last executing test programs: 14.10394508s ago: executing program 4 (id=496): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_emit_ethernet(0xa2, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb86dd607f00ef006c3c00fe8000000000000000000000000000bb00000000000000000000000000000001000004000000000000000000006490"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000106"], 0xb8}}, 0x0) (fail_nth: 9) 11.27374932s ago: executing program 4 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) lseek(r8, 0x2004, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000008b012ef937ba1c4579473347dcb872a9ed0868c885587f23d8999c33b0509e5e21849880ba3c5a9456ce6d77ebf7fe2535e86659", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf252100000009001f0070687931000000000a0001007770616e33000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r8, &(0x7f0000002540)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="1f027d893a03abbb835314f701aff0d38abe7184462a19faa310d85484e92c32a988c31dfbc96d4f5ec428b7c1718fcaa6fa5f0d529fc7862b6bcd3d0cd3821624647d4913d3f71334578db8f883040bf85a862ebe4f9a5389c4a4fd0e3e0483208fe39b442e0df660af8bc7c9d790d4673f13dfb75156961a47095587f4830caea4c46f85b5e5d7da55d1b0dc7a432c7d26f098f7239ad37d9c996b3c5471fffb503c17d46764b9f4dc015e7e33c1c8363c324ba717a1c759d2aed7ab53d36cfc2c441e4630e575d0329488c2ca7c7bec5ff05968c6c1870ca6", 0xda}, {&(0x7f00000004c0)="3dc3c4038711432c3d607ca6c9419d9d7a7413f10f217119a4628d47f1f0e1b3cdf84d4c105a913a91eb62302e303e069c1371ab597cf160dfe8b5d63b432f09739b6a64b5298faa33960e622fea66bafcd6bab58a966aa90dee6f2b209f196004f508cab53bed744a12f5e4f3314f5d1bd3ae75f180d5a054353a", 0x7b}, {&(0x7f0000000540)="e943cf84dccfb62994f821878bcfdc2fcbd18e6488cffee0f089868e4e55256a6ce8ba99c356c53a2f2706afa2102fe1d2e9bd99296b233913d3d68527608a0c2094fa881766a4f5230f3eacfb45719de0d6af8b53d5ac94d69137d09a6f5e", 0x5f}], 0x3, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0051050544ee8873ef0000001c00000008d840ee0422576073000000010000000200000078b7280768243694e136c73b13a910946ad8bd7d80fc9acf19b82ca449c7cb693af67d30bc6af56e94ca43ea6b3dc5884b58e7a84b69e812dc1fa131bbfb9395ba4e819934ad071c5834154a37b02c4cac9b836b5b2b249484335e5a4ef57d0ff2b21ff8c6e51150", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r9, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x20040040}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a40)="6aab8cc853f9dd14fd260c2f1473fa7719836743410567e6c19ddbe1a2a368b04efc415365ac", 0x26}, {&(0x7f0000000a80)="87507ca8939b0a4b0c5eb829521708ad090a6f2e6e4eeda476f9a95acf1cb9841381bc4c27bd090fd3e4c46d92aef8712ebae99879e70ae948c1ebea5215564c9aae97add64835e5eaac4f03536f3dcccc3a30c4d5ad64469c0651e16e610825516487c11e722c45427a3f01d62a7915a13f80db55d84b58e6b46020a6475fa3a5d72034eb7d528c90f3266cff17dc684c02bb40c106704ef71339944d5406b8c3b31bba2279316e4f911abe307eca8e0103b67e498e4c7d6c5fb1c6c35590e7cd906e3319126be7a6bea024456c2ce2bc9faeb4b44a685792fd18d88b23a0c10a0703c78ed43664cf604be8f818a4853b7e678e545b6da664d2833ae69a686d4a1868a57eb4ad68d2978022ddb369b8b4982cd243ea5703f6ba2c2a1a6b46e804b249b26ae4f38ba049675ab7e35bbd3d781f2c38c4dd56be1856ae449a4971d68dafc6ed6aeeec5404bda830a3a668e6a38955c3955c62233685a2ac7c2467d8a7d191ca4e2f9b55e5a37d7f434499a30249925ddd0fce6a47dfdb9a3caa16a431c2ec53011e66dddb2c53363a3ff8126da17a116b2ba8ffe708cdfd3a39786a87a16f152f9c37a0dd88b7f82feaff306d0fd85e2b1d12084beaf893541a41289ea8a1b396acad109813c4a1e5a4ceba5948b42768a93e58f20adc988d2848ad5ecb93892c641da3cb9147a43fb3c04e493406ff0980dd4a6d8d985c6638a5db938e1802b1ac57b5464fa83f18e21d2b80332d9ee8ebc1ce5adad4823da6bc9737ab39fcd7d6842958120e921ac935385623ea4f904f9e18689d6037cce182ca6d8c9327afdd61bd025a5c162b5be74cb830522e9db8eb2ea86a6af99f762eb8624b1df1cde168c1dc60d7b9b5292d7247d53fe0b8f3a595ff3f739a38c8571a604f704f66ece3b32fb5728a93add9d18dc93cd45eeb6627c9c57e698d86d9a6aa1a78c2475116544eeb5b3d3b0705b39a4b761c7a76393ef2bff61800553b63b82e2d4b8b70608d484cc1230d6abc81a979fd79ffef926170b8ba0b00884aa6db8d333179f539327e5f0af375f5754b689f8c99f97a5b31dd5fde9baaf77673690457803177d06e652bbe1626f43aa99111d8a74e2e18b6660c12fdcfffb0ae99b44c400ad0917f6f7e2040af1f625c45ec6084642f688141319d3133dcd33d3c1eb2be85f51efe63519579dc511c0132fce1ef94554133413c40f77e98a500b55dae07dc058a83afcb481e62582bc7e5358f0848d1d723ed067a42ff9d2de0bcfa4024d34493effc59f756f6f605d03a8c87342dbdabfb09ddf90cd40483678053b6a6c34a406be571f62210f56c7d30ffdd0e1faa744dd9f098d761a3dfad842b16c54c16cc1fe26f3e3a5c99f93eac4a8b0b5a59dba76c23e6fdce230eed4396cdff9866cc6e8ec3eff54bf99bb848559f9e5d21f4213a4c5d452cee60fcedd8b4bc36311a38b994570e86aa27e3834262829d43801b585ebf1231681dd85133c56e53fc3eb0c92badf8a29eb909f64edbb5ea4928848a4b17ad69f8ccc127d9758ce882d3331289d5dde4f32a1d72431ebb3f62408b8cfbadfcb2812cb08f4afe929beb0a8782e97b58d99cc32633e3fb97f39dd4e45d834e85c51fef62731e3166deccfa2f36fc99950c35d68404a649d073715cfc8c5d91c33878c1725dceb336128e7aad5666f32568bc503b97d382545faf78e8d6506b95983faecfc84ef1abef886b50adb0aa4d008e152782c40bceb8f2abcb5f55097703b4b4598d1d9af2f73d0c0a5ddfae79aba7f49cb7806a2beaff8d95340d2d7c7b249f45d2c018e7f07376420d9689984c32a1fa4863f52f33706f0cf7b0ac5864c10de012b18dedf3fed0c8681a81cc7dede9c7524fadc55de55eaf698337ae81ed4495972a8054aa247ca7e3943e8da3de443560b4726f0644b3b093f12580d45b679421c9c34f330fd0a5b74a12d4f0ec2abec267f24dc1b4a1719495e74b57894a5ddb7f240667841d44637ec4fda4287c354fd3a39696464e3c61d42dcc71e07312a2b664cec69270bf4e22d76d155479f36e3ebd488c53c2bbea975d72bd0ebc069945db5e5aea3227b31e6eceeec40693045756397cc6ab595727f3aaeb2e6fd121c2e8de124ce2a82456ac006d0884efe51552c8afa33916e856eb827d2e0e75ef6e272e752a6a73072a2f3d71e8a1d045afce389264c15033a56dea3b2bdf26265e294245ff8f517c36eb09f25d00ba2a9ebce747cea53dec4f174ff08cdb2d5d204f452b2a54ec72597982a71ca58deb37c9dd769f46b6f340d96b7b04da310e1571a9a0217d6d45ebffab2afc3eebd6834b6193b42b2904775d443c0ec57cf187d6454a00656b9c428e89ea119341abb6350f4f8f09a78f7b2c2ef671e9a30fc45f8c186a7961c536b112bf9cfde555c172a331061efdbbfc1e89ef4205093d6dd1593397db44a565f0360e8134efe995dccefc2ecf90ab02a333eddd267ab235be340676f6e255f0bd00dfc1b273776a935c506f486e06b51ae4782e7be2bd994c64572a50907cdc7b543ece6aa54972c386ddee1340c372bfc87d20b76a1e365bbdc0fdb56e00ddf26e79515262ea322de134f1cbeea786adeebda7b68ed8c590b42554d9031c9ac9c2f7e52893adc84b3944b9bf88faa0d5f4a74762784d031fb951ece2534c7cd9259e1dfe23950344a41a102e751ef243636d38dc519c63713f5f637d94438643db3225d518cc9f4d332ba8afceefd3f00f772fa72b6b2b0bdf33cb36ec3cce08d00c3aa64958823466d0cc1b0d52ebb6866d27301faf1810a6b301acd548ced00f761a00c7702fbb920dd50970da8cb148c059de106f0e9b44531972320e6fff485b6a13764d55cb557a55b357b683bc2ee052d3542adc3959eec12e9791dd232f39f221ea207ae1d9b819e63a27d94e3962fad504eb24d11d701015c75e3141ad8c83b3bcc27470d7846c570d96f488dd9ce8227325d311402e1699ef4553861bf742969ca32a8d40575f6ac159081c47f1055b1802d4f7c164af2cc7b229de47dd4917a7281b3bb11e123d15f8ba6614517e442581be468aa4a962abab0afb36c06df307ef594bb90d05a169e45bd534680e5233381be4785e7f9522286856982c1dbc92623509827e79822a2d163984d4e76bb55ec92bd4884e3a60f85196e183ac1207a3fb79a45adf2bb04ca6120c1e3c97f24f467505937241a6b268169b59539a8ac6a41debd35cc002ae3a9df5b9450d223aade2e4bff4b6798e67957ccbde3828169c806a5f0dbfea93b06712713efc5f57f1d31570945e8ba018105dba97e9be99c8f2cd4b3fa0c0c902652f8bb3fd65f181a9764e7a4eadfd53f4679e4e5c9adeb93062af77859fa56037ff4972245335ef8fe56aa8efe69dd55c5b165caba48ac55bd4af77efef3a72f25b6795b336de83d9fcafd4813ef3eb28df65a4e02f57afa07a7b7098093158f9b9dd77fbcbcd800d700de708bd04ad1dcd1990a1fffc845529321e078fc2fd5dfddf8f95099681ee5b6f60cdcfa6063cd8a2d30a00b9a36e45e5b6c358523cb503195ffdaf6a143ad808d8736e3690814431f35463919d7aa0ad42413079a2788dca017e06b6d28451b70a48fdd0b60aaa30608e65a46e13b3b1da01086445ed03a4fcfde7412742346b0ce307b863bfdd2d72066d8f1384e1eb7a0438175260d0b698a759cd340c45e6be72af2fc94ac1999f294bbbbdd623cb01d20430ba82d5ba72a3867717131f23dd0e167dc99071f26b5d45ce17c947fe51e317c0ec0fbe56eb6097c85be2cce5c53e4e217b207ede1a5176ab4e5b5d6806e117327bc8c4c88817060368efce91145fde5cb874f0fb74149ff65bc065d077a862c621f40fd375a9a3d4f346b9d85fe5bab8a0453a46f737bd25d2320d6eac76c5890c1b8d56e6f88cbeff2d13ef47616e624e7276710c67ed08b6ce48dda94157ca0cc5ea5284278d7e7616d91f43656999d03aa5aa8793e13cbf5402ca393576130a3bde929b15ed2fd0439b01eb3bf95afb2670afb703a0e2bbcb9d1396bc30aeca6fdd1ac46556b4041817532c20b6a12deeba2451236efdea20e0a1a7c020e9cdbf0306a6c264f89da29617827b616cc6374db3f29ab923f781732ce3c7a1c6e4dc02b0eecbb537a22c39db5ddc832fd149c9563faafa60bb282d0c8585085186aaac32dc8042f754c5a9d8b7b4de6a27e367122522f6c033ca9e4516b4053e94b7bd6320c74a8f85402b0dbf5e4638227c0b6c7e1933692fc8f631c84e1f2dabfcaccffa2d1541fecee1e1efea6ab0b1ec813137154f3b5f7aa883885093c75c0750ed6dd7346d1626db2fe6674605e8d9df7af4842312d39f48f727d22866f6cd1934409029622a1bc3639808db7c4fe2deb19c9bce909d162851c4438d350ffe40d0ad676eb51c94d3758705f3c0300fa1d16f27f6f32fa5c65a945d9a581abbb9bba258d940813bd7ebeaa490d7f478ef63950c67d30b505370198adfa65ac9db4ab1d9dce0662ced7f0fea800586c10974b65c5bc8bb8317b3df95f4d68fa10062fd98772e6d000fec7e34b5d19b47434c5b283b00ce7890abaabbe498edfc9dd9b5ab990dd352ee7c542d31cfce05aa29c065966158cc3f7cf0d71f3247e1d3f6cc16e28f4bfbadbb6f17709b4e29dac72170d9639c5c36e8c2061ce57975b509493d18b82a2e0bbde367ad4b3b4c03c4020cce8f2e7bf752d8482d67faf7ac5423985817588d77a7dce18bc9ac3114116bfdb6fb95388970da5e92e898dc38c4aa295acebeb0066fb332a6dca885704c389a70248364727db7dfcfff861a6125f9fda66c0908c509bffdf66a93bf66404e839499958406102060b89a13d30a8a79823b3717a7523eac12e5dacdcb79924d52bc97ab033f833c3f984a7464dcced90d105fe0d3d743d3963722c44ac551866c96614e4da2b7ac9f1e83909f4eea0ec020d8a2648f12260b28abd03bb090746ecf918f477fd144f6f415abd0b699f5759d398d92a89c597406f07c113712a0c7769db8790732407868f645fa5bb74764672d294534ed9ca17144c9e088da2c3ffe4c83c9742271e9a54203f9b0238c4c9c53d05989b6b11e8050e405632b6d570188df4ebe3ff6fc0f36c559010e3e813eb4c97719795a440e43d5190e6fdaf964ba4866338ec046fa02e3f973dd246d07864b5e9458e4fee4b7d9659455a91c0f7a0c51ffecdbe864ed38adf4a6d178e6bfb459e79e19fcdd077df185a7264813d84d3ff916823a48f4d90d9c26f9bb07d82b7f79c7892f00c95a15354bf6d0003f05a62e6ba16dee51de7d0568a95fac179c26398d5c3d7613fb7f03e3f775932c29f5d5a89d05b28275ab856269504f35bd7cc68fbcc4fb7ad7b5456df5503e59bca54588324d4a96927c7435ab17f5e49ec7658667f549043e8947b7df826435a5baf1dea9813a5f4066ba3d86c54dd19f7145c84fa3b87448ad22718923adf4200fd67a8ed051c731b7fb30424fe64c838c0a2e5666985d5fa020227e17e5db100060db80772a88b98a2358adf3b28fe8532316f56d92354fe6bd76eaf2fd360242b16ca01265dfaf86b9b8ee0233680883f9dcce66b1101e4cbe60a487737cf73ec9c1fcace476e4b6b52fd08016d18953afac492816f07a495ad4c16ae08b3d9dfc31a6582e86e3bb3b2e489d3d0a47cab0ee6897d8821144bd54ec3df8429ba3375aee14d889e605097c6532adabd47b3481bb82e0804eee3ed3b426e8fb39fd0002cf550f6fdeb3831e7a05", 0x1000}, {&(0x7f0000001a80)="93e9191e69700fe057cdfaa142784431407f11258678daa38d735578005b079935cc17ead22d0a9af1f62eac", 0x2c}, {&(0x7f0000001ac0)="181e4389be43b86445fe4717e7265c3b86c8ab30ee95c1cdd969ca9bf7b9ed9ec58bbf4aa6bf5ddd58bb576886e6450e2045eefd7df2bbf36941654f97ab3f35585c7595ff9baf952f000a4ac28645cd8f8bf9638a20634ae413b12710ef8a13b7c6c3efd9dd9c76691f5afde1e33c3df410b823060befb98ff2269029353b5f37bce270f3442bf9e9ee277e41c9f02bead1f6e12f8b1008ec7711e54b5717495c46b78bd6cd84102f05eb8eccd2fcad9b83415156cc1c557b6cac30c4790bfbeacd92b6bb0377b98eea15388fbcfe147ab3c58931d01e698514fe7a", 0xdc}, {&(0x7f0000001bc0)="b5c55aff8a870dbb4e8ce6c077594e5a156a6bcedc4e9c997459a6706bcb0b2d84fd6fde6a1d9d55a2b52053607ffb8b1558dfaeff4db9be90198b6b3c68257f19e0cc51dd", 0x45}, {&(0x7f0000001c40)="534a4d9e76b3ed9d8b662b112640f0c39c669f7337ebeb1bebc81223987fb751fc5a237eec14e57ddfa69d", 0x2b}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x4000081}}, {{&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="6f473cb277e46be260560125c14347172c858c7f75496821608fcc93493aacb55290f5b8a2c5bcf0262680796323d69d78b6010031f099edfe1ea391f4f3078667f6c41258e17d545d299d439daae5421844acadc9e66f47ee480cab184840b82b32cfcce63c36adb9ca6729daf4eb3846f2b52095290e6aacc1ebee50512b426cc196fee927e309f01c56f68a6959bacaab012e8896f41cf5aac1fecd7c3bad6496", 0xa2}], 0x1, &(0x7f0000002080)=[@rights={{0x28, 0x1, 0x1, [r8, r10, r9, r0, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r13}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="d302ce5a0b0f9833309f0785df6096e2286bba811c682e11d178b046c7110820f1098accddc89251ed87dc47cd83fb16ced0d3016c3000681c49b81c4fd615d7cab99ab666b53acae47e242f8f181f9c1bbda8d04733251254e90f22834063c987a6b8c64dd273cf1971c25d78f5f57fb64a65e14266e666ba92a8f2af3c775958a82964a42115dae1d557c3d8d14ad80a0551d2d608d9b0199bc10b630c9b396c63aa958d7e24ff2031bd8ce5f92288b9197f0790c8d99dc6ee6ad8b1a93500000000004a7e9623523335f14bd062b2ee9144f60609af37779427964e0a6eb71f03499ac352ac0b", 0xe8}, {&(0x7f0000002200)="b8c80e7b0a92ffe4d9c04a8274b309bdd5cf1d60528019ed2a81f301045da4070d6e16daf25a38bc9487370e85ad8c188428fb62cdfa80e06754d25a2946edf7dcb49b5d51e778e2d168e2ff8795d59f6c125018a1c6d70a16b64dc30a6142018cd77cdeae726641dd1a813b0c40ba9c1d1273cb9f36a1cfd400aa4489301a289f496c240b2b082ccbcfa982e69f5b0a", 0x90}, {&(0x7f00000022c0)="78f0acd63e5c4568507f28443e3b3eadd217ac9aca314b3dbdcce0", 0x1b}, {&(0x7f0000002300)="65013514c06236a6bbf29b0f5c86f5c7f4e51bb170f1c5b7bbc227bb9e03092cd8b5094bf8152dd1dceb76861ad7a49f5fc7612017a9be172953cc8bdbd03b9f702c4109d6c417764cb3ff98dc2fac9159da320021ac6e387fa1cba593221de67529d72b6c63682d13730dcddb4c0097f0c6d2cc97dc6c38a27f7287b84e34435523ddf814f153af284fc93388d4245a8f39cb150fc6b2ce5dd20922e4fe32aeddbc67f13d0849b6a1631fee701f7a6136d0d11947c7cadc61ad91ed3de8", 0xbe}, {&(0x7f00000023c0)="441c5b6b02c6d06031727730169b56493e59bab7ce57ea1f1a6b9e0d4fabe52a5cc2dcb754cd00ce9e038ef5378e3b5817a0585042b866c8ffe96de8575610b3eef39a701a322f255d45debee94d919c2e938701483f7d7337edb1de2c59f63325e684cdbaaae20691d8ff86579ec0938eefd430773a5d60f50a12a1d88075e792ed747401b9e19a69b69613818902ed439f1122488674ee41a97f4f27948dd4bfc198bbb35561e8bc1924fe3c4b818b963eb20d41ba2c05e4bde6d8e09dd26ef8a082e6329e779cae1aacf41cf9", 0xce}, {&(0x7f0000000640)="986395a4a18b71b9672f5a596eb48c094aafeae42d8c929c6601b2f84db0616985985a065f04", 0x26}], 0x6}}], 0x4, 0x8000) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000000c0)=r4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 10.145450415s ago: executing program 4 (id=511): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000002380)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004890) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4000, 0x0, @mcast2, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 7.47375579s ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000001440)=0x8, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f00000000c0)=""/167, 0xa7}, {0x0}], 0x3, 0x14a, 0x806) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x40) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r7}) keyctl$read(0x2, r6, &(0x7f00000003c0)=""/4096, 0x1000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000000000005000084040000000e000000000000008c03bb6b8032000000ed00000044000000080000000000000003f51f00010000000300000051a10000070000000500000009000000002e2e002e"], &(0x7f00000001c0)=""/12, 0x66, 0xc, 0x1, 0x4, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) 6.236692155s ago: executing program 3 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 6.124887182s ago: executing program 1 (id=519): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf25787c732874776f66697368290000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000817e0000000000000000000000f4ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d536da800000000000000000000000000000000000000000000000400000020"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) 6.042237332s ago: executing program 2 (id=520): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000040)={0x0, &(0x7f0000000400)=[@wr_crn={0x46, 0x20, {0x3, 0x1}}, @set_irq_handler={0xbe, 0x20, {0xb5, 0x2}}, @set_irq_handler={0xbe, 0x20, {0x9, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x7f}}, @wr_crn={0x46, 0x20, {0x3, 0x40000000000004}}, @wr_drn={0x6e, 0x20, {0x1, 0x2}}, @in_dx={0x82, 0x20, {0x957b, 0x2}}, @code={0xa, 0x6b, {"65450f2005b9440900000f32c4237bf053bca30fc76900c7442400b7970dd7c74424029d925b39c7442406000000000f01142447fdc4822505a91a0000006543d9fa363ef20f2cbf0000c0feb9800000c00f3235008000000f30"}}, @cpuid={0x14, 0x18, {0x6, 0x6}}, @wrmsr={0x1e, 0x20, {0xc0011031, 0xb}}, @set_irq_handler={0xbe, 0x20, {0xf7, 0x2}}, @wr_drn={0x6e, 0x20, {0x3, 0xfffffffffffffff7}}, @wrmsr={0x1e, 0x20, {0xadf, 0x2}}], 0x1e3}) poll(&(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x4, "bbaca5114198a94c633075260000001300", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000e00)=0x4) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x40000000015, 0x6, 0x559) sendmsg(r7, &(0x7f0000000300)={&(0x7f0000000040)=@caif, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10", @ANYBLOB="b0ccafdd2e33573aee97395bdbf906114969b9671ba9e915cb230ee13419fd02a92ddcd83a52933988cf85fd76822993eb3c1fc3d07d0b2ba82f6808cc81b431c260600acf8721cd3c3aed61048783c3b24792241bec8329ab36f183c4fe43502fe32a1f8a023d17287bd57617825c332e10fe1fa5b58fe1cd60191c1d590da15ccd7f771b"], 0x20}, 0x0) syz_open_dev$vcsn(0x0, 0x400, 0x80) recvfrom$rose(r7, &(0x7f0000000100), 0x0, 0x40000000, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r9, 0x4b4a, 0x10000000000004) recvfrom$inet6(r8, &(0x7f0000000080)=""/57, 0x39, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 6.007276524s ago: executing program 3 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) lseek(r8, 0x2004, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000008b012ef937ba1c4579473347dcb872a9ed0868c885587f23d8999c33b0509e5e21849880ba3c5a9456ce6d77ebf7fe2535e86659", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf252100000009001f0070687931000000000a0001007770616e33000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r8, &(0x7f0000002540)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="1f027d893a03abbb835314f701aff0d38abe7184462a19faa310d85484e92c32a988c31dfbc96d4f5ec428b7c1718fcaa6fa5f0d529fc7862b6bcd3d0cd3821624647d4913d3f71334578db8f883040bf85a862ebe4f9a5389c4a4fd0e3e0483208fe39b442e0df660af8bc7c9d790d4673f13dfb75156961a47095587f4830caea4c46f85b5e5d7da55d1b0dc7a432c7d26f098f7239ad37d9c996b3c5471fffb503c17d46764b9f4dc015e7e33c1c8363c324ba717a1c759d2aed7ab53d36cfc2c441e4630e575d0329488c2ca7c7bec5ff05968c6c1870ca6", 0xda}, {&(0x7f00000004c0)="3dc3c4038711432c3d607ca6c9419d9d7a7413f10f217119a4628d47f1f0e1b3cdf84d4c105a913a91eb62302e303e069c1371ab597cf160dfe8b5d63b432f09739b6a64b5298faa33960e622fea66bafcd6bab58a966aa90dee6f2b209f196004f508cab53bed744a12f5e4f3314f5d1bd3ae75f180d5a054353a", 