 [ 566.186258][T11679] ? __might_fault+0xe3/0x190 [ 566.186283][T11679] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 566.186305][T11679] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 566.186331][T11679] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 566.186361][T11679] do_syscall_64+0xcd/0x260 [ 566.186385][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.186405][T11679] RIP: 0033:0x7f382238e169 [ 566.186420][T11679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.186436][T11679] RSP: 002b:00007f38232d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 566.186453][T11679] RAX: ffffffffffffffda RBX: 00007f38225b5fa0 RCX: 00007f382238e169 [ 566.186464][T11679] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 566.186473][T11679] RBP: 00007f38232d5090 R08: 0000000000000000 R09: 0000000000000000 [ 566.186483][T11679] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 566.186493][T11679] R13: 0000000000000000 R14: 00007f38225b5fa0 R15: 00007fffe8690fc8 [ 566.186516][T11679] [ 566.202902][T11680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 566.449240][T11680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 566.456837][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.485326][T11680] vhci_hcd vhci_hcd.0: Device attached [ 566.510202][T11680] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 566.516771][T11680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 566.527313][T11680] vhci_hcd vhci_hcd.0: Device attached [ 566.756038][ T2147] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 566.945842][ T5856] vhci_hcd: vhci_device speed not set [ 567.046242][ T5856] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 567.405893][T11693] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 567.412490][T11693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 567.426261][T11693] vhci_hcd vhci_hcd.0: Device attached [ 567.457355][T11694] vhci_hcd: connection closed [ 567.460664][ T9669] vhci_hcd: stop threads [ 567.478740][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.490875][ T9669] vhci_hcd: release socket [ 567.498250][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 567.509314][ T9669] vhci_hcd: disconnect device [ 567.704465][ T2147] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 567.730583][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 567.759913][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.854839][ T2147] usb 2-1: config 0 descriptor?? [ 567.860599][T11676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 567.862228][T11681] vhci_hcd: connection reset by peer [ 567.875623][T11687] vhci_hcd: connection closed [ 567.882761][ T13] vhci_hcd: stop threads [ 567.894097][ T13] vhci_hcd: release socket [ 567.930093][ T13] vhci_hcd: disconnect device [ 567.959537][ T13] vhci_hcd: stop threads [ 567.975711][ T30] audit: type=1400 audit(1745164907.300:773): avc: denied { read } for pid=11696 comm="syz.3.1519" lport=48382 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 568.012404][ T13] vhci_hcd: release socket [ 568.017224][ T13] vhci_hcd: disconnect device [ 568.165710][ T5873] usb 2-1: USB disconnect, device number 32 [ 569.001843][T11717] xt_connbytes: Forcing CT accounting to be enabled [ 569.009346][T11717] --map-set only usable from mangle table [ 570.443211][ T5874] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 570.451322][ T30] audit: type=1400 audit(1745164909.770:774): avc: denied { map } for pid=11722 comm="syz.4.1527" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 570.728047][ T5874] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 570.762598][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.772835][ T5873] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 570.800657][ T5874] usb 1-1: Product: syz [ 570.812585][ T5874] usb 1-1: Manufacturer: syz [ 570.817257][ T5874] usb 1-1: SerialNumber: syz [ 570.865710][ T5874] usb 1-1: config 0 descriptor?? [ 570.893739][ T5874] gspca_main: sq930x-2.14.0 probing 2770:930c [ 570.923612][ T5873] usb 6-1: device descriptor read/64, error -71 [ 571.609003][ T5873] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 572.135408][ T5856] vhci_hcd: vhci_device speed not set [ 572.261579][T11748] netlink: 'syz.4.1535': attribute type 4 has an invalid length. [ 572.487087][T11750] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 573.109430][T11752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=11752 comm=syz.5.1536 [ 573.122979][ T5874] gspca_sq930x: reg_w 0105 0f00 failed -110 [ 573.143214][ T30] audit: type=1400 audit(1745164912.420:775): avc: denied { setopt } for pid=11747 comm="syz.4.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 573.352352][ T5874] gspca_sq930x: Sensor ov9630 not yet treated [ 573.359746][ T5874] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 573.501404][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 573.752662][ T5874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 573.833002][ T6090] usb 1-1: USB disconnect, device number 39 [ 573.858962][T11760] FAULT_INJECTION: forcing a failure. [ 573.858962][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 573.898438][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.0.1540 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 573.898470][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.898480][T11760] Call Trace: [ 573.898487][T11760] [ 573.898494][T11760] dump_stack_lvl+0x16c/0x1f0 [ 573.898531][T11760] should_fail_ex+0x512/0x640 [ 573.898553][T11760] ? fs_reclaim_acquire+0xae/0x150 [ 573.898582][T11760] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.898606][T11760] should_failslab+0xc2/0x120 [ 573.898627][T11760] __kmalloc_noprof+0xd2/0x510 [ 573.898657][T11760] tomoyo_realpath_from_path+0xc2/0x6e0 [ 573.898684][T11760] ? tomoyo_profile+0x47/0x60 [ 573.898702][T11760] tomoyo_path_number_perm+0x245/0x580 [ 573.898720][T11760] ? tomoyo_path_number_perm+0x237/0x580 [ 573.898741][T11760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.898762][T11760] ? find_held_lock+0x2b/0x80 [ 573.898808][T11760] ? find_held_lock+0x2b/0x80 [ 573.898826][T11760] ? hook_file_ioctl_common+0x145/0x410 [ 573.898848][T11760] ? __fget_files+0x20e/0x3c0 [ 573.898869][T11760] security_file_ioctl+0x9b/0x240 [ 573.898896][T11760] __x64_sys_ioctl+0xb7/0x200 [ 573.898922][T11760] do_syscall_64+0xcd/0x260 [ 573.898948][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.898966][T11760] RIP: 0033:0x7fd209b8e169 [ 573.898985][T11760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.899001][T11760] RSP: 002b:00007fd20a9ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.899020][T11760] RAX: ffffffffffffffda RBX: 00007fd209db5fa0 RCX: 00007fd209b8e169 [ 573.899031][T11760] RDX: 0000000000000000 RSI: 00000000c0506107 RDI: 0000000000000003 [ 573.899041][T11760] RBP: 00007fd20a9ba090 R08: 0000000000000000 R09: 0000000000000000 [ 573.899050][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.899059][T11760] R13: 0000000000000000 R14: 00007fd209db5fa0 R15: 00007ffd9c20e1a8 [ 573.899082][T11760] [ 573.899089][T11760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.116430][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 574.140140][ T5874] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 574.151200][ T5874] usb 4-1: config 0 has no interface number 0 [ 574.160610][T11763] syz.4.1539 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 574.179729][ T5874] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 574.189217][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.200530][ T5874] usb 4-1: Product: syz [ 574.207520][ T5874] usb 4-1: Manufacturer: syz [ 574.226436][ T5874] usb 4-1: SerialNumber: syz [ 574.255148][ T5874] usb 4-1: config 0 descriptor?? [ 574.286145][ T5874] smsc95xx v2.0.0 [ 574.319423][T11763] nvme_fabrics: missing parameter 'transport=%s' [ 574.343158][T11763] nvme_fabrics: missing parameter 'nqn=%s' [ 574.810412][T11777] syzkaller1: entered promiscuous mode [ 574.810521][T11777] syzkaller1: entered allmulticast mode [ 575.354177][ T5903] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 575.542462][ T5903] usb 5-1: device descriptor read/64, error -71 [ 575.882496][ T5874] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 575.942243][ T5903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 576.190027][T11789] syzkaller1: entered promiscuous mode [ 576.195898][T11789] syzkaller1: entered allmulticast mode [ 576.272357][ T5903] usb 5-1: device descriptor read/64, error -71 [ 576.380696][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.680582][ T5903] usb usb5-port1: attempt power cycle [ 576.721225][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.779430][ T5874] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 576.812909][ T5874] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 576.876721][ T5874] usb 4-1: USB disconnect, device number 23 [ 577.083218][ T5873] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 577.112315][ T5903] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 577.155270][ T5903] usb 5-1: device descriptor read/8, error -71 [ 577.243624][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 577.275151][ T5873] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 577.544750][ T5873] usb 1-1: config 0 has no interface number 0 [ 577.967949][ T5873] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 578.342596][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.389991][ T5873] usb 1-1: Product: syz [ 578.404556][ T5873] usb 1-1: Manufacturer: syz [ 578.409506][ T5873] usb 1-1: SerialNumber: syz [ 578.571302][ T5873] usb 1-1: config 0 descriptor?? [ 578.624245][ T5873] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 578.818920][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.828329][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.852237][ T5903] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 578.863370][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 578.906694][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 579.012218][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 579.041176][ T5903] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 579.085299][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 579.099796][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 579.124112][ T5903] usb 6-1: Product: syz [ 579.165469][ T5903] usb 6-1: Manufacturer: syz [ 579.166660][ T5903] usb 6-1: SerialNumber: syz [ 579.187522][ T5903] usb 6-1: config 0 descriptor?? [ 579.858859][T11825] serio: Serial port ptm0 [ 580.457167][ T30] audit: type=1400 audit(1745164919.370:776): avc: denied { setopt } for pid=11805 comm="syz.5.