last executing test programs: 15.928824649s ago: executing program 0 (id=476): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 15.334568381s ago: executing program 1 (id=478): ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.077269218s ago: executing program 1 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone3(&(0x7f0000000780)={0x2a0000000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x10}, &(0x7f00000003c0)=""/182, 0xb6, &(0x7f0000000240)=""/44, &(0x7f0000000280)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) (async) bind$can_raw(r4, &(0x7f0000000580), 0x10) (async) close(r4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x5, 0x0, 0x280d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r7 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) (async) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x20000000) (async) ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x0) (async, rerun: 64) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) (rerun: 64) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4107, 0x100b) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 13.634382623s ago: executing program 1 (id=485): accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) r0 = open(0x0, 0x141042, 0x0) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_cmd={0x1c, 0xfffffffa, 0xc2e, 0xed7, 0x9, 0x5, 0x4, 0x31, 0x1b, 0x2, 0x8, 0x10001, 0x2, 0x10, 0x1, 0xffffffff, [0xd29, 0x401]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x3, 0x3, 0x0, 0x5}]}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r6, 0x0, 0x0) r7 = open(&(0x7f00000002c0)='./bus\x00', 0xec902, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) splice(r8, 0x0, r7, 0x0, 0x600, 0x0) 12.607041484s ago: executing program 1 (id=487): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x8008ae9d, &(0x7f0000000080)=""/1) (async, rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) (rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) (async, rerun: 64) r5 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 64) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) (rerun: 64) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev}}, 0x24) (async) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x4c00}, 0x20004000) (async, rerun: 32) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async, rerun: 32) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async, rerun: 32) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48a00, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.201020346s ago: executing program 3 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000240)=0xfca4, 0x7fff) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x8, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d285b6853b04dc54c6910c1d5a9e4025"}, @md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) 10.118732262s ago: executing program 1 (id=495): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) iopl(0x3) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 10.040622048s ago: executing program 4 (id=496): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x705040, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000500)={0x0, 0x80, 0x80, 0x0, 0x3e5}, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeff, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000480)="994b9dde675248ef5d7c5c85e696329f34f68a2a96f53d42bed902de8037b0d90d5fb508d8194990bd858437cd676ff3", 0x30, 0xfffffffffffffffd, 0x0, 0x2, r2}]) setxattr$security_evm(0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00'], 0x9, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x500, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\n\xfd\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x2, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 9.802435086s ago: executing program 3 (id=497): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdaa1, 0x3, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000340)={0x1, 0x0, [0xffff054b, 0xfffffffd, 0xffffffdb, 0x80000000, 0x9, 0x739, 0x3, 0x9]}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000240)={0xe, 0x10, 0xb, 0x1, 0xb, 0x2, 0x6, 0xf4, 0xffffffffffffffff}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.311511698s ago: executing program 3 (id=499): socket$netlink(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.2341807s ago: executing program 1 (id=500): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, &(0x7f0000000140)={0x40, 0x31, 0xef, {0xef, 0xa, "a49d0aec84f3d952715a647b8d4db5535749e7210c46d4233760715037e9eac50b1e48b83326deb2061001a61bf07e62445a54fb21e14f507772609417a00e71850581b9ca8cf76d9d4860ec327298d6f4b3d07eeb8ec487c1da28f032411019508af39571846a7257400b59ee94721343f4772ec1119e0e7e458b7305a6d78fb737e710e8060b15ff38042c37ac9247af2acaa95c48d35b98fa4d1b505d3500de67522c882e0f41152ac8297d3401bfe3568f000a49010ca1b89e1cf8105c6ba66e5e8d18204d816b1e4b49571150bf7b664b6a84696f9564808d37fbc5c873501c6c64bc16b08e4132f7d296"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000000580)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x8, "14c081db"}, @global=@item_4={0x3, 0x1, 0xb, "ae1b1f0c"}, @global=@item_4={0x3, 0x1, 0x5, "be910843"}, @main=@item_012={0x1, 0x0, 0xc, "10"}, @main=@item_4={0x3, 0x0, 0x9, "d9ca0272"}, @main=@item_4={0x3, 0x0, 0x9, "ed335b51"}, @local=@item_012={0x2, 0x2, 0x1, "acfa"}, @main=@item_012={0x2, 0x0, 0x8, "913e"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x39, 0x5, 0x1, {0x22, 0x145}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="400186000000ce10bdf38e3c6bd5bb4d00fc78d8b37779ad378562757d3cdeb9f6d0206d02fa775a90a3362ef1665f296cd4b42d0ebe9ce25d7669eaa43d21065e816fde5d2c06699cf7384fc2c0ab36b0b39026ee0100000000000000066183dea7baaf7cf04c739feb8dc086acfea76bb4d1a0df51730267fb94eb8775deb31902c1c49dfc8168ff4d99a30959de7ff9b83341b7e898a42bfe1429a1fecf68a4910b7664f61aac9e57cbf317ddd5dd22fb3b55bcf28dbef6c650447f6e422f599efaac5919e3213e8cdb48937ea19ad2e8b7cdd521b46f43aebb4bce1f45e2"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0xf8, "8eaeefaea90e0c3bb93e4ac9a611299c74b92bef93e41926c8855b857578f13d6c8f4e6db4aebce7b315f15aa32c3366c34cb57a31d9e784587eafc2ae1246aadfdecef75e00d23a334b14b23dd4e2b901ca00b88285e8febdc215b24b011124b043fb4c242ae26caa0f5f651a7ccd592dacf0784b1b061b1597d1da4ab05f0d6a009cffed5b5c72827e596c4105a4a422aad56a6f5152cdc4d42a0e8ec5f278283a525d07f53e280f26d6f2e7ee5517956112b76f0451706ffbc1cab94aeed13ef0c123b937fe7dd9ebb3e9b44f5330059a870bdf6642c49f773d4947d594e13df8f487052fd5e030db559483c3fac88b087c437ff6c55d"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x3f) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000680)={0x101, 0x5, &(0x7f0000000040)=[0x0, 0x69ba, 0x7, 0x0, 0x4], &(0x7f00000005c0)=[0x6, 0x0], &(0x7f0000000600), &(0x7f0000000640)=[0x2, 0x8, 0x0, 0xfffd, 0x6, 0x8000, 0xb, 0xfff7]}) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(0xffffffffffffffff, 0x0, 0x55d7, 0x2) clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) 8.913586184s ago: executing program 4 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x588}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfe49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x56a4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc25e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x754b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x188}}, 0x40090) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000380)={0x56, 0x8, 0x4, 0x40, 0x6, {r3, r4/1000+10000}, {0x2, 0x1, 0xbf, 0x1, 0x7, 0xc9, "64c0562b"}, 0x401, 0x4, {}, 0x9, 0x0, r5}) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000400)) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000480)={0x1214, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xda}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1020000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x738b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x10b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "adab53fb66f23421440eef5b7d495aabfe5fbfe92c5b4b7251a665bd103ea7e704f5d1db6c0a30bcbf4fa1a364006c01622549120b2a8beefca5d97133a54ce96d708666c7062e94943b0733ca1d73a98b7debc119895a5d5dac92e61452bc60671a09888a0e1f63d886b0b05a435bbb48e76be0059d86d7cade8482d657543390fb4acff051d2f65e8f0b8545f163510d8bda7415b8dfd1ee9846c9ca296cab5d955291dce1a76b8788c7e5d9d30ad2e285a5e1ae088f666fa8f78284d889fe30e8b72dac035aabeb747ff40cf0fcc9dc2ba3c5460dfb934efdfaae8d518fc20cfe4ed83910cf5534abbe6a39e6d408512bed59d58e0bdb9a26939136bd10f495eb42f1ec4923b704ddbe02d0aa0049159ba2177bbc359eef80e09668c19193ee6ce6ae50f678444f39e4650105f234b34f6e43e8a90d03b6081c38d6f05e5226d63f0e3223af24a59de19fbc1c2f726dc5c092995d053e0700cfe15cdb10ed6952ba735cb28fc1f6e9fc118c130d5cb45bd70d86eecf768ee575a4ac45edab740bb426ab8770fc9561e0ef35fee1340a9648aad4e4d23a5b1148b12aef17b18c0eabe56ef04a14bc454d9cf35a7ef14d2971c33dc94e6d720e40db25f010b6b1a4fbd7f76c0a7a326ace22fee6929ce37aa507c4b1cc1755b2bddd0102325162c6acbf3efdac2d81d09cd03aa83f0e9edc95cf9fce6f845c5ca6a474d919fe721e2738a31883dfe3a3ea95ee52df8e299ece7da45eee6a0d56d499f743453de8523eb1a81baac46ed7fbf31208854eb5c0c7599b58177dfd62c467c2a8b00e1177e40db4760dddf4e805014ff431505b059a84a9ce060491d3cd1852b3b3dc1ec0c02684ce7f4a4cf75b4c2bb7870f4d283ce6cea825e0675ca60d4f34fa125286374417b6ab8ec63088d9a418464fd0be1ec05037766da16fd3149581e84ea590fc0fb002796676624412cf9d98a32e77cfc56ec84da7c04e2b62efb0bae60c56b1fbd15d2c27f323be9a1e81ab599e1c8400757e43d558b6eca57a521923982e49955896a82aa6613802ce64543fdc3d3ac2771dcf9bc6c89966f9a7539ca3f06d72b0463af70d244280777eacfc8317ffd641337ef387da256e6d77501077e0cc7a80fe0ad9df8c4be18af40c22688c1885bea3aff9c268858945a1ca914c0499016a6aad4b29bbccfd4e96b0023affd1b99bbf51a80387793bbf60e8c63c9ef787cecc860ae250d69ec252fcc978c0d83be3ba6d6eca2d8ec40ebc4b757b33d78cdc47ec751a4cc1a8124268ae61c0c91fee25b96197e2685ec9036b6d260fcc51e3005b1b0b820f9031c4f455136523956db54080674544a1eee08b02f5e9eb2c78fd8a4490bd5fb775fd0c6f41e46338eaa0d3bb0c68c76be00b2c206453433087e67bd93739a622a35b8724b9e0d81e792ad1033bee1362f2e616e14d8722a8b2c1328be113658cc07799a0c614b3ab3bffb3ad054dff677088345da07feff7424caeb05d56fd23550014338a1ce7902b4d15608c9c694ce4bc456fe8154b56836bd130c95e38c03184b0686de2d338cfdaee09a8d06041d767952220613775d11f9e344ced1d688e9eee12650b1c9be5bc379361b6eacee1088fe41bb77280578e7edb45c520a0cc930b0036438d72e5f4c4ead7deb48350c2517a2645cd7d95fc02ae4a9ce4b753fb53c772c094761fe904edefd99b6143e4a11216d38ca864ecff8d78c3926f5875efd82b31cfbad49edef2a037caafec700f5ef578287bef952f9aeb94416c84275bfcde82139367fd531c490a4d3ba48caa2cb5b5f08820f29147658001e2ff8b8944581d4c90710069f2d90c76543d7b5ea5f6781085096826a6d0c4e81de81ce1d37a257f6476862107674afb77766f23ad62d4b23f27d377bcc1c49f38b138fb21ac22d7c274520797f862c4326784215359db54847e0ad1fb2eea50d8bf8463193a203879a85012260f715c8be0deaf65f232859c9af0961620ac9774c3ee2af870333d302406874043cb4f664296245705cf45f7dd923feea5a4dc021a00c48c79f7ff693de7a40635c3d8a4183bc190666a486243a5f4e63ec6775db33fad19d3ee0f7062d15acabb0788a02ca3ea6b0c02beac01c113f83e61dfdcf2541e701fbf9717a0a9f7c67c54f30b6fef94810cabd3f693c3195f9f589b7fff98e1bd92d84b5d3e6173f98caa21efc28a8d7e2e4349c58efb44faaf39c4eb514aeaa0895ab0fa26dd24320e972fc929143c4626bd56074af15f58400d6c9fd2fd93dd8e3af22b6af9d7b3aad426921ec71948a9cecb8983a6dde8ab5def85a90125e7680c86908332b7d6492d51c160f4e1049829177ac55701707c0c95b28bf4123982dac2b1e9b05022b38af97b30085d120ebb8ac09cf536509f7c8b80eaf2ff923ad90715d2cc9ce8be06e5b46ab023e5eeb16cd188dc1bf0f3532b6643064e279b82052e1f7a39569d289459664324c9d0456e66ffe1aca090dca7543337a420af9975a4a0c5abebd7f3e5309f43ce44b6ed3d2d13a2574163610c4606c2b70742a121f3e098b109383abade63a1abf7911f81af4a3eefecbc1f1a7964b263b8b0fdfd1e636dede5317ae8b05b60a9df19b2d5a08f557710c75003b3f084111bc83950bd059e0ea8638e49112b7c2a49927ec3131efb403d33acb6251da70c7266f65f3c89ed99b7f522b12c0008a61c5f799290f8aad8879b324b39dd42c75c2a178e8e01e75e68ba78840b21afa2740e341aea85616c11e753c2abb42c2a0a35e57efe12a48d2fb363aef3050b45586d8e5d851fa3c8cbd20edea538cec95e05262a15219b032b6250de0c45f26c4059211f9f1eb6915902349c5848903c95fc0d76926c8622f06cdf42e9eb588fa9eff4915237e0b35190b4f5003164d0483bb6567a14b8a88d053c052482c8531d718a046498d57fefcfb0986d1d11ba7fe5a090e380a408abf345bf461d4f1d6fbb6faafedf76662c471156db047ad1c89eb1c9754a861cf364ba5c72a384051ec69c30e4811efdad01fe0e48a90d3abd21dedc027592f4cde7549b79b0aa263ab6afbbee38cee749f0b90d0376eaa830761073b86d1ddce71ecafb744e1a88ee19801fd880603f9f7627185709b58c30af006084e45d1416e60de5e173ce74d4d8016e01a5f08d398da2e858f42af3ae65f41ee1b8d67911f824d03f991ad362881da1ef6c220b7f38f7036a00572cee1b1cd3094f6fd944e4fcb0cd60a5a34a5187ce1388a3d7c16cf85f2ddbeaeaca82f709631fd3c97257766860b05449bef9a887de5730a99ce131a2482bd0efeea076b823ded22b1c17640afeb142da8bc454068fc52d4598879a99f37ec170cc0931134bc48b623d1f2d41f61ed3be88b5dbdedd18a1c87f54700062355a8b47bfe88f117c322836e8bbdd71ea5504ccdca38e2640657eb1ec01ce002c1363d638b4ce1f5b26b419c3d86969631fcac1e34cb0030de42da338227eebf8603651276a3e24768e09a32ebf3944d434fe1fae73147e80249a47c29d3302888040dacb383ef8ef3fa7825b3fcfe9609b465228f784178b905e1544435ead816176fd7916aba2d6cb8bc6f8bc03241aa3cc3a233507586abc81c098a7a764f98bb0d92fcf86e0b715d28a251aec653921435858e07d2907e79f9c80361ba02e7ab34fe423bda9795a5b0bedbf3de83a9711480fbf16d6da702c2e51b4bc528fedd7d7993be77316e71db278ca84854b0e6b60c19b834a2b78dcf2f1152d725aee1bfa3e0b56f395c12fcdbc5a94832b8878fcd1c34c28e7fc21f7e68029fa83a4d4ea6c6c860eca491072f6ac48eb504a831f46e3b3ad96c152fb2a1ab36ee334e86972adc1fa8a29d8915e94952170fd7efced584fbf43733c0aa23c08e3510ef120fe8b75891175f2819c5e17e3adafbbf68a872776c7d688973b694245d308ccbd629baff13468787cdf3fb7adc80a4f907e99ef2b03166a01ee11140ddaa7d37c3a83baebb67fd267cd7d881b336e6089da9ed12bd1454f5f2d0e72e1902cd0a94c77c2350080f997c05075b5ba01dc3c6d851329cc84da9303f02a3e3f66862c64e2c86646b3b4102b01811df83238285e674e6f16eda889aad8f75f6f36d8ee57cbffa31ef5ea34685a75dec7a4ad14a2c5eaad233e5e10ff5ea2c0531a7718738ae72bfa1318395bf07fda3d5e30993f73fc4b3b10e2980d909fc7acc0178d50592e7739f8ff72296c10d241a2bc9e44518ada9c52a92c025ff7cb7cfb453de57d6accf16baa24c57faef23856dbcec38cb1b5ee9027de836a5f43f61186f4ab58a6829c7cef4c70a4d2a5659ecaaf09139fbdd5620bb09f5e2bb00dfe5b77fabcbd65ba0cba99c02756e841d9c782ef4e023b0f50c69504007f119b73492bc11897c06a79c7aa9efcf7d37cd67ef8a0d18e4dc55e963ddb1ffef71631ff56521828eaf5574bd350061545e10ca0a9626b3b3222c7744db7d2667aa9a80b67f7e5480685e878cea4963d3081b38e31ced4f5068abd916b6b84faa4587bf391385f6e63087e4a4bd03c46dd57646386d78a60c29c264269ed18430ec81435c9d426e6123359c25a629115ead51820d828d4a35af016ebf18856df6ac15d9cfaaa9b441f9bcc20658797e22254f5f8170132a551c8136290a5ee7a31960d41473b4a9b7cffff021e8acb55af8e7a30ccd75e063c44ef781a662412b6da4e073c5ccb0d29e7aef46a4435809bad8bfb48cf497c00d9f6175cd5c80aa8f733f9c50d64d813b102d163f41be42dc0566ad3b2e88e5f97f3100314e042cbdc4894e19450c2c3b53edb757d93ccc60165c17eef42442b015f5839e46413f0ecb588db2d1d56f1b1f52e42ca40ed9ae80931e606c9101a4cd448a6dc1777cd5d515cdaa89109f587845551bce139b5a534b760174c893be8e2124d3cfb7a8643de91c869a0f0a77651376d6b6f353b40003c94302395fd00dce26d335af18521ae0678a42877c24fdb4b544bfe34a70e6f723ec09449675efadd1fc42957363dcb0e6ca1e95ea064e04cbe8124c9b78fc6a680bb3796d78ce2970fae2a920270a507812505d53f354361a18777f7545897ec4c8de6a6aa7c90daf6c93c00fd97f3c9e0c63a166d6c831bdcdb83bb42fed201bd51be1ac6a3d8e155cd545fda3e464a152c596b2bdb864081a8e686a769a6f89ef4330d9826c1ee7ad4a843d9c45cddbb3aada8ff38bbf919603a4d55c9b338782a2f586641788b33424a51890d3235f3ff9d897b93137fe6a2d3eaf4a4dc49fdac37decf531dc13071bbd84fe6a58b0a793f367e9233b5625452405c93e487f334a4d2136eea9eef3fd2eadee34c673479792a1be579aa8704708a7238afe0d54c992e027fe046b6d846a28d220200aa9e2ff851e6a845ad5c0b06af9aa052e5f602abfac7a64a3ad7c43291cbc5907ba7a249c9304f3df9a0c315681a917e2f55c960c6562034eaf766e2b9b1f59296e7d20642769df6628eab5e54f28f0acb126c8bde81cf14c0cb56b5514f401a3c07ec3b1ac6a6f66c202303ed556f1221733395af1a53a1a7a5ba9d60f670e35569025df4461a2c33af5444f165bfa5ac05b7ae81f64f17cee26ae24488c37845dc02430a6813db804e267712df7805e8dc8dfd206fa31793c6e49ec63d39bdde4d6efb940e2e933fc33d82d9b5a7237b4cbe6b38deeb6c9ac768422c111cc0b4118b9684099c2c682f2d6cd3e815336efd8a9376ef2d1f869e7c3ee8c4958a8866568eb686d532039712fb48c2da6218"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "2c68bb85e7a9224bff14b6aa0cff7391085ac19e3d9f4aa513bd70539249361721092258cd8bafa1a17580e82c0ef1282333522b3039643c53bdbb8be6e19b2000fcabb4710cf0bfcd8d96e5940d4518f6c1d5739dc4c7fc5db5a596b32574935cf038274972caf37cf5281e9d0ff6f7e2bc713c0fadda852111f56fb051dbe42ea06be71b241a05112cf3529d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x1214}, 0x1, 0x0, 0x0, 0x4054}, 0x4004001) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000001740)={0x1, 0x2}, 0x8) syz_open_dev$vbi(&(0x7f0000001780), 0x0, 0x2) bind$802154_dgram(r2, &(0x7f00000017c0)={0x24, @short={0x2, 0x3}}, 0x14) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1cac2ff8c6c59977}, 0x0) clock_gettime(0x0, &(0x7f00000064c0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000006240)=[{{&(0x7f0000001900), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/216, 0xd8}], 0x1, &(0x7f0000001ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/161, 0xa1}, {&(0x7f0000001c80)=""/166, 0xa6}], 0x2, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/224, 0xe0}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f00000021c0)=""/4, 0x4}, {&(0x7f0000002200)=""/82, 0x52}, {&(0x7f0000002280)=""/245, 0xf5}, {&(0x7f0000002380)=""/249, 0xf9}, {&(0x7f0000002480)=""/59, 0x3b}, {&(0x7f00000024c0)=""/63, 0x3f}], 0x6, &(0x7f0000002580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000003900)=[{&(0x7f0000002680)=""/86, 0x56}, {&(0x7f0000002700)=""/235, 0xeb}, {&(0x7f0000002800)=""/193, 0xc1}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000003940), 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000039c0)=""/2, 0x2}, {&(0x7f0000003a00)=""/240, 0xf0}, {&(0x7f0000003b00)=""/34, 0x22}, {&(0x7f0000003b40)=""/46, 0x2e}, {&(0x7f0000003b80)=""/87, 0x57}, {&(0x7f0000003c00)=""/211, 0xd3}, {&(0x7f0000003d00)=""/179, 0xb3}], 0x7, &(0x7f0000003e40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000004400)=[{&(0x7f0000004000)=""/106, 0x6a}, {&(0x7f0000004080)=""/78, 