0x7b}, {&(0x7f0000000540)="e943cf84dccfb62994f821878bcfdc2fcbd18e6488cffee0f089868e4e55256a6ce8ba99c356c53a2f2706afa2102fe1d2e9bd99296b233913d3d68527608a0c2094fa881766a4f5230f3eacfb45719de0d6af8b53d5ac94d69137d09a6f5e", 0x5f}], 0x3, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0051050544ee8873ef0000001c00000008d840ee0422576073000000010000000200000078b7280768243694e136c73b13a910946ad8bd7d80fc9acf19b82ca449c7cb693af67d30bc6af56e94ca43ea6b3dc5884b58e7a84b69e812dc1fa131bbfb9395ba4e819934ad071c5834154a37b02c4cac9b836b5b2b249484335e5a4ef57d0ff2b21ff8c6e51150", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r9, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x20040040}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a40)="6aab8cc853f9dd14fd260c2f1473fa7719836743410567e6c19ddbe1a2a368b04efc415365ac", 0x26}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="93e9191e69700fe057cdfaa142784431407f11258678daa38d735578005b079935cc17ead22d0a9af1f62eac", 0x2c}, {&(0x7f0000001ac0)="181e4389be43b86445fe4717e7265c3b86c8ab30ee95c1cdd969ca9bf7b9ed9ec58bbf4aa6bf5ddd58bb576886e6450e2045eefd7df2bbf36941654f97ab3f35585c7595ff9baf952f000a4ac28645cd8f8bf9638a20634ae413b12710ef8a13b7c6c3efd9dd9c76691f5afde1e33c3df410b823060befb98ff2269029353b5f37bce270f3442bf9e9ee277e41c9f02bead1f6e12f8b1008ec7711e54b5717495c46b78bd6cd84102f05eb8eccd2fcad9b83415156cc1c557b6cac30c4790bfbeacd92b6bb0377b98eea15388fbcfe147ab3c58931d01e698514fe7a", 0xdc}, {&(0x7f0000001bc0)="b5c55aff8a870dbb4e8ce6c077594e5a156a6bcedc4e9c997459a6706bcb0b2d84fd6fde6a1d9d55a2b52053607ffb8b1558dfaeff4db9be90198b6b3c68257f19e0cc51dd", 0x45}, {&(0x7f0000001c40)="534a4d9e76b3ed9d8b662b112640f0c39c669f7337ebeb1bebc81223987fb751fc5a237eec14e57ddfa69d", 0x2b}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x4000081}}, {{&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="6f473cb277e46be260560125c14347172c858c7f75496821608fcc93493aacb55290f5b8a2c5bcf0262680796323d69d78b6010031f099edfe1ea391f4f3078667f6c41258e17d545d299d439daae5421844acadc9e66f47ee480cab184840b82b32cfcce63c36adb9ca6729daf4eb3846f2b52095290e6aacc1ebee50512b426cc196fee927e309f01c56f68a6959bacaab012e8896f41cf5aac1fecd7c3bad6496", 0xa2}], 0x1, &(0x7f0000002080)=[@rights={{0x28, 0x1, 0x1, [r8, r10, r9, r0, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r13}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="d302ce5a0b0f9833309f0785df6096e2286bba811c682e11d178b046c7110820f1098accddc89251ed87dc47cd83fb16ced0d3016c3000681c49b81c4fd615d7cab99ab666b53acae47e242f8f181f9c1bbda8d04733251254e90f22834063c987a6b8c64dd273cf1971c25d78f5f57fb64a65e14266e666ba92a8f2af3c775958a82964a42115dae1d557c3d8d14ad80a0551d2d608d9b0199bc10b630c9b396c63aa958d7e24ff2031bd8ce5f92288b9197f0790c8d99dc6ee6ad8b1a93500000000004a7e9623523335f14bd062b2ee9144f60609af37779427964e0a6eb71f03499ac352ac0b", 0xe8}, {&(0x7f0000002200)="b8c80e7b0a92ffe4d9c04a8274b309bdd5cf1d60528019ed2a81f301045da4070d6e16daf25a38bc9487370e85ad8c188428fb62cdfa80e06754d25a2946edf7dcb49b5d51e778e2d168e2ff8795d59f6c125018a1c6d70a16b64dc30a6142018cd77cdeae726641dd1a813b0c40ba9c1d1273cb9f36a1cfd400aa4489301a289f496c240b2b082ccbcfa982e69f5b0a", 0x90}, {&(0x7f00000022c0)="78f0acd63e5c4568507f28443e3b3eadd217ac9aca314b3dbdcce0", 0x1b}, {&(0x7f0000002300)="65013514c06236a6bbf29b0f5c86f5c7f4e51bb170f1c5b7bbc227bb9e03092cd8b5094bf8152dd1dceb76861ad7a49f5fc7612017a9be172953cc8bdbd03b9f702c4109d6c417764cb3ff98dc2fac9159da320021ac6e387fa1cba593221de67529d72b6c63682d13730dcddb4c0097f0c6d2cc97dc6c38a27f7287b84e34435523ddf814f153af284fc93388d4245a8f39cb150fc6b2ce5dd20922e4fe32aeddbc67f13d0849b6a1631fee701f7a6136d0d11947c7cadc61ad91ed3de8", 0xbe}, {&(0x7f00000023c0)="441c5b6b02c6d06031727730169b56493e59bab7ce57ea1f1a6b9e0d4fabe52a5cc2dcb754cd00ce9e038ef5378e3b5817a0585042b866c8ffe96de8575610b3eef39a701a322f255d45debee94d919c2e938701483f7d7337edb1de2c59f63325e684cdbaaae20691d8ff86579ec0938eefd430773a5d60f50a12a1d88075e792ed747401b9e19a69b69613818902ed439f1122488674ee41a97f4f27948dd4bfc198bbb35561e8bc1924fe3c4b818b963eb20d41ba2c05e4bde6d8e09dd26ef8a082e6329e779cae1aacf41cf9", 0xce}, {&(0x7f0000000640)="986395a4a18b71b9672f5a596eb48c094aafeae42d8c929c6601b2f84db0616985985a065f04", 0x26}], 0x6}}], 0x4, 0x8000) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000000c0)=r4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 5.860073946s ago: executing program 1 (id=523): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="300000006800010000000000000000000a000000000000000600070003000000080008800400210008000500", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x10, 0x6, 0x40000, 0x2, 0x2, 0x7d, 0xffffff19}}) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0xfffffff9) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 5.785118521s ago: executing program 4 (id=524): syz_emit_ethernet(0x5c, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xd, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000a0010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x814) 4.832849587s ago: executing program 3 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000020000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.67001251s ago: executing program 4 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c480}, 0x8000) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b00010009400009048500"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r2) connect$inet(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000000580)={0x1, [0x9, 0xffff, 0x1], [{0x7, 0xfffffff7}, {0x3ff, 0xe16, 0x1}, {0x1, 0xfffffffc, 0x1}, {0x1, 0x200, 0x0, 0x1}, {0x8001, 0x215, 0x1, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x0, 0x1, 0x1}, {0xd6, 0x7ff, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x800, 0x0, 0x1, 0x1}, {0x1000, 0xc1, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x507, 0x0, 0x1, 0x1}, {0x4, 0xffff2ae7, 0x0, 0x1, 0x1}, {0x1a6, 0x5}], 0x80000001}) 4.249208326s ago: executing program 2 (id=528): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x800000, 0x2, &(0x7f00007fe000/0x800000)=nil) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xf5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='itimer_state\x00', r3}, 0x18) unshare(0x6020400) r4 = syz_open_dev$video(0x0, 0x1, 0x8000) io_uring_setup(0x3eaf, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) 4.132058321s ago: executing program 3 (id=530): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc", 0x4}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x88}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.131622145s ago: executing program 2 (id=531): open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x71) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket(0x3, 0x2, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6076cd8a0018000020010000000000000000000000000000fc0000000000000000000000000000010002000000000000070800000000000000d6000100010100ddfb21de856b443ba0f7ca0dcb08bff7e3a8b1db9c1b21e01113f11d1cffaf1f831f0fd5dd4eb7187343f75dd65136b1821d2c21e7c96bb422f43ab641f75d802048b74b0efb93a5cefc"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0xb, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x2, 0x5, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, 0x1}, 0xc) r7 = syz_clone(0x25004100, &(0x7f0000000a00)="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", 0xf7a, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="63dc5cb4b2085c17c30112d09e3166453284d9a5efb10f3927556a7ef1229a6c1c49907b997d9bdb1b5920bc8dc4d3f1d31ba9e56fed1850b94f289d4c5f539ec5409a571fdc2fd1299cb156816061fadda4095535e10b382549e016709d695e4ed4") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000240)={{0x7, 0x2, 0x6, 0x1, '\x00', 0xfffffffd}, 0x0, 0x30, 0x6cdd, r7, 0x0, 0x1, 'syz0\x00', &(0x7f0000000200)}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 3.676232666s ago: executing program 1 (id=532): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = userfaultfd(0x801) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x108, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x2}}]}}, @qdisc_kind_options=@q_gred={{0x9}, {0x9c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x6, 0xfffffff7, 0xb, 0x6, 0x1, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xd, 0x5, 0x8, 0x9}}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x8, 0xfffff0c7, 0x10, 0x1, 0x1, 0x2, 0x0, 0x3, 0x8000, 0x20, 0xf, 0xc, 0x5, 0x8, 0x5f}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xfffffff4}, @TCA_GRED_LIMIT={0x8, 0x5, 0x80000001}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x5, 0xd}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x108}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000060000007f00000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000015d52f90f0ec0000000000000000000000000000000000080000000000"], 0x50) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.565591884s ago: executing program 0 (id=533): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700000002000000000000000000", 0x48}], 0x1) 3.343525069s ago: executing program 0 (id=534): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdir(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004140)=[{{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000840)=""/90, 0x5a}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000bc0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/118, 0x76}], 0x4, &(0x7f0000000cc0)=""/118, 0x76}, 0x7}, {{&(0x7f0000000d40)=@nl, 0x80, &(0x7f0000000300)=[{&(0x7f0000001100)=""/101, 0x65}, {&(0x7f0000000e40)=""/92, 0x5c}, {&(0x7f0000000280)=""/5, 0x5}], 0x3, &(0x7f0000002d80)=""/92, 0x5c}, 0xcd}, {{&(0x7f0000000f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000fc0)=""/166, 0xa6}], 0x1, &(0x7f0000001080)=""/49, 0x31}, 0x10000}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/58, 0x3a}, {&(0x7f0000002ec0)=""/178, 0xb2}, {&(0x7f0000001200)=""/159, 0x9f}], 0x3, &(0x7f0000002d40)=""/32, 0x20}, 0xfff}, {{&(0x7f0000001340)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f00000014c0)=""/217, 0xd9}, {&(0x7f00000015c0)=""/157, 0x9d}, {&(0x7f0000001680)=""/19, 0x13}], 0x4, &(0x7f0000001700)=""/77, 0x4d}, 0x3}, {{&(0x7f0000001780)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001800)=""/86, 0x56}, {&(0x7f0000001880)=""/15, 0xf}, {&(0x7f00000018c0)=""/56, 0x38}, {&(0x7f0000001900)=""/103, 0x67}, {&(0x7f0000001980)=""/201, 0xc9}, {&(0x7f0000001a80)=""/35, 0x23}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/128, 0x80}, {&(0x7f0000002b40)=""/95, 0x5f}], 0x9, &(0x7f0000002c80)=""/141, 0x8d}, 0xd1cc}, {{&(0x7f0000000dc0)=@can, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/1, 0x1}], 0x1, &(0x7f0000002f80)=""/30, 0x1e}, 0x4e1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/26, 0x1a}, {&(0x7f0000003040)=""/191, 0xbf}], 0x3, &(0x7f0000004340)=""/4096, 0x1000}, 0x142}], 0x8, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000400ff0000005f001570ce1ade62714eaa1e05636cdd0482830a9b7321956c143bca1de1e6dcdb8789d5d07f166d9898c0013a1928a3c2b0d644b21bc634fdb86f4794aa703d71bb15d6425b6610a8ec1e76263fdab52096a561dd6d9f0d1b6768d18100"], 0x0, 0x1c}, 0x28) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54}, 0x9c) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000380)="841bf6edcddec2b67900d144c1fd6ca6b6396111fb2b6948129bca11a5a662519fcb957d9dec726153d1b09a1ef16f51c0035e1486e0f2e4892fe05108945e8a931df7b0a2616ac5fdc2dec61eab670400d731fa42f00fb80e5ef29732b8f89bd4d8f1e6a1a88d57933e6c3aa1ab8574484387596cd51f95634b7abd23d804e24f0d0f094be93f8c46f680b05a519468f67010690ef10b48dd8cfc9e80d35d8db0ed002fa3b9aae3c80bfae115e778ce3ca469f3d8", 0xb5}, {&(0x7f0000000440)="a15c9cfc0326c54eced6124787711fc16c60a20205b599ee9254983713345397f4263bf2a59dd64d36c3bd13d315638a481f0b8c6b5407bc30a31c326a67946aed", 0x41}, {&(0x7f00000004c0)="bc65740531f88248d3d4bb71fe369945e79b6fa5186badba3284306b11f1627ba54bb9a2cc2e6ddc8e7a51cdb4dbf29399f9f4f56bf0e7a22e4558d3686c685d7788433731c04a0631d9f2b25114a67bbee213a5e1364c4ae00b36d6736e5ac8c8560236e583ae45d328918e2eb309f3aed0fb5a50f66ceaa374ee8995751db67cccb623e0c62f3fa4c1d8ad8d4d048608de3e643b1ee2b55ce59b5a5ae97ffb8007ebdbb47d98f3c7ff5c5114bb8b79c7e5277ad9db4937e0db97cd5c", 0xbd}, {&(0x7f0000000ec0)="e99c331edfd454d026c0d60600000000000000b3f31c031efa4103e4e9003bdf9d1558aba3d3f5", 0x27}, {&(0x7f0000000640)="a0d2bcbed0e670e0fb09d24fb9fa58a60f94da1df5d4d96be315b8bd91a0de6af26db4e25724a57c6cf4f9f52f37c1ffe9f40259da5e96c085ae2f5542d2dbbb7dcf4bce0d4314f1793f1e705662f47bdf", 0x51}], 0x5) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000940)={0xf0, 0xa0, 0x640, 0x0, 0x4, 0x8000, 0x0, 0x0, {0x0, 0x80}, {0x0, 0xfffffffa, 0xfffffffd}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x1, 0x2, 0x0, 0x1, 0x40000000, 0x1000000, 0x0, 0xfffffdfa, 0x5, 0x3ff, 0x0, 0x2, 0x0, 0x1, 0x1}) 3.043070893s ago: executing program 3 (id=535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x0, 0x1}]}, 0x0, 0x2}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="6ca08888a2a9f7fe8f6ecf4471760712bb1c1aeec844dcbdf80b29f6e578866e9eda92ea5ba34cd9b7ac52d2702e232f5340b029378e57201746166abdf0c25ce61c596fd58cb7d1460a7726efe9d452e187182222df01b75f4a7829f258c4754394ad81de22adffa73307b3efb5a4004c20ce9c14e001c4f8dbf4888a5b344c248d1dd6c29a9bc296f8056a45f95d86f7bbcaaa77debc51da8a9fe89aec5b83ae9de5352f5a894d778c783e2e78636222", 0xb1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="7400000009010000080000000e646ba5688e1bdcbf5d1f374b9f19a4519fca165835878ddc362f886f1bfc0e0e5d1dafafe77a996a5ff47a064eaf3aae880383408e3ea2b427e9a2b6e136aa0021844caeb2914e2409bfdc15bfb704f4256a34b968e9b413d24571b89594cb2576e83bff000000100000000901000008000000536d78ed20000000150100000002000049fad5057c8000930000000000000000000000005c0000000a01000005000000356e0150dd3a3120b6ad16bfbbcaf5471334584763c8fcd979006a2cda990450b36828e5bdfdb3f5bbbac966e5aa56a09d3796d1bae9ec937ce578743ed53d68ad042442d8bd8af6fe3ec94c28000000dc00000006000000040000010ee2c6ab5f1c16381e4600b96c27cc81a63721502d14adfed5ad45e45990178f417a41a23907b1d95da63b40a02ee98831883847d13c99f4a5e8d23257e2"], 0x294}, 0x0, 0x4000001}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = timerfd_create(0x0, 0x800) read$FUSE(r2, &(0x7f000000ccc0)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x275a, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)={0x1}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r7 = msgget(0x0, 0x14) r8 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x24840, 0x0) fsetxattr$trusted_overlay_origin(r8, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) msgsnd(r7, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7], 0x2000, 0x800) msgctl$IPC_RMID(r7, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x5) 2.347954315s ago: executing program 1 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) lseek(r8, 0x2004, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000008b012ef937ba1c4579473347dcb872a9ed0868c885587f23d8999c33b0509e5e21849880ba3c5a9456ce6d77ebf7fe2535e86659", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf252100000009001f0070687931000000000a0001007770616e33000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r8, &(0x7f0000002540)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000003c0)="1f027d893a03abbb835314f701aff0d38abe7184462a19faa310d85484e92c32a988c31dfbc96d4f5ec428b7c1718fcaa6fa5f0d529fc7862b6bcd3d0cd3821624647d4913d3f71334578db8f883040bf85a862ebe4f9a5389c4a4fd0e3e0483208fe39b442e0df660af8bc7c9d790d4673f13dfb75156961a47095587f4830caea4c46f85b5e5d7da55d1b0dc7a432c7d26f098f7239ad37d9c996b3c5471fffb503c17d46764b9f4dc015e7e33c1c8363c324ba717a1c759d2aed7ab53d36cfc2c441e4630e575d0329488c2ca7c7bec5ff05968c6c1870ca6", 0xda}, {&(0x7f00000004c0)="3dc3c4038711432c3d607ca6c9419d9d7a7413f10f217119a4628d47f1f0e1b3cdf84d4c105a913a91eb62302e303e069c1371ab597cf160dfe8b5d63b432f09739b6a64b5298faa33960e622fea66bafcd6bab58a966aa90dee6f2b209f196004f508cab53bed744a12f5e4f3314f5d1bd3ae75f180d5a054353a", 0x7b}, {&(0x7f0000000540)="e943cf84dccfb62994f821878bcfdc2fcbd18e6488cffee0f089868e4e55256a6ce8ba99c356c53a2f2706afa2102fe1d2e9bd99296b233913d3d68527608a0c2094fa881766a4f5230f3eacfb45719de0d6af8b53d5ac94d69137d09a6f5e", 0x5f}], 0x3, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0051050544ee8873ef0000001c00000008d840ee0422576073000000010000000200000078b7280768243694e136c73b13a910946ad8bd7d80fc9acf19b82ca449c7cb693af67d30bc6af56e94ca43ea6b3dc5884b58e7a84b69e812dc1fa131bbfb9395ba4e819934ad071c5834154a37b02c4cac9b836b5b2b249484335e5a4ef57d0ff2b21ff8c6e51150", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r9, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x20040040}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a40)="6aab8cc853f9dd14fd260c2f1473fa7719836743410567e6c19ddbe1a2a368b04efc415365ac", 0x26}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="93e9191e69700fe057cdfaa142784431407f11258678daa38d735578005b079935cc17ead22d0a9af1f62eac", 0x2c}, {&(0x7f0000001ac0)="181e4389be43b86445fe4717e7265c3b86c8ab30ee95c1cdd969ca9bf7b9ed9ec58bbf4aa6bf5ddd58bb576886e6450e2045eefd7df2bbf36941654f97ab3f35585c7595ff9baf952f000a4ac28645cd8f8bf9638a20634ae413b12710ef8a13b7c6c3efd9dd9c76691f5afde1e33c3df410b823060befb98ff2269029353b5f37bce270f3442bf9e9ee277e41c9f02bead1f6e12f8b1008ec7711e54b5717495c46b78bd6cd84102f05eb8eccd2fcad9b83415156cc1c557b6cac30c4790bfbeacd92b6bb0377b98eea15388fbcfe147ab3c58931d01e698514fe7a", 0xdc}, {&(0x7f0000001bc0)="b5c55aff8a870dbb4e8ce6c077594e5a156a6bcedc4e9c997459a6706bcb0b2d84fd6fde6a1d9d55a2b52053607ffb8b1558dfaeff4db9be90198b6b3c68257f19e0cc51dd", 0x45}, {&(0x7f0000001c40)="534a4d9e76b3ed9d8b662b112640f0c39c669f7337ebeb1bebc81223987fb751fc5a237eec14e57ddfa69d", 0x2b}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x4000081}}, {{&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="6f473cb277e46be260560125c14347172c858c7f75496821608fcc93493aacb55290f5b8a2c5bcf0262680796323d69d78b6010031f099edfe1ea391f4f3078667f6c41258e17d545d299d439daae5421844acadc9e66f47ee480cab184840b82b32cfcce63c36adb9ca6729daf4eb3846f2b52095290e6aacc1ebee50512b426cc196fee927e309f01c56f68a6959bacaab012e8896f41cf5aac1fecd7c3bad6496", 0xa2}], 0x1, &(0x7f0000002080)=[@rights={{0x28, 0x1, 0x1, [r8, r10, r9, r0, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r13}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="d302ce5a0b0f9833309f0785df6096e2286bba811c682e11d178b046c7110820f1098accddc89251ed87dc47cd83fb16ced0d3016c3000681c49b81c4fd615d7cab99ab666b53acae47e242f8f181f9c1bbda8d04733251254e90f22834063c987a6b8c64dd273cf1971c25d78f5f57fb64a65e14266e666ba92a8f2af3c775958a82964a42115dae1d557c3d8d14ad80a0551d2d608d9b0199bc10b630c9b396c63aa958d7e24ff2031bd8ce5f92288b9197f0790c8d99dc6ee6ad8b1a93500000000004a7e9623523335f14bd062b2ee9144f60609af37779427964e0a6eb71f03499ac352ac0b533a9736", 