last executing test programs: 17.468406079s ago: executing program 1 (id=2589): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 17.103558348s ago: executing program 1 (id=2591): r0 = getuid() r1 = getgid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xcca3}}, {@allow_other}], [{@smackfsdef={'smackfsdef', 0x3d, '*,$/'}}]}}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c80)={0x0, &(0x7f0000000740)=[@cpuid={0x2, 0x18, {0x200, 0xfffffffa}}, @cpuid={0x2, 0x18, {0x6, 0x3}}, @cpuid={0x2, 0x18, {0xfffffffe, 0x1ff}}, @code={0x1, 0x5d, {"c443715cf10066430f619d0000000066baa100b800600000ef66b839010f00d80f001026660f388107b9800000c00f3235001000000f3040de8e85000000c4a3fd090896f30f01b700000000"}}, @uexit={0x0, 0x18, 0xfff}, @code={0x1, 0x54, {"440f20c0350b000000440f22c0c4619572d20044d20f0fc728260f78850c0000002e0fc71c0d0a000000400f8204000000b8010000000f01d9c461f877c482f9db50f4"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x307480b5}, @cpuid={0x2, 0x18, {0x9, 0x7}}, @cpuid={0x2, 0x18, {0x1000000, 0x79}}, @uexit={0x0, 0x18, 0xc1}, @cpuid={0x2, 0x18, {0x80, 0x3}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0xffffffffffff7fff}, @code={0x1, 0xa4, {"670f01cf0f210748b82c000000000000000f23c00f21f835000009000f23f8410f1f4000c744240096000000c744240200000000ff2c24b805000000b9d03000000f01c148b803000000000000000f23d80f21f835800000700f23f8c744240071000000c744240207000000ff2c24b8010000000f01c1c744240000580000c744240200000000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x98f, 0x642af050}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x82, {"670f01f866baf80cb876d0248aef66bafc0c66b8bbba66ef2e3e640f2a6b01c4816df82166baf80cb8a4172a82ef66bafc0cedd9e166ba200066b8d2f566efc744240007000000c7442402a13eebc8c7442406000000000f011c24c4017d2e08b9a50b0000b800400000ba000000000f30"}}, @code={0x1, 0x7d, {"66bad004b060ee0f001ec4617811cdc74424002d000000c744240200000000ff1c240f07b9c20d0000b8017b3da4ba000000000f3048b804000000000000000f23c80f21f8350400d0000f23f8430f0fba0b000080b7b9be0a00000f3266baf80cb8e856c08fef66bafc0ced"}}, @cpuid={0x2, 0x18, {0x2, 0x2fd8}}, @code={0x1, 0x48, {"0f01b40782000000b8010000000f01d9460f790e420f01ee0f01b2acbf00000f21710f01c367f30fa7c8c481fd6aaf0030000064440f07"}}, @cpuid={0x2, 0x18, {0x3, 0x8}}, @code={0x1, 0x62, {"66b82e018ec0dd42eb0f01cb66baf80cb8cc57d98def66bafc0cb0faee2e660f38803d0000010066baf80cb854df7d82ef66bafc0c66b8009066ef3e670f79820060000066ba4000ec3836c4a22db86a5e"}}, @code={0x1, 0x5b, {"b900000040b80d000000ba000000000f3066b8a7000f00d0410f01d1430f01c3c4427d24a9af0e0000c42179e6000f6eca430f32440f20c0350c000000440f22c0c421e65c8000780000"}}, @cpuid={0x2, 0x18, {0xa0, 0x81}}], 0x539}) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000d40), 0x10000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000d80)={0x0, 0x0}) r12 = socket$caif_stream(0x25, 0x1, 0x3) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) r16 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) r17 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001440), 0x1, 0x0) r18 = getpid() r19 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001480)={0x0, 0x0, 0x0}, &(0x7f00000014c0)=0xc) r21 = socket$igmp6(0xa, 0x3, 0x2) r22 = syz_open_dev$loop(&(0x7f0000001500), 0x7fffffff, 0x420480) syz_clone3(&(0x7f0000001bc0)={0x100000200, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3b}, &(0x7f0000001980)=""/248, 0xf8, &(0x7f0000001a80)=""/205, &(0x7f0000001b80)=[0x0, 0x0], 0x2}, 0x58) r24 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001c40)) r25 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.net/syz1\x00', 0x200002, 0x0) r26 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001cc0), 0x7c3a81, 0x0) sendmmsg$unix(r2, &(0x7f0000008ac0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)="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", 0xff}, {&(0x7f0000000340)="d7155f7fbc9ebe10d5f4223352ebdd64f7fbefc2d8562a7cde3b9d574a5a1bfe94ad366547d98a291254698c0ef9a067b3fcd4f31516f406fef40f34df88cc535d01308d54e7c129a96960d8ea815691659f10b63c078998310938a8", 0x5c}, {&(0x7f00000003c0)="85b45d67485a486f5ce99119b8f8dfe896b93f487c884541a78b96f8a91a3312b4ccf88156e9e27f8db89b6ecbc4db6201612c769a3d3ef05e89fa358e894b7d7617fbc31b7bd319048cb19e1ea1737fb6276e261cdc3366542a10044bef2afbd90ebd8a99cdd78b742e06dcb49d4be1cb94e053df4fda0ff80b", 0x7a}, {&(0x7f0000000440)="001af62ab49b1bb01f94249a55cdfe13c27e5b7c18ccbae912e715cd67ff1ac4347c44eef60f26827c36793f9cc2cdcaefbb15983e9a32798e6118facf88773ad50701b5116052c91d0b6ef774ef60d0a686d6bc7f858d00776fefb3c0c9aade12a728fa616bf5200e5e30299e18b2d2ca45df4a70924f2ded3ab49d325fbdb9d766c922087c15c55486b8a8230e318eb01359e6aa307a575cadc4f1c620c6860358909c98e8a4905baf4e2a437e82be", 0xb0}, {&(0x7f0000000500)="cc619f2971d691433ee8e15fb6998f4f9473825ec4e99c366cab54810c58d3282354b06dddbe8a45c48c7b8e4d2ce77014224c", 0x33}, {&(0x7f0000000540)="82c00e877b43f47c9a1fa21efab838e01a0cc5a4175d586f14f59bed006a0e989c2f2586836d2f9334d7e9c9e8c5b00cc8118d960b0e291b513d6fed0ed7383aa9e2b2d9180cb898817c14e46861b621157d45be4829f109400ee431c5543e38c568c66b90379e3d4a17", 0x6a}, {&(0x7f00000005c0)="9411fbdf0f2091d2872d1ee4d37338736bd41d69fbaef8cffac245f8c2afed4fe0cedb0a21f27aa4011a8141a1b65fcf110bcbab4a8a91559310a5b5cbc11df83eed1b7f0396e3c1667ce9cb12ee93e095c131e7d6d7462facd580a4bf43996ddcb9a64fb64c1e53b26146e81690ce912c7e5898baeda849ba4937ef20b43383399acc73356876e3fd958bd258dc81bbf9c8252ee62f55a633", 0x99}, {&(0x7f0000000680)}], 0x8, &(0x7f0000000e40)=[@rights={{0x28, 0x1, 0x1, [r3, r4, r5, r6, r7, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r11, r0, r1}}}, @rights={{0x1c, 0x1, 0x1, [r12, 0xffffffffffffffff, r13]}}, @rights={{0x24, 0x1, 0x1, [r14, r15, 0xffffffffffffffff, 0xffffffffffffffff, r16]}}], 0xe0, 0x400c000}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000fc0)="cfb86fc56b0a3fa8a1ba0e7a5c599b4f637cdea1fb633f3cade415ba302f9fc79ca224a64a8853e56d965cbead723138946647054cc934c7684ac42fa705711e3268f55a962e33750d7542a6ce9456db04e0547a33aafdc1abebec21e782f5eba33f88c2d95b143fee0001ea45c52cf9361920ddeb60b332a4b579d89e25b9fe3090044a7bbea234221603d4872dbdbf7ab68415f5d1aab21143c6fd1c10a7c6a7772a9d3910fabd1d974870cc52a3b611b41b06fa021cbb8df0c4b4d4ef8ea84effa247a931a23559982b5d7235e951b0cd", 0xd2}, {&(0x7f00000010c0)="03be9fcd26febd2eda941f47c21277aa01836fcf76bb3571747e513ed802d20bb4280ad6365c560b094a4921dd1617f7cd66b3386bd14a53a7e472859da600407b688605cd3d41e97b86e44bf41b4e5f123282b8f0d39c10fbc5185dc7a083c82b095b7876b7d96851ed94ad1b28636906ad42f830be6094", 0x78}, {&(0x7f0000001140)="7267e24ea1fed0a12fd66586091a625772c09b57401c5333726cac37d2de06c1e5864720b5eb8705cf856f829230fc55695ba1ad1024c8f325127568caba8c69650ca9ea2904857eca7247f4db9bce78485cb10a660d8eb6ea846a3eac9879c3fe12af8984925af8199279d11686f6738b05d55770147ee5b1048ec173b83c5d44709eab7d44bd88e30ff50759bffa3c", 0x90}, {&(0x7f0000001200)="027aad6e079cd865706cdde2c75e803de27aeae2b1607f0574aef9619397af6399d01b714785fbbb978bd0b767203997c41e8de152f570c304e75ee9eda1f5b0d1dc7cf2a4ca53a79c1458e7361df8272f9d431dc143bdb7eb5c51f19c49345b5fd0385463c415814328498f750ae399e1f8b92c1b5c614b701f7995ea49e22d4d58e1a6725b3d51c2e0a469c6d35062", 0x90}, {&(0x7f00000012c0)="5901178727dc6671a5a363092c91a909d1f49c2c431cf4c46991bcb160ed7744eb303de9421d6d3cd9bfd15b673f185d7a92f30d1816893277d3599cd6e5b464ce39a1d6a551c1a2831d0386d488e598d248f91b7cbf9742802c8dace2c1b72446229a2add2de72cb66cee48bb1a691f79e09ee6e47d35177e74f2fd2985d3", 0x7f}, {&(0x7f0000001340)="4b62d5818114a3893e891e76f375a80048a9efd2c752af7248b2b65e9cecd6fe374ab090861a790666c38141f6c0c23aeb20cd363ad0b09aba7f5428d49b1bc0cbc811d577a9782ef82f6fd13021b3ec38fef2295fdaa330744c066614f9432a9a216c8d4d7392b05220fb90af5f6d65872dac9f1703eb1b87efe26dc9c167ab", 0x80}], 0x6, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r19, r0, r20}}}, @rights={{0x18, 0x1, 0x1, [r21, r22]}}], 0x70, 0x20000000}}, {{&(0x7f00000015c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001640)="048fc7d0a4078f9261da4a04b5a08219fad7a19cee12a2094d", 0x19}, {&(0x7f0000001680)="c17b0659bdc53b771e0a27721ad28803c60c2348c377bd77046efe86b349a54ae12827f6340d29ad4b82cfd643a3b89830397eb35970d6af3612e9bc13d2136b3e73a123c16e3adfd8e5d7828540c82656b9f85d05dab2eaeae4191d90b262d54b3293fe01f18c1038c1bfeabc6631ffe7369392259da6ade21e3d05c6ae45cea9d68089c9c8d337c5635e2e11162960ec97", 0x92}, {&(0x7f0000001740)="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", 0xfd}, {&(0x7f0000001840)="fa3d1f3e2c7757713cb14acc79e5a187aeaa84f5d7756bf185c811f24c836e3c91fb0611c1cbc4528f9bf365", 0x2c}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r23, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [r24, r25, r26, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}], 0xd8, 0x24008000}}, {{&(0x7f0000001fc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002040)="906917febc362f38a1fbbebd0a9f84fcc83bae1e25d4f8919a29a6045b56c703d8b5616c0656e5cf396b0ef4a30b0d9450798c01208e32c6154c76550cf1c8cb345e5a9c158595f4b87aeaac466e9c9c4f928ad48557d74a4b9553cacce10a3ab8a0212eeb5ac4524ba271aa1c1769cd4420f0146bab92ea3405b55d4caa43e20bf606b3ba0862da04946931134a2e33f099b464bc87b1220b1345de0a09ed49720020c7e4286d9debd88414ee21c6ea5c42d079ee65d4764b8a7a36f355c92b7f54704d87da0881104d39", 0xcb}], 0x1, &(0x7f0000004540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x40d0}}, {{&(0x7f00000045c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000004640)="395478fe6b874c82daf30d7c3149dcedd3cba28443f509d97b34576dd829c3172f862a9bf7ee658f9376dfa38bbe6af9b5402f4232fc1c28c3dba0eb0ed7d7544c2df62471ea0a4e6c331d4760407903936e72d20d5ce83b84c90d4f5cd36a01643cca38286e1bbeb22eafdee375d5dcb71e731da541d055dd5e6f9c9221a0bb6d6577a24e9e4ad371820af6", 0x8c}, {&(0x7f0000004700)="0a7e6de37a467d1013f67456c7d7a5b72b971d1a7214ab15afb88923dbb09f12c290a6d5a1ead08c7241c7a1c2acc8f6064ad844453fa8", 0x37}, {&(0x7f0000004740)="22e43a4cafa0b56bca43db45e547c4c724d83fcdeae5a58ad949e14d3343dc39d637be21353b0703fe389f811fd2a20a749fefdbf1e9166b117933969b5dc4598cc595bebf65af284ed90ef22301372f2162aa1980db66c2592379ce8f8a5ca4471562a890c9e5461be1efee4290d63ab08d4871d0df5a0e21ecc12c6701d2861086e4ce1acddd08073559fe767f7380807e4b7a50da2e6750f624f419702d1a8fd2fa99ced38ac9486437d513479fd2a04f76c93fb7a555a6844893f1cb4a8cd0b439c712761009f44080245eeb84c1b559b7ecdd223ccbc157b94c02550ea8a55e50e8e27bbfbff548cc787129b5ef90bfb6adc06e2bc54b1b4a521bf588ebe6905c89522f46ceef8ea92d0a157281d6c61dd9c2c5fea3dff36c90459836d0099db454c5b9321575c370687ac2d377960ddfd4935acb1fa69f29f14df22cb501b71fd5460c6367063500f62a3f7df7a20ce4cc5b2c73bcd45b1c5af82d1c70e9f1835410ec90daac14bb9304c4053e9b6571e84e27c1c6ffccc7568258616a1cf62db8fb3ad0450ef172d27a6b81a5530311eb23a707318005a1e14bf95a678dfdaf94563eadf909d43919fef3eb6172fdab245de60211f3e45c253aa3da15b244db3533396de684e8b644b01a8f262cbcc2109f66c23dff19b26b2ead58b8defcb9f866e0b6aa3d936516353ddad7b5f5ba2452e4dffb892e703a9330dce39f6ea32b829c25493968c18b2270d2e75b83237e290d9dac4692dc4778de86f58bcce59111cd436c875a39e9a0598faa26d0745a0cf0505030e8d81b7e2a7a5c9b71be7ee755eb71f5478af97ebf34f357c464e8cc4c563bac4c74a9ac7709a0dcdc59946c10983effafa002a1bdf5404828be6d3ab57669238d62efd6e0fddc765a87a723562ac0fe9f4de7292563d50a0bd21ea211a5e2bf42870d2f3fc50d6ae9c1d051d2d0550a8ef7c5e382287bc938162f70bc01061d82a2c8a45b983376d4a53bee422c1ef3e3d29eb511dd8aa2fbb6ab158e478ed346141e4682a09fac118addde7c6fc973591728eba22dd8362a770ad3944706a062887f86635869aab08f89f8dcae2760c004848232037c331638e3e328f1cccd81fcb2576dfca39b944b35f4391692ecc6b63a33fc9f3c4e43b9c3b34d9804c441a73c3fae02340877b857d5cbaf4698fc60494533190b1b511f7eec121b368c3f9aa5ef07ab1b84b44db617121a46c955797fbf1ff8df66fab61b596bb478316c40e69bd78dfeddfd7d83266dcaeb2d94f5dcb1aa5894ea552f1b02ee76d15f27909ada55db658d2ae1182b0579ac17bf39b14cad37681a4fb61dfdc58ea4b127e9f0f2fff2116d4c8c261b0097ad1bd816a78ca9993499e8bcf462b0092ceaba3a55f7167cf981d0b4b1e5e5d4568046198f89c727f4a2bdfcae84e5aeefce143a62214509bbd5e5bfce49808e51dbda7b867272c4ca6755d5ec6ffbeea10cbce63f275c48b5c10e4b6c1c510f76b484c6accce693295f5ea5ea9cb77716ab9e32e5e78bb47e39083c1fa36af8d6982958dd7a1986b82ac29b0a3cb4c738740837f37a2116b979bf7da11a125c559f4ecbbd16c1ee079ea73276c4b4bf60d8a59df15e461484ac4c8bc7e99cd83cd26b56e03f2a82b4cf5257897377bdfbd305af74062c06f306a8d31771ed606b19ea210e590e49332af112ad64824126f88c68e529564d144573e3232e95038e54512a8aade83f3b3a2bbac6dc926abb3b7dc8ed878a860f8e218fe04a8d7008cb37a2637b5beb870554ee56c38ac79398075348cf4fd492dd648e4e80543bb97ec6d91de449c1d3f3eb152f8b4b87abd47ea21fe10aa53b9e0c90c32f9c19e185de5b9b5105e7ebb177b961fa64e0e3bdc9a20c2f6d85403aea3b83670b80ea70c2c71d871563eaa8b0130fb3eb71983821a9df40d2833168b94b94e7eadc28f9798db9257d9e4acfb2a260ca0cde29d69b00222b1365899ce9dc27b0db47ab278fe0d0eefd8262c8650f3f1481a19c7e7aa7958f415f8a2b88a92d5523bd55f7334ff4a7203722452526c0298c24ecaab38f10150529cde777a72ac07fc90a7c710c27042236b40efb8f3d8fe30d35fb9438c5623be71d38b8aee034a77d974f315a7997e01e7064be3c92cec05ed0305cd27cb956c079b1e66c1a5c3d36df52d1b9a0f606b7eee294828b130ff9ece167b6cc1dd75b2e208012302f22f8a384ea252ec97b3f3f235b01f37338c8039cbf3453b2cdff69bb65299e47ceba6029d6582cd4576128fd3798c06915fb4ffeab25e96291d039d0677f5c90423d4c72b4a81b51049cea863da6bb8fd58ce8e4e0b8b4156e335f581b1ebfb2da8293ae9d48cd08be3dc4e741d479de27f1f24a5974c85ba27bbb6b0584b3a90c573ac6d65721af15f9894dc793e6e21d5b325e2e27c916bed9b1e1c2c741d285e1c33b7571a6d2030cc87419ee6bdf7fe0a1b019636b6d18a7e2009ac278d96720e0a0517477efe4efb66f90422257f1a2519cffa560a59dd4241838d5ad7f2e2b77ba526a2c8b0389eb6ac494d19c9e632f6cbbb6e3f6441afc62c5b7b020169e4d3e0bf264b45c129659da47eec299dd34214cd7adb94f8acd60b33b4b80e441943b3e23afae9e5404bdaabcec290f6152687c1f277ca8ea3f8c8b851814a4ce7a16d8c90a322364c424e5970aa718ed11ca15d48a26f7403bf71701d557a8b711c7407c09b9fc59e4d6117c182392bd3f5c51aa773b8efe77ae23c53b855f1162b51177fbddbf8d246c7e15389f1ba5905b6fb597f432476243995b7ad0be4555abebe74d46b408a9638423914db1afb85f3b989cb9388da8b151419f46262b083190ea5168f07b6f4710d9d6fa7b049e5b47e604b94f6f1a3e19bd974515469985ebf34d80ddbf194a3ff8fe3aa41bd62b49638031b5d0706211ee545065a8dfa179e3ba052cf829f8f10346942e4b99e176d0559f9b7a4b4e08bb7b9640312d657bc66f8dd7c0ef8b9c450a0cdeb471f00ebbdc066f1706eb29c4192a60eeb424211d162e3397ccd30e1698280e90afe2cca5e6e18e5184443716c72ca0bc71fcef439e0566366496f80b750e20ac53d0fc932ed6b8651449ffb0c3e7ddf2e616b57d7ece9cb7fcaf47e32e5080ae100ddafbd98daef85d8cebdaa67adc671844038b079c911dcea0e954ea505ca72935639ffcbb7a1361c48143d56ccf445e56a709a15bf6fc75e986ca1fc638187562a55945f4e4abe675ccc383e351b5ca75b2699519b3d8bce2d1ff9fb4a147a4c7acb50a0b5a8ea1db1180cb841c68564c9cf035843e7d458a517dced4300759f904e450d3ac0ef9c3ba6adcadb40eecea56eec0398f52eadb902b136c3892cd2c0adc6c0c61fcd828614ac53938556ec35b3a46df905a82ca7ffb60b78d8f5b70da05145a4930fa918abf37afc65bcfbbd4315a43f325ab5e8b26d8610ad4ddbed49cfded90339617d2448b594fb5e791f3ab42cd2bbd22be06ecdad248305a6235ddf927b8db43873560f8d21ffac5e9d7e52dfdf1721d4323f682be68ee322d198db2fedccc14e5a1beac93076e6f6ab16c59f9145eea73409a6767290fa1af011e452f5a6eab98afc14f7ed89acd87d9a13605820818658a05629e88e2103a2b4a5dc861151b553d4cd05efaf7f28faff9fcbe1403f225fea3cd7c34d5c792e538a96e12e62f96cbf0c3f4ff3838eae3564d404e1c56099d916457b2536933d15aa70fa8aa910399287128b3d218b920575d49cc7b4717205f856a540f80b826dc6cfcb001bd93b9d44bc6606d30d553950a41537329ec94d15465fb5f3d458b29d1f6bd3e73b41907bc199237395984432ad5ae7fbf335ddc516a0dc1a6f64dd0b2b1e532a84c821f163ac1fd547c804b0b2dbf84ae529ece880663cfdc918ebdc6bc4f75b75459ea22237adaea2271b793183441630df116cdcd3f5a3f6bfde043125f29a8ea230481455a0f26562d80ede1e7561ef37cdd12d02de8a8a882b22ee4fde0940440307f3f06a12614c632e7eee52fb605a9279d2d06232d552facb576d276c77369d30f9dc1922c6f9c8694a06a87d0b561ebb7fc0c759ade43294b31ec359122cd2174b60d7cc91c9d67745be8648c620339dd126f5899c56e2a63b8d86d565998ebe4a2d3ab5b1da85c60aa79f58b0f1187a87cceb96635baa468b7504c36e356717f0874e74a94344c636048a71a04df2d74f4ac5f644436f1508cd186a7207d231589bf7b84023093b0420c67fd2847e3d7a4ca1d6d2f8294a6555eb9163912d67d4e62338ab1c3e901bae1fad4437b324b2df75899bfbf6ea5234cca5836517c6f1c8227ec331740ad6fd082e8aed7fed7ca76b5725b3326a8a6bd2ade535374b031cbf2d2808db0b01f571a23b8fac2efe82d38ce3fa17930c4bbfa1557c456baa49b758edec289a5cad4bde9080ed03b38ad62412d8ee1b6ee0f16207f76b16a8f97dafd747f7a2ecd3a059a1c272fc0fd981db7f467fa2fd57004bacaafd498d70a62e848be6ae878bbca9355fc666819779b3e405652ca7290a88c57ffd47ca8b506a44a8c07e5b7d4a656d474bbc9315cde1b1befdc5c0b0bd9abb42d505527c6c419849c933a1c07199ec880038e6a984033abde9d906143c9fbb6fc93aa3712fbf2c0c48cd5f9c887a5ab0a663b79aea07916db94dfbef955aeee4a374cdd6531b21e03e94353a30cfdb612a2e67ddd281d3903c9f192a179cf6aceee3998c8cb32f2a73f54672a6c7d7d21db7b1401a884603e536dff950e6f7da21de56ac2185b3ff6359165051f07066e9123faffdae08bbf069c05f37da80d0c8f169548d3b86ead7bc39d452d099c5d8882987840827f26ad5f2badcf09da4ca76fc69ebe317d274ee91505270963f14c019efb37b818f574e1bbef833efc290c0329aba30adbc7eaf235fa615eed43b6d1891d50e4e773d739d1ec65c923f6e971d7ae26fbb88264374470973cafed0b63c580608987ae004b138a5d7236b465a56116f45ddc083e470956cfd80c3ea51078f17931ac652d442546ff6bfc1d896fb060f834ad623ef42866135a8e1bbe2cf83dc976e80f537515d94b2d7bda282ca6f9622a4ecdb40cfefa9fa1174ea69203b535fab4864d94b32141a68f539f2ade478b59474a3f0e4ef96a51eaafee4bddc35cd71aae9b58de2f5e555883deada621eb0df7cb6c756c87db2b7f0be45a8c4bba2fec95552181c823815c110dba4d8b4ac01030d6cdb646d087049d3c909cff6dfed3f65813a50f1a7ecdbaacf19d1389167aa19a3eb578d88b4ccd6445b18bedd198bd7dd8024c1ae0d49fad4668631ac46462a2a473d78782f153b6e709f4651b62b3b239a8482a61eb8385e26e2768a948f2977907dd1db36f9c1c7e1dfc5435b32ed2b1d8b1e327d8e1ba4dc57f95c3bdb44ae418cb9dd4dfb7e7bacc8e7b132489be4aff0211c887df71e6f3bd564d137c4a6f7c2e7813ae7e6892c4e72c0e09eb5d1550c8f5569daaf8dda4ffa8f6bf415c475d3ac7edb0f68f18d87ec0a135db29fd07a3a8599c22fbcbb00f757ada03f1effcea2d1468fb695b8bce3e2511c1bdff17e55646fa6d447c22577dadd62beabd4ced45a1a2388d22bbf50fabfe649dd563c4b64e2a2283a653b45badf50988bd18c41620ed5edda7f177f315d5813d9f313220e698dbe3fa8d85435c7e13801a1d2f55b73d5d2145bea8e69aeb12c1ce5143e062ce98c27d85c826e342b19dc73ecf518e53388424dea5df809ebcd353688a1b19", 0x1000}, {&(0x7f0000005740)="462ac10630fc9e2008ab390fd16a8fb2436a15647d3794ed1cd07e95c1cac929be69f289349688c003bb973ec0b5924236675447defc13c75df9daa1afc81324c9a8b94409164732666c1fa1019442ba71cf1d30555bec85818e5ca6c40b3a653f78d1b36e0473d052631bfe37745b4ef40979855d892d7906c84717a8ef90271054eef98cf2c6cdbcf9b6866d94a00048325751313324c09dde8e93d5f44162", 0xa0}, {&(0x7f0000005800)="4f57f53d72eccfcd16a0fd186d6069af8b755b916166ed761a6fa3cc0c83c8dc85ebe142f6aa270d5ea0f27c36704648b42ff2d43502e241b0b2c94b186ed00868f6cac2df7715", 0x47}, {&(0x7f0000005880)="ff0b295f7df3c7fada9bc442d7594e1f480029213768bb5a2239fb89cb411667e741c152d117929fed79772254c51ae47017d51aa784dac8dfd93861f35800861580b032b3ce0dece748c2684be5f92a443b75b05dcffe8fd1948ccf3a178e104be59241c6fdeef837e8f90b18504779e24f9080f064e1ee09a6d09e4d2c30867bf2f531cef4e4d8f7c3bdd05475e38516e64242b25fc798d9d49df635415bc5275722ecf781fc02774fdc1d84ee0d24188d7ea548da4e1172906c1dd8a67b44cc845a3bea2ae984331e3b7a907826b3c3f9e41d70de2966794c805d511b8b826b0d279852", 0xe5}], 0x6, 0x0, 0x0, 0x5}}, {{&(0x7f0000005a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000005a80)="e253ea566ed364e0b3675a6897433ccb70f50782b17c13d8a0bc036359dc07ee793b7e26a71b992b", 0x28}, {&(0x7f0000005ac0)="60d92cbcec27af43ca3c4fd7157311b26e949552aa7d5842925d94c28d1fc5daa0a88aa4d4bacf1fd8fe36fbd9b2509d841001379d744d63c95f54563c509d4ca5e7f55956316a8cec2bbc02cc2dea9758f1a4452821b1099493fa9654e21882f6c2a11de2edfa4fa5b05e2457287a60b7c6786893359918581ca996f93ec3aca13197d1d6f023d94b21cba53c8b124aaab6493d25f0a167d3ff4dc37830aafdf811fb797e6a867e31c3d20c9e98edf804709e958eaf9b0e12eeed97f53cb394f25249a569c47a12921d7c864c93f45e795b3bc516ece8fa0e7f2c", 