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 581.691541][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 581.750323][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 581.761887][ T5875] usb 1-1: USB disconnect, device number 40 [ 581.800440][ T2147] usb 6-1: USB disconnect, device number 22 [ 581.819771][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 581.869449][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 581.950673][ T5874] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 582.817862][ T5875] quatech2 1-1:0.51: device disconnected [ 582.868153][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.948485][ T5874] usb 5-1: Product: syz [ 582.965458][ T5874] usb 5-1: Manufacturer: syz [ 582.984842][ T5874] usb 5-1: SerialNumber: syz [ 582.998071][ T5874] usb 5-1: config 0 descriptor?? [ 583.012173][ T30] audit: type=1400 audit(1745164922.330:777): avc: denied { ioctl } for pid=11841 comm="syz.5.1563" path="socket:[35313]" dev="sockfs" ino=35313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 583.084453][ T5874] comedi comedi0: Wrong number of endpoints [ 583.118401][ T5874] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 583.360081][ T5874] usb 5-1: USB disconnect, device number 34 [ 584.483297][T11865] tmpfs: Bad value for 'mpol' [ 586.456937][T11885] autofs: Unknown parameter 'UR./o Wy#coIAkhø"oTKmd-tp'WnDRX8a\l] [ 586.456937][T11885] )J7;)uj?:e' [ 587.307100][T11894] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.546643][T11894] lo speed is unknown, defaulting to 1000 [ 587.589160][ T30] audit: type=1400 audit(1745164926.880:778): avc: denied { map } for pid=11891 comm="syz.0.1576" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 588.866514][T11894] lo speed is unknown, defaulting to 1000 [ 588.996769][ T30] audit: type=1400 audit(1745164926.880:779): avc: denied { execute } for pid=11891 comm="syz.0.1576" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 589.177671][T11914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1582'. [ 589.236386][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 589.671476][ T30] audit: type=1400 audit(1745164928.990:780): avc: denied { egress } for pid=11918 comm="modprobe" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 589.701007][ T30] audit: type=1400 audit(1745164928.990:781): avc: denied { sendto } for pid=11918 comm="modprobe" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 589.727223][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.422504][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 595.722232][ T2147] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 595.969685][ T2147] usb 5-1: device descriptor read/64, error -71 [ 596.058457][T11973] block nbd3: shutting down sockets [ 596.432276][ T2147] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 596.612441][ T2147] usb 5-1: device descriptor read/64, error -71 [ 596.994650][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 597.019600][ T2147] usb usb5-port1: attempt power cycle [ 597.023003][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 597.142248][ T5833] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 597.444272][ T2147] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 597.622762][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 597.633785][ T5833] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 597.646822][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 597.683410][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.709724][ T2147] usb 5-1: device descriptor read/8, error -71 [ 597.811118][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 597.874907][ T5833] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 598.052991][ T30] audit: type=1400 audit(1745164937.370:782): avc: denied { listen } for pid=12002 comm="syz.0.1605" lport=40662 faddr=::ffff:100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 598.085283][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.139541][ T30] audit: type=1400 audit(1745164937.420:783): avc: denied { accept } for pid=12002 comm="syz.0.1605" lport=40662 faddr=::ffff:100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 598.178069][ T5833] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 598.207526][ T5833] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 598.744972][T12003] sctp: failed to load transform for md5: -2 [ 598.841321][ T5833] usb 6-1: Manufacturer: syz [ 598.861818][ T5833] usb 6-1: config 0 descriptor?? [ 598.931883][T12016] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 598.946019][T12016] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 599.868271][T12027] block device autoloading is deprecated and will be removed. [ 599.992172][ T5833] rc_core: IR keymap rc-hauppauge not found [ 600.151774][ T30] audit: type=1400 audit(1745164939.470:784): avc: denied { read } for pid=12008 comm="syz.4.1606" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 600.180722][ T30] audit: type=1400 audit(1745164939.470:785): avc: denied { open } for pid=12008 comm="syz.4.1606" path="/339/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 600.184049][ T5833] Registered IR keymap rc-empty [ 600.203872][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.919191][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 600.945185][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 600.987699][ T5833] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 601.019686][ T5833] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 601.090490][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.122685][ T2147] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 601.133890][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.172550][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.202503][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.244936][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.282563][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.295501][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 601.333334][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.345268][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.372516][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.382974][ T2147] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 601.414616][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.423845][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.456740][ T2147] usb 2-1: Product: syz [ 601.460998][ T2147] usb 2-1: Manufacturer: syz [ 601.466712][T12043] tipc: Started in network mode [ 601.473065][ T5833] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 601.482311][T12043] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 601.491690][ T2147] usb 2-1: SerialNumber: syz [ 601.498337][T12043] tipc: Enabled bearer , priority 0 [ 601.506749][ T5833] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 601.521452][ T2147] usb 2-1: config 0 descriptor?? [ 601.530166][ T5833] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 601.548768][ T2147] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 601.820727][T12047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.854822][T12047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.937751][ T5833] usb 6-1: USB disconnect, device number 23 [ 601.987363][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 602.000033][ T2147] usb 2-1: USB disconnect, device number 33 [ 602.114929][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 602.404653][T12059] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1618'. [ 602.664549][ T2147] tipc: Node number set to 11578026 [ 602.679857][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 602.936591][ T30] audit: type=1400 audit(1745164942.250:786): avc: denied { write } for pid=12054 comm="syz.1.1619" path="socket:[36454]" dev="sockfs" ino=36454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 603.162842][ T5875] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 603.302673][ T5875] usb 2-1: device descriptor read/64, error -71 [ 603.552695][ T5875] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 603.672176][ T2147] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 603.732801][ T5875] usb 2-1: device descriptor read/64, error -71 [ 603.824315][ T2147] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 603.854151][ T5875] usb usb2-port1: attempt power cycle [ 603.870767][ T2147] usb 6-1: config 0 has no interface number 0 [ 603.879791][ T2147] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 603.891219][ T2147] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 603.902571][ T2147] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 603.914217][ T2147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.970743][ T2147] usb 6-1: config 0 descriptor?? [ 604.033049][T12066] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 604.073446][ T2147] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 604.242648][ T5875] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 604.263967][ T5856] usb 6-1: USB disconnect, device number 24 [ 604.282955][ T5875] usb 2-1: device descriptor read/8, error -71 [ 604.683242][ T5875] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 604.761813][ T5875] usb 2-1: device descriptor read/8, error -71 [ 604.879502][T12084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.983066][ T5875] usb usb2-port1: unable to enumerate USB device [ 605.124945][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 605.131188][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 605.441356][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 605.499431][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 605.608850][T12097] SELinux: ebitmap: truncated map [ 605.626424][T12097] SELinux: failed to load policy [ 606.135129][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 606.141876][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 606.977179][T12109] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 606.977226][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1636'. [ 607.025211][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 607.031392][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 607.106945][ T30] audit: type=1400 audit(1745164946.420:787): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 607.127567][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.514808][T12086] ceph: No mds server is up or the cluster is laggy [ 607.939497][ T30] audit: type=1400 audit(1745164947.260:788): avc: denied { shutdown } for pid=12129 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 607.959237][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.566210][T12142] SELinux: ebitmap: truncated map [ 608.598326][T12142] SELinux: failed to load policy [ 608.672808][ T5967] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 608.891391][T12150] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0 [ 609.047795][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 609.057553][ T5967] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 609.082366][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.114257][ T5967] usb 2-1: Product: syz [ 609.130440][ T5967] usb 2-1: Manufacturer: syz [ 609.136084][ T5967] usb 2-1: SerialNumber: syz [ 609.145230][ T5967] usb 2-1: config 0 descriptor?? [ 609.157996][ T5967] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 609.203233][T12155] random: crng reseeded on system resumption [ 609.203657][ T30] audit: type=1400 audit(1745164948.530:789): avc: denied { append } for pid=12154 comm="syz.3.1651" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 609.329226][ T30] audit: type=1400 audit(1745164948.650:790): avc: denied { ioctl } for pid=12154 comm="syz.3.1651" path="socket:[36675]" dev="sockfs" ino=36675 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 609.358602][ T30] audit: type=1400 audit(1745164948.650:791): avc: denied { ioctl } for pid=12154 comm="syz.3.1651" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 609.442781][ T5874] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 610.537609][ T5967] gspca_sonixj: reg_w1 err -110 [ 610.558137][ T5967] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 611.153804][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.173671][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.182426][ T30] audit: type=1400 audit(1745164950.470:792): avc: denied { create } for pid=12164 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 611.192159][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.315523][ T5874] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.340262][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.351231][ T5874] usb 1-1: config 0 descriptor?? [ 611.435172][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 611.542283][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 611.549328][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 611.592512][ T5874] usb 1-1: USB disconnect, device number 41 [ 611.595121][ T5875] usb 2-1: USB disconnect, device number 38 [ 611.704060][T12178] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 611.752734][ T5903] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 