0x4e}, {&(0x7f0000004100)=""/242, 0xf2}, {&(0x7f0000004200)=""/31, 0x1f}, {&(0x7f0000004240)=""/212, 0xd4}, {&(0x7f0000004340)=""/142, 0x8e}], 0x6}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/174, 0xae}, {&(0x7f00000055c0)=""/99, 0x63}, {&(0x7f0000005640)=""/119, 0x77}, {&(0x7f00000056c0)=""/140, 0x8c}, {&(0x7f0000005780)=""/8, 0x8}], 0x6}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005840)=""/7, 0x7}, {&(0x7f0000005880)=""/67, 0x43}, {&(0x7f0000005900)=""/61, 0x3d}, {&(0x7f0000005940)=""/47, 0x2f}, {&(0x7f0000005980)=""/163, 0xa3}, {&(0x7f0000005a40)=""/216, 0xd8}, {&(0x7f0000005b40)=""/80, 0x50}, {&(0x7f0000005bc0)=""/117, 0x75}], 0x8, &(0x7f0000005cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000005e00)=@abs, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000005e80)=""/133, 0x85}, {&(0x7f0000005f40)=""/124, 0x7c}, {&(0x7f0000005fc0)=""/253, 0xfd}], 0x3, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0xa, 0x40010021, &(0x7f0000006500)={r6, r7+60000000}) getsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000006540), &(0x7f0000006580)=0x4) r15 = syz_open_dev$video4linux(&(0x7f00000065c0), 0x1, 0x8001) ioctl$VIDIOC_ENUMAUDOUT(r15, 0xc0345642, &(0x7f0000006600)={0x1000, "f4cab7c7a430c1ad018bd7aaa640a3d32d119ee666aa5fc2a3c0caf03399f3a0", 0x3}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000006680)=@o_path={&(0x7f0000006640)='./file0\x00', r14, 0x4000, r10}, 0x18) io_setup(0xffff, &(0x7f00000066c0)=0x0) clock_gettime(0x0, &(0x7f0000006780)={0x0, 0x0}) io_pgetevents(r16, 0x2, 0x4, &(0x7f0000006700)=[{}, {}, {}, {}], &(0x7f00000067c0)={r17, r18+10000000}, &(0x7f0000006840)={&(0x7f0000006800)={[0x8]}, 0x8}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000006880)={'wg2\x00', 0xe5e}) clock_settime(0x0, &(0x7f00000068c0)) unshare(0x22020c00) clock_gettime(0x0, &(0x7f000000a740)={0x0, 0x0}) recvmmsg(r9, &(0x7f000000a640)=[{{&(0x7f0000006900)=@tipc=@id, 0x80, &(0x7f0000008d00)=[{&(0x7f0000006980)=""/122, 0x7a}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000008a00)=""/179, 0xb3}, {&(0x7f0000008ac0)=""/139, 0x8b}, {&(0x7f0000008b80)=""/115, 0x73}, {&(0x7f0000008c00)=""/232, 0xe8}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000008d80)=""/17, 0x11}, {&(0x7f0000008dc0)=""/243, 0xf3}], 0x2}, 0x8}, {{&(0x7f0000008f00)=@caif, 0x80, &(0x7f000000a040)=[{&(0x7f0000008f80)=""/49, 0x31}, {&(0x7f0000008fc0)=""/121, 0x79}, {&(0x7f0000009040)=""/4096, 0x1000}], 0x3}, 0x7008f831}, {{&(0x7f000000a080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f000000a5c0)=[{&(0x7f000000a100)=""/125, 0x7d}, {&(0x7f000000a180)=""/120, 0x78}, {&(0x7f000000a200)=""/70, 0x46}, {&(0x7f000000a280)=""/217, 0xd9}, {&(0x7f000000a380)=""/147, 0x93}, {&(0x7f000000a440)=""/92, 0x5c}, {&(0x7f000000a4c0)=""/210, 0xd2}], 0x7}, 0x5}], 0x4, 0x40, &(0x7f000000a780)={r19, r20+10000000}) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f000000a800), r13) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f000000a900)={&(0x7f000000a7c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000a8c0)={&(0x7f000000a840)={0x74, r21, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "527f03fd3853514750a49d4e7cd89fa9d0fe57dc8732e0af"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa81cc7abf0f9e300af12264a37c1bafcd36844bb65d6b65"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x20000840) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f000000aa40)={&(0x7f000000a940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000aa00)={&(0x7f000000a980)={0x74, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x90) 7.109382032s ago: executing program 2 (id=508): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="9c", 0x1}], 0x1, 0xfffffffe, 0xfffffff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async, rerun: 64) r8 = accept4(r7, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$unix(r8, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95cf0d0d5585e3279efe4fd0b6dafb93eee8b0af", 0x18}, {&(0x7f0000006cc0)="9adaf615e5f5caf2dbb930eb4bcf83a7d5ab7d2880e4d75510", 0x19}], 0x2}}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) semop(0x0, 0x0, 0x0) (async) semop(0x0, 0x0, 0x0) (async) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000003c0)=""/160) 7.107676214s ago: executing program 4 (id=509): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f00000013c0), 0xcb) socket(0x0, 0x803, 0x0) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f00000004c0)="296cf021111ca5ecd98a5224df07af4646bf0d96c04bd613e0d70d5729d2c7507ee5eed5391844a07217f2e6b901ac41755374b8421832491edfe58774487f2d79871f39afca82bfdc43b1d64e9f0c9ddb9373cf076712b81816808c325523763a0576e4e333688e2a17703e9157e1a27e51715e91e02b787e3427dcdff65af211f6957054c06e0dd68d111d698d1d28ffb3722d635f31ac0d60ccc7fada7e9debd85cb1e9616a0a65a3b8c30a2b35c400a7a010034a572e4307adbdfb3b1c0d56e0153cbedeedb2faf81c9fed8232e3000a5f0548252e9660088934a2ac1aa055ad6ce02b0000000000", &(0x7f0000000400)="6fcafbe2289400f29d235af551f021d0a9c45516ea59c5f461a2526092b481566f73f33499bbc30181c18f028d29ef6f0fcb87a2f5944b44f5f544f38eae7deaa042e144197228ad95a6b8a645d6"}}, &(0x7f0000000480)) timer_settime(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x4008556c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) connect$l2tp6(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x10, &(0x7f0000000000), 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000008003185006c0000000000019078ac1e0201ac1414aa03009078030000198d28af8faf7e577185fb504f940044001b730000000000890000ffffffff64010100442c0000000000000000000000000000000400000000000000000000000000000000000000000000000000008632"], 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 6.869082315s ago: executing program 0 (id=510): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdaa1, 0x5, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000340)={0x1, 0x0, [0xffff054b, 0xfffffffb, 0xffffffdb, 0x80000000, 0x9, 0x739, 0x3, 0x9]}) r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@null, 0xc, 'veth0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000240)={0xe, 0x25, 0xb, 0x1, 0xb, 0x8, 0x6, 0xf4, 0xffffffffffffffff}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="ff01bb9ab25fa2c05200000000000000100000000de440d164ec68fa82595996d08e41a7a8fca7ac9acc08e46b6599c97af1ff9aa9c21ee69b18b9d1b8d34e02b50e16513aa07cc66ad4636a472e6de988ea0977b4d91f4c144f136191dd6d2cb32221418f3aca1c5f981c9cdffb7c5e4b4d5825360544f612712f0c990700593fca0b9189fc0cabac3f16c38dbc92d6a63f51edd75b1150a5e80a01b8f8cf3595a5c6b55959f783d05e1f22a094fc3b3bbd7c369d17f3deea00"/196, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = getpid() prlimit64(r5, 0x8, 0x0, &(0x7f0000000480)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r7, 0x5}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.810252087s ago: executing program 0 (id=511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdaa1, 0x3, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000340)={0x1, 0x0, [0xffff054b, 0xfffffffd, 0xffffffdb, 0x80000000, 0x9, 0x739, 0x3, 0x9]}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000240)={0xe, 0x10, 0xb, 0x1, 0xb, 0x2, 0x6, 0xf4, 0xffffffffffffffff}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x600000000000000) 6.764319898s ago: executing program 4 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000c0000006b570e8603424f7c14cb2638abae7effa02baee7dab1fe31e5f34bbb85faf0595ae9e57f704285a54f75fe8b7e96158405aeeb634c22cf67c309", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x8, 0x3203, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x8000, 0x3b5, 0x2b}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}}, 0x40c4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000080), 0x4) 6.246400127s ago: executing program 0 (id=513): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={0x200201, 0x12, 0x3}, 0xd5) r1 = openat(r0, 0x0, 0x400, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) pipe2(0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x2001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x305, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x7, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) 6.245219876s ago: executing program 3 (id=514): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x705040, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000500)={0x0, 0x80, 0x80, 0x0, 0x3e5}, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeff, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000480)="994b9dde675248ef5d7c5c85e696329f34f68a2a96f53d42bed902de8037b0d90d5fb508d8194990bd858437cd676ff3", 0x30, 0xfffffffffffffffd, 0x0, 0x2, r2}]) setxattr$security_evm(0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00'], 0x9, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x500, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\xff\xff\xff\xfd\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x2, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.062119156s ago: executing program 0 (id=515): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={0x200201, 0x12, 0x3}, 0xd5) r1 = openat(r0, 0x0, 0x400, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) pipe2(0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x9, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x2001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x305, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x7, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) 3.811979609s ago: executing program 2 (id=516): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="23000000010011", 0x7) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bfs\x00', 0x6001, &(0x7f0000000140)='/dev/vbi#\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x3c}}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffc0}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x13}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x841}, 0x40000d0) dup2(r5, r6) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f027, 0xfffffffd}) 3.809911424s ago: executing program 4 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) r4 = syz_open_dev$video4linux(&(0x7f0000001e00), 0xfffffffc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3015}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x53f302c5, 0x103000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000340)={r5, 0x10001, {0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x5, 0xc, 0x9, "97573ed2d6962564e502a1efdb0f78dd81eede2e43207af28fcf84fd5b9a43b65710350cac30fa7befbd4c28dc918226f259d0298fd5d33a63028f284aaa688d", "1eff87aba17c521ae1a79b4cc49e6cb880eb12e6385e78653fd5ee23443e353f6fecef1ca1c3f21b76f3e7c4c1491acf8636516b4a92bc2ce323ec74af0110ff", "0a4cabc733a4048721ce8522afb3fc133e5bc5f8a12753e9b8e5d6e5d476b64b", [0x9, 0xefb]}}) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x49, 0x0, &(0x7f00000000c0)) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e60, 0x0, @loopback, 0xfffffffd}, 0xfffffdaa) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, 0x0, 0x0) listen(r8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000480)="b9b9278eb32fdc1e19c4649316d8a235bed517816277854c3b5ddc5c0ab87c5b3e5f8a7127bbb9f2f68f38cef16753897fd56e965e70ced97d1b2f9f0c6ba7c9766efe67876e1cc488629d7963a609fcebc44978f98efa1fb2f47e73c18e2dfef8bc5adc50723342cfdf5cce791d972509d6300969349e6d73eb8a62", 0x7c}, {0x0}, {&(0x7f00000016c0)="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", 0xf40}, {&(0x7f0000000780)}, {&(0x7f0000000940)="9798bc39260b5a7b0d925e22501674da3643b0f691b177d3c48d2f8b73ceee7ef2db9b25f8b8a98627b4cf544384a7b80e2b73c2648335302cc17d4eeb07353552be556f0c3ac72fef8c15e32aae01a74a6506823e9404bd20ab46ae8ed904baf9d3eea8452a272c7c1dc97919d741c5c9436b3e4a3527cb5087f5d05335d378f5334c1adf6ef8cee3796a62672d34373b8281c9234246cee1e2932a381d74ba5d590ba282f5", 0xa6}, {&(0x7f0000000a40)="8149143d37fbf1aa7e38f4261c7cc7301fa4eb4dea2b5bb463f2c92a8327feff2e1a55337ce093f541c98def61a5497dc9143e2a0965605d330f6cea158dadb9aaae95e1c2aa5157798e014c605aa57ff2cce2db4f1080a80fb151d48f7ded008d87cb82cbf06c36f0c2b0d9ceb1dc200ff84c2e63083b17cf670500de0302ee0d8984424bbfdf490199960d60a01fc160408c7a281c81e9e3839d6965cfe8a3215a0610a27ff0bd7bfcd06a586f71669741a81d11bc73ddecef09818c732ce3116c725d053486f40d820f5e45d5502ed8e530b18119f9b054", 0xd9}, {&(0x7f0000000b40)}], 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="1400a075f52d4d0e6415000008000000370400000000000068000000000000002900000039000000110a010400000000fe8000000000000000000000000000bb0000000000000000000000000000000020010000000000000000000000000001fc010000000000000068738e716a14ea00000000000001fc020000000000000000000000000001400000000000000029000000360000000204000000000000071800000003040e080009000000000000007fffffffffffffff0103"], 0xc0}}], 0x1, 0x4000000) 3.809074205s ago: executing program 3 (id=518): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000007f85000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x2, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r11}}, {@gid={'gid', 0x3d, r12}}]}) sendmsg$unix(r7, &(0x7f0000000a80)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000340)="ef48321ed412beca2e324962490ceb1b44ab016ffa22", 0x16}, {&(0x7f0000000600)="aeec781581a5d83e7452dd937e61e27bb2830549dc392783193980bbdd224320fbb73a6fd7f47ecc66a84827d2d9ce7f7e4d5116045d68fc5ed5a61c1e51deac148de3965b966deaf3a2e5f603224e0901ab86ac6e5665e470911a2aaa7c5930eba6db64efff32d3e9f30a9bc24d34c240a61f55707ab5c9b1451340b9a3", 0x7e}, {&(0x7f0000000680)="21c54541e26b921930fc5be55f955d2b5dba021c69c75167a9c47e663208b4ad08e1a3109976476fc97c72bba0933f4d4a9fbce883290060c9978c3688513535c16f528caefb85e56cd180dbe1cae2ea4ddddef9cdd43423d6a8bf312bf011a97d61e100611c361bf283ef039ebc4e40d5d709559579b8cadae277986335d1cf9b0276aa1e06d3f3a8928d805a76a4a88bbbc02810a5293f734cccb513203dfd3793b71909218e0b3ff11d32607c1726", 0xb0}, {&(0x7f0000000740)}, {&(0x7f0000000840)="940034dbc44599576a4296ac85863a067431676e2e6536c2432209fe46a48f7072d8eae9f4927af7e0f87c9b7e834f", 0x2f}, {&(0x7f0000000880)="de5efb0df22ceb18d2717f938120f4b647e71496281447b7c8ef2060fc15b29d9552fe20dba9296ce70bea3d9bea3dfdaf780e58826c5ef14b781dbdac78615d5d757be7cf6f268bfe56d0663ab9ad6ac8383e48c8ebb5b51f268eaea09e0606de4ed51b444e5827db3b7c71ef2c81d773bc1d6afd55c481fa14bafaa1e83b5e74ce8f", 0x83}, {&(0x7f0000000940)="ad14a65b2773e89f18d5f9e184b6dd952c6cfbe7", 0x14}], 0x7, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r5, r9}}}, @rights={{0x1c, 0x1, 0x1, [r4, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r9, r12}}}, @rights={{0x10}}], 0x70, 0x2004080}, 0x800) r13 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) poll(&(0x7f0000000140)=[{r13, 0x19f23}], 0x1, 0x20) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 764.605943ms ago: executing program 0 (id=519): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240440c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00e9ff00002800000028000000040000000200000000000000000200e700001b00000000000009e0ff0000000061002fb029518fca8e13e10c27b0873c77c387f0738acc337f0b53f18460bdb37a6a659200c9cc1e8295a88d3760150106a403ee775bfe04c9fc5c7914be0b2bd5a7dd567cb030f7e443e8e43ffc862647e75befc2e351a7328cd93970bffe1f09bbfd2e787dd6475f08000000f5b512f82ac6c27de932a792e1cba0"], 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) fallocate(0xffffffffffffffff, 0x80, 0x5, 0xffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 760.971691ms ago: executing program 4 (id=520): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x189, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="da1103b23d6e9ec7b0960f8a45520fdee8bbafd038af5357cc2bf5969a77a332ef6c7c1a675389b16063696dee3af27a8f971dbce5b93d02d840ee08d2d124e67fa17642c4d99d45aa878237a1663a31f7ef396e4b22348c06000000ac87d8f9f5d19ceb0609e3b019c0a4814a268de5def201eb268f1dfb204aa37d70e75db23f", 0x81, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r4, r6}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) 628.681888ms ago: executing program 2 (id=521): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000019c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) preadv(r4, &(0x7f0000000640), 0x0, 0x0, 0x400) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000680)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000001680)={0x9, 0x108, 0xfa00, {r6, 0x6, "8fea0e", "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"}}, 0x110) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x9, 0x3) 419.228053ms ago: executing program 3 (id=522): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r2, 0x0, 0x0, 0x24000080, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x2c2, 0x4) dup3(r1, r1, 0x80000) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0xc809ebf2a3cc96a1, 0x1, 0x0, 0x1, 0x204}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000600)='rpcgss_svc_accept_upcall\x00'}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 381.593893ms ago: executing program 2 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2081c84, 0x0) move_mount(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000000c0)='\x00', 0x272) 190.593438ms ago: executing program 2 (id=524): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004118d5d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000200000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 2 (id=525): syz_emit_ethernet(0xdb, &(0x7f0000000640)=ANY=[], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x400452c9, &(0x7f00000000c0)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) socket$inet6(0xa, 0x80001, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x20080, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): tclass=chr_file permissive=1 [ 59.676293][ T29] audit: type=1400 audit(1731979517.136:129): avc: denied { open } for pid=5908 comm="syz.1.6" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.700879][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.709130][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.718455][ T29] audit: type=1400 audit(1731979517.146:130): avc: denied { ioctl } for pid=5908 comm="syz.1.6" path="/dev/udmabuf" dev="devtmpfs" ino=701 