0xdb}, {&(0x7f0000005bc0)="29b01b7a710f83fdd7954dc2d81bb438a8a4cd546711536c6e0d75e31b2b9f4efb4e65ca4753215e1d078baa6ff71f175fd3d10a013a1b8c192c793b82988b4566e6e77076d6035c46a35a012d9c2b84e987ba17bdad6fb9b9da48377c29c3d48ceb61c7e85a85bdbd4d8dea97bc119773d6472eb23670bd18ac4d3efcd3956b1b640e7b456a5f0d92c9dfae3a7f701dc1f2bb57b5f91d68027bffd8632d314410c32320125e61be7ad58d09797995890f5739706caf5fe63c096b8de7c99334c2fb43b6cf99849fd2f1f753efb2a4673950ce965f27aa04e678746392c7f17690b1b5d5c5147914c5815154a04d5e8e168732e9", 0xf4}, {&(0x7f0000005cc0)='/', 0x1}, {&(0x7f0000005d00)="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", 0x1000}], 0x5, &(0x7f0000007140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}], 0xb0, 0x8000}}, {{&(0x7f0000007200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008580)=[{&(0x7f0000007280)="e93209b9c3ea4a2243ce86", 0xb}, {&(0x7f00000072c0)="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", 0x1000}, {&(0x7f00000082c0)="1bc5e2a5448c5e7d707ab03f3efa6528ea708b40fc8e6cfaef73c5842e3bdffeeef94ca9dd45e124dd12445334831ad335ecc275aac2d6941f1ddaf3aaa797b9f7d1a813246dbddd83c8a9caed8d2961423ff2796062da22629ca7e7c11496288986", 0x62}, {&(0x7f0000008340)="b73509a3197e42ccc0ca2706493c54034abf41ae044483e87b89a57b482ecbe624405dfc93bc8e9c6d170e85d32181d02dcbef062d5d243f1d232d15ec1f8dbd90d217a925dd7ed1aed410687882f2d7d5427ebf9051d5b38d0a7fae6b2295a74747b1c0e499bce5c7755e967947ebe2e6bc9abf556040d604c8731db9ba6051a2009423e2e88cabf4a75ceac4efc73630cd39cbcb68cc", 0x97}, {&(0x7f0000008400)="ad6f132fae09f6d1367af3625f43f06d1b19a8cb6f700406ca7d1b59f3dcebef9ccb61a3732c727717759e783e6d953e3ef2c230912e5f1158f8b51f6a29b792", 0x40}, {&(0x7f0000008440)="d98fba29c20fbea60c5aefb5afc76e9feedfef91a0436780ec53653b53bab1792ac513cf3cb5484aa5866818164753a46f3818a85cc036d18fa77955beebd7c872e0128e79bb3eb710387c43942466a730467b34bbebd26a0d008688d547a6281dcf8f4b695d697ea2807f943d74ff13b71f776a131995c66cc542d7c5a0f2e92a1537c1e5443287e0a45035b32f540dc2e7e676484d56b82d9b253f2d1e5320bc1c838ccf25d27dc293aeb3fb1cdefbffab662993c291ca7739b530ee8ac26e67bac722e027932e24e36b11caec2e598928a9", 0xd3}, {&(0x7f0000008540)="8fc415a180c77b842dbe280586af995ec190561f8f2443baf35a72169a5c8db48f67c50b68cadb66ead528de6fdfdc172837df27e0", 0x35}], 0x7, 0x0, 0x0, 0x50}}, {{&(0x7f0000008600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008780)=[{&(0x7f0000008680)="0e10bd18bf2b4eca643e2b3dba27537fca2c280ecfd4c247170540a04d4c7df9cc3ad27b24c32a9328f4d89a3d1da3e82399d818aabae014fc8cf60fba54b339123eb37b34fa8eafe9178798a2", 0x4d}, {&(0x7f0000008700)="6ecbfa1065649515bdc6fb3beb4fd7ac73b732140939850dffccea2e3d2d5ff6029348760bc81fd9db2e7782d9a90b27d444e01246c9093d4eb2f174a28d4a4f7cd5532fa102b0d1e11108fe89bc3c38403ce86e4848e88941570345603f900aa09fb7e503d7707691", 0x69}], 0x2, &(0x7f0000008a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r1}}}], 0x88, 0x40000}}], 0x8, 0x4000000) 16.647674507s ago: executing program 1 (id=2594): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x80) 14.986936398s ago: executing program 2 (id=2599): socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x2000006, 0x20100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r5 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000240), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 11.640369678s ago: executing program 2 (id=2602): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/215, 0xd7) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = io_uring_setup(0x7883, &(0x7f0000000500)={0x0, 0xc7a5, 0x0, 0x0, 0x0, 0x0, r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000002}, 0x44810) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="b89b11324023a9b2372d9c58205766fedb7f4267f0903b3f15e12bce4329a24d4e436e19c3066d328181e0f213d52068dfca309285c8852e745e97e3479e2728b37530a336660e41c209a42b7df2abcef62bde060575849b219b32b8ff7168c73ebbb98fb87c0212525f541e4c9101ac9877636aae076ca319c4dfe523f9265be9123a90ccf1e7e5fd2d06ca590b40df25e66055e34dde022e"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x400, 0x2, 0x10, 0xde1b}, {0x5, 0xfe, 0x5, 0x2}, {0x2a34, 0xff, 0x4, 0xf3}]}) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x30}}, 0x20044884) 10.59756619s ago: executing program 1 (id=2607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa4, 0x3c, 0xc7, 0x10, 0x40a, 0x2, 0x7b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0xef, 0x2, 0x0, 0xdf, 0xcb, 0xa4}}]}}]}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 10.525596737s ago: executing program 0 (id=2608): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r2, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 10.520712366s ago: executing program 2 (id=2609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x762e, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0xd7, 0x0, r4}) r5 = io_uring_setup(0x8cb, &(0x7f0000000180)={0x0, 0x2b19, 0x800, 0x2, 0x2d2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x923, &(0x7f0000000340)={0x0, 0x806301, 0x8, 0x0, 0x92, 0x0, r5}, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.976256808s ago: executing program 4 (id=2611): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) 8.972852122s ago: executing program 2 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r4], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x80) 8.588914711s ago: executing program 0 (id=2613): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0xf0ffffff7f0000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_submit(0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) 8.539274566s ago: executing program 1 (id=2615): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r4], 0x2c}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x80) 7.713219344s ago: executing program 2 (id=2616): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r4], 0x2c}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x80) 6.343240865s ago: executing program 3 (id=2618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 5.583677737s ago: executing program 4 (id=2619): r0 = io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x578410eb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x3}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x13, 0x0, 0x200, 0x10001, 0x4004, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x7ed3da7c, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x2, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0xd, 0x0, &(0x7f00000002c0), 0x41100, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x1, r2, r4, r5, r6, r7, r8], &(0x7f00000006c0)=[{0x3, 0x5, 0xd, 0xb}, {0x2, 0x1, 0xf, 0xc}, {0x0, 0x3, 0x4, 0x3}, {0x1, 0x4, 0x0, 0x6}, {0x2, 0x1, 0xd, 0x4}, {0x1, 0x2, 0x2, 0xa}, {0x1, 0x2, 0x2, 0x7}], 0x10, 0x8}, 0x94) (async) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x48091) (async) setrlimit(0x4, &(0x7f00000002c0)={0x5, 0x8}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000007c40), 0x3, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000095000000000000001dbd8ff790934b7be317fa60453698f41adc12d8218b9082a5f93684b744a002ac5feed52bc3d4429972799fb66a6fd988e6dc33bd9506a10d38c7b52eac075586f0eff033a15fbb667401d30829963ea99e1faa2a30331cbcff1511833740a0e638f3bebc80da3cd33a1a5cdb5582b877493ca8480f"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33}, 0x94) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002180)={0x14, 0x1e, 0x403, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r12 = landlock_create_ruleset(&(0x7f0000000040)={0x810, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r12, 0x5) 5.360292859s ago: executing program 4 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 5.326169336s ago: executing program 3 (id=2621): r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$pppl2tp(r3, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0x7fff, @remote, 0x6}}}, 0x3a) r4 = syz_open_dev$vcsa(0x0, 0x1, 0x40002) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xd}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x79, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4004, 0x3}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000280)={0xa, 0xfffd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file1\x00', 0xc0, 0x8002, 0x23456}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0xc0, 0x33, 0x107, 0x0, 0x0, {0xfe, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xa0, 0x3fff, 0x0, 0x1, [@generic="ccc4ab52d4fc037189ed6b73cdbcdac3cddd4f982ccf871815e04610dd801dd24b10205f618acbdbf8f0fb03a7af4ee14b957ad47a20c9c59142aad08f6c2f0028cd21ec17112a311c076bb37d12206da86cb19570b91e4b2039c8d4daf4e9cafbee30fe33a76b6f7dd95b498268b3d0c129f86cf55c4725208af356b63943b371a63ce3ac6cae04674b71decea480ae8d5bd7066ce6e7a50f947695"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.282752977s ago: executing program 3 (id=2622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (fail_nth: 1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x2}) 4.279266349s ago: executing program 4 (id=2623): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0xf0ffffff7f0000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_submit(0x0, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) 3.49255851s ago: executing program 3 (id=2624): io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x371b, 0x0, 0x3, 0x391}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x200080c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000090601020000000000000140e00000020c000280080001400300000000ff7f0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.707854869s ago: executing program 0 (id=2625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[0x0], 0x0, 0x36, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 1.758213452s ago: executing program 0 (id=2626): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='.Z', 0x2}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388a8190081003d0008"], 0x0) 1.677690683s ago: executing program 1 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) syslog(0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x7b36}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r2 = syz_io_uring_setup(0x5674, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)) io_uring_enter(r2, 0x1659, 0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = eventfd2(0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r12, r11], 0x2}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r8, 0x81, 0x1, &(0x7f00000004c0)='P') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000180), 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r13, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x5, 0x10000003, 0x0, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r13, 0x5501, 0x0) 1.595356878s ago: executing program 3 (id=2628): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500004c0000000000019078ac000000004a0000000000000000060000ffffffffac1414000713a3e0000001e0000001ac1414aa000000000003"], 0x0) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x4, 0x82) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x41e) pipe2$9p(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7c}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x5d, &(0x7f00000003c0)="41fbdd612747cf6e1ae9049131f0777c7f2951406a375546f5f1f1fdff75882c036f6e289a29b162a35edd1a8c3d73f7f76981df34f676222705d90aa2e74d2f001eb28e79dc35dde545d85f405c1d87e75ab5935101cf6d4db35bfb393dbcc9a43c5931dc5760651a45e24e2af6529596a4fe20254cf0fc97e27a9ac29f9ad709609736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x68) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000000000009502fffffb0000000800000000000000610200"]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600400) unshare(0x8000000) r5 = semget$private(0x0, 0x4000, 0x555) semtimedop(r5, &(0x7f00000002c0)=[{0x0, 0x3, 0x1000}, {0x4, 0x6, 0x800}, {0x2, 0x97a, 0x1000}], 0x3, 0x0) unshare(0x2c040000) fsopen(&(0x7f0000000280)='efs\x00', 0x1) ioctl$TCFLSH(r4, 0x40045431, 0xfffffffffffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) 1.594682334s ago: executing program 0 (id=2629): fspick(0xffffffffffffff9c, 0x0, 0xf) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0xaf}], 0x1, 0x8, 0x2081) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r0, &(0x7f00000002c0)=""/113, 0x71) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x20000, 0x0) 1.589575438s ago: executing program 2 (id=2630): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401a70600160083000000001b09007a150b5d"], 0x0}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/stat\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$TIPC_NL_BEARER_GET(r2, 0x0, 0x20000840) read(r2, &(0x7f0000000080)=""/122, 0x7a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x6000, 0x0) getdents(r4, &(0x7f0000000040)=""/104, 0x4d) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003c40)="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", 0x1de}], 0x1}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000bc0)="5391db44d571ccf2131676e6cea6f0a13fac1743773f029b4f1913eaa27ed23a90bbd45a520d6b", 0x27}, {&(0x7f0000000f40)="c1989d456d5f52a5b12895eb1b01db8447e659af40e9ced9af4b9061f06519cbb0970663fbfba4dd482b507de5765944e2fa5e25431585d1df18841e1927b80ee45d2cbcfa9dae2efe997a9bddec40ce5e2fad2fc9fdd603cf618125b970bfaee0392b116e432473c491978aab1eb4b3812fc2304013a043d4b5487a6006dc60a7192b3ba6c4204b07b192e197a20e416832d331ee115229c4cb0276c8b47d172775ea2248ce486a7cec370b93c9072adba23615", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)="72acf444d56ce9a1600264412112b7b89f12001987580bf9a01e7a45a350942b6c8e1e96edf4", 0x26}, {&(0x7f0000001a80)="117f22b8ef7e02418d4d7246902f480c8a03e618d6d271866bf067352b3be5287354a716ceead940d4b597f0d85f40b0d8c2de1e17cb71db81dc847c597dd799d12f729c8fe63bc199928d2ef03bc816a432b1cefea5ceb19fa61193d130efc136ffe382148f9fca9e71971752569bf5b6567801d653a3b858602e2f580c24259085ac2d722521cbf8b6f26132962169c83fbbc43f27a532bcf41c6ef6c40d273d7100a88d15e6f63714c78dc9be37f450b87b2cac62d29cf79a7d90a5a550eba86a3cec18ced59cb74cb3e14c6e70dacf614380dd77340e582fc1e1586371454656fc21c0f0842cd10bd1fe1474277062bc08db89092b1a7b42ee3b27c5bab299a57a44267d3c903dbe0ae76e2a7afaed1198aa10fa77a36007931596245bb59ba999d40c6bdeb87e482a6c640fe7d688ffaf197672165bca38e6ff6e2c7331b33304d49d298f4f86db74c3904e34a77b9f5017ef85e227437a09f1c666bf6702c164a6f659c040325f780896ff451d253748fc7d3cdf35486791e873a502a1da37bf1575185be45fe978dca7c23023ce2f3e8f99d33d8f9fb6e77f48100f43ac5219eccd6030c298311099db8839dcc9ace54b72a26add2c4889bd81a64953c68d6e83c8b328513384e5494b9763a4a9c38a384918c415c6640132db404b8c4cc45900aa24fc1c98fd1e5a14dc6acee8929ab28f7729987dd5fd4785bdf7e21e92eea4b944312b293a9656e529eb3df3ec8a60583f7f21688025e6589bf51c3c7ee3ecc224dacc968cec1f0c5e4b13fa1885feda962c5c8e833e63130f6da28ada606c8958a0d1d57075fd1bad19256722ed986ecd64e9184c37e785ea2945269e573f95f1c66f75b5c09a210e72496ae8da3a7867df2c319a94a3437b27b872cd4e17e7577cb4ebe0586948b455db63b955d6e1e6f4dcc0e465d2597e5c015240cccd76d594d7222ce4d8bb1127b3755d2018919b12d069a9c5e1caca4a70dcad2ff9da126d094ec360db131d9cffa93e8f45d66c6c81b162b33e556fbdf32955f0fd5e6ae3bdcbb8c534c9fdaa13cb088899285056b911b56c151e2103a73fe93a28c7766d60ad4463c705bdb1479b99be9b068be129c5a7ca3cfc351593a82fd8a32f2edb376d1b617254c875c47e7fffc164f63332fb576e45837ea4916af73945ef5ec3fd68608152d73b7fcf5f92b6ea75b4731c13c4ab9dc2d560b2cae1671316ab5da2a72334a51100e51656bf4868390d94267608ca57be7cc30ef204bce7a5571f5e745b06f8b32b52afb821e7c489feb346edd1dfc696bce5090e678df30070367bb835a7f6208e26d8a1a358bc5258fdd7512c1eaa3e7a792975d904167252dc442fe1b15be00fe870a724aaac35ba48b571dfacd48116be76376854045e3150cc6a293f5b0186938b2367e58ad09bfa8373b3380e44d8405665e5f456f95812efeb214f479d57fecd542534adca32539aa93702e56d4f1078d50a1d874f2fdc14adabf016d45fdabe57336721bbf343a29b6e4e3db3a055c289d880aae56113cb3019b28221ed4c8d2405a9c9bc19f740d365a70610ce1e9e624d376f2ea7df9c56a91b90c6ae13539f5442bf5395ccc622cd098d40071c21953aab0a8c13d92bb36328d7b5098fbe267803977dd2b3ade1b2bf1a0721cddc8a198d701d29cf89b762cefa74b0e14c2bfb00fcc064594fc8ef1d2ce049d34c76f8e2eead19c8728c11c63fb9b1c4e4124f147c7d517e0edfc485f4d708c85a3ef63b9104b26f3395c949f588d7f121308c3e35eb520e11b0d0fc98da5d87e5ccf0355b5f65731caf588cf31f6c8cb6b486fd86f10c287b98b0031912e8c7da7a831f0fbf373ba15e09131602094eb9b7644ff3f4bbb18d7660e94586915304144831c58c9fb00e5b60a3173b5db321ca11", 0x552}], 0x2}}], 0x4, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80101, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYRESDEC], 0x68}, 0x1, 0x7}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.328736496s ago: executing program 4 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009004"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 538.576609ms ago: executing program 3 (id=2632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xf9f) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002100), 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5ee, &(0x7f0000003040)={@remote, @random="00006a9ce7f3", @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "b52972", 0x5b8, 0x3a, 0x1, @private0, @mcast1, {[@dstopts={0x2e, 0x9, '\x00', [@generic={0x80, 0x12, "a4d2caff511d1870d50d80f53286e8c56dea"}, @padn, @pad1, @enc_lim={0x4, 0x1, 0x39}, @calipso={0x7, 0x8, {0x0, 0x0, 0x9, 0x3}}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x3}}, @padn]}, @hopopts={0x33, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x6, [0xd79]}}]}, @hopopts={0x87, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0xf}]}, @fragment={0x6c, 0x0, 0x6, 0x0, 0x0, 0x6, 0x68}, @routing={0x2f, 0x2, 0x1, 0x6, 0x0, [@loopback]}, @srh={0x89, 0x12, 0x4, 0x9, 0x7, 0x30, 0x9, [@loopback, @local, @remote, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x67, 0xe, 0x4, 0x7, 0x8, 0x20, 0x8, [@mcast2, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback]}, @hopopts={0x3c, 0x13, '\x00', [@ra={0x5, 0x2, 0xce}, @generic={0x0, 0xa, "ccf29387ec9704e2f17a"}, @generic={0x0, 0x89, "93bba308d4dbe9eaac4f11be683a32c72465763cc17c20cc577fa212e0cc535cab445d4682ca71fb0d535ff3c35f08fc354878f0a8f93386e15b859ebed0dc1ce42e2f1760ef360b7f2132543f1b9f5b761a60f6ea6903a4c2935564dd02d46ba15bc640c2352b2714a5d4fd8684f6169d04ec475b78ad19d44dc2310eb61fd6dad4da3fe9618374d5"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x1, 0x8, [{0x4, 0xa, 0x4, @local, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], [0x7, 0x1, 0x3, 0x6, 0x7ff, 0x6, 0xfa0, 0x401, 0x3, 0x2]}, {0x0, 0x3, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @mcast2, @private2], [0x7, 0x35a, 0x1]}, {0x1, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, @private0], [0xffff, 0x7, 0xd094, 0x58e, 0x2]}, {0x6, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, [@mcast1, @remote], [0x80000000]}, {0xff, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}]}, {0x4, 0x2, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, [@mcast2, @empty, @empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private2], [0x4, 0x80000000]}, {0x8, 0x1, 0x6, @mcast1, [@dev={0xfe, 0x80, '\x00', 0x1e}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @loopback], [0x80000001]}, {0x0, 0x4, 0x4, @rand_addr=' \x01\x00', [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1], [0xf8c, 0x4, 0x435, 0x80000001]}]}}}}}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 459.135717ms ago: executing program 0 (id=2633): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x17d4}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16], 0x0) 0s ago: executing program 4 (id=2634): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = fcntl$getown(r0, 0x9) sched_setaffinity(r2, 0xff6f, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): strings: Mfr=0, Product=0, SerialNumber=0 [ 785.481420][ T24] usb 4-1: config 0 descriptor?? [ 785.580754][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 785.742991][ T24] kaweth 4-1:0.0: Firmware present in device. [ 785.992049][ T24] kaweth 4-1:0.0: Statistics collection: 0 [ 785.998672][ T24] kaweth 4-1:0.0: Multicast filter limit: 0 [ 786.013345][ T24] kaweth 4-1:0.0: MTU: 0 [ 786.145212][ T24] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 786.232414][ T30] audit: type=1400 audit(1752161711.966:1183): avc: denied { ioctl } for pid=14322 comm="syz.4.2295" path="socket:[42607]" dev="sockfs" ino=42607 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 786.330315][ T30] audit: type=1400 audit(1752161712.066:1184): avc: denied { bind } for pid=14322 comm="syz.4.