last executing test programs: 12.583997438s ago: executing program 1 (id=1286): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 12.436453974s ago: executing program 1 (id=1287): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x300, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010400000000000000000a00204000000007000000080c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a00fbffffff140002"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040041}, 0x40088d4) syz_open_dev$evdev(&(0x7f0000000240), 0x1000, 0x50040) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x802, 0x6]) write(0xffffffffffffffff, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 12.005138014s ago: executing program 3 (id=1288): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4080) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22903) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x4, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) 11.852421858s ago: executing program 1 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x7, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b8409000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r5, 0x4, 0x0, &(0x7f00000019c0), 0x0) io_destroy(r5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) 11.787737001s ago: executing program 2 (id=1290): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) syz_open_dev$vcsn(0x0, 0x1, 0x189c02) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9.454236768s ago: executing program 2 (id=1293): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x58, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000011000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000540)="cf3406b185e53ec0e6d4385e3135390e81e50eadf0cb2d8eebcd84eba9994b0c4bc46249be81062ba14c5f943d5e786cc96f279c77504a914e22e0080d33d34d140aff7e07a050139175c6b6e0498e3c978bd6cfb18ea5808bb6c696ae4fdbab0a246a2b73364e7fe114a03ba2c1aed5263216f512d0e4b90101a9f2c8e03b1ba4672ed80a2587fcfbedd052995fc025f506aeb12c09e6c7dbc477ea378dafdd", 0xa0}, {&(0x7f0000000400)="cad71394a0e903667df394c5fd", 0xd}, {&(0x7f0000000600)="c1cdad364fdd8425c1fb032d2d2b23b586ab739bb1af561795b6bbdef4eb597c68834a6751a7189691646f8d3bca1d6dfdffaf3af0968caf8634818fa52d4fd56c9b72d2780f34b52507d08edda81245edab9466ef2c0c90a85943673b6d30a1a463e19df24395f6d7441056", 0x6c}], 0x3, 0x0, 0x0, 0x2000800}}], 0x1, 0x8004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.525389583s ago: executing program 0 (id=1296): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x300, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x8f) ioctl$KDGETLED(r0, 0x4b31, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010400000000000000000a00204000000007000000080c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a00fbffffff140002"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040041}, 0x40088d4) syz_open_dev$evdev(&(0x7f0000000240), 0x1000, 0x50040) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x802, 0x6]) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 7.990122528s ago: executing program 0 (id=1297): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7.763811038s ago: executing program 0 (id=1299): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x4, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x5fc, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5d0, 0x2, [@TCA_U32_SEL={0x394, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x2007, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x1ff, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0x9, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x224, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f7}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0xfffffea5}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x81, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x4, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x5fc}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x407}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x6, &(0x7f0000000040)=[{0x0, 0x3, 0x6, 0x9}, {0xfffc, 0x1, 0x4, 0xac7}, {0x3, 0x8, 0x1, 0x5}, {0x1ff, 0x0, 0x6, 0x6}, {0x1, 0x5, 0x9, 0xb}, {0x6, 0xa, 0x29, 0x4}]}) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 7.711179285s ago: executing program 3 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) (fail_nth: 1) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[], 0x0) 7.69588658s ago: executing program 2 (id=1301): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000740)=""/4096, &(0x7f0000000100)=0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.438836924s ago: executing program 1 (id=1302): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="68ed52549462c962f4d6399cddd31d6dfa01f6c45366842ad3b539b7d510d58fa083d5f2df80fd343878ab57e351e950d6960863798b93471d137d2eb8dc8be184f6f9e4a63864dd9779d5e8ecb6d25d27e2123363e13dc04164baebb00376632bc43401f3cecd110f0b09030e88f1fdec854c91ab2e5e8bf3554b4cd07debee2df7a8966bca95e7bcc20426db49093cfae8fba6b33c75765e17f38a2a7b11d3e3ecc89674d68f1882ab8661977f89822bdb28168e609dfe6cba4166f527b6a327fdabfbbb5e1fa9db1b57256f501a28aefa0446290265bcd2b505d03938bfaaff876870e3c9198b37356167bffc23b2052afa3dda1f0859f2abe7c1451acaa5482bc0c2c45f1ec2557cd8d79d62e95bf29b14c8f283f69d2edffdfea146d9110985d97b849f3f92619a5d88531bf023f457715b44971d13f68dddae1e271742edc3859720b7c0b8da3d6c947882ce48b8eb8aaca8d9568939d705bd123f177dee2045cddaaa69ea050e18cf6b3becae71acf2ca6ec62631f63128dc1b9be04de5a949ae79e7175c7839954a9ca9f5e7dd71960844aa2b62aadefd9ff85d30a1036c82c4b91489a509694b2ddfffbf346b7a1af876da7a1286101f9b94ea69956a691fff86eacc692abab3ce261abbac5db4acf35733ca154d662af1898b9228bd335a78545bde8649a14859575960fc8696cb16c999f55f25a1471634e026512966afc881cfb5be8e388fcd56580b8a91cbc3fdc36be27509d9db017844b7f1db757e82eceb6ef1d0c1421dea3fc90fe21d275b9f1013813512316c059933bd694a244b5ca788fa0a51ba0b2ddcbe7a7fb01ba4cfd0be52a3f3056142135037360a3f1e0f723b4b607374e3902fac127ee4e498335ed53da03ec6eddf41cb8d31469fd24b6cfb5ea9a2880b2d04ecb7e3ed0cc3390d2f346ff6674d26278b79ddd6563d40a887c3db7fc6e956cbbb588415a0e6a5f7d4cb09c355fb305663eaf9a07c0ec744eb8a1e8f142d2485e7561ab6fbca2de576c0bf7506844c1209e9a4064a18bded1b86d7518c063b93c78c11b9da0eb4cad13d9d3c2c73d4682d43e94e2c40ed59b2780bac02df96be63522d517d3e281fce2279cf9e85f50cfb33883cc67e5be214be9161fe4b51936d66ebe0bca88451a740a7d5927b55aaeac9964b8e0b25b99b4ab79679f168284c39e86388fe6b65007ba5f1130026f78106a54072df04ed9314cf7bcaa2c32c6f43d24ad232a2050f692a5e71152a6a41b6975860683773f036d7fdc61908d064bfe4a3a2e46a687ff1ec8750a7334547d97a68852c7af9c50972db8ae0d0f57043656783ff169732c09ae13cd9296e48a978c9e37a910fe2dad92192c1371d04d497ec6aebd5ed75e1bb476c2fc904d3cdff646474b24441eef954c0a32d41fae65a3b0e8ec2e94fc565d4f185636b35caf9937d94223e6fdaa7e86a0b72939d98be0347a31a686b38882a4796c90053cdbb4c500428f588f8dc2d9ec59fb1b859e7352f1eb226f76124bb5288d6e3bb2b9a4658110463d7f1e2f02fe9d4b6a7705f626157a41a18c0ebfeadaed28e7a75a0982c0ace20248eb335bf6a59318213d1683d364ae6629dedaa7d43e77b1d4ab851cdbe1d10f7e02b6d7b5c55f37924d3bfb3ff794bf42549096accb33c8ece0a08eefe8bf2628943a7927d83f1bfc689950d54fd394c69fd773dccf3212da74da586927152e292340fc4cd09d580c78e5c6116d8664d8318a00f720202aa361a37bfb657d04c1e8444539a33b5bbb6bb0b289e81e178b0e461a2e6cbb9bbd8bdb1784e374aad2a442cbe47501fc3b9e0997a238bf709799efce49a61d57e96383b120ee705f289c89c576c1cb0566e84b6177ee99eb5486ee3b1ead8a99a5c5f314eed0bcdaccfb3b0c18d1b9e70cce475540ddbd5a0752d0e63035101fa90bf8ca34fb05792246deedd436c35e1a7c71ed755299c429d5d52bab47655640a4f98e799185fa4f3feecf6ced655e2092b75fa510fc5519fb6bee8d1063fbd106f62cad8b81495acbcc3fad2f50076773293075a638b6e077b57a7b87504f76506fc751141914d1be5c81a01f8626400f220d7289880bc0cf0a524ee374b8b171fefc5998ac99d2481dfba184367c28fd9bc1b291ed7c238a6d4eb86df7a8e361f4038a39847ebeb8c6f4173dc3bfc203f41b08ee56a0b480b8105e7b599c83b82c4140b336ed1e39b31bd1cb766a91683a326e8fc5ce7add035cb2070ef7e55d3e82bc9c22b8dae9d2e86df2bd28ff5986dc011d75a9211a4a43625f9506969606109774b4ab0485e971ad597ee9ab894072fbeb71c8f1b4eb584a744bf029cf31822ff4ab1951fcafb175a652fae4b407fb69abf10c1c9af5174cdb292807d4f8486feb5e7b6338fe5a8bd87adb01c73d1b96ef3d1d581ab6971cc616f76160f5e9dd57a8719213d3ac100e9f717c9ce4432bff8a42e3bc6620b027d16ad1d52bfdff4388f61e87a6c017ae2b16f5fd6d3ee3ee47eefe62eebab6d55d135cc97c8bba61c816005df38526e779f4118cb2d9536dde4b0e862ca3b34940ae24ac5c6d421e1c7fc3f57d04e0ebd35615798e4dbed7280f1e983aba3c01e619cc44d425a7eb8487b6bf224cfffd62ca63961fb87adaa3bdb720f3f155298e7aa4da610bcf85b8585d73e62ec8644bc0a4a03db85956e55c44f4542327cab1685d3f4a61516c4a9a658b8a621a1579a2e86520a960b9e00fa03037be6ef03ff8c0d7d8e6dc2676ce0747a71de906c235f64f2a49161d4555de442f2e9f9be823e6fa917206ac586f5426f89addd0242163d35e6b3c672bd247774f7ee37554e026762b5dd4b1f9d982c27bc31e2575f1fd8924c11efb9892e17a6623d07b99fc2dfc1a0aca7537a2baba929bea06ecb4868609e221e318a89db5c87f1c8736f054814413ed7c72a0096b17dcb3496f90ad56b9cee6ca29ed4ede47cbe865a484d80465d7e65b70fa572c93dc3e627e1f07581696c79557a812140ddaaaf7a6462c57a9a9f1ff4962668e150b3f28d9507ea8e579fa26267cd91594349a1200df78d0e18e6b9033f385f80035ee9e2552d09771a8e1272ab57778d83c79291d5f0016f7dd459362caf97328a5a12c293f5247b3e9f441dfa7e8419b097d7e0d58cbfc6fc1bddac849ebb7b5cc881e8593bd276d8d5d78655a144f7f430f19d05df0a5657e6fe7807dcef738b515367039a42e7194f9d5ce066487d9c8ae375d8dd6f5c184ac6d670bdbefc4e1fc5b56abc36b07b0f9f7928fbd6151af61f0fe4e258c6fe749ca64bacc6161d87dbbf8b39d38c4700377cf565c6f8bc80484a44165c944a9127fc03864f59e6f6a137c9a82454359c63e4a6f5d35d74ab19b85dae883e3c0f88fab5806159924b214ebc7d2ef20fd07c04a57e89321c8548fc70dfcdb06278806a5fa62462a85206d781658f71e9065939f529bc0a24c37d4b7e197b4cd198475bed17499b5d839dbe370f52fdf72b7e94129ebfd747dcf2f96ce19b343736facaa3d1bce60537db94ea1f909b4c91893370d3e3feadd873986e2d2f788cee99812cae59ea1895878ccc8c3215ed6285ff720adf6a597b5553f31118d054dbb7093c55e0ba5c2cf607d43dd013ee791f1c345400b0e548de48f3d9654dd1e5d5256f6b6b5fc2f8f8622622173e7ac4e65acac220be0455dd29c2f29b896a9220d415228c83299fd8a86a1ca8a9a5394bb12b1a2db197eeb040faa86ac500ddf0dd0f529ffd1b1519e500c50e27605b41128491dce84b5abe905304916f31e697a7043b2f07fe511c4107454b699fcf1b1e3f4c8ba0202eac4f2502acedf04ebd68df67f2f9ce0beb5e3cf49be4b84bedc2dd0f5826450cfd0221fd89ec9d171f15bb7b7f108a3a6a8701566ff3d3da986197342b0030a757e98b782da8820595c96bcf54e75d97bbc8c577a54a079f6145d8a43cddb1ab265d7dcdfbb0e94699b1ae093d6ac56b3de948188c567099f9b188c06e9151340dcb939403cc2fcc26a3baefd05c7867313883c6503e22a96b2bc7b3635f8fb496fd4131786e25793ded37b935ac1057bce0c405d9b5d908ee003b5da0290d0d14b085d979c1f46b10bb6ee9177bd15da31afd3059e5d49f5619d9e568baf33b25fec7598c0c9cfd018cbf4ba7fa70261a4aca2791d97069628d0ccb34ec87469b605764da95fbc6cb1fa48ea67197c16676f84956e18a5332645eb2c566a5e7c3480cc532d7f44045a3423e69ea72675bb97f4ff098bc191bc59345ae9c95d237db67ce07d26c5444f808bc96d352377fd94e1be917afdb3f8af227da78aadbe339e240c377e34ffa4f5c213f99604e695e6ccfcbf3db68dbac4f6de08546b864aacae44cc48c6a639c8344a774c82dc8f8eb242f505eb9ff96779eed7e35ecffa066b23fdd2cbc2a98d9209d7cf517416289744665d1aa78b0f817248f2765abb0f1dcd62e9090112b551c18fc550314e8ed56ed683a1387440f6e9afdc4afa597f3627e2bcbaac5c58444442bb3ec9e4b20df9806d18257cb4fdf09ac4f4d4fdd3c65b0fb6c903e77b0994e5e8c60ef057d000d7fcf4677f73ad23f3e5f4702601f630f57be7a3141b6fdb0e17bbfcdc40e1bed93323653ca351f27b44531f8afbe11bf227f54c12001c34cacedb1133e20b238a6a187728444945db701ff86a4dbfa08da656c431ef2e521a9839639202e7d257cc2d111d75eb54784a65e518a5bf6bb680afa7d9727cf7d6bbfb04066013ad7209e25ccfad1ae44d81b2016547018cdb155f3826b66cb854b15f0b4c4170bfd477c8e01023c15fd4f271c75be3085242fab6b5c26b93681e9fa654ff3c87e3246c78a4299ecc4ad693162cfa87cf1221d3560b74233dfcb1264f6e8295e44a0a1d436d58c79e7a4d4df49e9e07c984ebd800e708e85858b19040c2e14e3161a89035b917ad550c25c6ca01074dff6c102ebdf02e6e0514d119b0361ff917948e4f715940b271fb7a31da0bd951d9a27899033c21215dd1998da607bc2d64fea2f8be1e1cdeb35b0d4f389126ba3fb48336c6da61712eb05f47968757fee32dc932e98d0a1d1b74bc79047df46e5605419bc08755416c7a0b9ec0118d0da4b8e778226c011dcd66b133df78ba834080c4374e31dd5b76882970f9bf9656f5a307c8c947e759341443026f92a9605db82e09677dd5e237caf5e9e907ae28efb79ff978717ab949abbc7a25f1019d71442bfb12b26c5de93387696fa5abaccac4181d634f72ee0215d01fe63964edb9d22cd5dfecfaeac166399eb21ab7354c2fe2068f8be69a6aa14b37fafbc20f0b944ab1a1586e796ed4d18608189fecacd5ffc15732311557a4e12c0419b55620fa4138ebcdb184f6b4a6b8fbbecde74b5a1f90ce8ff12f21f8a69e52a3eb728874b56c0c95992673a943c34e28e8f6cb17b177ae465e0e95229653b7cc895e2fe899b0e5fda879f8198c7865e0ced62d3f4874f10d2aa733e7be5ebe4b1d6e1996d0dcb4346c1d4298259c55135ac5a6cafaecae7676269142084969640d560783495e8d0b3705ab4eac8c6601958132a5744b1a74f3c136b0155bcef1bd6d8496483fa141e3f7a12067b78e2c61153ae35e1e47e26f874226b5496ad4ecbd39a5d977559a05dfa656d73f2b328ae59d9e49f5b5f000bc4aa658ab660e0dcf978f2aa8cc41f789f27940f19cea2849e23ff0c365caf72ab44577e7a2f2a05efedea945dccb557f1218db309a86bf99a02b0784a63495400f43f2ab4799b6976c373", 0x1000, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000280)=""/57, 0x39) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(r2, &(0x7f0000001380)='ns/cgroup\x00') connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) keyctl$link(0x8, r1, r1) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(r0, &(0x7f0000001580)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioprio_get$pid(0x0, r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 6.655282474s ago: executing program 4 (id=1303): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = mq_open(&(0x7f00000006c0)='ns\xbf\x12\xe1\v\xff\x7f\x00\x00r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb8[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8n\x9a\xf1\x89\x8c\xf5\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9pR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\xdd-\xe6\xd4\f\x98,\x8e\xbc\xd9P\x98\xb7}\x8aC~a\x18g\vC\xae[\xef\x806(\xfc:l\x9f\x1dN\x86M\x87%\xef\x8c\xcc+\x9a,\x95\xe4\x0f\x84\xae$%)^\x8c\x96\xdf?\xcb\x97p4/\xdf\xb7\x03\xe7\xd8\xb2\xd7\xed\xe0\x89\t\xd4C\xb2\xe6G\x948\xbc\xf9Y\xd8J\xc9\x1c*8\x82\x9a}\x8c\xb0\xb3\xf3\xfbN\xb67\x11?^J\xf6\xdf\xe2\xf0\xb1\x7fl\x9b\x15\x02c\x85a\x8e.\x84\x0eW\x92\xe0\xd7\xb0\x0f\x16\x8b!\x027\b\xcf\x8cky\x97U\xafz\xc9\xb4\xa2\v0x\xefv\nN\xc1\xc8\xea\xce\xceB\x1b\x1f\xf3\x01h\x8d\xb5\xb2\x82\x10\x06\xe1\x9e,(`\xa3C\xd7m\r\xd04f\xb9\xc8h\xccs(`\xb7\xe1\x05\x8f_\xe7\xe6]\xf4\xdan\xf3\xc95\x89\xb3y\x98\xeb\x84O\x17s}\xcb:O>Z\'\x84f\x0e\xcf{\xff\xa6\x92\xa1\xbf5\x91\xf3\x97\x95\xa5\ny\xf0\xfb}\xb9N\xaf\xe3\xfc\xeam\xc7\x82?