0xec}, {&(0x7f0000002200)="b8c80e7b0a92ffe4d9c04a8274b309bdd5cf1d60528019ed2a81f301045da4070d6e16daf25a38bc9487370e85ad8c188428fb62cdfa80e06754d25a2946edf7dcb49b5d51e778e2d168e2ff8795d59f6c125018a1c6d70a16b64dc30a6142018cd77cdeae726641dd1a813b0c40ba9c1d1273cb9f36a1cfd400aa4489301a289f496c240b2b082ccbcfa982e69f5b0a", 0x90}, {&(0x7f00000022c0)="78f0acd63e5c4568507f28443e3b3eadd217ac9aca314b3dbdcce0", 0x1b}, {&(0x7f0000002300)="65013514c06236a6bbf29b0f5c86f5c7f4e51bb170f1c5b7bbc227bb9e03092cd8b5094bf8152dd1dceb76861ad7a49f5fc7612017a9be172953cc8bdbd03b9f702c4109d6c417764cb3ff98dc2fac9159da320021ac6e387fa1cba593221de67529d72b6c63682d13730dcddb4c0097f0c6d2cc97dc6c38a27f7287b84e34435523ddf814f153af284fc93388d4245a8f39cb150fc6b2ce5dd20922e4fe32aeddbc67f13d0849b6a1631fee701f7a6136d0d11947c7cadc61ad91ed3de8", 0xbe}, {&(0x7f00000023c0)="441c5b6b02c6d06031727730169b56493e59bab7ce57ea1f1a6b9e0d4fabe52a5cc2dcb754cd00ce9e038ef5378e3b5817a0585042b866c8ffe96de8575610b3eef39a701a322f255d45debee94d919c2e938701483f7d7337edb1de2c59f63325e684cdbaaae20691d8ff86579ec0938eefd430773a5d60f50a12a1d88075e792ed747401b9e19a69b69613818902ed439f1122488674ee41a97f4f27948dd4bfc198bbb35561e8bc1924fe3c4b818b963eb20d41ba2c05e4bde6d8e09dd26ef8a082e6329e779cae1aacf41cf9", 0xce}, {&(0x7f0000000640)="986395a4a18b71b9672f5a596eb48c094aafeae42d8c929c6601b2f84db0616985985a065f04", 0x26}], 0x6}}], 0x4, 0x8000) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000000c0)=r4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.489634329s ago: executing program 2 (id=537): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1.332727422s ago: executing program 1 (id=538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000071f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) mlock2(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000003a40)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @generic={0x5d, 0x8, 0xf, 0x5, 0x6}], &(0x7f00000000c0)='GPL\x00'}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.283131025s ago: executing program 2 (id=539): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="81041000000000003fd476c4712ec14606030e88a8ea42a9f72a92f48753063a7e95eb7bb8a0450a09d3600908005f12edb5cb526f43e7aa68c2af5b495fe9bd7902bacec098b8cc086ef5ec99c66457c0287ba798b3bdb5f990b959c1cf2f040000009f92"], 0x8) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xfd7cd4ccaa65725a, 0x4044) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x6) r4 = syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000480)={0x0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000400)=[0x7f1, 0x8627, 0x0, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x7ff, 0xffffffffffffffff]}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESOCT=r5, @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES8=r2], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c000) r6 = io_uring_setup(0x401b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f8}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x5ab3, 0x1, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7, @ANYRESDEC=r4, @ANYBLOB="ca0a437fa0edc22082bf8359b8fbfcd7b8b55f30664aee7bf1a411e7db449d4e336c997403a50a85859c8922d906ffeca4957191d51467032bbd472468953b39aa23bf33a46e800351511c02b64f29a6f3fe6f22ef0dd0bfd1f5d5e97760e7ec99e1cd27483c01002af2f3"], 0x4c}}, 0x24000840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @private=0xa010101}, 0x1, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d000000000000000040000000000000094b95ef97443f511ed62acd1a99f5149646be4bee9f3398eaf69c739a651a654a4f5cd672ad42b387444a450a3aeee78ce544fc549003c46e94797b716542834b678710008ec93d8064ab771fceb74301a867bab67ccb56ca7d7af7535ef049094fb731392a9b7adade91234c0b78dec32e5d84c2356e3bd295d3e796b7aca6be52a84eb15efb88072810d379984a81fcbae04669a038034308a3f6d8fb7267699e49ff35f77ccc32c8474d3a8957000000000000000"], 0xd0}}, {{&(0x7f0000000740)=@generic={0x8, "dead4e12ba681fca6cf2a34d7a5629afb3b632222dec8d3e5c062e3f476b04a5dc5b350cf2f56c997f54478827ebfe28214b2ac24ff5dd07c9772fc5d69bc532f3867862c3a8dd24fc620f2d06241ef55529a3144fbdfef7ddeee58980eaa73182ebb552f3913491c0f5a3592a475c3d76c30b8c61f41e5fe47bd35cf78f"}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="9629aeb733bb649e243c54a7ed92155d87de799b4461d1cf9c8bb341022eb90d9e64d1470425101fab74ade18e0995e9dfd3627fa47d60b3c3ac799feadbb9ea834e6261c4f829708420699739cf1ea7f5325d9b777fda4b3e4b49a336a06cabfe56703f4153a94c64359de6354e7ed53f672e1a3d2b691100bae55bffd49bd343cdd973bc9365a7e944903e526e28d79713f6d30b465b3228ac4959dbc5850590f9172138cdc3ea3308d91f482f2834e71281406d513b8a40671bd6690f91c317f4012f14168e9f9fe77e06efb3ec49daa5", 0xd2}], 0x1, &(0x7f0000000240)=ANY=[@ANYRES64], 0x2c0}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee4, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x3, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) 1.173042798s ago: executing program 3 (id=540): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="401705000000e7ec4ad9d36155bebe9e58a87698db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 972.087848ms ago: executing program 0 (id=541): memfd_create(0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x26, 0x6, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x40080e0, &(0x7f0000000c80)={0xa, 0x4e24, 0x9, @loopback, 0x7}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) gettid() connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504000000d8b4aabe946693491c09639a2f0655705a132a281c03ccbe971803e2bceccae3758c0af186e33f1c4b9b6a3686623f6cc87078bb9c0e732efff87659474892d0"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 848.296644ms ago: executing program 0 (id=542): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x80000000000000a, 0x2, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$xdp(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4) 575.893463ms ago: executing program 0 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x52c10, 0x3}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xffffffc3}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000084) 288.580219ms ago: executing program 0 (id=545): socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x60780, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0xa000000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0003000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) 0s ago: executing program 2 (id=546): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = syz_io_uring_setup(0x82a, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000300)="dc", 0x1) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000005fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="8000110a060006004e230000080007000000000008000d00018000000a0001005d5beb729ec80000"], 0x40}}, 0x20000000) kernel console output (not intermixed with test programs): b 4-1: media controller created [ 120.150498][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.159070][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.828350][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.870605][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.348118][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 121.348148][ T30] audit: type=1400 audit(1762546559.522:250): avc: denied { write } for pid=6318 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.380312][ T6323] wireguard0: entered promiscuous mode [ 121.390017][ T6323] wireguard0: entered allmulticast mode [ 121.435702][ T10] DVB: Unable to find symbol tda10046_attach() [ 121.441967][ T5822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.453288][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 121.470314][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.487600][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 121.528475][ T5822] usb 2-1: config 0 descriptor?? [ 121.593787][ T10] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 121.643142][ T30] audit: type=1400 audit(1762546559.532:251): avc: denied { getopt } for pid=6318 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.663413][ T30] audit: type=1400 audit(1762546559.822:252): avc: denied { read write } for pid=6329 comm="syz.0.93" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.687315][ T30] audit: type=1400 audit(1762546559.822:253): avc: denied { open } for pid=6329 comm="syz.0.93" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.716858][ T30] audit: type=1400 audit(1762546559.882:254): avc: denied { ioctl } for pid=6329 comm="syz.0.93" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.841279][ T6333] process 'syz.2.92' launched './file0' with NULL argv: empty string added [ 121.900421][ T10] usb 4-1: USB disconnect, device number 4 [ 122.075402][ T30] audit: type=1400 audit(1762546560.022:255): avc: denied { execute } for pid=6321 comm="syz.2.92" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.097412][ T30] audit: type=1400 audit(1762546560.032:256): avc: denied { execute_no_trans } for pid=6321 comm="syz.2.92" path="/24/file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.242957][ T5822] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 122.251545][ T30] audit: type=1400 audit(1762546560.422:257): avc: denied { create } for pid=6335 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.301158][ T5822] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input8 [ 122.544138][ T5822] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 122.733769][ T6354] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.741801][ T6354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.750811][ T6354] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 122.758666][ T6354] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 122.803448][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.071577][ T5822] usb 2-1: USB disconnect, device number 4 [ 123.106962][ T6352] fido_id[6352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 123.182900][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 123.208883][ T5888] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 123.230394][ T5888] usb 1-1: config 0 has no interface number 0 [ 123.250300][ T5888] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 123.278187][ T5888] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.522297][ T5888] usb 1-1: config 0 interface 255 has no altsetting 0 [ 123.624793][ T5888] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 123.878969][ T6359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.896011][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.915475][ T30] audit: type=1400 audit(1762546561.972:258): avc: denied { bind } for pid=6358 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.925366][ T5888] usb 1-1: Product: syz [ 124.072910][ T5888] usb 1-1: Manufacturer: syz [ 124.077544][ T5888] usb 1-1: SerialNumber: syz [ 124.119257][ T5888] usb 1-1: config 0 descriptor?? [ 124.547012][ T5888] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 124.605365][ T6372] FAULT_INJECTION: forcing a failure. [ 124.605365][ T6372] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.618708][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 124.618735][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.618746][ T6372] Call Trace: [ 124.618753][ T6372] [ 124.618761][ T6372] dump_stack_lvl+0x16c/0x1f0 [ 124.618797][ T6372] should_fail_ex+0x512/0x640 [ 124.618828][ T6372] strncpy_from_user+0x3b/0x2e0 [ 124.618853][ T6372] getname_flags.part.0+0x8f/0x550 [ 124.618884][ T6372] getname_flags+0x93/0xf0 [ 124.618903][ T6372] do_sys_openat2+0xb8/0x1d0 [ 124.618928][ T6372] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.618956][ T6372] ? __fget_files+0x20e/0x3c0 [ 124.618981][ T6372] __x64_sys_openat+0x174/0x210 [ 124.619007][ T6372] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.619031][ T6372] ? ksys_write+0x1ac/0x250 [ 124.619060][ T6372] do_syscall_64+0xcd/0xfa0 [ 124.619081][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.619100][ T6372] RIP: 0033:0x7f091d58f6c9 [ 124.619117][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.619134][ T6372] RSP: 002b:00007f091b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.619153][ T6372] RAX: ffffffffffffffda RBX: 00007f091d7e6090 RCX: 00007f091d58f6c9 [ 124.619166][ T6372] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 124.619178][ T6372] RBP: 00007f091b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 124.619190][ T6372] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 124.619201][ T6372] R13: 00007f091d7e6128 R14: 00007f091d7e6090 R15: 00007ffe7bae7118 [ 124.619230][ T6372] [ 125.082021][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 125.527121][ T5888] gspca_stk1135: reg_w 0x3 err -110 [ 125.546735][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.679602][ T5888] gspca_stk1135: Sensor write failed [ 125.734158][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.740510][ T5888] gspca_stk1135: Sensor write failed [ 125.751838][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.762132][ T5888] gspca_stk1135: Sensor read failed [ 125.767371][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.777786][ T5888] gspca_stk1135: Sensor read failed [ 125.784475][ T5888] gspca_stk1135: Detected sensor type unknown (0x0) [ 125.791073][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.807854][ T5888] gspca_stk1135: Sensor read failed [ 125.828369][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.911320][ T5888] gspca_stk1135: Sensor read failed [ 125.928544][ T30] audit: type=1400 audit(1762546564.112:259): avc: denied { create } for pid=6393 comm="syz.4.106" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.949355][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.949372][ T5888] gspca_stk1135: Sensor write failed [ 125.949401][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 125.949411][ T5888] gspca_stk1135: Sensor write failed [ 125.949490][ T5888] stk1135 1-1:0.255: probe with driver stk1135 failed with error -110 [ 125.989395][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 126.009066][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 126.270919][ T6395] ceph: No mds server is up or the cluster is laggy [ 126.343448][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 126.383996][ T6403] FAULT_INJECTION: forcing a failure. [ 126.383996][ T6403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.397219][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 126.397234][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.397241][ T6403] Call Trace: [ 126.397246][ T6403] [ 126.397251][ T6403] dump_stack_lvl+0x16c/0x1f0 [ 126.397273][ T6403] should_fail_ex+0x512/0x640 [ 126.397289][ T6403] _copy_to_user+0x32/0xd0 [ 126.397305][ T6403] simple_read_from_buffer+0xcb/0x170 [ 126.397323][ T6403] proc_fail_nth_read+0x197/0x240 [ 126.397337][ T6403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.397350][ T6403] ? rw_verify_area+0xcf/0x6c0 [ 126.397366][ T6403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.397378][ T6403] vfs_read+0x1e4/0xcf0 [ 126.397391][ T6403] ? __pfx___mutex_lock+0x10/0x10 [ 126.397402][ T6403] ? __pfx_vfs_read+0x10/0x10 [ 126.397438][ T6403] ? __fget_files+0x20e/0x3c0 [ 126.397454][ T6403] ksys_read+0x12a/0x250 [ 126.397463][ T6403] ? __pfx_ksys_read+0x10/0x10 [ 126.397477][ T6403] do_syscall_64+0xcd/0xfa0 [ 126.397488][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.397500][ T6403] RIP: 0033:0x7fd9baf8e0dc [ 126.397510][ T6403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.397520][ T6403] RSP: 002b:00007fd9bbeed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.397531][ T6403] RAX: ffffffffffffffda RBX: 00007fd9bb1e6090 RCX: 00007fd9baf8e0dc [ 126.397538][ T6403] RDX: 000000000000000f RSI: 00007fd9bbeed0a0 RDI: 0000000000000005 [ 126.397544][ T6403] RBP: 00007fd9bbeed090 R08: 0000000000000000 R09: 0000000000000000 [ 126.397550][ T6403] R10: 0000200000c18000 R11: 0000000000000246 R12: 0000000000000001 [ 126.397557][ T6403] R13: 00007fd9bb1e6128 R14: 00007fd9bb1e6090 R15: 00007fffbc5171a8 [ 126.397572][ T6403] [ 126.579914][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.917697][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 127.043920][ T43] usb 1-1: USB disconnect, device number 2 [ 127.616780][ T6421] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.624760][ T6421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.633498][ T6421] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.641251][ T6421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 128.040757][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 128.040773][ T30] audit: type=1400 audit(1762546566.222:261): avc: denied { unlink } for pid=5830 comm="syz-executor" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.781786][ T30] audit: type=1400 audit(1762546567.922:262): avc: denied { mount } for pid=6449 comm="syz.3.117" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.859000][ T30] audit: type=1400 audit(1762546568.032:263): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.991791][ T6464] netlink: 256 bytes leftover after parsing attributes in process `syz.2.119'. [ 130.266668][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 131.441145][ T6477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.656841][ T6487] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 131.724832][ T30] audit: type=1400 audit(1762546569.912:264): avc: denied { create } for pid=6484 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.745367][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.021982][ T30] audit: type=1400 audit(1762546570.152:265): avc: denied { accept } for pid=6484 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 132.042524][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.182469][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.456638][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.466868][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.562117][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 132.917360][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924033][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941174][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.980779][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 133.021200][ T6506] bridge0: port 3(syz_tun) entered