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 786.357277][ T30] audit: type=1400 audit(1752161712.096:1185): avc: denied { name_bind } for pid=14322 comm="syz.4.2295" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 786.399556][ T30] audit: type=1400 audit(1752161712.096:1186): avc: denied { node_bind } for pid=14322 comm="syz.4.2295" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 786.420509][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.622353][ T24] kaweth 4-1:0.0: kaweth interface created at eth1 [ 786.763085][T14334] kAFS: No cell specified [ 786.853570][ T1203] usb 4-1: USB disconnect, device number 46 [ 787.005439][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 787.279044][T14345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 787.359811][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 788.118708][T14357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.412735][T14364] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 788.584292][T14371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.628586][ T30] audit: type=1400 audit(1752161714.366:1187): avc: denied { create } for pid=14370 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 788.670904][ T30] audit: type=1400 audit(1752161714.366:1188): avc: denied { setopt } for pid=14370 comm="syz.1.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 788.737579][ T30] audit: type=1400 audit(1752161714.416:1189): avc: denied { ioctl } for pid=14372 comm="syz.4.2305" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 788.900914][ T30] audit: type=1400 audit(1752161714.416:1190): avc: denied { set_context_mgr } for pid=14372 comm="syz.4.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 788.931073][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 789.153101][T14387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 789.167146][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.191218][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 789.200471][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.220912][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 789.240921][ T24] usb 5-1: Product: syz [ 789.260456][ T24] usb 5-1: Manufacturer: syz [ 789.275601][ T24] usb 5-1: SerialNumber: syz [ 789.309581][ T24] usb 5-1: config 0 descriptor?? [ 789.324566][ T24] usb 5-1: selecting invalid altsetting 0 [ 789.622528][ T24] usb 5-1: USB disconnect, device number 54 [ 789.741323][ T1203] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 789.905813][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.935877][ T1203] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 789.946775][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.979596][ T1203] usb 4-1: Product: syz [ 789.991601][ T1203] usb 4-1: Manufacturer: syz [ 789.997592][ T1203] usb 4-1: SerialNumber: syz [ 790.005490][ T1203] usb 4-1: config 0 descriptor?? [ 790.013842][ T1203] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 790.050206][ T1203] dvb-usb: bulk message failed: -22 (3/0) [ 790.918596][ T1203] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 790.935544][T14397] FAULT_INJECTION: forcing a failure. [ 790.935544][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 790.991294][ T1203] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 791.000885][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.3.2311 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 791.000909][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.000918][T14397] Call Trace: [ 791.000924][T14397] [ 791.000930][T14397] dump_stack_lvl+0x16c/0x1f0 [ 791.000956][T14397] should_fail_ex+0x512/0x640 [ 791.000976][T14397] ? fs_reclaim_acquire+0xae/0x150 [ 791.000993][T14397] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 791.001013][T14397] should_failslab+0xc2/0x120 [ 791.001034][T14397] __kmalloc_noprof+0xd2/0x510 [ 791.001058][T14397] tomoyo_realpath_from_path+0xc2/0x6e0 [ 791.001081][T14397] ? tomoyo_profile+0x47/0x60 [ 791.001105][T14397] tomoyo_path_number_perm+0x245/0x580 [ 791.001122][T14397] ? tomoyo_path_number_perm+0x237/0x580 [ 791.001141][T14397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 791.001160][T14397] ? find_held_lock+0x2b/0x80 [ 791.001198][T14397] ? find_held_lock+0x2b/0x80 [ 791.001215][T14397] ? hook_file_ioctl_common+0x145/0x410 [ 791.001233][T14397] ? __fget_files+0x20e/0x3c0 [ 791.001256][T14397] security_file_ioctl+0x9b/0x240 [ 791.001278][T14397] __x64_sys_ioctl+0xb7/0x210 [ 791.001297][T14397] do_syscall_64+0xcd/0x4c0 [ 791.001319][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.001334][T14397] RIP: 0033:0x7f059dd8e929 [ 791.001347][T14397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.001361][T14397] RSP: 002b:00007f059eb97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.001376][T14397] RAX: ffffffffffffffda RBX: 00007f059dfb5fa0 RCX: 00007f059dd8e929 [ 791.001385][T14397] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 791.001394][T14397] RBP: 00007f059eb97090 R08: 0000000000000000 R09: 0000000000000000 [ 791.001411][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.001420][T14397] R13: 0000000000000000 R14: 00007f059dfb5fa0 R15: 00007fff65881068 [ 791.001440][T14397] [ 791.001446][T14397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 791.029823][ T1203] usb 4-1: media controller created [ 791.279800][ T1203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.332307][ T1203] dvb-usb: bulk message failed: -22 (6/0) [ 791.338929][ T1203] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 791.355551][T14397] dvb-usb: bulk message failed: -22 (2/0) [ 791.363540][ T1203] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 791.385666][ T1203] dvb-usb: schedule remote query interval to 150 msecs. [ 791.393804][ T1203] dvb-usb: bulk message failed: -22 (3/0) [ 791.436556][T14417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.447767][T14417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.459987][T14418] netlink: 'syz.2.2317': attribute type 2 has an invalid length. [ 791.471682][ T1203] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 791.491007][ T5971] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 791.509928][ T1203] usb 4-1: USB disconnect, device number 47 [ 791.527272][T14418] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2317'. [ 791.552208][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 791.559084][ T9] dvb-usb: error while querying for an remote control event. [ 791.606657][ T1203] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 791.860848][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 791.867659][ T5971] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 791.885295][ T5971] usb 5-1: config 0 has no interface number 0 [ 791.892207][ T5971] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.903373][ T5971] usb 5-1: config 0 interface 85 has no altsetting 0 [ 792.317978][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 792.460218][ T5971] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 792.549562][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.558013][ T5971] usb 5-1: Product: syz [ 792.719948][ T5971] usb 5-1: Manufacturer: syz [ 792.725022][ T5971] usb 5-1: SerialNumber: syz [ 792.740326][ T5971] usb 5-1: config 0 descriptor?? [ 793.392055][ T5971] appletouch 5-1:0.85: Failed to read mode from device. [ 793.400669][ T5971] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 793.958129][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 794.005468][ T5971] usb 5-1: USB disconnect, device number 55 [ 794.066037][ T30] audit: type=1400 audit(1752161719.806:1191): avc: denied { listen } for pid=14442 comm="syz.1.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 794.085510][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.101090][ T30] audit: type=1400 audit(1752161719.836:1192): avc: denied { write } for pid=14442 comm="syz.1.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 794.203456][ T30] audit: type=1400 audit(1752161719.936:1193): avc: denied { watch watch_reads } for pid=14445 comm="syz.1.2326" path="/411/file0" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 794.324442][T14448] FAULT_INJECTION: forcing a failure. [ 794.324442][T14448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.358692][T14448] CPU: 1 UID: 0 PID: 14448 Comm: syz.0.2327 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 794.358719][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.358728][T14448] Call Trace: [ 794.358734][T14448] [ 794.358740][T14448] dump_stack_lvl+0x16c/0x1f0 [ 794.358767][T14448] should_fail_ex+0x512/0x640 [ 794.358792][T14448] _copy_from_user+0x2e/0xd0 [ 794.358816][T14448] copy_msghdr_from_user+0x98/0x160 [ 794.358839][T14448] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 794.358867][T14448] ? __pfx__kstrtoull+0x10/0x10 [ 794.358889][T14448] ___sys_sendmsg+0xfe/0x1d0 [ 794.358912][T14448] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.358946][T14448] ? find_held_lock+0x2b/0x80 [ 794.358983][T14448] __sys_sendmmsg+0x200/0x420 [ 794.359009][T14448] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.359039][T14448] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.359071][T14448] ? fput+0x70/0xf0 [ 794.359085][T14448] ? ksys_write+0x1ac/0x250 [ 794.359106][T14448] ? __pfx_ksys_write+0x10/0x10 [ 794.359137][T14448] __x64_sys_sendmmsg+0x9c/0x100 [ 794.359158][T14448] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.359182][T14448] do_syscall_64+0xcd/0x4c0 [ 794.359207][T14448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.359224][T14448] RIP: 0033:0x7fb98e18e929 [ 794.359237][T14448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.359254][T14448] RSP: 002b:00007fb98efe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.359271][T14448] RAX: ffffffffffffffda RBX: 00007fb98e3b5fa0 RCX: 00007fb98e18e929 [ 794.359282][T14448] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000008 [ 794.359292][T14448] RBP: 00007fb98efe8090 R08: 0000000000000000 R09: 0000000000000000 [ 794.359302][T14448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.359311][T14448] R13: 0000000000000000 R14: 00007fb98e3b5fa0 R15: 00007ffdfedcf168 [ 794.359334][T14448] [ 794.595157][ T30] audit: type=1400 audit(1752161720.316:1194): avc: denied { read } for pid=14449 comm="syz.1.2328" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.843747][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2331'. [ 795.471308][T14462] netlink: 10288 bytes leftover after parsing attributes in process `syz.4.2333'. [ 795.642292][ T30] audit: type=1400 audit(1752161721.386:1195): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 796.000999][ T1203] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 796.700557][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.730973][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 796.748228][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.758218][ T1203] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 796.773677][ T1203] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 796.784073][ T1203] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 796.792341][ T1203] usb 4-1: Manufacturer: syz [ 796.804950][ T1203] usb 4-1: config 0 descriptor?? [ 797.305101][ T1203] rc_core: IR keymap rc-hauppauge not found [ 797.530854][ T1203] Registered IR keymap rc-empty [ 797.541323][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.572260][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.595849][ T1203] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 797.613859][ T1203] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 797.630686][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 797.863785][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 797.870818][ T5152] Bluetooth: hci5: command 0xfc11 tx timeout [ 798.120844][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.211087][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.231155][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.263157][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.306316][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.341789][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.381412][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.451281][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.481093][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.543308][ T1203] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 798.584764][ T1203] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 798.593987][ T1203] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.615405][ T1203] usb 4-1: USB disconnect, device number 48 [ 798.771021][ T5971] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 798.811637][ T30] audit: type=1400 audit(1752161724.546:1196): avc: denied { read } for pid=14510 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 798.921049][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 798.942111][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.539502][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.549856][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 799.563996][ T5971] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 799.609555][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.663755][ T5971] usb 2-1: config 0 descriptor?? [ 799.679256][T14516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2347'. [ 799.914357][ T30] audit: type=1400 audit(1752161725.636:1197): avc: denied { create } for pid=14524 comm="syz.0.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 799.934173][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.983909][T14530] FAULT_INJECTION: forcing a failure. [ 799.983909][T14530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.030939][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.3.2351 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 800.030966][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.030976][T14530] Call Trace: [ 800.030982][T14530] [ 800.030988][T14530] dump_stack_lvl+0x16c/0x1f0 [ 800.031018][T14530] should_fail_ex+0x512/0x640 [ 800.031054][T14530] _copy_from_user+0x2e/0xd0 [ 800.031079][T14530] move_addr_to_kernel+0x65/0x170 [ 800.031099][T14530] __sys_sendto+0x1be/0x520 [ 800.031120][T14530] ? __pfx___sys_sendto+0x10/0x10 [ 800.031161][T14530] ? ksys_write+0x1ac/0x250 [ 800.031183][T14530] ? __pfx_ksys_write+0x10/0x10 [ 800.031208][T14530] __x64_sys_sendto+0xe0/0x1c0 [ 800.031227][T14530] ? do_syscall_64+0x91/0x4c0 [ 800.031250][T14530] ? lockdep_hardirqs_on+0x7c/0x110 [ 800.031272][T14530] do_syscall_64+0xcd/0x4c0 [ 800.031296][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.031313][T14530] RIP: 0033:0x7f059dd8e929 [ 800.031328][T14530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.031343][T14530] RSP: 002b:00007f059eb97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 800.031360][T14530] RAX: ffffffffffffffda RBX: 00007f059dfb5fa0 RCX: 00007f059dd8e929 [ 800.031371][T14530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 800.031380][T14530] RBP: 00007f059eb97090 R08: 0000200000000140 R09: 0000000000000014 [ 800.031390][T14530] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.031400][T14530] R13: 0000000000000000 R14: 00007f059dfb5fa0 R15: 00007fff65881068 [ 800.031422][T14530] [ 800.208473][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.726488][ T30] audit: type=1400 audit(1752161726.066:1198): avc: denied { audit_read } for pid=14526 comm="syz.2.2349" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 800.768880][T14506] netlink: 'syz.1.2343': attribute type 10 has an invalid length. [ 800.785603][T14536] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 800.793472][T14536] team0: Port device batadv1 added [ 800.801082][T14506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2343'. [ 800.810139][T14506] dummy0: entered promiscuous mode [ 800.857141][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.864486][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.873005][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.885681][T14506] bridge0: port 3(dummy0) entered blocking state [ 800.895445][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.910362][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.920878][T14506] bridge0: port 3(dummy0) entered disabled state [ 800.927779][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.935675][T14506] dummy0: entered allmulticast mode [ 800.941932][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.949817][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.959630][T14506] bridge0: port 3(dummy0) entered blocking state [ 800.966047][T14506] bridge0: port 3(dummy0) entered forwarding state [ 800.974293][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 800.981825][ T5971] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 801.064819][T14540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.093831][T14540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.140986][ T5971] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input17 [ 801.170923][ T6003] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 801.281148][ T5971] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 801.310746][ T5971] usb 2-1: USB disconnect, device number 45 [ 801.331037][ T6003] usb 4-1: Using ep0 maxpacket: 8 [ 801.348709][ T6003] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 801.369269][T14547] fido_id[14547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 801.374441][ T6003] usb 4-1: config 0 has no interface number 0 [ 801.410147][ T6003] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.435475][ T6003] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 801.448793][ T6003] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 801.473035][ T6003] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 801.501564][ T6003] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 801.510624][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.551617][ T6003] usb 4-1: config 0 descriptor?? [ 801.562492][ T6003] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 801.965564][ T6003] usb 4-1: USB disconnect, device number 49 [ 801.988756][ T6003] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 802.441019][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 802.702181][ T24] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 802.715648][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.730851][ T30] audit: type=1326 audit(1752161728.456:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 802.760560][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 802.898681][ T24] usb 5-1: config 1 has no interface number 1 [ 802.907591][ T24] usb 5-1: config 1 interface 5 has no altsetting 0 [ 802.914706][ T30] audit: type=1326 audit(1752161728.456:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 803.380332][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 803.390281][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 803.417536][ T24] usb 5-1: SerialNumber: syz [ 803.429397][ T30] audit: type=1326 audit(1752161728.506:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 803.453001][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.781138][ T30] audit: type=1326 audit(1752161728.506:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 803.804640][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.815105][ T30] audit: type=1326 audit(1752161728.506:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 803.838579][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.880042][T14580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.890146][ T24] usb 5-1: 0:2 : does not exist [ 803.903591][ T24] usb 5-1: unit 5 not found! [ 803.904022][ T30] audit: type=1326 audit(1752161728.506:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 803.928653][ T24] usb 5-1: USB disconnect, device number 56 [ 803.937673][ T30] audit: type=1326 audit(1752161728.516:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 804.023980][ T30] audit: type=1326 audit(1752161728.516:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14568 comm="syz.3.