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.723742][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.750763][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.757390][ T29] audit: type=1400 audit(1731979517.186:131): avc: denied { create } for pid=5908 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.777895][ T29] audit: type=1400 audit(1731979517.186:132): avc: denied { ioctl } for pid=5908 comm="syz.1.6" path="socket:[7755]" dev="sockfs" ino=7755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.846971][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.872704][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.929355][ T29] audit: type=1400 audit(1731979517.406:133): avc: denied { create } for pid=5911 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.965276][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.973374][ T29] audit: type=1400 audit(1731979517.416:134): avc: denied { setopt } for pid=5912 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.977206][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.014237][ T29] audit: type=1400 audit(1731979517.416:135): avc: denied { create } for pid=5912 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.082860][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.097961][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.121253][ T5923] (unnamed net_device) (uninitialized): option ad_select: invalid value (254) [ 60.131320][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.140051][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.330008][ T5922] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 60.745591][ T5939] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 61.032667][ T5828] Bluetooth: hci1: command tx timeout [ 61.038097][ T5828] Bluetooth: hci0: command tx timeout [ 61.106773][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.124810][ T5828] Bluetooth: hci4: command tx timeout [ 61.130261][ T5837] Bluetooth: hci3: command tx timeout [ 61.193688][ T5828] Bluetooth: hci2: command tx timeout [ 61.274542][ T5960] input: syz0 as /devices/virtual/input/input5 [ 61.302211][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 61.322194][ T5874] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 61.339997][ T5824] udevd[5824]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 61.352553][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.397013][ T5874] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.407098][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.425766][ T5874] usb 5-1: Product: syz [ 61.430014][ T5874] usb 5-1: Manufacturer: syz [ 61.456812][ T5874] usb 5-1: SerialNumber: syz [ 61.721841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 61.741877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 61.751844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 61.780831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 61.814148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 61.978820][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.091862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.222360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 62.251379][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.395621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.041134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.100531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.152518][ T5828] Bluetooth: hci0: command tx timeout [ 63.158250][ T5828] Bluetooth: hci1: command tx timeout [ 63.193477][ T5837] Bluetooth: hci4: command tx timeout [ 63.198916][ T5828] Bluetooth: hci3: command tx timeout [ 63.222317][ T5874] usb 5-1: 0:2 : does not exist [ 63.308908][ T5837] Bluetooth: hci2: command tx timeout [ 63.404348][ T5874] usb 5-1: USB disconnect, device number 2 [ 64.282779][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.392757][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.595951][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.613160][ T8] usb 1-1: config 0 has no interfaces? [ 64.620782][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 64.638578][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.725427][ T8] usb 1-1: Product: syz [ 64.729630][ T8] usb 1-1: Manufacturer: syz [ 64.733300][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 64.733312][ T29] audit: type=1400 audit(1731979522.216:200): avc: denied { setopt } for pid=6019 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.734248][ T8] usb 1-1: SerialNumber: syz [ 64.750953][ T29] audit: type=1400 audit(1731979522.236:201): avc: denied { write } for pid=6019 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.797970][ T8] usb 1-1: config 0 descriptor?? [ 65.033392][ T8] usb 1-1: USB disconnect, device number 2 [ 65.808198][ T5877] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 66.081274][ T5877] usb 4-1: device descriptor read/64, error -71 [ 66.281065][ T6040] netlink: 'syz.2.42': attribute type 29 has an invalid length. [ 66.451998][ T5877] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 66.632467][ T5877] usb 4-1: device descriptor read/64, error -71 [ 66.753054][ T5877] usb usb4-port1: attempt power cycle [ 66.786651][ T29] audit: type=1400 audit(1731979524.276:202): avc: denied { read } for pid=6049 comm="syz.0.46" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.872016][ T29] audit: type=1400 audit(1731979524.276:203): avc: denied { open } for pid=6049 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.921084][ T6052] fuse: Bad value for 'user_id' [ 66.941729][ T6052] fuse: Bad value for 'user_id' [ 66.947727][ T29] audit: type=1400 audit(1731979524.296:204): avc: denied { ioctl } for pid=6049 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.980300][ T6052] capability: warning: `syz.1.47' uses deprecated v2 capabilities in a way that may be insecure [ 67.032725][ T29] audit: type=1400 audit(1731979524.296:205): avc: denied { set_context_mgr } for pid=6049 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.052514][ T29] audit: type=1400 audit(1731979524.486:206): avc: denied { ioctl } for pid=6053 comm="syz.2.48" path="socket:[8467]" dev="sockfs" ino=8467 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.222230][ T5877] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 67.264821][ T5877] usb 4-1: device descriptor read/8, error -71 [ 67.282145][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.466986][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.479428][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.491150][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 67.507712][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.521029][ T5877] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 67.550048][ T25] usb 2-1: config 0 descriptor?? [ 67.558378][ T5877] usb 4-1: device descriptor read/8, error -71 [ 67.676334][ T5877] usb usb4-port1: unable to enumerate USB device [ 67.683985][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 67.701701][ T29] audit: type=1400 audit(1731979525.186:207): avc: denied { accept } for pid=6062 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.951489][ T29] audit: type=1400 audit(1731979525.436:208): avc: denied { create } for pid=6072 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.995932][ T25] appletouch 2-1:0.0: Failed to request geyser raw mode [ 68.079036][ T25] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 68.113553][ T25] usb 2-1: USB disconnect, device number 2 [ 68.230574][ T29] audit: type=1400 audit(1731979525.676:209): avc: denied { write } for pid=6072 comm="syz.2.54" path="socket:[8522]" dev="sockfs" ino=8522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 68.468870][ T6081] loop8: detected capacity change from 0 to 7 [ 68.491302][ T6081] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 68.511840][ T6081] loop8: partition table partially beyond EOD, truncated [ 68.537791][ T6083] input: syz0 as /devices/virtual/input/input7 [ 68.553996][ T6081] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 68.605210][ T6087] fuse: Bad value for 'user_id' [ 68.617473][ T6087] fuse: Bad value for 'user_id' [ 68.654619][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 69.057164][ T6097] hub 5-0:1.0: USB hub found [ 69.072039][ T6097] hub 5-0:1.0: 1 port detected [ 69.755857][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 69.981498][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 70.142425][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 70.142441][ T29] audit: type=1400 audit(1731979527.636:219): avc: denied { create } for pid=6113 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.175242][ T29] audit: type=1400 audit(1731979527.666:220): avc: denied { bind } for pid=6113 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.197306][ T29] audit: type=1400 audit(1731979527.696:221): avc: denied { write } for pid=6113 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.217555][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 70.226695][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.236502][ T8] usb 4-1: Product: syz [ 70.240676][ T8] usb 4-1: Manufacturer: syz [ 70.245362][ T8] usb 4-1: SerialNumber: syz [ 70.292026][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.472186][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 70.551008][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.670260][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.809507][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.812381][ T8] usb 4-1: config 0 descriptor?? [ 70.823900][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 70.827616][ T8] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 70.843683][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.858760][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 70.868171][ T5876] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 70.879171][ T5876] usb 2-1: Manufacturer: syz [ 70.887286][ T5876] usb 2-1: config 0 descriptor?? [ 70.905289][ T2146] IPVS: starting estimator thread 0... [ 70.981978][ T5877] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 71.037469][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.046169][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.072106][ T6124] IPVS: using max 24 ests per chain, 57600 per kthread [ 72.338368][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 72.445094][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 72.568453][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 72.582124][ T6129] fuse: Bad value for 'fd' [ 72.612543][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.624924][ T8] gspca_sn9c2028: read1 error -71 [ 72.636724][ T8] gspca_sn9c2028: read1 error -71 [ 72.642661][ T5876] rc_core: IR keymap rc-hauppauge not found [ 72.642683][ T8] gspca_sn9c2028: read1 error -71 [ 72.653962][ T8] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 72.657064][ T6131] binder: 6130:6131 ioctl c00c6211 0 returned -14 [ 72.665235][ T8] usb 4-1: USB disconnect, device number 6 [ 72.689082][ T5876] Registered IR keymap rc-empty [ 72.709544][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 72.775748][ T5877] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 72.787089][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.795938][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 72.804399][ T5877] usb 5-1: Product: syz [ 72.808732][ T5877] usb 5-1: Manufacturer: syz [ 72.813710][ T5877] usb 5-1: SerialNumber: syz [ 72.822069][ T29] audit: type=1400 audit(1731979530.306:222): avc: denied { read } for pid=6133 comm="syz.2.74" path="socket:[9388]" dev="sockfs" ino=9388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.847122][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 72.862559][ T5877] usb 5-1: config 0 descriptor?? [ 72.869086][ T6120] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 72.878037][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 72.897500][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 72.942390][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 72.966463][ T5877] rc_core: IR keymap rc-imon-rsc not found [ 72.972717][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 72.979914][ T5877] Registered IR keymap rc-empty [ 72.986712][ T5877] rc rc1: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 73.012224][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.028394][ T5877] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input9 [ 73.081875][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.122048][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.141948][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.161918][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.226232][ T5877] usb 5-1: USB disconnect, device number 3 [ 73.236566][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.237663][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 73.778217][ T5876] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 73.802828][ T5876] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 73.812069][ T5876] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 73.828473][ T5876] usb 2-1: USB disconnect, device number 3 [ 73.851858][ T2146] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 74.035700][ T29] audit: type=1400 audit(1731979531.526:223): avc: denied { setopt } for pid=6160 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.062224][ T2146] usb 4-1: Using ep0 maxpacket: 8 [ 74.070711][ T2146] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 74.080642][ T2146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.136909][ T2146] usb 4-1: Product: syz [ 74.144196][ T29] audit: type=1400 audit(1731979531.616:224): avc: denied { create } for pid=6167 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.421930][ T2146] usb 4-1: Manufacturer: syz [ 74.426916][ T2146] usb 4-1: SerialNumber: syz [ 74.454959][ T2146] usb 4-1: config 0 descriptor?? [ 74.479314][ T2146] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 74.537300][ T29] audit: type=1400 audit(1731979532.026:225): avc: denied { bind } for pid=6167 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.563062][ T29] audit: type=1400 audit(1731979532.046:226): avc: denied { sys_module } for pid=6165 comm="syz.4.85" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.671841][ T29] audit: type=1400 audit(1731979532.156:227): avc: denied { listen } for pid=6167 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.704273][ T29] audit: type=1400 audit(1731979532.196:228): avc: denied { create } for pid=6174 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.086940][ T6181] openvswitch: netlink: Actions may not be safe on all matching packets [ 75.204233][ T29] audit: type=1400 audit(1731979532.536:229): avc: denied { bind } for pid=6173 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.363276][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.728348][ T29] audit: type=1400 audit(1731979532.536:230): avc: denied { name_bind } for pid=6173 comm="syz.0.86" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.819372][ T29] audit: type=1400 audit(1731979532.536:231): avc: denied { node_bind } for pid=6173 comm="syz.0.86" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 75.821337][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.885269][ T6188] Zero length message leads to an empty skb [ 76.004054][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 76.014107][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.025138][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.035165][ T5877] usb 2-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 76.044490][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.055123][ T5877] usb 2-1: config 0 descriptor?? [ 76.421264][ T9] cfg80211: failed to load regulatory.db [ 76.954918][ T29] audit: type=1400 audit(1731979534.406:232): avc: denied { setopt } for pid=6205 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.989521][ T5877] lenovo 0003:04B3:3109.0001: item fetching failed at offset 1/3 [ 77.002573][ T5877] lenovo 0003:04B3:3109.0001: hid_parse failed [ 77.008790][ T5877] lenovo 0003:04B3:3109.0001: probe with driver lenovo failed with error -22 [ 77.021389][ T5914] usb 4-1: USB disconnect, device number 7 [ 77.235826][ T29] audit: type=1400 audit(1731979534.726:233): avc: denied { read write } for pid=6211 comm="syz.0.97" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.426550][ T29] audit: type=1400 audit(1731979534.726:234): avc: denied { open } for pid=6211 comm="syz.0.97" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.469542][ T29] audit: type=1400 audit(1731979534.956:235): avc: denied { ioctl } for pid=6211 comm="syz.0.97" path="socket:[9517]" dev="sockfs" ino=9517 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.511674][ T29] audit: type=1400 audit(1731979534.996:236): avc: denied { getopt } for pid=6211 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.647370][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.667111][ T29] audit: type=1400 audit(1731979535.126:237): avc: denied { create } for pid=6167 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.693279][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.702313][ T29] audit: type=1400 audit(1731979535.126:238): avc: denied { connect } for pid=6167 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 77.792011][ T5914] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.835996][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.951989][ T5914] usb 1-1: device descriptor read/64, error -71 [ 77.959653][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.971217][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.981100][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.989989][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 