last executing test programs: 4m36.809282327s ago: executing program 4 (id=125): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) link(0x0, &(0x7f0000000300)='./file1\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigtimedwait(&(0x7f0000000240)={[0x97]}, 0x0, &(0x7f0000000300), 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m33.789640423s ago: executing program 4 (id=138): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xc43}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000140), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000400000100000000000000010000000000000000000000ff"]) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000400000100000000000000010000000000000000000000ff"]) pipe2$watch_queue(&(0x7f0000000540), 0x80) (async) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getresuid(&(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f0000000200)) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000005940)={{{@in6=@loopback, @in=@multicast2, 0x4e21, 0xa26f, 0x4e22, 0x6, 0x0, 0x0, 0x0, 0x20, r7, r11}, {0x5, 0x8000000000000001, 0xfffffffffffffffe, 0x6, 0x7f, 0x5, 0x3c82}, {0x4, 0x0, 0x4669, 0x4}, 0x8, 0x6e6bb5, 0x0, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@private1, 0x3503, 0x1, 0x3, 0x8, 0xff, 0x3, 0x9}}, 0xe8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r9) r12 = shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_INFO(r12, 0x3, &(0x7f0000005b40)=""/259) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) 4m33.403967428s ago: executing program 4 (id=140): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072f69f0b6d11000292b80000000109022b0001020000a889000904a9000220e2c70009058010ff037f790209050e03200009809b0705ab5c78"], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) symlinkat(&(0x7f0000000780)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x42, 0x0) fcntl$lock(r6, 0x7, 0x0) 4m31.552678609s ago: executing program 1 (id=149): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x8, 0x800) sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r5 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x7, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chdir(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f0000006a00)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfc}, 0x1c}}, 0xc000) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) dup2(r3, r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)={0xa, 0x0, [{0x79b17bcd05b27d08, 0x1000, &(0x7f0000000940)=""/4096}, {0x4, 0xa8, &(0x7f0000000580)=""/168}, {0xdddd0000, 0x9a, &(0x7f0000000640)=""/154}, {0x10000, 0x5d, &(0x7f0000000700)=""/93}, {0x4000, 0xc9, &(0x7f0000000780)=""/201}, {0xeeee0000, 0xe2, &(0x7f0000001940)=""/226}, {0x6000, 0x55, &(0x7f0000000880)=""/85}, {0x2000, 0x86, &(0x7f0000001a40)=""/134}, {0x7000, 0xc1, &(0x7f0000001b00)=""/193}, {0x1, 0x26, &(0x7f0000001c00)=""/38}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) 4m29.50793094s ago: executing program 1 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x6, 0x3) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0xf8, 0x24, 0xf1d, 0x70bd2d, 0x40, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x37ce, 0xfffffffc, 0x3}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x18}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0xa79c, 0x8, 0x1, 0x80000000, 0x6, 0x2}}, {0x8, 0x2, [0xffc0, 0x6]}}, {{0x1c, 0x1, {0x9, 0x0, 0x2, 0x0, 0x1, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0xf0, 0x2, 0xff, 0x2, 0xfffd, 0xa2]}}, {{0x1c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x1, 0x400, 0xe6a, 0x8}}, {0x14, 0x2, [0xc2, 0x2, 0x3, 0x2, 0x7f3, 0x2, 0xc9, 0x7ff]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x3c, 0x64, 0xf31, 0x1000000, 0x0, {0x0, 0x0, 0x0, r9, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3}]}}]}, 0x3c}}, 0x1000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x59, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4m29.48432172s ago: executing program 4 (id=157): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x1c, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) (async) tkill(r0, 0x2e) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f0000000480)=[{}]) 4m29.025151483s ago: executing program 4 (id=159): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00'/292, 0xb) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000d972a440b72040155ab70102030109f8110001000000000904000000ff00000056404fca3d1f62187b7e4ff9bca3d91d67d749fe2c659e7d9529733d1a7d79742e307415e0"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="1a010300000000f8", @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_create_ruleset(&(0x7f0000001080)={0x400, 0x1, 0x3}, 0x18, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000001040)={0x0, 0x0, 0x102, 0x2, {0xe849, 0xff, 0x62a, 0x27}}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) 4m28.935549423s ago: executing program 1 (id=160): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x8}}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x5d}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/49, 0x5f, 0x31, 0x0, 0x8, 0x10000, @value=r0}, 0x28) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x49, 0x2}, @cond=[{0x22d, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=r0, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 4m28.601350871s ago: executing program 1 (id=163): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000440)={{r1}, r3, 0x22, @unused=[0x7, 0x2, 0x7, 0x3], @devid}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000180)={0x0, 0x7fffffff}) 4m27.19758464s ago: executing program 1 (id=168): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1f5821, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="54af385182a9a5123acb61176f6963465d6ab5682a206237d7af45361a2191caf6d91fe5d0df0977dbd25f681088d9376f204016738af11e3e512c5204ba4110ab10a9fe2c5d7c1178abe58c351cbe841b155e1d826b9a0db6e1d4a94bf37e749c67f3b4bda4258934", 0x69}], 0x1}}], 0x1, 0x604c8d0) fcntl$getownex(r0, 0x10, &(0x7f0000000680)={0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) rt_tgsigqueueinfo(r4, r5, 0xb, &(0x7f0000000780)={0x2, 0x2f8, 0x545b}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0xa0141, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x10}}, './file0\x00'}) recvmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000000), 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/110, 0x6e}], 0x9, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x20) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6", 0x68, 0x40040, 0x0, 0x0) 4m25.534607636s ago: executing program 4 (id=171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x8, 0xb2, &(0x7f0000000500)=""/178, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x237, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a1c0)=""/102398, 0xfffffd13) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0x1002, 0xf0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) close(r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00'/25], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4001) sendmsg$nl_xfrm(r1, 0x0, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1900) syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0xb, @sliced={0x0, [0x147, 0xb, 0x7, 0x401, 0x8001, 0x3, 0x1005, 0x0, 0x100, 0x7, 0x9, 0xfff, 0xd, 0xfffb, 0x9a9, 0x5, 0x1, 0x1, 0x1, 0xfff5, 0xfffd, 0x6, 0x3, 0x2000, 0x8, 0x9595, 0x4, 0x31, 0x4, 0x10, 0x2, 0x6, 0xffff, 0x3c7, 0x3ff, 0x2, 0xcb6, 0x400, 0xdbe, 0x4, 0x2ec, 0x2, 0x6, 0x6, 0x1b4e, 0x69f0, 0x3fe2, 0x8], 0xff7fffff}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000854be720f0031d58def0010203010902249f0f02ff01070009050718400009060509050b031000048125"], 0x0) 4m13.192772177s ago: executing program 1 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000089a12f1c9500000000000000a4132608c77910864c18d79b0a980e1153705abd2a9fbc207409dc8a071f9b792f112f77c8411c4d14d6a101aee7694f2fc39abcd43e2d246ffa146a19ccb7adc9377b0f16cd3f999596c5f6dbee7cc636a84937f2e11b26f6be21a2f1d0fb2b3b649333dc9e6a77420b1f5fc40d7751550a966bfe1a67431f49171849e756a8728397763fd91450c345b9198fc20a6f325067b5d24c91bfa13bec9292002e47"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150040000000090002"], 0x5c}}, 0x0) 4m9.749405397s ago: executing program 32 (id=171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x8, 0xb2, &(0x7f0000000500)=""/178, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x237, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a1c0)=""/102398, 0xfffffd13) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0x1002, 0xf0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) close(r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00'/25], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4001) sendmsg$nl_xfrm(r1, 0x0, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1900) syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0xb, @sliced={0x0, [0x147, 0xb, 0x7, 0x401, 0x8001, 0x3, 0x1005, 0x0, 0x100, 0x7, 0x9, 0xfff, 0xd, 0xfffb, 0x9a9, 0x5, 0x1, 0x1, 0x1, 0xfff5, 0xfffd, 0x6, 0x3, 0x2000, 0x8, 0x9595, 0x4, 0x31, 0x4, 0x10, 0x2, 0x6, 0xffff, 0x3c7, 0x3ff, 0x2, 0xcb6, 0x400, 0xdbe, 0x4, 0x2ec, 0x2, 0x6, 0x6, 0x1b4e, 0x69f0, 0x3fe2, 0x8], 0xff7fffff}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000854be720f0031d58def0010203010902249f0f02ff01070009050718400009060509050b031000048125"], 0x0) 3m55.81117301s ago: executing program 33 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000089a12f1c9500000000000000a4132608c77910864c18d79b0a980e1153705abd2a9fbc207409dc8a071f9b792f112f77c8411c4d14d6a101aee7694f2fc39abcd43e2d246ffa146a19ccb7adc9377b0f16cd3f999596c5f6dbee7cc636a84937f2e11b26f6be21a2f1d0fb2b3b649333dc9e6a77420b1f5fc40d7751550a966bfe1a67431f49171849e756a8728397763fd91450c345b9198fc20a6f325067b5d24c91bfa13bec9292002e47"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x48, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150040000000090002"], 0x5c}}, 0x0) 1m44.851042829s ago: executing program 3 (id=568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x0]}}, 0x0, 0x2a, 0x0, 0xc, 0x8, 0x0, @void, @value}, 0x28) 1m44.553311183s ago: executing program 3 (id=569): syz_emit_ethernet(0x6c, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xfffffffd, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) 1m44.343840735s ago: executing program 3 (id=572): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) 1m43.465272792s ago: executing program 3 (id=576): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x5}, {0xc9, "ce5fc043898429b803bede456950a8b40579640e2c7e9e768f111eb11e92ae99b71359a202601b55bbed87b5633554c5b279e5df8c429890e18a76fee451ed13"}}}}, 0x47) 1m43.27730881s ago: executing program 3 (id=579): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)}, 0x24088854) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m42.397220466s ago: executing program 3 (id=584): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000300)="2209879891d4551cb0d3fe97987bf4524170954328bfc71e283dbaee76237063f75b533f4a7a9fbe62de974ca01f492a9d", 0x31}], 0x1) 1m26.581345346s ago: executing program 34 (id=584): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000300)="2209879891d4551cb0d3fe97987bf4524170954328bfc71e283dbaee76237063f75b533f4a7a9fbe62de974ca01f492a9d", 0x31}], 0x1) 8.369202092s ago: executing program 6 (id=1038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@empty, @private=0xa010102, 0x0, 0x2, [@empty, @empty]}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)="a666306c11", 0x5}], 0x1}], 0x1, 0x40) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) syz_usb_control_io(r0, 0x0, 0x0) 7.780925306s ago: executing program 7 (id=1043): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008404000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 7.222491408s ago: executing program 7 (id=1046): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) shutdown(r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000000c001980"], 0x20}}, 0x0) 6.920874432s ago: executing program 7 (id=1048): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 5.579768207s ago: executing program 7 (id=1051): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x7f, 0x80000001) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x1, @local, 0x5}], 0x1c) syz_clone(0x4000, &(0x7f0000000040)="2fec799e47b230452ff8d0de9299d3d7085a471e4682e071cc77bf715ec9bfcff37fb5ab2e5ea95c53b6c76618a9f3a8743001572d693cee3b4f82cc28750468a94b3f003796d0d5a9138ff1db0c3d6987221efc23b1d907e0fb5e171683d8a22406ac8695617927ddd720640660c2d14d69843879c1dc714d523a2ed2a094fd21ccff78bc4f28ccdf23919061baa1accba9d331cf8a026d10a4e0d831868f99f50edc05fb58a1a5807f0a1a7852d614eb6aa3d4609543459b31632a8efd3121aa5c2e1e9e5d92fc4eb921", 0xcb, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="270b990a75afefd1ac2948ef7d7fb5a343f6c3b99f4b71c959c627ba36a5c89b9c14ae1ea72550e8b7f8ce537460c4ef55f61c97ad2cac8c00") 5.525430227s ago: executing program 2 (id=1052): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045002, &(0x7f00000000c0)=0x200002) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="e6dfd9f90d300329893e59bfbb6b", 0xe) read$dsp(r0, &(0x7f0000001500)=""/4096, 0x1000) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 5.243745915s ago: executing program 5 (id=1053): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x200080dc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000008000)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/121, 0x79}], 0x4}, 0x4d0}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000000700)=""/182, 0xb6}], 0x5, &(0x7f0000000840)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001840)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/12, 0xc}], 0x1, &(0x7f0000001940)=""/114, 0x72}, 0x5}, {{&(0x7f00000019c0)=@caif, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001a40)=""/59, 0x3b}, {&(0x7f0000001a80)=""/7, 0x7}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000001b00)=""/217, 0xd9}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/189, 0xbd}, {&(0x7f0000002cc0)=""/226, 0xe2}], 0x7, &(0x7f0000002e40)=""/214, 0xd6}, 0x8}, {{&(0x7f0000002f40)=@nfc, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002fc0)=""/230, 0xe6}, {&(0x7f00000030c0)=""/34, 0x22}, {&(0x7f0000003100)=""/186, 0xba}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004200)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005200)=""/14, 0xe}], 0x1, &(0x7f0000005280)=""/243, 0xf3}, 0x2}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005380)=""/177, 0xb1}, {&(0x7f0000005440)=""/251, 0xfb}], 0x2}, 0x15}, {{&(0x7f0000005580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005600)=""/250, 0xfa}, {&(0x7f0000005700)=""/180, 0xb4}, {&(0x7f00000057c0)=""/144, 0x90}, {&(0x7f0000005880)=""/22, 0x16}], 0x4, &(0x7f0000005900)=""/198, 0xc6}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000005a00)=""/44, 0x2c}, {&(0x7f0000005a40)=""/108, 0x6c}, {&(0x7f0000005ac0)=""/42, 0x2a}, {&(0x7f0000005b00)=""/193, 0xc1}, {&(0x7f0000005c00)=""/217, 0xd9}, {&(0x7f0000005d00)=""/30, 0x1e}, {&(0x7f0000005d40)=""/4096, 0x1000}], 0x7, &(0x7f0000006dc0)=""/4096, 0x1000}, 0x400}], 0x9, 0x2022, &(0x7f0000008040)={r3, r4+60000000}) recvmmsg(r0, &(0x7f00000098c0)=[{{&(0x7f0000008080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000008200)=[{&(0x7f0000008100)=""/234, 0xea}], 0x1, &(0x7f0000008240)=""/48, 0x30}, 