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 804.048578][T13719] udevd[13719]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.253103][T14587] Bluetooth: MGMT ver 1.23 [ 804.424945][T14589] syzkaller1: entered promiscuous mode [ 804.430461][T14589] syzkaller1: entered allmulticast mode [ 804.440711][T14589] capability: warning: `syz.3.2365' uses deprecated v2 capabilities in a way that may be insecure [ 805.471786][ T5903] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 805.520353][T14612] tipc: Enabled bearer , priority 0 [ 805.556148][T14612] syzkaller0: entered promiscuous mode [ 805.604883][T14612] syzkaller0: entered allmulticast mode [ 805.906762][ T5903] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 805.930983][ T5903] usb 4-1: config 6 has no interface number 0 [ 805.938020][ T5903] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 805.939437][T14615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.952138][ T5903] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.969782][T14616] xt_TPROXY: Can be used only with -p tcp or -p udp [ 805.979340][T14612] FAULT_INJECTION: forcing a failure. [ 805.979340][T14612] name failslab, interval 1, probability 0, space 0, times 0 [ 806.001218][ T5903] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 806.013556][T14612] CPU: 0 UID: 0 PID: 14612 Comm: syz.1.2373 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 806.013583][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 806.013594][T14612] Call Trace: [ 806.013601][T14612] [ 806.013608][T14612] dump_stack_lvl+0x16c/0x1f0 [ 806.013637][T14612] should_fail_ex+0x512/0x640 [ 806.013661][T14612] ? fs_reclaim_acquire+0xae/0x150 [ 806.013681][T14612] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 806.013705][T14612] should_failslab+0xc2/0x120 [ 806.013730][T14612] __kmalloc_noprof+0xd2/0x510 [ 806.013757][T14612] tomoyo_realpath_from_path+0xc2/0x6e0 [ 806.013783][T14612] ? tomoyo_profile+0x47/0x60 [ 806.013812][T14612] tomoyo_path_number_perm+0x245/0x580 [ 806.013832][T14612] ? tomoyo_path_number_perm+0x237/0x580 [ 806.013855][T14612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 806.013876][T14612] ? find_held_lock+0x2b/0x80 [ 806.013921][T14612] ? find_held_lock+0x2b/0x80 [ 806.013940][T14612] ? hook_file_ioctl_common+0x145/0x410 [ 806.013962][T14612] ? __fget_files+0x20e/0x3c0 [ 806.013989][T14612] security_file_ioctl+0x9b/0x240 [ 806.014016][T14612] __x64_sys_ioctl+0xb7/0x210 [ 806.014037][T14612] do_syscall_64+0xcd/0x4c0 [ 806.014069][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.014086][T14612] RIP: 0033:0x7f3320f8e929 [ 806.014100][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.014116][T14612] RSP: 002b:00007f3321d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.014132][T14612] RAX: ffffffffffffffda RBX: 00007f33211b5fa0 RCX: 00007f3320f8e929 [ 806.014143][T14612] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 806.014153][T14612] RBP: 00007f3321d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 806.014162][T14612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.014172][T14612] R13: 0000000000000000 R14: 00007f33211b5fa0 R15: 00007ffd08dc7d68 [ 806.014195][T14612] [ 806.014202][T14612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 806.233637][ T5903] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 806.295323][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 806.295340][ T30] audit: type=1400 audit(1752161732.036:1222): avc: denied { mount } for pid=14622 comm="syz.0.2377" name="/" dev="ramfs" ino=45171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 806.403860][ T5903] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 806.413156][ T5903] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 806.422198][ T5903] usb 4-1: Product: syz [ 806.426371][ T5903] usb 4-1: Manufacturer: syz [ 806.431282][ T5903] usb 4-1: SerialNumber: syz [ 806.436814][T14612] tipc: Resetting bearer [ 806.450424][T14623] sp0: Synchronizing with TNC [ 806.465424][ T5903] hso 4-1:6.2: Failed to find BULK IN ep [ 806.465551][T14611] tipc: Resetting bearer [ 806.483652][T14624] sp0: Found TNC [ 806.511738][T14611] tipc: Disabling bearer [ 806.601586][T14623] netlink: 'syz.0.2377': attribute type 12 has an invalid length. [ 806.630489][T14624] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.653004][T14622] [U] è` [ 806.901360][ T5971] usb 4-1: USB disconnect, device number 50 [ 806.905530][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 807.090885][ T5903] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 807.275822][ T5903] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 807.285708][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.296121][ T5903] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 807.310999][ T5903] usb 2-1: config 1 has no interface number 1 [ 807.327226][ T5903] usb 2-1: config 1 interface 5 has no altsetting 0 [ 807.404396][ T5903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 807.413542][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 807.428361][ T5903] usb 2-1: SerialNumber: syz [ 807.646247][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 807.677001][ T5903] usb 2-1: 0:2 : does not exist [ 807.702681][ T5903] usb 2-1: unit 5 not found! [ 807.883963][ T5903] usb 2-1: USB disconnect, device number 46 [ 807.967277][T13719] udevd[13719]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.012194][ T5971] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 808.180874][ T5971] usb 4-1: Using ep0 maxpacket: 32 [ 808.191765][ T5971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.226506][T14650] FAULT_INJECTION: forcing a failure. [ 808.226506][T14650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.243273][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.1.2384 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 808.243301][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.243312][T14650] Call Trace: [ 808.243317][T14650] [ 808.243324][T14650] dump_stack_lvl+0x16c/0x1f0 [ 808.243353][T14650] should_fail_ex+0x512/0x640 [ 808.243379][T14650] _copy_from_user+0x2e/0xd0 [ 808.243403][T14650] __sys_bpf+0x21d/0x4d80 [ 808.243430][T14650] ? __pfx___sys_bpf+0x10/0x10 [ 808.243453][T14650] ? ksys_write+0x190/0x250 [ 808.243479][T14650] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 808.243518][T14650] ? fput+0x70/0xf0 [ 808.243533][T14650] ? ksys_write+0x1ac/0x250 [ 808.243553][T14650] ? __pfx_ksys_write+0x10/0x10 [ 808.243578][T14650] __x64_sys_bpf+0x78/0xc0 [ 808.243601][T14650] ? lockdep_hardirqs_on+0x7c/0x110 [ 808.243624][T14650] do_syscall_64+0xcd/0x4c0 [ 808.243649][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.243667][T14650] RIP: 0033:0x7f3320f8e929 [ 808.243681][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.243697][T14650] RSP: 002b:00007f3321d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.243713][T14650] RAX: ffffffffffffffda RBX: 00007f33211b5fa0 RCX: 00007f3320f8e929 [ 808.243724][T14650] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 808.243734][T14650] RBP: 00007f3321d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 808.243743][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.243752][T14650] R13: 0000000000000000 R14: 00007f33211b5fa0 R15: 00007ffd08dc7d68 [ 808.243775][T14650] [ 808.250290][ T5971] usb 4-1: config 0 has no interface number 0 [ 808.411213][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.433702][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.051458][ T5971] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 809.075771][ T5971] usb 4-1: config 0 interface 1 has no altsetting 0 [ 809.087312][ T5971] usb 4-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 809.096730][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.143090][ T5971] usb 4-1: Product: syz [ 809.147286][ T5971] usb 4-1: Manufacturer: syz [ 809.165621][ T5971] usb 4-1: SerialNumber: syz [ 809.180734][ T5971] usb 4-1: config 0 descriptor?? [ 809.467642][ T5971] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 809.488285][ T5971] cx231xx 4-1:0.1: Failed to read PCB config [ 809.497165][ T5971] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 809.525863][T14662] FAULT_INJECTION: forcing a failure. [ 809.525863][T14662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.565873][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.4.2387 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 809.565901][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 809.565911][T14662] Call Trace: [ 809.565917][T14662] [ 809.565925][T14662] dump_stack_lvl+0x16c/0x1f0 [ 809.565953][T14662] should_fail_ex+0x512/0x640 [ 809.565978][T14662] _copy_from_user+0x2e/0xd0 [ 809.566003][T14662] copy_msghdr_from_user+0x98/0x160 [ 809.566028][T14662] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 809.566063][T14662] ___sys_sendmsg+0xfe/0x1d0 [ 809.566086][T14662] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.566106][T14662] ? __lock_acquire+0x622/0x1c90 [ 809.566154][T14662] __sys_sendmsg+0x16d/0x220 [ 809.566176][T14662] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.566221][T14662] do_syscall_64+0xcd/0x4c0 [ 809.566247][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.566265][T14662] RIP: 0033:0x7f72e158e929 [ 809.566278][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.566295][T14662] RSP: 002b:00007f72e2319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.566312][T14662] RAX: ffffffffffffffda RBX: 00007f72e17b5fa0 RCX: 00007f72e158e929 [ 809.566323][T14662] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 809.566334][T14662] RBP: 00007f72e2319090 R08: 0000000000000000 R09: 0000000000000000 [ 809.566344][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.566355][T14662] R13: 0000000000000000 R14: 00007f72e17b5fa0 R15: 00007ffd29b12b98 [ 809.566378][T14662] [ 809.733789][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.055576][ T5971] usb 4-1: USB disconnect, device number 51 [ 810.421065][ T5971] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 810.600954][ T5971] usb 4-1: Using ep0 maxpacket: 32 [ 810.612289][ T5971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 810.620731][T14677] FAULT_INJECTION: forcing a failure. [ 810.620731][T14677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.635533][ T5971] usb 4-1: config 0 has no interface number 0 [ 810.641731][ T5971] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 810.652481][ T5971] usb 4-1: config 0 interface 1 has no altsetting 0 [ 810.660927][T14677] CPU: 1 UID: 0 PID: 14677 Comm: syz.4.2389 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 810.660949][T14677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.660958][T14677] Call Trace: [ 810.660964][T14677] [ 810.660969][T14677] dump_stack_lvl+0x16c/0x1f0 [ 810.660996][T14677] should_fail_ex+0x512/0x640 [ 810.661022][T14677] _copy_to_user+0x32/0xd0 [ 810.661055][T14677] virtual_ncidev_read+0x2ba/0x500 [ 810.661077][T14677] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 810.661095][T14677] ? avc_policy_seqno+0x9/0x20 [ 810.661111][T14677] ? selinux_file_permission+0x126/0x660 [ 810.661137][T14677] ? bpf_lsm_file_permission+0x9/0x10 [ 810.661163][T14677] ? security_file_permission+0x71/0x210 [ 810.661188][T14677] ? rw_verify_area+0xcf/0x680 [ 810.661207][T14677] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 810.661227][T14677] vfs_read+0x1e4/0xc60 [ 810.661254][T14677] ? __pfx_vfs_read+0x10/0x10 [ 810.661273][T14677] ? find_held_lock+0x2b/0x80 [ 810.661296][T14677] ? __fget_files+0x204/0x3c0 [ 810.661323][T14677] ? __fget_files+0x20e/0x3c0 [ 810.661354][T14677] ksys_read+0x12a/0x250 [ 810.661374][T14677] ? __pfx_ksys_read+0x10/0x10 [ 810.661402][T14677] do_syscall_64+0xcd/0x4c0 [ 810.661428][T14677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.661445][T14677] RIP: 0033:0x7f72e158e929 [ 810.661459][T14677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.661473][T14677] RSP: 002b:00007f72df3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.661489][T14677] RAX: ffffffffffffffda RBX: 00007f72e17b6080 RCX: 00007f72e158e929 [ 810.661500][T14677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.661509][T14677] RBP: 00007f72df3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 810.661518][T14677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.661527][T14677] R13: 0000000000000001 R14: 00007f72e17b6080 R15: 00007ffd29b12b98 [ 810.661550][T14677] [ 810.877539][ T5971] usb 4-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 810.887101][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.895557][ T5971] usb 4-1: Product: syz [ 810.899741][ T5971] usb 4-1: Manufacturer: syz [ 810.904486][ T5971] usb 4-1: SerialNumber: syz [ 811.062986][ T5971] usb 4-1: config 0 descriptor?? [ 811.068508][ T5971] usb 4-1: can't set config #0, error -71 [ 811.089669][ T5971] usb 4-1: USB disconnect, device number 52 [ 811.124598][ T30] audit: type=1400 audit(1752161736.866:1223): avc: denied { ioctl } for pid=14679 comm="syz.3.2390" path="socket:[45316]" dev="sockfs" ino=45316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 811.150110][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.290089][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.299623][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.625842][ T30] audit: type=1400 audit(1752161737.366:1224): avc: denied { bind } for pid=14691 comm="syz.0.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 811.692811][ T30] audit: type=1400 audit(1752161737.366:1225): avc: denied { ioctl } for pid=14691 comm="syz.0.2396" path="socket:[44439]" dev="sockfs" ino=44439 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 811.717764][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.840413][ T1203] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 812.014600][ T1203] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.031614][ T1203] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 812.071535][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.087552][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 812.114229][ T1203] usb 5-1: config 0 descriptor?? [ 812.144759][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 812.348211][ T30] audit: type=1400 audit(1752161738.086:1226): avc: denied { map } for pid=14689 comm="syz.4.2395" path="socket:[44464]" dev="sockfs" ino=44464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.441314][ T1203] pwc: send_video_command error -71 [ 812.450556][ T1203] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 812.486758][ T1203] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 812.544095][ T1203] usb 5-1: USB disconnect, device number 57 [ 812.895638][T14717] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2400'. [ 813.040876][ T1203] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 813.199379][ T1203] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.236575][ T1203] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.246087][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.265866][ T1203] usb 5-1: config 0 descriptor?? [ 813.280921][ T5903] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 813.317576][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 813.450866][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 813.457579][ T5903] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 813.470947][ T5903] usb 4-1: config 0 has no interface number 0 [ 813.477102][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 813.508772][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 813.521243][ T5903] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 813.551203][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 813.590209][ T5903] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 813.620871][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.640473][ T5903] usb 4-1: config 0 descriptor?? [ 813.658340][ T5903] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 813.741623][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.748998][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.775875][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 813.788422][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 813.821524][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 813.968716][T14739] FAULT_INJECTION: forcing a failure. [ 813.968716][T14739] name failslab, interval 1, probability 0, space 0, times 0 [ 814.032726][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 814.042841][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 814.054300][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 814.122877][T14739] CPU: 0 UID: 0 PID: 14739 Comm: syz.1.2402 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 814.122907][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 814.122918][T14739] Call Trace: [ 814.122926][T14739] [ 814.122934][T14739] dump_stack_lvl+0x16c/0x1f0 [ 814.122964][T14739] should_fail_ex+0x512/0x640 [ 814.122987][T14739] ? fs_reclaim_acquire+0xae/0x150 [ 814.123006][T14739] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 814.123036][T14739] should_failslab+0xc2/0x120 [ 814.123061][T14739] __kmalloc_noprof+0xd2/0x510 [ 814.123089][T14739] tomoyo_realpath_from_path+0xc2/0x6e0 [ 814.123115][T14739] ? tomoyo_profile+0x47/0x60 [ 814.123143][T14739] tomoyo_path_number_perm+0x245/0x580 [ 814.123163][T14739] ? tomoyo_path_number_perm+0x237/0x580 [ 814.123186][T14739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 814.123207][T14739] ? find_held_lock+0x2b/0x80 [ 814.123253][T14739] ? find_held_lock+0x2b/0x80 [ 814.123273][T14739] ? hook_file_ioctl_common+0x145/0x410 [ 814.123294][T14739] ? __fget_files+0x20e/0x3c0 [ 814.123322][T14739] security_file_ioctl+0x9b/0x240 [ 814.123347][T14739] __x64_sys_ioctl+0xb7/0x210 [ 814.123369][T14739] do_syscall_64+0xcd/0x4c0 [ 814.123395][T14739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.123411][T14739] RIP: 0033:0x7f3320f8e929 [ 814.123426][T14739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.123442][T14739] RSP: 002b:00007f3321d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.123460][T14739] RAX: ffffffffffffffda RBX: 00007f33211b5fa0 RCX: 00007f3320f8e929 [ 814.123471][T14739] RDX: 0000200000000000 RSI: 0000000000008b36 RDI: 0000000000000004 [ 814.123481][T14739] RBP: 00007f3321d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 814.123491][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.123501][T14739] R13: 0000000000000000 R14: 00007f33211b5fa0 R15: 00007ffd08dc7d68 [ 814.123525][T14739] [ 814.123550][T14739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.360869][ T30] audit: type=1400 audit(1752161740.096:1227): avc: denied { ioctl } for pid=14737 comm="syz.1.2402" path="socket:[44499]" dev="sockfs" ino=44499 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 814.385647][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.502416][T14744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2403'. [ 814.535076][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 814.536242][ T30] audit: type=1400 audit(1752161740.276:1228): avc: denied { listen } for pid=14743 