611.996942][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'. [ 612.274361][ T5836] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 612.312160][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 612.323238][ T5903] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 612.332697][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.343339][ T5903] usb 5-1: config 0 has no interface number 0 [ 612.349608][ T5903] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 612.360174][ T5903] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.385737][T12193] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.385931][ T5903] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 612.404825][T12193] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.418381][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.429357][T12193] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.438878][ T5903] usb 5-1: Product: syz [ 612.443535][ T5903] usb 5-1: Manufacturer: syz [ 612.448284][ T5903] usb 5-1: SerialNumber: syz [ 612.454818][T12193] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 612.465048][ T5903] usb 5-1: config 0 descriptor?? [ 612.476327][T12170] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 612.503012][T12193] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 612.524113][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.545650][ T5903] usb 5-1: invalid MIDI in EP 0 [ 612.596869][T12198] SELinux: ebitmap: truncated map [ 612.620329][T12198] SELinux: failed to load policy [ 612.721188][ T5903] snd-usb-audio 5-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 612.797122][ T5903] usb 5-1: USB disconnect, device number 39 [ 615.308339][T12203] udevd[12203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.594925][ T30] audit: type=1400 audit(1745164954.910:793): avc: denied { write } for pid=12218 comm="syz.5.1667" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 617.430741][ T30] audit: type=1400 audit(1745164956.750:794): avc: denied { bind } for pid=12230 comm="syz.4.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 617.672319][ T2147] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 618.352409][T12248] netlink: 'syz.1.1674': attribute type 3 has an invalid length. [ 618.592212][ T2147] usb 5-1: Using ep0 maxpacket: 32 [ 618.608229][ T2147] usb 5-1: config 0 interface 0 has no altsetting 0 [ 618.624840][ T2147] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 618.718220][ T2147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.729109][ T2147] usb 5-1: Product: syz [ 618.733451][ T2147] usb 5-1: Manufacturer: syz [ 618.739213][ T2147] usb 5-1: SerialNumber: syz [ 618.747532][ T2147] usb 5-1: config 0 descriptor?? [ 618.908142][T12255] SELinux: ebitmap: truncated map [ 618.996174][T12255] SELinux: failed to load policy [ 619.076922][T12259] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 619.255184][ T2147] gs_usb 5-1:0.0: Configuring for 196 interfaces [ 619.262502][ T2147] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 619.270396][ T2147] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 619.897561][ T5856] usb 5-1: USB disconnect, device number 40 [ 621.215744][T12277] netlink: 'syz.3.1683': attribute type 3 has an invalid length. [ 621.224287][T12277] netlink: 'syz.3.1683': attribute type 3 has an invalid length. [ 624.218943][T12265] Set syz1 is full, maxelem 65536 reached [ 625.523653][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.530374][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.659573][T12308] SELinux: ebitmap: truncated map [ 625.671862][T12308] SELinux: failed to load policy [ 626.106015][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 626.356430][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 626.366196][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 626.853143][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 626.969354][T12318] netlink: 'syz.0.1695': attribute type 10 has an invalid length. [ 627.205691][T12318] syz_tun: entered promiscuous mode [ 627.330893][T12318] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 627.485600][ T5951] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 629.861928][T12363] Cannot find add_set index 1 as target [ 633.885039][ T30] audit: type=1400 audit(1745164973.110:795): avc: denied { name_connect } for pid=12409 comm="syz.3.1720" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 634.772376][ T5874] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 634.952141][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 634.968414][ T5874] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 634.992234][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.002173][ T2147] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 635.043624][ T5874] usb 5-1: config 0 descriptor?? [ 635.322755][ T5874] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 635.333291][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 635.349022][ T2147] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 635.362160][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.370839][ T2147] usb 1-1: Product: syz [ 635.382659][ T2147] usb 1-1: Manufacturer: syz [ 635.387373][ T2147] usb 1-1: SerialNumber: syz [ 635.452169][ T2147] usb 1-1: config 0 descriptor?? [ 635.758411][ T2147] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 636.402316][ T5833] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 636.582158][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 636.610169][ T5833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 636.640330][ T5833] usb 4-1: config 159 has an invalid interface number: 195 but max is 0 [ 636.655844][ T5833] usb 4-1: config 159 has no interface number 0 [ 636.681169][ T5833] usb 4-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 636.712838][ T5833] usb 4-1: config 159 interface 195 has no altsetting 0 [ 636.726285][ T5833] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 636.735820][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.966703][ T5833] usb 4-1: Product: syz [ 636.971083][ T5833] usb 4-1: Manufacturer: syz [ 636.978770][ T2147] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 636.988847][ T5833] usb 4-1: SerialNumber: syz [ 637.016676][ T2147] usb 1-1: USB disconnect, device number 42 [ 637.320098][ T5833] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 637.320250][ T5833] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 637.331063][ T5833] [drm:udl_init] *ERROR* Selecting channel failed [ 637.521845][ T5833] [drm] Initialized udl 0.0.1 for 4-1:159.195 on minor 2 [ 637.531096][ T5833] [drm] Initialized udl on minor 2 [ 637.552290][ T5833] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 637.562993][T12424] netlink: 'syz.4.1723': attribute type 4 has an invalid length. [ 637.577492][ T5874] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 637.602281][ T5874] asix 5-1:0.0: probe with driver asix failed with error -71 [ 637.610912][ T5833] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 637.642606][ T2147] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 637.678997][ T5874] usb 5-1: USB disconnect, device number 41 [ 637.742726][ T2147] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 637.742933][ T2147] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 637.744304][ T5833] usb 4-1: USB disconnect, device number 24 [ 638.722956][ T30] audit: type=1400 audit(1745164978.030:796): avc: denied { ioctl } for pid=12466 comm="syz.1.1734" path="socket:[38239]" dev="sockfs" ino=38239 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 638.794019][T12460] tty tty30: ldisc open failed (-12), clearing slot 29 [ 639.844012][T12484] netlink: 'syz.5.1738': attribute type 3 has an invalid length. [ 640.880904][ T30] audit: type=1326 audit(1745164980.200:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.0.1743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd209b8e169 code=0x0 [ 641.004776][ T30] audit: type=1400 audit(1745164980.280:798): avc: denied { checkpoint_restore } for pid=12490 comm="syz.5.1741" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 643.063028][ T5875] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 643.224028][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 643.231026][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 643.260620][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.291855][ T5875] usb 5-1: config 0 descriptor?? [ 643.705392][T12525] syzkaller1: entered promiscuous mode [ 643.710952][T12525] syzkaller1: entered allmulticast mode [ 644.602785][ T30] audit: type=1400 audit(1745164983.920:799): avc: denied { remount } for pid=12529 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 645.414557][ T5967] usb 5-1: USB disconnect, device number 42 [ 645.626322][T12542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 645.637930][T12542] overlayfs: missing 'lowerdir' [ 646.168280][ T30] audit: type=1400 audit(1745164985.480:800): avc: denied { bind } for pid=12540 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 646.332850][ T30] audit: type=1400 audit(1745164985.650:801): avc: denied { getopt } for pid=12540 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 646.383290][ T5967] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 646.555058][ T5967] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 646.594665][ T5967] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 647.231638][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.240941][ T5967] usb 5-1: Product: syz [ 647.246519][ T5967] usb 5-1: Manufacturer: syz [ 647.251515][ T5967] usb 5-1: SerialNumber: syz [ 647.283827][ T5967] usb 5-1: config 0 descriptor?? [ 647.303981][ T5967] hub 5-1:0.0: bad descriptor, ignoring hub [ 647.392871][ T5967] hub 5-1:0.0: probe with driver hub failed with error -5 [ 647.414735][ T5967] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 647.441560][ T5967] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 647.507852][ T5967] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 647.515507][T12572] openvswitch: netlink: Actions may not be safe on all matching packets [ 647.576947][ T5967] usb 5-1: USB disconnect, device number 43 [ 647.833236][T12577] syzkaller1: entered promiscuous mode [ 647.838842][T12577] syzkaller1: entered allmulticast mode [ 648.652794][T12596] Cannot find add_set index 2 as target [ 648.659373][ T30] audit: type=1326 audit(1745164987.970:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.354655][ T30] audit: type=1326 audit(1745164987.970:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.405816][ T30] audit: type=1326 audit(1745164987.970:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.436959][ T30] audit: type=1326 audit(1745164987.970:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.463130][ T30] audit: type=1326 audit(1745164987.980:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.486522][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.520108][ T30] audit: type=1326 audit(1745164987.980:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.551794][ T30] audit: type=1326 audit(1745164987.980:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.874252][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 649.883417][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 649.915716][T12611] FAULT_INJECTION: forcing a failure. [ 649.915716][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 649.936155][ T30] audit: type=1326 audit(1745164987.980:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12592 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382238e169 code=0x7ffc0000 [ 649.946514][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 649.996651][T12611] CPU: 1 UID: 0 PID: 12611 Comm: syz.5.1774 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 649.996686][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.996696][T12611] Call Trace: [ 