77.997889][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.010944][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.167164][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.176116][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.183979][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.192862][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.203573][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.211485][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.219333][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.403517][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.417035][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.430661][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.438775][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.449832][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.469553][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.475148][ T5914] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.492393][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.507940][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.516278][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.524365][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.532858][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.543174][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.552919][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.562847][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.571170][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.579977][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.587880][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.595790][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.603901][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.611702][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.622345][ T5914] usb 1-1: device descriptor read/64, error -71 [ 78.623262][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.639428][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.647289][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.655377][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.663216][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.670993][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.679274][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.687677][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.696047][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.703896][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.711654][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.719573][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.732882][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.740712][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.748580][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.756388][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.757587][ T5914] usb usb1-port1: attempt power cycle [ 78.764211][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.777405][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.823725][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.831697][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.839823][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.853694][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.861470][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.869364][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.881349][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.891882][ T2146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.929768][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 78.953968][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.007812][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.030125][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.143893][ T2146] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.153308][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.164084][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.170996][ T2146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.172013][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.371966][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.374064][ T5914] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.380270][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.395455][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.403752][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.411532][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.422266][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.430099][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.438052][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.446986][ T965] hid-generic 001D:FFFFFFF8:0008.0002: unknown main item tag 0x0 [ 79.457528][ T965] hid-generic 001D:FFFFFFF8:0008.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.465885][ T5876] usb 2-1: USB disconnect, device number 4 [ 79.513334][ T2146] usb 3-1: Product: syz [ 79.528807][ T2146] usb 3-1: Manufacturer: syz [ 79.534799][ T5914] usb 1-1: device descriptor read/8, error -71 [ 79.547782][ T2146] usb 3-1: SerialNumber: syz [ 79.582105][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.584397][ T2146] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.763323][ T5877] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.950183][ T5914] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.401092][ T6252] fuse: Bad value for 'fd' [ 80.711384][ T6254] overlayfs: failed to resolve './file0': -2 [ 80.722298][ T5914] usb 1-1: device not accepting address 6, error -71 [ 80.730127][ T5914] usb usb1-port1: unable to enumerate USB device [ 80.824248][ T5877] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 80.833739][ T5877] ath9k_htc: Failed to initialize the device [ 80.883548][ T5877] usb 3-1: ath9k_htc: USB layer deinitialized [ 81.036470][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 81.036485][ T29] audit: type=1400 audit(1731979538.526:247): avc: denied { map } for pid=6231 comm="syz.2.102" path="socket:[9539]" dev="sockfs" ino=9539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.073770][ T5875] usb 3-1: USB disconnect, device number 2 [ 81.108314][ T29] audit: type=1400 audit(1731979538.526:248): avc: denied { read } for pid=6231 comm="syz.2.102" path="socket:[9539]" dev="sockfs" ino=9539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.186011][ T29] audit: type=1400 audit(1731979538.676:249): avc: denied { read } for pid=6261 comm="syz.4.112" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.219442][ T29] audit: type=1400 audit(1731979538.676:250): avc: denied { open } for pid=6261 comm="syz.4.112" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.244186][ T29] audit: type=1400 audit(1731979538.676:251): avc: denied { setopt } for pid=6261 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.431937][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.501996][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.571979][ T5877] usb 5-1: device descriptor read/64, error -71 [ 81.672100][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 81.680917][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 81.690342][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.703563][ T5914] usb 1-1: Product: syz [ 81.708065][ T5914] usb 1-1: Manufacturer: syz [ 81.714803][ T5914] usb 1-1: SerialNumber: syz [ 81.721693][ T5914] usb 1-1: config 0 descriptor?? [ 81.752092][ T5914] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 81.852086][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.872055][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 81.927792][ T29] audit: type=1400 audit(1731979539.416:252): avc: denied { create } for pid=6282 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.948306][ T29] audit: type=1400 audit(1731979539.446:253): avc: denied { ioctl } for pid=6282 comm="syz.1.118" path="socket:[9624]" dev="sockfs" ino=9624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.131994][ T5877] usb 5-1: device descriptor read/64, error -71 [ 82.133471][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.154536][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.173781][ T5875] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.197112][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.215635][ T5875] usb 4-1: SerialNumber: syz [ 82.891169][ T5877] usb usb5-port1: attempt power cycle [ 82.900057][ T5914] gspca_vc032x: reg_w err -110 [ 82.905280][ T5914] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 83.241473][ T5875] usb 4-1: 0:2 : does not exist [ 83.250147][ T5875] usb 4-1: unit 255 not found! [ 83.523765][ T5875] usb 4-1: 5:0: cannot get min/max values for control 10 (id 5) [ 83.606690][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.620681][ T5875] usb 4-1: USB disconnect, device number 8 [ 83.662887][ T5877] usb 5-1: device descriptor read/8, error -71 [ 83.678432][ T6295] loop8: detected capacity change from 0 to 7 [ 83.689210][ T6295] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 83.701932][ T6295] loop8: partition table partially beyond EOD, truncated [ 83.710616][ T6295] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 83.740066][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 83.823434][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.880885][ T29] audit: type=1400 audit(1731979541.366:254): avc: denied { setopt } for pid=6296 comm="syz.2.122" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.072046][ T5877] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.404564][ T29] audit: type=1400 audit(1731979541.626:255): avc: denied { write } for pid=6296 comm="syz.2.122" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.484924][ T9] usb 1-1: USB disconnect, device number 7 [ 84.491189][ T5877] usb 5-1: device descriptor read/8, error -71 [ 84.725955][ T29] audit: type=1400 audit(1731979542.216:256): avc: denied { create } for pid=6303 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.762113][ T5877] usb usb5-port1: unable to enumerate USB device [ 85.161934][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.312128][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 85.312646][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 85.339794][ T5877] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 85.351075][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.361888][ T5877] usb 5-1: Product: syz [ 85.366170][ T5877] usb 5-1: Manufacturer: syz [ 85.371178][ T5877] usb 5-1: SerialNumber: syz [ 85.389972][ T5877] usb 5-1: config 0 descriptor?? [ 85.499240][ T9] usb 1-1: device descriptor read/64, error -71 [ 85.717743][ T5877] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 85.792029][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 85.850676][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 85.932158][ T9] usb 1-1: device descriptor read/64, error -71 [ 85.975477][ T6346] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.045346][ T9] usb usb1-port1: attempt power cycle [ 86.333471][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 86.333503][ T29] audit: type=1400 audit(1731979543.826:267): avc: denied { ioctl } for pid=6347 comm="syz.3.138" path="socket:[9725]" dev="sockfs" ino=9725 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.472124][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 86.495712][ T29] audit: type=1400 audit(1731979543.906:268): avc: denied { write } for pid=6347 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.496510][ T6350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.138'. [ 86.525047][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.138'. [ 86.534733][ T6350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.138'. [ 86.544880][ T9] usb 1-1: device descriptor read/8, error -71 [ 86.679414][ T29] audit: type=1400 audit(1731979544.166:269): avc: denied { ioctl } for pid=6347 comm="syz.3.138" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.692899][ T6348] netlink: 'syz.3.138': attribute type 16 has an invalid length. [ 86.728748][ T6348] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.138'. [ 86.802399][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 86.815907][ T29] audit: type=1400 audit(1731979544.276:270): avc: denied { name_connect } for pid=6354 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 86.871965][ T9] usb 1-1: device descriptor read/8, error -71 [ 86.982548][ T9] usb usb1-port1: unable to enumerate USB device [ 87.562197][ T6376] overlayfs: failed to resolve './file0': -2 [ 87.709675][ T5877] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 87.922993][ T5877] usb 5-1: USB disconnect, device number 8 [ 88.178235][ T29] audit: type=1400 audit(1731979545.666:271): avc: denied { write } for pid=6384 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.207877][ T29] audit: type=1400 audit(1731979545.696:272): avc: denied { setopt } for pid=6384 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.265812][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 88.279428][ T29] audit: type=1400 audit(1731979545.776:273): avc: denied { getopt } for pid=6384 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.328439][ T29] audit: type=1400 audit(1731979545.806:274): avc: denied { mounton } for pid=6388 comm="syz.4.148" path="/20/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.401663][ T29] audit: type=1400 audit(1731979545.856:275): avc: denied { setattr } for pid=6388 comm="syz.4.148" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.435319][ T29] audit: type=1400 audit(1731979545.866:276): avc: denied { connect } for pid=6388 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.727521][ T6395] fuse: Invalid rootmode [ 88.862065][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.032770][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 89.043713][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.063683][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.089126][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.161409][ T5914] usb 2-1: config 0 descriptor?? [ 90.007293][ T6423] overlay: filesystem on ./file0 not supported as upperdir [ 90.025210][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 90.031207][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 90.105233][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.132240][ T5914] usb 2-1: USB disconnect, device number 5 [ 90.149435][ T6427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 90.156190][ T6427] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.164693][ T6427] vhci_hcd vhci_hcd.0: Device attached [ 90.200728][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 90.210535][ T6428] vhci_hcd: connection closed [ 90.216256][ T6106] vhci_hcd: stop threads [ 90.226198][ T6106] vhci_hcd: release socket [ 90.239137][ T6106] vhci_hcd: disconnect device [ 90.249778][ T6432] sctp: [Deprecated]: syz.2.158 (pid 6432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.249778][ T6432] Use struct sctp_sack_info instead [ 90.361617][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 90.375183][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.394574][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.476145][ T6438] sg_write: data in/out 16777180/17 bytes for SCSI command 0x0-- guessing data in; [ 90.476145][ T6438] program syz.0.161 not setting count and/or reply_len properly [ 90.915864][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 90.946974][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.954820][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 90.963484][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 90.971475][ T5837] Bluetooth: hci0: hardware error 0x00 [ 91.017231][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 91.055282][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.304542][ T9] usb 5-1: config 0 descriptor?? [ 92.163232][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 92.163272][ T29] audit: type=1400 audit(1731979549.586:303): avc: denied { write } for pid=6452 comm="syz.1.165" path="socket:[9215]" dev="sockfs" ino=9215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.247241][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 92.272038][ T5914] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 92.272135][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 92.495325][ T29] audit: type=1400 audit(1731979549.666:304): avc: denied { read } for pid=6452 comm="syz.1.165" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.521858][ T29] audit: type=1400 audit(1731979549.666:305): avc: denied { open } for pid=6452 comm="syz.1.165" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.545585][ T29] audit: type=1400 audit(1731979549.666:306): avc: denied { ioctl } for pid=6452 comm="syz.1.165" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.558491][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 92.571736][ T9] usb 5-1: USB disconnect, device number 9 [ 92.669884][ T5914] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 92.698891][ T5914] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 92.708100][ T5914] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 92.717357][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.741064][ T5914] usb 1-1: config 0 descriptor?? [ 92.783822][ T29] audit: type=1400 audit(1731979550.276:307): avc: denied { write } for pid=6468 comm="syz.4.171" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.848394][ T6471] FAULT_INJECTION: forcing a failure. [ 92.848394][ T6471] name failslab, interval 1, probability 0, space 0, times 1 [ 92.861713][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.3.170 Not tainted 6.12.0-syzkaller #0 [ 92.868956][ T29] audit: type=1400 audit(1731979550.356:308): avc: denied { block_suspend } for pid=6468 comm="syz.4.171" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.870238][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 92.870250][ T6471] Call Trace: [ 92.870258][ T6471] [ 92.870266][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 92.912364][ T6471] should_fail_ex+0x497/0x5b0 [ 92.917044][ T6471] ? fs_reclaim_acquire+0xae/0x150 [ 92.922149][ T6471] should_failslab+0xc2/0x120 [ 92.926820][ T6471] kmem_cache_alloc_node_noprof+0x71/0x310 [ 92.932604][ T6471] ? __alloc_skb+0x2b1/0x380 [ 92.937187][ T6471] __alloc_skb+0x2b1/0x380 [ 92.941593][ T6471] ? __pfx___alloc_skb+0x10/0x10 [ 92.946508][ T6471] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 