blocking state [ 133.039047][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 133.071408][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.082269][ T6506] bridge0: port 3(syz_tun) entered disabled state [ 133.088994][ T6506] syz_tun: entered allmulticast mode [ 133.236962][ T6506] syz_tun: entered promiscuous mode [ 133.249688][ T6506] bridge0: port 3(syz_tun) entered blocking state [ 133.256408][ T6506] bridge0: port 3(syz_tun) entered forwarding state [ 133.269785][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.301198][ T10] usb 2-1: Product: syz [ 133.313832][ T10] usb 2-1: Manufacturer: syz [ 133.406838][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 133.436162][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 133.447243][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.130'. [ 133.588417][ T6523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.602217][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.632648][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.643351][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 133.649265][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 133.722169][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.746029][ T10] usb 2-1: USB disconnect, device number 5 [ 133.806730][ T30] audit: type=1400 audit(1762546571.972:266): avc: denied { create } for pid=6521 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.912220][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.989252][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.989286][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.989319][ T5944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.989339][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.991128][ T5944] usb 4-1: config 0 descriptor?? [ 134.115911][ T30] audit: type=1400 audit(1762546572.302:267): avc: denied { create } for pid=6521 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 134.574099][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 134.580069][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.631940][ T5944] usb 4-1: USB disconnect, device number 5 [ 134.729279][ T30] audit: type=1400 audit(1762546572.912:268): avc: denied { getopt } for pid=6540 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.881371][ T30] audit: type=1326 audit(1762546575.062:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.097705][ T30] audit: type=1326 audit(1762546575.092:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.192331][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 137.315490][ T43] IPVS: starting estimator thread 0... [ 137.402679][ T6576] IPVS: using max 29 ests per chain, 69600 per kthread [ 137.542304][ T30] audit: type=1326 audit(1762546575.092:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.599630][ T30] audit: type=1326 audit(1762546575.092:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.736055][ T30] audit: type=1326 audit(1762546575.092:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.921786][ T30] audit: type=1326 audit(1762546575.102:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 137.946664][ T30] audit: type=1326 audit(1762546575.102:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6568 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23998f6c9 code=0x7ffc0000 [ 138.573879][ T6587] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 138.636492][ T6587] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 138.661069][ T6593] FAULT_INJECTION: forcing a failure. [ 138.661069][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 138.737967][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.4.143 Not tainted syzkaller #0 PREEMPT(full) [ 138.737993][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.738003][ T6593] Call Trace: [ 138.738009][ T6593] [ 138.738017][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 138.738052][ T6593] should_fail_ex+0x512/0x640 [ 138.738075][ T6593] ? __kmalloc_cache_noprof+0x5f/0x780 [ 138.738107][ T6593] should_failslab+0xc2/0x120 [ 138.738128][ T6593] __kmalloc_cache_noprof+0x72/0x780 [ 138.738154][ T6593] ? __pfx___might_resched+0x10/0x10 [ 138.738179][ T6593] ? vhost_task_create+0xe5/0x370 [ 138.738198][ T6593] ? rcu_is_watching+0x12/0xc0 [ 138.738222][ T6593] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 138.738251][ T6593] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 138.738274][ T6593] ? vhost_task_create+0xe5/0x370 [ 138.738293][ T6593] vhost_task_create+0xe5/0x370 [ 138.738312][ T6593] ? __pfx_vhost_task_create+0x10/0x10 [ 138.738342][ T6593] ? __pfx_vhost_task_fn+0x10/0x10 [ 138.738376][ T6593] kvm_mmu_post_init_vm+0x1b7/0x380 [ 138.738399][ T6593] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 138.738420][ T6593] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 138.738453][ T6593] kvm_vcpu_ioctl+0x5eb/0x1690 [ 138.738483][ T6593] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 138.738510][ T6593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.738537][ T6593] ? do_vfs_ioctl+0x128/0x14f0 [ 138.738561][ T6593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.738587][ T6593] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 138.738618][ T6593] ? hook_file_ioctl_common+0x145/0x410 [ 138.738658][ T6593] ? selinux_file_ioctl+0x180/0x270 [ 138.738678][ T6593] ? selinux_file_ioctl+0xb4/0x270 [ 138.738700][ T6593] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 138.738727][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 138.738755][ T6593] do_syscall_64+0xcd/0xfa0 [ 138.738776][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.738796][ T6593] RIP: 0033:0x7fa264b8f6c9 [ 138.738812][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.738829][ T6593] RSP: 002b:00007fa2659a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.738847][ T6593] RAX: ffffffffffffffda RBX: 00007fa264de6180 RCX: 00007fa264b8f6c9 [ 138.738859][ T6593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 138.738870][ T6593] RBP: 00007fa2659a6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.738881][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.738892][ T6593] R13: 00007fa264de6218 R14: 00007fa264de6180 R15: 00007ffe01e35c38 [ 138.738926][ T6593] [ 139.281604][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 139.383161][ T6611] FAULT_INJECTION: forcing a failure. [ 139.383161][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 139.423039][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(full) [ 139.423065][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.423075][ T6611] Call Trace: [ 139.423082][ T6611] [ 139.423089][ T6611] dump_stack_lvl+0x16c/0x1f0 [ 139.423121][ T6611] should_fail_ex+0x512/0x640 [ 139.423142][ T6611] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 139.423163][ T6611] should_failslab+0xc2/0x120 [ 139.423183][ T6611] __kvmalloc_node_noprof+0x141/0x9c0 [ 139.423205][ T6611] ? bucket_table_alloc.isra.0+0x88/0x460 [ 139.423233][ T6611] ? bucket_table_alloc.isra.0+0x88/0x460 [ 139.423248][ T6611] bucket_table_alloc.isra.0+0x88/0x460 [ 139.423272][ T6611] rhashtable_init_noprof+0x41a/0x7e0 [ 139.423295][ T6611] rhltable_init_noprof+0x20/0x60 [ 139.423316][ T6611] nf_tables_newtable+0xfa7/0x1b50 [ 139.423379][ T6611] ? __pfx___nla_validate_parse+0x10/0x10 [ 139.423409][ T6611] ? __pfx_nf_tables_newtable+0x10/0x10 [ 139.423438][ T6611] ? __nla_parse+0x40/0x60 [ 139.423469][ T6611] nfnetlink_rcv_batch+0x190d/0x2350 [ 139.423508][ T6611] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 139.423550][ T6611] ? avc_has_perm_noaudit+0x149/0x3b0 [ 139.423606][ T6611] ? __nla_parse+0x40/0x60 [ 139.423637][ T6611] nfnetlink_rcv+0x3c1/0x430 [ 139.423658][ T6611] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.423689][ T6611] netlink_unicast+0x5aa/0x870 [ 139.423723][ T6611] ? __pfx_netlink_unicast+0x10/0x10 [ 139.423763][ T6611] netlink_sendmsg+0x8c8/0xdd0 [ 139.423795][ T6611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.423837][ T6611] ____sys_sendmsg+0xa98/0xc70 [ 139.423859][ T6611] ? copy_msghdr_from_user+0x10a/0x160 [ 139.423884][ T6611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.423917][ T6611] ___sys_sendmsg+0x134/0x1d0 [ 139.423940][ T6611] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.423960][ T6611] ? __lock_acquire+0x622/0x1c90 [ 139.424024][ T6611] __sys_sendmsg+0x16d/0x220 [ 139.424051][ T6611] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.424098][ T6611] do_syscall_64+0xcd/0xfa0 [ 139.424119][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.424139][ T6611] RIP: 0033:0x7fd23998f6c9 [ 139.424156][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.424174][ T6611] RSP: 002b:00007fd23a7fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.424193][ T6611] RAX: ffffffffffffffda RBX: 00007fd239be5fa0 RCX: 00007fd23998f6c9 [ 139.424206][ T6611] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.424218][ T6611] RBP: 00007fd23a7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 139.424229][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.424241][ T6611] R13: 00007fd239be6038 R14: 00007fd239be5fa0 R15: 00007fff120bf2c8 [ 139.424271][ T6611] [ 139.705575][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.439763][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.448927][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.586726][ T6617] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.620642][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 140.689167][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 140.689200][ T30] audit: type=1400 audit(1762546578.872:283): avc: denied { write } for pid=6619 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.152626][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.199209][ T6628] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 141.600720][ T30] audit: type=1400 audit(1762546579.722:284): avc: denied { write } for pid=6626 comm="syz.4.151" path="socket:[12326]" dev="sockfs" ino=12326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 141.877358][ T30] audit: type=1400 audit(1762546579.962:285): avc: denied { mounton } for pid=6629 comm="syz.0.152" path="cgroup:[4026532803]" dev="nsfs" ino=4026532803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.945478][ T10] usb 3-1: device descriptor read/all, error -71 [ 141.974588][ T30] audit: type=1400 audit(1762546579.962:286): avc: denied { execute } for pid=6629 comm="syz.0.152" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.000568][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.018107][ T6639] fuse: Unknown parameter 'fdwT0x0000000000000003' [ 142.596323][ T30] audit: type=1400 audit(1762546580.002:287): avc: denied { associate } for pid=6629 comm="syz.0.152" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.617399][ T30] audit: type=1400 audit(1762546580.222:288): avc: denied { append } for pid=6637 comm="syz.1.154" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.754427][ T6646] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.762283][ T6646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.770986][ T6646] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.778824][ T6646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 143.247410][ T30] audit: type=1400 audit(1762546581.432:289): avc: denied { read write } for pid=6647 comm="syz.1.156" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.271666][ T30] audit: type=1400 audit(1762546581.432:290): avc: denied { open } for pid=6647 comm="syz.1.156" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.294847][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.300969][ T30] audit: type=1400 audit(1762546581.432:291): avc: denied { ioctl } for pid=6647 comm="syz.1.156" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.325618][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.383344][ T6650] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.431708][ T30] audit: type=1400 audit(1762546581.592:292): avc: denied { name_bind } for pid=6635 comm="syz.3.153" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.481697][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.514036][ T6650] evm: overlay not supported [ 143.967074][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 144.010598][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 144.039241][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.051768][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.062576][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.101644][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.229456][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.411516][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.451589][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.461563][ T5944] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 144.814316][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.831813][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.843471][ T5944] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 144.853443][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.882323][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 144.891540][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.905135][ T5944] usb 5-1: config 0 has no interface number 0 [ 144.912081][ T24] usbtmc 2-1:16.0: can't read capabilities [ 144.950551][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.951741][ T5944] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 144.970999][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.981593][ T5944] usb 5-1: Product: syz [ 144.990531][ T5944] usb 5-1: Manufacturer: syz [ 144.995268][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.998598][ T5944] usb 5-1: SerialNumber: syz [ 145.008025][ T10] usb 3-1: Product: syz [ 145.020542][ T10] usb 3-1: Manufacturer: syz [ 145.025941][ T5944] usb 5-1: config 0 descriptor?? [ 145.033790][ T10] usb 3-1: SerialNumber: syz [ 145.065751][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 145.116646][ T24] usb 2-1: USB disconnect, device number 7 [ 145.247342][ T5944] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 145.261830][ T5944] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 145.281152][ T5944] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 145.295086][ T5944] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 145.304277][ T5944] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 145.320132][ T5944] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 146.374085][ T10] cdc_mbim 3-1:1.0: SET_NTB_FORMAT failed [ 146.927567][ T10] cdc_mbim 3-1:1.0: bind() failure [ 146.938073][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 146.948228][ T10] cdc_ncm 3-1:1.1: bind() failure [ 146.966333][ T10] usb 3-1: USB disconnect, device number 5 [ 147.093342][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 147.093357][ T30] audit: type=1400 audit(1762546585.282:329): avc: denied { connect } for pid=6690 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.250951][ T30] audit: type=1400 audit(1762546585.432:330): avc: denied { ioctl } for pid=6695 comm="syz.0.171" path="socket:[12523]" dev="sockfs" ino=12523 ioctlcmd=0x89b1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.332610][ T6700] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.340433][ T6700] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.349177][ T6700] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 147.356985][ T6700] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 147.980599][ T10] usb 5-1: USB disconnect, device number 5 [ 148.083147][ T6710] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 148.121902][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 148.226555][ T10] keyspan 5-1:0.133: device disconnected [ 148.684502][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 148.697017][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 148.710657][ T30] audit: type=1400 audit(1762546586.872:331): avc: denied { mounton } for pid=6705 comm="syz.2.174" path="/40/file1" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.718076][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 148.851808][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 148.960202][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 148.982392][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 148.999732][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 149.009369][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.018223][ T6709] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 149.032219][ T6709] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 149.211721][ T5822] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 149.219321][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 149.240061][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 149.641603][ T30] audit: type=1400 audit(1762546587.752:332): avc: denied { listen } for pid=6721 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.704191][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.727460][ T6724] wireguard0: entered promiscuous mode [ 149.733036][ T6724] wireguard0: entered allmulticast mode [ 149.772929][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.796265][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.808076][ T5822] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 149.818372][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.858772][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.872280][ T5822] usb 4-1: config 0 has no interface number 0 [ 149.913527][ T5822] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 149.931492][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.939603][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.994039][ T5822] usb 4-1: Product: syz [ 149.998259][ T5822] usb 4-1: Manufacturer: syz [ 150.710406][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.840757][ T5822] usb 4-1: SerialNumber: syz [ 150.867424][ T5822] usb 4-1: config 0 descriptor?? [ 150.886195][ T30] audit: type=1400 audit(1762546589.072:333): avc: denied { map } for pid=6728 comm="syz.1.180" path="socket:[11789]" dev="sockfs" ino=11789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 150.909040][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.053526][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 151.059451][ T10] usbtmc 5-1:16.0: can't read capabilities [ 151.077632][ T5822] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 151.111583][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.113167][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 