0x9}, {{&(0x7f0000008280)=@ethernet={0x0, @local}, 0x80, &(0x7f0000008840)=[{&(0x7f0000008300)=""/248, 0xf8}, {&(0x7f0000008400)=""/230, 0xe6}, {&(0x7f0000008500)=""/31, 0x1f}, {&(0x7f0000008540)=""/222, 0xde}, {&(0x7f0000008640)=""/240, 0xf0}, {&(0x7f0000008740)=""/41, 0x29}, {&(0x7f0000008780)=""/66, 0x42}, {&(0x7f0000008800)=""/54, 0x36}], 0x8, &(0x7f00000088c0)=""/4096, 0x1000}, 0x65f1}], 0x2, 0x10000, &(0x7f0000009940)={0x0, 0x989680}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) pselect6(0x40, &(0x7f0000009980)={0x4, 0x1000, 0xff, 0xf345, 0xb, 0x0, 0x112ec00000000, 0xffffffffffffbb47}, &(0x7f00000099c0)={0x4, 0x10001, 0x8, 0x365, 0x6, 0x6, 0x12000, 0xf17}, &(0x7f0000009a00)={0x9, 0x9, 0x1c, 0x6, 0xdd5, 0x1, 0x10000, 0x9299}, &(0x7f0000009a40), &(0x7f0000009ac0)={&(0x7f0000009a80)={[0x7]}, 0x8}) clock_gettime(0x0, &(0x7f0000009b40)={0x0, 0x0}) futex(&(0x7f0000009b00)=0x2, 0x6, 0x1, &(0x7f0000009b80)={r6, r7+60000000}, &(0x7f0000009bc0)=0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000009c00)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) mq_timedsend(r8, &(0x7f0000009c40)="fecadc569609c2e4a7ce818e45f599fa8f63b0672b73a112cdcaf40521c0fb73c113f46c89dc8c50436953bc1f522b1f55374dc6212bdd84d5e024318332f381b8ebf2d840", 0x45, 0x8, &(0x7f0000009cc0)={0x0, 0x3938700}) io_setup(0x8, &(0x7f0000009d00)) epoll_create(0x6) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009d80), r5) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000009e40)={&(0x7f0000009d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000009e00)={&(0x7f0000009dc0)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd4}, 0x20000001) getsockopt(r5, 0x80, 0x8, &(0x7f0000009e80)=""/96, &(0x7f0000009f00)=0x60) rt_sigtimedwait(&(0x7f0000009f40)={[0x2]}, 0x0, &(0x7f0000009f80)={0x0, 0x3938700}, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x2b573000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000009fc0)={0x80000000, 0x5, "957857a7b14f92c8dae64389794140a833f0e7d4dfef0dd7c46786a62600b4c7", 0x2, 0x8, 0x3ff, 0x7f, 0xfffffff8, 0x6, 0x4, 0x9, [0xffffffff, 0x7, 0x7d3, 0x6]}) inotify_add_watch(r8, &(0x7f000000a0c0)='./file0\x00', 0x0) getresuid(&(0x7f000000a180)=0x0, &(0x7f000000a1c0), &(0x7f000000a200)=0x0) mount$overlay(0x0, &(0x7f000000a100)='./file0\x00', &(0x7f000000a140), 0x180060, &(0x7f000000a240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@volatile}, {@volatile}, {@xino_auto}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@seclabel}]}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f000000a2c0), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000000c480)={0x0, 0x0}) fstat(r2, &(0x7f000000c640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = geteuid() getgroups(0x6, &(0x7f000000c880)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0, 0x0]) syz_fuse_handle_req(r12, &(0x7f000000a300)="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", 0x2000, &(0x7f000000d2c0)={&(0x7f000000c300)={0x50, 0x0, 0x1, {0x7, 0x29, 0x0, 0x2040000, 0xe, 0x7, 0x1, 0x3ff, 0x0, 0x0, 0x100, 0x7f}}, &(0x7f000000c380)={0x18, 0x0, 0xbdfb, {0x7}}, &(0x7f000000c3c0)={0x18, 0x0, 0x2, {0x3}}, &(0x7f000000c400)={0x18, 0x0, 0x80000000, {0x3ff}}, &(0x7f000000c440)={0x18, 0xffffffffffffffda, 0x3, {0x2}}, &(0x7f000000c4c0)={0x28, 0x0, 0x1b, {{0x1, 0x8, 0x2, r13}}}, &(0x7f000000c500)={0x60, 0x0, 0xb3d, {{0x6, 0xf, 0xb, 0xffffffffffffffff, 0x9c, 0x1cf6, 0xe20, 0x6}}}, &(0x7f000000c580)={0x18, 0xffffffffffffffea, 0x2, {0x800}}, &(0x7f000000c5c0)={0x18, 0x0, 0xb45, {'!-,--*@\x00'}}, &(0x7f000000c600)={0x20, 0xfffffffffffffff5, 0xb, {0x0, 0x5}}, &(0x7f000000c6c0)={0x78, 0x0, 0x80000000, {0x8, 0x8, 0x0, {0x0, 0x5, 0x8, 0x80, 0x8, 0x5b6, 0x401, 0x1, 0x8, 0x6000, 0x40, 0x0, r14, 0xae9, 0xfff}}}, &(0x7f000000c740)={0x90, 0x0, 0x40, {0x4, 0x3, 0x8, 0xe123, 0x8e9, 0x4, {0x0, 0x8, 0x997, 0x6, 0x5, 0xd, 0x80000000, 0x1000, 0x9, 0x10000, 0x6, r15, 0xee01, 0x6, 0x9}}}, &(0x7f000000c800)={0x78, 0x0, 0x8, [{0x3, 0xf5, 0x9, 0x7, 'xino=auto'}, {0x1, 0xf, 0x8, 0x81, 'nl80211\x00'}, {0x3, 0x3ff, 0x1, 0x91, '\x00'}]}, &(0x7f000000cc00)={0x290, 0x0, 0xfff, [{{0x5, 0x2, 0x400, 0x0, 0x42d, 0x3, {0x4, 0x0, 0x6, 0x0, 0x8, 0xffffffff, 0x8, 0xcf0e, 0xfffffffc, 0xc000, 0x6, r10, r16, 0x77, 0x8001}}, {0x2, 0x5c42, 0x8, 0x4, '^.&-:^{\x8d'}}, {{0x1, 0x0, 0x100000001, 0x7, 0x2, 0xdc, {0x5, 0x3, 0x401, 0x6, 0x80000000, 0x4, 0x6, 0x3, 0x7, 0xe0c954708dec2152, 0x9, r11, 0x0, 0xd, 0x7}}, {0x5, 0x4, 0x1, 0x7f08, '\x00'}}, {{0x5, 0x3, 0x1, 0x41b3, 0x4, 0x51, {0x3, 0x3, 0x448, 0x1, 0x1, 0xffffffff8e82af26, 0x4, 0x8, 0x769e699f, 0x4000, 0x3, 0x0, 0x0, 0xf, 0x3}}, {0x2, 0x1, 0x7, 0x5, 'batadv\x00'}}, {{0x1, 0x1, 0x1, 0x3, 0x1, 0x80000000, {0x0, 0x0, 0x6527, 0x8, 0x9a9, 0x9, 0x1000, 0x8, 0x2, 0x1000, 0x4, r10, 0x0, 0x8, 0x3}}, {0x6, 0x200, 0x7, 0x2, 'batadv\x00'}}]}, &(0x7f000000d080)={0xa0, 0x0, 0x9, {{0x6, 0x3, 0x7, 0x3, 0x7, 0x6a7, {0x3, 0x9, 0x9, 0x4, 0x800, 0xe57b, 0x8, 0x6, 0x3, 0x4000, 0x200, 0x0, 0x0, 0x750f340b, 0x1}}, {0x0, 0x8}}}, &(0x7f000000d140)={0x20, 0x0, 0x9, {0x0, 0x0, 0x2, 0x1}}, &(0x7f000000d180)={0x130, 0x0, 0x6, {0xfffffffffffffffb, 0x145, 0x0, '\x00', {0x2, 0x3, 0x0, 0x0, r11, 0xee00, 0x0, '\x00', 0xfffffffffffffffb, 0xffffffffffffc0ce, 0x4, 0x7, {0x7ff, 0x4}, {0xffffffffffffff81, 0x5}, {0x4, 0x7a0e4e97}, {0xb, 0x7ff}, 0xab, 0xfffffff0, 0x3, 0x10001}}}}) 5.029284219s ago: executing program 5 (id=1054): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a30000000000500048000000000140007800800084000000c7e05001500ff00000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff35, &(0x7f0000000300)={&(0x7f0000000200)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 4.909419141s ago: executing program 6 (id=1055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000010cf7b24ff6e93", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@remote, 0x78, r3}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f00000000c0), 0x0) 4.893162344s ago: executing program 5 (id=1056): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008404000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 4.71126624s ago: executing program 5 (id=1058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) listen(r4, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffae, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x1000000) 4.655350167s ago: executing program 0 (id=1059): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x2000000000000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) 4.441406036s ago: executing program 7 (id=1060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000940), 0x0, 0x4009040, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 3.737042452s ago: executing program 2 (id=1061): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x300, 0x181) 3.695551382s ago: executing program 5 (id=1062): getpid() mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "d30100"}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000a3618e0b67aff52807000000002b049b9190194e051a7bfa9e274a2b"], 0x0}, 0x0) 3.649445272s ago: executing program 0 (id=1063): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$BLKTRACESTART(r0, 0x2282, 0x1000000000000) 2.79544398s ago: executing program 7 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000001004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2.747351228s ago: executing program 2 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x46}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 2.55735733s ago: executing program 6 (id=1066): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a30000000000500048000000000140007800800084000000c7e05001500ff00000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffff35, &(0x7f0000000300)={&(0x7f0000000200)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 2.556774661s ago: executing program 0 (id=1067): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f00000023c0)='./file1\x00', 0x143042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000023c0)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f00000025c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030725f69643d00000000000000000000000000008b04579284bcd7f412ee180c0900c28820efb4542b63674a88286b3a8e38ced39f9d297e8fc02768515027126ed25d36c55a44db605dae70a5f3de871599fd92375da0a9ee85c7fc0e18f5eea202af081bd80e9c3944bf6eabd8e5757e2a3372a42052fb91db4a82b9c2256db7e08533874fc3d3d2f9dd2024118c34a45ee8a982d5c35e6d80e312fac322c233f219c9d4558df24d14fd7cfce718a881706e864d1e0d25fb3b93dcfb55d889961341d6ca2ed25c406a70fda06933094ddff5419b1ef9e7452ff584a722bfd578f8f0b0631b3c6a9d8f1004ebbdf55ae7bc9d16ed778f94006dff61828a1eb7edeb68ae1e56f5e3497a81b2f6372ef79d74e6a51f029e4c1705e1abbb10b590538764e9d00bcf7ea0ea81598643ced320d111f86069fc8c04e45f16b93c8479116c4a88c595d1efc7e5be27dac1c95b21b2f70e232214003667ab763638b5b5684ae5f6e1d7c174f316142650d823bda21809a1bbc5d0856494f36d41bc8b4049795f0867762aa28411975ab0e860cfa5674513285bbae85e978e06a0e394cb65a09ee973ca1b6c13d0c73cda3168b619602d305578d138b8aeb64b06eb6c50754aa55c67e1f6a6dd9da574574580d97f903658b02146662f62ae6e296437eb8d1e61b7765dae812c6e7be59807308bcdbfb6edfb628f8cc6b9bb844b8e174ce1cb89bff6950f5c7d92c787e3151d1c677b738257a7af13a9e6b4790bf2677321d086f7c7eea4563040150a4c1bbd287fe35f72e566b7d69c88aa9f98890d9217acfa556b6e1d4b075e691c3b6ab116029370093b4e6aa1197d", @ANYBLOB="77f0f0de61565ecf2decdf209ed633576de7e45c", @ANYBLOB=',group_id=', @ANYRES16]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x1e200, 0xc1) (async) open(&(0x7f00000000c0)='./file1\x00', 0x1e200, 0xc1) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0xfffffffc, 0x1030000, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) mount$cgroup(0x0, &(0x7f00000022c0)='./file1\x00', &(0x7f0000000640), 0x2128000, &(0x7f0000002380)={[{@subsystem='io'}, {@subsystem='freezer'}]}) (async) mount$cgroup(0x0, &(0x7f00000022c0)='./file1\x00', &(0x7f0000000640), 0x2128000, &(0x7f0000002380)={[{@subsystem='io'}, {@subsystem='freezer'}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup3(r5, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x11, r7, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000024c0)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800004300", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x240080d4) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002500)=ANY=[@ANYBLOB="242000003c6d65ef54b3a49f0792f1cfa6d2d1ec853ce4e3ecde7c1793d698f3a7e99df5a60af1accc22ced65b791a5fa4824681dbcd8722f1f7006f126d76000000", @ANYRESDEC=r8, @ANYBLOB="06009500f0ff0000", @ANYRESDEC, @ANYBLOB="010000000000000000005700000008000300", @ANYRES32=r11, @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs(r2, &(0x7f0000002400)='totmaps\x00') (async) r15 = syz_open_procfs(r2, &(0x7f0000002400)='totmaps\x00') preadv(r15, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x16c, 0x0) 2.540296947s ago: executing program 6 (id=1068): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008404000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 2.414485136s ago: executing program 2 (id=1069): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.344355112s ago: executing program 0 (id=1070): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffa, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) fcntl$getown(r1, 0x9) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000004c0)={0x0, 0x38, [0x8, 0x920d, 0x3, 0x9], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x50, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000240)=0x59) r4 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_FLOW={0x6}]}, 0x44}}, 0xc000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000790000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x2, 0x0, &(0x7f00007a4000/0x4000)=nil}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r9 = syz_open_dev$video(&(0x7f0000000000), 0x800, 0x140) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, &(0x7f0000000040)={0x2, {0x1, 0x1, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)) 2.343802981s ago: executing program 6 (id=1071): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 2.18124811s ago: executing program 2 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) listen(r4, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffae, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x100000000000000) 660.45171ms ago: executing program 2 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r2, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b000000080002000000000008000200090000000700010069620000340002800800030064000000080004"], 0x2ac}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_usb_connect(0x1, 0xc75, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0xab, 0x41, 0x47, 0x40, 0x411, 0x9, 0x88cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc63, 0x3, 0xff, 0x4, 0x20, 0x0, [{{0x9, 0x4, 0x5, 0x8, 0x10, 0xfe, 0x88, 0x4b, 0x1, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x10, "c825e671e9b92d4c"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0xb}, @generic={0x5b, 0x31, "d1955f9cee60c061cd994723ce471eb55944e83cb2724a8a35d87cf5c16f499452c70f9b4d903f8359814d77e415d9f47d8bd9dab8ef19a1b3198b5e4bbe0a26bf294c94d93df9274e6165d249304eb76b27dbabeb202ce0a0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0x0, 0x4, [@generic={0xd, 0x23, "4952b3c3b3f0bdfdb4fc99"}]}}, {{0x9, 0x5, 0x0, 0xe, 0x20, 0xfb, 0xe9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0x3a}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7fff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x9, 0x0, 0x2, [@generic={0xd0, 0x6, "f11ee18502bd7247960687542e844bd479e44b222988ecc2c4747c431ab7225f4824792a4f15a5b3f791c91e86c771f39cbff537abd10e816f437842cf48514ab26bae6faa20c1b6424d933f0d21b43130b9ced3ad5772f82ed4eecd9c45f3d6bf5a7126bb5a83db7369a018d82e7099f79055102482a84af0c35a22481e44559e0046dd6d6ebd381441194de7d304a2a61059b8bfe975e4cb7732f7b12c8390cb9d8c955aba04e17ead81bccc800cd2c93ddab2c2f3fe421a1127e964f8b540201686d85b55565cbccc8e94359d"}]}}, {{0x9, 0x5, 0x0, 0xd, 0x10, 0xc, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xffff}, @generic={0x30, 0xc, "d7bd3398eafd596df4e5d7020748499bb39eb6d113012ea86942da3ecec86008c2327d0d6f859cd25a2e12ecce6e"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xd2, 0x37, 0x6, [@generic={0x46, 0x23, "5fcceaee8fbd434a8d751c2eeadc72c1eca4dde68193dc4e7b5d29927247acb76063a37e1f3103525a12373463aa0aa2c46c2fca303b89e41b7eb41c7be32206d04703b1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x1, 0x4, 0x0, [@generic={0x97, 0x10, "6b6866fd2a25ae6557d127ad8e2d170ecb45a742a99efa695f659fad7043b2ec771a38e721be66bf9ed54ca02d13fe2a649e303eed7f59a78bd2d13b00ef1441f7c38d4eaa9808fe8f4dacf550824ff2ea83def26c8553466ab7b3ebef4730214d74e8eda029a80c1faa0f4043d1eb969032db4dad28925acd95c77f15e5121260f1dd0903ca7ee01788a064155eafb1e3b733ac27"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x7}]}}, {{0x9, 0x5, 0xebe8ab3a013ced9, 0x1, 0x40, 0x7, 0x34, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xa}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0x3, 0x9, 0x0, [@generic={0x11, 0x21, "5ebbb0a8d969d13c9d64a2dce70de7"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x4, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1, 0x1}, @generic={0x8e, 