\xb8\xf5\x89\bz,\xf7\tmi\x1a', 0x40, 0x9, 0x0) mq_getsetattr(r1, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0xfffffffffffffe94, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x83) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x880) 6.224007476s ago: executing program 0 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x9, 0xa, 0x15000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffd, 0x7, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x8, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) 5.770586817s ago: executing program 2 (id=1305): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') fchmod(r1, 0x24) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r7, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r7, &(0x7f0000000200)=ANY=[], 0x6) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x3, 0x200}, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d9e61e10cb041b01c523010203010902120001001c00b1090447000000087e02"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.743961881s ago: executing program 3 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='5\x00\x00'], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00012abd7000ffdbdf250a0000000c00990004000000"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', 0x0}) sendto$inet(r2, &(0x7f0000000200)="6dea7fedf98229663f307cfbbfbac5294603f2f012dbc1010fae34e015776206f7eeba84a6dbaf9f31b64b715db64d79b78b0a858d3d5de8ec035a1857e27d2d0cb5d3d2bcf806779c16c6d2f76feb042f4f39868d21a95f575eae50fa7406471b78346cf8f19cd419504ce575b33529ded75663130bd6bde4a6c19407691ff891a2971a08283d59799230c6d507c3565058b1965815a2c9d627f25d3d2b7b8cf189b3d4f8068d0de9647f158ddcab3e091955cd5e8b0d9289c92f73b3267647c39f3081510d3138cb2c0da291c0", 0xce, 0x10008090, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) syz_emit_ethernet(0x11b3, &(0x7f0000001880)={@broadcast, @broadcast, @val={@void, {0x8100, 0x4, 0x1}}, {@mpls_uc={0x8847, {[{0x8}, {0x80000}, {0xe8}, {0xc}, {0x2}], @ipv6=@tipc_packet={0x7, 0x6, "4720b8", 0x1165, 0x6, 0x0, @mcast1, @mcast1, {[@srh={0x0, 0x2, 0x4, 0x1, 0x4, 0x38, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x3a, 0x6, 0x0, 0x4, 0x0, [@mcast2, @private0, @local]}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x64}, @srh={0x2f, 0x6, 0x4, 0x3, 0x8, 0x30, 0xb5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @empty]}, @srh={0x6c, 0x4, 0x4, 0x2, 0x1, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @dstopts={0x3c, 0x208, '\x00', [@generic={0x97, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0xf7, 0xe, [0x1, 0x1000, 0x9, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x2, 0x4, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x21, 0x2, 0x4, 0x1, 0xf0, 0x8, 0xe68, [@private1]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x1, 0x0, 0x1, 0x5, 0x5, 0x0, 0xef, 0x3, 0x2, 0x4e21, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x154, 0x3f7, 0x3b3, 0xe91]}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) write$binfmt_misc(r4, 0x0, 0x0) 5.656038245s ago: executing program 4 (id=1307): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffdb, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (fail_nth: 4) 5.314928499s ago: executing program 4 (id=1308): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x300, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x8f) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010400000000000000000a00204000000007000000080c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a00fbffffff140002"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040041}, 0x40088d4) syz_open_dev$evdev(&(0x7f0000000240), 0x1000, 0x50040) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x802, 0x6]) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4.997242222s ago: executing program 0 (id=1309): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4.972572688s ago: executing program 4 (id=1310): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgget(0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000e0601020000002f3a5de837f2ad84050900020073797a31e8ffffff0400010007000000f14302a79b55bc946e04973242db82fea06e27b0d4d7102923cf061b3a8150ee323497"], 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x4080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r6}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) 4.871096563s ago: executing program 0 (id=1311): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x4080) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22903) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x4, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) 4.310157278s ago: executing program 4 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x423d8f08}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffffffff, 0xc040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r5 = syz_io_uring_setup(0x41a1, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) r10 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, 0x0, &(0x7f0000000480)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.281310435s ago: executing program 3 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = gettid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x2480, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRESHEX, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4004) 4.211986989s ago: executing program 1 (id=1314): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="901904000000000018530000080000000000000000000000180000000700000000001852000006000000223136186606532618410000050000000000000000000000184a0000feffffff00000b0000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 3.166282703s ago: executing program 3 (id=1315): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000740)=""/4096, &(0x7f0000000100)=0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.952211699s ago: executing program 4 (id=1316): sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4092) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x4) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x5143fad7b81663e7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 2.304675077s ago: executing program 1 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0105000000000000002504000000140001800d0001007564703a73797a328aa7"], 0x28}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 1.736956685s ago: executing program 3 (id=1318): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x300, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010400000000000000000a00204000000007000000080c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000a00fbffffff140002"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040041}, 0x40088d4) syz_open_dev$evdev(&(0x7f0000000240), 0x1000, 0x50040) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x802, 0x6]) write(0xffffffffffffffff, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.469241242s ago: executing program 2 (id=1319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf253000000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0xaf8f4fd5f9cc7cb4}, 0x4) 0s ago: executing program 2 (id=1320): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x9, 0xa, 0x15000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffd, 0x7, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x8, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) kernel console output (not intermixed with test programs): call=202 compat=0 ip=0x7f3155b8eec9 code=0x7ffc0000 [ 277.804326][ T30] audit: type=1326 audit(1759170475.446:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3155b8eec9 code=0x7ffc0000 [ 277.885664][ T30] audit: type=1326 audit(1759170475.446:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155b8eec9 code=0x7ffc0000 [ 277.970981][ T30] audit: type=1326 audit(1759170475.446:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3155b8eec9 code=0x7ffc0000 [ 278.045927][ T30] audit: type=1326 audit(1759170475.446:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3155b8eec9 code=0x7ffc0000 [ 278.104744][ T8766] capability: warning: `syz.4.745' uses 32-bit capabilities (legacy support in use) [ 278.267505][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 278.453822][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 278.506549][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 278.516518][ T8770] team0: Port device batadv1 added [ 278.625621][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.746'. [ 278.653964][ T5912] usb 2-1: config 0 has an invalid interface number: 71 but max is 0 [ 278.673377][ T5912] usb 2-1: config 0 has no interface number 0 [ 278.692961][ T5912] usb 2-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 278.712794][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.785307][ T5912] usb 2-1: Product: syz [ 278.847655][ T5912] usb 2-1: Manufacturer: syz [ 278.852258][ T5912] usb 2-1: SerialNumber: syz [ 278.864922][ T5912] usb 2-1: config 0 descriptor?? [ 279.123757][ T5912] gspca_main: finepix-2.14.0 probing 04cb:011b [ 279.172476][ T5912] usb 2-1: USB disconnect, device number 9 [ 280.519402][ T5912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 280.881367][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 280.898117][ T5912] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 280.935823][ T5912] usb 4-1: config 0 has no interface number 0 [ 280.959550][ T5912] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 281.001530][ T5912] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 281.128897][ T5912] usb 4-1: config 0 interface 97 has no altsetting 0 [ 281.510523][ T5912] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 281.534987][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.563292][ T5912] usb 4-1: Product: syz [ 281.568702][ T5912] usb 4-1: Manufacturer: syz [ 281.573480][ T5912] usb 4-1: SerialNumber: syz [ 281.586397][ T5912] r8152-cfgselector 4-1: Unknown version 0x0000 [ 281.634741][ T5912] r8152-cfgselector 4-1: config 0 descriptor?? [ 281.644053][ T8821] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 281.919077][ T5912] hub 4-1:0.97: bad descriptor, ignoring hub [ 281.926066][ T5912] hub 4-1:0.97: probe with driver hub failed with error -5 [ 281.946518][ T8825] netlink: 'syz.1.759': attribute type 4 has an invalid length. [ 281.965454][ T8825] netlink: 'syz.1.759': attribute type 4 has an invalid length. [ 282.041425][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 282.041439][ T30] audit: type=1400 audit(1759170479.842:824): avc: denied { mount } for pid=8822 comm="syz.1.759" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 282.151347][ T5912] r8152-cfgselector 4-1: reset high-speed USB device number 8 using dummy_hcd [ 282.160684][ T30] audit: type=1400 audit(1759170479.879:825): avc: denied { write } for pid=8822 comm="syz.1.759" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.205571][ T30] audit: type=1400 audit(1759170479.879:826): avc: denied { open } for pid=8822 comm="syz.1.759" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.252297][ T30] audit: type=1400 audit(1759170479.879:827): avc: denied { read } for pid=8822 comm="syz.1.759" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 282.364614][ T30] audit: type=1400 audit(1759170480.123:828): avc: denied { setopt } for pid=8827 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.436956][ T30] audit: type=1400 audit(1759170480.123:829): avc: denied { bind } for pid=8827 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.566607][ T30] audit: type=1800 audit(1759170480.272:830): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.759" name="/" dev="9p" ino=2 res=0 errno=0 [ 282.587167][ T8832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.598722][ T8832] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 282.619897][ T8832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.625909][ T8832] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 282.666738][ T5912] r8152-cfgselector 4-1: failed to restore interface 97 altsetting 97 (error=-71) [ 282.701473][ T5912] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 282.900120][ T30] audit: type=1400 audit(1759170480.310:831): avc: denied { getopt } for pid=8830 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.960775][ T30] audit: type=1400 audit(1759170480.366:832): avc: denied { map } for pid=8829 comm="syz.2.761" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 282.979807][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059716800: rx timeout, send abort [ 283.006825][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059716800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 283.030641][ T30] audit: type=1400 audit(1759170480.366:833): avc: denied { execute } for pid=8829 comm="syz.2.761" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.054349][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.164750][ T8840] sp0: Synchronizing with TNC [ 284.918593][ T8863] sp0: Synchronizing with TNC [ 285.064044][ T1207] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 285.230064][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 285.239740][ T1207] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 285.248285][ T1207] usb 3-1: config 0 has no interface number 0 [ 285.256223][ T1207] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 285.266201][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.282036][ T1207] usb 3-1: Product: syz [ 285.291721][ T1207] usb 3-1: Manufacturer: syz [ 285.301052][ T1207] usb 3-1: SerialNumber: syz [ 285.319640][ T1207] usb 3-1: config 0 descriptor?? [ 285.336237][ T1207] hub 3-1:0.132: bad descriptor, ignoring hub [ 285.343310][ T1207] hub 3-1:0.132: probe with driver hub failed with error -5 [ 285.375777][ T1207] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input7 [ 285.465193][ T5954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 285.646860][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 285.669097][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.688523][ T5954] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.760515][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.016213][ T5954] usb 2-1: config 0 descriptor?? [ 286.271225][ T5912] usb 3-1: USB disconnect, device number 16 [ 286.283611][ T8866] warning: `syz.1.770' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.548848][ T5954] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 286.948244][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 286.976478][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 287.005206][ T10] usb 2-1: USB disconnect, device number 10 [ 287.774713][ T8902] netlink: 147356 bytes leftover after parsing attributes in process `syz.2.780'. [ 287.785985][ T8902] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 287.844910][ T8902] afs: Unknown parameter 'D`n' [ 287.920924][ T8902] netlink: 'syz.2.780': attribute type 21 has an invalid length. [ 287.928733][ T8902] netlink: 128 bytes leftover after parsing attributes in process `syz.2.780'. [ 287.938555][ T8902] netlink: 'syz.2.780': attribute type 6 has an invalid length. [ 287.946226][ T8902] netlink: 3 bytes leftover after parsing attributes in process `syz.2.780'. [ 289.736548][ T8916] netlink: 'syz.1.785': attribute type 4 has an invalid length. [ 289.783521][ T8916] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.785'. [ 290.015703][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 290.015728][ T30] audit: type=1400 audit(2000000003.096:868): avc: denied { read write } for pid=8914 comm="syz.1.785" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.222483][ T1207] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 290.305621][ T30] audit: type=1400 audit(2000000003.161:869): avc: denied { open } for pid=8914 comm="syz.1.785" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.338357][ T30] audit: type=1400 audit(2000000003.330:870): avc: denied { map } for pid=8914 comm="syz.1.785" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.361499][ T30] audit: type=1400 audit(2000000003.339:871): avc: denied { ioctl } for pid=8914 comm="syz.1.785" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x560b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.511485][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 290.523295][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.545082][ T1207] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 290.620056][ T30] audit: type=1400 audit(2000000003.629:872): avc: denied { read write } for pid=8931 comm="syz.4.790" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.669646][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.692157][ T30] audit: type=1400 audit(2000000003.629:873): avc: denied { open } for pid=8931 comm="syz.4.790" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.753678][ T1207] usb 1-1: config 0 descriptor?? [ 290.755666][ T30] audit: type=1400 audit(2000000003.779:874): avc: denied { create } for pid=8937 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 290.852575][ T30] audit: type=1400 audit(2000000003.825:875): avc: denied { write } for pid=8937 comm="syz.4.791" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.890402][ T8941] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 291.356652][ T1207] mcp2200 0003:04D8:00DF.000B: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 292.283130][ T30] audit: type=1400 audit(2000000004.789:876): avc: denied { ioctl } for pid=8944 comm="syz.1.793" path="socket:[21154]" dev="sockfs" ino=21154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.607293][ T5861] usb 1-1: USB disconnect, device number 13 [ 294.604954][ T8977] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[8977] [ 294.775301][ T30] audit: type=1400 audit(2000000007.539:877): avc: denied { setopt } for pid=8948 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.948760][ T30] audit: type=1400 audit(2000000009.578:878): avc: denied { ioctl } for pid=9001 comm="syz.1.808" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 296.995791][ T9002] input: syz1 as /devices/virtual/input/input8 [ 297.025116][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.450153][ T5861] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 297.618152][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.855539][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 297.862327][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.410920][ T5861] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 298.452150][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.481699][ T5861] usb 1-1: config 0 descriptor?? [ 298.730059][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 298.739530][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.761264][ T5861] usb 1-1: USB disconnect, device number 14 [ 299.039093][ T30] audit: type=1400 audit(2000000011.533:879): avc: denied { connect } for pid=9031 