151.212311][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 151.221849][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 151.229770][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 151.242457][ T5822] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 151.263664][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.311671][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.341537][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.476665][ T5944] usb 5-1: USB disconnect, device number 6 [ 151.519741][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.995845][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.018354][ T5888] usb 1-1: config 0 descriptor?? [ 152.301980][ T6749] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 152.314775][ T30] audit: type=1400 audit(1762546590.502:334): avc: denied { relabelto } for pid=6747 comm="syz.1.185" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 152.342269][ T30] audit: type=1400 audit(1762546590.502:335): avc: denied { associate } for pid=6747 comm="syz.1.185" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 152.378455][ T30] audit: type=1400 audit(1762546590.562:336): avc: denied { read } for pid=6747 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.630438][ T6758] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 152.638327][ T6758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.646885][ T6758] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 152.654712][ T6758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 153.214831][ T10] usb 4-1: USB disconnect, device number 6 [ 153.374300][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 153.412479][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 153.421901][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 153.431973][ T6760] netlink: 'syz.4.187': attribute type 14 has an invalid length. [ 153.441885][ T10] keyspan 4-1:0.133: device disconnected [ 153.602709][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.187'. [ 153.610798][ T30] audit: type=1400 audit(1762546591.762:337): avc: denied { map } for pid=6762 comm="syz.1.190" path="socket:[11832]" dev="sockfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.682222][ T30] audit: type=1400 audit(1762546591.762:338): avc: denied { read accept } for pid=6762 comm="syz.1.190" path="socket:[11832]" dev="sockfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.707458][ T30] audit: type=1400 audit(1762546591.842:339): avc: denied { name_bind 0x1000000 } for pid=6761 comm="syz.3.189" path="socket:[11835]" dev="sockfs" ino=11835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 153.750750][ T30] audit: type=1400 audit(1762546591.862:340): avc: denied { getopt } for pid=6762 comm="syz.1.190" lport=49967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.809572][ T6774] IPVS: length: 207 != 24 [ 153.974459][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 153.980481][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 154.004055][ T5888] usb 1-1: USB disconnect, device number 3 [ 154.022512][ T5945] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 154.372810][ T30] audit: type=1400 audit(1762546592.552:341): avc: denied { append } for pid=6780 comm="syz.0.195" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.600478][ T30] audit: type=1400 audit(1762546592.712:342): avc: denied { shutdown } for pid=6780 comm="syz.0.195" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.638988][ T5945] usb 3-1: string descriptor 0 read error: -22 [ 154.649707][ T5945] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 154.681507][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.082016][ T30] audit: type=1400 audit(1762546593.262:343): avc: denied { write } for pid=6780 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.105425][ T6768] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.188'. [ 155.180738][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.196'. [ 155.195301][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.196'. [ 155.597430][ T10] usb 3-1: USB disconnect, device number 6 [ 156.121552][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.531516][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 156.538399][ T5822] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 156.551550][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.561681][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.583760][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.604456][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.616241][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.630266][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.645809][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.832102][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 156.845964][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.856308][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.868250][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.878617][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.894255][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.901240][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 156.940164][ T6810] o2cb: This node has not been configured. [ 156.946228][ T6810] o2cb: Cluster check failed. Fix errors before retrying. [ 156.953572][ T6810] (syz.2.199,6810,0):user_dlm_register:674 ERROR: status = -22 [ 156.961192][ T6810] (syz.2.199,6810,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 157.220119][ T5822] usb 5-1: GET_CAPABILITIES returned 0 [ 157.235554][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.251516][ T5822] usbtmc 5-1:16.0: can't read capabilities [ 157.266176][ T10] usb 4-1: config 0 descriptor?? [ 157.280268][ T10] usb 4-1: can't set config #0, error -71 [ 157.288067][ T10] usb 4-1: USB disconnect, device number 7 [ 157.724438][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 157.724454][ T30] audit: type=1400 audit(1762546595.892:350): avc: denied { kexec_image_load } for pid=6813 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.837576][ T30] audit: type=1400 audit(1762546596.022:351): avc: denied { bind } for pid=6817 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.838962][ T30] audit: type=1400 audit(1762546596.022:352): avc: denied { write } for pid=6817 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.922677][ T5945] usb 5-1: USB disconnect, device number 7 [ 158.706374][ T30] audit: type=1400 audit(1762546596.892:353): avc: denied { sys_module } for pid=6819 comm="syz.2.203" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.049913][ T6830] geneve2: entered promiscuous mode [ 159.694799][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562cb400: rx timeout, send abort [ 159.704477][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562cb000: rx timeout, send abort [ 159.713064][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880562cb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.728593][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880562cb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.017737][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.026200][ T6839] batadv_slave_0: entered promiscuous mode [ 161.288584][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 161.465147][ T30] audit: type=1400 audit(1762546599.652:354): avc: denied { ioctl } for pid=6860 comm="syz.0.212" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.540310][ T6858] bridge_slave_1: left allmulticast mode [ 161.594917][ T6858] bridge_slave_1: left promiscuous mode [ 161.639239][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.066368][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.127685][ T6858] bridge_slave_0: left allmulticast mode [ 162.139805][ T6858] bridge_slave_0: left promiscuous mode [ 162.156288][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.247319][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 162.255576][ T10] usb 1-1: config 1 has no interface number 0 [ 162.262858][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 162.284904][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 162.300714][ T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.322081][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 162.331322][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.352037][ T10] usb 1-1: Product: syz [ 162.356212][ T10] usb 1-1: Manufacturer: syz [ 162.361219][ T10] usb 1-1: SerialNumber: syz [ 162.379264][ T6864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.537478][ T30] audit: type=1400 audit(1762546600.722:355): avc: denied { sqpoll } for pid=6878 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.649781][ T6864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.822082][ T30] audit: type=1400 audit(1762546600.942:356): avc: denied { read } for pid=6878 comm="syz.2.218" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.852322][ T30] audit: type=1400 audit(1762546600.942:357): avc: denied { open } for pid=6878 comm="syz.2.218" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.972207][ T10] usb 1-1: Incompatible driver and firmware versions [ 163.078264][ T30] audit: type=1400 audit(1762546601.262:358): avc: denied { mount } for pid=6884 comm="syz.4.219" name="/" dev="ramfs" ino=12040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.251970][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.397300][ T6891] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 163.477204][ T6891] hfsplus: unable to find HFS+ superblock [ 163.521609][ T30] audit: type=1400 audit(1762546601.582:359): avc: denied { append } for pid=6863 comm="syz.0.214" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 163.568268][ T30] audit: type=1400 audit(1762546601.602:360): avc: denied { ioctl } for pid=6863 comm="syz.0.214" path="socket:[12927]" dev="sockfs" ino=12927 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.595898][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 163.603120][ T5917] usb 3-1: config 0 has no interfaces? [ 163.611385][ T5917] usb 3-1: New USB device found, idVendor=b66f, idProduct=79f4, bcdDevice=8f.99 [ 163.625173][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.641095][ T5917] usb 3-1: Product: syz [ 163.647391][ T5917] usb 3-1: Manufacturer: syz [ 163.654317][ T5917] usb 3-1: SerialNumber: syz [ 163.746714][ T5917] usb 3-1: config 0 descriptor?? [ 164.505702][ T6903] vlan0: entered promiscuous mode [ 164.592760][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.601354][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.751925][ T5917] usb 3-1: USB disconnect, device number 7 [ 165.857190][ T30] audit: type=1400 audit(1762546603.992:361): avc: denied { ioctl } for pid=6917 comm="syz.2.228" path="socket:[12138]" dev="sockfs" ino=12138 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.426640][ T5822] usb 1-1: USB disconnect, device number 4 [ 166.505866][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.329693][ T6939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.437714][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 168.010880][ T6949] Bluetooth: MGMT ver 1.23 [ 168.022989][ T30] audit: type=1400 audit(1762546606.192:362): avc: denied { write } for pid=6948 comm="syz.0.237" path="socket:[12205]" dev="sockfs" ino=12205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.223152][ T30] audit: type=1400 audit(1762546606.372:363): avc: denied { accept } for pid=6948 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.654247][ T30] audit: type=1400 audit(1762546606.842:364): avc: denied { nlmsg_write } for pid=6960 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 168.885729][ T30] audit: type=1400 audit(1762546606.902:365): avc: denied { create } for pid=6960 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.043284][ T30] audit: type=1400 audit(1762546606.922:366): avc: denied { shutdown } for pid=6960 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.063060][ T30] audit: type=1400 audit(1762546606.922:367): avc: denied { ioctl } for pid=6960 comm="syz.2.240" path="socket:[13052]" dev="sockfs" ino=13052 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.392690][ T30] audit: type=1400 audit(1762546607.292:368): avc: denied { setopt } for pid=6942 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.586343][ T30] audit: type=1400 audit(1762546607.302:369): avc: denied { connect } for pid=6942 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.236334][ T30] audit: type=1804 audit(1762546607.652:370): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.242" name="/newroot/49/file0" dev="tmpfs" ino=293 res=1 errno=0 [ 170.258555][ T30] audit: type=1400 audit(1762546608.012:371): avc: denied { listen } for pid=6973 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.020788][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 171.889768][ T6995] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 172.530002][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 172.612482][ T7011] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.620294][ T7011] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 172.629070][ T7011] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.636881][ T7011] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 173.097660][ T7002] gretap1: entered promiscuous mode [ 176.174482][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 178.208066][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 178.214328][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 178.353357][ T7075] vxfs: WRONG superblock magic 00000000 at 1 [ 178.361240][ T7075] vxfs: WRONG superblock magic 00000000 at 8 [ 178.367360][ T7075] vxfs: can't find superblock. [ 178.488693][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 178.497112][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 178.718303][ T7072] ceph: No mds server is up or the cluster is laggy [ 179.053052][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 179.056399][ T30] audit: type=1400 audit(1762546617.232:372): avc: denied { create } for pid=7081 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 179.121506][ T30] audit: type=1400 audit(1762546617.242:373): avc: denied { write } for pid=7081 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 179.271881][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.422573][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 180.745133][ T7106] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 180.850534][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 181.303457][ T5822] IPVS: starting estimator thread 0... [ 181.422047][ T7112] IPVS: using max 41 ests per chain, 98400 per kthread [ 181.467396][ T30] audit: type=1400 audit(1762546619.652:374): avc: denied { read } for pid=7116 comm="syz.0.277" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.570847][ T30] audit: type=1400 audit(1762546619.672:375): avc: denied { open } for pid=7116 comm="syz.0.277" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.570883][ T30] audit: type=1400 audit(1762546619.682:376): avc: denied { ioctl } for pid=7116 comm="syz.0.277" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 181.677255][ T7119] overlayfs: overlapping lowerdir path [ 181.730826][ T7120] overlayfs: overlapping lowerdir path [ 182.194256][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.686888][ T5888] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 182.699857][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.711254][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.719372][ T43] usb 3-1: can't read configurations, error -71 [ 182.999107][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 183.783758][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 183.792705][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 183.802336][ T7146] netlink: 'syz.0.283': attribute type 14 has an invalid length. [ 183.865491][ T7146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.283'. [ 184.261588][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.982484][ T5888] usb 1-1: device descriptor read/64, error -71 [ 185.009095][ T7163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.309634][ T7169] overlayfs: overlapping lowerdir path [ 185.362433][ T7170] overlayfs: overlapping lowerdir path [ 186.001195][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.008870][ T30] audit: type=1400 audit(1762546624.122:377): avc: denied { read } for pid=7172 comm="syz.1.290" dev="sockfs" ino=14496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.202465][ T5888] usb 1-1: device descriptor read/64, error -71 [ 186.456527][ T5888] usb usb1-port1: attempt power cycle [ 186.704952][ T30] audit: type=1400 audit(1762546624.892:378): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 186.981564][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.047331][ T30] audit: type=1400 audit(1762546625.202:379): avc: denied { setattr } for pid=7184 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 187.541532][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.704435][ T5888] usb 1-1: device not accepting address 7, error -71 [ 187.723342][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.740801][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.755815][ T7202] vxcan1: tx drop: invalid da for name 0x0800000000000000 [ 187.763650][ T43] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.781003][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.787754][ T30] audit: type=1400 audit(1762546625.972:380): avc: denied { read } for pid=7203 comm="syz.3.298" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 187.814054][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.823942][ T43] usb 5-1: Product: syz [ 187.834166][ T43] usb 5-1: Manufacturer: syz [ 187.844425][ T43] usb 5-1: SerialNumber: syz [ 187.908238][ T30] audit: type=1400 audit(1762546625.972:381): avc: denied { open } for pid=7203 comm="syz.3.298" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 187.934451][ T30] audit: type=1400 audit(1762546626.002:382): avc: denied { ioctl } for pid=7203 comm="syz.3.298" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 187.998638][ T43] cdc_mbim 5-1:1.0: skipping garbage [ 188.870787][ T30] audit: type=1400 audit(1762546627.052:383): avc: denied { connect } for pid=7218 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.118370][ T7228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.259998][ T43] cdc_mbim 5-1:1.0: bind() failure [ 