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 814.578859][ T5903] usb 4-1: USB disconnect, device number 53 [ 814.609671][ T5903] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 814.656236][T14748] FAULT_INJECTION: forcing a failure. [ 814.656236][T14748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.673325][T14748] CPU: 1 UID: 0 PID: 14748 Comm: syz.2.2404 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 814.673350][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 814.673360][T14748] Call Trace: [ 814.673366][T14748] [ 814.673372][T14748] dump_stack_lvl+0x16c/0x1f0 [ 814.673398][T14748] should_fail_ex+0x512/0x640 [ 814.673423][T14748] _copy_from_user+0x2e/0xd0 [ 814.673446][T14748] copy_msghdr_from_user+0x98/0x160 [ 814.673468][T14748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 814.673501][T14748] ___sys_sendmsg+0xfe/0x1d0 [ 814.673525][T14748] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.673543][T14748] ? __lock_acquire+0x622/0x1c90 [ 814.673586][T14748] __sys_sendmsg+0x16d/0x220 [ 814.673606][T14748] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.673642][T14748] do_syscall_64+0xcd/0x4c0 [ 814.673669][T14748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.673685][T14748] RIP: 0033:0x7fabb238e929 [ 814.673698][T14748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.673713][T14748] RSP: 002b:00007fabb3214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.673729][T14748] RAX: ffffffffffffffda RBX: 00007fabb25b5fa0 RCX: 00007fabb238e929 [ 814.673741][T14748] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 814.673750][T14748] RBP: 00007fabb3214090 R08: 0000000000000000 R09: 0000000000000000 [ 814.673760][T14748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.673770][T14748] R13: 0000000000000000 R14: 00007fabb25b5fa0 R15: 00007ffe87d57dc8 [ 814.673793][T14748] [ 815.264448][ T30] audit: type=1400 audit(1752161740.996:1229): avc: denied { write } for pid=14755 comm="syz.2.2406" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 815.329762][T14760] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 815.356711][T14761] FAULT_INJECTION: forcing a failure. [ 815.356711][T14761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.372686][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.0.2407 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 815.372712][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 815.372722][T14761] Call Trace: [ 815.372728][T14761] [ 815.372735][T14761] dump_stack_lvl+0x16c/0x1f0 [ 815.372762][T14761] should_fail_ex+0x512/0x640 [ 815.372786][T14761] _copy_from_user+0x2e/0xd0 [ 815.372808][T14761] copy_msghdr_from_user+0x98/0x160 [ 815.372831][T14761] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 815.372862][T14761] ___sys_sendmsg+0xfe/0x1d0 [ 815.372885][T14761] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.372905][T14761] ? __lock_acquire+0x622/0x1c90 [ 815.372945][T14761] __sys_sendmsg+0x16d/0x220 [ 815.372966][T14761] ? __pfx___sys_sendmsg+0x10/0x10 [ 815.373001][T14761] do_syscall_64+0xcd/0x4c0 [ 815.373025][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.373041][T14761] RIP: 0033:0x7fb98e18e929 [ 815.373054][T14761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.373070][T14761] RSP: 002b:00007fb98efe8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.373085][T14761] RAX: ffffffffffffffda RBX: 00007fb98e3b5fa0 RCX: 00007fb98e18e929 [ 815.373096][T14761] RDX: 0000000000000000 RSI: 0000200000002880 RDI: 0000000000000004 [ 815.373105][T14761] RBP: 00007fb98efe8090 R08: 0000000000000000 R09: 0000000000000000 [ 815.373114][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.373123][T14761] R13: 0000000000000000 R14: 00007fb98e3b5fa0 R15: 00007ffdfedcf168 [ 815.373145][T14761] [ 815.595981][ T1203] pwc: recv_control_msg error -71 req 02 val 2500 [ 815.731163][ T1203] pwc: recv_control_msg error -71 req 02 val 2400 [ 815.793528][ T1203] pwc: recv_control_msg error -71 req 02 val 2600 [ 815.832809][ T1203] pwc: recv_control_msg error -71 req 02 val 2900 [ 815.843094][ T1203] pwc: recv_control_msg error -71 req 02 val 2800 [ 815.850038][T14767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 815.927189][ T1203] pwc: recv_control_msg error -71 req 04 val 1100 [ 815.952871][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 816.030367][ T1203] pwc: Registered as video103. [ 816.047430][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 816.170944][ T1203] usb 5-1: USB disconnect, device number 58 [ 816.560848][ T1203] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 816.893240][ T1203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.908062][ T1203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.922087][ T1203] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 816.931309][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 816.940650][ T1203] usb 5-1: SerialNumber: syz [ 817.381047][ T30] audit: type=1400 audit(1752161742.776:1230): avc: denied { ioctl } for pid=14790 comm="syz.1.2414" path="socket:[45515]" dev="sockfs" ino=45515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.427890][ T30] audit: type=1400 audit(1752161742.896:1231): avc: denied { ioctl } for pid=14790 comm="syz.1.2414" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x4b68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 817.495020][ T1203] usb 5-1: 0:2 : does not exist [ 817.508786][ T1203] usb 5-1: unit 255 not found! [ 817.555868][ T30] audit: type=1400 audit(1752161743.296:1232): avc: denied { bind } for pid=14795 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.583479][T14796] FAULT_INJECTION: forcing a failure. [ 817.583479][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 817.596666][ T1203] usb 5-1: USB disconnect, device number 59 [ 817.609715][ T30] audit: type=1400 audit(1752161743.316:1233): avc: denied { setopt } for pid=14795 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.611048][T14796] CPU: 0 UID: 0 PID: 14796 Comm: syz.2.2415 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 817.611069][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.611078][T14796] Call Trace: [ 817.611083][T14796] [ 817.611089][T14796] dump_stack_lvl+0x16c/0x1f0 [ 817.611114][T14796] should_fail_ex+0x512/0x640 [ 817.611133][T14796] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 817.611155][T14796] should_failslab+0xc2/0x120 [ 817.611176][T14796] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 817.611194][T14796] ? do_sys_openat2+0x157/0x1d0 [ 817.611208][T14796] ? copy_fs_struct+0x49/0x340 [ 817.611227][T14796] copy_fs_struct+0x49/0x340 [ 817.611244][T14796] ksys_unshare+0x356/0xa40 [ 817.611266][T14796] ? __pfx_ksys_unshare+0x10/0x10 [ 817.611291][T14796] ? ksys_write+0x1ac/0x250 [ 817.611316][T14796] __x64_sys_unshare+0x31/0x40 [ 817.611336][T14796] do_syscall_64+0xcd/0x4c0 [ 817.611357][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.611373][T14796] RIP: 0033:0x7fabb238e929 [ 817.611385][T14796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.611399][T14796] RSP: 002b:00007fabb3214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 817.611413][T14796] RAX: ffffffffffffffda RBX: 00007fabb25b5fa0 RCX: 00007fabb238e929 [ 817.611423][T14796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 817.611432][T14796] RBP: 00007fabb3214090 R08: 0000000000000000 R09: 0000000000000000 [ 817.611440][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.611449][T14796] R13: 0000000000000000 R14: 00007fabb25b5fa0 R15: 00007ffe87d57dc8 [ 817.611469][T14796] [ 817.872850][ T30] audit: type=1400 audit(1752161743.326:1234): avc: denied { accept } for pid=14795 comm="syz.2.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.954105][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.167319][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.307150][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 818.341855][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2418'. [ 818.410008][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.421404][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.449630][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.478681][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.541766][T14809] netlink: 'syz.3.2419': attribute type 4 has an invalid length. [ 818.570879][T14809] netlink: 'syz.3.2419': attribute type 4 has an invalid length. [ 818.621178][ T30] audit: type=1400 audit(1752161744.356:1235): avc: denied { setopt } for pid=14810 comm="syz.4.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.678963][ T30] audit: type=1400 audit(1752161744.416:1236): avc: denied { mount } for pid=14812 comm="syz.3.2422" name="/" dev="autofs" ino=45610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 818.701535][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.860970][ T5903] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 818.952362][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 819.011408][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 819.018892][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.039770][ T5903] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 819.058203][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.072556][ T5903] usb 5-1: Product: syz [ 819.077197][ T5903] usb 5-1: Manufacturer: syz [ 819.082296][ T5903] usb 5-1: SerialNumber: syz [ 819.108015][ T5903] usb 5-1: config 0 descriptor?? [ 819.122059][ T5903] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 819.132636][ T5903] sr9700 5-1:0.0: probe with driver sr9700 failed with error -22 [ 819.570311][ T30] audit: type=1400 audit(1752161745.296:1237): avc: denied { unmount } for pid=6471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 821.112842][ T30] audit: type=1400 audit(1752161746.396:1238): avc: denied { watch } for pid=14842 comm="syz.1.2430" path="/434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 821.210854][ T30] audit: type=1400 audit(1752161746.396:1239): avc: denied { watch_sb } for pid=14842 comm="syz.1.2430" path="/434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 821.481634][T14854] FAULT_INJECTION: forcing a failure. [ 821.481634][T14854] name failslab, interval 1, probability 0, space 0, times 0 [ 821.504939][T14854] CPU: 0 UID: 0 PID: 14854 Comm: syz.1.2434 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 821.504967][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.504978][T14854] Call Trace: [ 821.504984][T14854] [ 821.504991][T14854] dump_stack_lvl+0x16c/0x1f0 [ 821.505021][T14854] should_fail_ex+0x512/0x640 [ 821.505044][T14854] ? fs_reclaim_acquire+0xae/0x150 [ 821.505064][T14854] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 821.505089][T14854] should_failslab+0xc2/0x120 [ 821.505114][T14854] __kmalloc_noprof+0xd2/0x510 [ 821.505149][T14854] tomoyo_realpath_from_path+0xc2/0x6e0 [ 821.505176][T14854] ? tomoyo_profile+0x47/0x60 [ 821.505205][T14854] tomoyo_path_number_perm+0x245/0x580 [ 821.505225][T14854] ? tomoyo_path_number_perm+0x237/0x580 [ 821.505247][T14854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 821.505269][T14854] ? find_held_lock+0x2b/0x80 [ 821.505314][T14854] ? find_held_lock+0x2b/0x80 [ 821.505334][T14854] ? hook_file_ioctl_common+0x145/0x410 [ 821.505356][T14854] ? __fget_files+0x20e/0x3c0 [ 821.505385][T14854] security_file_ioctl+0x9b/0x240 [ 821.505411][T14854] __x64_sys_ioctl+0xb7/0x210 [ 821.505432][T14854] do_syscall_64+0xcd/0x4c0 [ 821.505457][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.505472][T14854] RIP: 0033:0x7f3320f8e929 [ 821.505485][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.505498][T14854] RSP: 002b:00007f3321d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.505514][T14854] RAX: ffffffffffffffda RBX: 00007f33211b5fa0 RCX: 00007f3320f8e929 [ 821.505524][T14854] RDX: 0000000000000002 RSI: 000000000000ae44 RDI: 0000000000000004 [ 821.505533][T14854] RBP: 00007f3321d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 821.505542][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.505551][T14854] R13: 0000000000000000 R14: 00007f33211b5fa0 R15: 00007ffd08dc7d68 [ 821.505573][T14854] [ 821.505579][T14854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.656786][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 821.672728][ T5152] Bluetooth: hci5: command 0x1003 tx timeout [ 821.748390][ T5903] usb 5-1: USB disconnect, device number 60 [ 822.294444][T14865] FAULT_INJECTION: forcing a failure. [ 822.294444][T14865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.326541][T14865] CPU: 0 UID: 0 PID: 14865 Comm: syz.4.2436 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 822.326571][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.326581][T14865] Call Trace: [ 822.326586][T14865] [ 822.326594][T14865] dump_stack_lvl+0x16c/0x1f0 [ 822.326623][T14865] should_fail_ex+0x512/0x640 [ 822.326649][T14865] _copy_from_user+0x2e/0xd0 [ 822.326674][T14865] __sys_bpf+0x21d/0x4d80 [ 822.326702][T14865] ? __pfx___sys_bpf+0x10/0x10 [ 822.326726][T14865] ? ksys_write+0x190/0x250 [ 822.326751][T14865] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 822.326790][T14865] ? fput+0x70/0xf0 [ 822.326805][T14865] ? ksys_write+0x1ac/0x250 [ 822.326824][T14865] ? __pfx_ksys_write+0x10/0x10 [ 822.326850][T14865] __x64_sys_bpf+0x78/0xc0 [ 822.326872][T14865] ? lockdep_hardirqs_on+0x7c/0x110 [ 822.326896][T14865] do_syscall_64+0xcd/0x4c0 [ 822.326921][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.326947][T14865] RIP: 0033:0x7f72e158e929 [ 822.326961][T14865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.326978][T14865] RSP: 002b:00007f72e2319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 822.326996][T14865] RAX: ffffffffffffffda RBX: 00007f72e17b5fa0 RCX: 00007f72e158e929 [ 822.327007][T14865] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000011 [ 822.327018][T14865] RBP: 00007f72e2319090 R08: 0000000000000000 R09: 0000000000000000 [ 822.327029][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.327039][T14865] R13: 0000000000000000 R14: 00007f72e17b5fa0 R15: 00007ffd29b12b98 [ 822.327063][T14865] [ 822.500198][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.580328][T14868] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 822.580920][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 822.580932][ T30] audit: type=1400 audit(1752161748.296:1241): avc: denied { map } for pid=14867 comm="syz.0.2439" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 822.593173][T14868] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 822.618804][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.636479][T14868] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 822.646032][T14868] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 822.658629][T14872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 822.664478][ T30] audit: type=1400 audit(1752161748.296:1242): avc: denied { read write } for pid=14867 comm="syz.0.2439" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 822.670226][T14868] geneve2: entered allmulticast mode [ 822.723711][ T30] audit: type=1400 audit(1752161748.296:1243): avc: denied { open } for pid=14867 comm="syz.0.2439" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 822.750480][T14876] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 822.752118][ T30] audit: type=1400 audit(1752161748.296:1244): avc: denied { ioctl } for pid=14867 comm="syz.0.2439" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 822.782618][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.825882][ T30] audit: type=1400 audit(1752161748.536:1245): avc: denied { bind } for pid=14866 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 822.903868][T14876] team0: Port device batadv1 added [ 823.555487][T14891] xt_TPROXY: Can be used only with -p tcp or -p udp [ 823.876310][ T30] audit: type=1400 audit(1752161749.616:1246): avc: denied { module_request } for pid=14897 comm="syz.4.2446" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 823.898677][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.127135][T14904] overlayfs: missing 'workdir' [ 824.150174][ T30] audit: type=1400 audit(1752161749.866:1247): avc: denied { create } for pid=14897 comm="syz.4.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 825.226845][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2449'. [ 825.378813][T14922] FAULT_INJECTION: forcing a failure. [ 825.378813][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 825.391717][T14922] CPU: 0 UID: 0 PID: 14922 Comm: syz.1.2450 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 825.391740][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.391749][T14922] Call Trace: [ 825.391753][T14922] [ 825.391757][T14922] dump_stack_lvl+0x16c/0x1f0 [ 825.391776][T14922] should_fail_ex+0x512/0x640 [ 825.391789][T14922] ? fs_reclaim_acquire+0xae/0x150 [ 825.391801][T14922] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 825.391816][T14922] should_failslab+0xc2/0x120 [ 825.391832][T14922] __kmalloc_noprof+0xd2/0x510 [ 825.391849][T14922] tomoyo_realpath_from_path+0xc2/0x6e0 [ 825.391864][T14922] ? tomoyo_profile+0x47/0x60 [ 825.391881][T14922] tomoyo_path_number_perm+0x245/0x580 [ 825.391892][T14922] ? tomoyo_path_number_perm+0x237/0x580 [ 825.391906][T14922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 825.391932][T14922] ? find_held_lock+0x2b/0x80 [ 825.391945][T14922] ? hook_file_ioctl_common+0x145/0x410 [ 825.391958][T14922] ? __fget_files+0x20e/0x3c0 [ 825.391974][T14922] security_file_ioctl+0x9b/0x240 [ 825.391990][T14922] __x64_sys_ioctl+0xb7/0x210 [ 825.392002][T14922] do_syscall_64+0xcd/0x4c0 [ 825.392018][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.392028][T14922] RIP: 0033:0x7f3320f8e929 [ 825.392037][T14922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.392047][T14922] RSP: 002b:00007f3321d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.392057][T14922] RAX: ffffffffffffffda RBX: 00007f33211b6080 RCX: 00007f3320f8e929 [ 825.392063][T14922] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000008 [ 825.392069][T14922] RBP: 00007f3321d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 825.392075][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.392080][T14922] R13: 0000000000000000 R14: 00007f33211b6080 R15: 00007ffd08dc7d68 [ 825.392093][T14922] [ 825.392111][T14922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 826.654804][ T30] audit: type=1400 audit(1752161752.206:1248): avc: denied { wake_alarm } for pid=14926 comm="syz.3.2451" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 826.859933][ T30] audit: type=1400 audit(1752161752.336:1249): avc: denied { getopt } for pid=14925 comm="syz.4.