0x4, "bdbc160315797cba93be27362d2ce1099df738c25349157aa66b0cda9b3c2b877775d248dfd2a5ea44033f1ca581f79299955808a1d253ba756744113b55908217d7aace6b2e5ab0009b0d859896654c9803293f7f61b8a23c01bb368595313b3377d47b9da5da13bb37d86e34b516feebce058d0aa64bbe09def4445593269c231efd2bc5607d5a610d6678"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x76, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x525e}]}}, {{0x9, 0x5, 0x83, 0x8, 0x40, 0x8, 0x0, 0x0, [@generic={0xb, 0x3, "adc41974fee5f1e8f7"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x6, 0xff, [@generic={0x96, 0x5, "0ffcc37865e78ad6953239ee9b481a35cfa388e918a8fa8c5532ade2ed9857a60d436e061edaf0b8a3429da0c4b691b840748cdbd415d60f9494efe9294e90532af8bb485de68efd96b81cbe02574e4c3db662002db53eed5d7f6b311df066e3c42644eb41e2e9c2c16296d3a3cd354418464dcb16f2490314f50acabc185446e186f2a693da1f66f913b272ca57c52938ee1dec"}, @generic={0xbe, 0x6, "82590b58b40ad7cbde73ac8dd451fc8d65b63e1d191e90ed786ba8c68c4c0dc25877caf2344ac3c0d3d38a96b002d10ed444965dc57d7d23aba11d1df5e0f7a5811740f5e8781d43ad999f84c63916cc74b3ac19d0fed6061f514ea64289a04bca3937d07aff64aef0d47636320d4f52d6c01de57e70633416729dfbc1d788384d5deaf16d325e6785a9ca2e78bca482aa504a3384ca00840934546c733600c5d7f1e373c1de6cc59e275feb893bfffbc4c48abcdba26e8e913cb933"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x10, 0xc0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xa}]}}]}}, {{0x9, 0x4, 0x16, 0x81, 0xe, 0x6f, 0x60, 0xf1, 0x42, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "29e736"}, {0x5, 0x24, 0x0, 0xee60}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3ff, 0x8, 0xd}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x2e}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x4, 0x2, 0x80}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x1f, 0xb3, 0x3b}, @dmm={0x7, 0x24, 0x14, 0x5, 0x4e5a}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "15eb7d54cd"}, {0x5, 0x24, 0x0, 0x16}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x12, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x21}, [@mdlm={0x15, 0x24, 0x12, 0xfbed}]}], [{{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x2, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x90, 0x22, "0c043572f0d542a521100d872dbfe44d9c38b07ff6edfaf69b0691484e4158d318f909a16ab226df8a7f03b5d8718d848b187577d9cf10ec73c584598dae4676aa48844fd14fac1a5695c1f627d0275be478b2a72d6b3987c83ee29ccb4fc61b260860d70c95d1dffeb5cc6b1f734168fef5e461841618529c9f0372c261b6b78c9d37e40518994d74c012558195"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x7, 0xca, [@generic={0xf, 0x11, "cd841e3b59ec511e17d9ec86d6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd}]}}, {{0x9, 0x5, 0xa, 0x10, 0x220, 0xff, 0x8, 0x4, [@generic={0x7b, 0x10, "454b2ac6d344dc06f35b08f392874a70b7f773241b8ac2d2b89fe35b7761d33c1a669242d48c19504e1e2fbf4aeee2c93ea8c9b3b4673a143b7755fde898e8f65955ad628ee91462ba6704ca9646b2ff9c51562dca100e0f1da636d37551b3137e19779be7828b72455d6770bd9b471e7873c30e6292b093ed"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x0, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfc00}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xe, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xf, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x3, 0x0, 0x6, [@generic={0x56, 0x22, "44176bb2618e8a66288acc264ced9e166e29ff7308ff083688414172673a523ecef36a426f83f547a10d74b57e2c30d0ccca1875607a5e05f94458fd4212186b2121714c5639cf18950af254dcce01ad9ea837ec"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x34, 0x3, 0xd, [@generic={0x1a, 0x21, "2ce0cb59eca88629321c5600aa2f8e43851679fb508dbab6"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0xc, 0x7, 0x7, [@generic={0x86, 0x31, "2751d763e5d7775c91957c6403aab14f5bc4103f586930c0f3fdbbace9be639ef74ec0fbffd3016b160ca53b0f48fc929863cd8bb9293c12841655435bc6e83325df536847692b1fcef6769e0bfefa50244dbdad089fc907a757ff89fed076ab73b593f991c9a50ac932f3068f4a79ee7fb5658df1fd25f76dd7c5bad057326107a0b78a"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0x5, 0x5, 0xe7, [@generic={0x6, 0x23, "df1867c1"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x9, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x401}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x6e, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xba, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x200}]}}]}}, {{0x9, 0x4, 0x3, 0x3, 0x8, 0xd2, 0xf6, 0x82, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0xfff9, 0x9}, [@selector_unit={0xa, 0x24, 0x5, 0x2, 0x0, "3345923c07"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x1, "496477025c"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x3, "034182"}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x1, 0x5, [0x3, 0x2, 0x8, 0x4, 0x3], 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x5, 0x6, 0x8}]}], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x5, 0xfd, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3d97}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x2, 0x7, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x80, 0xef, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x56}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x75, 0x4, 0x0, [@generic={0xb4, 0x3, "57a9187136bf5680dcd2d04af6272d2ba616fb62104cc4e98952bca92ff401888d07e4ebf14d5dceef8c25f70bd4f11d0fd2da43f9d6d8bdee71c2f510bd5cfc0ab73c979d254789d7623ff9cc663270cc16e6ce3855276df36c302b68b1e9ef81ad035e123d93aeb4b49563b775ed1705018e63befa52d589a53c56af27dcf0c52f82df6de2eb5937a583aefa00f7ab116eb3480a096c056ce5bc9d477d1f4d7ce32dd642403598f5dbe93452b79636ffe7"}, @generic={0x69, 0x7, "9bcc7e46a02352dad9cecc2c3905caa8dfb14e64d700f2b5cb0a737530303a4dcf1c2e264b458e6bb3805f8b136e00ebf6f8d0911c96993d4a146d2f5dc32cffc307a742f70c05f2c089cecb578e5bb2d961a78936c6bf5906519d7413470f6d17e196ce25eb80"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x0, 0x2, 0x0, [@generic={0xa0, 0x7, "31c12838a15b1bd79609b8ddd1d9deef3b73b5ecb389e3f8f208ea84fa4370deaf5cfc15c197ef23a956ff11bb04ddbbb6a1feb07861b9a2174a855b6b11b03e0d6848e59b531c798fdd5cb1d2b6392a983728ef51838b9f5ffaeabe8b54603083d2f6fe7905b4ab3fe69007febe95c9ab64eab5146d3999051ed0ba9d018d90e8f5440396875f1a98704f946ea2aa55828704a1f3f2d5123718de84c644"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xf, 0x36, 0x8, [@generic={0xd3, 0x3, "5c51b61fef27a52ab9f668f9325ccb65d1039ac736947a7e248780b04877bc0702a6a5b3f36ba4f32081ae6d0a7da89970adf3a181a2293f91199b00fc2c34e933c1572977cbc8c28b24575688a993c019a3b4bfc4f8510f87e94b15af91f492bf83d4da1f1f33909af5a6802a744685687d411f17abde8d199ff0cf09136fee3d9e59c4760868952d4655aa14e52536565e492d37ebda67680e4dd74fdfc00052917d5706926ab7d572239986aa40ea6aa9301d5c28d512b4011da7063f129e6aa9d1f10ef236d6bb2b654b8a3acacda8"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x0, 0x9, 0x0, [@generic={0x6f, 0x8, "8be15d7d1d172648bc44c2f5940504bd0b358845fa720e773df6abdba744d2f71d35668f4af70592c434266b62960db0b5e92c0e956d33f092f32678a7f654d2c2d3d93eb1335fd4010ef91deca98566a5c4339e38c27cdc2d082f5aef61e9f7c8fe6b6fd7cdb54cae2622e038"}]}}, {{0x9, 0x5, 0x8f, 0x0, 0x20, 0x3, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x3b, 0x2, 0xe5, 0x0, 0xe1}, 0x150, &(0x7f00000000c0)={0x5, 0xf, 0x150, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "cbfe1a1a4e605d33c0d31700cafdec4f"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf, 0xf2, 0x9}, @generic={0x35, 0x10, 0x3, "bc2a0d5588e3c2ec010a935bb1b1edf1f3c04d5fe4eeb220a37481cb196156c10a0946c08068365488a5c4e14345d0642870"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4a, 0x4, 0x3ff, 0xf00, 0x400, [0xc000, 0xff3f00, 0xc030, 0x3f27]}, @generic={0xd5, 0x10, 0x2, "948c5cad1a3f978bf75e10a98f9382b159a1c57b463c08287fc37ae58553ea53300761c6e7b7f32d295ae7c2f0a4297be83d167f58da0976c46bf28259c6058e4118d56afa0f60afc43d2b1d9334b4c1c167ee30bb9ce734283b8c7cf39d00381ef26319a7bb4b1553443066048a2ebbc4d9e79160b6bc870faa40532a06cbe8a81cc620b49d6754cc29b3d51ac5fa86d53e3af4bcf9c607d46fcf0f9dc18ba814d6a518b69f0e4b7d8b9dbf998317d258803b7b3fcfb45343d0d57d4770099e2488526b4be48453b9a8f7e6498531acd32b"}]}, 0x4, [{0xa0, &(0x7f0000000240)=@string={0xa0, 0x3, "1eae6c78629787809800353e685683e6d8915f171ec140efc8a67e857234d080f8f34631c27081dc0d052bc3ea8468ee71296fa27af6989968dfd075e66ff34296615dc9b9ee9a4703b388bb5a340149687122287ef1bd8bcc960dbc4aecb073ce5ab3382d571efd6eed03c481bc76a19be8fa4b2972227147d63fa1216fc684eae44dad8b0eaa99af071239e4b37b9d698ef61600d92e2e17cadcc6ab1e"}}, {0xae, &(0x7f0000000300)=@string={0xae, 0x3, "9e2c6cfa522c16272f4c9b64801cde4c5b182df1503996e6c336158112d02828e32a7dd306153edb7f4e96f28678d176f43a97fe22de6164263e4dc56148828ad59cf117991b8b6e60a5276a1e0d808455857b336b28a34e0cce0f96593a0c367c94f9f1dce1e25ec11cd1254a67210c608c1cd718539af956f648719d436641c8b4a0c38621330d76e3aee2b51c32990afe57d40a12a02b4b0c46d8c972e17fe3ab933e6f7b32511e54d52c"}}, {0xf5, &(0x7f00000003c0)=@string={0xf5, 0x3, "ebb5a00627c67b3323c05297872d04bb5c462fab3d87dc49d8e79d69fcacf100b0b4e13cafd87a0cb6a8f480baae0be119f525b1717206d332edbb6007527b49f5f73c1f905cf350cd8d8021bca31d2d09db9b53c3815e1f2ba3ad6311c471a621611d1024ce14533eafa5756df6e1493fde71f3f7df7aaebc2e3025e1c195665301bdb287c8d7a6c9b00932d9baa10d02712e35ff5bfd54c73fe60911779bc6bb3ba17b4654e06555f105de27a51d2bc5a8b082fe54d1bf142d83adfeae0736ea52aebfeb63b62099b5d9caec523c91dc702ade62c167709e6fade780e8c1f2de874e23db587ab349f1227e96095f036f8745"}}, {0xcd, &(0x7f00000004c0)=@string={0xcd, 0x3, "297db7582b5c1c2c8976caf5186f1b4e5d2e8350dd6a577e59b34d4c2887c0c7b1718b16d67e60be64d37a07709b062d5bcf4a1c6ee9f5a0373173256219bddea6cfa02c5d6f2bd77b8493ebbd4bda52d648195dafa39db4d913aee6d66694107b0c27c2826b25153f5687cc59de90176cdb76905dd7e01e24de4eb83c0d93bb1818bf6b1b1608dfdb95685093653eb5b950dd9df7a9cca6e313df10684c37cfe9e0ae6384d043499824034a5c641725d91a725d7d505db03af32735f3a75d7c0fb2f05685fb05f27843f3"}}]}) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 632.25656ms ago: executing program 0 (id=1074): r0 = socket$pppl2tp(0x18, 0x1, 0x1) flock(0xffffffffffffffff, 0x5) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) (async) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0xa, 0xfffffffe, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x9c) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) write(r6, &(0x7f0000000140)="1400000052004f030e789e7e27288f78d4da3541", 0x14) (async) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f00000000c0)=0xffffff00) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000100)=0x0) prlimit64(r8, 0x7, &(0x7f0000000180)={0x5, 0x39294742}, &(0x7f0000000240)) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000023800)=[{{&(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000340)="74cb802cd61aba4663da7ef78b7bed12a657edca03ff4319ea110e1e83b9361495455bd8f379ec8b73ac174a2ab47fff88df8b60216884bc07b80651ae58d6b6cdb33e08401e1a4d3184b394fcc705d4ed34aeb0f21c8a7595673c6bf8d788298929b6c3f8c293907244295bcd6dd2b955ee12f186434bcd2371aa8d1b1a8a016f1a3581eb2fa2cc3834d16fa19e6de969d8a035e726a2", 0x97}, {&(0x7f0000000480)="06e0d07dedefcd56187aab9740b0c3182972524567ab1846bbe587e382f92b5ecb5420faca5c890088e600d003a040b411505bd3233a15cac3bb23de3bfa998ba981e01ed823a14d51c5ff2f3ff126cbd38576f31f79816732883023d621140f6df93bcc3295b39961bc3fba1faace7dcbafa4f3d2e930c1e84ce54f69d85a254f49fec09ad4e5844d5444c695f2a870f949630d1541f5a6cf31a7bc7e5853c61d", 0xa1}, {&(0x7f0000000580)="8b8479d9fe30ddaa8aa72efaeb1741ca75317379f54e1ac022f9672a85abb4992bc3a242926487de7c0907cb5b3700f4cb0edc35670d00412c337a03bc0934eda1865cf0fb985c76c35d2d19c5812b4c01a5c069e98c8bb369213363f43287dffd3772187d0a1aa051b240443487d78c94661df49ec270ef87c1b1", 0x7b}, {&(0x7f0000000640)="85e794124a7dd7c3d9c27b41c362a8f567cbfdfae098e0c9e152c34cfae4599f3102459bc1535cd267f776187d3cf5273d2a009bd573d21c65e8793d78965b1c12b94a67d51dfe2bab661fb4719853f7881a7bf1ce2f971f32c8ef30c342fd0ded28edf016b261d417bd29b0cf3b346654b1583c4b", 0x75}, {&(0x7f0000000400)="97ea39ab23ba5e3cad6ebb8b4267fb436f1e04f67507bdef39ac136d537cd593050f44b4710ccdc8524e62", 0x2b}, {&(0x7f00000006c0)="a6cc68d50686d3e6211027a2abd21b900d9664caf8661b15eadef136086054380e5a87edcd9fdf914de7beb4ed2a66e8501d01e132ca16336b74d90203cf58ff7129aba5019ba6e6f8f1fa8db4eb6b21c87026a516e61a7cb02c5e60b51d8fd4b79684047ffa06dbabdee357a1e9005d6e5e0724909fb26defc40ff1cc6c141619ccf9841efb80cc54fa3d9fecae74628943f80adea2b9831cc5a52b19cef1edee7db3a6993d56a209ad627a6462ae9002860f2e604a133cec74f1537705f2571598ef35682fe4d59259e0116302bbd96e85b252b8c23c78bd14842cd4fa899c31b85bd7dc5f77f640d52fcce73cf374f02c6745", 0xf4}], 0x6, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20, 0x880}}, {{&(0x7f00000008c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="2094b3a870dd9b045b895915795da3d116471226d91a", 0x16}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20000000}}, {{&(0x7f0000000cc0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d40)="87cc88c2cd", 0x5}, {&(0x7f0000000d80)="c36e312c41fa50e65bb8d1fd94c4a4d6ad9c0123533cec3bcd02649becac09e9802323970710dae47dbf8aa7bf74ff75b874b242aca1fd76a411ac9b223e7f4ced692be4fdc196ba77b4754fb744c14b75022a89fc7a46cf4092fcfda10a4d99dd2cb7321b9a5cad2844b26c7a507796b5e3c6d5d083d76a3bd857c926e64973d181284d2be634", 0x87}, {&(0x7f0000000e40)="eb131adbaa37cecab9c3a116ee09419041c84d97c3b8d803e149ecc855ad6a5fd3bf9c69a377f8ef5d8f87428616b782abeb2ff9db2347529f2d068e54599a8fe0fa1bbf20103001bd5144f616dd836635d95c03d53bc8e7141ffd4b901c3e5233e288d35f5a1a8a431e58fd46e9c75736384cbce811d282c6c05719bff2cc7c26f9fd1e46e236aa9aba2652990eb5abf8f43f18e730ce12f93678ed8d4cdca18ee1f25adc5cea05a54c59de5a1a8c34cc4d2795e8cec862ce2f24d984aa32f01eaf11aec712600569cbc62cde5593", 0xcf}, {&(0x7f0000000f40)="7e422e95c7088ac6367c331729b50beb738691e515daf45c733ea7e5e9fe5debb22ca77f6afa76c5be71bea7448e383d75738d730c283115cdf778ff0d286337e365ccd68c2adc6da72567fed3b684507e0a97f312cccc03fe8a92891021648248cafe193a0a3266284458a6ab6a2a1cc8cafd36aca167198baa606aa1adb6ba14", 0x81}, {&(0x7f0000001000)="332c1b762c1d9e5f8914228341400dfdac1c00117170b056431e3c3b5917fbde10e8647125a2159b31", 0x29}], 0x5, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20, 0x20008814}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001380)="093971fb6d4d2224a573a51d60b2a160f31d", 0x12}, {&(0x7f00000013c0)="bbe863b8f1295b7cf4bf7bdc380d2ed764b1efb383771a7ca4b042d9b6b4d8e7edf4a891cfb4255acba37420caffe89d5a38bacec38ddfd2c061b4fc00df02e9ffae947f03345102123eceb8d5ee9200bfba863a8dc0d196be72cef4edefbd8c1b27dfefcbdc", 0x66}, {&(0x7f0000001440)="f8e5008e", 0x4}, {&(0x7f0000001480)="c61d1ab516ded9a4fc8ff4ce6d77ecb3acb9cc1ddc4f2ea11e4c4c04f5988b59a5eb45f889702076c04b0dac0c3eddb563a70a50a3b52fa7a27d7883cc826c485062f7e64581dc08bfbb86ad4629fe9e27ba066b6d6808aa4d8054548bf8b8d7aa8cab899db5b009d8756c351b4b58fc5e25c8e5065a762e2e53e6ee2bfea3cb907095a2a76f425375d95918ae85cbdac867af5972c0cdb348816ac3c24c61fceb661b53d6a13b0a440720814503d45bb6ba45283505f65caa3a784a637ceb551b041e5d9cbb27abecb1b94e15267226444021b92cae400c7a", 0xd9}], 0x4, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0xe0, 0x24044010}}, {{&(0x7f0000001a80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b00)="9d693833e09568ef34e97f951835dd93c519315a1eb8a35eafa7373eb219c119bb107edc1e469d46d50fd7063171d1c931fef94322371f2b015c9c105efb3c9f7d0a7f03a77341167a48ae032f27de48f964e70d563237d579200ecc4b2851d723fea96d720ab459e15609", 0x6b}, {&(0x7f0000001b80)="41fc930f749e47aac540b6b51dd2595a451759b77c10ca8521d4173702453a8112ced197a718b7bc60b6a0776665a3dc2704614875ceb1de8992feb779e0f886f70c5d62", 0x44}], 