649.996701][T12611] [ 649.996708][T12611] dump_stack_lvl+0x16c/0x1f0 [ 649.996745][T12611] should_fail_ex+0x512/0x640 [ 649.996768][T12611] ? __kmalloc_noprof+0xbf/0x510 [ 649.996792][T12611] ? nla_alloc_flow_actions+0x21/0x80 [ 649.996818][T12611] should_failslab+0xc2/0x120 [ 649.996839][T12611] __kmalloc_noprof+0xd2/0x510 [ 649.996861][T12611] nla_alloc_flow_actions+0x21/0x80 [ 649.996885][T12611] ovs_nla_copy_actions+0x60/0x330 [ 649.996906][T12611] get_flow_actions+0xd6/0x1a0 [ 649.996926][T12611] ? __pfx_get_flow_actions+0x10/0x10 [ 649.996982][T12611] ? __asan_memset+0x23/0x50 [ 649.997008][T12611] ovs_nla_init_match_and_action.constprop.0+0x1cb/0x390 [ 649.997032][T12611] ? __pfx_ovs_nla_init_match_and_action.constprop.0+0x10/0x10 [ 649.997091][T12611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 649.997124][T12611] ? ovs_nla_get_ufid+0xf7/0x230 [ 649.997143][T12611] ovs_flow_cmd_set+0x275/0xa00 [ 649.997167][T12611] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 649.997184][T12611] ? kasan_save_stack+0x42/0x60 [ 649.997200][T12611] ? kasan_save_track+0x14/0x30 [ 649.997211][T12611] ? __kasan_kmalloc+0xaa/0xb0 [ 649.997223][T12611] ? __kmalloc_noprof+0x223/0x510 [ 649.997239][T12611] ? netlink_rcv_skb+0x16a/0x440 [ 649.997258][T12611] ? genl_rcv+0x28/0x40 [ 649.997277][T12611] ? netlink_unicast+0x53a/0x7f0 [ 649.997296][T12611] ? netlink_sendmsg+0x8d1/0xdd0 [ 649.997315][T12611] ? ____sys_sendmsg+0xa95/0xc70 [ 649.997342][T12611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.997396][T12611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 649.997422][T12611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 649.997453][T12611] genl_family_rcv_msg_doit+0x206/0x2f0 [ 649.997488][T12611] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 649.997521][T12611] ? bpf_lsm_capable+0x9/0x10 [ 649.997540][T12611] ? security_capable+0x7e/0x260 [ 649.997564][T12611] ? ns_capable+0xd7/0x110 [ 649.997607][T12611] genl_rcv_msg+0x55c/0x800 [ 649.997634][T12611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.997659][T12611] ? __pfx___dev_queue_xmit+0x10/0x10 [ 649.997679][T12611] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 649.997703][T12611] ? __lock_acquire+0xaa4/0x1ba0 [ 649.997727][T12611] netlink_rcv_skb+0x16a/0x440 [ 649.997749][T12611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.997774][T12611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.997807][T12611] ? __pfx_down_read+0x10/0x10 [ 649.997836][T12611] ? netlink_deliver_tap+0x1ae/0xd30 [ 649.997861][T12611] genl_rcv+0x28/0x40 [ 649.997883][T12611] netlink_unicast+0x53a/0x7f0 [ 649.997909][T12611] ? __pfx_netlink_unicast+0x10/0x10 [ 649.997939][T12611] netlink_sendmsg+0x8d1/0xdd0 [ 649.997966][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.997997][T12611] ____sys_sendmsg+0xa95/0xc70 [ 649.998022][T12611] ? copy_msghdr_from_user+0x10a/0x160 [ 649.998042][T12611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.998078][T12611] ___sys_sendmsg+0x134/0x1d0 [ 649.998100][T12611] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.998147][T12611] __sys_sendmsg+0x16d/0x220 [ 649.998166][T12611] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.998192][T12611] ? rcu_is_watching+0x12/0xc0 [ 649.998222][T12611] do_syscall_64+0xcd/0x260 [ 649.998247][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.998264][T12611] RIP: 0033:0x7f83ca78e169 [ 649.998279][T12611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.998297][T12611] RSP: 002b:00007f83cb6af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.998315][T12611] RAX: ffffffffffffffda RBX: 00007f83ca9b5fa0 RCX: 00007f83ca78e169 [ 649.998326][T12611] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 649.998335][T12611] RBP: 00007f83cb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 649.998345][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.998354][T12611] R13: 0000000000000000 R14: 00007f83ca9b5fa0 R15: 00007ffdd599d5e8 [ 649.998376][T12611] [ 650.406688][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.415024][T12611] openvswitch: netlink: Actions may not be safe on all matching packets [ 651.430359][T12632] kernel read not supported for file /! (pid: 12632 comm: syz.5.1781) [ 651.486413][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 651.486433][ T30] audit: type=1800 audit(1745164990.800:812): pid=12632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1781" name=217F dev="mqueue" ino=39511 res=0 errno=0 [ 651.561213][T12635] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 651.786951][T12635] lo speed is unknown, defaulting to 1000 [ 651.794472][T12635] lo speed is unknown, defaulting to 1000 [ 652.073266][T12647] netlink: 'syz.0.1784': attribute type 3 has an invalid length. [ 653.083509][T12658] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 653.083509][T12658] program syz.0.1786 not setting count and/or reply_len properly [ 653.305447][T12661] netlink: 'syz.4.1787': attribute type 3 has an invalid length. [ 655.252412][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 655.286356][T12675] SELinux: ebitmap: truncated map [ 655.299500][T12675] SELinux: failed to load policy [ 655.652325][ T6090] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 655.816343][ T6090] usb 1-1: device descriptor read/64, error -71 [ 656.082315][ T6090] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 656.472341][ T6090] usb 1-1: device descriptor read/64, error -71 [ 656.582423][ T6090] usb usb1-port1: attempt power cycle [ 656.621622][T12698] SELinux: ebitmap: truncated map [ 656.667051][T12698] SELinux: failed to load policy [ 656.672448][ T5833] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 656.833598][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 656.893479][ T5833] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 656.932835][ T5833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 656.942869][ T6090] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 657.001587][ T5833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.042684][ T6090] usb 1-1: device descriptor read/8, error -71 [ 657.059679][ T5833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.196575][ T5833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.302200][ T5833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 657.317737][ T6090] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 657.355207][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.391852][ T6090] usb 1-1: device descriptor read/8, error -71 [ 657.516659][ T6090] usb usb1-port1: unable to enumerate USB device [ 657.784919][T12708] SELinux: ebitmap: truncated map [ 657.901137][T12708] SELinux: failed to load policy [ 658.680056][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 659.062816][ T30] audit: type=1400 audit(1745164998.380:813): avc: denied { nlmsg_read } for pid=12725 comm="syz.1.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 659.083531][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.087423][T12724] SELinux: ebitmap: truncated map [ 659.303513][T12724] SELinux: failed to load policy [ 659.370196][T12734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1810'. [ 659.436787][ T9669] Bluetooth: hci5: Frame reassembly failed (-84) [ 659.456512][T12734] Bluetooth: hci5: Frame reassembly failed (-84) [ 659.475664][T12734] Bluetooth: hci5: Frame reassembly failed (-84) [ 660.033114][ T5967] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 660.085891][ T9669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.135342][T12744] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.362534][ T5967] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=d0.62 [ 660.392837][ T5967] usb 6-1: New USB device strings: Mfr=253, Product=2, SerialNumber=3 [ 660.415159][ T5967] usb 6-1: Product: syz [ 660.420059][ T5967] usb 6-1: Manufacturer: syz [ 660.442878][ T5967] usb 6-1: SerialNumber: syz [ 660.459070][ T5967] usb 6-1: config 0 descriptor?? [ 660.485786][ T5967] usb 6-1: selecting invalid altsetting 3 [ 660.492982][ T5967] comedi comedi0: could not set alternate setting 3 in high speed [ 660.501248][ T5967] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 660.520760][ T5967] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 660.691289][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 660.703868][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 660.961914][T12737] netlink: 'syz.5.1811': attribute type 1 has an invalid length. [ 660.982319][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1811'. [ 660.996697][ T5873] usb 6-1: USB disconnect, device number 25 [ 661.011302][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 661.492144][ T5833] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 661.502266][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 661.503262][T12735] Bluetooth: hci5: command 0x1003 tx timeout [ 661.682937][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.698377][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.726138][ T5833] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 661.742101][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 661.750343][ T5833] usb 4-1: SerialNumber: syz [ 661.764878][T12760] openvswitch: netlink: Multiple metadata blocks provided [ 661.807332][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 662.255947][ T5833] usb 4-1: 0:2 : does not exist [ 662.273538][ T5833] usb 4-1: unit 5: unexpected type 0x0b [ 662.402603][ T5833] usb 4-1: USB disconnect, device number 25 [ 662.769106][T12681] udevd[12681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.010525][T12773] FAULT_INJECTION: forcing a failure. [ 663.010525][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 663.024980][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.1.1822 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 663.025006][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.025016][T12773] Call Trace: [ 663.025022][T12773] [ 663.025029][T12773] dump_stack_lvl+0x16c/0x1f0 [ 663.025069][T12773] should_fail_ex+0x512/0x640 [ 663.025090][T12773] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 663.025118][T12773] should_failslab+0xc2/0x120 [ 663.025138][T12773] __kmalloc_cache_noprof+0x6a/0x3e0 [ 663.025162][T12773] ? __genradix_ptr_alloc+0x340/0x5f0 [ 663.025184][T12773] ? sctp_auth_shkey_create+0x9e/0x210 [ 663.025216][T12773] sctp_auth_shkey_create+0x9e/0x210 [ 663.025257][T12773] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 663.025287][T12773] sctp_association_new+0x19ad/0x2a00 [ 663.025311][T12773] sctp_connect_new_asoc+0x1b6/0x790 [ 663.025331][T12773] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 663.025354][T12773] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 663.025394][T12773] sctp_sendmsg+0x15f9/0x1ee0 [ 663.025410][T12773] ? avc_has_perm+0x11a/0x1c0 [ 663.025436][T12773] ? __pfx_sctp_sendmsg+0x10/0x10 [ 663.025458][T12773] ? __pfx_sock_has_perm+0x10/0x10 [ 663.025483][T12773] ? __might_fault+0xe3/0x190 [ 663.025511][T12773] ? __pfx_sctp_sendmsg+0x10/0x10 [ 663.025529][T12773] inet_sendmsg+0x119/0x140 [ 663.025549][T12773] __sys_sendto+0x431/0x510 [ 663.025580][T12773] ? __pfx___sys_sendto+0x10/0x10 [ 663.025618][T12773] ? ksys_write+0x1b9/0x240 [ 663.025634][T12773] ? __pfx_ksys_write+0x10/0x10 [ 663.025648][T12773] ? rcu_is_watching+0x12/0xc0 [ 663.025674][T12773] __x64_sys_sendto+0xe0/0x1c0 [ 663.025690][T12773] ? do_syscall_64+0x91/0x260 [ 663.025714][T12773] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.025735][T12773] do_syscall_64+0xcd/0x260 [ 663.025759][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.025780][T12773] RIP: 0033:0x7f2325d8e169 [ 663.025795][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.025811][T12773] RSP: 002b:00007f2326c5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 663.025830][T12773] RAX: ffffffffffffffda RBX: 00007f2325fb6160 RCX: 00007f2325d8e169 [ 663.025840][T12773] RDX: 