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 826.913027][ T30] audit: type=1400 audit(1752161752.656:1250): avc: denied { load_policy } for pid=14925 comm="syz.4.2452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 826.948469][T14939] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 827.013498][T14939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 827.157584][T14942] block device autoloading is deprecated and will be removed. [ 827.566702][T14927] SELinux: failed to load policy [ 827.963399][ T1203] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 828.038123][T14951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2458'. [ 828.255944][ T5903] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 828.280838][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 828.289603][ T1203] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 828.299016][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.307372][ T1203] usb 5-1: Product: syz [ 828.311660][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 828.322066][ T1203] usb 5-1: Manufacturer: syz [ 828.327490][ T1203] usb 5-1: SerialNumber: syz [ 828.338344][ T30] audit: type=1400 audit(1752161754.076:1251): avc: denied { mounton } for pid=14958 comm="syz.2.2461" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 828.339240][ T1203] usb 5-1: config 0 descriptor?? [ 828.394018][ T5903] usb 4-1: device descriptor read/64, error -71 [ 828.421387][ T30] audit: type=1400 audit(1752161754.076:1252): avc: denied { mount } for pid=14958 comm="syz.2.2461" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 828.480874][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 828.492663][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 828.513802][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 828.530294][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.548812][ T9] usb 2-1: Product: syz [ 828.557253][ T9] usb 2-1: Manufacturer: syz [ 828.561993][ T9] usb 2-1: SerialNumber: syz [ 828.577299][ T9] usb 2-1: config 0 descriptor?? [ 828.586246][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 828.612063][ T1203] usb 5-1: USB disconnect, device number 61 [ 828.640972][ T5903] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 828.780917][ T5903] usb 4-1: device descriptor read/64, error -71 [ 828.892025][ T5903] usb usb4-port1: attempt power cycle [ 829.102457][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2462'. [ 829.186390][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 829.231046][ T5903] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 829.260358][T14969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.261665][ T5903] usb 4-1: device descriptor read/8, error -71 [ 829.270599][T14969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.627398][ T5903] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 829.678794][ T5903] usb 4-1: device descriptor read/8, error -71 [ 829.791089][ T5903] usb usb4-port1: unable to enumerate USB device [ 830.279501][T14976] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 830.366444][T14982] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 830.488366][T14956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2460'. [ 830.791083][ T9] gspca_zc3xx: reg_w_i err -110 [ 831.400815][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 831.407244][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 831.774005][ T5971] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 831.933631][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.946679][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 831.957104][ T5971] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 831.974991][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.985783][ T5971] usb 4-1: Product: syz [ 831.990020][ T5971] usb 4-1: Manufacturer: syz [ 831.996830][ T5971] usb 4-1: SerialNumber: syz [ 832.005047][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 832.016936][ T5971] usb 4-1: config 0 descriptor?? [ 832.025685][ T5971] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 832.037712][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.048144][ T5971] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 832.057184][ T5971] usb 4-1: media controller created [ 832.070624][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.106819][ T5971] DVB: Unable to find symbol tda10046_attach() [ 832.113067][ T5971] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 832.121973][ T5971] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 832.160863][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 832.167985][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 832.179069][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 832.188473][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.196643][ T9] usb 5-1: Product: syz [ 832.201770][ T9] usb 5-1: Manufacturer: syz [ 832.211125][ T9] usb 5-1: SerialNumber: syz [ 832.224420][ T9] usb 5-1: config 0 descriptor?? [ 832.247800][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 832.443217][ T1203] usb 2-1: USB disconnect, device number 47 [ 833.617201][ T9] gspca_zc3xx: reg_w_i err -110 [ 834.777018][T15013] m920x_read = error: -110 [ 834.791810][ T5971] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 834.809133][T15043] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 834.991313][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.022571][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.034007][ T1203] usb 4-1: USB disconnect, device number 58 [ 835.105760][ T30] audit: type=1326 audit(1752161760.846:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 835.141977][ T30] audit: type=1326 audit(1752161760.846:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 835.165367][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.283092][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 835.299835][ T9] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 835.331623][ T30] audit: type=1326 audit(1752161760.846:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 835.396010][ T9] usb 5-1: USB disconnect, device number 62 [ 835.813222][ T30] audit: type=1326 audit(1752161760.846:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 835.836694][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.846857][ T30] audit: type=1326 audit(1752161760.846:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 835.870331][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.023649][ T30] audit: type=1326 audit(1752161760.846:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 836.047169][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.095283][T15114] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 836.211931][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 836.231209][ T30] audit: type=1326 audit(1752161760.846:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 836.300902][ T30] audit: type=1326 audit(1752161760.846:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 836.331287][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.360338][ T30] audit: type=1326 audit(1752161760.846:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 836.383958][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.678933][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.719402][T15124] FAULT_INJECTION: forcing a failure. [ 836.719402][T15124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.753636][ T30] audit: type=1326 audit(1752161760.846:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15100 comm="syz.3.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f059dd8e929 code=0x7ffc0000 [ 836.757090][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.4.2482 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 836.757112][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.757121][T15124] Call Trace: [ 836.757126][T15124] [ 836.757131][T15124] dump_stack_lvl+0x16c/0x1f0 [ 836.757158][T15124] should_fail_ex+0x512/0x640 [ 836.757182][T15124] _copy_from_user+0x2e/0xd0 [ 836.757203][T15124] copy_msghdr_from_user+0x98/0x160 [ 836.757224][T15124] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 836.757253][T15124] ___sys_sendmsg+0xfe/0x1d0 [ 836.757273][T15124] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.757290][T15124] ? __lock_acquire+0x622/0x1c90 [ 836.757331][T15124] __sys_sendmsg+0x16d/0x220 [ 836.757351][T15124] ? __pfx___sys_sendmsg+0x10/0x10 [ 836.757384][T15124] do_syscall_64+0xcd/0x4c0 [ 836.757406][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.757421][T15124] RIP: 0033:0x7f72e158e929 [ 836.757434][T15124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.757448][T15124] RSP: 002b:00007f72e2319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.757462][T15124] RAX: ffffffffffffffda RBX: 00007f72e17b5fa0 RCX: 00007f72e158e929 [ 836.757472][T15124] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 836.757481][T15124] RBP: 00007f72e2319090 R08: 0000000000000000 R09: 0000000000000000 [ 836.757490][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.757498][T15124] R13: 0000000000000000 R14: 00007f72e17b5fa0 R15: 00007ffd29b12b98 [ 836.757518][T15124] [ 837.631731][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 837.868550][T15134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.033661][T15135] block device autoloading is deprecated and will be removed. [ 838.391653][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.675167][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.691243][T15176] overlay: Unknown parameter 'smackfshat' [ 840.607177][T15273] FAULT_INJECTION: forcing a failure. [ 840.607177][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 840.630152][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.4.2492 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 840.630178][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.630188][T15273] Call Trace: [ 840.630194][T15273] [ 840.630201][T15273] dump_stack_lvl+0x16c/0x1f0 [ 840.630229][T15273] should_fail_ex+0x512/0x640 [ 840.630252][T15273] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 840.630279][T15273] should_failslab+0xc2/0x120 [ 840.630304][T15273] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 840.630327][T15273] ? ima_d_path+0xbd/0x2a0 [ 840.630357][T15273] ima_d_path+0xbd/0x2a0 [ 840.630380][T15273] ? __pfx___might_resched+0x10/0x10 [ 840.630405][T15273] ? __pfx_ima_d_path+0x10/0x10 [ 840.630435][T15273] ? __pfx_down_write+0x10/0x10 [ 840.630467][T15273] process_measurement+0x175f/0x23e0 [ 840.630498][T15273] ? avc_has_perm_noaudit+0x149/0x3b0 [ 840.630515][T15273] ? __pfx_process_measurement+0x10/0x10 [ 840.630543][T15273] ? __pfx_avc_has_perm+0x10/0x10 [ 840.630560][T15273] ? find_held_lock+0x2b/0x80 [ 840.630608][T15273] ? file_map_prot_check+0x1eb/0x360 [ 840.630632][T15273] ima_file_mmap+0x1a8/0x1d0 [ 840.630655][T15273] ? __pfx_ima_file_mmap+0x10/0x10 [ 840.630676][T15273] ? __lock_acquire+0x622/0x1c90 [ 840.630699][T15273] security_mmap_file+0x88c/0x990 [ 840.630726][T15273] vm_mmap_pgoff+0xec/0x450 [ 840.630755][T15273] ? find_held_lock+0x2b/0x80 [ 840.630774][T15273] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 840.630801][T15273] ? __fget_files+0x20e/0x3c0 [ 840.630835][T15273] ksys_mmap_pgoff+0x32c/0x5c0 [ 840.630863][T15273] ? __pfx_ksys_write+0x10/0x10 [ 840.630887][T15273] __x64_sys_mmap+0x125/0x190 [ 840.630914][T15273] do_syscall_64+0xcd/0x4c0 [ 840.630940][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.630958][T15273] RIP: 0033:0x7f72e158e929 [ 840.630972][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.630988][T15273] RSP: 002b:00007f72df3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 840.631004][T15273] RAX: ffffffffffffffda RBX: 00007f72e17b6160 RCX: 00007f72e158e929 [ 840.631015][T15273] RDX: 00000000037fffee RSI: 0000000000600000 RDI: 0000200000000000 [ 840.631025][T15273] RBP: 00007f72df3d5090 R08: 0000000000000005 R09: 0000000040000000 [ 840.631035][T15273] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000001 [ 840.631045][T15273] R13: 0000000000000000 R14: 00007f72e17b6160 R15: 00007ffd29b12b98 [ 840.631068][T15273] [ 840.877198][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.887585][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 840.887602][ T30] audit: type=1804 audit(1752161766.346:1274): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2492" name="/newroot/481/bus/bus" dev="overlay" ino=2541 res=1 errno=0 [ 840.916117][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.926844][ T30] audit: type=1804 audit(1752161766.666:1275): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2492" name="bus" dev="overlay" ino=2541 res=1 errno=0 [ 840.948224][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.961711][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 841.371445][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 841.402203][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 841.430379][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.440411][ T24] usb 4-1: Product: syz [ 841.454675][ T24] usb 4-1: Manufacturer: syz [ 841.828148][ T24] usb 4-1: SerialNumber: syz [ 841.883417][ T24] usb 4-1: config 0 descriptor?? [ 842.100468][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 842.125473][ T5971] IPVS: starting estimator thread 0... [ 842.221035][T15294] IPVS: using max 40 ests per chain, 96000 per kthread [ 842.587370][T15306] FAULT_INJECTION: forcing a failure. [ 842.587370][T15306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.655403][T15308] netem: change failed [ 842.660986][T15306] CPU: 0 UID: 0 PID: 15306 Comm: syz.4.2500 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 842.661011][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.661021][T15306] Call Trace: [ 842.661027][T15306] [ 842.661034][T15306] dump_stack_lvl+0x16c/0x1f0 [ 842.661068][T15306] should_fail_ex+0x512/0x640 [ 842.661095][T15306] _copy_from_user+0x2e/0xd0 [ 842.661120][T15306] copy_msghdr_from_user+0x98/0x160 [ 842.661144][T15306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 842.661178][T15306] ___sys_sendmsg+0xfe/0x1d0 [ 842.661202][T15306] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.661222][T15306] ? __lock_acquire+0x622/0x1c90 [ 842.661269][T15306] __sys_sendmsg+0x16d/0x220 [ 842.661292][T15306] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.661329][T15306] do_syscall_64+0xcd/0x4c0 [ 842.661356][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.661373][T15306] RIP: 0033:0x7f72e158e929 [ 842.661388][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.661404][T15306] RSP: 002b:00007f72e2319038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.661421][T15306] RAX: ffffffffffffffda RBX: 00007f72e17b5fa0 RCX: 00007f72e158e929 [ 842.661432][T15306] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 842.661442][T15306] RBP: 00007f72e2319090 R08: 0000000000000000 R09: 0000000000000000 [ 842.661452][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.661462][T15306] R13: 0000000000000000 R14: 00007f72e17b5fa0 R15: 00007ffd29b12b98 [ 842.661486][T15306] [ 842.834262][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.721354][T15344] vxcan1: entered allmulticast mode [ 843.816420][ T30] audit: type=1400 audit(1752161769.556:1276): avc: denied { mounton } for pid=15352 comm="syz.2.2507" path="/syzcgroup/unified/syz2" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 844.012158][T15361] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 844.027288][T15361] team0: Port device batadv2 added [ 844.415169][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2508'. [ 844.848265][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 844.851258][T15368] tun0: tun_chr_ioctl cmd 1074025675 [ 844.876162][T15368] tun0: persist disabled [ 844.878410][ T24] usb 4-1: USB disconnect, device number 59 [ 844.919869][ T30] audit: type=1400 audit(1752161770.636:1277): avc: denied { ioctl } for pid=15369 comm="syz.1.2510" path="socket:[47423]" dev="sockfs" ino=47423 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 844.949742][ T30] audit: type=1400 audit(1752161770.636:1278): avc: denied { write } for pid=15369 comm="syz.1.2510" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 844.992566][T15381] FAULT_INJECTION: forcing a failure. [ 844.992566][T15381] name failslab, interval 1, probability 0, space 0, times 0 [ 845.026607][T15381] CPU: 1 UID: 0 PID: 15381 Comm: syz.1.2512 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 845.026634][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 845.026643][T15381] Call Trace: [ 845.026649][T15381] [ 845.026655][T15381] dump_stack_lvl+0x16c/0x1f0 [ 845.026681][T15381] should_fail_ex+0x512/0x640 [ 845.026701][T15381] ? fs_reclaim_acquire+0xae/0x150 [ 845.026719][T15381] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 845.026739][T15381] should_failslab+0xc2/0x120 [ 845.026761][T15381] __kmalloc_noprof+0xd2/0x510 [ 845.026786][T15381] tomoyo_realpath_from_path+0xc2/0x6e0 [ 845.026809][T15381] ? tomoyo_profile+0x47/0x60 [ 845.026840][T15381] tomoyo_path_number_perm+0x245/0x580 [ 845.026858][T15381] ? tomoyo_path_number_perm+0x237/0x580 [ 845.026878][T15381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 845.026900][T15381] ? find_held_lock+0x2b/0x80 [ 845.026944][T15381] ? find_held_lock+0x2b/0x80 [ 845.026964][T15381] ? hook_file_ioctl_common+0x145/0x410 [ 845.026986][T15381] ? __fget_files+0x20e/0x3c0 [ 845.027012][T15381] security_file_ioctl+0x9b/0x240 [ 845.027037][T15381] __x64_sys_ioctl+0xb7/0x210 [ 845.027059][T15381] do_syscall_64+0xcd/0x4c0 [ 845.027084][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.027101][T15381] RIP: 0033:0x7f3320f8e929 [ 845.027115][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.027131][T15381] RSP: 002b:00007f3321d5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.027147][T15381] RAX: ffffffffffffffda RBX: 00007f33211b5fa0 RCX: 00007f3320f8e929 [ 845.027159][T15381] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 845.027168][T15381] RBP: 00007f3321d5d090 R08: 0000000000000000 R09: 0000000000000000 [ 845.027177][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.027187][T15381] R13: 0000000000000000 R14: 00007f33211b5fa0 R15: 00007ffd08dc7d68 [ 845.027210][T15381] [ 845.027217][T15381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 845.035961][ T30] audit: type=1400 audit(1752161770.776:1279): avc: denied { write } for pid=15367 comm="syz.2.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 845.044290][T15381] loop2: detected capacity change from 0 to 7 [ 845.053506][ T30] audit: type=1400 audit(1752161770.776:1280): avc: denied { getopt } for pid=15367 comm="syz.2.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 845.063993][T13719] Dev loop2: unable to read RDB block 7 [ 845.250887][ T1203] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 845.260234][T13719] loop2: unable to read partition table [ 845.307113][T13719] loop2: partition table beyond EOD, truncated [ 845.335084][T15381] Dev loop2: unable to read RDB block 7 [ 845.341370][T15381] loop2: unable to read partition table [ 845.347256][T15381] loop2: partition table beyond EOD, truncated [ 845.353653][T15381] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.451234][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 845.468073][ T1203] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 845.482695][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.491620][ T1203] usb 5-1: Product: syz [ 845.559145][ T1203] usb 5-1: Manufacturer: syz [ 845.584520][ T1203] usb 5-1: SerialNumber: syz [ 845.620901][ T1203] usb 5-1: config 0 descriptor?? [ 845.980663][ T1203] usb 5-1: USB disconnect, device number 63 [ 845.989401][ T30] audit: type=1400 audit(1752161771.476:1281): avc: denied { read } for pid=15409 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 846.055539][T15413] syz.2.2515 (15413): /proc/15403/oom_adj is deprecated, please use /proc/15403/oom_score_adj instead. [ 846.556705][T15451] blktrace: Concurrent blktraces are not allowed on loop6 [ 846.806844][T15466] veth3: entered promiscuous mode [ 846.934373][T15484] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 846.962864][T15484] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 847.004415][T15484] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 847.300086][ T30] audit: type=1400 audit(1752161772.826:1282): avc: denied { getopt } for pid=15489 comm="syz.4.