92.951621][ T6471] netlink_ack+0x164/0xb90 [ 92.956031][ T6471] netlink_rcv_skb+0x348/0x440 [ 92.960792][ T6471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.966242][ T6471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.971524][ T6471] ? netlink_deliver_tap+0x1ae/0xd90 [ 92.976803][ T6471] netlink_unicast+0x53c/0x7f0 [ 92.981553][ T6471] ? __pfx_netlink_unicast+0x10/0x10 [ 92.986824][ T6471] netlink_sendmsg+0x8b8/0xd70 [ 92.991585][ T6471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.996861][ T6471] ____sys_sendmsg+0xaaf/0xc90 [ 93.001614][ T6471] ? copy_msghdr_from_user+0x10b/0x160 [ 93.007060][ T6471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.012349][ T6471] ? __pfx___lock_acquire+0x10/0x10 [ 93.017533][ T6471] ___sys_sendmsg+0x135/0x1e0 [ 93.022207][ T6471] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.027533][ T6471] ? lock_acquire+0x2f/0xb0 [ 93.032038][ T6471] ? __fget_files+0x40/0x3f0 [ 93.036661][ T6471] ? fdget+0x176/0x210 [ 93.040730][ T6471] __sys_sendmmsg+0x1a1/0x450 [ 93.045399][ T6471] ? __pfx___sys_sendmmsg+0x10/0x10 [ 93.050585][ T6471] ? vfs_write+0x306/0x1150 [ 93.055090][ T6471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.061061][ T6471] ? fput+0x30/0x390 [ 93.064945][ T6471] ? ksys_write+0x1ad/0x260 [ 93.069429][ T6471] ? __pfx_ksys_write+0x10/0x10 [ 93.074266][ T6471] __x64_sys_sendmmsg+0x9c/0x100 [ 93.079190][ T6471] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.084400][ T6471] do_syscall_64+0xcd/0x250 [ 93.088887][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.094862][ T6471] RIP: 0033:0x7f096677e759 [ 93.099262][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.118856][ T6471] RSP: 002b:00007f09674bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.127255][ T6471] RAX: ffffffffffffffda RBX: 00007f0966935f80 RCX: 00007f096677e759 [ 93.135210][ T6471] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 93.143165][ T6471] RBP: 00007f09674bb090 R08: 0000000000000000 R09: 0000000000000000 [ 93.151129][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.159085][ T6471] R13: 0000000000000000 R14: 00007f0966935f80 R15: 00007ffe729d0238 [ 93.167049][ T6471] [ 93.186871][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.193303][ T29] audit: type=1400 audit(1731979550.676:309): avc: denied { rename } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.216381][ T29] audit: type=1400 audit(1731979550.676:310): avc: denied { unlink } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.253070][ T29] audit: type=1400 audit(1731979550.676:311): avc: denied { create } for pid=5182 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.263809][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.172'. [ 93.274665][ T29] audit: type=1400 audit(1731979550.676:312): avc: denied { getopt } for pid=6468 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.421744][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.214141][ T25] usb 1-1: USB disconnect, device number 12 [ 95.485454][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 96.374793][ T5877] IPVS: starting estimator thread 0... [ 96.521905][ T6515] IPVS: using max 47 ests per chain, 112800 per kthread [ 97.713557][ T6531] loop8: detected capacity change from 0 to 7 [ 97.761521][ T6531] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 97.786994][ T6531] loop8: partition table partially beyond EOD, truncated [ 97.922916][ T6531] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 97.957266][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 98.735977][ T6551] ubi0: attaching mtd0 [ 98.741549][ T6551] ubi0: scanning is finished [ 98.746300][ T6551] ubi0: empty MTD device detected [ 98.772292][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 98.772305][ T29] audit: type=1400 audit(1731979556.266:316): avc: denied { write } for pid=6553 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.802656][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 99.071489][ T5877] IPVS: starting estimator thread 0... [ 99.171875][ T6564] IPVS: using max 31 ests per chain, 74400 per kthread [ 99.790791][ T6571] tipc: Can't bind to reserved service type 2 [ 99.791686][ T6551] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 99.798998][ T29] audit: type=1400 audit(1731979557.276:317): avc: denied { bind } for pid=6570 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.829065][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 99.899062][ T6575] Driver unsupported XDP return value 0 on prog (id 118) dev N/A, expect packet loss! [ 99.966328][ T29] audit: type=1400 audit(1731979557.326:318): avc: denied { setopt } for pid=6565 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.986656][ T29] audit: type=1400 audit(1731979557.336:319): avc: denied { execute } for pid=6565 comm="syz.3.199" path="/dev/bsg/cpuacct.usage_percpu" dev="devtmpfs" ino=2771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 100.011494][ T29] audit: type=1400 audit(1731979557.446:320): avc: denied { setattr } for pid=6578 comm="syz.0.203" name="RAW" dev="sockfs" ino=10399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.028192][ T5877] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 100.209451][ T5877] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 100.288421][ T5877] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.414198][ T5877] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 100.563935][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.575082][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.583624][ T5877] usb 5-1: SerialNumber: syz [ 100.852288][ T29] audit: type=1326 audit(1731979558.076:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13bf7e759 code=0x7ffc0000 [ 101.279951][ T6592] block device autoloading is deprecated and will be removed. [ 101.715987][ T29] audit: type=1326 audit(1731979558.376:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb13bf7e759 code=0x7ffc0000 [ 101.814265][ T5877] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 101.821090][ T5877] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 101.856327][ T5877] usb 5-1: USB disconnect, device number 10 [ 101.956532][ T29] audit: type=1326 audit(1731979558.626:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13bf7e759 code=0x7ffc0000 [ 101.999316][ T29] audit: type=1326 audit(1731979558.626:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13bf7e759 code=0x7ffc0000 [ 102.023280][ T29] audit: type=1326 audit(1731979558.626:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb13bf7d23f code=0x7ffc0000 [ 102.337271][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 103.083767][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.306601][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.317028][ T5877] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 103.337050][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 103.346454][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.622760][ T5877] usb 2-1: Product: syz [ 103.628666][ T5877] usb 2-1: Manufacturer: syz [ 103.633364][ T5877] usb 2-1: SerialNumber: syz [ 103.840062][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 103.840077][ T29] audit: type=1400 audit(1731979561.276:349): avc: denied { accept } for pid=6627 comm="syz.2.218" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.866903][ T29] audit: type=1400 audit(1731979561.276:350): avc: denied { ioctl } for pid=6627 comm="syz.2.218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.907583][ T29] audit: type=1400 audit(1731979561.336:351): avc: denied { read write } for pid=6635 comm="syz.4.221" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.044189][ T6642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.055758][ T6640] netlink: 'syz.3.222': attribute type 11 has an invalid length. [ 104.069410][ T6642] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 104.085937][ T29] audit: type=1400 audit(1731979561.336:352): avc: denied { open } for pid=6635 comm="syz.4.221" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.189158][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.232082][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.377069][ T965] usb 2-1: USB disconnect, device number 6 [ 104.402055][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 104.407673][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 104.420614][ T5875] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 104.445507][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.462916][ T5875] usb 5-1: config 0 has no interface number 0 [ 104.494094][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 104.508022][ T5875] usb 5-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 104.564496][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.580073][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.606669][ T5875] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 104.616104][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.624709][ T5875] usb 5-1: Product: syz [ 104.629151][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 104.649434][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.658050][ T5875] usb 5-1: Manufacturer: syz [ 104.666788][ T9] usb 3-1: Product: syz [ 104.670969][ T9] usb 3-1: Manufacturer: syz [ 104.677837][ T5875] usb 5-1: SerialNumber: syz [ 104.685728][ T9] usb 3-1: SerialNumber: syz [ 104.693283][ T5875] usb 5-1: config 0 descriptor?? [ 104.705353][ T9] usb 3-1: config 0 descriptor?? [ 104.711987][ T6638] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 104.730081][ T9] appledisplay 3-1:0.0: Submitting URB failed [ 104.755890][ T9] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 104.887239][ T5875] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 104.927831][ T5875] usb 5-1: USB disconnect, device number 11 [ 104.930827][ T12] usb 5-1: Failed to submit usb control message: -71 [ 104.956410][ T29] audit: type=1400 audit(1731979562.446:353): avc: denied { connect } for pid=6627 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.979031][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 104.986705][ T12] usb 5-1: unable to get target info from device [ 104.993176][ T12] usb 5-1: could not get target info (-71) [ 105.000507][ T12] usb 5-1: could not probe fw (-71) [ 105.523021][ T29] audit: type=1400 audit(1731979563.016:354): avc: denied { create } for pid=6665 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.573194][ T29] audit: type=1400 audit(1731979563.046:355): avc: denied { write } for pid=6665 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.904142][ T29] audit: type=1400 audit(1731979563.316:356): avc: denied { ioctl } for pid=6627 comm="syz.2.218" path="socket:[11698]" dev="sockfs" ino=11698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 105.941998][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.128320][ T9] usb 3-1: USB disconnect, device number 3 [ 106.182292][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 106.191364][ T25] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 106.204592][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.212496][ T29] audit: type=1400 audit(1731979563.706:357): avc: denied { write } for pid=6679 comm="syz.3.231" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.225271][ T25] usb 2-1: Product: syz [ 106.242413][ T25] usb 2-1: Manufacturer: syz [ 106.247361][ T25] usb 2-1: SerialNumber: syz [ 106.270505][ T25] usb 2-1: config 0 descriptor?? [ 106.271205][ T29] audit: type=1400 audit(1731979563.736:358): avc: denied { ioctl } for pid=6679 comm="syz.3.231" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.402376][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 106.836482][ T6692] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.311799][ T5877] usb 1-1: device descriptor read/64, error -71 [ 107.582146][ T5877] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 107.704162][ T25] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 107.722026][ T5877] usb 1-1: device descriptor read/64, error -71 [ 108.013316][ T5877] usb usb1-port1: attempt power cycle [ 108.167835][ T25] usb 2-1: device firmware changed [ 108.193868][ T25] usb 2-1: USB disconnect, device number 7 [ 108.884204][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.893815][ T5877] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.928916][ T5877] usb 1-1: device descriptor read/8, error -71 [ 109.240148][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 109.240180][ T29] audit: type=1400 audit(1731979566.726:361): avc: denied { name_bind } for pid=6715 comm="syz.1.241" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.732243][ T29] audit: type=1400 audit(1731979566.846:362): avc: denied { shutdown } for pid=6715 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.752070][ T29] audit: type=1326 audit(1731979567.206:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 109.775377][ T29] audit: type=1326 audit(1731979567.206:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 109.798903][ T29] audit: type=1326 audit(1731979567.206:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 109.822751][ T29] audit: type=1326 audit(1731979567.276:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 109.852481][ T2146] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.887348][ T29] audit: type=1326 audit(1731979567.276:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.0.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 110.072043][ T2146] usb 3-1: Using ep0 maxpacket: 8 [ 110.879477][ T29] audit: type=1400 audit(1731979568.336:368): avc: denied { getopt } for pid=6730 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.907042][ T2146] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 110.931750][ T2146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.940515][ T2146] usb 3-1: Product: syz [ 110.944853][ T2146] usb 3-1: Manufacturer: syz [ 110.949451][ T2146] usb 3-1: SerialNumber: syz [ 110.996115][ T2146] usb 3-1: config 0 descriptor?? [ 111.115549][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 111.655429][ T2146] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.729016][ T5972] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 112.239858][ T29] audit: type=1326 audit(1731979569.716:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d517e759 code=0x7ffc0000 [ 112.270037][ T2146] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.281147][ T2146] usb 3-1: USB disconnect, device number 4 [ 112.372189][ T29] audit: type=1326 audit(1731979569.716:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.1.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d517e759 code=0x7ffc0000 [ 112.402054][ T5972] usb 5-1: device descriptor read/64, error -71 [ 112.521574][ T6773] fuse: Unknown parameter 'user_i00000000000000000000' [ 112.632052][ T965] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.652427][ T5972] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 112.803377][ T965] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 112.820208][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.822747][ T5972] usb 5-1: device descriptor read/64, error -71 [ 112.852231][ T965] usb 4-1: config 0 descriptor?? [ 112.860416][ T965] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 112.871190][ T6785] ebtables: ebtables: counters copy to user failed while replacing table [ 112.888706][ T6776] ebtables: ebtables: counters copy to user failed while replacing table [ 112.952819][ T5972] usb usb5-port1: attempt power cycle [ 113.078031][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 113.312197][ T5972] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 113.367355][ T5972] usb 5-1: device descriptor read/8, error -71 [ 113.678525][ T5972] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 113.760628][ T5972] usb 5-1: device descriptor read/8, error -71 [ 113.833105][ T965] gspca_sunplus: reg_w_riv err -71 [ 113.838293][ T965] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 113.869205][ T965] usb 4-1: USB disconnect, device number 9 [ 113.882730][ T5972] usb usb5-port1: unable to enumerate USB device [ 114.171935][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 114.356932][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.387367][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 114.503350][ T9] usb 3-1: config 4 has an invalid interface number: 111 but max is 0 [ 114.522505][ T9] usb 3-1: config 4 has no interface number 0 [ 114.543261][ T9] usb 3-1: config 4 interface 111 has no altsetting 0 [ 114.554527][ T9] usb 3-1: string descriptor 0 read error: -22 [ 114.562289][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 114.571380][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.599284][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.615631][ T9] pvrusb2: ********** [ 114.621453][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.632063][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.632503][ T9] pvrusb2: Important functionality might not be entirely working. [ 114.647566][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.659088][ T9] pvrusb2: ********** [ 114.663900][ T9] usb 3-1: selecting invalid altsetting 0 [ 114.826219][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 114.834119][ T25] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 114.855763][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.892157][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 114.892174][ T29] audit: type=1400 audit(1731979572.366:404): avc: denied { read } for pid=6821 comm="syz.4.272" path="socket:[11934]" dev="sockfs" ino=11934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.930466][ T25] usb 2-1: config 0 descriptor?? [ 114.986837][ T29] audit: type=1400 audit(1731979572.456:405): avc: denied { name_bind } for pid=6831 comm="syz.4.276" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 115.232154][ T2146] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.487144][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.513895][ T2146] usb 4-1: device descriptor read/64, error -71 [ 115.533815][ T6838] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 115.545524][ T6838] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 115.554328][ T6838] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 115.597489][ T25] asix 2-1:0.0: probe with driver asix failed with error -71 [ 115.762404][ T6841] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6841 comm=syz.0.275 [ 115.780876][ T25] usb 2-1: USB disconnect, device number 9 [ 115.789586][ T29] audit: type=1400 audit(1731979573.276:406): avc: denied { read } for pid=6834 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.855490][ T29] audit: type=1326 audit(1731979573.346:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 115.886986][ T29] audit: type=1326 audit(1731979573.346:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 115.911972][ T2146] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 115.917771][ T29] audit: type=1326 audit(1731979573.346:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 115.954196][ T29] audit: type=1326 audit(1731979573.346:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 115.983748][ T29] audit: type=1326 audit(1731979573.346:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 116.016956][ T29] audit: type=1326 audit(1731979573.346:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 116.042792][ T2146] usb 4-1: device descriptor read/64, error -71 [ 116.057658][ T29] audit: type=1326 audit(1731979573.346:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 116.072425][ T6845] loop8: detected capacity change from 0 to 7 [ 116.088905][ T6845] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 116.094873][ T6845] loop8: partition table partially beyond EOD, truncated [ 116.103005][ T6845] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 116.152656][ T2146] usb usb4-port1: attempt power cycle [ 116.192191][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.253857][ T6846] ebtables: ebtables: counters copy to user failed while replacing table [ 116.337254][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 116.813445][ T6852] ebtables: ebtables: counters copy to user failed while replacing table [ 116.871922][ T2146] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 116.880029][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 116.900982][ T25] usb 2-1: device descriptor read/all, error -71 [ 116.909331][ T2146] usb 4-1: device descriptor read/8, error -71 [ 116.969542][ T5877] usb 3-1: USB disconnect, device number 5 [ 116.985996][ T2319] pvrusb2: control-write URB failure, status=-71 [ 116.993141][ T2319] pvrusb2: Device being rendered inoperable [ 117.008482][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.096921][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.287722][ T2146] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.382339][ T2146] usb 4-1: device descriptor read/8, error -71 [ 117.502633][ T2146] usb usb4-port1: unable to enumerate USB device [ 119.453272][ T6894] sg_write: data in/out 16777180/17 bytes for SCSI command 0x0-- guessing data in; [ 119.453272][ T6894] program syz.4.288 not setting count and/or reply_len properly [ 120.061028][ T6897] overlayfs: conflicting lowerdir path [ 120.286125][ T25] IPVS: starting estimator thread 0... [ 121.330172][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 121.343162][ T6904] IPVS: using max 23 ests per chain, 55200 per kthread [ 122.599649][ T6944] loop8: detected capacity change from 0 to 7 [ 122.607445][ T6944] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.613187][ T6944] loop8: partition table partially beyond EOD, truncated [ 122.620503][ T6944] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 122.695072][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 124.480982][ T6981] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.995437][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 124.995452][ T29] audit: type=1400 audit(1731979582.486:437): avc: denied { ioctl } for pid=6983 comm="syz.3.314" path="socket:[11049]" dev="sockfs" ino=11049 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.032027][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.086128][ T6993] netlink: 56 bytes leftover after parsing attributes in process `syz.0.317'. [ 125.099554][ T6993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.262216][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 125.275541][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.282526][ T25] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 125.311392][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.544126][ T25] usb 2-1: config 0 descriptor?? [ 126.837362][ T7017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.838567][ T7017] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 126.842966][ T29] audit: type=1400 audit(1731979584.336:438): avc: denied { setopt } for pid=7015 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.989417][ T7014] tty tty3: ldisc open failed (-12), clearing slot 2 [ 127.033151][ T25] razer 0003:1532:010E.0003: failed to enable macro keys: -71 [ 127.046033][ T25] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 127.148487][ T25] usb 2-1: USB disconnect, device number 12 [ 127.774340][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 127.897182][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 127.917816][ T29] audit: type=1326 audit(1731979585.406:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.008634][ T29] audit: type=1326 audit(1731979585.406:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.063164][ T29] audit: type=1326 audit(1731979585.436:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.086623][ T29] audit: type=1326 audit(1731979585.446:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.111831][ T29] audit: type=1326 audit(1731979585.446:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.137070][ T29] audit: type=1326 audit(1731979585.446:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.249209][ T29] audit: type=1326 audit(1731979585.446:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.522991][ T29] audit: type=1326 audit(1731979585.446:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 128.534970][ T7018] syz.3.324: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.631687][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.3.324 Not tainted 6.12.0-syzkaller #0 [ 128.640228][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 128.650296][ T7018] Call Trace: [ 128.653584][ T7018] [ 128.655850][ T7057] vxcan2: entered allmulticast mode [ 128.656505][ T7018] dump_stack_lvl+0x16c/0x1f0 [ 128.666365][ T7018] warn_alloc+0x24d/0x3a0 [ 128.670720][ T7018] ? __pfx_warn_alloc+0x10/0x10 [ 128.675599][ T7018] ? __get_vm_area_node+0x190/0x2d0 [ 128.680799][ T7018] ? __get_vm_area_node+0x1bc/0x2d0 [ 128.685996][ T7018] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 128.691991][ T7018] ? kasan_save_stack+0x42/0x60 [ 128.696861][ T7018] ? xt_alloc_entry_offsets+0x3a/0x60 [ 128.702258][ T7018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.708604][ T7018] ? trace_kmalloc+0x2d/0xe0 [ 128.713216][ T7018] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 128.718949][ T7018] ? xt_alloc_entry_offsets+0x3a/0x60 [ 128.724345][ T7018] __kvmalloc_node_noprof+0x14f/0x1a0 [ 128.729731][ T7018] ? xt_alloc_entry_offsets+0x3a/0x60 [ 128.735121][ T7018] xt_alloc_entry_offsets+0x3a/0x60 [ 128.740336][ T7018] translate_table+0x22e/0x1710 [ 128.745210][ T7018] ? __might_fault+0x13b/0x190 [ 128.749988][ T7018] ? __pfx_lock_release+0x10/0x10 [ 128.755020][ T7018] ? trace_lock_acquire+0x14a/0x1d0 [ 128.760236][ T7018] ? __pfx_translate_table+0x10/0x10 [ 128.765535][ T7018] ? __might_fault+0xe3/0x190 [ 128.770236][ T7018] do_ipt_set_ctl+0x605/0xc30 [ 128.774957][ T7018] ? trace_contention_end+0xea/0x140 [ 128.780255][ T7018] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 128.785474][ T7018] ? __pfx___mutex_lock+0x10/0x10 [ 128.790511][ T7018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.796514][ T7018] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 128.802517][ T7018] nf_setsockopt+0x8a/0xf0 [ 128.806952][ T7018] ip_setsockopt+0xcb/0xf0 [ 128.811388][ T7018] tcp_setsockopt+0xa4/0x100 [ 128.815997][ T7018] smc_setsockopt+0x1b4/0xa00 [ 128.820706][ T7018] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 128.826620][ T7018] ? __pfx_smc_setsockopt+0x10/0x10 [ 128.831838][ T7018] ? selinux_socket_setsockopt+0x6a/0x80 [ 128.837511][ T7018] ? __pfx_smc_setsockopt+0x10/0x10 [ 128.842726][ T7018] do_sock_setsockopt+0x222/0x480 [ 128.847765][ T7018] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 128.853343][ T7018] ? fdget+0x176/0x210 [ 128.857441][ T7018] __sys_setsockopt+0x1a4/0x270 [ 128.862320][ T7018] ? __pfx___sys_setsockopt+0x10/0x10 [ 128.867715][ T7018] ? rcu_is_watching+0x12/0xc0 [ 128.872525][ T7018] __x64_sys_setsockopt+0xbd/0x160 [ 128.877649][ T7018] ? do_syscall_64+0x91/0x250 [ 128.882331][ T7018] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.887548][ T7018] do_syscall_64+0xcd/0x250 [ 128.892060][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.897970][ T7018] RIP: 0033:0x7f096677e759 [ 128.902394][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.922021][ T7018] RSP: 002b:00007f096749a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.930539][ T7018] RAX: ffffffffffffffda RBX: 00007f0966936058 RCX: 00007f096677e759 [ 128.938507][ T7018] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 128.946491][ T7018] RBP: 00007f09667f175e R08: 0000000000000298 R09: 0000000000000000 [ 128.954506][ T7018] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 128.962486][ T7018] R13: 0000000000000000 R14: 00007f0966936058 R15: 00007ffe729d0238 [ 128.963482][ T7062] ebtables: ebtables: counters copy to user failed while replacing table [ 128.970458][ T7018] [ 129.022063][ T7018] Mem-Info: [ 129.025300][ T7018] active_anon:10566 inactive_anon:0 isolated_anon:0 [ 129.025300][ T7018] active_file:1797 inactive_file:38484 isolated_file:0 [ 129.025300][ T7018] unevictable:768 dirty:340 writeback:0 [ 129.025300][ T7018] slab_reclaimable:10892 slab_unreclaimable:100073 [ 129.025300][ T7018] mapped:26905 shmem:6911 pagetables:842 [ 129.025300][ T7018] sec_pagetables:0 bounce:0 [ 129.025300][ T7018] kernel_misc_reclaimable:0 [ 129.025300][ T7018] free:1328635 free_pcp:856 free_cma:0 [ 129.085586][ T7064] ebtables: ebtables: counters copy to user failed while replacing table [ 129.146900][ T7018] Node 0 active_anon:33764kB inactive_anon:0kB active_file:7188kB inactive_file:153864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107620kB dirty:1360kB writeback:0kB shmem:17608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11324kB pagetables:3368kB sec_pagetables:0kB all_unreclaimable? no [ 129.182148][ T7018] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.212683][ T7018] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.239941][ T7018] lowmem_reserve[]: 0 2461 2461 0 0 [ 129.245636][ T7018] Node 0 DMA32 free:1422800kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22136kB inactive_anon:0kB active_file:7188kB inactive_file:153536kB unevictable:1536kB writepending:1360kB present:3129332kB managed:2549172kB mlocked:0kB bounce:0kB free_pcp:684kB local_pcp:684kB free_cma:0kB [ 129.276481][ T7018] lowmem_reserve[]: 0 0 0 0 0 [ 129.282021][ T7018] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 129.309445][ T7018] lowmem_reserve[]: 0 0 0 0 0 [ 129.314467][ T7018] Node 1 Normal free:3900560kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.343876][ T7018] lowmem_reserve[]: 0 0 0 0 0 [ 129.348773][ T7018] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.361611][ T7018] Node 0 DMA32: 181*4kB (UM) 185*8kB (ME) 180*16kB (UME) 231*32kB (UME) 56*64kB (UME) 51*128kB (UME) 24*256kB (UME) 13*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 336*4096kB (UM) = 1421884kB [ 129.381103][ T7018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.393415][ T7018] Node 1 Normal: 208*4kB (UE) 48*8kB (UME) 33*16kB (UME) 222*32kB (UME) 108*64kB (UME) 30*128kB (UME) 14*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 2*2048kB (U) 943*4096kB (M) = 3900560kB [ 129.412177][ T7018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.421736][ T7018] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 129.431183][ T7018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.440899][ T7018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.450321][ T7018] 43067 total pagecache pages [ 129.455081][ T7018] 0 pages in swap cache [ 129.459233][ T7018] Free swap = 124984kB [ 129.463574][ T7018] Total swap = 124996kB [ 129.468790][ T7018] 2097051 pages RAM [ 129.472677][ T7018] 0 pages HighMem/MovableOnly [ 129.477452][ T7018] 428036 pages reserved [ 129.481629][ T7018] 0 pages cma reserved [ 129.985566][ T7092] xt_nfacct: accounting object `syz0' does not exists [ 130.279031][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 130.279047][ T29] audit: type=1400 audit(1731979587.766:472): avc: denied { write } for pid=7097 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.371198][ T7100] overlayfs: failed to resolve './file0': -2 [ 131.074543][ T7104] loop8: detected capacity change from 0 to 7 [ 131.125601][ T7104] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 131.146149][ T7104] loop8: partition table partially beyond EOD, truncated [ 131.170257][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 131.453694][ T7104] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 131.742446][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 131.846322][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.025300][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.036411][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.120866][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.314341][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.342782][ T8] usb 4-1: SerialNumber: syz [ 132.544677][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.553462][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.542762][ T8] usb 4-1: 0:2 : does not exist [ 133.548011][ T8] usb 4-1: unit 255 not found! [ 134.072474][ T8] usb 4-1: USB disconnect, device number 14 [ 134.247126][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 134.262601][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 134.414552][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.467904][ T7166] FAULT_INJECTION: forcing a failure. [ 134.467904][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 134.480887][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.4.363 Not tainted 6.12.0-syzkaller #0 [ 134.489482][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 134.499534][ T7166] Call Trace: [ 134.502820][ T7166] [ 134.505739][ T7166] dump_stack_lvl+0x16c/0x1f0 [ 134.510400][ T7166] should_fail_ex+0x497/0x5b0 [ 134.515068][ T7166] should_failslab+0xc2/0x120 [ 134.519721][ T7166] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 134.525080][ T7166] ? skb_clone+0x190/0x3f0 [ 134.529476][ T7166] skb_clone+0x190/0x3f0 [ 134.533697][ T7166] netlink_deliver_tap+0xab3/0xd90 [ 134.538833][ T7166] netlink_unicast+0x5e1/0x7f0 [ 134.543586][ T7166] ? __pfx_netlink_unicast+0x10/0x10 [ 134.548857][ T7166] netlink_sendmsg+0x8b8/0xd70 [ 134.553604][ T7166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.558886][ T7166] ____sys_sendmsg+0xaaf/0xc90 [ 134.563632][ T7166] ? copy_msghdr_from_user+0x10b/0x160 [ 134.569083][ T7166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.574363][ T7166] ? __pfx___lock_acquire+0x10/0x10 [ 134.579537][ T7166] ___sys_sendmsg+0x135/0x1e0 [ 134.584205][ T7166] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.589403][ T7166] ? lock_acquire+0x2f/0xb0 [ 134.593898][ T7166] ? __fget_files+0x40/0x3f0 [ 134.598487][ T7166] ? fdget+0x176/0x210 [ 134.602547][ T7166] __sys_sendmmsg+0x1a1/0x450 [ 134.607202][ T7166] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.612376][ T7166] ? vfs_write+0x306/0x1150 [ 134.616873][ T7166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.622846][ T7166] ? fput+0x30/0x390 [ 134.626730][ T7166] ? ksys_write+0x1ad/0x260 [ 134.631205][ T7166] ? __pfx_ksys_write+0x10/0x10 [ 134.636032][ T7166] __x64_sys_sendmmsg+0x9c/0x100 [ 134.640957][ T7166] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.646147][ T7166] do_syscall_64+0xcd/0x250 [ 134.650637][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.656522][ T7166] RIP: 0033:0x7f06cfd7e759 [ 134.660910][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.680675][ T7166] RSP: 002b:00007f06d0b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.689062][ T7166] RAX: ffffffffffffffda RBX: 00007f06cff36130 RCX: 00007f06cfd7e759 [ 134.697011][ T7166] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000006 [ 134.704970][ T7166] RBP: 00007f06d0b75090 R08: 0000000000000000 R09: 0000000000000000 [ 134.712917][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.720860][ T7166] R13: 0000000000000000 R14: 00007f06cff36130 R15: 00007ffdd48734e8 [ 134.728813][ T7166] [ 135.495420][ T29] audit: type=1400 audit(1731979592.936:473): avc: denied { ioctl } for pid=7170 comm="syz.4.368" path="socket:[12470]" dev="sockfs" ino=12470 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 135.551259][ T7180] loop8: detected capacity change from 0 to 7 [ 135.601153][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.618294][ T7180] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 135.632130][ T7180] loop8: partition table partially beyond EOD, truncated [ 135.650646][ T29] audit: type=1400 audit(1731979593.136:474): avc: denied { mount } for pid=7181 comm="syz.1.371" name="/" dev="autofs" ino=13441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 135.680012][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.700130][ T7182] overlay: filesystem on ./bus not supported [ 135.729431][ T7182] netlink: 'syz.1.371': attribute type 3 has an invalid length. [ 135.741966][ T29] audit: type=1400 audit(1731979593.186:475): avc: denied { mounton } for pid=7181 comm="syz.1.371" path="/67/file1/bus" dev="autofs" ino=13442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 