0000000000000001 RSI: 0000200000a34fff RDI: 0000000000000009 [ 663.025850][T12773] RBP: 00007f2326c5e090 R08: 0000200000000000 R09: 0000000000000010 [ 663.025860][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.025870][T12773] R13: 0000000000000000 R14: 00007f2325fb6160 R15: 00007ffcff4e79d8 [ 663.025893][T12773] [ 663.286140][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.295468][T12693] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 663.390515][ T5967] usb 5-1: USB disconnect, device number 44 [ 663.628654][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 663.647147][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 664.038495][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 664.496795][ T5875] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 664.584155][ T30] audit: type=1400 audit(1745165003.910:814): avc: denied { recv } for pid=12793 comm="syz.5.1828" saddr=10.128.0.169 src=38512 daddr=10.128.0.75 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 664.719559][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 664.739643][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 664.759756][ T5875] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 664.777416][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.787579][ T5875] usb 4-1: Product: syz [ 664.795511][ T5875] usb 4-1: Manufacturer: syz [ 664.800529][ T5875] usb 4-1: SerialNumber: syz [ 664.811724][ T5875] usb 4-1: config 0 descriptor?? [ 664.827424][T12785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 664.836710][T12785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.055401][T12785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.119194][T12785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 665.466271][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1835'. [ 665.623751][ T5875] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 665.638356][T12816] QAT: Stopping all acceleration devices. [ 665.796596][ T5967] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 665.864837][T12785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.876273][T12785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.890627][ T30] audit: type=1400 audit(1745165005.210:815): avc: denied { accept } for pid=12783 comm="syz.3.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 666.052804][ T5873] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 666.100744][ T5967] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 666.112833][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.129107][ T5967] usb 2-1: Product: syz [ 666.134234][ T5967] usb 2-1: Manufacturer: syz [ 666.139347][ T5967] usb 2-1: SerialNumber: syz [ 666.149570][ T5967] usb 2-1: config 0 descriptor?? [ 666.252910][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 666.270437][ T5873] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 666.281319][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 666.291104][ T5873] usb 6-1: Product: syz [ 666.300141][ T5873] usb 6-1: Manufacturer: syz [ 666.306862][ T5873] usb 6-1: SerialNumber: syz [ 666.324502][ T5873] usb 6-1: config 0 descriptor?? [ 666.382624][ T5967] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 666.867452][T12824] serio: Serial port ptm0 [ 667.413946][ T5967] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 667.483516][ T5967] usb 2-1: USB disconnect, device number 39 [ 668.084151][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 668.205926][ T5875] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 668.240788][T12837] input: syz0 as /devices/virtual/input/input29 [ 668.275998][T12837] xt_recent: hitcount (2147483647) is larger than allowed maximum (65535) [ 668.315927][ T5875] usb 4-1: USB disconnect, device number 26 [ 668.417052][ T5873] IPVS: starting estimator thread 0... [ 668.693983][T12848] netlink: 'syz.4.1843': attribute type 3 has an invalid length. [ 669.103076][T12845] IPVS: using max 50 ests per chain, 120000 per kthread [ 669.324369][ T2147] usb 6-1: USB disconnect, device number 26 [ 669.340065][T12851] macsec0: entered promiscuous mode [ 669.349371][T12851] macsec0: entered allmulticast mode [ 669.355750][T12851] veth1_macvtap: entered allmulticast mode [ 670.163620][T12856] netlink: 'syz.4.1846': attribute type 21 has an invalid length. [ 670.208296][T12856] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.235357][T12856] IPv6: Can't replace route, no match found [ 670.335404][T12856] sctp: [Deprecated]: syz.4.1846 (pid 12856) Use of int in maxseg socket option. [ 670.335404][T12856] Use struct sctp_assoc_value instead [ 670.359005][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 670.622222][ T2147] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 670.653738][ T5875] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 670.792109][ T2147] usb 6-1: Using ep0 maxpacket: 32 [ 670.799393][ T2147] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 670.810322][ T2147] usb 6-1: config 0 has no interface number 0 [ 670.830074][ T2147] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cc.ba [ 670.844852][ T5875] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 670.844904][ T5875] usb 5-1: config 7 has no interface number 0 [ 670.847417][ T2147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.847446][ T2147] usb 6-1: Product: syz [ 670.847462][ T2147] usb 6-1: Manufacturer: syz [ 670.847478][ T2147] usb 6-1: SerialNumber: syz [ 670.847994][ T5875] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 670.848104][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.848139][ T5875] usb 5-1: Product: syz [ 670.848155][ T5875] usb 5-1: Manufacturer: syz [ 670.848186][ T5875] usb 5-1: SerialNumber: syz [ 670.853781][ T2147] usb 6-1: config 0 descriptor?? [ 670.857277][ T2147] usb 6-1: active config #0 != 1 ?? [ 671.093551][T12859] netlink: 'syz.5.1845': attribute type 10 has an invalid length. [ 671.166008][ T2147] usb 6-1: USB disconnect, device number 27 [ 671.324362][ T5875] as10x_usb: device has been detected [ 671.339645][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 671.572898][ T5875] usb 5-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 671.620489][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 671.716347][ T5875] as10x_usb: error during firmware upload part1 [ 671.725634][ T5875] Registered device Elgato EyeTV DTT Deluxe [ 671.753041][ T5875] usb 5-1: USB disconnect, device number 45 [ 671.811198][ T5875] Unregistered device Elgato EyeTV DTT Deluxe [ 671.815565][ T5875] as10x_usb: device has been disconnected [ 672.532309][ T6090] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 672.548832][ T30] audit: type=1400 audit(1745165011.870:816): avc: denied { create } for pid=12906 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 672.673846][ T6090] usb 4-1: device descriptor read/64, error -71 [ 672.731659][ T30] audit: type=1400 audit(1745165012.050:817): avc: denied { view } for pid=12906 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 672.932133][ T6090] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 673.073455][ T6090] usb 4-1: device descriptor read/64, error -71 [ 673.353402][ T6090] usb usb4-port1: attempt power cycle [ 673.661147][T12918] netlink: 'syz.5.1862': attribute type 3 has an invalid length. [ 674.331126][ T6090] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 674.382604][ T6090] usb 4-1: device descriptor read/8, error -71 [ 674.599940][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1864'. [ 674.682231][ T6090] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 674.732148][ T6090] usb 4-1: device descriptor read/8, error -71 [ 674.863348][ T6090] usb usb4-port1: unable to enumerate USB device [ 675.114094][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'. [ 675.411629][ T30] audit: type=1400 audit(1745165014.510:818): avc: denied { setattr } for pid=12931 comm="syz.4.1866" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 675.449460][T12932] nullb0: AHDI p1 p3 [ 675.509532][ T30] audit: type=1400 audit(1745165014.810:819): avc: denied { create } for pid=12931 comm="syz.4.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 675.585278][ T30] audit: type=1400 audit(1745165014.810:820): avc: denied { setopt } for pid=12931 comm="syz.4.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 675.989508][ T30] audit: type=1400 audit(1745165015.300:821): avc: denied { read } for pid=12949 comm="syz.1.1873" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 676.049679][ T30] audit: type=1400 audit(1745165015.300:822): avc: denied { open } for pid=12949 comm="syz.1.1873" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 676.096309][ T30] audit: type=1400 audit(1745165015.370:823): avc: denied { write } for pid=12949 comm="syz.1.1873" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 676.130427][ T30] audit: type=1400 audit(1745165015.380:824): avc: denied { ioctl } for pid=12949 comm="syz.1.1873" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 676.413727][ T6090] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 676.413768][ T5875] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 676.645607][ T6090] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 676.669244][ T6090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.759512][ T6090] usb 2-1: Product: syz [ 676.775724][ T6090] usb 2-1: Manufacturer: syz [ 676.791680][ T6090] usb 2-1: SerialNumber: syz [ 676.817862][ T6090] usb 2-1: config 0 descriptor?? [ 676.822835][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 676.833104][ T5875] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 676.846281][ T6090] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 676.862929][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.871289][ T5875] usb 1-1: Product: syz [ 676.886573][ T5875] usb 1-1: Manufacturer: syz [ 676.887075][T12961] Invalid ELF header magic: != ELF [ 676.891431][ T5875] usb 1-1: SerialNumber: syz [ 676.903489][ T30] audit: type=1400 audit(1745165016.210:825): avc: denied { module_load } for pid=12960 comm="syz.5.1876" path="/224/bus" dev="tmpfs" ino=1224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 676.965706][ T5875] usb 1-1: config 0 descriptor?? [ 676.997171][ T5875] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 677.819514][ T5967] usb 2-1: USB disconnect, device number 40 [ 678.840918][ T5903] usb 1-1: USB disconnect, device number 47 [ 679.044083][ T30] audit: type=1326 audit(1745165018.370:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 679.067959][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.091691][ T30] audit: type=1326 audit(1745165018.370:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 679.115195][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.146940][ T30] audit: type=1326 audit(1745165018.370:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 679.187146][ T30] audit: type=1326 audit(1745165018.370:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 679.257304][ T30] audit: type=1326 audit(1745165018.370:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 679.283705][ T30] audit: type=1326 audit(1745165018.370:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 680.047551][ T30] audit: type=1326 audit(1745165018.370:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 680.075828][ T30] audit: type=1326 audit(1745165018.370:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 680.099377][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.106101][T13002] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 680.128606][ T30] audit: type=1326 audit(1745165018.370:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 680.205248][T13002] lo speed is unknown, defaulting to 1000 [ 680.244813][ T30] audit: type=1326 audit(1745165018.370:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.0.