189.284607][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 189.300126][ T43] cdc_ncm 5-1:1.1: bind() failure [ 189.457968][ T43] usb 5-1: USB disconnect, device number 8 [ 189.551005][ T30] audit: type=1400 audit(1762546627.712:384): avc: denied { load_policy } for pid=7229 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.635966][ T7232] SELinux: failed to load policy [ 190.795338][ T30] audit: type=1400 audit(1762546628.912:385): avc: denied { watch watch_reads } for pid=7233 comm="syz.1.307" path="/47" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 191.508967][ T30] audit: type=1400 audit(1762546629.312:386): avc: denied { connect } for pid=7238 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.569133][ T30] audit: type=1400 audit(1762546629.322:387): avc: denied { create } for pid=7238 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 192.185529][ T7255] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.193382][ T7255] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.202113][ T7255] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 192.209902][ T7255] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 194.130816][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 194.343724][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.350379][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.407287][ T7304] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.415187][ T7304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 195.425018][ T7304] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.432937][ T7304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 195.965265][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 195.989621][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.997316][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.011625][ T7306] bridge0: entered promiscuous mode [ 196.076864][ T7306] bridge0: entered allmulticast mode [ 196.232762][ T30] audit: type=1400 audit(1762546634.412:388): avc: denied { create } for pid=7297 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.677865][ T30] audit: type=1400 audit(1762546634.832:389): avc: denied { create } for pid=7312 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.757495][ T30] audit: type=1400 audit(1762546634.842:390): avc: denied { connect } for pid=7312 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.777384][ T30] audit: type=1400 audit(1762546635.012:391): avc: denied { read } for pid=7309 comm="syz.0.328" lport=51882 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 197.826724][ T30] audit: type=1400 audit(1762546635.232:392): avc: denied { setopt } for pid=7309 comm="syz.0.328" lport=51882 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 199.111562][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.296655][ T7352] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.306662][ T7352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 199.314964][ T7352] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.322716][ T7352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 199.457340][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 200.273148][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.286370][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.822058][ T5917] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.849773][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.859016][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.867779][ T5917] usb 1-1: Product: syz [ 200.873852][ T5917] usb 1-1: Manufacturer: syz [ 200.879051][ T5917] usb 1-1: SerialNumber: syz [ 200.895510][ T5917] cdc_mbim 1-1:1.0: skipping garbage [ 201.131369][ T7362] input: syz1 as /devices/virtual/input/input10 [ 201.171080][ T30] audit: type=1400 audit(1762546639.352:393): avc: denied { execute } for pid=7361 comm="syz.3.342" path="/cpuacct.usage_percpu" dev="ramfs" ino=14978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 201.227977][ T30] audit: type=1400 audit(1762546639.392:394): avc: denied { ioctl } for pid=7361 comm="syz.3.342" path="socket:[14981]" dev="sockfs" ino=14981 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.257425][ T7366] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 201.272929][ T30] audit: type=1400 audit(1762546639.452:395): avc: denied { bind } for pid=7367 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.322321][ T7366] CPU: 0 UID: 0 PID: 7366 Comm: syz.4.343 Not tainted syzkaller #0 PREEMPT(full) [ 201.322353][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.322365][ T7366] Call Trace: [ 201.322373][ T7366] [ 201.322381][ T7366] dump_stack_lvl+0x16c/0x1f0 [ 201.322418][ T7366] sysfs_warn_dup+0x7f/0xa0 [ 201.322445][ T7366] sysfs_do_create_link_sd+0x124/0x140 [ 201.322473][ T7366] sysfs_create_link+0x61/0xc0 [ 201.322498][ T7366] device_add+0x62c/0x1aa0 [ 201.322526][ T7366] ? __pfx_device_add+0x10/0x10 [ 201.322549][ T7366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.322576][ T7366] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 201.322619][ T7366] wiphy_register+0x1eb0/0x2b20 [ 201.322641][ T7366] ? netdev_run_todo+0x864/0x1320 [ 201.322678][ T7366] ? __pfx_wiphy_register+0x10/0x10 [ 201.322717][ T7366] ieee80211_register_hw+0x253d/0x4120 [ 201.322752][ T7366] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.322775][ T7366] ? __pfx___debug_object_init+0x10/0x10 [ 201.322811][ T7366] ? find_held_lock+0x2b/0x80 [ 201.322837][ T7366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.322863][ T7366] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 201.322884][ T7366] ? __hrtimer_setup+0x176/0x280 [ 201.322910][ T7366] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 201.322956][ T7366] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.322986][ T7366] ? __asan_memcpy+0x3c/0x60 [ 201.323021][ T7366] hwsim_new_radio_nl+0xba2/0x1330 [ 201.323051][ T7366] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.323088][ T7366] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 201.323110][ T7366] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 201.323137][ T7366] genl_family_rcv_msg_doit+0x209/0x2f0 [ 201.323161][ T7366] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.323191][ T7366] ? bpf_lsm_capable+0x9/0x10 [ 201.323213][ T7366] ? security_capable+0x7e/0x260 [ 201.323244][ T7366] ? ns_capable+0xd7/0x110 [ 201.323270][ T7366] genl_rcv_msg+0x55c/0x800 [ 201.323294][ T7366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.323315][ T7366] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.323345][ T7366] ? __lock_acquire+0x622/0x1c90 [ 201.323379][ T7366] netlink_rcv_skb+0x158/0x420 [ 201.323408][ T7366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.323429][ T7366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.323470][ T7366] ? netlink_deliver_tap+0x1ae/0xd30 [ 201.323503][ T7366] genl_rcv+0x28/0x40 [ 201.323530][ T7366] netlink_unicast+0x5aa/0x870 [ 201.323564][ T7366] ? __pfx_netlink_unicast+0x10/0x10 [ 201.323608][ T7366] netlink_sendmsg+0x8c8/0xdd0 [ 201.323642][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.323683][ T7366] ____sys_sendmsg+0xa98/0xc70 [ 201.323704][ T7366] ? copy_msghdr_from_user+0x10a/0x160 [ 201.323730][ T7366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.323757][ T7366] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.323786][ T7366] ___sys_sendmsg+0x134/0x1d0 [ 201.323809][ T7366] ? futex_private_hash_put+0x176/0x300 [ 201.323840][ T7366] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.323863][ T7366] ? __lock_acquire+0x622/0x1c90 [ 201.323933][ T7366] __sys_sendmsg+0x16d/0x220 [ 201.323960][ T7366] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.323985][ T7366] ? __x64_sys_futex+0x1e0/0x4c0 [ 201.324025][ T7366] do_syscall_64+0xcd/0xfa0 [ 201.324046][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.324066][ T7366] RIP: 0033:0x7fa264b8f6c9 [ 201.324084][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.324103][ T7366] RSP: 002b:00007fa2659e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.324122][ T7366] RAX: ffffffffffffffda RBX: 00007fa264de5fa0 RCX: 00007fa264b8f6c9 [ 201.324135][ T7366] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 201.324147][ T7366] RBP: 00007fa264c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.324159][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.324171][ T7366] R13: 00007fa264de6038 R14: 00007fa264de5fa0 R15: 00007ffe01e35c38 [ 201.324201][ T7366] [ 201.801602][ T30] audit: type=1400 audit(1762546639.982:396): avc: denied { setopt } for pid=7374 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.462061][ T30] audit: type=1400 audit(1762546639.992:397): avc: denied { ioctl } for pid=7374 comm="syz.1.348" path="socket:[14062]" dev="sockfs" ino=14062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.677256][ T5917] cdc_mbim 1-1:1.0: bind() failure [ 202.689643][ T5917] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 202.700350][ T5917] usb 1-1: USB disconnect, device number 9 [ 203.340440][ T7400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.343923][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 203.362434][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 203.445788][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 203.947789][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 203.960651][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 204.041880][ T7398] ceph: No mds server is up or the cluster is laggy [ 206.412903][ T7434] vivid-001: ================= START STATUS ================= [ 206.422056][ T7434] vivid-001: Radio HW Seek Mode: Bounded [ 206.428115][ T7434] vivid-001: Radio Programmable HW Seek: false [ 206.434616][ T7434] vivid-001: RDS Rx I/O Mode: Block I/O [ 206.440404][ T7434] vivid-001: Generate RBDS Instead of RDS: false [ 206.447091][ T7434] vivid-001: RDS Reception: true [ 206.452365][ T7434] vivid-001: RDS Program Type: 0 inactive [ 206.458339][ T7434] vivid-001: RDS PS Name: inactive [ 206.464013][ T7434] vivid-001: RDS Radio Text: inactive [ 206.469900][ T7434] vivid-001: RDS Traffic Announcement: false inactive [ 206.477853][ T7434] vivid-001: RDS Traffic Program: false inactive [ 206.490428][ T7434] vivid-001: RDS Music: false inactive [ 206.496615][ T7434] vivid-001: ================== END STATUS ================== [ 206.831847][ T30] audit: type=1400 audit(1762546645.022:398): avc: denied { connect } for pid=7431 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.965303][ T7441] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.973298][ T7441] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 206.983199][ T7441] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.990988][ T7441] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 207.724110][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 208.362136][ T30] audit: type=1326 audit(1762546646.432:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 208.429131][ T7455] xt_policy: neither incoming nor outgoing policy selected [ 208.446192][ T7459] input: syz0 as /devices/virtual/input/input11 [ 209.827265][ T30] audit: type=1326 audit(1762546646.432:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 209.916872][ T30] audit: type=1326 audit(1762546646.432:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 210.182401][ T30] audit: type=1326 audit(1762546646.432:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 211.961064][ T30] audit: type=1326 audit(1762546646.432:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 212.084448][ T30] audit: type=1326 audit(1762546646.432:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 212.159065][ T7476] FAULT_INJECTION: forcing a failure. [ 212.159065][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 212.171894][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) [ 212.171910][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.171917][ T7476] Call Trace: [ 212.171921][ T7476] [ 212.171925][ T7476] dump_stack_lvl+0x16c/0x1f0 [ 212.171947][ T7476] should_fail_ex+0x512/0x640 [ 212.171961][ T7476] ? fs_reclaim_acquire+0xae/0x150 [ 212.171976][ T7476] should_failslab+0xc2/0x120 [ 212.171989][ T7476] __kmalloc_noprof+0xdd/0x880 [ 212.172004][ T7476] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 212.172020][ T7476] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 212.172032][ T7476] tomoyo_realpath_from_path+0xc2/0x6e0 [ 212.172046][ T7476] ? tomoyo_profile+0x47/0x60 [ 212.172061][ T7476] tomoyo_path_number_perm+0x245/0x580 [ 212.172077][ T7476] ? tomoyo_path_number_perm+0x237/0x580 [ 212.172096][ T7476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.172113][ T7476] ? find_held_lock+0x2b/0x80 [ 212.172141][ T7476] ? find_held_lock+0x2b/0x80 [ 212.172154][ T7476] ? hook_file_ioctl_common+0x145/0x410 [ 212.172172][ T7476] ? __fget_files+0x20e/0x3c0 [ 212.172185][ T7476] security_file_ioctl+0x9b/0x240 [ 212.172199][ T7476] __x64_sys_ioctl+0xb7/0x210 [ 212.172215][ T7476] do_syscall_64+0xcd/0xfa0 [ 212.172227][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.172238][ T7476] RIP: 0033:0x7f091d58f6c9 [ 212.172249][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.172260][ T7476] RSP: 002b:00007f091b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.172270][ T7476] RAX: ffffffffffffffda RBX: 00007f091d7e5fa0 RCX: 00007f091d58f6c9 [ 212.172278][ T7476] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 212.172284][ T7476] RBP: 00007f091b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.172291][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.172297][ T7476] R13: 00007f091d7e6038 R14: 00007f091d7e5fa0 R15: 00007ffe7bae7118 [ 212.172312][ T7476] [ 212.172318][ T7476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.324403][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.501797][ T30] audit: type=1326 audit(1762546646.432:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 213.146423][ T30] audit: type=1326 audit(1762546646.432:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26bbd8df10 code=0x7ffc0000 [ 213.189223][ T30] audit: type=1326 audit(1762546646.432:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 213.263604][ T30] audit: type=1326 audit(1762546646.432:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 213.292527][ T30] audit: type=1400 audit(1762546646.432:409): avc: denied { read write } for pid=7448 comm="syz.0.365" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.316097][ T30] audit: type=1400 audit(1762546646.432:410): avc: denied { open } for pid=7448 comm="syz.0.365" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.341384][ T30] audit: type=1326 audit(1762546646.442:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 213.437960][ T30] audit: type=1326 audit(1762546646.442:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f26bbd8f6c9 code=0x7ffc0000 [ 213.731826][ T7493] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 214.302321][ T5945] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 214.602925][ T5945] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 214.627735][ T5945] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 214.671587][ T5945] usb 4-1: config 54 has no interface number 0 [ 214.722282][ T5945] usb 4-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 214.751590][ T5945] usb 4-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.790861][ T5945] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 214.811505][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.828224][ T5945] usb 4-1: Product: syz [ 214.833812][ T5945] usb 4-1: Manufacturer: syz [ 214.841549][ T5945] usb 4-1: SerialNumber: syz [ 215.051575][ T5822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.177453][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 215.191678][ T5822] usb 2-1: device descriptor read/64, error -71 [ 215.208228][ T139] usb 4-1: Failed to submit usb control message: -71 [ 215.218110][ T5945] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 215.219631][ T139] usb 4-1: unable to send the bmi data to the device: -71 [ 215.230404][ T5945] usb 4-1: USB disconnect, device number 8 [ 215.363992][ T139] usb 4-1: unable to get target info from device [ 215.541874][ T5822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.588586][ T139] usb 4-1: could not get target info (-71) [ 215.608760][ T139] usb 4-1: could not probe fw (-71) [ 215.721765][ T5822] usb 2-1: device descriptor read/64, error -71 [ 215.742146][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 215.862418][ T5822] usb usb2-port1: attempt power cycle [ 215.913303][ T7527] netlink: 256 bytes leftover after parsing attributes in process `syz.4.383'. [ 216.045370][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 216.066562][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 216.131164][ T43] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.141627][ T43] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.150249][ T43] usb 1-1: Product: syz [ 216.154805][ T43] usb 1-1: Manufacturer: syz [ 216.159597][ T43] usb 1-1: SerialNumber: syz [ 216.183179][ T43] usb 1-1: config 0 descriptor?? [ 216.197943][ T7515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.311517][ T5822] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.432130][ T5822] usb 2-1: device descriptor read/8, error -71 [ 216.500924][ T7531] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 216.508938][ T7531] netlink: 17 bytes leftover after parsing attributes in process `syz.3.384'. [ 216.961568][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.982714][ T5822] usb 2-1: device descriptor read/8, error -71 [ 217.101734][ T5822] usb usb2-port1: unable to enumerate USB device [ 217.641346][ T5822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.804181][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.822931][ T5822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.834575][ T5822] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.851291][ T5822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.868932][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.877142][ T5822] usb 4-1: Product: syz [ 217.881756][ T5822] usb 4-1: Manufacturer: syz [ 217.886448][ T5822] usb 4-1: SerialNumber: syz [ 217.895704][ T5822] cdc_mbim 4-1:1.0: skipping garbage [ 218.251520][ T5874] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 218.333022][ T5945] usb 1-1: USB disconnect, device number 10 [ 218.415181][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.432104][ T5874] usb 2-1: not running at top speed; connect to a high