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.063133][ T30] audit: type=1400 audit(2000000011.533:880): avc: denied { map } for pid=9031 comm="syz.2.817" path="socket:[21434]" dev="sockfs" ino=21434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.089207][ T30] audit: type=1400 audit(2000000011.533:881): avc: denied { read } for pid=9031 comm="syz.2.817" path="socket:[21434]" dev="sockfs" ino=21434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.118239][ T30] audit: type=1804 audit(2000000011.608:882): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.817" name="/newroot/158/bus/file0" dev="overlay" ino=877 res=1 errno=0 [ 299.215755][ T9035] 9pnet_fd: Insufficient options for proto=fd [ 299.227468][ T30] audit: type=1400 audit(2000000011.711:883): avc: denied { module_request } for pid=9034 comm="syz.4.818" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.429389][ T30] audit: type=1400 audit(2000000011.907:884): avc: denied { mount } for pid=9037 comm="syz.0.820" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.511686][ T30] audit: type=1400 audit(2000000011.973:885): avc: denied { read } for pid=9037 comm="syz.0.820" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 299.537339][ T30] audit: type=1400 audit(2000000011.973:886): avc: denied { open } for pid=9037 comm="syz.0.820" path="/152/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 299.562839][ T30] audit: type=1400 audit(2000000012.001:887): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.725574][ T9055] sp0: Synchronizing with TNC [ 301.224227][ T9076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.862891][ T9090] fuse: Unknown parameter 'user_i00000000000000000000' [ 302.024833][ T5952] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 303.187602][ T5952] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 303.200827][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 303.487129][ T5952] usb 4-1: Product: syz [ 303.498609][ T5952] usb 4-1: Manufacturer: syz [ 303.516775][ T5952] usb 4-1: SerialNumber: syz [ 303.530917][ T5952] usb 4-1: config 0 descriptor?? [ 303.569508][ T5952] usb 4-1: selecting invalid altsetting 1 [ 303.599712][ T5952] comedi comedi5: could not switch to alternate setting 1 [ 303.617290][ T5952] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 303.685429][ T9099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.989425][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 303.989435][ T30] audit: type=1400 audit(2000000016.163:890): avc: denied { setopt } for pid=9084 comm="syz.3.831" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.093140][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.103756][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.186130][ T5952] usb 4-1: USB disconnect, device number 9 [ 304.255917][ T30] audit: type=1400 audit(2000000016.416:891): avc: denied { read } for pid=9107 comm="syz.0.838" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 304.340393][ T30] audit: type=1400 audit(2000000016.416:892): avc: denied { open } for pid=9107 comm="syz.0.838" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 304.428443][ T30] audit: type=1400 audit(2000000016.416:893): avc: denied { mount } for pid=9107 comm="syz.0.838" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.510979][ T30] audit: type=1400 audit(2000000016.650:894): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 305.731571][ T9127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.743940][ T30] audit: type=1400 audit(2000000017.800:895): avc: denied { shutdown } for pid=9128 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 305.804453][ T1207] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.097949][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 306.117165][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.181486][ T1207] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 306.247595][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.278238][ T1207] usb 4-1: config 0 descriptor?? [ 306.298905][ T30] audit: type=1400 audit(2000000018.324:896): avc: denied { mounton } for pid=9136 comm="syz.4.848" path="/syzcgroup/unified/syz4/pids.max" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 306.360526][ T9138] netlink: 9 bytes leftover after parsing attributes in process `syz.2.849'. [ 306.389262][ T30] audit: type=1400 audit(2000000018.371:897): avc: denied { ioctl } for pid=9137 comm="syz.2.849" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22726 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.416339][ T9140] netlink: 5 bytes leftover after parsing attributes in process `syz.2.849'. [ 306.429821][ T9138] gretap0: entered promiscuous mode [ 306.440799][ T9140] 0ªî{X¹¦: renamed from gretap0 [ 306.448046][ T9140] 0ªî{X¹¦: left promiscuous mode [ 306.454513][ T9140] 0ªî{X¹¦: entered allmulticast mode [ 306.461229][ T9140] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 306.478624][ T9133] syz_tun: entered allmulticast mode [ 306.826508][ T9133] pimreg: entered allmulticast mode [ 306.833857][ T1207] mcp2200 0003:04D8:00DF.000C: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 306.901676][ T9132] syz_tun: left allmulticast mode [ 306.958824][ T9132] pimreg: left allmulticast mode [ 307.064790][ T30] audit: type=1400 audit(2000000019.044:898): avc: denied { ioctl } for pid=9146 comm="syz.2.851" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 307.528150][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 307.537570][ T30] audit: type=1400 audit(2000000019.465:899): avc: denied { ioctl } for pid=9155 comm="syz.1.853" path="socket:[22821]" dev="sockfs" ino=22821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.951943][ T5912] usb 4-1: USB disconnect, device number 10 [ 308.096873][ T9174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.183204][ T9171] C: renamed from team_slave_0 (while UP) [ 308.466827][ T9171] netlink: 'syz.1.857': attribute type 3 has an invalid length. [ 308.483140][ T9171] netlink: 152 bytes leftover after parsing attributes in process `syz.1.857'. [ 308.498983][ T9171] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.120959][ T9189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.017619][ T1207] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 310.204784][ T1207] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.212793][ T1207] usb 1-1: config 0 has no interface number 0 [ 310.243791][ T1207] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 310.259682][ T1207] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 310.394297][ T1207] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 310.421670][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.554830][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 310.554847][ T30] audit: type=1400 audit(2000000022.299:901): avc: denied { mount } for pid=9204 comm="syz.4.867" name="/" dev="ramfs" ino=22921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 311.242016][ T30] audit: type=1400 audit(2000000022.374:902): avc: denied { watch_reads } for pid=9204 comm="syz.4.867" path="/170" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 311.281237][ T30] audit: type=1400 audit(2000000022.515:903): avc: denied { read } for pid=9202 comm="syz.1.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.315910][ T1207] usb 1-1: config 0 descriptor?? [ 311.321661][ T9192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.442388][ T1207] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.589448][ T9215] tipc: Started in network mode [ 311.606608][ T9215] tipc: Node identity e6b97ab3dba1, cluster identity 4711 [ 311.639934][ T30] audit: type=1400 audit(2000000023.319:904): avc: denied { write } for pid=9191 comm="syz.0.862" name="iowarrior0" dev="devtmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 311.669904][ T9215] tipc: Enabled bearer , priority 0 [ 311.691364][ T9219] syzkaller0: entered promiscuous mode [ 311.696830][ T9219] syzkaller0: entered allmulticast mode [ 311.978253][ T9214] tipc: Resetting bearer [ 311.990476][ T9214] tipc: Disabling bearer [ 312.178162][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 312.188415][ T5905] usb 1-1: USB disconnect, device number 15 [ 312.838462][ T9225] sp0: Synchronizing with TNC [ 313.491317][ T9246] sp0: Synchronizing with TNC [ 315.080594][ T9257] ALSA: seq fatal error: cannot create timer (-19) [ 315.334501][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.882'. [ 315.772631][ T30] audit: type=1400 audit(2000000027.173:905): avc: denied { bind } for pid=9268 comm="syz.4.882" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.849933][ T9275] syz_tun: entered allmulticast mode [ 316.210327][ T30] audit: type=1400 audit(2000000027.173:906): avc: denied { name_bind } for pid=9268 comm="syz.4.882" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 316.245880][ T30] audit: type=1400 audit(2000000027.173:907): avc: denied { node_bind } for pid=9268 comm="syz.4.882" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 316.340567][ T30] audit: type=1400 audit(2000000027.631:908): avc: denied { create } for pid=9268 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.343083][ T5861] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 316.545721][ T9272] syz_tun: left allmulticast mode [ 316.606813][ T5861] usb 4-1: device descriptor read/64, error -71 [ 316.874131][ T5861] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 317.026490][ T5861] usb 4-1: device descriptor read/64, error -71 [ 317.038493][ T9291] ceph: No mds server is up or the cluster is laggy [ 317.160775][ T5861] usb usb4-port1: attempt power cycle [ 317.355190][ T1207] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 317.430667][ T5905] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 317.467225][ T30] audit: type=1400 audit(2000000028.772:909): avc: denied { write } for pid=9296 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 317.530576][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 318.432815][ T1207] usb 2-1: config 0 has an invalid interface number: 71 but max is 0 [ 318.442571][ T1207] usb 2-1: config 0 has no interface number 0 [ 318.472534][ T1207] usb 2-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 318.486588][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.494833][ T1207] usb 2-1: Product: syz [ 318.598090][ T5861] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 318.616250][ T1207] usb 2-1: Manufacturer: syz [ 318.621191][ T1207] usb 2-1: SerialNumber: syz [ 318.621294][ T5905] usb 3-1: config 0 has no interfaces? [ 318.636558][ T5905] usb 3-1: New USB device found, idVendor=0411, idProduct=00da, bcdDevice=30.fd [ 318.646636][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.223484][ T5861] usb 4-1: device not accepting address 13, error -71 [ 319.231879][ T1207] usb 2-1: config 0 descriptor?? [ 319.237855][ T5905] usb 3-1: Product: syz [ 319.242593][ T5905] usb 3-1: Manufacturer: syz [ 319.247216][ T5905] usb 3-1: SerialNumber: syz [ 319.278234][ T5905] usb 3-1: config 0 descriptor?? [ 319.311944][ T30] audit: type=1400 audit(2000000030.484:910): avc: denied { connect } for pid=9309 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.332700][ T30] audit: type=1400 audit(2000000030.484:911): avc: denied { read } for pid=9309 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.934710][ T9] usb 3-1: USB disconnect, device number 17 [ 321.026632][ T1207] gspca_main: finepix-2.14.0 probing 04cb:011b [ 321.161107][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.895'. [ 321.839544][ T1207] usb 2-1: USB disconnect, device number 11 [ 321.958777][ T30] audit: type=1400 audit(2000000032.972:912): avc: denied { name_bind } for pid=9327 comm="syz.2.899" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 322.624591][ T5952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 322.829846][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 322.840903][ T5952] usb 5-1: config 0 has an invalid interface number: 71 but max is 0 [ 322.852745][ T5952] usb 5-1: config 0 has no interface number 0 [ 323.102682][ T9351] batman_adv: batadv0: Adding interface: gretap1 [ 323.109103][ T9351] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.134453][ T9351] batman_adv: batadv0: Interface activated: gretap1 [ 323.298427][ T5952] usb 5-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 323.350405][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.393154][ T5952] usb 5-1: Product: syz [ 323.403458][ T5952] usb 5-1: Manufacturer: syz [ 323.424241][ T5952] usb 5-1: SerialNumber: syz [ 323.444364][ T5952] usb 5-1: config 0 descriptor?? [ 323.696247][ T5952] gspca_main: finepix-2.14.0 probing 04cb:011b [ 323.708454][ T5952] usb 5-1: USB disconnect, device number 8 [ 324.711261][ T9360] ALSA: seq fatal error: cannot create timer (-19) [ 324.822052][ T30] audit: type=1400 audit(2000000035.657:913): avc: denied { mount } for pid=9366 comm="syz.3.908" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 324.856409][ T9367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.880227][ T9367] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 324.888499][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 324.900465][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 325.038369][ T9367] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 325.141834][ T9378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'. [ 325.244555][ T5952] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 325.331072][ T9367] overlayfs: failed to look up (tracing) for ino (-66) [ 325.459212][ T9381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.630749][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 325.791718][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.810516][ T5952] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 325.826014][ T30] audit: type=1400 audit(2000000036.592:914): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 325.936310][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.971591][ T5905] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 326.260501][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 327.081270][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.229847][ T9391] sctp: [Deprecated]: syz.3.915 (pid 9391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.229847][ T9391] Use struct sctp_sack_info instead [ 327.278422][ T30] audit: type=1400 audit(2000000037.827:915): avc: denied { mount } for pid=9388 comm="syz.3.915" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.311913][ T5905] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 327.313939][ T5952] usb 2-1: config 0 descriptor?? [ 327.339986][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.368784][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.433688][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.447266][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.467162][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.477687][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.561283][ T30] audit: type=1400 audit(2000000038.211:916): avc: denied { watch } for pid=9393 comm="syz.0.917" path="/173/bus/file1" dev="overlay" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 327.640422][ T30] audit: type=1400 audit(2000000038.211:917): avc: denied { watch_sb } for pid=9393 comm="syz.0.917" path="/173/bus/file1" dev="overlay" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 327.689265][ T30] audit: type=1400 audit(2000000038.248:918): avc: denied { map } for pid=9393 comm="syz.0.917" path="socket:[23309]" dev="sockfs" ino=23309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 327.718784][ T30] audit: type=1326 audit(2000000038.360:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 327.720612][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 327.821338][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 327.932114][ T30] audit: type=1326 audit(2000000038.360:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 327.959496][ T5952] mcp2200 0003:04D8:00DF.000D: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 328.078263][ T30] audit: type=1326 audit(2000000038.360:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 328.106176][ T5905] usb 3-1: USB disconnect, device number 18 [ 328.112206][ T30] audit: type=1326 audit(2000000038.360:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 328.209232][ T30] audit: type=1326 audit(2000000038.360:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 328.262055][ T30] audit: type=1326 audit(2000000038.360:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 328.423650][ T30] audit: type=1326 audit(2000000038.360:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb37f8eec9 