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 847.350890][T15484] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 847.360039][T15484] geneve2: entered allmulticast mode [ 847.478347][T15497] FAULT_INJECTION: forcing a failure. [ 847.478347][T15497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.517050][T15497] CPU: 1 UID: 0 PID: 15497 Comm: syz.2.2523 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 847.517078][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 847.517087][T15497] Call Trace: [ 847.517095][T15497] [ 847.517102][T15497] dump_stack_lvl+0x16c/0x1f0 [ 847.517131][T15497] should_fail_ex+0x512/0x640 [ 847.517157][T15497] _copy_from_user+0x2e/0xd0 [ 847.517182][T15497] copy_msghdr_from_user+0x98/0x160 [ 847.517205][T15497] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 847.517240][T15497] ___sys_sendmsg+0xfe/0x1d0 [ 847.517263][T15497] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.517283][T15497] ? __lock_acquire+0x622/0x1c90 [ 847.517330][T15497] __sys_sendmsg+0x16d/0x220 [ 847.517354][T15497] ? __pfx___sys_sendmsg+0x10/0x10 [ 847.517394][T15497] do_syscall_64+0xcd/0x4c0 [ 847.517420][T15497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.517436][T15497] RIP: 0033:0x7fabb238e929 [ 847.517450][T15497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.517467][T15497] RSP: 002b:00007fabb3214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.517484][T15497] RAX: ffffffffffffffda RBX: 00007fabb25b5fa0 RCX: 00007fabb238e929 [ 847.517496][T15497] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 847.517506][T15497] RBP: 00007fabb3214090 R08: 0000000000000000 R09: 0000000000000000 [ 847.517516][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.517526][T15497] R13: 0000000000000000 R14: 00007fabb25b5fa0 R15: 00007ffe87d57dc8 [ 847.517550][T15497] [ 847.735405][T15507] FAULT_INJECTION: forcing a failure. [ 847.735405][T15507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.748869][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.3.2524 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 847.748891][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 847.748900][T15507] Call Trace: [ 847.748905][T15507] [ 847.748911][T15507] dump_stack_lvl+0x16c/0x1f0 [ 847.748936][T15507] should_fail_ex+0x512/0x640 [ 847.748960][T15507] _copy_from_user+0x2e/0xd0 [ 847.748981][T15507] copy_msghdr_from_user+0x98/0x160 [ 847.749003][T15507] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 847.749027][T15507] ? __pfx__kstrtoull+0x10/0x10 [ 847.749047][T15507] ___sys_sendmsg+0xfe/0x1d0 [ 847.749070][T15507] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.749101][T15507] ? find_held_lock+0x2b/0x80 [ 847.749137][T15507] __sys_sendmmsg+0x200/0x420 [ 847.749160][T15507] ? __pfx___sys_sendmmsg+0x10/0x10 [ 847.749190][T15507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 847.749224][T15507] ? fput+0x70/0xf0 [ 847.749238][T15507] ? ksys_write+0x1ac/0x250 [ 847.749257][T15507] ? __pfx_ksys_write+0x10/0x10 [ 847.749282][T15507] __x64_sys_sendmmsg+0x9c/0x100 [ 847.749304][T15507] ? lockdep_hardirqs_on+0x7c/0x110 [ 847.749324][T15507] do_syscall_64+0xcd/0x4c0 [ 847.749347][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.749364][T15507] RIP: 0033:0x7f059dd8e929 [ 847.749377][T15507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.749393][T15507] RSP: 002b:00007f059eb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 847.749409][T15507] RAX: ffffffffffffffda RBX: 00007f059dfb6080 RCX: 00007f059dd8e929 [ 847.749420][T15507] RDX: 0000000000000062 RSI: 0000200000002940 RDI: 0000000000000004 [ 847.749430][T15507] RBP: 00007f059eb76090 R08: 0000000000000000 R09: 0000000000000000 [ 847.749439][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.749449][T15507] R13: 0000000000000000 R14: 00007f059dfb6080 R15: 00007fff65881068 [ 847.749471][T15507] [ 847.947800][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.543867][ T6003] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 848.871174][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 849.071168][ T6003] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 849.079296][ T6003] usb 5-1: config 0 has no interface number 0 [ 849.098951][ T6003] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.126261][ T6003] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 849.197235][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.325369][ T6003] usb 5-1: config 0 descriptor?? [ 849.360470][ T6003] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 849.380333][T15535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 849.488325][ T1203] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 849.663799][T15551] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 849.681941][T15551] team0: Port device batadv2 added [ 850.303725][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 850.430863][ T1203] usb 4-1: Using ep0 maxpacket: 32 [ 850.439214][ T1203] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 850.475340][ T1203] usb 4-1: config 0 has no interface number 0 [ 850.542626][ T1203] usb 4-1: config 0 interface 184 has no altsetting 0 [ 850.570865][ T1203] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 850.580669][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.641095][ T1203] usb 4-1: Product: syz [ 850.656202][ T1203] usb 4-1: Manufacturer: syz [ 850.823428][ T1203] usb 4-1: SerialNumber: syz [ 850.839578][T15583] blktrace: Concurrent blktraces are not allowed on loop4 [ 850.879694][ T5971] usb 5-1: USB disconnect, device number 64 [ 850.892441][ T1203] usb 4-1: config 0 descriptor?? [ 850.912645][ T1203] smsc75xx v1.0.0 [ 851.506966][ T1203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 851.517913][ T1203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 851.928990][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 851.968582][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 852.890974][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 852.944708][ T30] audit: type=1400 audit(1752161778.066:1283): avc: denied { setopt } for pid=15627 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 853.553385][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 853.654554][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 853.711101][T15638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2528'. [ 854.102358][T15664] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 854.242525][T15731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 854.722270][ T1203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 854.767266][ T1203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 854.871046][ T1203] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 854.933602][ T1203] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 855.173801][ T1203] usb 4-1: USB disconnect, device number 60 [ 856.386738][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.396236][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.942986][ T1203] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 857.267954][ T30] audit: type=1400 audit(1752161782.926:1284): avc: denied { getopt } for pid=15859 comm="syz.1.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 857.384577][ T1203] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 857.409197][ T1203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.420329][ T30] audit: type=1400 audit(1752161783.146:1285): avc: denied { write } for pid=15866 comm="syz.2.2557" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 857.443196][ T1203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 857.499255][ T1203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.513591][T15862] 9pnet: Could not find request transport: 0xffffffffffffffff [ 857.521685][ T30] audit: type=1400 audit(1752161783.146:1286): avc: denied { setattr } for pid=15866 comm="syz.2.2557" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 857.571010][ T1203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.585208][ T1203] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 857.609621][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.627800][ T1203] usb 5-1: Product: syz [ 857.634959][ T1203] usb 5-1: Manufacturer: syz [ 857.654017][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.682299][ T1203] cdc_wdm 5-1:1.0: skipping garbage [ 857.698789][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.708795][ T1203] cdc_wdm 5-1:1.0: skipping garbage [ 857.728348][ T1203] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 857.746362][ T1203] cdc_wdm 5-1:1.0: Unknown control protocol [ 857.914657][T15834] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 857.925782][ T30] audit: type=1400 audit(1752161783.656:1287): avc: denied { read write } for pid=15833 comm="syz.4.2554" name="cdc-wdm0" dev="devtmpfs" ino=3521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 857.927796][ T24] usb 5-1: USB disconnect, device number 65 [ 857.949776][ C0] vkms_vblank_simulate: vblank timer overrun [ 858.365693][ T30] audit: type=1400 audit(1752161783.656:1288): avc: denied { open } for pid=15833 comm="syz.4.2554" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 858.437878][T15905] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 858.465568][ T30] audit: type=1400 audit(1752161784.206:1289): avc: denied { write } for pid=15904 comm="syz.3.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 858.886116][T15909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 859.134062][ T30] audit: type=1400 audit(1752161784.816:1290): avc: denied { kexec_image_load } for pid=15910 comm="syz.1.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 859.883249][T15927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 860.350866][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 860.526349][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.590843][ T1203] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 861.348416][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.440054][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.463596][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.496076][ T1203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.512001][ T1203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 861.521342][ T1203] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 861.529185][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.536486][ T1203] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 861.555102][ T1203] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 861.565592][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.583197][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.594081][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.604974][T15928] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 861.620880][ T24] usb 4-1: Product: syz [ 861.621570][ T1203] hub 2-1:1.0: bad descriptor, ignoring hub [ 861.625081][ T24] usb 4-1: Manufacturer: syz [ 861.640388][ T1203] hub 2-1:1.0: probe with driver hub failed with error -5 [ 861.645823][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 861.653556][ T1203] cdc_wdm 2-1:1.0: skipping garbage [ 861.664136][ T30] audit: type=1400 audit(1752161787.406:1291): avc: denied { create } for pid=15971 comm="syz.2.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 861.669278][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 861.688572][ T1203] cdc_wdm 2-1:1.0: skipping garbage [ 861.702411][ T1203] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 861.713577][ T30] audit: type=1400 audit(1752161787.426:1292): avc: denied { listen } for pid=15971 comm="syz.2.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 861.735627][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 861.736225][ T30] audit: type=1400 audit(1752161787.436:1293): avc: denied { ioctl } for pid=15971 comm="syz.2.2574" path="socket:[48475]" dev="sockfs" ino=48475 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 861.752203][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 861.766353][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.873514][T15925] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 861.914950][ T1203] usb 4-1: USB disconnect, device number 61 [ 862.062214][ T5903] usb 2-1: USB disconnect, device number 48 [ 862.211868][T15999] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 862.225262][T15999] team0: Port device batadv1 added [ 862.634869][T16006] FAULT_INJECTION: forcing a failure. [ 862.634869][T16006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.648237][T16006] CPU: 0 UID: 0 PID: 16006 Comm: syz.3.2578 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 862.648264][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 862.648275][T16006] Call Trace: [ 862.648281][T16006] [ 862.648288][T16006] dump_stack_lvl+0x16c/0x1f0 [ 862.648318][T16006] should_fail_ex+0x512/0x640 [ 862.648346][T16006] _copy_from_user+0x2e/0xd0 [ 862.648373][T16006] copy_msghdr_from_user+0x98/0x160 [ 862.648398][T16006] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 862.648434][T16006] ___sys_sendmsg+0xfe/0x1d0 [ 862.648459][T16006] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.648481][T16006] ? __lock_acquire+0x622/0x1c90 [ 862.648529][T16006] __sys_sendmsg+0x16d/0x220 [ 862.648554][T16006] ? __pfx___sys_sendmsg+0x10/0x10 [ 862.648594][T16006] do_syscall_64+0xcd/0x4c0 [ 862.648622][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.648640][T16006] RIP: 0033:0x7f059dd8e929 [ 862.648655][T16006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.648671][T16006] RSP: 002b:00007f059eb97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.648688][T16006] RAX: ffffffffffffffda RBX: 00007f059dfb5fa0 RCX: 00007f059dd8e929 [ 862.648700][T16006] RDX: 0000000004040884 RSI: 0000200000002b40 RDI: 0000000000000004 [ 862.648711][T16006] RBP: 00007f059eb97090 R08: 0000000000000000 R09: 0000000000000000 [ 862.648722][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.648731][T16006] R13: 0000000000000000 R14: 00007f059dfb5fa0 R15: 00007fff65881068 [ 862.648764][T16006] [ 862.814366][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.597860][T16009] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 863.605959][T16009] team0: Port device batadv3 added [ 863.745612][T16017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 863.758605][T16017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'. [ 864.266659][T16025] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 864.273406][T16025] [U] J"—e:ÀÆ" [ 864.322385][ T30] audit: type=1400 audit(1752161789.996:1294): avc: denied { connect } for pid=16021 comm="syz.1.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 864.501594][ T30] audit: type=1400 audit(1752161790.086:1295): avc: denied { read write } for pid=16018 comm="syz.2.2582" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 864.535684][ T30] audit: type=1400 audit(1752161790.106:1296): avc: denied { open } for pid=16018 comm="syz.2.2582" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 865.477668][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2585'. [ 865.580069][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 866.380351][ T30] audit: type=1400 audit(1752161792.116:1297): avc: denied { create } for pid=16064 comm="syz.1.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 866.511215][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 866.586806][T16069] IPVS: Error joining to the multicast group [ 866.831242][ T5903] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 867.100384][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.160971][ T5903] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 867.180676][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.400855][ T5903] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.418113][ T5903] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 867.582406][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.713710][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.770897][ T5903] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 867.825141][T13719] udevd[13719]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.175116][T16132] binder: BINDER_SET_CONTEXT_MGR already set [ 868.182320][T16132] binder: 16125:16132 ioctl 4018620d 200000000040 returned -16 [ 868.190135][ T30] audit: type=1400 audit(1752161793.916:1298): avc: denied { map } for pid=16125 comm="syz.2.2597" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 868.222849][T16132] binder: 16125:16132 ioctl c0306201 200000001440 returned -11 [ 868.260689][T16132] binder: 16125:16132 ioctl 80089418 200000000480 returned -22 [ 869.732616][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.739081][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.413930][ T5903] usb 4-1: USB disconnect, device number 62 [ 871.761237][T16179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 871.792420][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2601'. [ 872.116320][ T30] audit: type=1326 audit(1752161797.856:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16181 comm="syz.2.2602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb238e929 code=0x0 [ 872.267415][ T30] audit: type=1400 audit(1752161797.946:1300): avc: denied { getopt } for pid=16181 comm="syz.2.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 872.514721][T16214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 872.577785][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 872.644640][ T30] audit: type=1400 audit(1752161798.376:1301): avc: denied { ioctl } for pid=16219 comm="syz.3.2605" path="socket:[48037]" dev="sockfs" ino=48037 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 872.824102][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 873.306062][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.317401][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.368812][ T30] audit: type=1400 audit(1752161798.966:1302): avc: denied { write } for pid=16238 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 873.420978][ T5890] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 873.590849][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 873.597844][ T5890] usb 2-1: config 5 has an invalid interface number: 239 but max is 0 [ 873.616986][ T5890] usb 2-1: config 5 has no interface number 0 [ 873.656835][ T5890] usb 2-1: config 5 interface 239 has no altsetting 0 [ 873.694323][ T5890] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=7b.52 [ 873.712941][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.727354][ T5890] usb 2-1: Product: syz [ 873.734536][ T5890] usb 2-1: Manufacturer: syz [ 873.740320][ T5890] usb 2-1: SerialNumber: syz [ 873.865640][T16250] FAULT_INJECTION: forcing a failure. [ 873.865640][T16250] name failslab, interval 1, probability 0, space 0, times 0 [ 873.878459][T16250] CPU: 0 UID: 0 PID: 16250 Comm: syz.4.2610 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 873.878484][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 873.878491][T16250] Call Trace: [ 873.878496][T16250] [ 873.878501][T16250] dump_stack_lvl+0x16c/0x1f0 [ 873.878523][T16250] should_fail_ex+0x512/0x640 [ 873.878537][T16250] ? fs_reclaim_acquire+0xae/0x150 [ 873.878550][T16250] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 873.878565][T16250] should_failslab+0xc2/0x120 [ 873.878581][T16250] __kmalloc_noprof+0xd2/0x510 [ 873.878598][T16250] tomoyo_realpath_from_path+0xc2/0x6e0 [ 873.878619][T16250] ? tomoyo_profile+0x47/0x60 [ 873.878636][T16250] tomoyo_path_number_perm+0x245/0x580 [ 873.878648][T16250] ? tomoyo_path_number_perm+0x237/0x580 [ 873.878661][T16250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 873.878679][T16250] ? __pfx___schedule+0x10/0x10 [ 873.878699][T16250] ? rcu_is_watching+0x12/0xc0 [ 873.878713][T16250] ? irqentry_exit+0x3b/0x90 [ 873.878727][T16250] ? lockdep_hardirqs_on+0x7c/0x110 [ 873.878740][T16250] ? hook_file_ioctl_common+0x145/0x410 [ 873.878755][T16250] ? fdget+0x1b6/0x210 [ 873.878770][T16250] security_file_ioctl+0x9b/0x240 [ 873.878786][T16250] __x64_sys_ioctl+0xb7/0x210 [ 873.878799][T16250] do_syscall_64+0xcd/0x4c0 [ 873.878814][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.878825][T16250] RIP: 0033:0x7f72e158e929 [ 873.878834][T16250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.878844][T16250] RSP: 