speed hub [ 218.452993][ T5874] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 218.475001][ T5874] usb 2-1: config 129 has no interface number 0 [ 218.494949][ T5874] usb 2-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 218.520162][ T5874] usb 2-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 218.548313][ T5874] usb 2-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.580703][ T5874] usb 2-1: config 129 interface 28 has no altsetting 0 [ 218.604693][ T5874] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 218.633206][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.652320][ T5874] usb 2-1: Product: syz [ 218.661283][ T5874] usb 2-1: Manufacturer: syz [ 218.673185][ T5874] usb 2-1: SerialNumber: syz [ 218.691590][ T7546] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.708841][ T5822] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 218.735474][ T5822] cdc_mbim 4-1:1.0: bind() failure [ 218.768663][ T5822] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 218.789647][ T5822] cdc_ncm 4-1:1.1: bind() failure [ 218.816943][ T5822] usb 4-1: USB disconnect, device number 9 [ 219.021625][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 219.021643][ T30] audit: type=1400 audit(1762546657.102:424): avc: denied { create } for pid=7552 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.302303][ T30] audit: type=1400 audit(1762546657.102:425): avc: denied { ioctl } for pid=7552 comm="syz.0.389" path="socket:[16408]" dev="sockfs" ino=16408 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.326815][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.423405][ T30] audit: type=1400 audit(1762546657.102:426): avc: denied { getopt } for pid=7552 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 219.468317][ T30] audit: type=1400 audit(1762546657.102:427): avc: denied { setopt } for pid=7552 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.525198][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.801684][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 220.816896][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.833837][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.853555][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.987815][ T43] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 221.011692][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.030388][ T5874] etas_es58x 2-1:129.28: Starting syz syz (Serial Number syz) [ 221.039392][ T43] usb 3-1: config 0 descriptor?? [ 221.071658][ T5874] etas_es58x 2-1:129.28: could not retrieve the product info string [ 221.077099][ T43] io_ti 3-1:0.0: required endpoints missing [ 221.752938][ T5874] usb 2-1: USB disconnect, device number 12 [ 221.760541][ T5874] etas_es58x 2-1:129.28: Disconnecting syz syz [ 221.770632][ T7584] wireguard0: entered promiscuous mode [ 221.777049][ T7584] wireguard0: entered allmulticast mode [ 221.796289][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.809335][ T30] audit: type=1400 audit(1762546659.982:428): avc: denied { ioctl } for pid=7572 comm="syz.2.395" path="socket:[15695]" dev="sockfs" ino=15695 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.834383][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.893462][ T30] audit: type=1400 audit(1762546659.982:429): avc: denied { accept } for pid=7572 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.917455][ T7590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7590 comm=syz.2.395 [ 222.930435][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 222.971768][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.464440][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.482264][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.692033][ T7611] netlink: 'syz.3.404': attribute type 27 has an invalid length. [ 223.734569][ T43] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.835133][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.849164][ T24] usb 3-1: USB disconnect, device number 10 [ 223.884697][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.891865][ T30] audit: type=1400 audit(1762546662.052:430): avc: denied { mounton } for pid=7605 comm="syz.3.404" path="/84/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 223.896330][ T43] usb 5-1: Product: syz [ 223.968721][ T43] usb 5-1: Manufacturer: syz [ 223.977009][ T43] usb 5-1: SerialNumber: syz [ 223.988473][ T43] cdc_mbim 5-1:1.0: skipping garbage [ 224.757260][ T30] audit: type=1400 audit(1762546662.942:431): avc: denied { write } for pid=7616 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.829397][ T7611] bridge0: left allmulticast mode [ 225.256326][ T43] cdc_mbim 5-1:1.0: bind() failure [ 225.276771][ T43] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 225.295239][ T43] usb 5-1: USB disconnect, device number 9 [ 225.349233][ T7611] batadv_slave_0: left promiscuous mode [ 225.379011][ T7611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.780312][ T7611] vxlan0: left promiscuous mode [ 225.787164][ T7611] vxlan0: left allmulticast mode [ 225.826423][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.834490][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.844581][ T7612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.934626][ T6020] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.967912][ T6020] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.994004][ T6020] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.012604][ T6020] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.019955][ T30] audit: type=1326 audit(1762546664.192:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 226.027056][ T6020] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.058819][ T6020] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.071065][ T6020] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.120116][ T6020] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.242333][ T30] audit: type=1326 audit(1762546664.202:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 226.282950][ T30] audit: type=1326 audit(1762546664.202:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 226.661490][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 227.279184][ T30] audit: type=1326 audit(1762546664.212:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.311802][ T30] audit: type=1326 audit(1762546664.212:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.335353][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.372256][ T30] audit: type=1326 audit(1762546664.212:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.427903][ T30] audit: type=1326 audit(1762546664.212:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.491620][ T30] audit: type=1326 audit(1762546664.212:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.533734][ T43] usb 5-1: device descriptor read/64, error -71 [ 227.537066][ T7651] IPVS: Scheduler module ip_vs_ not found [ 227.828301][ T30] audit: type=1326 audit(1762546664.212:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa264b8f6c9 code=0x7ffc0000 [ 227.911658][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.066217][ T7665] vivid-002: ================= START STATUS ================= [ 228.074481][ T7665] vivid-002: Radio HW Seek Mode: Bounded [ 228.074646][ T43] usb 5-1: device descriptor read/64, error -71 [ 228.086615][ T7665] [ 228.088992][ T7665] vivid-002: Radio Programmable HW Seek: false [ 228.095753][ T7665] vivid-002: RDS Rx I/O Mode: Block I/O [ 228.101877][ T7665] vivid-002: Generate RBDS Instead of RDS: false [ 228.115360][ T7665] vivid-002: RDS Reception: true [ 228.120495][ T7665] vivid-002: RDS Program Type: 0 inactive [ 228.127495][ T7665] vivid-002: RDS PS Name: inactive [ 228.135416][ T7665] vivid-002: RDS Radio Text: inactive [ 228.141116][ T7665] vivid-002: RDS Traffic Announcement: false inactive [ 228.148084][ T7665] vivid-002: RDS Traffic Program: false inactive [ 228.154975][ T7665] vivid-002: RDS Music: false inactive [ 228.160642][ T7665] vivid-002: ================== END STATUS ================== [ 228.213477][ T43] usb usb5-port1: attempt power cycle [ 228.537139][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 228.547092][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 228.556277][ T7670] netlink: 'syz.1.417': attribute type 14 has an invalid length. [ 228.594876][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.647141][ T43] usb 5-1: device descriptor read/8, error -71 [ 229.716512][ T7700] FAULT_INJECTION: forcing a failure. [ 229.716512][ T7700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.729932][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.4.426 Not tainted syzkaller #0 PREEMPT(full) [ 229.729959][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.729967][ T7700] Call Trace: [ 229.729972][ T7700] [ 229.729977][ T7700] dump_stack_lvl+0x16c/0x1f0 [ 229.729999][ T7700] should_fail_ex+0x512/0x640 [ 229.730016][ T7700] _copy_from_user+0x2e/0xd0 [ 229.730031][ T7700] kstrtouint_from_user+0xd6/0x1d0 [ 229.730048][ T7700] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 229.730064][ T7700] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.730089][ T7700] proc_fail_nth_write+0x83/0x220 [ 229.730103][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.730119][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.730130][ T7700] vfs_write+0x2a0/0x11d0 [ 229.730144][ T7700] ? __pfx___mutex_lock+0x10/0x10 [ 229.730155][ T7700] ? __pfx_vfs_write+0x10/0x10 [ 229.730169][ T7700] ? __fget_files+0x20e/0x3c0 [ 229.730190][ T7700] ksys_write+0x12a/0x250 [ 229.730200][ T7700] ? __pfx_ksys_write+0x10/0x10 [ 229.730211][ T7700] ? fdget+0x187/0x210 [ 229.730224][ T7700] do_syscall_64+0xcd/0xfa0 [ 229.730235][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.730247][ T7700] RIP: 0033:0x7fa264b8e17f [ 229.730257][ T7700] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.730268][ T7700] RSP: 002b:00007fa2659a6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.730279][ T7700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa264b8e17f [ 229.730287][ T7700] RDX: 0000000000000001 RSI: 00007fa2659a60a0 RDI: 0000000000000005 [ 229.730293][ T7700] RBP: 00007fa2659a6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.730300][ T7700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 229.730307][ T7700] R13: 00007fa264de6218 R14: 00007fa264de6180 R15: 00007ffe01e35c38 [ 229.730322][ T7700] [ 230.203545][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 230.203557][ T30] audit: type=1400 audit(1762546668.392:490): avc: denied { create } for pid=7695 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.800421][ T30] audit: type=1400 audit(1762546668.392:491): avc: denied { getopt } for pid=7695 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.823972][ T30] audit: type=1400 audit(1762546668.412:492): avc: denied { setopt } for pid=7695 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 231.351198][ T7715] fuse: Bad value for 'fd' [ 232.548279][ T30] audit: type=1400 audit(1762546670.732:493): avc: denied { create } for pid=7729 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.567920][ T30] audit: type=1400 audit(1762546670.732:494): avc: denied { listen } for pid=7729 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.601889][ T5917] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 232.948436][ T7738] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 233.318177][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.337923][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 233.353824][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 233.365620][ T7739] gretap1: entered promiscuous mode [ 233.370920][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.384340][ T30] audit: type=1400 audit(1762546670.732:495): avc: denied { setopt } for pid=7729 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 233.406944][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.418453][ T5917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.427087][ T5917] usb 2-1: Manufacturer: syz [ 233.436557][ T5917] usb 2-1: config 0 descriptor?? [ 233.625485][ T7743] netlink: 'syz.4.436': attribute type 7 has an invalid length. [ 233.703234][ T5822] usb 2-1: USB disconnect, device number 13 [ 234.244587][ T7754] FAULT_INJECTION: forcing a failure. [ 234.244587][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 234.282652][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 234.282679][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.282690][ T7754] Call Trace: [ 234.282697][ T7754] [ 234.282705][ T7754] dump_stack_lvl+0x16c/0x1f0 [ 234.282740][ T7754] should_fail_ex+0x512/0x640 [ 234.282763][ T7754] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 234.282796][ T7754] should_failslab+0xc2/0x120 [ 234.282825][ T7754] kmem_cache_alloc_node_noprof+0x78/0x770 [ 234.282862][ T7754] ? __alloc_skb+0x2b2/0x380 [ 234.282895][ T7754] ? __alloc_skb+0x2b2/0x380 [ 234.282935][ T7754] ? __lock_acquire+0xb8a/0x1c90 [ 234.282966][ T7754] __alloc_skb+0x2b2/0x380 [ 234.282990][ T7754] ? __pfx___alloc_skb+0x10/0x10 [ 234.283026][ T7754] mgmt_cmd_complete+0x4f/0x550 [ 234.283059][ T7754] set_def_system_config+0x93b/0x1520 [ 234.283092][ T7754] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 234.283123][ T7754] hci_sock_sendmsg+0x1522/0x25f0 [ 234.283159][ T7754] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 234.283196][ T7754] sock_write_iter+0x566/0x610 [ 234.283216][ T7754] ? __pfx_sock_write_iter+0x10/0x10 [ 234.283247][ T7754] ? bpf_lsm_file_permission+0x9/0x10 [ 234.283266][ T7754] ? security_file_permission+0x71/0x210 [ 234.283291][ T7754] ? rw_verify_area+0xcf/0x6c0 [ 234.283322][ T7754] vfs_write+0x7d3/0x11d0 [ 234.283341][ T7754] ? __pfx_sock_write_iter+0x10/0x10 [ 234.283363][ T7754] ? __pfx_vfs_write+0x10/0x10 [ 234.283379][ T7754] ? find_held_lock+0x2b/0x80 [ 234.283423][ T7754] ksys_write+0x1f8/0x250 [ 234.283442][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 234.283470][ T7754] do_syscall_64+0xcd/0xfa0 [ 234.283491][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.283511][ T7754] RIP: 0033:0x7fd23998f6c9 [ 234.283527][ T7754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.283546][ T7754] RSP: 002b:00007fd23a7fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.283564][ T7754] RAX: ffffffffffffffda RBX: 00007fd239be5fa0 RCX: 00007fd23998f6c9 [ 234.283576][ T7754] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000018 [ 234.283588][ T7754] RBP: 00007fd23a7fe090 R08: 0000000000000000 R09: 0000000000000000 [ 234.283600][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.283611][ T7754] R13: 00007fd239be6038 R14: 00007fd239be5fa0 R15: 00007fff120bf2c8 [ 234.283638][ T7754] [ 234.531128][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.579517][ T30] audit: type=1400 audit(1762546672.762:496): avc: denied { read write } for pid=7760 comm="syz.2.442" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 234.679117][ T30] audit: type=1400 audit(1762546672.762:497): avc: denied { open } for pid=7760 comm="syz.2.442" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.236659][ T7761] vxcan3: entered promiscuous mode [ 235.289733][ T30] audit: type=1400 audit(1762546673.472:498): avc: denied { wake_alarm } for pid=7771 comm="syz.3.446" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.631323][ T7787] capability: warning: `syz.1.453' uses deprecated v2 capabilities in a way that may be insecure [ 235.651528][ T30] audit: type=1400 audit(1762546674.829:499): avc: denied { name_connect } for pid=7789 comm="syz.0.455" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 235.830101][ T7785] loop9: detected capacity change from 0 to 7 [ 235.967926][ T7785] Dev loop9: unable to read RDB block 7 [ 236.002619][ T7785] loop9: unable to read partition table [ 236.018767][ T7785] loop9: partition table beyond EOD, truncated [ 236.031734][ T7785] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.421670][ T5874] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 236.590738][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 237.302761][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.340581][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.370705][ T7813] netlink: 'syz.2.461': attribute type 4 has an invalid length. [ 237.381975][ T5874] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.395014][ T7813] netlink: 17 bytes leftover after parsing attributes in process `syz.2.461'. [ 237.397368][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.480802][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.495533][ T5874] usb 1-1: Product: syz [ 237.591533][ T5874] usb 1-1: Manufacturer: syz [ 237.599549][ T7819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=7819 comm=syz.2.461 [ 237.612467][ T5874] usb 1-1: SerialNumber: syz [ 237.623030][ T30] audit: type=1400 audit(1762546676.809:500): avc: denied { setopt } for pid=7814 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.626353][ T5874] cdc_mbim 1-1:1.0: skipping garbage [ 237.777910][ T7827] bpf: Bad value for 'mode' [ 237.852851][ T7830] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 238.141920][ T5944] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.301629][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 238.320069][ T5944] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 238.329931][ T5944] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 238.342447][ T5944] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 238.354396][ T5944] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 238.368474][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.389272][ T5944] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 238.400191][ T5944] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 238.409248][ T5944] usb 5-1: Product: syz [ 238.413748][ T5944] usb 5-1: Manufacturer: syz [ 238.418571][ T5944] usb 5-1: SerialNumber: syz [ 238.447916][ T5944] usb 5-1: config 0 descriptor?? [ 238.456585][ T5944] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 238.468379][ T5944] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 238.617930][ T7847] Cannot find set identified by id 65534 to match [ 238.626108][ T30] audit: type=1326 audit(1762546677.819:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f091d58f6c9 code=0x0 [ 238.657158][ T5944] usb 5-1: USB disconnect, device number 14 [ 238.678460][ T5944] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 238.690280][ T30] audit: type=1400 audit(1762546677.879:502): avc: denied { open } for