0x2, &(0x7f0000001e00)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r7, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x44000}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001ec0)="7a57adca92870383c4a5107eeb70928d1c080efa72b526bcefd09fb9b1f8a4f8726ec2185b8410bbbf8b9cfeff840cf652d492405be8a6cd89e0ffd1be84aa5c7f70ebbe6b4c475251f5d1d7baf40616d66f99caa4f6de708ebd8298f0d48cb26191653946cf4aefbda0a10b771ec434e97e15be0ed245553151da3755f5faf8286087fb667f5f864a1dd23183b1dbfba08c9d12", 0x94}, {&(0x7f0000001f80)="e4f8f12cad1601761d5aa380c107669f8b6adc351a9475ce8b5195b0d605e098c030515be79909557c0f06157565e86e6dae0513c0590b0045d2da98bf7fd2c5901f6006093b76cb278196680bf941fd3e149b3b7dade5ebcb759181ae025dacd1cc020aa3b43f7a2a52bc4e5196f82d48b4c332a3a2647a71dbc5da6d331a2631b9fe7c0a3e9d1c6bb0151d51ad0a15350d90e489144f1c66932ca9eb864ea75ca995d1025032a7a1592895b932cb19a6f16f10445e569da8a192c8134517893ac30bfd6027d2a98422a156b171fb0b2f5c4c4725ae6a9c5fbd7052bf7990c516733104c1313163", 0xe8}, {&(0x7f0000002080)="ad0497b7394d946e8c9de33a567d18e29818d04b962fd940c38d77c038a1006adae19c483937d7c8ada49e09d4132194122d8907201df60fb56d8ff3a286196d2233e8af66549fc5eba781e0ed3944f422a5122e2f35dca0149701107678ff06130382288c4692ecb60bf2e86de90a56f4be", 0x72}, {&(0x7f0000002100)="2c893ea60e3612aab4304f4a86a9136d4b0d7fc6f4b96d2480ec7d20ffce6f1b1874b351d6629f4a683f5aabe70118d29e1ccb6f3a7ba553bfa6131275647e7a324f67424277c1af88cdef2209f8c78d189639b082f157f072883caf43346f45a3fe4d28d0a1dbeb17ff4e5c5a9b499b4edfd389e9d1ba60c58d319cc96797b8fb00fb06f91d53620fce8089ae438a4b85a1102f03463d27b6e682b209ec3d84c22e93404b218e96d6ed03a00364", 0xae}, {&(0x7f00000021c0)="24aa177d827ed70f1199357ed87ab9c8f559609d792bbc35a487ce58fdd3f7ddbd971b2d8b53278c052e2b31052d0498a579fc409c7cd8159accf0882472b47a53afd29749dc0b16059c1870516b0c8437be9acd0c6905c88d8a18fb24faa01809be583b83049efc49e026506742d39d9c69675ffd0fea338702f385e73dddca1d8874aae263e41c43d7192bb9c6a8f2ff23d5abb146ccd4560e1e0cb761bd8fcd8be5ef27628c251a4f9d2567a599591ba0dd64c16c81422fd68e463b62b7fa6730f0cb351b4cc7dcdabc8f75c27b554c5bdec887ed2511daaa824ad37ccdc58be4841a4839b9f6", 0xe8}, {&(0x7f00000022c0)="0ffcebe6f51a72128036eddf81df7b3ce5d506e476323ed89fa2bf373768b517e61bed5362f4220a3f502b03fab1684ba67ae3aa15143c7e0f08168b79a6f74648e8c2e96a0ec1584d5eef6518feb332c3e83f7a99073217e07af3f9f1f832e4c0d4bba18eba163c4a58817e", 0x6c}, {&(0x7f0000002340)="7eb5b98ba2e34ce56338d6e17c275ca0b8a10344179728be2be72f268bb7696c140effce9673638810e940eb482f27a9a806b41772b96b322075ba58dce42257db9c53450d3adfb62fc7931f30d72a4acd7821658e46cd74991b02d217bd7565d54739d4f0a6d9e19496d2e5ec6ec04fd65cb6577a2caeb807536a7f848b2188c2bda847619721bb965a6edaadcc24ed20e6c84dae1d2dce27fcdbf8c287e55e8164d78a047d2ecaf503d7276067be8ebe71541aaae2c35b0e797a8ed63686c410b32fb63b32357d0bdcf9b0f0902b4d31b23e33dfaa101b369c626a2559fa", 0xdf}], 0x7, &(0x7f0000002640)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x40}}], 0x6, 0x4000010) (async) r9 = landlock_create_ruleset(&(0x7f0000000200)={0x1806, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={0x0, 0x0, 0x4008}, 0x18) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'macsec0\x00', 0x1}) 493.717772ms ago: executing program 5 (id=1075): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) write$dsp(r0, &(0x7f00000002c0)="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", 0xfff) (async) write$dsp(r0, &(0x7f00000012c0)="bf", 0x1) (async) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="12d79cb51b45c9f33614000900", @ANYRES16=r2, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x6b3ce000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) (async) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) fcntl$setlease(r7, 0x400, 0x0) 377.267116ms ago: executing program 0 (id=1076): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) map_shadow_stack(&(0x7f0000645000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x38) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800000, 0x108) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0xfefb, 0x2, 0x7, 0x7, 0x9, 0x6, 0x6, 0x81, 0x7, 0x20, 0x3, 0x40}, {0x7, 0x3, 0x2, 0x80, 0x0, 0x2d, 0x64, 0x0, 0x5, 0xd2, 0x4, 0xd7, 0x3}, {0x1002, 0x8, 0x0, 0x2, 0x6, 0x40, 0xd9, 0x5, 0x6, 0x5, 0x9, 0x3, 0x10000000}], 0x7d3a}) 0s ago: executing program 6 (id=1077): socket$inet(0x2, 0x3, 0x4) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x5, 0x0, &(0x7f0000000080)=0x272) r1 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x14, 0x0, 0x1, 0x70bd22}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000) shmdt(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)=""/143, 0x8f}], 0x2, &(0x7f0000000940)=""/184, 0xb8}, 0xfffffffe}, {{&(0x7f0000000880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)=""/60, 0x3c}, 0xa210}], 0x2, 0x40012020, &(0x7f0000000d00)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) chdir(&(0x7f0000000080)='./file1\x00') r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0xc, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2}, {0x0, 0xeeee8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0xddf8ffdb, 0x0, 0xffff1000, 0x3400b0, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) kernel console output (not intermixed with test programs): SID 50:50:50:50:50:50 [ 228.388648][ T6666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.444710][ T29] audit: type=1400 audit(1736148908.087:555): avc: denied { read } for pid=7401 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.549401][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.576132][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.631332][ T29] audit: type=1400 audit(1736148908.267:556): avc: denied { mounton } for pid=6891 comm="syz-executor" path="/root/syzkaller.iTTxrQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 228.666815][ T7073] veth0_vlan: entered promiscuous mode [ 228.755974][ T7073] veth1_vlan: entered promiscuous mode [ 228.781981][ T29] audit: type=1400 audit(1736148908.417:557): avc: denied { mount } for pid=6891 comm="syz-executor" name="/" dev="gadgetfs" ino=6797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 228.887932][ T7073] veth0_macvtap: entered promiscuous mode [ 228.897137][ T7073] veth1_macvtap: entered promiscuous mode [ 228.938699][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.949255][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.959360][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.969916][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.980006][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.028729][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.272038][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.290269][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.300872][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.311201][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.322119][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.332130][ T7073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.342721][ T7073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.356866][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.383578][ T7073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.392401][ T7073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.401175][ T7073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.410276][ T7073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.420941][ T29] audit: type=1400 audit(1736148908.747:558): avc: denied { accept } for pid=7407 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 229.476763][ T29] audit: type=1400 audit(1736148909.117:559): avc: denied { ioctl } for pid=7411 comm="syz.3.374" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 230.690365][ T29] audit: type=1400 audit(1736148909.677:560): avc: denied { write } for pid=7421 comm="syz.0.375" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.763941][ T29] audit: type=1400 audit(1736148909.727:561): avc: denied { ioctl } for pid=7421 comm="syz.0.375" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 231.657840][ T29] audit: type=1400 audit(1736148910.757:562): avc: denied { create } for pid=7424 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.690917][ T5833] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 231.857239][ T29] audit: type=1400 audit(1736148910.817:563): avc: denied { bind } for pid=7424 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.884365][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.914997][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.171243][ T29] audit: type=1400 audit(1736148910.817:564): avc: denied { write } for pid=7424 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.477778][ T29] audit: type=1400 audit(1736148910.817:565): avc: denied { getopt } for pid=7424 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.526644][ T6666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.537240][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 232.554760][ T6666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.663757][ T7469] netlink: 'syz.6.183': attribute type 10 has an invalid length. [ 233.691784][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.700945][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.736333][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.743529][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.750932][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.758017][ T7469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.989433][ T7469] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 235.016667][ T29] audit: type=1400 audit(1736148914.647:566): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 237.156806][ T29] audit: type=1400 audit(1736148916.617:567): avc: denied { write } for pid=7505 comm="syz.0.393" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 237.486095][ T7511] input: syz1 as /devices/virtual/input/input9 [ 238.050756][ T29] audit: type=1400 audit(1736148917.117:568): avc: denied { read } for pid=7505 comm="syz.0.393" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 238.209190][ T29] audit: type=1400 audit(1736148917.117:569): avc: denied { ioctl } for pid=7505 comm="syz.0.393" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 238.248036][ T29] audit: type=1400 audit(1736148917.687:570): avc: denied { bind } for pid=7503 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.014096][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.400'. [ 239.521136][ T29] audit: type=1400 audit(1736148919.027:571): avc: denied { mount } for pid=7549 comm="syz.2.403" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 240.634521][ T29] audit: type=1400 audit(1736148920.007:572): avc: denied { search } for pid=7549 comm="syz.2.403" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.697124][ T29] audit: type=1400 audit(1736148920.087:573): avc: denied { mounton } for pid=7549 comm="syz.2.403" path="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.835857][ T29] audit: type=1400 audit(1736148920.097:574): avc: denied { remount } for pid=7549 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 240.960439][ T29] audit: type=1400 audit(1736148920.097:575): avc: denied { shutdown } for pid=7546 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.010894][ T29] audit: type=1400 audit(1736148920.147:576): avc: denied { read } for pid=7549 comm="syz.2.403" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 241.781144][ T29] audit: type=1400 audit(1736148920.147:577): avc: denied { open } for pid=7549 comm="syz.2.403" path="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 241.841966][ T29] audit: type=1400 audit(1736148920.527:578): avc: denied { ioctl } for pid=7557 comm="syz.0.404" path="socket:[15585]" dev="sockfs" ino=15585 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.294459][ T29] audit: type=1400 audit(1736148920.567:579): avc: denied { read } for pid=7528 comm="syz.5.399" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.708784][ T29] audit: type=1400 audit(1736148920.567:580): avc: denied { open } for pid=7528 comm="syz.5.399" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.756893][ T29] audit: type=1400 audit(1736148920.797:581): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 243.050935][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.340314][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.384887][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 243.399321][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 27924, setting to 1024 [ 243.411833][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 243.422217][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.435307][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 243.445068][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.491753][ T9] usb 4-1: config 0 descriptor?? [ 243.531247][ T7580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.972070][ T8] usb 4-1: USB disconnect, device number 7 [ 244.070939][ T7621] input: syz1 as /devices/virtual/input/input10 [ 245.343551][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 247.009345][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 247.009362][ T29] audit: type=1400 audit(1736148926.637:584): avc: denied { bind } for pid=7634 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.203034][ T9] usb 3-1: device descriptor read/all, error -71 [ 247.782535][ T29] audit: type=1400 audit(1736148927.427:585): avc: denied { listen } for pid=7654 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 247.840941][ T29] audit: type=1400 audit(1736148927.477:586): avc: denied { getopt } for pid=7654 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 248.461117][ T5868] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 248.520634][ T29] audit: type=1400 audit(1736148928.157:587): avc: denied { setopt } for pid=7680 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.734522][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.746915][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 248.767227][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 248.792620][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.885409][ T7688] tipc: Enabled bearer , priority 0 [ 248.897716][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.909909][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.918101][ T5868] usb 6-1: Product: syz [ 248.923871][ T7687] tipc: Disabling bearer [ 248.929784][ T5868] usb 6-1: Manufacturer: syz [ 248.937846][ T5868] usb 6-1: SerialNumber: syz [ 248.951178][ T5868] usb 6-1: config 0 descriptor?? [ 249.000925][ T1156] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 249.150916][ T1156] usb 4-1: Using ep0 maxpacket: 16 [ 249.174089][ T1156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.213255][ T1156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.224177][ T1156] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 249.250059][ T5868] usb 6-1: USB disconnect, device number 2 [ 249.256749][ T1156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.308745][ T1156] usb 4-1: config 0 descriptor?? [ 249.315164][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 249.451202][ T46] usb 7-1: device descriptor read/64, error -71 [ 249.580776][ T7267] udevd[7267]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.726707][ T46] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 249.763407][ T1156] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000B/input/input11 [ 249.867449][ T1156] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 249.892586][ T46] usb 7-1: device descriptor read/64, error -71 [ 250.022285][ T46] usb usb7-port1: attempt power cycle [ 250.537803][ T9] usb 4-1: USB disconnect, device number 8 [ 250.900929][ T46] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 250.940336][ T46] usb 7-1: device descriptor read/8, error -71 [ 250.970510][ T7735] capability: warning: `syz.5.447' uses deprecated v2 capabilities in a way that may be insecure [ 251.182391][ T7746] tipc: Started in network mode [ 251.237572][ T7746] tipc: Node identity 3e3aa52ef75e, cluster identity 4711 [ 251.260787][ T7746] tipc: Enabled bearer , priority 0 [ 251.311058][ T46] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 251.331695][ T46] usb 7-1: device descriptor read/8, error -71 [ 251.358693][ T7745] tipc: Disabling bearer [ 251.468576][ T46] usb usb7-port1: unable to enumerate USB device [ 251.536583][ T29] audit: type=1400 audit(1736148931.167:588): avc: denied { read } for pid=7758 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.874848][ T29] audit: type=1400 audit(1736148931.517:589): avc: denied { mount } for pid=7776 comm="syz.2.457" name="/" dev="rpc_pipefs" ino=15858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 251.897786][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.252247][ T29] audit: type=1400 audit(1736148931.887:590): avc: denied { write } for pid=7783 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 253.532111][ T7808] netlink: 312 bytes leftover after parsing attributes in process `syz.0.461'. [ 254.411908][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 255.074829][ T7824] tipc: Enabled bearer , priority 0 [ 255.101003][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 255.152414][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.185786][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.199184][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 255.208446][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.228309][ T9] usb 3-1: config 0 descriptor?? [ 256.204758][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.211281][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.425510][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000C/input/input12 [ 256.447493][ T7823] tipc: Disabling bearer [ 256.634949][ T9] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 257.858642][ T9] usb 3-1: USB disconnect, device number 15 [ 258.015234][ T29] audit: type=1326 audit(1736148937.617:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.162580][ T29] audit: type=1326 audit(1736148937.647:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.416249][ T29] audit: type=1326 audit(1736148937.647:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.574752][ T29] audit: type=1326 audit(1736148937.657:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.642793][ T29] audit: type=1326 audit(1736148937.657:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.728365][ T29] audit: type=1326 audit(1736148937.687:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.791331][ T29] audit: type=1326 audit(1736148937.687:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.815089][ T29] audit: type=1326 audit(1736148937.687:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.975581][ T29] audit: type=1326 audit(1736148937.697:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 258.999101][ T29] audit: type=1326 audit(1736148937.697:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 259.338351][ T7892] overlayfs: missing 'lowerdir' [ 259.457972][ T7895] tipc: Started in network mode [ 259.478727][ T7895] tipc: Node identity 22099f5b9f98, cluster identity 4711 [ 259.521019][ T7895] tipc: Enabled bearer , priority 0 [ 259.797694][ T7895] tipc: Enabled bearer , priority 0 [ 259.856986][ T7894] tipc: Disabling bearer [ 260.540244][ T5868] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.648626][ T7917] netlink: 'syz.5.490': attribute type 1 has an invalid length. [ 260.737714][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 260.745341][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.493'. [ 260.751686][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.765386][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.775884][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 260.785471][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.826729][ T5868] usb 3-1: config 0 descriptor?? [ 261.102128][ T25] tipc: Node number set to 3180437339 [ 261.267618][ T5868] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000D/input/input13 [ 261.614990][ T5868] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 262.047344][ T9] usb 3-1: USB disconnect, device number 16 [ 262.215168][ T7943] overlayfs: missing 'lowerdir' [ 263.437842][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 263.437859][ T29] audit: type=1400 audit(1736148943.077:611): avc: denied { connect } for pid=7964 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.194514][ T7988] netlink: 192 bytes leftover after parsing attributes in process `syz.3.514'. [ 264.409876][ T5833] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 265.133346][ T8001] overlayfs: missing 'lowerdir' [ 266.468209][ T6748] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.196729][ T6748] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.252758][ T6748] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 267.269352][ T6748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.277496][ T6748] usb 6-1: Product: syz [ 267.281837][ T6748] usb 6-1: Manufacturer: syz [ 267.286445][ T6748] usb 6-1: SerialNumber: syz [ 267.302357][ T6748] usb 6-1: config 0 descriptor?? [ 267.326202][ T6748] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 267.333170][ T6748] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 267.516376][ T6748] usb 6-1: USB disconnect, device number 3 [ 267.842659][ T8061] overlayfs: missing 'lowerdir' [ 267.848522][ T8062] SET target dimension over the limit! [ 267.857008][ T8062] fuse: Bad value for 'group_id' [ 267.862103][ T8062] fuse: Bad value for 'group_id' [ 268.379041][ T8072] tipc: New replicast peer: 0.0.0.0 [ 268.393305][ T8072] tipc: Enabled bearer , priority 10 [ 268.444574][ T8072] tipc: New replicast peer: 100.1.1.1 [ 268.452092][ T8075] binder: 8066:8075 ioctl c0306201 20000480 returned -14 [ 270.837918][ T8130] vlan2: entered promiscuous mode [ 270.858305][ T8130] bond0: entered promiscuous mode [ 270.876272][ T8130] bond_slave_0: entered promiscuous mode [ 270.902276][ T8130] bond_slave_1: entered promiscuous mode [ 270.999330][ T8130] bond0: left promiscuous mode [ 271.004529][ T8130] bond_slave_0: left promiscuous mode [ 271.029673][ T8130] bond_slave_1: left promiscuous mode [ 272.144429][ T5833] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 273.637634][ T6748] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 273.841399][ T6748] usb 6-1: Using ep0 maxpacket: 32 [ 273.859458][ T6748] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.868165][ T6748] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.880295][ T6748] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.916674][ T6748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.958671][ T6748] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 274.056423][ T6748] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.077284][ T6748] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 274.086564][ T6748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.821622][ T6748] usb 6-1: config 0 descriptor?? [ 275.042390][ T6748] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 275.215141][ T8227] 9pnet_fd: Insufficient options for proto=fd [ 275.227900][ T5833] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 275.304512][ T29] audit: type=1400 audit(1736148954.937:612): avc: denied { read write } for pid=8182 comm="syz.5.558" name="lp0" dev="devtmpfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 275.938040][ T29] audit: type=1400 audit(1736148954.937:613): avc: denied { open } for pid=8182 comm="syz.5.558" path="/dev/usb/lp0" dev="devtmpfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 275.961768][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.963891][ T9] usb 6-1: USB disconnect, device number 4 [ 275.968553][ T29] audit: type=1400 audit(1736148954.937:614): avc: denied { append } for pid=8182 comm="syz.5.558" name="media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.997662][ T9] usblp0: removed [ 276.641097][ T5868] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 276.715393][ T29] audit: type=1400 audit(1736148956.317:615): avc: denied { write } for pid=8247 comm="syz.6.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.177443][ T29] audit: type=1400 audit(1736148956.337:616): avc: denied { append } for pid=8247 comm="syz.6.570" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.340956][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 277.352264][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.381934][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.419243][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 277.446665][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.481525][ T5868] usb 3-1: config 0 descriptor?? [ 277.558097][ T5833] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 277.719958][ T29] audit: type=1400 audit(1736148957.357:617): avc: denied { mount } for pid=8276 comm="syz.3.579" name="/" dev="autofs" ino=17433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 278.022831][ T29] audit: type=1400 audit(1736148957.527:618): avc: denied { mounton } for pid=8276 comm="syz.3.579" path="/149/file1/file0" dev="autofs" ino=17437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 278.309436][ T5868] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000E/input/input14 [ 278.504340][ T29] audit: type=1400 audit(1736148958.147:619): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 278.561368][ T5868] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 279.541003][ T6748] usb 3-1: USB disconnect, device number 17 [ 279.831099][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 280.559553][ T8332] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 280.642855][ T29] audit: type=1400 audit(1736148960.277:620): avc: denied { write } for pid=8310 comm="syz.5.588" laddr=172.20.20.170 lport=59670 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 280.663235][ T8314] dccp_close: ABORT with 2 bytes unread [ 280.829127][ T29] audit: type=1400 audit(1736148960.467:621): avc: denied { mounton } for pid=8341 comm="syz.5.596" path="/33/file0" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 281.289393][ T29] audit: type=1400 audit(1736148960.927:622): avc: denied { read write } for pid=8367 comm="syz.6.602" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.382743][ T29] audit: type=1400 audit(1736148960.957:623): avc: denied { open } for pid=8367 comm="syz.6.602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.666592][ T5868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 283.700900][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 283.707517][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.718523][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.728994][ T5868] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 284.282102][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.297015][ T5868] usb 3-1: config 0 descriptor?? [ 284.329862][ T5868] usb 3-1: can't set config #0, error -71 [ 284.352590][ T5868] usb 3-1: USB disconnect, device number 18 [ 285.242051][ T5833] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 287.052611][ T29] audit: type=1400 audit(1736148966.687:624): avc: denied { sqpoll } for pid=8432 comm="syz.5.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 287.689038][ T29] audit: type=1400 audit(1736148967.297:625): avc: denied { name_bind } for pid=8457 comm="syz.0.622" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 287.753374][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 290.171898][ T8509] evm: overlay not supported [ 291.427950][ T8540] binder: 8538:8540 ioctl c0306201 20000580 returned -14 [ 291.574998][ T25] kernel write not supported for file /126/attr/exec (pid: 25 comm: kworker/1:0) [ 291.608404][ T29] audit: type=1400 audit(1736148971.247:626): avc: denied { write } for pid=8544 comm="syz.6.647" name="/" dev="9p" ino=4412305357440913309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.647375][ T29] audit: type=1400 audit(1736148971.247:627): avc: denied { add_name } for pid=8544 comm="syz.6.647" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.682328][ T29] audit: type=1400 audit(1736148971.247:628): avc: denied { create } for pid=8544 comm="syz.6.647" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.703373][ T29] audit: type=1400 audit(1736148971.247:629): avc: denied { associate } for pid=8544 comm="syz.6.647" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 291.842448][ T8554] overlayfs: missing 'lowerdir' [ 295.352899][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 295.430296][ T8590] overlayfs: missing 'lowerdir' [ 295.520695][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.561821][ T5868] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.608000][ T5868] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 295.643097][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.700078][ T5868] usb 7-1: Product: syz [ 295.720317][ T5868] usb 7-1: Manufacturer: syz [ 295.740557][ T5868] usb 7-1: SerialNumber: syz [ 295.792428][ T5868] r8152-cfgselector 7-1: Unknown version 0x0000 [ 295.822059][ T5868] r8152-cfgselector 7-1: config 0 descriptor?? [ 296.815917][ T5868] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 296.975083][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 297.049843][ T8602] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 297.747240][ T8612] trusted_key: syz.5.671 sent an empty control message without MSG_MORE. [ 297.844229][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.863217][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.902237][ T2956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.919861][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.928829][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.936743][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.944414][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.109517][ T8622] overlayfs: missing 'lowerdir' [ 298.187090][ T8623] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 298.195281][ T8623] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 298.204222][ T8623] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 298.212187][ T8623] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 298.771054][ T2956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.914550][ T2956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.223902][ T2956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.378775][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 299.513177][ T8653] xt_connbytes: Forcing CT accounting to be enabled [ 299.520117][ T8653] Cannot find set identified by id 0 to match [ 299.950892][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.121060][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 