code=0x7ffc0000 [ 329.151091][ T5905] usb 2-1: USB disconnect, device number 12 [ 329.181082][ T9414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.277195][ T9442] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 331.648539][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 331.744243][ T9446] sp0: Synchronizing with TNC [ 331.883790][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 331.892637][ T5912] usb 3-1: config 0 has an invalid interface number: 71 but max is 0 [ 331.901422][ T5912] usb 3-1: config 0 has no interface number 0 [ 331.911168][ T5912] usb 3-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 331.926132][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.934285][ T5912] usb 3-1: Product: syz [ 331.938978][ T5912] usb 3-1: Manufacturer: syz [ 331.943646][ T5912] usb 3-1: SerialNumber: syz [ 331.955410][ T5912] usb 3-1: config 0 descriptor?? [ 332.193589][ T5912] gspca_main: finepix-2.14.0 probing 04cb:011b [ 332.254036][ T5912] usb 3-1: USB disconnect, device number 19 [ 332.530846][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 333.017187][ T5954] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.187976][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 333.194820][ T5954] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 333.204899][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.216061][ T5954] usb 4-1: config 0 has no interface number 0 [ 333.235523][ T5954] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.292998][ T5954] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 333.302284][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.312316][ T5954] usb 4-1: Product: syz [ 333.316698][ T5954] usb 4-1: Manufacturer: syz [ 333.342979][ T5954] usb 4-1: SerialNumber: syz [ 333.429935][ T5954] usb 4-1: config 0 descriptor?? [ 333.441196][ T5954] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 333.452388][ T5954] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 333.711951][ T9462] input: syz1 as /devices/virtual/input/input11 [ 333.853941][ T9462] bridge2: entered promiscuous mode [ 333.911226][ T5954] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 333.921953][ T5954] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 333.937837][ T5954] usb 4-1: USB disconnect, device number 15 [ 334.727748][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 334.727764][ T30] audit: type=1400 audit(2000000044.912:939): avc: denied { read } for pid=9481 comm="syz.3.941" path="socket:[23731]" dev="sockfs" ino=23731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.155877][ T30] audit: type=1400 audit(2000000045.024:940): avc: denied { ioctl } for pid=9481 comm="syz.3.941" path="socket:[24584]" dev="sockfs" ino=24584 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.475065][ T30] audit: type=1400 audit(2000000045.613:941): avc: denied { create } for pid=9492 comm="syz.1.944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 336.030075][ T9499] sp0: Synchronizing with TNC [ 336.123451][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'. [ 338.014856][ T30] audit: type=1400 audit(2000000047.989:942): avc: denied { firmware_load } for pid=9520 comm="syz.1.951" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 338.184939][ T9523] netlink: 'syz.1.951': attribute type 5 has an invalid length. [ 338.231933][ T9523] syz.1.951 (9523) used greatest stack depth: 19752 bytes left [ 338.319610][ T30] audit: type=1400 audit(2000000048.270:943): avc: denied { read } for pid=9525 comm="syz.4.954" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.532167][ T30] audit: type=1400 audit(2000000048.270:944): avc: denied { open } for pid=9525 comm="syz.4.954" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.025486][ T30] audit: type=1400 audit(2000000048.279:945): avc: denied { ioctl } for pid=9525 comm="syz.4.954" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.083462][ T30] audit: type=1400 audit(2000000048.335:946): avc: denied { append } for pid=9525 comm="syz.4.954" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 339.577837][ T30] audit: type=1400 audit(2000000049.430:947): avc: denied { name_connect } for pid=9538 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 339.845716][ T30] audit: type=1400 audit(2000000049.663:948): avc: denied { listen } for pid=9538 comm="syz.1.956" lport=39170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.961908][ T9546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.087723][ T9536] ALSA: seq fatal error: cannot create timer (-19) [ 340.857365][ T9556] ALSA: seq fatal error: cannot create timer (-19) [ 341.419830][ T5952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 341.465403][ T9576] sp0: Synchronizing with TNC [ 341.485109][ T9577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.837173][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 341.853842][ T5952] usb 5-1: config 0 has an invalid interface number: 71 but max is 0 [ 341.871070][ T5952] usb 5-1: config 0 has no interface number 0 [ 341.892923][ T5952] usb 5-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 341.928604][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 341.928617][ T30] audit: type=1400 audit(2000000051.656:950): avc: denied { read write } for pid=9581 comm="syz.3.963" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 341.942201][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 341.958053][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.958073][ T5952] usb 5-1: Product: syz [ 341.958086][ T5952] usb 5-1: Manufacturer: syz [ 341.958100][ T5952] usb 5-1: SerialNumber: syz [ 341.989919][ T5952] usb 5-1: config 0 descriptor?? [ 342.005565][ T30] audit: type=1400 audit(2000000051.656:951): avc: denied { open } for pid=9581 comm="syz.3.963" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 342.042065][ T30] audit: type=1400 audit(2000000051.656:952): avc: denied { create } for pid=9581 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 342.066635][ T30] audit: type=1400 audit(2000000051.665:953): avc: denied { write } for pid=9581 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 342.087719][ T30] audit: type=1400 audit(2000000051.787:954): avc: denied { setcheckreqprot } for pid=9582 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 342.201166][ T9588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.492735][ T5952] gspca_main: finepix-2.14.0 probing 04cb:011b [ 342.523838][ T5952] usb 5-1: USB disconnect, device number 9 [ 343.344019][ T30] audit: type=1400 audit(2000000052.975:955): avc: denied { read } for pid=9599 comm="syz.3.969" path="socket:[24775]" dev="sockfs" ino=24775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.177978][ T5952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 344.402792][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 344.426613][ T5952] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 344.455921][ T30] audit: type=1400 audit(2000000054.013:956): avc: denied { getopt } for pid=9610 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.459470][ T5952] usb 5-1: config 0 has no interface number 0 [ 344.515236][ T5952] usb 5-1: too many endpoints for config 0 interface 32 altsetting 32: 121, using maximum allowed: 30 [ 344.540395][ T5952] usb 5-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 121 [ 344.571572][ T5952] usb 5-1: config 0 interface 32 has no altsetting 0 [ 344.584365][ T5952] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 344.604350][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.932418][ T5952] usb 5-1: config 0 descriptor?? [ 344.952070][ T9609] ALSA: seq fatal error: cannot create timer (-19) [ 347.117817][ T5952] usb 5-1: string descriptor 0 read error: -71 [ 347.132766][ T5952] usblcd 5-1:0.32: USBLCD model not supported. [ 347.142896][ T5952] usb 5-1: USB disconnect, device number 10 [ 347.419935][ T9641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.944394][ T9659] batman_adv: batadv0: Adding interface: gretap1 [ 348.950792][ T9659] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.976161][ T9659] batman_adv: batadv0: Interface activated: gretap1 [ 349.493071][ T9644] ALSA: seq fatal error: cannot create timer (-19) [ 349.603870][ T5861] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 349.672868][ T1207] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 349.742961][ T30] audit: type=1400 audit(2000000058.952:957): avc: denied { accept } for pid=9662 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 349.785660][ T5861] usb 4-1: config 0 has no interfaces? [ 349.843963][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 350.071231][ T30] audit: type=1400 audit(2000000059.036:958): avc: denied { shutdown } for pid=9662 comm="syz.4.984" lport=53293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.072145][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.103771][ T1207] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.115085][ T5861] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 350.125028][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.135099][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.141753][ T5861] usb 4-1: Product: syz [ 350.146644][ T5861] usb 4-1: Manufacturer: syz [ 350.152432][ T1207] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 350.152483][ T9668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16409 sclass=netlink_route_socket pid=9668 comm=syz.0.985 [ 350.161541][ T5861] usb 4-1: SerialNumber: syz [ 350.162963][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.187346][ T5861] usb 4-1: config 0 descriptor?? [ 350.230765][ T1207] usb 3-1: config 0 descriptor?? [ 350.848864][ T30] audit: type=1400 audit(2000000059.616:959): avc: denied { ioctl } for pid=9655 comm="syz.3.982" path="socket:[24179]" dev="sockfs" ino=24179 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 350.877779][ T30] audit: type=1400 audit(2000000059.616:960): avc: denied { write } for pid=9655 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 351.143613][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 351.180317][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 351.706606][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.721555][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 351.746147][ T2927] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.765956][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 351.775469][ T2927] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.793189][ T5954] usb 4-1: USB disconnect, device number 16 [ 351.821210][ T2927] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.057406][ T9690] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 352.358442][ T30] audit: type=1400 audit(2000000061.403:961): avc: denied { setopt } for pid=9691 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.397665][ T30] audit: type=1400 audit(2000000061.403:962): avc: denied { read } for pid=9691 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.690888][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 352.696894][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.707430][ T1207] usb 3-1: USB disconnect, device number 20 [ 353.002528][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 353.019227][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 353.309486][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 353.322489][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 353.574353][ T9707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.250680][ T9720] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 354.264885][ T9720] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 354.331576][ T30] audit: type=1400 audit(2000000063.199:963): avc: denied { firmware_load } for pid=9712 comm="syz.1.998" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 354.594569][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.163578][ T30] audit: type=1400 audit(2000000064.022:964): avc: denied { setopt } for pid=9726 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 355.670292][ T30] audit: type=1400 audit(2000000064.499:965): avc: denied { bind } for pid=9726 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.540372][ T9739] tipc: Started in network mode [ 356.571432][ T9739] tipc: Node identity c6710abcad6c, cluster identity 4711 [ 356.592832][ T9739] tipc: Enabled bearer , priority 0 [ 356.640933][ T30] audit: type=1400 audit(2000000065.416:966): avc: denied { read } for pid=9740 comm="syz.4.1005" dev="sockfs" ino=24419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 356.680942][ T9739] syzkaller0: entered promiscuous mode [ 356.686924][ T30] audit: type=1400 audit(2000000065.444:967): avc: denied { name_bind 0x1000000 } for pid=9740 comm="syz.4.1005" path="socket:[24419]" dev="sockfs" ino=24419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.530581][ T9740] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 359.424278][ T9739] syzkaller0: entered allmulticast mode [ 359.485601][ T5954] tipc: Node number set to 1797065404 [ 359.492880][ T30] audit: type=1400 audit(2000000066.454:968): avc: denied { read write } for pid=9740 comm="syz.4.1005" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.517497][ T30] audit: type=1400 audit(2000000066.454:969): avc: denied { open } for pid=9740 comm="syz.4.1005" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.541564][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.609913][ T30] audit: type=1400 audit(2000000068.156:970): avc: denied { getopt } for pid=9738 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.630932][ T30] audit: type=1400 audit(2000000068.166:971): avc: denied { getopt } for pid=9738 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 360.119780][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 360.374392][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.383073][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 360.408200][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.422654][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 360.423808][ T9765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.828303][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 360.893907][ T9] usb 1-1: string descriptor 0 read error: -71 [ 360.901066][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.910380][ T9738] tipc: Resetting bearer [ 360.933944][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.963130][ T9738] tipc: Disabling bearer [ 360.985374][ T9] usb 1-1: can't set config #1, error -71 [ 361.033061][ T9] usb 1-1: USB disconnect, device number 16 [ 361.272374][ T9776] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 361.280274][ T9776] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1013'. [ 361.289586][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 362.463213][ T9789] random: crng reseeded on system resumption [ 362.529649][ T9790] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.543669][ T9790] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 362.649836][ T30] audit: type=1400 audit(2000000070.860:972): avc: denied { write } for pid=9782 comm="syz.2.1016" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.767290][ T30] audit: type=1400 audit(2000000070.860:973): avc: denied { open } for pid=9782 comm="syz.2.1016" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.795938][ T30] audit: type=1400 audit(2000000070.916:974): avc: denied { write } for pid=9782 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 363.080843][ T30] audit: type=1400 audit(2000000071.421:975): avc: denied { ioctl } for pid=9753 comm="syz.1.1008" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 363.639196][ T9799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.380101][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1021'. [ 364.864327][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 365.086448][ T30] audit: type=1400 audit(2000000073.292:976): avc: denied { write } for pid=9816 comm="syz.3.1024" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 365.155840][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 365.170303][ T10] usb 5-1: config 0 has an invalid interface number: 38 but max is 0 [ 365.178856][ T10] usb 5-1: config 0 has no interface number 0 [ 365.184955][ T10] usb 5-1: config 0 interface 38 has no altsetting 0 [ 365.193422][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 365.203157][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.211186][ T10] usb 5-1: Product: syz [ 365.215436][ T10] usb 5-1: Manufacturer: syz [ 365.220117][ T10] usb 5-1: SerialNumber: syz [ 365.227075][ T10] usb 5-1: config 0 descriptor?? [ 