pid=7846 comm="syz.2.472" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.745787][ T5874] cdc_mbim 1-1:1.0: bind() failure [ 238.754969][ T5874] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 238.762749][ T5874] cdc_ncm 1-1:1.1: bind() failure [ 238.772691][ T5874] usb 1-1: USB disconnect, device number 11 [ 238.890427][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 239.234498][ T7854] bond3: entered promiscuous mode [ 239.239597][ T7854] bond3: entered allmulticast mode [ 239.245079][ T7854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.264395][ T7848] bond4: entered promiscuous mode [ 239.269441][ T7848] bond4: entered allmulticast mode [ 239.276846][ T7848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.041749][ T30] audit: type=1400 audit(1762546679.219:503): avc: denied { setopt } for pid=7880 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.170965][ T30] audit: type=1400 audit(1762546679.289:504): avc: denied { mount } for pid=7877 comm="syz.3.477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 240.544890][ T30] audit: type=1400 audit(1762546679.299:505): avc: denied { search } for pid=7877 comm="syz.3.477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 240.572483][ T30] audit: type=1400 audit(1762546679.299:506): avc: denied { search } for pid=7877 comm="syz.3.477" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 240.599773][ T5822] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 240.621877][ T30] audit: type=1400 audit(1762546679.299:507): avc: denied { read open } for pid=7877 comm="syz.3.477" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 241.367713][ T5822] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 241.527617][ T7896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.606390][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.841676][ T30] audit: type=1400 audit(1762546681.009:508): avc: denied { map } for pid=7895 comm="syz.1.484" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.841847][ T5822] usb 5-1: config 0 has no interface number 0 [ 241.889522][ T30] audit: type=1400 audit(1762546681.069:509): avc: denied { append } for pid=7895 comm="syz.1.484" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.914191][ T7899] Invalid logical block size (301989888) [ 241.929968][ T5822] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 241.939244][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.947398][ T5822] usb 5-1: Product: syz [ 241.951825][ T5822] usb 5-1: Manufacturer: syz [ 241.956452][ T5822] usb 5-1: SerialNumber: syz [ 241.963121][ T5822] usb 5-1: config 0 descriptor?? [ 242.237076][ T5822] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 242.260575][ T5822] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 242.272050][ T5822] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 242.279968][ T5822] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 242.295903][ T5822] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 242.311641][ T5822] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 242.321553][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.496409][ T30] audit: type=1400 audit(1762546681.679:510): avc: denied { accept } for pid=7909 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.503245][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.556782][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.669598][ T5888] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.722355][ T30] audit: type=1400 audit(1762546681.899:511): avc: denied { append } for pid=7914 comm="syz.3.489" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.796734][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.816129][ T5888] usb 1-1: config 0 descriptor?? [ 243.056179][ T7923] bridge1: entered allmulticast mode [ 243.282541][ T7931] tipc: Started in network mode [ 243.287775][ T7931] tipc: Node identity ac14141b, cluster identity 4711 [ 243.300281][ T7931] tipc: New replicast peer: 255.255.255.255 [ 243.308631][ T7931] tipc: Enabled bearer , priority 10 [ 243.592889][ T5822] usb 5-1: USB disconnect, device number 15 [ 243.593677][ T5888] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 243.608287][ T5822] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 243.650798][ T5888] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input12 [ 243.653573][ T5822] keyspan 5-1:0.133: device disconnected [ 243.744568][ T7937] FAULT_INJECTION: forcing a failure. [ 243.744568][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 243.750130][ T5888] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 243.769596][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.4.496 Not tainted syzkaller #0 PREEMPT(full) [ 243.769624][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.769634][ T7937] Call Trace: [ 243.769642][ T7937] [ 243.769650][ T7937] dump_stack_lvl+0x16c/0x1f0 [ 243.769681][ T7937] should_fail_ex+0x512/0x640 [ 243.769707][ T7937] should_failslab+0xc2/0x120 [ 243.769729][ T7937] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 243.769750][ T7937] ? sidtab_sid2str_get+0x17a/0x680 [ 243.769777][ T7937] ? kmemdup_noprof+0x29/0x60 [ 243.769803][ T7937] kmemdup_noprof+0x29/0x60 [ 243.769830][ T7937] sidtab_sid2str_get+0x17a/0x680 [ 243.769857][ T7937] sidtab_entry_to_string+0x33/0x110 [ 243.769882][ T7937] security_sid_to_context_core+0x35c/0x640 [ 243.769907][ T7937] avc_audit_post_callback+0x109/0x8f0 [ 243.769931][ T7937] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 243.769952][ T7937] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 243.769973][ T7937] ? skb_put+0x138/0x1b0 [ 243.769991][ T7937] ? audit_log_n_string+0x253/0x550 [ 243.770026][ T7937] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 243.770051][ T7937] common_lsm_audit+0x24e/0x300 [ 243.770073][ T7937] ? __pfx_common_lsm_audit+0x10/0x10 [ 243.770094][ T7937] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 243.770122][ T7937] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.770151][ T7937] ? avc_update_node.isra.0+0x4c0/0xb60 [ 243.770178][ T7937] slow_avc_audit+0x186/0x210 [ 243.770204][ T7937] ? __pfx_slow_avc_audit+0x10/0x10 [ 243.770232][ T7937] ? avc_denied+0x14a/0x190 [ 243.770257][ T7937] ? avc_has_perm_noaudit+0x306/0x3b0 [ 243.770288][ T7937] avc_has_perm+0x1b5/0x1f0 [ 243.770314][ T7937] ? __pfx_avc_has_perm+0x10/0x10 [ 243.770343][ T7937] ? irqentry_exit+0x3b/0x90 [ 243.770365][ T7937] sock_has_perm+0x252/0x2f0 [ 243.770395][ T7937] ? __pfx_sock_has_perm+0x10/0x10 [ 243.770433][ T7937] ? __might_fault+0xe3/0x190 [ 243.770461][ T7937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.770491][ T7937] selinux_netlink_send+0x4f6/0x830 [ 243.770515][ T7937] ? __pfx_selinux_netlink_send+0x10/0x10 [ 243.770538][ T7937] ? netlink_autobind.isra.0+0x158/0x370 [ 243.770575][ T7937] security_netlink_send+0x1e3/0x210 [ 243.770606][ T7937] netlink_sendmsg+0x84e/0xdd0 [ 243.770640][ T7937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.770679][ T7937] ____sys_sendmsg+0xa98/0xc70 [ 243.770700][ T7937] ? copy_msghdr_from_user+0x10a/0x160 [ 243.770726][ T7937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.770760][ T7937] ___sys_sendmsg+0x134/0x1d0 [ 243.770787][ T7937] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.770810][ T7937] ? __lock_acquire+0x622/0x1c90 [ 243.770879][ T7937] __sys_sendmsg+0x16d/0x220 [ 243.770905][ T7937] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.770950][ T7937] do_syscall_64+0xcd/0xfa0 [ 243.770972][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.770992][ T7937] RIP: 0033:0x7fa264b8f6c9 [ 243.771009][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.771030][ T7937] RSP: 002b:00007fa2659c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.771049][ T7937] RAX: ffffffffffffffda RBX: 00007fa264de6090 RCX: 00007fa264b8f6c9 [ 243.771062][ T7937] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 243.771074][ T7937] RBP: 00007fa2659c7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.771085][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.771097][ T7937] R13: 00007fa264de6128 R14: 00007fa264de6090 R15: 00007ffe01e35c38 [ 243.771127][ T7937] [ 244.118331][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.205709][ T30] audit: type=1400 audit(1762546682.929:512): avc: denied { nlmsg_read } for pid=7935 comm="syz.4.496" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.273374][ T10] usb 1-1: USB disconnect, device number 12 [ 244.433967][ T5939] tipc: Node number set to 2886997019 [ 244.435095][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.106551][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 245.887895][ T7952] loop4: detected capacity change from 0 to 2559 [ 245.902089][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.911786][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.942149][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.950120][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.002624][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.023005][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.067120][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.114609][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.436844][ T7952] ldm_validate_partition_table(): Disk read failed. [ 246.466730][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.505920][ T7952] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.556786][ T7952] Dev loop4: unable to read RDB block 0 [ 246.563889][ T7952] loop4: unable to read partition table [ 246.579323][ T7952] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 246.766306][ T7976] binder: 7966:7976 ioctl c018620c 200000000100 returned -1 [ 246.790689][ T30] audit: type=1400 audit(1762546685.949:513): avc: denied { write } for pid=7966 comm="syz.2.507" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 246.891943][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 247.248390][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 247.469090][ T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 247.529110][ T7984] tc_dump_action: action bad kind [ 247.788347][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.812369][ T10] usb 2-1: config 0 has no interface number 0 [ 247.959375][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 247.968844][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.606322][ T10] usb 2-1: Product: syz [ 248.610528][ T10] usb 2-1: Manufacturer: syz [ 248.661497][ T10] usb 2-1: SerialNumber: syz [ 248.739995][ T10] usb 2-1: config 0 descriptor?? [ 248.967081][ T10] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 249.035729][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 249.118453][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 249.141564][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 249.159955][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 249.201216][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.238186][ T5939] usb 2-1: USB disconnect, device number 14 [ 250.255375][ T5939] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 250.366626][ T5939] keyspan 2-1:0.133: device disconnected [ 251.657483][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 251.923527][ T8031] netlink: 404 bytes leftover after parsing attributes in process `syz.0.522'. [ 251.998230][ T30] audit: type=1400 audit(1762546691.179:514): avc: denied { read } for pid=8030 comm="syz.0.522" path="socket:[17686]" dev="sockfs" ino=17686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 252.247369][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 252.917466][ T8043] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 253.041645][ T8043] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 253.711670][ T5888] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 253.901400][ T5888] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 253.940763][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.980509][ T5888] usb 5-1: config 0 has no interface number 0 [ 254.018779][ T5888] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 254.047689][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.103038][ T5888] usb 5-1: Product: syz [ 254.108190][ T5888] usb 5-1: Manufacturer: syz [ 254.135115][ T5888] usb 5-1: SerialNumber: syz [ 254.165496][ T5888] usb 5-1: config 0 descriptor?? [ 254.266154][ T8071] lo: Caught tx_queue_len zero misconfig [ 254.412885][ T5888] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 254.424192][ T5888] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 254.549941][ T8076] tmpfs: Bad value for 'mpol' [ 254.822297][ T5888] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 254.831075][ T5888] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 254.841334][ T5888] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 254.864914][ T5888] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 254.885592][ T8084] binder: 8077:8084 ioctl c018620c 200000000100 returned -1 [ 254.967939][ T30] audit: type=1326 audit(1762546694.139:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bbd8f6c9 code=0x7fc00000 [ 255.592295][ T30] audit: type=1326 audit(1762546694.779:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.0.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26bbd2b779 code=0x7fc00000 [ 255.751527][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 256.128267][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.134782][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.584754][ T8102] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 256.600862][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.624632][ T8102] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 256.684031][ T8105] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 256.711692][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 256.816888][ T10] usb 5-1: USB disconnect, device number 16 [ 256.829472][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 256.862778][ T10] keyspan 5-1:0.133: device disconnected [ 256.901611][ T5939] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.229385][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.239804][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.280021][ T5939] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.332011][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.344338][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.354798][ T5939] usb 4-1: Product: syz [ 257.405294][ T5939] usb 4-1: Manufacturer: syz [ 257.409996][ T5939] usb 4-1: SerialNumber: syz [ 257.527532][ T5939] cdc_mbim 4-1:1.0: skipping garbage [ 258.301680][ T8125] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 258.313767][ T8125] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 258.322166][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.2.546 Not tainted syzkaller #0 PREEMPT(full) [ 258.331338][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.341374][ T8125] RIP: 0010:h5_recv+0x104/0x950 [ 258.346234][ T8125] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 61 89 7b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 258.365820][ T8125] RSP: 0018:ffffc9001c16fbf0 EFLAGS: 00010293 [ 258.371875][ T8125] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff884183fa [ 258.379834][ T8125] RDX: ffff88801f7aa480 RSI: ffffffff8841843f RDI: 0000000000000005 [ 258.387793][ T8125] RBP: ffffc9001c16fd78 R08: 0000000000000005 R09: 0000000000000000 [ 258.395754][ T8125] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 258.403717][ T8125] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907a80 [ 258.411670][ T8125] FS: 00007f091b7d56c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 258.420580][ T8125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.427145][ T8125] CR2: 00007f091b7d4f98 CR3: 000000007c086000 CR4: 00000000003526f0 [ 258.435117][ T8125] Call Trace: [ 258.438376][ T8125] [ 258.441283][ T8125] ? __pfx_h5_recv+0x10/0x10 [ 258.445864][ T8125] hci_uart_tty_receive+0x254/0x7e0 [ 258.451046][ T8125] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 258.456760][ T8125] tty_ioctl+0x583/0x1680 [ 258.461077][ T8125] ? __pfx_tty_ioctl+0x10/0x10 [ 258.465824][ T8125] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 258.472659][ T8125] ? hook_file_ioctl_common+0x145/0x410 [ 258.478191][ T8125] ? selinux_file_ioctl+0x180/0x270 [ 258.483369][ T8125] ? selinux_file_ioctl+0xb4/0x270 [ 258.488457][ T8125] ? __pfx_tty_ioctl+0x10/0x10 [ 258.493202][ T8125] __x64_sys_ioctl+0x18e/0x210 [ 258.497964][ T8125] do_syscall_64+0xcd/0xfa0 [ 258.502442][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.508309][ T8125] RIP: 0033:0x7f091d58f6c9 [ 258.512704][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.532289][ T8125] RSP: 002b:00007f091b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.540680][ T8125] RAX: ffffffffffffffda RBX: 00007f091d7e6090 RCX: 00007f091d58f6c9 [ 258.548630][ T8125] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 258.556933][ T8125] RBP: 00007f091d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.564896][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.573113][ T8125] R13: 00007f091d7e6128 R14: 00007f091d7e6090 R15: 00007ffe7bae7118 [ 258.581072][ T8125] [ 258.584069][ T8125] Modules linked in: [ 258.588200][ T8125] ---[ end trace 0000000000000000 ]--- [ 258.674016][ T30] audit: type=1400 audit(1762546697.859:517): avc: denied { setopt } for pid=8123 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.674109][ T8125] RIP: 0010:h5_recv+0x104/0x950 [ 258.728985][ T8125] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 61 89 7b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 258.761758][ T8125] RSP: 0018:ffffc9001c16fbf0 EFLAGS: 00010293 [ 258.771857][ T8125] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff884183fa [ 258.779990][ T8125] RDX: ffff88801f7aa480 RSI: ffffffff8841843f RDI: 0000000000000005 [ 258.793616][ T8125] RBP: ffffc9001c16fd78 R08: 0000000000000005 R09: 0000000000000000 [ 258.801840][ T8125] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 258.811556][ T8125] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907a80 [ 258.823427][ T8125] FS: 00007f091b7d56c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 258.833562][ T8125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.843487][ T8125] CR2: 0000200000533fa0 CR3: 000000007c086000 CR4: 00000000003526f0 [ 258.852774][ T8125] Kernel panic - not syncing: Fatal exception [ 258.859063][ T8125] Kernel Offset: disabled [ 258.863375][ T8125] Rebooting in 86400 seconds..