300.132381][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.153468][ T5131] Bluetooth: hci4: command tx timeout [ 300.190713][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.200621][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 300.209758][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.220697][ T9] usb 3-1: config 0 descriptor?? [ 300.512613][ T2956] bridge_slave_1: left allmulticast mode [ 300.560866][ T2956] bridge_slave_1: left promiscuous mode [ 300.566649][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.620175][ T2956] bridge_slave_0: left allmulticast mode [ 300.634230][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000F/input/input15 [ 300.650188][ T2956] bridge_slave_0: left promiscuous mode [ 300.656003][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.411913][ T9] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 301.427493][ T9] usb 3-1: USB disconnect, device number 19 [ 302.231190][ T5131] Bluetooth: hci4: command tx timeout [ 302.579590][ T29] audit: type=1400 audit(1736148982.217:630): avc: denied { read } for pid=8707 comm="syz.5.698" path="socket:[19027]" dev="sockfs" ino=19027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.825757][ T29] audit: type=1400 audit(1736148982.277:631): avc: denied { accept } for pid=8707 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 304.310999][ T5131] Bluetooth: hci4: command tx timeout [ 304.397111][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.407335][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.418361][ T2956] bond0 (unregistering): Released all slaves [ 304.420902][ T6748] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 304.432225][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.439433][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.447159][ T8610] bridge_slave_0: entered allmulticast mode [ 304.454158][ T8610] bridge_slave_0: entered promiscuous mode [ 304.461707][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.469592][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.477070][ T8610] bridge_slave_1: entered allmulticast mode [ 304.484055][ T8610] bridge_slave_1: entered promiscuous mode [ 304.555388][ T8723] tipc: Enabled bearer , priority 0 [ 304.574759][ T2956] tipc: Left network mode [ 304.607851][ T6748] usb 3-1: Using ep0 maxpacket: 16 [ 304.608012][ T8728] tipc: Enabling of bearer rejected, already enabled [ 304.634952][ T6748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.661777][ T6748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.696146][ T6748] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 304.710523][ T6748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.712232][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.743200][ T6748] usb 3-1: config 0 descriptor?? [ 304.761477][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.942960][ T8610] team0: Port device team_slave_0 added [ 304.965186][ T8610] team0: Port device team_slave_1 added [ 305.038278][ T2956] hsr_slave_0: left promiscuous mode [ 305.048566][ T2956] hsr_slave_1: left promiscuous mode [ 305.105550][ T2956] veth1_macvtap: left promiscuous mode [ 305.112971][ T2956] veth0_macvtap: left promiscuous mode [ 305.118554][ T2956] veth1_vlan: left promiscuous mode [ 305.127662][ T2956] veth0_vlan: left promiscuous mode [ 305.178556][ T6748] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0010/input/input16 [ 305.298494][ T6748] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 305.389576][ T29] audit: type=1400 audit(1736148985.027:632): avc: denied { mount } for pid=8750 comm="syz.5.710" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 306.394019][ T5131] Bluetooth: hci4: command tx timeout [ 306.417236][ T29] audit: type=1400 audit(1736148986.027:633): avc: denied { unmount } for pid=6891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 306.599562][ T8765] Bluetooth: MGMT ver 1.23 [ 307.239192][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 307.304279][ T1156] usb 3-1: USB disconnect, device number 20 [ 307.361583][ T8774] input: syz1 as /devices/virtual/input/input17 [ 307.482177][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 308.872265][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.628635][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.641691][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.668543][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.690053][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.718572][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.766323][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.475958][ T8610] hsr_slave_0: entered promiscuous mode [ 310.563305][ T8610] hsr_slave_1: entered promiscuous mode [ 310.580074][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.588698][ T8610] Cannot create hsr debugfs directory [ 312.366677][ T8610] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.546132][ T8610] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.617817][ T8610] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.742068][ T8610] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.788829][ T29] audit: type=1400 audit(1736148992.427:634): avc: denied { listen } for pid=8839 comm="syz.5.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.131400][ T29] audit: type=1400 audit(1736148992.767:635): avc: denied { create } for pid=8853 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.143827][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.757077][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.866745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.873898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.099413][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.106549][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.009575][ T8610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.113259][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.117512][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135109][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.656609][ T5833] Bluetooth: hci2: unexpected event for opcode 0x203d [ 318.143798][ T29] audit: type=1326 audit(1736148997.777:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.285717][ T29] audit: type=1326 audit(1736148997.827:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.387766][ T8610] veth0_vlan: entered promiscuous mode [ 318.399685][ T29] audit: type=1326 audit(1736148997.827:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.437603][ T8610] veth1_vlan: entered promiscuous mode [ 318.458571][ T29] audit: type=1326 audit(1736148997.827:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.490570][ T8610] veth0_macvtap: entered promiscuous mode [ 318.595422][ T8610] veth1_macvtap: entered promiscuous mode [ 318.654518][ T29] audit: type=1326 audit(1736148997.837:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.805879][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.850337][ T29] audit: type=1326 audit(1736148997.837:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.909368][ T29] audit: type=1326 audit(1736148997.837:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 318.964430][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.994817][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.005541][ T29] audit: type=1326 audit(1736148997.847:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 319.061814][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.071818][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.082274][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.096214][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.106746][ T29] audit: type=1326 audit(1736148997.847:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 319.140961][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.168301][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.192382][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 319.222201][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 319.421213][ T29] audit: type=1326 audit(1736148997.847:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea34985d29 code=0x7ffc0000 [ 319.485258][ T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 319.527376][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.568759][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.648024][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.759060][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.762602][ T8] usb 1-1: Product: syz [ 319.773806][ T8] usb 1-1: Manufacturer: syz [ 319.778417][ T8] usb 1-1: SerialNumber: syz [ 319.810300][ T8] usb 1-1: config 0 descriptor?? [ 319.820916][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.850913][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.870905][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.891137][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.918748][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.949255][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.999258][ T8610] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.033435][ T8610] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.042932][ T8610] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.057603][ T8610] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.149858][ T8] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 320.195047][ T8] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 320.749313][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.774185][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.883048][ T8] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 320.908487][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.916445][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.969339][ T8] usb 1-1: USB disconnect, device number 12 [ 320.980378][ T8979] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 320.997520][ T8979] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 321.736727][ T5131] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 321.745463][ T5131] Bluetooth: hci2: Injecting HCI hardware error event [ 321.756089][ T5131] Bluetooth: hci2: hardware error 0x00 [ 322.845696][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.173741][ T9018] 9pnet_fd: Insufficient options for proto=fd [ 324.041486][ T9007] netem: incorrect gi model size [ 324.046618][ T9007] netem: change failed [ 324.071858][ T5131] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 324.206303][ T9030] tipc: Enabling of bearer rejected, already enabled [ 324.217622][ T9030] tipc: Enabling of bearer rejected, already enabled [ 324.411168][ T9037] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.672645][ T9075] veth1_macvtap: left promiscuous mode [ 329.684666][ T9086] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.713862][ T9088] FAULT_INJECTION: forcing a failure. [ 329.713862][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 329.726836][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.0.793 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 329.737441][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.747511][ T9088] Call Trace: [ 329.750788][ T9088] [ 329.753720][ T9088] dump_stack_lvl+0x16c/0x1f0 [ 329.758411][ T9088] should_fail_ex+0x497/0x5b0 [ 329.763114][ T9088] ? fs_reclaim_acquire+0xae/0x150 [ 329.768237][ T9088] should_failslab+0xc2/0x120 [ 329.772928][ T9088] __kmalloc_noprof+0xcb/0x510 [ 329.777703][ T9088] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 329.783360][ T9088] tomoyo_realpath_from_path+0xb9/0x720 [ 329.788920][ T9088] ? tomoyo_path_number_perm+0x235/0x590 [ 329.794566][ T9088] ? tomoyo_path_number_perm+0x235/0x590 [ 329.800221][ T9088] tomoyo_path_number_perm+0x248/0x590 [ 329.805689][ T9088] ? tomoyo_path_number_perm+0x235/0x590 [ 329.811338][ T9088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.817360][ T9088] ? __pfx_lock_release+0x10/0x10 [ 329.822396][ T9088] ? trace_lock_acquire+0x14e/0x1f0 [ 329.827614][ T9088] ? lock_acquire+0x2f/0xb0 [ 329.832124][ T9088] ? __fget_files+0x40/0x3a0 [ 329.836736][ T9088] ? __fget_files+0x206/0x3a0 [ 329.841427][ T9088] security_file_ioctl+0x9b/0x240 [ 329.846468][ T9088] __x64_sys_ioctl+0xb7/0x200 [ 329.851165][ T9088] do_syscall_64+0xcd/0x250 [ 329.855682][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.861587][ T9088] RIP: 0033:0x7fea34985d29 [ 329.866033][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.885656][ T9088] RSP: 002b:00007fea3573c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.894098][ T9088] RAX: ffffffffffffffda RBX: 00007fea34b75fa0 RCX: 00007fea34985d29 [ 329.902081][ T9088] RDX: 0000000020000180 RSI: 000000004020565a RDI: 0000000000000003 [ 329.910098][ T9088] RBP: 00007fea3573c090 R08: 0000000000000000 R09: 0000000000000000 [ 329.918083][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.926065][ T9088] R13: 0000000000000000 R14: 00007fea34b75fa0 R15: 00007ffc2ab9cd38 [ 329.934064][ T9088] [ 329.971013][ T9088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.257649][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 330.257665][ T29] audit: type=1400 audit(1736149009.897:662): avc: denied { append } for pid=9105 comm="syz.0.799" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 332.290914][ T9140] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.301107][ T5871] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 332.530503][ T29] audit: type=1400 audit(1736149012.167:663): avc: denied { create } for pid=9150 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.560143][ T5871] usb 8-1: Using ep0 maxpacket: 16 [ 332.578296][ T5871] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.599839][ T5871] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.695756][ T5871] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.904923][ T5871] usb 8-1: config 0 interface 0 has no altsetting 0 [ 332.911683][ T5871] usb 8-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 332.920729][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.930763][ T5871] usb 8-1: config 0 descriptor?? [ 333.000941][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 333.382370][ T5871] hid-generic 0003:045E:05DA.0011: unknown main item tag 0x0 [ 333.464663][ T5871] hid-generic 0003:045E:05DA.0011: unknown main item tag 0x0 [ 333.605605][ T9174] No control pipe specified [ 333.611438][ T5871] hid-generic 0003:045E:05DA.0011: unknown main item tag 0x0 [ 333.667576][ T5871] hid-generic 0003:045E:05DA.0011: ignoring exceeding usage max [ 333.726262][ T5871] hid-generic 0003:045E:05DA.0011: unknown main item tag 0x0 [ 333.776163][ T5871] hid-generic 0003:045E:05DA.0011: unknown main item tag 0x0 [ 333.823643][ T5871] hid-generic 0003:045E:05DA.0011: unbalanced collection at end of report description [ 333.888275][ T5871] hid-generic 0003:045E:05DA.0011: probe with driver hid-generic failed with error -22 [ 334.084964][ T5818] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 334.094229][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.103253][ T5818] usb 1-1: Product: syz [ 334.107429][ T5818] usb 1-1: Manufacturer: syz [ 334.112356][ T5818] usb 1-1: SerialNumber: syz [ 334.153974][ T1300] nci: nci_rx_work: unknown MT 0x6 [ 334.384127][ T5818] usb 1-1: config 0 descriptor?? [ 334.405496][ T5818] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 014 [ 334.662125][ T5871] usb 8-1: USB disconnect, device number 2 [ 335.647858][ T5818] (null): failure reading functionality [ 335.658513][ T5818] i2c i2c-1: failure reading functionality [ 335.672462][ T5818] i2c i2c-1: connected i2c-tiny-usb device [ 335.679940][ T5818] usb 1-1: USB disconnect, device number 14 [ 335.755325][ T9209] FAULT_INJECTION: forcing a failure. [ 335.755325][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 335.768338][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.5.819 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 335.778944][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.788995][ T9209] Call Trace: [ 335.792274][ T9209] [ 335.795215][ T9209] dump_stack_lvl+0x16c/0x1f0 [ 335.799905][ T9209] should_fail_ex+0x497/0x5b0 [ 335.804599][ T9209] should_failslab+0xc2/0x120 [ 335.809290][ T9209] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 335.814664][ T9209] ? skb_clone+0x190/0x3f0 [ 335.819081][ T9209] skb_clone+0x190/0x3f0 [ 335.823325][ T9209] netlink_deliver_tap+0xabd/0xd30 [ 335.828445][ T9209] netlink_unicast+0x5e1/0x7f0 [ 335.833228][ T9209] ? __pfx_netlink_unicast+0x10/0x10 [ 335.838519][ T9209] netlink_sendmsg+0x8b8/0xd70 [ 335.843287][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.848577][ T9209] ____sys_sendmsg+0xaaf/0xc90 [ 335.853351][ T9209] ? copy_msghdr_from_user+0x10b/0x160 [ 335.858804][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.864095][ T9209] ___sys_sendmsg+0x135/0x1e0 [ 335.868765][ T9209] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.874316][ T9209] ? __pfx_lock_release+0x10/0x10 [ 335.879337][ T9209] ? trace_lock_acquire+0x14e/0x1f0 [ 335.884543][ T9209] ? __fget_files+0x206/0x3a0 [ 335.889220][ T9209] __sys_sendmsg+0x16e/0x220 [ 335.893805][ T9209] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.898922][ T9209] do_syscall_64+0xcd/0x250 [ 335.903429][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.909321][ T9209] RIP: 0033:0x7f4470385d29 [ 335.913731][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.933346][ T9209] RSP: 002b:00007f447116b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.941757][ T9209] RAX: ffffffffffffffda RBX: 00007f4470576160 RCX: 00007f4470385d29 [ 335.949721][ T9209] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 335.957683][ T9209] RBP: 00007f447116b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.965646][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.973633][ T9209] R13: 0000000000000000 R14: 00007f4470576160 R15: 00007ffecd380958 [ 335.981614][ T9209] [ 336.854749][ T9219] FAULT_INJECTION: forcing a failure. [ 336.854749][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 336.867906][ T9219] CPU: 1 UID: 0 PID: 9219 Comm: syz.5.824 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 336.878501][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.888559][ T9219] Call Trace: [ 336.891825][ T9219] [ 336.894743][ T9219] dump_stack_lvl+0x16c/0x1f0 [ 336.899410][ T9219] should_fail_ex+0x497/0x5b0 [ 336.904075][ T9219] ? fs_reclaim_acquire+0xae/0x150 [ 336.909169][ T9219] should_failslab+0xc2/0x120 [ 336.913839][ T9219] __kmalloc_noprof+0xcb/0x510 [ 336.918586][ T9219] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 336.924403][ T9219] io_alloc_async_data+0x9d/0x150 [ 336.929439][ T9219] io_prep_rw+0x30d/0xb70 [ 336.933759][ T9219] io_submit_sqes+0x853/0x25c0 [ 336.938523][ T9219] __do_sys_io_uring_enter+0xd43/0x1620 [ 336.944069][ T9219] ? __fget_files+0x206/0x3a0 [ 336.948729][ T9219] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 336.954705][ T9219] ? fput+0x67/0x440 [ 336.958592][ T9219] ? ksys_write+0x1ba/0x250 [ 336.963082][ T9219] ? __pfx_ksys_write+0x10/0x10 [ 336.967920][ T9219] do_syscall_64+0xcd/0x250 [ 336.969103][ T9187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.972407][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.972468][ T9219] RIP: 0033:0x7f4470385d29 [ 336.972485][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.972502][ T9219] RSP: 002b:00007f44711ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 336.972521][ T9219] RAX: ffffffffffffffda RBX: 00007f4470575fa0 RCX: 00007f4470385d29 [ 336.972543][ T9219] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 336.972555][ T9219] RBP: 00007f44711ad090 R08: 0000000000000000 R09: 0000000000000000 [ 336.972569][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.972582][ T9219] R13: 0000000000000000 R14: 00007f4470575fa0 R15: 00007ffecd380958 [ 336.972610][ T9219] [ 337.120423][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.825'. [ 337.140861][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 337.269853][ T29] audit: type=1400 audit(1736149528.890:664): avc: denied { connect } for pid=9225 comm="syz.6.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 337.550919][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 337.562043][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.568908][ T5871] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 337.580374][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.642669][ T5871] usb 1-1: config 0 descriptor?? [ 337.885710][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.904774][ T9253] FAULT_INJECTION: forcing a failure. [ 337.904774][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 337.918107][ T9253] CPU: 0 UID: 0 PID: 9253 Comm: syz.5.834 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 337.921229][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.928696][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.946479][ T9253] Call Trace: [ 337.949766][ T9253] [ 337.952702][ T9253] dump_stack_lvl+0x16c/0x1f0 [ 337.957387][ T9253] should_fail_ex+0x497/0x5b0 [ 337.962070][ T9253] should_failslab+0xc2/0x120 [ 337.966745][ T9253] __kmalloc_cache_noprof+0x68/0x410 [ 337.972552][ T9253] ? __pfx_sctp_get_port_local+0x10/0x10 [ 337.978184][ T9253] ? lock_acquire+0x2f/0xb0 [ 337.982690][ T9253] sctp_add_bind_addr+0x9a/0x3d0 [ 337.987632][ T9253] sctp_do_bind+0x2d6/0x700 [ 337.992138][ T9253] sctp_bindx_add+0x98/0x1e0 [ 337.996729][ T9253] sctp_setsockopt_bindx+0x242/0x290 [ 338.002015][ T9253] sctp_setsockopt+0x196d/0xb810 [ 338.006949][ T9253] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 338.013723][ T9253] ? __pfx_sctp_setsockopt+0x10/0x10 [ 338.019021][ T9253] ? selinux_socket_setsockopt+0x6a/0x80 [ 338.024653][ T9253] ? sock_common_setsockopt+0x2e/0xf0 [ 338.030028][ T9253] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.035924][ T9253] do_sock_setsockopt+0x222/0x480 [ 338.040950][ T9253] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 338.046496][ T9253] ? lock_acquire+0x2f/0xb0 [ 338.051009][ T9253] __sys_setsockopt+0x1a0/0x230 [ 338.055891][ T9253] __x64_sys_setsockopt+0xbd/0x160 [ 338.061006][ T9253] ? do_syscall_64+0x91/0x250 [ 338.065688][ T9253] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.070884][ T9253] do_syscall_64+0xcd/0x250 [ 338.075393][ T9253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.081289][ T9253] RIP: 0033:0x7f4470385d29 [ 338.085695][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.105299][ T9253] RSP: 002b:00007f44711ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.113706][ T9253] RAX: ffffffffffffffda RBX: 00007f4470575fa0 RCX: 00007f4470385d29 [ 338.121671][ T9253] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 338.129632][ T9253] RBP: 00007f44711ad090 R08: 000000000000001c R09: 0000000000000000 [ 338.137594][ T9253] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 338.145558][ T9253] R13: 0000000000000000 R14: 00007f4470575fa0 R15: 00007ffecd380958 [ 338.153538][ T9253] [ 338.170098][ T29] audit: type=1400 audit(1736149529.810:665): avc: denied { read } for pid=9236 comm="syz.7.831" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.205518][ T9254] FAULT_INJECTION: forcing a failure. [ 338.205518][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 338.221042][ T9237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9237 comm=syz.7.831 [ 338.231131][ T29] audit: type=1400 audit(1736149529.810:666): avc: denied { open } for pid=9236 comm="syz.7.831" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.271205][ T9237] netlink: 'syz.7.831': attribute type 4 has an invalid length. [ 338.292791][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.2.832 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 338.303402][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.313450][ T9254] Call Trace: [ 338.316718][ T9254] [ 338.319638][ T9254] dump_stack_lvl+0x16c/0x1f0 [ 338.324317][ T9254] should_fail_ex+0x497/0x5b0 [ 338.328996][ T9254] ? fs_reclaim_acquire+0xae/0x150 [ 338.334103][ T9254] should_failslab+0xc2/0x120 [ 338.338778][ T9254] __kmalloc_cache_noprof+0x68/0x410 [ 338.344064][ T9254] ip_set_create+0x33f/0x14d0 [ 338.348746][ T9254] ? __pfx_ip_set_create+0x10/0x10 [ 338.353883][ T9254] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 338.358917][ T9254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 338.364381][ T9254] ? __pfx___lock_acquire+0x10/0x10 [ 338.369598][ T9254] ? lock_acquire+0x2f/0xb0 [ 338.374093][ T9254] ? avc_has_perm_noaudit+0x61/0x3a0 [ 338.379383][ T9254] netlink_rcv_skb+0x16b/0x440 [ 338.384146][ T9254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 338.389611][ T9254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.394908][ T9254] ? bpf_lsm_capable+0x9/0x10 [ 338.399576][ T9254] ? security_capable+0x7e/0x260 [ 338.404508][ T9254] ? ns_capable+0xd7/0x110 [ 338.408923][ T9254] nfnetlink_rcv+0x1b4/0x430 [ 338.413543][ T9254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 338.418655][ T9254] ? netlink_deliver_tap+0x1ae/0xd30 [ 338.423949][ T9254] netlink_unicast+0x53c/0x7f0 [ 338.428712][ T9254] ? __pfx_netlink_unicast+0x10/0x10 [ 338.434013][ T9254] netlink_sendmsg+0x8b8/0xd70 [ 338.438779][ T9254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.444071][ T9254] ____sys_sendmsg+0xaaf/0xc90 [ 338.448831][ T9254] ? copy_msghdr_from_user+0x10b/0x160 [ 338.454283][ T9254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.459573][ T9254] ___sys_sendmsg+0x135/0x1e0 [ 338.464244][ T9254] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.469449][ T9254] ? __pfx_lock_release+0x10/0x10 [ 338.474468][ T9254] ? trace_lock_acquire+0x14e/0x1f0 [ 338.479679][ T9254] ? __fget_files+0x206/0x3a0 [ 338.484375][ T9254] __sys_sendmsg+0x16e/0x220 [ 338.488988][ T9254] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.494126][ T9254] do_syscall_64+0xcd/0x250 [ 338.498634][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.504529][ T9254] RIP: 0033:0x7f6a0bf85d29 [ 338.508935][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.528540][ T9254] RSP: 002b:00007f6a09db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.536948][ T9254] RAX: ffffffffffffffda RBX: 00007f6a0c176160 RCX: 00007f6a0bf85d29 [ 338.544912][ T9254] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 338.552874][ T9254] RBP: 00007f6a09db4090 R08: 0000000000000000 R09: 0000000000000000 [ 338.560838][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.568803][ T9254] R13: 0000000000000000 R14: 00007f6a0c176160 R15: 00007fff0eb36498 [ 338.576784][ T9254] [ 338.636616][ T5871] hid (null): report_id 0 is invalid [ 338.642700][ T5871] hid (null): unknown global tag 0xd [ 338.648031][ T5871] hid (null): unknown global tag 0x65 [ 338.661842][ T9260] FAULT_INJECTION: forcing a failure. [ 338.661842][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 338.690762][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.6.836 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 338.694824][ T5871] hid (null): unknown global tag 0xe [ 338.701368][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.701396][ T9260] Call Trace: [ 338.701403][ T9260] [ 338.701411][ T9260] dump_stack_lvl+0x16c/0x1f0 [ 338.727570][ T9260] should_fail_ex+0x497/0x5b0 [ 338.732250][ T9260] ? fs_reclaim_acquire+0xae/0x150 [ 338.737355][ T9260] should_failslab+0xc2/0x120 [ 338.742071][ T9260] __kmalloc_noprof+0xcb/0x510 [ 338.746833][ T9260] ? d_absolute_path+0x137/0x1b0 [ 338.751768][ T9260] ? rcu_is_watching+0x12/0xc0 [ 338.756534][ T9260] tomoyo_encode2+0x100/0x3e0 [ 338.761210][ T9260] tomoyo_encode+0x29/0x50 [ 338.765629][ T9260] tomoyo_realpath_from_path+0x19d/0x720 [ 338.771275][ T9260] tomoyo_path_number_perm+0x248/0x590 [ 338.776729][ T9260] ? tomoyo_path_number_perm+0x235/0x590 [ 338.782356][ T9260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 338.788352][ T9260] ? __pfx_lock_release+0x10/0x10 [ 338.793373][ T9260] ? trace_lock_acquire+0x14e/0x1f0 [ 338.798573][ T9260] ? lock_acquire+0x2f/0xb0 [ 338.803088][ T9260] ? __fget_files+0x40/0x3a0 [ 338.807721][ T9260] ? __fget_files+0x206/0x3a0 [ 338.812410][ T9260] security_file_ioctl+0x9b/0x240 [ 338.817439][ T9260] __x64_sys_ioctl+0xb7/0x200 [ 338.822123][ T9260] do_syscall_64+0xcd/0x250 [ 338.826635][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.832530][ T9260] RIP: 0033:0x7f502a785d29 [ 338.836943][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.856736][ T9260] RSP: 002b:00007f502b67b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.865150][ T9260] RAX: ffffffffffffffda RBX: 00007f502a975fa0 RCX: 00007f502a785d29 [ 338.873127][ T9260] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000004 [ 338.881097][ T9260] RBP: 00007f502b67b090 R08: 0000000000000000 R09: 0000000000000000 [ 338.889073][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.897041][ T9260] R13: 0000000000000000 R14: 00007f502a975fa0 R15: 00007fffa292b378 [ 338.905024][ T9260] [ 338.915950][ T5871] hid (null): unknown global tag 0xc [ 338.927758][ T5871] corsair-psu 0003:1B1C:1C07.0012: unexpected long global item [ 338.935862][ T5871] corsair-psu 0003:1B1C:1C07.0012: probe with driver corsair-psu failed with error -22 [ 338.947977][ T9260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.999488][ T9262] tipc: Enabling of bearer rejected, failed to enable media [ 339.001175][ T5871] usb 1-1: USB disconnect, device number 15 [ 339.021553][ T9262] tipc: Enabled bearer , priority 0 [ 339.093781][ T9263] tipc: Enabled bearer , priority 0 [ 339.180572][ T9269] Illegal XDP return value 4294967282 on prog (id 136) dev N/A, expect packet loss! [ 339.217362][ T9272] FAULT_INJECTION: forcing a failure. [ 339.217362][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.266797][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.7.838 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 339.277418][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.287488][ T9272] Call Trace: [ 339.290766][ T9272] [ 339.290876][ T9275] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.293682][ T9272] dump_stack_lvl+0x16c/0x1f0 [ 339.304585][ T9272] should_fail_ex+0x497/0x5b0 [ 339.309285][ T9272] _copy_from_user+0x2e/0xd0 [ 339.313895][ T9272] uhid_char_write+0x190/0x10b0 [ 339.318758][ T9272] ? avc_policy_seqno+0x9/0x20 [ 339.323545][ T9272] loop_rw_iter+0x22e/0x590 [ 339.328071][ T9272] io_write+0xf85/0x13d0 [ 339.332338][ T9272] io_issue_sqe+0x175/0x1200 [ 339.336956][ T9272] io_submit_sqes+0x95a/0x25c0 [ 339.341750][ T9272] __do_sys_io_uring_enter+0xd43/0x1620 [ 339.347333][ T9272] ? __fget_files+0x206/0x3a0 [ 339.352030][ T9272] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 339.358038][ T9272] ? fput+0x67/0x440 [ 339.361949][ T9272] ? ksys_write+0x1ba/0x250 [ 339.366470][ T9272] ? __pfx_ksys_write+0x10/0x10 [ 339.371341][ T9272] do_syscall_64+0xcd/0x250 [ 339.375868][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.381777][ T9272] RIP: 0033:0x7fba34185d29 [ 339.386201][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.405910][ T9272] RSP: 002b:00007fba34f1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 339.414338][ T9272] RAX: ffffffffffffffda RBX: 00007fba34375fa0 RCX: 00007fba34185d29 [ 339.422319][ T9272] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 339.430298][ T9272] RBP: 00007fba34f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.438274][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.446248][ T9272] R13: 0000000000000000 R14: 00007fba34375fa0 R15: 00007ffff9caa828 [ 339.454242][ T9272] [ 339.957328][ T29] audit: type=1400 audit(1736149531.600:667): avc: denied { setopt } for pid=9294 comm="syz.7.