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd209b8e169 code=0x7ffc0000 [ 680.255434][T13002] lo speed is unknown, defaulting to 1000 [ 683.783794][T13037] siw: device registration error -23 [ 685.770727][T13065] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.953103][T13068] misc userio: The device must be registered before sending interrupts [ 686.952598][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.959088][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.187664][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 688.064063][T12735] Bluetooth: hci1: command 0x0c1a tx timeout [ 688.128847][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 688.128867][ T30] audit: type=1400 audit(1745165027.450:897): avc: denied { setopt } for pid=13122 comm="syz.5.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 688.351610][T13135] Process accounting resumed [ 688.514923][ T30] audit: type=1400 audit(1745165027.840:898): avc: denied { connect } for pid=13145 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 688.769683][ T30] audit: type=1400 audit(1745165028.090:899): avc: denied { read } for pid=13163 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 688.898029][ T30] audit: type=1400 audit(1745165028.220:900): avc: denied { read } for pid=13171 comm="syz.1.1951" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 688.990265][ T30] audit: type=1400 audit(1745165028.220:901): avc: denied { open } for pid=13171 comm="syz.1.1951" path="/402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 689.796791][T13211] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 689.805933][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 689.940565][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 690.108448][T13213] netlink: 'syz.3.1966': attribute type 18 has an invalid length. [ 690.790221][T13203] nvme_fabrics: missing parameter 'transport=%s' [ 690.812074][T13203] nvme_fabrics: missing parameter 'nqn=%s' [ 691.048670][T13224] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡh [ 691.110986][T13229] netlink: 'syz.4.1967': attribute type 4 has an invalid length. [ 691.119057][T13229] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1967'. [ 692.097103][ T9669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 694.330787][T13259] lo speed is unknown, defaulting to 1000 [ 694.344627][T13259] lo speed is unknown, defaulting to 1000 [ 694.781530][ T30] audit: type=1400 audit(1745165033.510:902): avc: denied { create } for pid=13244 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 694.958581][ T30] audit: type=1400 audit(1745165033.550:903): avc: denied { sys_admin } for pid=13244 comm="syz.3.1977" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 695.012824][ T30] audit: type=1400 audit(1745165034.140:904): avc: denied { bind } for pid=13255 comm="syz.0.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 699.792245][T13300] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 706.742323][T13355] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2008'. [ 706.762327][T13355] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2008'. [ 707.099238][T13365] syz.4.2011: attempt to access beyond end of device [ 707.099238][T13365] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 707.121600][T13365] EXT4-fs (nbd4): unable to read superblock [ 707.405579][T13369] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 707.418313][T13369] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 707.432886][T13369] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 707.958766][ T30] audit: type=1400 audit(1745165047.280:905): avc: denied { bind } for pid=13378 comm="syz.1.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 707.962743][ T6090] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 708.236404][ T6090] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 708.292128][ T5903] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 708.462517][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 708.489802][ T5903] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.741604][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.772409][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.761273][ T5903] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.778113][ T5903] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 710.437271][T13387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.440043][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.773707][ T30] audit: type=1400 audit(1745165049.870:906): avc: denied { connect } for pid=13388 comm="syz.4.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 710.997741][ T5903] usb 6-1: usb_control_msg returned -71 [ 711.051750][ T5903] usbtmc 6-1:16.0: can't read capabilities [ 711.113912][ T5903] usb 6-1: USB disconnect, device number 28 [ 711.578145][ T5903] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 712.273483][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 712.998383][ T5903] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 713.017183][ T5903] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 713.162217][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.172577][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 713.182355][ T5903] usb 6-1: config 1 has no interface number 0 [ 713.191825][ T5903] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 713.281405][T13414] usb usb1: usbfs: process 13414 (syz.4.2024) did not claim interface 0 before use [ 713.292276][T13414] usb usb1: usbfs: process 13414 (syz.4.2024) did not claim interface 0 before use [ 713.859958][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.920616][ T5903] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 714.030939][ T30] audit: type=1400 audit(1745165053.350:907): avc: denied { read } for pid=13419 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 714.064197][ T30] audit: type=1400 audit(1745165053.350:908): avc: denied { connect } for pid=13419 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 714.214810][ T30] audit: type=1400 audit(1745165053.440:909): avc: denied { bind } for pid=13417 comm="syz.4.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 714.298967][T13423] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 714.389947][ T5903] snd_usb_pod 6-1:1.1: set_interface failed [ 714.443301][T13423] batadv0: left promiscuous mode [ 714.448652][T13423] batadv0: left allmulticast mode [ 714.511221][ T5903] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 714.547401][T13423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.558033][T13423] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 714.571853][T13423] team0: Failed to send options change via netlink (err -105) [ 714.591082][ T5903] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 714.600252][T13423] team0: Port device batadv0 added [ 715.449716][ T5903] usb 6-1: USB disconnect, device number 29 [ 717.004667][ T30] audit: type=1400 audit(1745165056.270:910): avc: denied { ioctl } for pid=13456 comm="syz.3.2038" path="/426/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 717.045187][T13457] md2: using deprecated bitmap file support [ 718.182082][ T5903] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 718.809902][ T5903] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 718.818636][ T5903] usb 6-1: config 0 has no interface number 0 [ 718.826635][ T5903] usb 6-1: config 0 interface 144 has no altsetting 0 [ 719.164662][ T5903] usb 6-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=fa.a9 [ 719.174163][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.184878][ T5903] usb 6-1: Product: syz [ 719.191313][ T5903] usb 6-1: Manufacturer: syz [ 719.196728][ T5903] usb 6-1: SerialNumber: syz [ 719.965705][T13490] syzkaller1: entered promiscuous mode [ 719.971348][T13490] syzkaller1: entered allmulticast mode [ 720.492121][ T30] audit: type=1400 audit(1745165059.800:911): avc: denied { ioctl } for pid=13495 comm="syz.3.2051" path="socket:[42664]" dev="sockfs" ino=42664 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 721.538403][T13515] netlink: 'syz.5.2056': attribute type 4 has an invalid length. [ 721.571043][ T6090] lo speed is unknown, defaulting to 1000 [ 721.571119][ T6090] syz2: Port: 1 Link DOWN [ 722.962261][ T6090] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 723.118220][ T6090] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.118589][ T6090] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 723.118625][ T6090] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.119057][ T6090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 723.119302][ T6090] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 723.126257][ T6090] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.126315][ T6090] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.126362][ T6090] usb 2-1: Product: syz [ 723.126420][ T6090] usb 2-1: Manufacturer: syz [ 727.291161][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.044432][ T30] audit: type=1400 audit(1745165070.360:912): avc: denied { connect } for pid=13571 comm="syz.4.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 733.710788][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2081'. [ 734.192773][T13609] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2085'. [ 734.405083][ T5833] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 735.107203][T13616] syz.1.2086 (13616): drop_caches: 2 [ 735.120818][T13616] syz.1.2086 (13616): drop_caches: 2 [ 735.617406][T13622] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 736.000288][T12735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.003167][T12735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.006853][T12735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.007670][T12735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.009932][T12735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.064953][T13624] lo speed is unknown, defaulting to 1000 [ 736.066021][T13624] lo speed is unknown, defaulting to 1000 [ 736.245658][T12735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.249078][T12735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.250327][T12735] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.254857][T12735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.256947][T12735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.427558][T13628] lo speed is unknown, defaulting to 1000 [ 736.429337][T13628] lo speed is unknown, defaulting to 1000 [ 736.455016][T13624] chnl_net:caif_netlink_parms(): no params data found [ 736.576597][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.576745][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.576877][T13624] bridge_slave_0: entered allmulticast mode [ 736.578110][T13624] bridge_slave_0: entered promiscuous mode [ 736.580074][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.580144][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.580250][T13624] bridge_slave_1: entered allmulticast mode [ 736.581497][T13624] bridge_slave_1: entered promiscuous mode [ 736.611195][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.619233][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.679207][T13624] team0: Port device team_slave_0 added [ 736.681731][T13624] team0: Port device team_slave_1 added [ 736.732777][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.732820][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.732841][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.735678][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.735695][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.735730][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.756590][T13628] chnl_net:caif_netlink_parms(): no params data found [ 736.821670][T13624] hsr_slave_0: entered promiscuous mode [ 736.823175][T13624] hsr_slave_1: entered promiscuous mode [ 736.823804][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.823898][T13624] Cannot create hsr debugfs directory [ 