365.241967][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 365.421748][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 365.495623][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 365.508799][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 365.520420][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 365.725606][ T9824] netlink: 'syz.1.1025': attribute type 3 has an invalid length. [ 366.051089][ T5954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 366.315131][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 366.325914][ T5954] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 366.334959][ T10] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 366.395458][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 366.466214][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.485410][ T5954] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.499033][ T5954] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.508123][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.054121][ T9852] sd 0:0:1:0: device reset [ 367.921805][ T1207] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 368.180275][ T1207] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 368.188978][ T1207] usb 4-1: config 1 has no interface number 0 [ 368.220587][ T1207] usb 4-1: config 1 interface 105 has no altsetting 0 [ 368.260249][ T1207] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 368.273934][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.308409][ T1207] usb 4-1: Product: syz [ 368.318848][ T1207] usb 4-1: Manufacturer: syz [ 368.341660][ T1207] usb 4-1: SerialNumber: syz [ 368.426601][ T5919] usb 5-1: USB disconnect, device number 11 [ 369.097653][ T5954] usb 1-1: usb_control_msg returned -71 [ 369.114264][ T5954] usbtmc 1-1:16.0: can't read capabilities [ 369.178246][ T5954] usb 1-1: USB disconnect, device number 17 [ 369.242743][ T1207] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 369.265797][ T9869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.277629][ T30] audit: type=1400 audit(2000000077.220:977): avc: denied { create } for pid=9854 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.530470][ T1207] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 369.662170][ T30] audit: type=1400 audit(2000000077.220:978): avc: denied { write } for pid=9854 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.673196][ T1207] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 369.750147][ T9873] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 369.750168][ T9873] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 369.750176][ T9873] overlayfs: missing 'lowerdir' [ 369.944446][ T1207] usb 4-1: USB disconnect, device number 17 [ 369.945835][ T1207] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 370.018993][ T1207] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 370.019097][ T1207] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 370.019209][ T1207] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 370.520837][ T9882] tipc: Enabled bearer , priority 0 [ 370.547524][ T9882] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 370.557372][ T9882] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 370.608490][ T9882] syzkaller0: mtu less than device minimum [ 371.043370][ T9870] ALSA: seq fatal error: cannot create timer (-19) [ 371.313032][ T9906] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[9906] [ 371.485252][ T30] audit: type=1400 audit(2000000079.306:979): avc: denied { bind } for pid=9903 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.519557][ T9910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1043'. [ 371.568929][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1043'. [ 371.701644][ T30] audit: type=1400 audit(2000000079.334:980): avc: denied { setopt } for pid=9903 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.722426][ T5905] tipc: Node number set to 1338374591 [ 372.781949][ T9929] input: syz1 as /devices/virtual/input/input16 [ 373.767277][ T9940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.946925][ T9956] sp0: Synchronizing with TNC [ 374.999455][ T5919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 375.405210][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 375.504283][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.621773][ T9968] fuse: Unknown parameter '00000000000000000000' [ 375.645370][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.890553][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 376.054474][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.078402][ T5919] usb 2-1: Product: syz [ 376.089353][ T5919] usb 2-1: Manufacturer: syz [ 376.093937][ T5919] usb 2-1: SerialNumber: syz [ 376.141550][ T5919] usb 2-1: config 0 descriptor?? [ 376.199021][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 376.285237][ T5919] gspca_stv06xx: st6422 sensor detected [ 376.301821][ T9978] sp0: Synchronizing with TNC [ 376.407257][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.435344][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.319072][ T9980] ALSA: seq fatal error: cannot create timer (-19) [ 378.355010][ T5919] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 378.814682][ T5919] usb 2-1: USB disconnect, device number 13 [ 379.036082][T10001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.263956][T10002] batman_adv: batadv0: Adding interface: gretap1 [ 379.270376][T10002] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.295726][T10002] batman_adv: batadv0: Interface activated: gretap1 [ 379.958374][T10008] bond0: option mode: unable to set because the bond device has slaves [ 380.324742][T10011] SELinux: policydb string does not match my string SE Linux [ 380.332727][T10011] SELinux: failed to load policy [ 380.365185][ T30] audit: type=1400 audit(2000000087.575:981): avc: denied { load_policy } for pid=10005 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 381.269364][ T30] audit: type=1400 audit(2000000088.183:982): avc: denied { bind } for pid=10007 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.331520][ T30] audit: type=1400 audit(2000000088.193:983): avc: denied { setopt } for pid=10007 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 381.390024][ T30] audit: type=1400 audit(2000000088.483:984): avc: denied { sqpoll } for pid=10007 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.445071][T10012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.480323][T10012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.601260][T10017] can0: slcan on ttyS3. [ 381.848320][T10030] nfs: Unknown parameter 'mºœ¶bz#hÁ5[W"' [ 382.327163][T10012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.348280][T10012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.383118][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 382.417883][T10027] bridge_slave_1: left allmulticast mode [ 382.478828][T10027] bridge_slave_1: left promiscuous mode [ 382.500749][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.533993][T10027] bridge_slave_0: left allmulticast mode [ 382.540277][T10019] can0 (unregistered): slcan off ttyS3. [ 382.579897][T10027] bridge_slave_0: left promiscuous mode [ 382.683088][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.516969][T10012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.559527][T10012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.624500][ T30] audit: type=1400 audit(2000000090.654:985): avc: denied { write } for pid=10050 comm="syz.3.1078" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 383.795130][T10012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.855944][T10012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.044912][ T2927] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.071722][ T2927] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.120484][ T2927] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.145450][ T2927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.164687][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.173035][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.230601][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.508048][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 384.519872][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.833087][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 384.856342][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 384.869603][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.880059][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.895685][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.949244][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.971806][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.071761][ T30] audit: type=1400 audit(2000000092.946:986): avc: denied { setopt } for pid=10078 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 386.095833][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 386.113639][ T9] usbtmc 4-1:16.0: can't read capabilities [ 386.218952][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 386.322353][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 386.364935][ T1207] usb 4-1: USB disconnect, device number 18 [ 386.405939][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 386.448545][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 386.579663][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.596240][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.606495][ T5861] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 386.617723][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.633906][ T5861] usb 3-1: config 0 descriptor?? [ 386.651798][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 386.682612][ T9] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 386.700315][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.726533][ T9] usb 5-1: config 0 has no interface number 0 [ 386.741171][ T9] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.770979][ T9] usb 5-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.792295][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 386.801646][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.811711][ T9] usb 5-1: Product: syz [ 386.827980][ T9] usb 5-1: Manufacturer: syz [ 386.843856][ T9] usb 5-1: SerialNumber: syz [ 386.863806][ T9] usb 5-1: config 0 descriptor?? [ 386.939138][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.293563][ T5861] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 387.294353][ T9] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 387.370431][ T9] usb 5-1: USB disconnect, device number 12 [ 387.388746][T10094] 8021q: VLANs not supported on lo [ 388.143347][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 388.214147][ T5861] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 388.223850][ T5861] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 388.233253][ T5861] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 388.252946][ T5861] usb 3-1: USB disconnect, device number 21 [ 388.448087][T10109] trusted_key: encrypted_key: insufficient parameters specified [ 388.466464][ T30] audit: type=1400 audit(2000000095.181:987): avc: denied { mounton } for pid=10106 comm="syz.4.1094" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 388.469508][T10109] tmpfs: Bad value for 'mpol' [ 391.422440][ T30] audit: type=1400 audit(2000000097.950:988): avc: denied { listen } for pid=10144 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.533062][ T30] audit: type=1400 audit(2000000097.950:989): avc: denied { read } for pid=10144 comm="syz.0.1103" path="socket:[27134]" dev="sockfs" ino=27134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.896041][T10157] FAULT_INJECTION: forcing a failure. [ 391.896041][T10157] name failslab, interval 1, probability 0, space 0, times 0 [ 391.918959][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1102'. [ 392.242911][T10157] CPU: 0 UID: 0 PID: 10157 Comm: syz.0.1106 Not tainted syzkaller #0 PREEMPT(full) [ 392.242943][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.242953][T10157] Call Trace: [ 392.242959][T10157] [ 392.242966][T10157] dump_stack_lvl+0x16c/0x1f0 [ 392.242993][T10157] should_fail_ex+0x512/0x640 [ 392.243014][T10157] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 392.243041][T10157] should_failslab+0xc2/0x120 [ 392.243060][T10157] __kmalloc_cache_noprof+0x6a/0x3e0 [ 392.243086][T10157] ? ovl_init_fs_context+0x11f/0x5f0 [ 392.243107][T10157] ? kasan_save_track+0x14/0x30 [ 392.243127][T10157] ovl_init_fs_context+0x11f/0x5f0 [ 392.243148][T10157] ? __pfx_ovl_init_fs_context+0x10/0x10 [ 392.243169][T10157] alloc_fs_context+0x54d/0x9c0 [ 392.243196][T10157] path_mount+0xbdd/0x2000 [ 392.243222][T10157] ? __pfx_path_mount+0x10/0x10 [ 392.243246][T10157] ? kmem_cache_free+0x2d1/0x4d0 [ 392.243262][T10157] ? putname+0x154/0x1a0 [ 392.243288][T10157] ? putname+0x154/0x1a0 [ 392.243313][T10157] ? __x64_sys_mount+0x28d/0x310 [ 392.243333][T10157] __x64_sys_mount+0x28d/0x310 [ 392.243355][T10157] ? __pfx___x64_sys_mount+0x10/0x10 [ 392.243384][T10157] do_syscall_64+0xcd/0x4e0 [ 392.243410][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.243427][T10157] RIP: 0033:0x7f9da0f8eec9 [ 392.243442][T10157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.243458][T10157] RSP: 002b:00007f9da1ede038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.243475][T10157] RAX: ffffffffffffffda RBX: 00007f9da11e5fa0 RCX: 00007f9da0f8eec9 [ 392.243486][T10157] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 392.243496][T10157] RBP: 00007f9da1ede090 R08: 0000200000000400 R09: 0000000000000000 [ 392.243506][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.243516][T10157] R13: 00007f9da11e6038 R14: 00007f9da11e5fa0 R15: 00007ffc8e203948 [ 392.243539][T10157] [ 392.454209][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.518675][ T30] audit: type=1400 audit(2000000098.970:990): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 392.580795][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 392.957255][ T30] audit: type=1400 audit(2000000099.344:991): avc: denied { create } for pid=10162 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 392.959745][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 393.052111][ T30] audit: type=1400 audit(2000000099.363:992): avc: denied { bind } for pid=10162 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 393.072346][ T30] audit: type=1400 audit(2000000099.419:993): avc: denied { setopt } for pid=10162 comm="syz.4.