135.947896][ T7180] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 135.991370][ T29] audit: type=1400 audit(1731979593.476:476): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 136.013150][ T5877] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 136.713684][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 136.752436][ T29] audit: type=1400 audit(1731979594.246:477): avc: denied { search } for pid=5182 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.833262][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 137.291936][ T965] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.422335][ T2146] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.485108][ T965] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 137.494315][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.502556][ T965] usb 1-1: Product: syz [ 137.506900][ T965] usb 1-1: Manufacturer: syz [ 137.511982][ T965] usb 1-1: SerialNumber: syz [ 137.534278][ T965] usb 1-1: config 0 descriptor?? [ 137.592109][ T2146] usb 3-1: Using ep0 maxpacket: 8 [ 137.632048][ T5877] usb 5-1: device descriptor read/64, error -71 [ 137.652854][ T2146] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.701187][ T2146] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 137.867506][ T2146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 137.878697][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 138.073145][ T2146] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.092135][ T2146] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 138.101667][ T2146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.172162][ T7217] sg_write: data in/out 16777180/17 bytes for SCSI command 0x0-- guessing data in; [ 138.172162][ T7217] program syz.1.382 not setting count and/or reply_len properly [ 138.308178][ T2146] usb 3-1: Product: syz [ 138.312481][ T2146] usb 3-1: Manufacturer: syz [ 138.317088][ T2146] usb 3-1: SerialNumber: syz [ 138.329236][ T2146] usb 3-1: config 0 descriptor?? [ 138.337870][ T2146] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 138.382680][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.393278][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.437648][ T5877] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.452907][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.469607][ T5877] usb 5-1: SerialNumber: syz [ 138.549395][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.558026][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.571266][ T7191] x_tables: duplicate underflow at hook 2 [ 138.579127][ T2146] usb 3-1: USB disconnect, device number 6 [ 138.733784][ T5877] usb 5-1: 0:2 : does not exist [ 138.756651][ T5877] usb 5-1: unit 255 not found! [ 138.824707][ T965] usb 1-1: Firmware version (0.0) predates our first public release. [ 138.830310][ T5877] usb 5-1: USB disconnect, device number 17 [ 138.832876][ T965] usb 1-1: Please update to version 0.2 or newer [ 139.113329][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.181486][ T5875] usb 1-1: USB disconnect, device number 17 [ 141.887809][ T7265] program syz.2.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.014810][ T29] audit: type=1400 audit(1731979599.106:478): avc: denied { append } for pid=7256 comm="syz.2.396" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.325669][ T7269] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.916520][ T965] IPVS: starting estimator thread 0... [ 145.202170][ T7290] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.258440][ T7302] loop8: detected capacity change from 0 to 7 [ 146.284576][ T7302] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 146.289891][ T7302] loop8: partition table partially beyond EOD, truncated [ 146.300554][ T7302] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 146.334148][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 146.875196][ T5875] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.978652][ T7313] overlayfs: failed to resolve './file0': -2 [ 148.710131][ T5972] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.813025][ T5875] usb 1-1: device descriptor read/all, error -71 [ 148.861909][ T5972] usb 4-1: device descriptor read/64, error -71 [ 149.201946][ T5972] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 149.352059][ T5972] usb 4-1: device descriptor read/64, error -71 [ 149.522658][ T5972] usb usb4-port1: attempt power cycle [ 149.614523][ T7340] capability: warning: `syz.0.416' uses 32-bit capabilities (legacy support in use) [ 149.786882][ T29] audit: type=1400 audit(1731979607.246:479): avc: denied { getopt } for pid=7335 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.889821][ T29] audit: type=1400 audit(1731979607.246:480): avc: denied { ioctl } for pid=7335 comm="syz.0.416" path="socket:[13805]" dev="sockfs" ino=13805 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.916776][ T29] audit: type=1400 audit(1731979607.246:481): avc: denied { lock } for pid=7335 comm="syz.0.416" path="socket:[13805]" dev="sockfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.685940][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 151.309535][ T29] audit: type=1400 audit(1731979608.786:482): avc: denied { getopt } for pid=7360 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.593457][ T2146] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 151.697202][ T7366] vivid-000: disconnect [ 151.708153][ T29] audit: type=1400 audit(1731979609.196:483): avc: denied { connect } for pid=7363 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.809651][ T2146] usb 5-1: Using ep0 maxpacket: 32 [ 152.142700][ T2146] usb 5-1: New USB device found, idVendor=0421, idProduct=9a40, bcdDevice=65.5d [ 152.152979][ T2146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.161053][ T2146] usb 5-1: Product: syz [ 152.206131][ T2146] usb 5-1: Manufacturer: syz [ 152.216134][ T2146] usb 5-1: SerialNumber: syz [ 152.234362][ T2146] usb 5-1: config 0 descriptor?? [ 152.344333][ T2146] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 152.353458][ T7363] vivid-000: reconnect [ 152.498072][ T29] audit: type=1400 audit(1731979609.936:484): avc: denied { create } for pid=7367 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.629145][ T29] audit: type=1400 audit(1731979609.946:485): avc: denied { ioctl } for pid=7367 comm="syz.1.424" path="socket:[12828]" dev="sockfs" ino=12828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.927359][ T2146] usb 5-1: USB disconnect, device number 18 [ 153.021995][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.035202][ T29] audit: type=1400 audit(1731979609.946:486): avc: denied { setopt } for pid=7367 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.154392][ T29] audit: type=1326 audit(1731979610.646:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 153.182567][ T29] audit: type=1326 audit(1731979610.646:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7373 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 153.206254][ T8] usb 2-1: device descriptor read/64, error -71 [ 153.451904][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.698665][ T8] usb 2-1: device descriptor read/64, error -71 [ 154.067794][ T8] usb usb2-port1: attempt power cycle [ 154.575043][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.642946][ T8] usb 2-1: device descriptor read/8, error -71 [ 155.016665][ T5972] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 155.188534][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 155.243208][ T5972] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.253713][ T5972] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.275566][ T7411] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.719973][ T8] usb 2-1: device descriptor read/8, error -71 [ 155.776609][ T5972] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.786019][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.795326][ T5972] usb 4-1: SerialNumber: syz [ 155.964091][ T8] usb usb2-port1: unable to enumerate USB device [ 156.344064][ T5972] usb 4-1: 0:2 : does not exist [ 156.349378][ T5972] usb 4-1: unit 255 not found! [ 156.379596][ T5972] usb 4-1: USB disconnect, device number 18 [ 156.763540][ T7209] udevd[7209]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.815615][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 156.815630][ T29] audit: type=1400 audit(1731979870.312:640): avc: denied { bind } for pid=7430 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.082183][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 157.244805][ T9] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 157.256976][ T9] usb 2-1: config 0 has no interface number 0 [ 157.264152][ T9] usb 2-1: config 0 interface 17 has no altsetting 0 [ 157.271062][ T9] usb 2-1: New USB device found, idVendor=19d2, idProduct=1148, bcdDevice=5c.71 [ 157.287419][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.306211][ T9] usb 2-1: config 0 descriptor?? [ 157.516808][ T9] usb 2-1: string descriptor 0 read error: -71 [ 157.529235][ T9] usb 2-1: USB disconnect, device number 17 [ 157.552090][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 157.702354][ T5875] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 157.718108][ T5875] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 157.727374][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 157.736934][ T5875] usb 1-1: Product: syz [ 157.742003][ T5875] usb 1-1: Manufacturer: syz [ 157.746665][ T5875] usb 1-1: SerialNumber: syz [ 157.753095][ T5875] usb 1-1: config 0 descriptor?? [ 157.766433][ T5875] ims_pcu 1-1:0.0: Zero length descriptor [ 157.773560][ T5875] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 157.983185][ T5972] usb 1-1: USB disconnect, device number 20 [ 158.025313][ T29] audit: type=1400 audit(1731979871.522:641): avc: denied { setattr } for pid=7444 comm="syz.3.445" name="NETLINK" dev="sockfs" ino=13081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.080294][ T29] audit: type=1326 audit(1731979871.562:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 158.741639][ T29] audit: type=1326 audit(1731979871.562:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 158.982883][ T7461] overlayfs: failed to resolve './file0': -2 [ 159.391901][ T5972] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 159.453789][ T29] audit: type=1326 audit(1731979871.562:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 159.497999][ T29] audit: type=1400 audit(1731979871.652:645): avc: denied { connect } for pid=7444 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.582087][ T5972] usb 3-1: device descriptor read/64, error -71 [ 159.632874][ T29] audit: type=1400 audit(1731979872.972:646): avc: denied { setopt } for pid=7465 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.992913][ T5972] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 160.076105][ T29] audit: type=1326 audit(1731979873.572:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 160.177067][ T29] audit: type=1326 audit(1731979873.592:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 160.226071][ T29] audit: type=1326 audit(1731979873.592:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a37e759 code=0x7ffc0000 [ 160.465372][ T5972] usb 3-1: device descriptor read/64, error -71 [ 160.585855][ T5972] usb usb3-port1: attempt power cycle [ 161.030604][ T5972] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 161.052790][ T5972] usb 3-1: device descriptor read/8, error -71 [ 161.268783][ T7503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.462'. [ 161.304272][ T5972] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 161.316747][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 161.321939][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.342435][ T5972] usb 3-1: device descriptor read/8, error -71 [ 161.342548][ T7508] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 161.488679][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 161.502891][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.519978][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.534160][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.544681][ T5972] usb usb3-port1: unable to enumerate USB device [ 161.945315][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.957661][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.971611][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.980840][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.988916][ T9] usb 5-1: Manufacturer: syz [ 162.002500][ T9] usb 5-1: config 0 descriptor?? [ 162.486973][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 162.742907][ T9] rc_core: IR keymap rc-hauppauge not found [ 162.750000][ T9] Registered IR keymap rc-empty [ 162.755120][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 162.775863][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 162.775878][ T29] audit: type=1326 audit(1731979876.272:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 162.782041][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 162.802413][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 162.825705][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 162.840928][ T29] audit: type=1326 audit(1731979876.272:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 162.841959][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 162.869436][ T29] audit: type=1326 audit(1731979876.292:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 162.891924][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 162.901402][ T29] audit: type=1326 audit(1731979876.292:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 162.925830][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 162.946783][ T29] audit: type=1326 audit(1731979876.292:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096677e759 code=0x7ffc0000 [ 162.971551][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.011984][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.043583][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.082013][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.133658][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.175656][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.215615][ T29] audit: type=1400 audit(1731979876.712:659): avc: denied { bind } for pid=7539 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.275144][ T29] audit: type=1400 audit(1731979876.712:660): avc: denied { name_bind } for pid=7539 comm="syz.2.472" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 163.299746][ T29] audit: type=1400 audit(1731979876.712:661): avc: denied { node_bind } for pid=7539 comm="syz.2.472" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 163.323220][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.348694][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 163.404971][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 163.420599][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.470'. [ 163.432803][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 163.452670][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 163.471276][ T7545] FAULT_INJECTION: forcing a failure. [ 163.471276][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.478737][ T9] usb 5-1: USB disconnect, device number 19 [ 163.513709][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.0.473 Not tainted 6.12.0-syzkaller #0 [ 163.522250][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 163.532316][ T7545] Call Trace: [ 163.535589][ T7545] [ 163.538505][ T7545] dump_stack_lvl+0x16c/0x1f0 [ 163.543182][ T7545] should_fail_ex+0x497/0x5b0 [ 163.547855][ T7545] _copy_from_user+0x2e/0xd0 [ 163.552436][ T7545] __sys_bpf+0x21c/0x49a0 [ 163.556755][ T7545] ? ksys_write+0x21e/0x260 [ 163.561244][ T7545] ? reacquire_held_locks+0x470/0x4c0 [ 163.566612][ T7545] ? __pfx___sys_bpf+0x10/0x10 [ 163.571369][ T7545] ? vfs_write+0x306/0x1150 [ 163.575880][ T7545] ? __mutex_unlock_slowpath+0x164/0x650 [ 163.581508][ T7545] ? fput+0x30/0x390 [ 163.585476][ T7545] ? ksys_write+0x1ad/0x260 [ 163.589969][ T7545] ? __pfx_ksys_write+0x10/0x10 [ 163.594806][ T7545] __x64_sys_bpf+0x78/0xc0 [ 163.599206][ T7545] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.604394][ T7545] do_syscall_64+0xcd/0x250 [ 163.608882][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.614767][ T7545] RIP: 0033:0x7fd77a37e759 [ 163.619162][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.638751][ T7545] RSP: 002b:00007fd77b0e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.647147][ T7545] RAX: ffffffffffffffda RBX: 00007fd77a536058 RCX: 00007fd77a37e759 [ 163.655099][ T7545] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 163.663063][ T7545] RBP: 00007fd77b0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.671016][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.678971][ T7545] R13: 0000000000000000 R14: 00007fd77a536058 R15: 00007ffe9cffb698 [ 163.686940][ T7545] [ 163.690099][ T5875] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.793141][ T8] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 163.817496][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.833410][ T8] usb 2-1: config 0 descriptor?? [ 163.841204][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 163.868006][ T5875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.891830][ T5875] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.912093][ T5875] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.921217][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.932613][ T7540] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 163.946217][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.040512][ T8] gspca_sunplus: reg_w_riv err -71 [ 164.058166][ T8] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 164.107714][ T8] usb 2-1: USB disconnect, device number 18 [ 164.203320][ T5874] usb 3-1: USB disconnect, device number 11 [ 164.541841][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 164.803383][ T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 164.812622][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.875285][ T8] usb 1-1: config 0 descriptor?? [ 165.242292][ T29] audit: type=1326 audit(1731979878.722:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 165.476006][ T29] audit: type=1326 audit(1731979878.722:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7563 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cfd7e759 code=0x7ffc0000 [ 166.424500][ T7582] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.435624][ T7582] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.873617][ T7582] syz.1.485 (7582): drop_caches: 2 [ 166.882613][ T7582] syz.1.485 (7582): drop_caches: 2 [ 166.884513][ T7585] syz.1.485 (7585): drop_caches: 2 [ 167.824774][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 167.824790][ T29] audit: type=1400 audit(1731979881.322:668): avc: denied { read } for pid=7551 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.624930][ T7600] process 'syz.2.489' launched './file0' with NULL argv: empty string added [ 168.639823][ T29] audit: type=1400 audit(1731979882.122:669): avc: denied { execute } for pid=7598 comm="syz.2.489" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.815985][ T29] audit: type=1400 audit(1731979882.232:670): avc: denied { execute_no_trans } for pid=7598 comm="syz.2.489" path="/79/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.085381][ T29] audit: type=1400 audit(1731979883.572:671): avc: denied { relabelfrom } for pid=7619 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.108849][ T29] audit: type=1400 audit(1731979883.582:672): avc: denied { relabelto } for pid=7619 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 170.321995][ T7623] overlayfs: failed to resolve './file0': -2 [ 171.042989][ T5874] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 171.132025][ T5875] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.271860][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 171.278506][ T5874] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 171.286989][ T5874] usb 2-1: config 0 has no interface number 0 [ 171.293539][ T5874] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.313599][ T5874] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 171.322881][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.330876][ T5874] usb 2-1: Product: syz [ 171.353431][ T5875] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.373939][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.472883][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.484213][ T5874] usb 2-1: Manufacturer: syz [ 171.498576][ T5874] usb 2-1: SerialNumber: syz [ 171.514980][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.716494][ T5874] usb 2-1: config 0 descriptor?? [ 171.752147][ T5875] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.752211][ T7633] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.762296][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.781989][ T5875] usb 4-1: Product: syz [ 171.791900][ T5875] usb 4-1: Manufacturer: syz [ 171.806548][ T5874] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 171.816935][ T5874] em28xx 2-1:0.132: Video interface 132 found: bulk [ 171.854838][ T5875] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 172.142145][ T5875] usb 4-1: USB disconnect, device number 19 [ 172.317075][ T29] audit: type=1400 audit(1731979885.777:673): avc: denied { read } for pid=7651 comm="syz.2.507" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.738989][ T8] usb 1-1: Cannot set autoneg [ 172.744936][ T8] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -110 [ 172.758745][ T5874] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 172.770022][ T29] audit: type=1400 audit(1731979885.777:674): avc: denied { open } for pid=7651 comm="syz.2.507" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 172.795139][ T29] audit: type=1400 audit(1731979885.787:675): avc: denied { create } for pid=7651 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.007518][ T29] audit: type=1400 audit(1731979886.497:676): avc: denied { setopt } for pid=7659 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.046169][ T5875] usb 1-1: USB disconnect, device number 21 [ 174.793770][ T5874] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 174.806881][ T5874] em28xx 2-1:0.132: board has no eeprom [ 174.809303][ T29] audit: type=1400 audit(1731979888.237:677): avc: denied { setopt } for pid=7670 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.199767][ T7684] overlayfs: failed to resolve './file0': -2 [ 175.785766][ T29] audit: type=1400 audit(1731979888.257:678): avc: denied { bind } for pid=7632 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 175.804988][ T29] audit: type=1400 audit(1731979888.267:679): avc: denied { name_bind } for pid=7632 comm="syz.1.500" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 175.825720][ T29] audit: type=1400 audit(1731979888.267:680): avc: denied { node_bind } for pid=7632 comm="syz.1.500" saddr=::ffff:224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 176.056163][ T5874] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 176.064404][ T5874] em28xx 2-1:0.132: analog set to bulk mode. [ 176.072139][ T5875] em28xx 2-1:0.132: Registering V4L2 extension [ 176.176145][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 176.186018][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 176.202607][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 176.414182][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 176.657145][ T7701] Bluetooth: MGMT ver 1.23 [ 179.229675][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 179.241569][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 179.280942][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 179.295642][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 179.534917][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 179.551102][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 179.634607][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 179.668569][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 179.694714][ T5875] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 179.721886][ T5875] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 179.766832][ T5875] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 179.797232][ T5875] em28xx 2-1:0.132: No AC97 audio processor [ 179.877960][ T5875] usb 2-1: Decoder not found [ 179.896190][ T5875] em28xx 2-1:0.132: failed to create media graph [ 179.902605][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 179.902626][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 179.911951][ T29] audit: type=1400 audit(1731979893.387:681): avc: denied { connect } for pid=7717 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.954226][ T5875] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 180.015539][ T7725] ================================================================== [ 180.023614][ T7725] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 180.031058][ T7725] Read of size 8 at addr ffff8880329f8738 by task v4l_id/7725 [ 180.038509][ T7725] [ 180.040826][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: v4l_id Not tainted 6.12.0-syzkaller #0 [ 180.049062][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.059108][ T7725] Call Trace: [ 180.062365][ T7725] [ 180.065278][ T7725] dump_stack_lvl+0x116/0x1f0 [ 180.069946][ T7725] print_report+0xc3/0x620 [ 180.074375][ T7725] ? __virt_addr_valid+0x5e/0x590 [ 180.079409][ T7725] ? __phys_addr+0xc6/0x150 [ 180.083915][ T7725] kasan_report+0xd9/0x110 [ 180.088336][ T7725] ? v4l2_fh_init+0x27d/0x2c0 [ 180.093017][ T7725] ? v4l2_fh_init+0x27d/0x2c0 [ 180.097703][ T7725] v4l2_fh_init+0x27d/0x2c0 [ 180.102214][ T7725] v4l2_fh_open+0x83/0xc0 [ 180.106546][ T7725] em28xx_v4l2_open+0x250/0x7e0 [ 180.111404][ T7725] v4l2_open+0x222/0x490 [ 180.115649][ T7725] ? __pfx_v4l2_open+0x10/0x10 [ 180.120411][ T7725] chrdev_open+0x237/0x6a0 [ 180.124827][ T7725] ? __pfx_chrdev_open+0x10/0x10 [ 180.129765][ T7725] ? security_file_open+0x62a/0x9d0 [ 180.134967][ T7725] do_dentry_open+0x6ca/0x1530 [ 180.139728][ T7725] ? __pfx_chrdev_open+0x10/0x10 [ 180.144667][ T7725] ? inode_permission+0xdd/0x5f0 [ 180.149606][ T7725] vfs_open+0x82/0x3f0 [ 180.153674][ T7725] ? may_open+0x1f2/0x400 [ 180.158009][ T7725] path_openat+0x1e6a/0x2d60 [ 180.162607][ T7725] ? __pfx_path_openat+0x10/0x10 [ 180.167540][ T7725] ? __pfx___lock_acquire+0x10/0x10 [ 180.172740][ T7725] do_filp_open+0x1dc/0x430 [ 180.177237][ T7725] ? __pfx_do_filp_open+0x10/0x10 [ 180.182255][ T7725] ? find_held_lock+0x2d/0x110 [ 180.187030][ T7725] ? _raw_spin_unlock+0x28/0x50 [ 180.191887][ T7725] ? alloc_fd+0x2d7/0x6c0 [ 180.196222][ T7725] do_sys_openat2+0x17a/0x1e0 [ 180.200903][ T7725] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.206102][ T7725] ? do_user_addr_fault+0xe50/0x13f0 [ 180.211419][ T7725] ? __pfx_lock_release+0x10/0x10 [ 180.216442][ T7725] ? trace_lock_acquire+0x14a/0x1d0 [ 180.221639][ T7725] __x64_sys_openat+0x175/0x210 [ 180.226501][ T7725] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.231880][ T7725] ? do_user_addr_fault+0x83d/0x13f0 [ 180.237259][ T7725] do_syscall_64+0xcd/0x250 [ 180.241767][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.247681][ T7725] RIP: 0033:0x7fd92e5169a4 [ 180.252095][ T7725] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 180.271709][ T7725] RSP: 002b:00007ffc3738afa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.280124][ T7725] RAX: ffffffffffffffda RBX: 00007ffc3738b1b8 RCX: 00007fd92e5169a4 [ 180.288094][ T7725] RDX: 0000000000000000 RSI: 00007ffc3738bf1b RDI: 00000000ffffff9c [ 180.296820][ T7725] RBP: 00007ffc3738bf1b R08: 0000000000000000 R09: 0000000000000000 [ 180.304793][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.312767][ T7725] R13: 00007ffc3738b1d0 R14: 000055c7e3fe8670 R15: 00007fd92e987a80 [ 180.320828][ T7725] [ 180.323848][ T7725] [ 180.326161][ T7725] Allocated by task 5875: [ 180.330479][ T7725] kasan_save_stack+0x33/0x60 [ 180.335158][ T7725] kasan_save_track+0x14/0x30 [ 180.339833][ T7725] __kasan_kmalloc+0xaa/0xb0 [ 180.344423][ T7725] em28xx_v4l2_init+0x114/0x4050 [ 180.349363][ T7725] em28xx_init_extension+0x137/0x200 [ 180.354655][ T7725] request_module_async+0x61/0x70 [ 180.359674][ T7725] process_one_work+0x9c5/0x1ba0 [ 180.364607][ T7725] worker_thread+0x6c8/0xf00 [ 180.369190][ T7725] kthread+0x2c1/0x3a0 [ 180.373256][ T7725] ret_from_fork+0x45/0x80 [ 180.377665][ T7725] ret_from_fork_asm+0x1a/0x30 [ 180.382436][ T7725] [ 180.384761][ T7725] Freed by task 5875: [ 180.388736][ T7725] kasan_save_stack+0x33/0x60 [ 180.393414][ T7725] kasan_save_track+0x14/0x30 [ 180.398092][ T7725] kasan_save_free_info+0x3b/0x60 [ 180.403129][ T7725] __kasan_slab_free+0x51/0x70 [ 180.407910][ T7725] kfree+0x14f/0x4b0 [ 180.411799][ T7725] em28xx_v4l2_init+0x22a4/0x4050 [ 180.416821][ T7725] em28xx_init_extension+0x137/0x200 [ 180.422108][ T7725] request_module_async+0x61/0x70 [ 180.427129][ T7725] process_one_work+0x9c5/0x1ba0 [ 180.432064][ T7725] worker_thread+0x6c8/0xf00 [ 180.436646][ T7725] kthread+0x2c1/0x3a0 [ 180.440713][ T7725] ret_from_fork+0x45/0x80 [ 180.445128][ T7725] ret_from_fork_asm+0x1a/0x30 [ 180.449892][ T7725] [ 180.452203][ T7725] The buggy address belongs to the object at ffff8880329f8000 [ 180.452203][ T7725] which belongs to the cache kmalloc-8k of size 8192 [ 180.466269][ T7725] The buggy address is located 1848 bytes inside of [ 180.466269][ T7725] freed 8192-byte region [ffff8880329f8000, ffff8880329fa000) [ 180.480235][ T7725] [ 180.482552][ T7725] The buggy address belongs to the physical page: [ 180.488949][ T7725] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x329f8 [ 180.497704][ T7725] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 180.506281][ T7725] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 180.514253][ T7725] page_type: f5(slab) [ 180.518241][ T7725] raw: 00fff00000000040 ffff88801b042280 ffffea000156e000 dead000000000005 [ 180.526820][ T7725] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 180.535432][ T7725] head: 00fff00000000040 ffff88801b042280 ffffea000156e000 dead000000000005 [ 180.544107][ T7725] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 180.552794][ T7725] head: 00fff00000000003 ffffea0000ca7e01 ffffffffffffffff 0000000000000000 [ 180.561445][ T7725] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 180.570090][ T7725] page dumped because: kasan: bad access detected [ 180.576478][ T7725] page_owner tracks the page as allocated [ 180.582167][ T7725] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5508, tgid 5508 (dhcpcd-run-hook), ts 26276810971, free_ts 26164901451 [ 180.602983][ T7725] post_alloc_hook+0x2d1/0x350 [ 180.607731][ T7725] get_page_from_freelist+0xfce/0x2f80 [ 180.613168][ T7725] __alloc_pages_noprof+0x223/0x25a0 [ 180.618432][ T7725] alloc_pages_mpol_noprof+0x2c9/0x610 [ 180.623885][ T7725] new_slab+0x2c9/0x410 [ 180.628016][ T7725] ___slab_alloc+0xdac/0x1880 [ 180.632669][ T7725] __slab_alloc.constprop.0+0x56/0xb0 [ 180.638016][ T7725] __kmalloc_cache_noprof+0x2b4/0x300 [ 180.643366][ T7725] tomoyo_init_log+0xcb3/0x2170 [ 180.648195][ T7725] tomoyo_supervisor+0x30c/0xea0 [ 180.653112][ T7725] tomoyo_env_perm+0x193/0x210 [ 180.657857][ T7725] tomoyo_find_next_domain+0xe8e/0x2070 [ 180.663391][ T7725] tomoyo_bprm_check_security+0x12b/0x1d0 [ 180.669092][ T7725] security_bprm_check+0x1b9/0x1e0 [ 180.674183][ T7725] bprm_execve+0x642/0x1960 [ 180.678670][ T7725] do_execveat_common.isra.0+0x4f1/0x630 [ 180.684286][ T7725] page last free pid 5498 tgid 5498 stack trace: [ 180.690583][ T7725] free_unref_page+0x661/0x1080 [ 180.695411][ T7725] __put_partials+0x14c/0x170 [ 180.700065][ T7725] qlist_free_all+0x4e/0x120 [ 180.704638][ T7725] kasan_quarantine_reduce+0x192/0x1e0 [ 180.710073][ T7725] __kasan_slab_alloc+0x69/0x90 [ 180.714902][ T7725] kmem_cache_alloc_node_noprof+0x153/0x310 [ 180.720772][ T7725] copy_process+0x4c1/0x8cb0 [ 180.725343][ T7725] kernel_clone+0xfd/0x960 [ 180.729739][ T7725] __do_sys_clone+0xba/0x100 [ 180.734310][ T7725] do_syscall_64+0xcd/0x250 [ 180.738792][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.744669][ T7725] [ 180.746967][ T7725] Memory state around the buggy address: [ 180.752659][ T7725] ffff8880329f8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.760695][ T7725] ffff8880329f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.768731][ T7725] >ffff8880329f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.776765][ T7725] ^ [ 180.782631][ T7725] ffff8880329f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.790683][ T7725] ffff8880329f8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.798716][ T7725] ================================================================== [ 180.809286][ T5875] em28xx 2-1:0.132: Remote control support is not available for this card. [ 180.838751][ T7725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 180.845971][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: v4l_id Not tainted 6.12.0-syzkaller #0 [ 180.854207][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.864257][ T7725] Call Trace: [ 180.867530][ T7725] [ 180.870450][ T7725] dump_stack_lvl+0x3d/0x1f0 [ 180.875042][ T7725] panic+0x71d/0x800 [ 180.878940][ T7725] ? __pfx_panic+0x10/0x10 [ 180.883362][ T7725] ? irqentry_exit+0x3b/0x90 [ 180.887944][ T7725] ? lockdep_hardirqs_on+0x7c/0x110 [ 180.893148][ T7725] ? preempt_schedule_thunk+0x1a/0x30 [ 180.898516][ T7725] ? preempt_schedule_common+0x44/0xc0 [ 180.903979][ T7725] ? check_panic_on_warn+0x1f/0xb0 [ 180.909096][ T7725] check_panic_on_warn+0xab/0xb0 [ 180.914040][ T7725] end_report+0x117/0x180 [ 180.918369][ T7725] kasan_report+0xe9/0x110 [ 180.922782][ T7725] ? v4l2_fh_init+0x27d/0x2c0 [ 180.927456][ T7725] ? v4l2_fh_init+0x27d/0x2c0 [ 180.932132][ T7725] v4l2_fh_init+0x27d/0x2c0 [ 180.936632][ T7725] v4l2_fh_open+0x83/0xc0 [ 180.940956][ T7725] em28xx_v4l2_open+0x250/0x7e0 [ 180.945812][ T7725] v4l2_open+0x222/0x490 [ 180.950051][ T7725] ? __pfx_v4l2_open+0x10/0x10 [ 180.954811][ T7725] chrdev_open+0x237/0x6a0 [ 180.959221][ T7725] ? __pfx_chrdev_open+0x10/0x10 [ 180.964152][ T7725] ? security_file_open+0x62a/0x9d0 [ 180.969352][ T7725] do_dentry_open+0x6ca/0x1530 [ 180.974114][ T7725] ? __pfx_chrdev_open+0x10/0x10 [ 180.979048][ T7725] ? inode_permission+0xdd/0x5f0 [ 180.983984][ T7725] vfs_open+0x82/0x3f0 [ 180.988045][ T7725] ? may_open+0x1f2/0x400 [ 180.992379][ T7725] path_openat+0x1e6a/0x2d60 [ 180.996967][ T7725] ? __pfx_path_openat+0x10/0x10 [ 181.001897][ T7725] ? __pfx___lock_acquire+0x10/0x10 [ 181.007088][ T7725] do_filp_open+0x1dc/0x430 [ 181.011584][ T7725] ? __pfx_do_filp_open+0x10/0x10 [ 181.016601][ T7725] ? find_held_lock+0x2d/0x110 [ 181.021377][ T7725] ? _raw_spin_unlock+0x28/0x50 [ 181.026230][ T7725] ? alloc_fd+0x2d7/0x6c0 [ 181.030561][ T7725] do_sys_openat2+0x17a/0x1e0 [ 181.035238][ T7725] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.040432][ T7725] ? do_user_addr_fault+0xe50/0x13f0 [ 181.045719][ T7725] ? __pfx_lock_release+0x10/0x10 [ 181.050735][ T7725] ? trace_lock_acquire+0x14a/0x1d0 [ 181.055934][ T7725] __x64_sys_openat+0x175/0x210 [ 181.060782][ T7725] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.066154][ T7725] ? do_user_addr_fault+0x83d/0x13f0 [ 181.071444][ T7725] do_syscall_64+0xcd/0x250 [ 181.075942][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.081839][ T7725] RIP: 0033:0x7fd92e5169a4 [ 181.086247][ T7725] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 181.105858][ T7725] RSP: 002b:00007ffc3738afa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.114273][ T7725] RAX: ffffffffffffffda RBX: 00007ffc3738b1b8 RCX: 00007fd92e5169a4 [ 181.122242][ T7725] RDX: 0000000000000000 RSI: 00007ffc3738bf1b RDI: 00000000ffffff9c [ 181.130294][ T7725] RBP: 00007ffc3738bf1b R08: 0000000000000000 R09: 0000000000000000 [ 181.138260][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.146223][ T7725] R13: 00007ffc3738b1d0 R14: 000055c7e3fe8670 R15: 00007fd92e987a80 [ 181.154193][ T7725] [ 181.157401][ T7725] Kernel Offset: disabled [ 181.161722][ T7725] Rebooting in 86400 seconds..