736.990571][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.990708][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.990840][T13628] bridge_slave_0: entered allmulticast mode [ 736.991832][T13628] bridge_slave_0: entered promiscuous mode [ 736.999774][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.999903][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.000034][T13628] bridge_slave_1: entered allmulticast mode [ 737.001163][T13628] bridge_slave_1: entered promiscuous mode [ 738.063017][T12735] Bluetooth: hci5: command tx timeout [ 738.302829][T12735] Bluetooth: hci6: command tx timeout [ 740.152932][T12735] Bluetooth: hci5: command tx timeout [ 740.382207][T12735] Bluetooth: hci6: command tx timeout [ 742.222101][T12735] Bluetooth: hci5: command tx timeout [ 742.462142][T12735] Bluetooth: hci6: command tx timeout [ 744.302144][T12735] Bluetooth: hci5: command tx timeout [ 744.542070][T12735] Bluetooth: hci6: command tx timeout [ 748.387838][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.387904][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.301828][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.305790][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.306619][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.308160][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.308706][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.375601][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 749.377488][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 749.378404][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 749.382721][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 749.386087][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 751.342895][T12735] Bluetooth: hci1: command tx timeout [ 751.423053][T12735] Bluetooth: hci7: command tx timeout [ 753.138619][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 753.142325][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 753.146058][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 753.151380][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 753.152068][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 753.422191][ T5836] Bluetooth: hci1: command tx timeout [ 753.512148][ T5836] Bluetooth: hci7: command tx timeout [ 755.182186][ T5836] Bluetooth: hci8: command tx timeout [ 755.502436][ T5836] Bluetooth: hci1: command tx timeout [ 755.583284][ T5836] Bluetooth: hci7: command tx timeout [ 757.262136][ T5836] Bluetooth: hci8: command tx timeout [ 757.582342][ T5836] Bluetooth: hci1: command tx timeout [ 757.662142][ T5836] Bluetooth: hci7: command tx timeout [ 758.625184][ T4531] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.342362][ T5836] Bluetooth: hci8: command tx timeout [ 761.422103][ T5836] Bluetooth: hci8: command tx timeout [ 789.990272][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.303802][ T5197] udevd[5197]: worker [13613] /devices/virtual/misc/uhid/0000:0000:0000.000B is taking a long time [ 795.690424][T12735] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 795.695305][T12735] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 795.698400][T12735] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 795.699385][T12735] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 795.699975][T12735] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 796.193594][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 796.198238][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 796.202829][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 796.206494][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 796.207312][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 797.742077][ T5836] Bluetooth: hci9: command tx timeout [ 798.222697][ T5836] Bluetooth: hci10: command tx timeout [ 799.822869][ T5836] Bluetooth: hci9: command tx timeout [ 800.302175][ T5836] Bluetooth: hci10: command tx timeout [ 801.902749][ T5836] Bluetooth: hci9: command tx timeout [ 802.382646][ T5836] Bluetooth: hci10: command tx timeout [ 803.982146][ T5836] Bluetooth: hci9: command tx timeout [ 804.462611][ T5836] Bluetooth: hci10: command tx timeout [ 809.263074][T12735] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 809.264982][T12735] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 809.265823][T12735] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 809.268231][T12735] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 809.269061][T12735] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 809.775700][T12735] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 809.778991][T12735] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 809.779795][T12735] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 809.780635][T12735] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 809.781230][T12735] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 809.836273][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.836339][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.342579][ T5836] Bluetooth: hci11: command tx timeout [ 811.832894][ T5836] Bluetooth: hci12: command tx timeout [ 813.264863][T12735] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 813.268382][T12735] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 813.269905][T12735] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 813.270785][T12735] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 813.272722][T12735] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 813.422709][T12735] Bluetooth: hci11: command tx timeout [ 813.902830][T12735] Bluetooth: hci12: command tx timeout [ 815.342637][T12735] Bluetooth: hci13: command tx timeout [ 815.502054][T12735] Bluetooth: hci11: command tx timeout [ 815.982230][T12735] Bluetooth: hci12: command tx timeout [ 817.422676][T12735] Bluetooth: hci13: command tx timeout [ 817.582053][T12735] Bluetooth: hci11: command tx timeout [ 818.062007][T12735] Bluetooth: hci12: command tx timeout [ 819.502614][T12735] Bluetooth: hci13: command tx timeout [ 821.342325][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 821.582722][T12735] Bluetooth: hci13: command tx timeout [ 853.343026][ T3122] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 855.808875][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 855.810086][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 855.810829][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 855.811681][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 855.816757][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 856.825897][T12735] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 856.828892][T12735] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 856.829906][T12735] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 856.835134][T12735] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 856.836039][T12735] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 857.902894][ T5836] Bluetooth: hci14: command tx timeout [ 858.862880][ T5836] Bluetooth: hci15: command tx timeout [ 859.982012][ T5836] Bluetooth: hci14: command tx timeout [ 860.942247][ T5836] Bluetooth: hci15: command tx timeout [ 862.072811][ T5831] Bluetooth: hci14: command tx timeout [ 862.942760][ T31] INFO: task kworker/1:6:5903 blocked for more than 143 seconds. [ 862.942816][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 862.942829][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.942837][ T31] task:kworker/1:6 state:D stack:22088 pid:5903 tgid:5903 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 862.942934][ T31] Workqueue: usb_hub_wq hub_event [ 862.942982][ T31] Call Trace: [ 862.942990][ T31] [ 862.943002][ T31] __schedule+0x116f/0x5de0 [ 862.943078][ T31] ? number+0x9aa/0xc70 [ 862.943103][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 862.943146][ T31] ? __pfx___schedule+0x10/0x10 [ 862.943189][ T31] ? find_held_lock+0x2b/0x80 [ 862.943211][ T31] ? schedule+0x2d7/0x3a0 [ 862.943252][ T31] schedule+0xe7/0x3a0 [ 862.943277][ T31] schedule_timeout+0x257/0x290 [ 862.943314][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 862.943357][ T31] ? mark_held_locks+0x49/0x80 [ 862.943372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.943388][ T31] __wait_for_common+0x2fc/0x4e0 [ 862.943415][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 862.943429][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 862.943445][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 862.943480][ T31] devtmpfs_submit_req+0xa8/0x100 [ 862.943497][ T31] devtmpfs_create_node+0x18a/0x230 [ 862.943524][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 862.943541][ T31] ? up_write+0x1b2/0x520 [ 862.943567][ T31] ? kernfs_create_link+0x1bd/0x240 [ 862.943589][ T31] ? kernfs_put+0x35/0x60 [ 862.943600][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 862.943624][ T31] device_add+0x10bd/0x1a70 [ 862.943644][ T31] ? __pfx_device_add+0x10/0x10 [ 862.943654][ T31] ? add_device_randomness+0xb7/0xf0 [ 862.943680][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 862.943697][ T31] usb_new_device+0xd07/0x1a20 [ 862.943718][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 862.943741][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 862.943759][ T31] ? mark_held_locks+0x49/0x80 [ 862.943770][ T31] hub_event+0x2eb7/0x4fa0 [ 862.943803][ T31] ? __pfx_hub_event+0x10/0x10 [ 862.943814][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 862.943848][ T31] ? rcu_is_watching+0x12/0xc0 [ 862.943867][ T31] process_one_work+0x9cc/0x1b70 [ 862.943896][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 862.943909][ T31] ? __pfx_process_one_work+0x10/0x10 [ 862.943925][ T31] ? assign_work+0x1a0/0x250 [ 862.943953][ T31] worker_thread+0x6c8/0xf10 [ 862.943971][ T31] ? __kthread_parkme+0x19e/0x250 [ 862.943989][ T31] ? __pfx_worker_thread+0x10/0x10 [ 862.944011][ T31] kthread+0x3c2/0x780 [ 862.944024][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944034][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944045][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944065][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944076][ T31] ? rcu_is_watching+0x12/0xc0 [ 862.944090][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944101][ T31] ret_from_fork+0x45/0x80 [ 862.944126][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944138][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.944173][ T31] [ 862.944180][ T31] INFO: task kworker/0:7:5967 blocked for more than 143 seconds. [ 862.944187][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 862.944194][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.944199][ T31] task:kworker/0:7 state:D stack:22312 pid:5967 tgid:5967 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 862.944241][ T31] Workqueue: md_misc mddev_delayed_delete [ 862.944261][ T31] Call Trace: [ 862.944265][ T31] [ 862.944281][ T31] __schedule+0x116f/0x5de0 [ 862.944295][ T31] ? __pfx___schedule+0x10/0x10 [ 862.944314][ T31] ? __pfx___schedule+0x10/0x10 [ 862.944335][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 862.944350][ T31] ? find_held_lock+0x2b/0x80 [ 862.944364][ T31] ? schedule+0x2d7/0x3a0 [ 862.944379][ T31] schedule+0xe7/0x3a0 [ 862.944402][ T31] schedule_timeout+0x257/0x290 [ 862.944414][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 862.944429][ T31] ? mark_held_locks+0x49/0x80 [ 862.944448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.944465][ T31] __wait_for_common+0x2fc/0x4e0 [ 862.944479][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 862.944502][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 862.944519][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 862.944537][ T31] devtmpfs_submit_req+0xa8/0x100 [ 862.944562][ T31] devtmpfs_delete_node+0xf6/0x160 [ 862.944579][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 862.944595][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 862.944618][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.944640][ T31] ? kernfs_put+0x4e/0x60 [ 862.944652][ T31] ? sysfs_remove_group+0xc6/0x180 [ 862.944674][ T31] device_del+0x734/0x9f0 [ 862.944692][ T31] ? __pfx_device_del+0x10/0x10 [ 862.944708][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 862.944733][ T31] del_gendisk+0x486/0xc40 [ 862.944752][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 862.944762][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 862.944787][ T31] md_kobj_release+0xb2/0x100 [ 862.944804][ T31] kobject_put+0x1e4/0x5a0 [ 862.944833][ T31] process_one_work+0x9cc/0x1b70 [ 862.944850][ T31] ? __pfx_disk_events_workfn+0x10/0x10 [ 862.944864][ T31] ? __pfx_process_one_work+0x10/0x10 [ 862.944889][ T31] ? assign_work+0x1a0/0x250 [ 862.944903][ T31] worker_thread+0x6c8/0xf10 [ 862.944919][ T31] ? __kthread_parkme+0x19e/0x250 [ 862.944950][ T31] ? __pfx_worker_thread+0x10/0x10 [ 862.944963][ T31] kthread+0x3c2/0x780 [ 862.944974][ T31] ? __pfx_kthread+0x10/0x10 [ 862.944984][ T31] ? __pfx_kthread+0x10/0x10 [ 862.945004][ T31] ? __pfx_kthread+0x10/0x10 [ 862.945015][ T31] ? __pfx_kthread+0x10/0x10 [ 862.945025][ T31] ? rcu_is_watching+0x12/0xc0 [ 862.945039][ T31] ? __pfx_kthread+0x10/0x10 [ 862.945059][ T31] ret_from_fork+0x45/0x80 [ 862.945071][ T31] ? __pfx_kthread+0x10/0x10 [ 862.945082][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.945113][ T31] [ 862.945169][ T31] [ 862.945169][ T31] Showing all locks held in the system: [ 862.945178][ T31] 3 locks held by kworker/u8:1/13: [ 862.945185][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.945226][ T31] #1: ffffc90000127d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.945254][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 862.945303][ T31] 2 locks held by kdevtmpfs/26: [ 862.945309][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 862.945358][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 862.945401][ T31] 1 lock held by khungtaskd/31: [ 862.945410][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 862.945495][ T31] 2 locks held by getty/5584: [ 862.945502][ T31] #0: ffff8880315c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 862.945535][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 862.945573][ T31] 2 locks held by syz-executor/5820: [ 862.945580][ T31] #0: ffff88801c6ee420 (sb_writers){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40 [ 862.945616][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 862.945644][ T31] 4 locks held by kworker/1:3/5833: [ 862.945661][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.945688][ T31] #1: ffffc90003187d18 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.945726][ T31] #2: ffff88804b895a20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 862.945767][ T31] #3: ffffffff8fe7f230 (minors_rwsem){+.+.}-{4:4}, at: hidraw_connect+0x75/0x440 [ 862.945802][ T31] 3 locks held by kworker/u9:5/5836: [ 862.945809][ T31] #0: ffff88805418e948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.945846][ T31] #1: ffffc90003157d18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.945884][ T31] #2: ffff88805ec88d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 862.945934][ T31] 3 locks held by kworker/1:6/5903: [ 862.945941][ T31] #0: ffff8880222f6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.945968][ T31] #1: ffffc9000220fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.946006][ T31] #2: ffff88802999a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 862.946039][ T31] 2 locks held by kworker/0:7/5967: [ 862.946046][ T31] #0: ffff8880222f7948 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.946074][ T31] #1: ffffc90005767d18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.946111][ T31] 3 locks held by kworker/1:7/6090: [ 862.946117][ T31] #0: ffff8880222f6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.946153][ T31] #1: ffffc9000b9dfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.946181][ T31] #2: ffff888145322198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 862.946216][ T31] 1 lock held by syz.5.919/9272: [ 862.946221][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 862.946262][ T31] 3 locks held by kworker/u8:11/9669: [ 862.946268][ T31] #0: ffff88814d2c3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.946297][ T31] #1: ffffc900104b7d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.946335][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 862.946377][ T31] 3 locks held by kworker/u9:0/12735: [ 862.946383][ T31] #0: ffff8880283a7948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 862.946411][ T31] #1: ffffc900042dfd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 862.946448][ T31] #2: ffff888054ea0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 862.946486][ T31] 3 locks held by syz.3.2051/13503: [ 862.946492][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 862.946517][ T31] #1: ffff88807e0041c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500 [ 862.946551][ T31] #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: con_install+0x99/0x600 [ 862.946592][ T31] 1 lock held by syz.4.2083/13606: [ 862.946598][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0xff/0x360 [ 862.946627][ T31] 2 locks held by syz.5.2085/13617: [ 862.946633][ T31] #0: ffff88801c6ee420 (sb_writers){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40 [ 862.946668][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 862.946708][ T31] 4 locks held by udevd/13613: [ 862.946717][ T31] #0: ffff88802ab6b668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 862.946759][ T31] #1: ffff888034713888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 862.946792][ T31] #2: ffff88803620e878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 862.946833][ T31] #3: ffff88804b895a20 (&dev->mutex){....}-{4:4}, at: uevent_show+0x187/0x3b0 [ 862.946871][ T31] 2 locks held by syz-executor/13624: [ 862.946878][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 862.946909][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 862.946950][ T31] 1 lock held by syz-executor/13628: [ 862.946956][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 862.946996][ T31] 1 lock held by syz.1.2092/13651: [ 862.947002][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 862.947036][ T31] 1 lock held by syz-executor/13657: [ 862.947042][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947073][ T31] 1 lock held by syz-executor/13659: [ 862.947089][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947117][ T31] 1 lock held by syz-executor/13663: [ 862.947123][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947161][ T31] 1 lock held by syz-executor/13673: [ 862.947167][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947205][ T31] 1 lock held by syz-executor/13676: [ 862.947212][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947240][ T31] 1 lock held by syz-executor/13679: [ 862.947255][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947284][ T31] 1 lock held by syz-executor/13682: [ 862.947289][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947328][ T31] 1 lock held by syz-executor/13685: [ 862.947334][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947371][ T31] 1 lock held by syz-executor/13688: [ 862.947378][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947415][ T31] 1 lock held by syz-executor/13691: [ 862.947421][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 862.947449][ T31] [ 862.947453][ T31] ============================================= [ 862.947453][ T31] [ 862.947472][ T31] NMI backtrace for cpu 0 [ 862.947482][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 862.947494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 862.947500][ T31] Call Trace: [ 862.947505][ T31] [ 862.947508][ T31] dump_stack_lvl+0x116/0x1f0 [ 862.947527][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 862.947539][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 862.947553][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 862.947565][ T31] watchdog+0xf70/0x12c0 [ 862.947581][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.947591][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.947605][ T31] ? __kthread_parkme+0x19e/0x250 [ 862.947623][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.947633][ T31] kthread+0x3c2/0x780 [ 862.947643][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947652][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947662][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947671][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947680][ T31] ? rcu_is_watching+0x12/0xc0 [ 862.947693][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947703][ T31] ret_from_fork+0x45/0x80 [ 862.947713][ T31] ? __pfx_kthread+0x10/0x10 [ 862.947723][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.947744][ T31] [ 862.947760][ T31] Sending NMI from CPU 0 to CPUs 1: [ 862.947811][ C1] NMI backtrace for cpu 1 [ 862.947826][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 862.947841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 862.947849][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 862.947869][ C1] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 862.947880][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 862.947895][ C1] RAX: 0000000002e153d9 RBX: 0000000000000001 RCX: ffffffff8b72a419 [ 862.947904][ C1] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 862.947912][ C1] RBP: ffffed1003b5f488 R08: 0000000000000001 R09: ffffed10170a65bd [ 862.947920][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 862.947927][ C1] R13: ffff88801dafa440 R14: ffffffff90864910 R15: 0000000000000000 [ 862.947935][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 862.947948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.947956][ C1] CR2: 00007f97ed117b30 CR3: 000000000e180000 CR4: 00000000003526f0 [ 862.947965][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 862.947973][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 862.947980][ C1] Call Trace: [ 862.947985][ C1] [ 862.947989][ C1] default_idle+0x13/0x20 [ 862.948007][ C1] default_idle_call+0x6d/0xb0 [ 862.948025][ C1] do_idle+0x391/0x510 [ 862.948044][ C1] ? __pfx_do_idle+0x10/0x10 [ 862.948060][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 862.948083][ C1] cpu_startup_entry+0x4f/0x60 [ 862.948098][ C1] start_secondary+0x21d/0x2b0 [ 862.948112][ C1] ? __pfx_start_secondary+0x10/0x10 [ 862.948127][ C1] common_startup_64+0x13e/0x148 [ 862.948149][ C1] [ 862.948775][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 862.948786][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 862.948798][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 862.948804][ T31] Call Trace: [ 862.948808][ T31] [ 862.948812][ T31] dump_stack_lvl+0x3d/0x1f0 [ 862.948829][ T31] panic+0x71c/0x800 [ 862.948842][ T31] ? __pfx_panic+0x10/0x10 [ 862.948853][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 862.948868][ T31] ? irq_work_queue+0xce/0x100 [ 862.948883][ T31] ? watchdog+0xdda/0x12c0 [ 862.948893][ T31] ? watchdog+0xdcd/0x12c0 [ 862.948905][ T31] watchdog+0xdeb/0x12c0 [ 862.948917][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.948932][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.948946][ T31] ? __kthread_parkme+0x19e/0x250 [ 862.948961][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.948972][ T31] kthread+0x3c2/0x780 [ 862.948983][ T31] ? __pfx_kthread+0x10/0x10 [ 862.948992][ T31] ? __pfx_kthread+0x10/0x10 [ 862.949002][ T31] ? __pfx_kthread+0x10/0x10 [ 862.949011][ T31] ? __pfx_kthread+0x10/0x10 [ 862.949021][ T31] ? rcu_is_watching+0x12/0xc0 [ 862.949034][ T31] ? __pfx_kthread+0x10/0x10 [ 862.949045][ T31] ret_from_fork+0x45/0x80 [ 862.949055][ T31] ? __pfx_kthread+0x10/0x10 [ 862.949065][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.949087][ T31] [ 862.949300][ T31] Kernel Offset: disabled