002b:00007f72df3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.878854][T16250] RAX: ffffffffffffffda RBX: 00007f72e17b6080 RCX: 00007f72e158e929 [ 873.878863][T16250] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 873.878870][T16250] RBP: 00007f72df3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 873.878877][T16250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.878882][T16250] R13: 0000000000000000 R14: 00007f72e17b6080 R15: 00007ffd29b12b98 [ 873.878896][T16250] [ 873.878965][T16250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.297684][ T5890] gspca_main: spca501-2.14.0 probing 040a:0002 [ 874.318783][ T5890] gspca_spca501: reg write: error -71 [ 874.324454][ T5890] spca501 2-1:5.239: Reg write failed for 0x00,0xaa,0x00 [ 874.337181][ T5890] spca501 2-1:5.239: probe with driver spca501 failed with error -22 [ 874.349903][ T5890] usb 2-1: USB disconnect, device number 49 [ 874.811407][ T5890] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 875.061272][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 875.312166][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 875.377069][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 875.398263][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.641302][ T5890] usb 5-1: Product: syz [ 875.646372][ T5890] usb 5-1: Manufacturer: syz [ 875.652533][ T5890] usb 5-1: SerialNumber: syz [ 875.668860][ T5890] usb 5-1: config 0 descriptor?? [ 875.684291][ T5890] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 875.702968][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 876.034773][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 876.787006][ T5890] gspca_zc3xx: reg_w_i err -110 [ 877.381378][ T5890] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 877.891312][ T5890] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 877.962007][ T5890] usb 5-1: USB disconnect, device number 66 [ 878.050140][T16362] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 878.060570][T16362] team0: Port device batadv1 added [ 879.108408][T16393] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 879.116432][T16393] team0: Port device batadv2 added [ 879.336849][T16403] FAULT_INJECTION: forcing a failure. [ 879.336849][T16403] name failslab, interval 1, probability 0, space 0, times 0 [ 879.349694][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.3.2622 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 879.349719][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.349727][T16403] Call Trace: [ 879.349732][T16403] [ 879.349736][T16403] dump_stack_lvl+0x16c/0x1f0 [ 879.349754][T16403] should_fail_ex+0x512/0x640 [ 879.349768][T16403] ? fs_reclaim_acquire+0xae/0x150 [ 879.349780][T16403] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 879.349795][T16403] should_failslab+0xc2/0x120 [ 879.349811][T16403] __kmalloc_noprof+0xd2/0x510 [ 879.349828][T16403] tomoyo_realpath_from_path+0xc2/0x6e0 [ 879.349844][T16403] ? tomoyo_profile+0x47/0x60 [ 879.349861][T16403] tomoyo_path_number_perm+0x245/0x580 [ 879.349873][T16403] ? tomoyo_path_number_perm+0x237/0x580 [ 879.349892][T16403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 879.349905][T16403] ? rcu_is_watching+0x12/0xc0 [ 879.349932][T16403] ? find_held_lock+0x2b/0x80 [ 879.349945][T16403] ? hook_file_ioctl_common+0x145/0x410 [ 879.349958][T16403] ? __fget_files+0x20e/0x3c0 [ 879.349975][T16403] security_file_ioctl+0x9b/0x240 [ 879.349990][T16403] __x64_sys_ioctl+0xb7/0x210 [ 879.350004][T16403] do_syscall_64+0xcd/0x4c0 [ 879.350020][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.350031][T16403] RIP: 0033:0x7f059dd8e929 [ 879.350040][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.350050][T16403] RSP: 002b:00007f059eb76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.350060][T16403] RAX: ffffffffffffffda RBX: 00007f059dfb6080 RCX: 00007f059dd8e929 [ 879.350067][T16403] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 879.350073][T16403] RBP: 00007f059eb76090 R08: 0000000000000000 R09: 0000000000000000 [ 879.350079][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.350085][T16403] R13: 0000000000000000 R14: 00007f059dfb6080 R15: 00007fff65881068 [ 879.350098][T16403] [ 879.350117][T16403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 880.088511][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 881.943298][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.981563][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.250909][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 882.481271][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 882.614856][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.858299][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 882.869112][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.919892][ T24] usb 2-1: config 0 descriptor?? [ 883.174690][T16559] bridge0: port 3(syz_tun) entered blocking state [ 883.181351][T16559] bridge0: port 3(syz_tun) entered disabled state [ 883.188016][T16559] syz_tun: entered allmulticast mode [ 883.195578][T16559] syz_tun: entered promiscuous mode [ 883.414918][ T24] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 883.509052][T16571] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 883.524386][ T30] audit: type=1400 audit(1752161809.266:1303): avc: denied { mount } for pid=16570 comm="syz.4.2634" name="/" dev="rpc_pipefs" ino=50266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 883.666905][ C1] ================================================================== [ 883.675031][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 883.683019][ C1] Read of size 1 at addr ffff888031253fff by task syz.1.2627/16573 [ 883.690902][ C1] [ 883.693214][ C1] CPU: 1 UID: 0 PID: 16573 Comm: syz.1.2627 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 883.693235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 883.693244][ C1] Call Trace: [ 883.693250][ C1] [ 883.693257][ C1] dump_stack_lvl+0x116/0x1f0 [ 883.693284][ C1] print_report+0xcd/0x680 [ 883.693306][ C1] ? __virt_addr_valid+0x81/0x610 [ 883.693327][ C1] ? __phys_addr+0xe8/0x180 [ 883.693347][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 883.693370][ C1] kasan_report+0xe0/0x110 [ 883.693393][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 883.693420][ C1] mcp2221_raw_event+0xf94/0x1030 [ 883.693444][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 883.693465][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 883.693484][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 883.693508][ C1] hid_irq_in+0x35e/0x870 [ 883.693533][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 883.693556][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 883.693583][ C1] dummy_timer+0x180e/0x3a20 [ 883.693607][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 883.693621][ C1] ? rcu_is_watching+0x12/0xc0 [ 883.693641][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 883.693661][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 883.693673][ C1] __hrtimer_run_queues+0x202/0xad0 [ 883.693694][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 883.693712][ C1] ? read_tsc+0x9/0x20 [ 883.693734][ C1] hrtimer_run_softirq+0x17d/0x350 [ 883.693753][ C1] handle_softirqs+0x219/0x8e0 [ 883.693773][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 883.693793][ C1] __irq_exit_rcu+0x109/0x170 [ 883.693811][ C1] irq_exit_rcu+0x9/0x30 [ 883.693829][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 883.693851][ C1] [ 883.693857][ C1] [ 883.693862][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.693879][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 883.693900][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 c1 0d f6 48 89 df e8 6e 15 0e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 33 fe f5 65 8b 05 9e d9 45 08 85 c0 74 16 5b [ 883.693916][ C1] RSP: 0018:ffffc900047efc20 EFLAGS: 00000246 [ 883.693930][ C1] RAX: 0000000000000002 RBX: ffff888144780000 RCX: ffffffff81c3c6bf [ 883.693940][ C1] RDX: 0000000000000000 RSI: ffffffff8de3251e RDI: ffffffff8c158f60 [ 883.693950][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 883.693960][ C1] R10: ffffffff90a97f57 R11: 0000000000000001 R12: 0000000000000001 [ 883.693969][ C1] R13: ffff8881447800b8 R14: ffff88807d159664 R15: ffff8881447800b8 [ 883.693982][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 883.694004][ C1] dummy_queue+0x3f8/0xb80 [ 883.694029][ C1] usb_ep_queue+0xf5/0x390 [ 883.694051][ C1] raw_process_ep_io+0x647/0xc30 [ 883.694069][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 883.694088][ C1] ? memdup_user+0x82/0xe0 [ 883.694109][ C1] raw_ioctl+0xaab/0x2c30 [ 883.694126][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 883.694141][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 883.694163][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 883.694178][ C1] __x64_sys_ioctl+0x18b/0x210 [ 883.694196][ C1] do_syscall_64+0xcd/0x4c0 [ 883.694218][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.694233][ C1] RIP: 0033:0x7f3320f8e52b [ 883.694246][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 883.694261][ C1] RSP: 002b:00007f3321d3af70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.694275][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3320f8e52b [ 883.694285][ C1] RDX: 00007f3321d3aff0 RSI: 0000000040085507 RDI: 0000000000000009 [ 883.694295][ C1] RBP: 0000000000000009 R08: 00007f33212e0320 R09: 0000000000000000 [ 883.694304][ C1] R10: 0000000000000009 R11: 0000000000000246 R12: 00002000000004c0 [ 883.694313][ C1] R13: 0000000000000000 R14: 00007f33211b6080 R15: 00007ffd08dc7d68 [ 883.694328][ C1] [ 883.694333][ C1] [ 884.088023][ C1] Allocated by task 16315: [ 884.092423][ C1] kasan_save_stack+0x33/0x60 [ 884.097092][ C1] kasan_save_track+0x14/0x30 [ 884.101756][ C1] __kasan_slab_alloc+0x89/0x90 [ 884.106605][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 884.112057][ C1] __kernfs_new_node+0xd2/0x8e0 [ 884.116900][ C1] kernfs_new_node+0x13c/0x1e0 [ 884.121649][ C1] __kernfs_create_file+0x53/0x350 [ 884.126745][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 884.132105][ C1] internal_create_group+0x578/0xf30 [ 884.137384][ C1] internal_create_groups+0x9d/0x150 [ 884.142660][ C1] ib_setup_port_attrs+0x41f/0x600 [ 884.147758][ C1] add_one_compat_dev+0x558/0x7d0 [ 884.152777][ C1] rdma_dev_init_net+0x2b1/0x530 [ 884.157696][ C1] ops_init+0x1df/0x5f0 [ 884.161843][ C1] setup_net+0x1ff/0x510 [ 884.166073][ C1] copy_net_ns+0x2a6/0x5f0 [ 884.170478][ C1] create_new_namespaces+0x3ea/0xa90 [ 884.175751][ C1] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 884.181372][ C1] ksys_unshare+0x45b/0xa40 [ 884.185863][ C1] __x64_sys_unshare+0x31/0x40 [ 884.190615][ C1] do_syscall_64+0xcd/0x4c0 [ 884.195205][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.201083][ C1] [ 884.203390][ C1] Freed by task 15: [ 884.207177][ C1] kasan_save_stack+0x33/0x60 [ 884.211856][ C1] kasan_save_track+0x14/0x30 [ 884.216522][ C1] kasan_save_free_info+0x3b/0x60 [ 884.221533][ C1] __kasan_slab_free+0x51/0x70 [ 884.226285][ C1] kmem_cache_free+0x2d1/0x4d0 [ 884.231559][ C1] rcu_core+0x79c/0x14e0 [ 884.235788][ C1] handle_softirqs+0x219/0x8e0 [ 884.240542][ C1] run_ksoftirqd+0x3a/0x60 [ 884.244953][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 884.250406][ C1] kthread+0x3c5/0x780 [ 884.254457][ C1] ret_from_fork+0x5d7/0x6f0 [ 884.259036][ C1] ret_from_fork_asm+0x1a/0x30 [ 884.263786][ C1] [ 884.266089][ C1] Last potentially related work creation: [ 884.271784][ C1] kasan_save_stack+0x33/0x60 [ 884.276456][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 884.281654][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 884.287544][ C1] kernfs_put.part.0+0x162/0x640 [ 884.292473][ C1] kernfs_remove_by_name_ns+0xdf/0x110 [ 884.297915][ C1] remove_files+0x96/0x1c0 [ 884.302319][ C1] sysfs_remove_group+0x8b/0x180 [ 884.307244][ C1] sysfs_remove_groups+0x60/0xa0 [ 884.312172][ C1] ib_free_port_attrs+0x278/0x490 [ 884.317185][ C1] rdma_dev_exit_net+0x2b5/0x590 [ 884.322106][ C1] ops_undo_list+0x2eb/0xab0 [ 884.326692][ C1] setup_net+0x2e1/0x510 [ 884.330921][ C1] copy_net_ns+0x2a6/0x5f0 [ 884.335326][ C1] create_new_namespaces+0x3ea/0xa90 [ 884.340604][ C1] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 884.346234][ C1] ksys_unshare+0x45b/0xa40 [ 884.350725][ C1] __x64_sys_unshare+0x31/0x40 [ 884.355491][ C1] do_syscall_64+0xcd/0x4c0 [ 884.359989][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.365864][ C1] [ 884.368169][ C1] The buggy address belongs to the object at ffff888031253f00 [ 884.368169][ C1] which belongs to the cache kernfs_node_cache of size 176 [ 884.382725][ C1] The buggy address is located 79 bytes to the right of [ 884.382725][ C1] allocated 176-byte region [ffff888031253f00, ffff888031253fb0) [ 884.397294][ C1] [ 884.399599][ C1] The buggy address belongs to the physical page: [ 884.405990][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31253 [ 884.414730][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 884.421824][ C1] page_type: f5(slab) [ 884.425787][ C1] raw: 00fff00000000000 ffff88814040b8c0 dead000000000122 0000000000000000 [ 884.434351][ C1] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 884.442915][ C1] page dumped because: kasan: bad access detected [ 884.449304][ C1] page_owner tracks the page as allocated [ 884.454997][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16315, tgid 16312 (syz.2.2616), ts 880072878562, free_ts 834828678983 [ 884.474435][ C1] post_alloc_hook+0x1c0/0x230 [ 884.479192][ C1] get_page_from_freelist+0x1321/0x3890 [ 884.484734][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 884.490616][ C1] alloc_pages_mpol+0x1fb/0x550 [ 884.495464][ C1] new_slab+0x23b/0x330 [ 884.499607][ C1] ___slab_alloc+0xd9c/0x1940 [ 884.504281][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 884.509642][ C1] kmem_cache_alloc_noprof+0xef/0x3b0 [ 884.515004][ C1] __kernfs_new_node+0xd2/0x8e0 [ 884.519844][ C1] kernfs_new_node+0x13c/0x1e0 [ 884.524591][ C1] __kernfs_create_file+0x53/0x350 [ 884.529702][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 884.535148][ C1] internal_create_group+0x578/0xf30 [ 884.540422][ C1] internal_create_groups+0x9d/0x150 [ 884.545695][ C1] ib_setup_port_attrs+0x41f/0x600 [ 884.550799][ C1] add_one_compat_dev+0x558/0x7d0 [ 884.555818][ C1] page last free pid 13718 tgid 13718 stack trace: [ 884.562315][ C1] __free_frozen_pages+0x7fe/0x1180 [ 884.567498][ C1] __put_partials+0x16d/0x1c0 [ 884.572194][ C1] qlist_free_all+0x4d/0x120 [ 884.576804][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 884.582263][ C1] __kasan_slab_alloc+0x69/0x90 [ 884.587106][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 884.592553][ C1] getname_flags.part.0+0x4c/0x550 [ 884.597648][ C1] getname_flags+0x93/0xf0 [ 884.602050][ C1] do_sys_openat2+0xb8/0x1d0 [ 884.606624][ C1] __x64_sys_openat+0x174/0x210 [ 884.611479][ C1] do_syscall_64+0xcd/0x4c0 [ 884.615981][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.621858][ C1] [ 884.624162][ C1] Memory state around the buggy address: [ 884.629774][ C1] ffff888031253e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 884.637820][ C1] ffff888031253f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 884.645864][ C1] >ffff888031253f80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 884.653904][ C1] ^ [ 884.661878][ C1] ffff888031254000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 884.669928][ C1] ffff888031254080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 884.677990][ C1] ================================================================== [ 884.686034][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 884.693216][ C1] CPU: 1 UID: 0 PID: 16573 Comm: syz.1.2627 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 884.705292][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.715386][ C1] Call Trace: [ 884.718653][ C1] [ 884.721484][ C1] dump_stack_lvl+0x3d/0x1f0 [ 884.726069][ C1] panic+0x71c/0x800 [ 884.729960][ C1] ? __pfx_panic+0x10/0x10 [ 884.734375][ C1] ? __pfx__printk+0x10/0x10 [ 884.738950][ C1] ? end_report+0x4c/0x170 [ 884.743359][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 884.748550][ C1] check_panic_on_warn+0xab/0xb0 [ 884.753480][ C1] end_report+0x107/0x170 [ 884.757804][ C1] kasan_report+0xee/0x110 [ 884.762216][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 884.767407][ C1] mcp2221_raw_event+0xf94/0x1030 [ 884.772426][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 884.778222][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 884.784279][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 884.789732][ C1] hid_irq_in+0x35e/0x870 [ 884.794059][ C1] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 884.799424][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 884.804648][ C1] dummy_timer+0x180e/0x3a20 [ 884.809233][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 884.814153][ C1] ? rcu_is_watching+0x12/0xc0 [ 884.818907][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.824704][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 884.829646][ C1] __hrtimer_run_queues+0x202/0xad0 [ 884.834861][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 884.840574][ C1] ? read_tsc+0x9/0x20 [ 884.844640][ C1] hrtimer_run_softirq+0x17d/0x350 [ 884.849740][ C1] handle_softirqs+0x219/0x8e0 [ 884.854495][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 884.859769][ C1] __irq_exit_rcu+0x109/0x170 [ 884.864439][ C1] irq_exit_rcu+0x9/0x30 [ 884.868668][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 884.874292][ C1] [ 884.877209][ C1] [ 884.880123][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.886088][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 884.892492][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 c1 0d f6 48 89 df e8 6e 15 0e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 33 fe f5 65 8b 05 9e d9 45 08 85 c0 74 16 5b [ 884.912085][ C1] RSP: 0018:ffffc900047efc20 EFLAGS: 00000246 [ 884.918137][ C1] RAX: 0000000000000002 RBX: ffff888144780000 RCX: ffffffff81c3c6bf [ 884.926091][ C1] RDX: 0000000000000000 RSI: ffffffff8de3251e RDI: ffffffff8c158f60 [ 884.934063][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 884.942016][ C1] R10: ffffffff90a97f57 R11: 0000000000000001 R12: 0000000000000001 [ 884.949972][ C1] R13: ffff8881447800b8 R14: ffff88807d159664 R15: ffff8881447800b8 [ 884.957934][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 884.963908][ C1] dummy_queue+0x3f8/0xb80 [ 884.968321][ C1] usb_ep_queue+0xf5/0x390 [ 884.972726][ C1] raw_process_ep_io+0x647/0xc30 [ 884.977654][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 884.983102][ C1] ? memdup_user+0x82/0xe0 [ 884.987520][ C1] raw_ioctl+0xaab/0x2c30 [ 884.991841][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 884.996588][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 885.001692][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 885.006440][ C1] __x64_sys_ioctl+0x18b/0x210 [ 885.011192][ C1] do_syscall_64+0xcd/0x4c0 [ 885.015692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.021574][ C1] RIP: 0033:0x7f3320f8e52b [ 885.025971][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 885.045572][ C1] RSP: 002b:00007f3321d3af70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.053971][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3320f8e52b [ 885.061928][ C1] RDX: 00007f3321d3aff0 RSI: 0000000040085507 RDI: 0000000000000009 [ 885.070149][ C1] RBP: 0000000000000009 R08: 00007f33212e0320 R09: 0000000000000000 [ 885.078102][ C1] R10: 0000000000000009 R11: 0000000000000246 R12: 00002000000004c0 [ 885.086072][ C1] R13: 0000000000000000 R14: 00007f33211b6080 R15: 00007ffd08dc7d68 [ 885.094045][ C1] [ 885.097274][ C1] Kernel Offset: disabled [ 885.101703][ C1] Rebooting in 86400 seconds..