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 393.097893][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 393.109531][T10168] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 393.121512][T10168] syz.0.1109 (10168) used obsolete PPPIOCDETACH ioctl [ 393.129703][ T30] audit: type=1400 audit(2000000099.540:994): avc: denied { mount } for pid=10165 comm="syz.0.1109" name="/" dev="rpc_pipefs" ino=26275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 393.238025][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 393.245872][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.262945][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.273168][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.285306][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 393.294435][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.306684][ T9] usb 3-1: config 0 descriptor?? [ 393.869696][T10186] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 395.091571][T10198] netem: change failed [ 395.212089][T10202] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 396.412088][ T30] audit: type=1400 audit(2000000102.103:995): avc: denied { create } for pid=10206 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.466586][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 396.473110][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 396.522049][ T9] usb 3-1: USB disconnect, device number 22 [ 396.758756][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 397.354529][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.374648][ T5861] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.384827][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.396186][ T5861] usb 5-1: SerialNumber: syz [ 397.416332][ T5861] usb 5-1: bad CDC descriptors [ 397.601068][ T30] audit: type=1400 audit(2000000103.722:996): avc: denied { getattr } for pid=10222 comm="syz.0.1123" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 397.628639][ T5861] usb 5-1: USB disconnect, device number 13 [ 399.092087][T10242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.635146][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.665340][T10253] syz.1.1131: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.703251][T10253] CPU: 0 UID: 0 PID: 10253 Comm: syz.1.1131 Not tainted syzkaller #0 PREEMPT(full) [ 399.703268][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.703275][T10253] Call Trace: [ 399.703279][T10253] [ 399.703283][T10253] dump_stack_lvl+0x16c/0x1f0 [ 399.703303][T10253] warn_alloc+0x248/0x3a0 [ 399.703316][T10253] ? __pfx_warn_alloc+0x10/0x10 [ 399.703326][T10253] ? __pfx_stack_trace_save+0x10/0x10 [ 399.703346][T10253] ? kasan_save_stack+0x42/0x60 [ 399.703356][T10253] ? kasan_save_stack+0x33/0x60 [ 399.703365][T10253] ? kasan_save_track+0x14/0x30 [ 399.703374][T10253] ? xskq_create+0x52/0x1d0 [ 399.703385][T10253] ? xsk_setsockopt+0x74e/0x9a0 [ 399.703394][T10253] ? do_sock_setsockopt+0xf3/0x1d0 [ 399.703410][T10253] ? xskq_create+0xfb/0x1d0 [ 399.703421][T10253] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 399.703440][T10253] ? xskq_create+0xfb/0x1d0 [ 399.703454][T10253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.703473][T10253] ? xskq_create+0xfb/0x1d0 [ 399.703484][T10253] vmalloc_user_noprof+0x9e/0xe0 [ 399.703498][T10253] ? xskq_create+0xfb/0x1d0 [ 399.703508][T10253] xskq_create+0xfb/0x1d0 [ 399.703520][T10253] xsk_setsockopt+0x74e/0x9a0 [ 399.703531][T10253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.703541][T10253] ? find_held_lock+0x2b/0x80 [ 399.703556][T10253] ? selinux_socket_setsockopt+0x6a/0x80 [ 399.703570][T10253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.703581][T10253] do_sock_setsockopt+0xf3/0x1d0 [ 399.703597][T10253] __sys_setsockopt+0x1a0/0x230 [ 399.703611][T10253] __x64_sys_setsockopt+0xbd/0x160 [ 399.703622][T10253] ? do_syscall_64+0x91/0x4e0 [ 399.703635][T10253] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.703647][T10253] do_syscall_64+0xcd/0x4e0 [ 399.703662][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.703672][T10253] RIP: 0033:0x7f3155b8eec9 [ 399.703680][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.703691][T10253] RSP: 002b:00007f3156a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.703704][T10253] RAX: ffffffffffffffda RBX: 00007f3155de5fa0 RCX: 00007f3155b8eec9 [ 399.703714][T10253] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 399.703723][T10253] RBP: 00007f3155c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 399.703731][T10253] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 399.703737][T10253] R13: 00007f3155de6038 R14: 00007f3155de5fa0 R15: 00007ffc37c324f8 [ 399.703750][T10253] [ 399.703754][T10253] Mem-Info: [ 400.100849][T10253] active_anon:30928 inactive_anon:0 isolated_anon:0 [ 400.100849][T10253] active_file:19540 inactive_file:3666 isolated_file:0 [ 400.100849][T10253] unevictable:768 dirty:126 writeback:0 [ 400.100849][T10253] slab_reclaimable:12410 slab_unreclaimable:102313 [ 400.100849][T10253] mapped:34463 shmem:20618 pagetables:2078 [ 400.100849][T10253] sec_pagetables:0 bounce:0 [ 400.100849][T10253] kernel_misc_reclaimable:0 [ 400.100849][T10253] free:1309497 free_pcp:18777 free_cma:0 [ 400.202466][T10253] Node 0 active_anon:123816kB inactive_anon:0kB active_file:36080kB inactive_file:14528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137792kB dirty:556kB writeback:0kB shmem:80932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13060kB pagetables:8308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.238421][T10253] Node 1 active_anon:0kB inactive_anon:0kB active_file:42080kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.290468][T10253] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 400.322988][T10253] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 400.331212][T10253] Node 0 DMA32 free:1378800kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:123864kB inactive_anon:0kB active_file:36016kB inactive_file:13508kB unevictable:1536kB writepending:556kB present:3129332kB managed:2539304kB mlocked:0kB bounce:0kB free_pcp:50892kB local_pcp:24420kB free_cma:0kB [ 400.369793][T10253] lowmem_reserve[]: 0 0 1 1 1 [ 400.376728][T10253] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:64kB inactive_file:1020kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB [ 400.409811][ T30] audit: type=1400 audit(2000000106.322:997): avc: denied { write } for pid=10266 comm="syz.2.1135" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 400.445450][ T30] audit: type=1400 audit(2000000106.322:998): avc: denied { mounton } for pid=10266 comm="syz.2.1135" path="/214/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 400.477971][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 400.488426][T10253] Node 1 Normal free:3846232kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:42080kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21744kB local_pcp:9808kB free_cma:0kB [ 400.531035][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 400.535816][T10253] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 400.553611][T10253] Node 0 DMA32: 2431*4kB (UME) 1022*8kB (UM) 250*16kB (UM) 742*32kB (UM) 409*64kB (UM) 101*128kB (UME) 57*256kB (UM) 18*512kB (UM) 37*1024kB (UME) 10*2048kB (UME) 296*4096kB (UM) = 1379340kB [ 400.579267][T10253] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 400.596829][T10253] Node 1 Normal: 246*4kB (UME) 96*8kB (UME) 56*16kB (UME) 222*32kB (UME) 171*64kB (UME) 91*128kB (UME) 76*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 923*4096kB (M) = 3846232kB [ 400.625811][T10253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.695753][T10253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.750671][T10253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.806040][T10253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.815445][T10253] 41944 total pagecache pages [ 400.880819][T10253] 0 pages in swap cache [ 400.902214][T10253] Free swap = 124996kB [ 400.912300][T10253] Total swap = 124996kB [ 400.918514][T10253] 2097051 pages RAM [ 400.924980][T10253] 0 pages HighMem/MovableOnly [ 400.929719][T10253] 430263 pages reserved [ 400.933913][T10253] 0 pages cma reserved [ 401.172290][T10267] orangefs_mount: mount request failed with -4 [ 403.061802][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 403.532897][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 403.543350][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.563976][ T10] usb 3-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.614373][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 403.663653][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.687724][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.712895][ T10] usb 3-1: Product: syz [ 403.748578][ T10] usb 3-1: Manufacturer: syz [ 403.753172][ T10] usb 3-1: SerialNumber: syz [ 404.754471][ T5954] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 404.922766][T10323] loop5: detected capacity change from 0 to 7 [ 404.942530][T10323] Dev loop5: unable to read RDB block 7 [ 404.948504][T10323] loop5: unable to read partition table [ 404.966683][T10323] loop5: partition table beyond EOD, truncated [ 404.975577][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 404.987440][ T5954] usb 1-1: config 0 has an invalid interface number: 71 but max is 0 [ 405.039314][T10294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1143'. [ 405.061108][ T5954] usb 1-1: config 0 has no interface number 0 [ 405.069053][ T30] audit: type=1400 audit(2000000110.709:999): avc: denied { append } for pid=10293 comm="syz.2.1143" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.092996][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 405.102305][T10323] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.115233][ T5954] usb 1-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 405.144998][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.145115][T10294] Invalid logical block size (8196) [ 405.179255][ T30] audit: type=1400 audit(2000000110.803:1000): avc: denied { connect } for pid=10317 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.202721][ T5954] usb 1-1: Product: syz [ 405.259377][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.275342][ T10] usb 3-1: USB disconnect, device number 23 [ 405.296058][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 405.305890][ T5954] usb 1-1: Manufacturer: syz [ 405.319510][ T5905] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 405.341513][ T5954] usb 1-1: SerialNumber: syz [ 405.481622][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.543088][ T5905] usb 5-1: config 0 has no interface number 0 [ 405.552251][ T5954] usb 1-1: config 0 descriptor?? [ 405.597071][ T5905] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 405.636250][T10329] sp0: Synchronizing with TNC [ 405.853423][ T5905] usb 5-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.885320][ T5954] gspca_main: finepix-2.14.0 probing 04cb:011b [ 405.929920][ T5905] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 405.949066][ T5954] usb 1-1: USB disconnect, device number 18 [ 405.966828][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.005647][ T5905] usb 5-1: Product: syz [ 406.020840][ T5905] usb 5-1: Manufacturer: syz [ 406.074562][ T5905] usb 5-1: SerialNumber: syz [ 406.109096][ T5905] usb 5-1: config 0 descriptor?? [ 406.162106][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 406.324115][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 406.345909][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 406.376247][ T5905] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 406.380530][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 14585, setting to 1023 [ 406.427727][ T5905] usb 5-1: USB disconnect, device number 14 [ 406.446489][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.555201][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.565267][ T10] usb 3-1: Product: syz [ 406.569689][ T10] usb 3-1: Manufacturer: syz [ 406.575359][ T10] usb 3-1: SerialNumber: syz [ 406.604560][ T10] usb 3-1: config 0 descriptor?? [ 407.050976][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.061517][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.098181][T10344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.430924][ T5905] usb 3-1: USB disconnect, device number 24 [ 407.534831][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.872117][T10353] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 408.429757][T10360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.572378][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 409.856302][ T9] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 409.879790][ T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 409.986901][ T9] usb 1-1: config 8 has no interface number 0 [ 410.016364][ T9] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.062888][ T9] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 410.107197][ T9] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 410.160518][ T9] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 410.180532][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.206609][ T9] usb 1-1: NFC: intf ffff88803004c000 id ffffffff8f56a740 [ 410.310492][ T30] audit: type=1400 audit(2000000115.620:1001): avc: denied { ioctl } for pid=10369 comm="syz.3.1164" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 410.464975][T10364] QAT: Device 197 not found [ 410.465457][T10376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.264935][ T30] audit: type=1400 audit(2000000116.510:1002): avc: denied { bind } for pid=10383 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 411.508136][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 411.609660][ T5954] usb 1-1: USB disconnect, device number 19 [ 411.741337][ T5905] usb 5-1: device descriptor read/64, error -71 [ 411.884092][T10391] random: crng reseeded on system resumption [ 411.957531][T10391] siw: device registration error -23 [ 412.037850][ T30] audit: type=1400 audit(2000000117.146:1003): avc: denied { ioctl } for pid=10388 comm="syz.0.1170" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 412.366732][ T30] audit: type=1400 audit(2000000117.530:1004): avc: denied { write } for pid=10395 comm="syz.2.1172" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 412.390539][ T5905] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 412.820444][ T30] audit: type=1400 audit(2000000117.698:1005): avc: denied { ioctl } for pid=10395 comm="syz.2.1172" path="/220/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 412.894964][ T5905] usb 5-1: device descriptor read/64, error -71 [ 413.024069][ T5905] usb usb5-port1: attempt power cycle [ 413.044393][T10403] sp0: Synchronizing with TNC [ 413.433527][ T5905] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 413.509121][ T5905] usb 5-1: device descriptor read/8, error -71 [ 413.795419][ T5905] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 413.908973][ T5905] usb 5-1: device descriptor read/8, error -71 [ 414.033290][ T5905] usb usb5-port1: unable to enumerate USB device [ 414.344659][T10425] random: crng reseeded on system resumption [ 414.395002][T10425] siw: device registration error -23 [ 415.441086][T10435] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.441086][T10435] program syz.2.1181 not setting count and/or reply_len properly [ 416.927521][ T5912] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 417.361657][T10450] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 417.367718][ T5912] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 417.435679][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.452544][ T5912] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 417.461638][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.471523][ T5912] usb 5-1: Product: syz [ 417.475725][ T5912] usb 5-1: Manufacturer: syz [ 417.481440][ T5912] usb 5-1: SerialNumber: syz [ 417.492981][ T5912] usb 5-1: config 0 descriptor?? [ 417.595051][T10450] veth0_vlan: left promiscuous mode [ 417.631708][T10450] veth0_vlan: entered promiscuous mode [ 417.660299][T10450] team0: Device veth0_vlan failed to register rx_handler [ 418.050164][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 418.151355][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 418.210396][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 418.239555][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.259038][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 418.357041][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.368078][ T9] usb 4-1: config 0 descriptor?? [ 419.048139][ T9] mcp2200 0003:04D8:00DF.000F: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 419.629687][ T9] usb 5-1: USB disconnect, device number 19 [ 420.318230][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 421.009597][T10504] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 421.658582][ T5954] usb 4-1: USB disconnect, device number 19 [ 423.204344][T10530] trusted_key: encrypted_key: insufficient parameters specified [ 423.226589][T10530] tmpfs: Unknown parameter '' [ 423.795147][T10534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.153944][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.162460][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.606685][ T30] audit: type=1400 audit(2000000128.988:1006): avc: denied { append } for pid=10541 comm="syz.0.1210" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.629518][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.637726][T10546] binder: 10541:10546 ioctl c018620b 0 returned -14 [ 425.032587][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.058236][ T5861] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 425.080011][T10528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.250212][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 425.259959][ T5905] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 425.272487][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 425.307574][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 425.330578][T10528] batman_adv: batadv0: Interface deactivated: gretap1 [ 425.346407][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 425.358909][ T5861] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 425.373015][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.428235][ T5905] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 425.439209][ T5905] usb 3-1: config 0 has no interface number 0 [ 425.452551][ T5861] usb 1-1: config 0 descriptor?? [ 425.464756][ T2927] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.487204][ T5905] usb 3-1: too many endpoints for config 0 interface 149 altsetting 88: 114, using maximum allowed: 30 [ 425.507544][ T2927] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.562235][ T5905] usb 3-1: config 0 interface 149 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 425.602226][ T2927] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.647587][ T5905] usb 3-1: config 0 interface 149 has no altsetting 0 [ 425.655469][ T2927] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.700574][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.712389][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.765414][ T5905] usb 3-1: Product: syz [ 425.784272][ T5905] usb 3-1: Manufacturer: syz [ 425.805437][ T5905] usb 3-1: SerialNumber: syz [ 425.828099][ T5861] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 425.841621][ T5905] usb 3-1: config 0 descriptor?? [ 425.864279][ T5861] hdpvr 1-1:0.0: device init failed [ 425.872838][ T5861] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 425.957211][ T5861] usb 1-1: USB disconnect, device number 20 [ 426.011442][ T30] audit: type=1400 audit(2000000130.289:1007): avc: denied { name_bind } for pid=10559 comm="syz.3.1215" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 426.523674][ T5905] usb 3-1: USB disconnect, device number 25 [ 428.277815][T10590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1222'. [ 428.457647][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.960993][T10601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.660219][T10620] FAULT_INJECTION: forcing a failure. [ 430.660219][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 430.964258][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT(full) [ 430.964283][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.964293][T10620] Call Trace: [ 430.964299][T10620] [ 430.964305][T10620] dump_stack_lvl+0x16c/0x1f0 [ 430.964332][T10620] should_fail_ex+0x512/0x640 [ 430.964353][T10620] ? __kmalloc_noprof+0xbf/0x510 [ 430.964373][T10620] ? iter_file_splice_write+0x1cc/0x12e0 [ 430.964390][T10620] should_failslab+0xc2/0x120 [ 430.964409][T10620] __kmalloc_noprof+0xd2/0x510 [ 430.964430][T10620] iter_file_splice_write+0x1cc/0x12e0 [ 430.964452][T10620] ? kfree+0x2b4/0x4d0 [ 430.964475][T10620] ? __pfx_iter_file_splice_write+0x10/0x10 [ 430.964487][T10620] ? __lock_acquire+0xb97/0x1ce0 [ 430.964516][T10620] ? __pfx_copy_splice_read+0x10/0x10 [ 430.964546][T10620] ? __pfx_iter_file_splice_write+0x10/0x10 [ 430.964566][T10620] direct_splice_actor+0x18f/0x6c0 [ 430.964586][T10620] splice_direct_to_actor+0x345/0xa30 [ 430.964604][T10620] ? __pfx_direct_splice_actor+0x10/0x10 [ 430.964622][T10620] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 430.964632][T10620] ? get_pid_task+0xfc/0x250 [ 430.964645][T10620] do_splice_direct+0x174/0x240 [ 430.964657][T10620] ? __pfx_do_splice_direct+0x10/0x10 [ 430.964667][T10620] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 430.964680][T10620] ? rw_verify_area+0xcf/0x6c0 [ 430.964698][T10620] do_sendfile+0xb06/0xe50 [ 430.964710][T10620] ? __pfx_do_sendfile+0x10/0x10 [ 430.964725][T10620] __x64_sys_sendfile64+0x154/0x220 [ 430.964739][T10620] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 430.964758][T10620] do_syscall_64+0xcd/0x4e0 [ 430.964776][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.964787][T10620] RIP: 0033:0x7f9da0f8eec9 [ 430.964795][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.964805][T10620] RSP: 002b:00007f9da1ede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.964815][T10620] RAX: ffffffffffffffda RBX: 00007f9da11e5fa0 RCX: 00007f9da0f8eec9 [ 430.964822][T10620] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 430.964827][T10620] RBP: 00007f9da1ede090 R08: 0000000000000000 R09: 0000000000000000 [ 430.964833][T10620] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 430.964839][T10620] R13: 00007f9da11e6038 R14: 00007f9da11e5fa0 R15: 00007ffc8e203948 [ 430.964852][T10620] [ 432.624401][ T5919] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 432.890017][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 432.899625][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.910561][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.920322][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.928823][ T5919] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 432.944783][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.959599][ T5919] usb 4-1: config 0 descriptor?? [ 434.124503][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1242'. [ 434.176902][T10660] usb usb8: usbfs: process 10660 (syz.2.1243) did not claim interface 0 before use [ 434.494437][T10664] sp0: Synchronizing with TNC [ 434.870712][T10669] netlink: 'syz.4.1245': attribute type 8 has an invalid length. [ 435.108582][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 435.120182][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 435.208045][ T5919] usb 4-1: USB disconnect, device number 20 [ 435.482696][ T30] audit: type=1400 audit(2000000139.156:1008): avc: denied { write } for pid=10675 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 435.988893][ T5919] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 436.059389][ T30] audit: type=1400 audit(2000000139.699:1009): avc: denied { read open } for pid=10689 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.087977][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.228931][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.231921][ T30] audit: type=1400 audit(2000000139.699:1010): avc: denied { getattr } for pid=10689 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.275596][ T5919] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 436.719678][ T5952] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 436.727313][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.805701][ T5919] usb 4-1: config 0 descriptor?? [ 436.899296][ T5952] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.911720][ T5952] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 436.937950][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 436.956745][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 436.991462][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 437.006356][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 437.104517][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 437.370106][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 437.453514][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 437.459496][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 437.468838][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 437.485504][ T30] audit: type=1400 audit(2000000140.999:1011): avc: denied { mount } for pid=10704 comm="syz.0.1253" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 437.616582][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 437.627733][ T5919] usb 4-1: USB disconnect, device number 21 [ 437.636009][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 437.649484][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 437.687982][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 437.700230][T10716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.736509][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 437.994566][T10681] tipc: Resetting bearer [ 438.141958][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 438.205711][ T30] audit: type=1400 audit(2000000141.710:1012): avc: denied { add_name } for pid=10687 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.381881][ T30] audit: type=1400 audit(2000000141.710:1013): avc: denied { create } for pid=10687 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.408403][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 438.668263][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 438.685600][ T30] audit: type=1400 audit(2000000141.710:1014): avc: denied { write } for pid=10687 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=6918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.768338][ T5952] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 438.806423][ T5952] usb 3-1: string descriptor 0 read error: -22 [ 438.827823][ T5952] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 438.840435][ T30] audit: type=1400 audit(2000000141.710:1015): avc: denied { append } for pid=10687 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.888616][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.927157][ T5952] usb 3-1: can't set config #7, error -71 [ 438.945430][ T30] audit: type=1400 audit(2000000141.822:1016): avc: denied { setattr } for pid=10722 comm="syz.3.1256" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 439.331548][ T5952] usb 3-1: USB disconnect, device number 26 [ 439.683013][ T30] audit: type=1400 audit(2000000142.280:1017): avc: denied { remove_name } for pid=10730 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.843493][T10759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.335364][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 444.680317][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 444.690816][ T5905] usb 4-1: config 0 has an invalid interface number: 71 but max is 0 [ 444.745353][ T5905] usb 4-1: config 0 has no interface number 0 [ 444.815054][ T5905] usb 4-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 444.960632][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.961037][ T5905] usb 4-1: Product: syz [ 444.961284][ T5905] usb 4-1: Manufacturer: syz [ 444.961624][ T5905] usb 4-1: SerialNumber: syz [ 445.231170][ T5905] usb 4-1: config 0 descriptor?? [ 446.695061][T10823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.132752][ T5905] gspca_main: finepix-2.14.0 probing 04cb:011b [ 447.220910][ T5905] usb 4-1: USB disconnect, device number 22 [ 448.036672][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1276'. [ 448.385077][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.298661][T10861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1281'. [ 450.333933][T10887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.591241][T10908] sp0: Synchronizing with TNC [ 451.971012][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.832086][T10925] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 452.844128][T10925] overlayfs: failed to resolve './file1': -2 [ 453.506716][T10934] batman_adv: batadv0: Adding interface: gretap0 [ 453.589569][T10934] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.701720][T10934] batman_adv: batadv0: Interface activated: gretap0 [ 454.433059][T10954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.028380][T10996] FAULT_INJECTION: forcing a failure. [ 456.028380][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 456.071391][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.3.1300 Not tainted syzkaller #0 PREEMPT(full) [ 456.071414][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.071424][T10996] Call Trace: [ 456.071430][T10996] [ 456.071437][T10996] dump_stack_lvl+0x16c/0x1f0 [ 456.071464][T10996] should_fail_ex+0x512/0x640 [ 456.071483][T10996] ? fs_reclaim_acquire+0xae/0x150 [ 456.071508][T10996] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 456.071533][T10996] should_failslab+0xc2/0x120 [ 456.071554][T10996] __kmalloc_noprof+0xd2/0x510 [ 456.071577][T10996] tomoyo_realpath_from_path+0xc2/0x6e0 [ 456.071606][T10996] ? tomoyo_profile+0x47/0x60 [ 456.071626][T10996] tomoyo_path_number_perm+0x245/0x580 [ 456.071646][T10996] ? tomoyo_path_number_perm+0x237/0x580 [ 456.071670][T10996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.071692][T10996] ? find_held_lock+0x2b/0x80 [ 456.071738][T10996] ? find_held_lock+0x2b/0x80 [ 456.071758][T10996] ? hook_file_ioctl_common+0x145/0x410 [ 456.071782][T10996] ? __fget_files+0x20e/0x3c0 [ 456.071806][T10996] security_file_ioctl+0x9b/0x240 [ 456.071833][T10996] __x64_sys_ioctl+0xb7/0x210 [ 456.071860][T10996] do_syscall_64+0xcd/0x4e0 [ 456.071885][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.071901][T10996] RIP: 0033:0x7f5fa7b8eec9 [ 456.071915][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.071931][T10996] RSP: 002b:00007f5fa8a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.071948][T10996] RAX: ffffffffffffffda RBX: 00007f5fa7de5fa0 RCX: 00007f5fa7b8eec9 [ 456.071959][T10996] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 000000000000000e [ 456.071969][T10996] RBP: 00007f5fa8a56090 R08: 0000000000000000 R09: 0000000000000000 [ 456.071978][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.071988][T10996] R13: 00007f5fa7de6038 R14: 00007f5fa7de5fa0 R15: 00007ffda51d3ec8 [ 456.072012][T10996] [ 456.072019][T10996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 456.446211][T11008] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1302'. [ 456.480677][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 456.480688][ T30] audit: type=1400 audit(2000000158.723:1021): avc: denied { ioctl } for pid=10995 comm="syz.3.1300" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 456.802633][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 456.881764][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 456.890854][T11016] netlink: 'syz.0.1304': attribute type 11 has an invalid length. [ 456.898675][T11016] netlink: 'syz.0.1304': attribute type 13 has an invalid length. [ 456.956056][T11019] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 457.024572][T11029] FAULT_INJECTION: forcing a failure. [ 457.024572][T11029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.049780][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'. [ 457.166911][T11029] CPU: 1 UID: 0 PID: 11029 Comm: syz.4.1307 Not tainted syzkaller #0 PREEMPT(full) [ 457.166936][T11029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.166947][T11029] Call Trace: [ 457.166954][T11029] [ 457.166961][T11029] dump_stack_lvl+0x16c/0x1f0 [ 457.166989][T11029] should_fail_ex+0x512/0x640 [ 457.167017][T11029] _copy_to_user+0x32/0xd0 [ 457.167044][T11029] simple_read_from_buffer+0xcb/0x170 [ 457.167064][T11029] proc_fail_nth_read+0x197/0x240 [ 457.167086][T11029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.167109][T11029] ? rw_verify_area+0xcf/0x6c0 [ 457.167136][T11029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.167157][T11029] vfs_read+0x1e4/0xcf0 [ 457.167178][T11029] ? __pfx___mutex_lock+0x10/0x10 [ 457.167202][T11029] ? __pfx_vfs_read+0x10/0x10 [ 457.167228][T11029] ? __fget_files+0x20e/0x3c0 [ 457.167260][T11029] ksys_read+0x12a/0x250 [ 457.167277][T11029] ? __pfx_ksys_read+0x10/0x10 [ 457.167302][T11029] do_syscall_64+0xcd/0x4e0 [ 457.167327][T11029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.167345][T11029] RIP: 0033:0x7f363bd8d8dc [ 457.167360][T11029] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.167377][T11029] RSP: 002b:00007f363cb66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.167395][T11029] RAX: ffffffffffffffda RBX: 00007f363bfe5fa0 RCX: 00007f363bd8d8dc [ 457.167407][T11029] RDX: 000000000000000f RSI: 00007f363cb660a0 RDI: 0000000000000003 [ 457.167418][T11029] RBP: 00007f363cb66090 R08: 0000000000000000 R09: 0000000000000000 [ 457.167428][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.167439][T11029] R13: 00007f363bfe6038 R14: 00007f363bfe5fa0 R15: 00007ffcb59a5238 [ 457.167464][T11029] [ 457.390966][T11035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.947693][ T5952] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 458.092212][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.290648][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 458.309390][ T5952] usb 3-1: config 0 has an invalid interface number: 71 but max is 0 [ 458.317762][ T5952] usb 3-1: config 0 has no interface number 0 [ 458.333981][ T5952] usb 3-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 458.363809][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.415011][ T5952] usb 3-1: Product: syz [ 458.431003][ T5952] usb 3-1: Manufacturer: syz [ 458.435601][ T5952] usb 3-1: SerialNumber: syz [ 458.469157][ T5952] usb 3-1: config 0 descriptor?? [ 459.094650][T11056] sp0: Synchronizing with TNC [ 460.432603][T11065] syz.4.1316: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 460.447526][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.4.1316 Not tainted syzkaller #0 PREEMPT(full) [ 460.447551][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.447562][T11065] Call Trace: [ 460.447569][T11065] [ 460.447577][T11065] dump_stack_lvl+0x16c/0x1f0 [ 460.447607][T11065] warn_alloc+0x248/0x3a0 [ 460.447629][T11065] ? __pfx_warn_alloc+0x10/0x10 [ 460.447647][T11065] ? __pfx_stack_trace_save+0x10/0x10 [ 460.447681][T11065] ? kasan_save_stack+0x42/0x60 [ 460.447699][T11065] ? kasan_save_stack+0x33/0x60 [ 460.447716][T11065] ? kasan_save_track+0x14/0x30 [ 460.447733][T11065] ? xskq_create+0x52/0x1d0 [ 460.447751][T11065] ? xsk_setsockopt+0x74e/0x9a0 [ 460.447767][T11065] ? do_sock_setsockopt+0xf3/0x1d0 [ 460.447794][T11065] ? xskq_create+0xfb/0x1d0 [ 460.447814][T11065] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 460.447850][T11065] ? xskq_create+0xfb/0x1d0 [ 460.447876][T11065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 460.447911][T11065] ? xskq_create+0xfb/0x1d0 [ 460.447931][T11065] vmalloc_user_noprof+0x9e/0xe0 [ 460.447954][T11065] ? xskq_create+0xfb/0x1d0 [ 460.447974][T11065] xskq_create+0xfb/0x1d0 [ 460.447995][T11065] xsk_setsockopt+0x74e/0x9a0 [ 460.448014][T11065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 460.448032][T11065] ? find_held_lock+0x2b/0x80 [ 460.448059][T11065] ? selinux_socket_setsockopt+0x6a/0x80 [ 460.448083][T11065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 460.448103][T11065] do_sock_setsockopt+0xf3/0x1d0 [ 460.448130][T11065] __sys_setsockopt+0x1a0/0x230 [ 460.448156][T11065] __x64_sys_setsockopt+0xbd/0x160 [ 460.448183][T11065] ? do_syscall_64+0x91/0x4e0 [ 460.448205][T11065] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.448229][T11065] do_syscall_64+0xcd/0x4e0 [ 460.448257][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.448276][T11065] RIP: 0033:0x7f363bd8eec9 [ 460.448291][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.448310][T11065] RSP: 002b:00007f363cb45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.448327][T11065] RAX: ffffffffffffffda RBX: 00007f363bfe6090 RCX: 00007f363bd8eec9 [ 460.448340][T11065] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 460.448351][T11065] RBP: 00007f363be11f91 R08: 0000000000000004 R09: 0000000000000000 [ 460.448362][T11065] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.448373][T11065] R13: 00007f363bfe6128 R14: 00007f363bfe6090 R15: 00007ffcb59a5238 [ 460.448398][T11065] [ 460.648329][ T5952] gspca_main: finepix-2.14.0 probing 04cb:011b [ 460.801841][T11065] Mem-Info: [ 460.805061][T11065] active_anon:29269 inactive_anon:0 isolated_anon:0 [ 460.805061][T11065] active_file:19683 inactive_file:3721 isolated_file:0 [ 460.805061][T11065] unevictable:768 dirty:272 writeback:0 [ 460.805061][T11065] slab_reclaimable:12449 slab_unreclaimable:103794 [ 460.805061][T11065] mapped:31772 shmem:18942 pagetables:2200 [ 460.805061][T11065] sec_pagetables:0 bounce:0 [ 460.805061][T11065] kernel_misc_reclaimable:0 [ 460.805061][T11065] free:1311781 free_pcp:13053 free_cma:0 [ 460.851100][T11065] Node 0 active_anon:117076kB inactive_anon:0kB active_file:36652kB inactive_file:14748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127076kB dirty:1088kB writeback:0kB shmem:74232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13464kB pagetables:8652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 460.883209][T11065] Node 1 active_anon:0kB inactive_anon:0kB active_file:42080kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 460.913796][T11065] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 460.947984][T11065] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 460.954223][T11065] Node 0 DMA32 free:1381804kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114224kB inactive_anon:0kB active_file:36588kB inactive_file:13728kB unevictable:1536kB writepending:1088kB present:3129332kB managed:2539304kB mlocked:0kB bounce:0kB free_pcp:36800kB local_pcp:18704kB free_cma:0kB [ 460.986904][T11065] lowmem_reserve[]: 0 0 1 1 1 [ 460.991915][T11065] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:64kB inactive_file:1020kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:12kB free_cma:0kB [ 461.021443][T11065] lowmem_reserve[]: 0 0 0 0 0 [ 461.026438][T11065] Node 1 Normal free:3849964kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:42080kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17872kB local_pcp:6400kB free_cma:0kB [ 461.058125][T11065] lowmem_reserve[]: 0 0 0 0 0 [ 461.063011][T11065] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 461.078299][T11065] Node 0 DMA32: 1579*4kB (ME) 565*8kB (UM) 295*16kB (UME) 960*32kB (UME) 398*64kB (UME) 99*128kB (UME) 72*256kB (UME) 18*512kB (UM) 36*1024kB (UM) 10*2048kB (UME) 296*4096kB (UM) = 1381828kB [ 461.098118][T11065] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 461.111036][T11065] Node 1 Normal: 248*4kB (UME) 104*8kB (UME) 62*16kB (UME) 195*32kB (UME) 177*64kB (UME) 93*128kB (UME) 81*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 923*4096kB (M) = 3850016kB [ 461.145763][ T5952] usb 3-1: USB disconnect, device number 27 [ 461.232930][T11068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.248783][T11065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.350150][T11065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.368487][T11065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.484141][T11065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 461.493646][T11065] 41192 total pagecache pages [ 461.498434][T11065] 0 pages in swap cache [ 461.502755][T11065] Free swap = 124996kB [ 461.507029][T11065] Total swap = 124996kB [ 461.511304][T11065] 2097051 pages RAM [ 461.518938][T11065] 0 pages HighMem/MovableOnly [ 461.523838][T11065] 430263 pages reserved [ 461.528128][T11065] 0 pages cma reserved [ 462.463432][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 463.111548][T11082] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 463.118583][T11082] ================================================================== [ 463.126612][T11082] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 463.134565][T11082] Read of size 8 at addr ffff88807bc2b430 by task syz.2.1320/11082 [ 463.142426][T11082] [ 463.144726][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.2.1320 Not tainted syzkaller #0 PREEMPT(full) [ 463.144740][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.144746][T11082] Call Trace: [ 463.144750][T11082] [ 463.144754][T11082] dump_stack_lvl+0x116/0x1f0 [ 463.144770][T11082] print_report+0xcd/0x630 [ 463.144782][T11082] ? __virt_addr_valid+0x81/0x610 [ 463.144797][T11082] ? __phys_addr+0xe8/0x180 [ 463.144811][T11082] ? sysfs_remove_file_ns+0x63/0x70 [ 463.144823][T11082] kasan_report+0xe0/0x110 [ 463.144834][T11082] ? sysfs_remove_file_ns+0x63/0x70 [ 463.144847][T11082] sysfs_remove_file_ns+0x63/0x70 [ 463.144858][T11082] driver_remove_file+0x4a/0x60 [ 463.144873][T11082] bus_remove_driver+0x224/0x2c0 [ 463.144884][T11082] driver_unregister+0x76/0xb0 [ 463.144897][T11082] comedi_device_detach_locked+0x12f/0xa50 [ 463.144913][T11082] comedi_device_detach+0x67/0xb0 [ 463.144925][T11082] comedi_device_attach+0x43d/0x900 [ 463.144938][T11082] do_devconfig_ioctl+0x1b1/0x710 [ 463.144954][T11082] ? __mutex_lock+0x1c5/0x1060 [ 463.144967][T11082] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 463.144986][T11082] ? find_held_lock+0x2b/0x80 [ 463.144999][T11082] comedi_unlocked_ioctl+0x165d/0x2f00 [ 463.145012][T11082] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 463.145024][T11082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.145036][T11082] ? do_vfs_ioctl+0x128/0x14f0 [ 463.145051][T11082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 463.145065][T11082] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 463.145083][T11082] ? hook_file_ioctl_common+0x145/0x410 [ 463.145095][T11082] ? selinux_file_ioctl+0x180/0x270 [ 463.145109][T11082] ? selinux_file_ioctl+0xb4/0x270 [ 463.145130][T11082] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 463.145144][T11082] __x64_sys_ioctl+0x18b/0x210 [ 463.145160][T11082] do_syscall_64+0xcd/0x4e0 [ 463.145175][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.145192][T11082] RIP: 0033:0x7fbb37f8eec9 [ 463.145205][T11082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.145221][T11082] RSP: 002b:00007fbb38d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.145237][T11082] RAX: ffffffffffffffda RBX: 00007fbb381e5fa0 RCX: 00007fbb37f8eec9 [ 463.145247][T11082] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 463.145254][T11082] RBP: 00007fbb38011f91 R08: 0000000000000000 R09: 0000000000000000 [ 463.145261][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.145267][T11082] R13: 00007fbb381e6038 R14: 00007fbb381e5fa0 R15: 00007fffda204238 [ 463.145278][T11082] [ 463.145282][T11082] [ 463.406460][T11082] Allocated by task 6970: [ 463.410764][T11082] kasan_save_stack+0x33/0x60 [ 463.415422][T11082] kasan_save_track+0x14/0x30 [ 463.420073][T11082] __kasan_kmalloc+0xaa/0xb0 [ 463.424634][T11082] bus_add_driver+0x92/0x690 [ 463.429200][T11082] driver_register+0x15c/0x4b0 [ 463.433942][T11082] c6xdigio_attach+0xa3/0x4b0 [ 463.438600][T11082] comedi_device_attach+0x3b3/0x900 [ 463.443775][T11082] do_devconfig_ioctl+0x1b1/0x710 [ 463.448780][T11082] comedi_unlocked_ioctl+0x165d/0x2f00 [ 463.454211][T11082] __x64_sys_ioctl+0x18b/0x210 [ 463.458955][T11082] do_syscall_64+0xcd/0x4e0 [ 463.463437][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.469305][T11082] [ 463.471601][T11082] Freed by task 11019: [ 463.475637][T11082] kasan_save_stack+0x33/0x60 [ 463.480288][T11082] kasan_save_track+0x14/0x30 [ 463.484939][T11082] kasan_save_free_info+0x3b/0x60 [ 463.489944][T11082] __kasan_slab_free+0x60/0x70 [ 463.494681][T11082] kfree+0x2b4/0x4d0 [ 463.498555][T11082] kobject_put+0x1e7/0x5a0 [ 463.502953][T11082] bus_remove_driver+0x16e/0x2c0 [ 463.507866][T11082] driver_unregister+0x76/0xb0 [ 463.512607][T11082] comedi_device_detach_locked+0x12f/0xa50 [ 463.518388][T11082] comedi_device_detach+0x67/0xb0 [ 463.523389][T11082] comedi_device_attach+0x43d/0x900 [ 463.528564][T11082] do_devconfig_ioctl+0x1b1/0x710 [ 463.533570][T11082] comedi_unlocked_ioctl+0x165d/0x2f00 [ 463.539003][T11082] __x64_sys_ioctl+0x18b/0x210 [ 463.543747][T11082] do_syscall_64+0xcd/0x4e0 [ 463.548226][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.554091][T11082] [ 463.556388][T11082] The buggy address belongs to the object at ffff88807bc2b400 [ 463.556388][T11082] which belongs to the cache kmalloc-256 of size 256 [ 463.570412][T11082] The buggy address is located 48 bytes inside of [ 463.570412][T11082] freed 256-byte region [ffff88807bc2b400, ffff88807bc2b500) [ 463.584092][T11082] [ 463.586393][T11082] The buggy address belongs to the physical page: [ 463.592774][T11082] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bc2a [ 463.601506][T11082] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 463.609975][T11082] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 463.617491][T11082] page_type: f5(slab) [ 463.621448][T11082] raw: 00fff00000000040 ffff88801b841b40 ffffea0000d88700 dead000000000002 [ 463.630005][T11082] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 463.638564][T11082] head: 00fff00000000040 ffff88801b841b40 ffffea0000d88700 dead000000000002 [ 463.647209][T11082] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 463.655850][T11082] head: 00fff00000000001 ffffea0001ef0a81 00000000ffffffff 00000000ffffffff [ 463.664495][T11082] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 463.673132][T11082] page dumped because: kasan: bad access detected [ 463.679516][T11082] page_owner tracks the page as allocated [ 463.685202][T11082] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5846, tgid 5846 (syz-executor), ts 59545394997, free_ts 59406918310 [ 463.706534][T11082] post_alloc_hook+0x1c0/0x230 [ 463.711281][T11082] get_page_from_freelist+0x132b/0x38e0 [ 463.716802][T11082] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 463.722670][T11082] alloc_pages_mpol+0x1fb/0x550 [ 463.727499][T11082] new_slab+0x247/0x330 [ 463.731632][T11082] ___slab_alloc+0xcf2/0x1750 [ 463.736287][T11082] __slab_alloc.constprop.0+0x56/0xb0 [ 463.741639][T11082] __kmalloc_noprof+0x2f2/0x510 [ 463.746464][T11082] __register_sysctl_table+0xea2/0x1900 [ 463.751991][T11082] __addrconf_sysctl_register+0x1a2/0x360 [ 463.757691][T11082] addrconf_sysctl_register+0x15f/0x1f0 [ 463.763217][T11082] addrconf_notify+0x11e/0x19e0 [ 463.768041][T11082] notifier_call_chain+0xb9/0x410 [ 463.773044][T11082] call_netdevice_notifiers_info+0xbe/0x140 [ 463.778917][T11082] netif_change_name+0x557/0x920 [ 463.783832][T11082] do_setlink.constprop.0+0x3362/0x4380 [ 463.789354][T11082] page last free pid 5220 tgid 5220 stack trace: [ 463.795650][T11082] __free_frozen_pages+0x7d5/0x10f0 [ 463.800828][T11082] qlist_free_all+0x4d/0x120 [ 463.805389][T11082] kasan_quarantine_reduce+0x195/0x1e0 [ 463.810819][T11082] __kasan_slab_alloc+0x69/0x90 [ 463.815644][T11082] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 463.821513][T11082] __alloc_skb+0x2b2/0x380 [ 463.825903][T11082] netlink_alloc_large_skb+0x69/0x130 [ 463.831252][T11082] netlink_sendmsg+0x6a1/0xdd0 [ 463.835993][T11082] ____sys_sendmsg+0xa98/0xc70 [ 463.840736][T11082] ___sys_sendmsg+0x134/0x1d0 [ 463.845389][T11082] __sys_sendmsg+0x16d/0x220 [ 463.849954][T11082] do_syscall_64+0xcd/0x4e0 [ 463.854433][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.860302][T11082] [ 463.862599][T11082] Memory state around the buggy address: [ 463.868200][T11082] ffff88807bc2b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 463.876234][T11082] ffff88807bc2b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 463.884266][T11082] >ffff88807bc2b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.892296][T11082] ^ [ 463.897896][T11082] ffff88807bc2b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.905928][T11082] ffff88807bc2b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 463.913959][T11082] ================================================================== [ 464.104483][T11082] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 464.111693][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.2.1320 Not tainted syzkaller #0 PREEMPT(full) [ 464.121051][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.131092][T11082] Call Trace: [ 464.134356][T11082] [ 464.137280][T11082] dump_stack_lvl+0x3d/0x1f0 [ 464.141867][T11082] vpanic+0x6e8/0x7a0 [ 464.145834][T11082] ? __pfx_vpanic+0x10/0x10 [ 464.150322][T11082] ? sysfs_remove_file_ns+0x63/0x70 [ 464.155507][T11082] panic+0xca/0xd0 [ 464.159215][T11082] ? __pfx_panic+0x10/0x10 [ 464.163620][T11082] ? sysfs_remove_file_ns+0x63/0x70 [ 464.168807][T11082] ? preempt_schedule_common+0x44/0xc0 [ 464.174249][T11082] ? preempt_schedule_thunk+0x16/0x30 [ 464.179621][T11082] check_panic_on_warn+0xab/0xb0 [ 464.184538][T11082] end_report+0x107/0x170 [ 464.188846][T11082] kasan_report+0xee/0x110 [ 464.193239][T11082] ? sysfs_remove_file_ns+0x63/0x70 [ 464.198418][T11082] sysfs_remove_file_ns+0x63/0x70 [ 464.203421][T11082] driver_remove_file+0x4a/0x60 [ 464.208254][T11082] bus_remove_driver+0x224/0x2c0 [ 464.213171][T11082] driver_unregister+0x76/0xb0 [ 464.217916][T11082] comedi_device_detach_locked+0x12f/0xa50 [ 464.223704][T11082] comedi_device_detach+0x67/0xb0 [ 464.228709][T11082] comedi_device_attach+0x43d/0x900 [ 464.233886][T11082] do_devconfig_ioctl+0x1b1/0x710 [ 464.238894][T11082] ? __mutex_lock+0x1c5/0x1060 [ 464.243641][T11082] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 464.249173][T11082] ? find_held_lock+0x2b/0x80 [ 464.253832][T11082] comedi_unlocked_ioctl+0x165d/0x2f00 [ 464.259268][T11082] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 464.265051][T11082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.270922][T11082] ? do_vfs_ioctl+0x128/0x14f0 [ 464.275667][T11082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 464.280673][T11082] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 464.287509][T11082] ? hook_file_ioctl_common+0x145/0x410 [ 464.293032][T11082] ? selinux_file_ioctl+0x180/0x270 [ 464.298209][T11082] ? selinux_file_ioctl+0xb4/0x270 [ 464.303304][T11082] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 464.309084][T11082] __x64_sys_ioctl+0x18b/0x210 [ 464.313830][T11082] do_syscall_64+0xcd/0x4e0 [ 464.318316][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.324184][T11082] RIP: 0033:0x7fbb37f8eec9 [ 464.328575][T11082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.348156][T11082] RSP: 002b:00007fbb38d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.356546][T11082] RAX: ffffffffffffffda RBX: 00007fbb381e5fa0 RCX: 00007fbb37f8eec9 [ 464.364492][T11082] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 464.372440][T11082] RBP: 00007fbb38011f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.380388][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.388333][T11082] R13: 00007fbb381e6038 R14: 00007fbb381e5fa0 R15: 00007fffda204238 [ 464.396285][T11082] [ 464.399455][T11082] Kernel Offset: disabled [ 464.403760][T11082] Rebooting in 86400 seconds..