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 340.120102][ T29] audit: type=1400 audit(1736149531.760:668): avc: denied { ioctl } for pid=9294 comm="syz.7.845" path="socket:[20294]" dev="sockfs" ino=20294 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 340.151023][ T5869] tipc: Node number set to 3378816302 [ 340.333453][ T9314] netlink: 'syz.0.847': attribute type 32 has an invalid length. [ 342.076071][ T5871] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 342.285313][ T9351] FAULT_INJECTION: forcing a failure. [ 342.285313][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 342.297514][ T9353] smc: net device bond0 applied user defined pnetid SYZ2 [ 342.298346][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.6.859 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 342.309198][ T9353] netlink: 'syz.7.860': attribute type 21 has an invalid length. [ 342.315705][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.315720][ T9351] Call Trace: [ 342.315727][ T9351] [ 342.315736][ T9351] dump_stack_lvl+0x16c/0x1f0 [ 342.315765][ T9351] should_fail_ex+0x497/0x5b0 [ 342.315796][ T9351] should_failslab+0xc2/0x120 [ 342.315819][ T9351] __kmalloc_noprof+0xcb/0x510 [ 342.315848][ T9351] io_cqring_event_overflow+0xcb/0x6f0 [ 342.315875][ T9351] io_req_cqe_overflow+0x101/0x1e0 [ 342.315898][ T9351] __io_submit_flush_completions+0x8d9/0x1c00 [ 342.315941][ T9351] ctx_flush_and_put.constprop.0+0x9a/0x410 [ 342.315970][ T9351] io_handle_tw_list+0x3df/0x540 [ 342.315999][ T9351] ? __pfx_io_handle_tw_list+0x10/0x10 [ 342.316024][ T9351] ? lock_acquire.part.0+0x11b/0x380 [ 342.316047][ T9351] ? find_held_lock+0x2d/0x110 [ 342.401615][ T9351] tctx_task_work_run+0xac/0x390 [ 342.406567][ T9351] tctx_task_work+0x7b/0xd0 [ 342.411079][ T9351] ? __pfx_tctx_task_work+0x10/0x10 [ 342.416298][ T9351] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.421511][ T9351] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.426731][ T9351] task_work_run+0x14e/0x250 [ 342.431338][ T9351] ? __pfx_task_work_run+0x10/0x10 [ 342.436472][ T9351] get_signal+0x1d3/0x26c0 [ 342.440927][ T9351] ? __pfx_get_signal+0x10/0x10 [ 342.445793][ T9351] ? fput+0x67/0x440 [ 342.449698][ T9351] ? __do_sys_io_uring_enter+0x5fb/0x1620 [ 342.455439][ T9351] arch_do_signal_or_restart+0x90/0x7e0 [ 342.461005][ T9351] ? __fget_files+0x206/0x3a0 [ 342.465700][ T9351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 342.471879][ T9351] ? ksys_write+0x1ba/0x250 [ 342.476398][ T9351] ? __pfx_ksys_write+0x10/0x10 [ 342.481267][ T9351] syscall_exit_to_user_mode+0x150/0x2a0 [ 342.486925][ T9351] do_syscall_64+0xda/0x250 [ 342.491449][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.497364][ T9351] RIP: 0033:0x7f502a785d29 [ 342.501789][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.521504][ T9351] RSP: 002b:00007f502b67b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 342.529947][ T9351] RAX: 0000000000000001 RBX: 00007f502a975fa0 RCX: 00007f502a785d29 [ 342.537949][ T9351] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 342.545945][ T9351] RBP: 00007f502b67b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.553953][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.561940][ T9351] R13: 0000000000000000 R14: 00007f502a975fa0 R15: 00007fffa292b378 [ 342.569946][ T9351] [ 342.705298][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.739385][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.760038][ T5871] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 342.798598][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.821838][ T5871] usb 3-1: config 0 descriptor?? [ 343.159771][ T9367] input: syz1 as /devices/virtual/input/input18 [ 343.288448][ T5871] cp2112 0003:10C4:EA90.0013: unexpected long global item [ 343.307825][ T5871] cp2112 0003:10C4:EA90.0013: parse failed [ 343.319395][ T5871] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -22 [ 344.521446][ T5868] usb 3-1: USB disconnect, device number 21 [ 344.652474][ T9374] 9pnet_fd: Insufficient options for proto=fd [ 345.686257][ T9385] fuse: Bad value for 'user_id' [ 345.699765][ T9385] fuse: Bad value for 'user_id' [ 345.880195][ T29] audit: type=1400 audit(1736149537.510:669): avc: denied { read write } for pid=9399 comm="syz.7.875" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 345.904681][ T29] audit: type=1400 audit(1736149537.510:670): avc: denied { ioctl open } for pid=9399 comm="syz.7.875" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 346.081074][ T5869] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 346.084266][ T9412] sctp: [Deprecated]: syz.7.877 (pid 9412) Use of int in max_burst socket option deprecated. [ 346.084266][ T9412] Use struct sctp_assoc_value instead [ 346.233395][ T5869] usb 1-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config [ 346.243887][ T5869] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.271040][ T5869] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 346.280128][ T29] audit: type=1400 audit(1736149537.920:671): avc: denied { ioctl } for pid=9418 comm="syz.7.880" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 346.355131][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.368845][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.880'. [ 346.403506][ T5869] usb 1-1: config 0 descriptor?? [ 346.780997][ T5868] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 346.879692][ T5869] usb 1-1: string descriptor 0 read error: -71 [ 346.886244][ T1156] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 346.897428][ T5869] usb 1-1: USB disconnect, device number 16 [ 346.930928][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 346.937847][ T5868] usb 7-1: config 0 interface 0 has no altsetting 0 [ 346.944782][ T5868] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 346.955468][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.966940][ T5868] usb 7-1: config 0 descriptor?? [ 347.023980][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.5.883'. [ 347.041835][ T1156] usb 8-1: Using ep0 maxpacket: 16 [ 347.062640][ T1156] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.074321][ T1156] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.084249][ T1156] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 347.093396][ T1156] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.112891][ T1156] usb 8-1: config 0 descriptor?? [ 347.141113][ T9437] netlink: 80 bytes leftover after parsing attributes in process `syz.2.884'. [ 347.186535][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.214063][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.242804][ T9441] FAULT_INJECTION: forcing a failure. [ 347.242804][ T9441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.264131][ T9441] CPU: 1 UID: 0 PID: 9441 Comm: syz.2.886 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 347.274752][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.284805][ T9441] Call Trace: [ 347.288080][ T9441] [ 347.291015][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 347.295715][ T9441] should_fail_ex+0x497/0x5b0 [ 347.300419][ T9441] _copy_from_user+0x2e/0xd0 [ 347.305021][ T9441] alg_setsockopt+0x77f/0xee0 [ 347.309689][ T9441] ? __pfx_alg_setsockopt+0x10/0x10 [ 347.314874][ T9441] ? selinux_socket_setsockopt+0x6a/0x80 [ 347.320499][ T9441] ? __pfx_alg_setsockopt+0x10/0x10 [ 347.325695][ T9441] do_sock_setsockopt+0x222/0x480 [ 347.330724][ T9441] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 347.336256][ T9441] ? lock_acquire+0x2f/0xb0 [ 347.340757][ T9441] __sys_setsockopt+0x1a0/0x230 [ 347.345604][ T9441] __x64_sys_setsockopt+0xbd/0x160 [ 347.350701][ T9441] ? do_syscall_64+0x91/0x250 [ 347.355362][ T9441] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.360544][ T9441] do_syscall_64+0xcd/0x250 [ 347.365031][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.370915][ T9441] RIP: 0033:0x7f6a0bf85d29 [ 347.375333][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.394942][ T9441] RSP: 002b:00007f6a09df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.403341][ T9441] RAX: ffffffffffffffda RBX: 00007f6a0c175fa0 RCX: 00007f6a0bf85d29 [ 347.411295][ T9441] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 347.419257][ T9441] RBP: 00007f6a09df6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.427224][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.435177][ T9441] R13: 0000000000000000 R14: 00007f6a0c175fa0 R15: 00007fff0eb36498 [ 347.443148][ T9441] [ 347.453330][ T5868] hid (null): report_id 0 is invalid [ 347.459166][ T5868] hid (null): unknown global tag 0xd [ 347.464646][ T5868] hid (null): unknown global tag 0x65 [ 347.470156][ T5868] hid (null): unknown global tag 0xe [ 347.475976][ T5868] hid (null): unknown global tag 0xc [ 347.484276][ T5868] corsair-psu 0003:1B1C:1C07.0014: unexpected long global item [ 347.492329][ T5868] corsair-psu 0003:1B1C:1C07.0014: probe with driver corsair-psu failed with error -22 [ 347.511180][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 347.668517][ T1156] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0015/input/input20 [ 347.744627][ T1156] appleir 0003:05AC:8241.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 347.746584][ T9445] binder: BINDER_SET_CONTEXT_MGR already set [ 347.763869][ T9445] binder: 9444:9445 ioctl 4018620d 20000040 returned -16 [ 347.763869][ T29] audit: type=1400 audit(1736149539.390:672): avc: denied { map } for pid=9444 comm="syz.2.888" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 347.795449][ T5870] usb 7-1: USB disconnect, device number 7 [ 347.825152][ T5871] usb 6-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 347.898965][ T5871] usb 6-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 347.908363][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 347.916527][ T5871] usb 6-1: Product: syz [ 347.920697][ T5871] usb 6-1: Manufacturer: syz [ 347.925380][ T5871] usb 6-1: SerialNumber: syz [ 347.999972][ T9447] kvm: pic: non byte write [ 348.138040][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.147898][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.159753][ T5871] hub 6-1:189.0: bad descriptor, ignoring hub [ 348.167636][ T5871] hub 6-1:189.0: probe with driver hub failed with error -5 [ 348.175675][ T5871] keyspan 6-1:189.0: Keyspan - (without firmware) converter detected [ 348.203659][ T5871] usb 6-1: USB disconnect, device number 5 [ 348.210677][ T5871] keyspan 6-1:189.0: device disconnected [ 348.268569][ T9452] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.324084][ T9454] input: syz1 as /devices/virtual/input/input21 [ 348.426017][ T5871] usb 8-1: USB disconnect, device number 3 [ 348.581248][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 349.078459][ T9468] FAULT_INJECTION: forcing a failure. [ 349.078459][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 349.091502][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.897 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 349.102119][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.112186][ T9468] Call Trace: [ 349.115468][ T9468] [ 349.118404][ T9468] dump_stack_lvl+0x16c/0x1f0 [ 349.123097][ T9468] should_fail_ex+0x497/0x5b0 [ 349.127792][ T9468] ? fs_reclaim_acquire+0xae/0x150 [ 349.132920][ T9468] should_failslab+0xc2/0x120 [ 349.137615][ T9468] __kmalloc_cache_noprof+0x68/0x410 [ 349.142913][ T9468] ? tcf_action_check_ctrlact+0x56/0x260 [ 349.148566][ T9468] tcf_skbmod_init+0x42c/0xb00 [ 349.153361][ T9468] ? __pfx_tcf_skbmod_init+0x10/0x10 [ 349.158661][ T9468] ? __pfx___nla_validate_parse+0x10/0x10 [ 349.164415][ T9468] ? __asan_memcpy+0x3c/0x60 [ 349.169021][ T9468] tcf_action_init_1+0x45f/0x6c0 [ 349.173973][ T9468] ? __pfx_tcf_action_init_1+0x10/0x10 [ 349.179455][ T9468] ? __nla_parse+0x40/0x60 [ 349.183883][ T9468] tcf_action_init+0x42e/0x9c0 [ 349.188661][ T9468] ? __pfx_tcf_action_init+0x10/0x10 [ 349.193955][ T9468] ? lock_acquire.part.0+0x11b/0x380 [ 349.199267][ T9468] ? is_bpf_text_address+0x94/0x1a0 [ 349.204478][ T9468] ? hlock_class+0x4e/0x130 [ 349.209015][ T9468] ? __pfx___lock_acquire+0x10/0x10 [ 349.214220][ T9468] ? hlock_class+0x4e/0x130 [ 349.218738][ T9468] ? __lock_acquire+0xcc5/0x3c40 [ 349.223701][ T9468] tcf_action_add+0xfd/0x5d0 [ 349.228322][ T9468] ? __pfx_tcf_action_add+0x10/0x10 [ 349.233531][ T9468] ? __pfx_lock_release+0x10/0x10 [ 349.238563][ T9468] ? trace_lock_acquire+0x14e/0x1f0 [ 349.243816][ T9468] ? __nla_parse+0x40/0x60 [ 349.248247][ T9468] tc_ctl_action+0x35d/0x470 [ 349.252845][ T9468] ? __pfx_tc_ctl_action+0x10/0x10 [ 349.257971][ T9468] ? __pfx_tc_ctl_action+0x10/0x10 [ 349.263092][ T9468] rtnetlink_rcv_msg+0x3c7/0xea0 [ 349.268052][ T9468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.273538][ T9468] netlink_rcv_skb+0x16b/0x440 [ 349.278311][ T9468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.283781][ T9468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.289091][ T9468] ? netlink_deliver_tap+0x1ae/0xd30 [ 349.294389][ T9468] netlink_unicast+0x53c/0x7f0 [ 349.299180][ T9468] ? __pfx_netlink_unicast+0x10/0x10 [ 349.304500][ T9468] netlink_sendmsg+0x8b8/0xd70 [ 349.309283][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.314593][ T9468] ____sys_sendmsg+0xaaf/0xc90 [ 349.319372][ T9468] ? copy_msghdr_from_user+0x10b/0x160 [ 349.324852][ T9468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.330177][ T9468] ___sys_sendmsg+0x135/0x1e0 [ 349.334874][ T9468] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.340092][ T9468] ? __pfx_lock_release+0x10/0x10 [ 349.345127][ T9468] ? trace_lock_acquire+0x14e/0x1f0 [ 349.350351][ T9468] ? __fget_files+0x206/0x3a0 [ 349.355044][ T9468] __sys_sendmsg+0x16e/0x220 [ 349.359644][ T9468] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.364786][ T9468] do_syscall_64+0xcd/0x250 [ 349.369312][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.375216][ T9468] RIP: 0033:0x7fea34985d29 [ 349.379631][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.399243][ T9468] RSP: 002b:00007fea3573c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.407664][ T9468] RAX: ffffffffffffffda RBX: 00007fea34b75fa0 RCX: 00007fea34985d29 [ 349.415638][ T9468] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 349.423614][ T9468] RBP: 00007fea3573c090 R08: 0000000000000000 R09: 0000000000000000 [ 349.431588][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.439561][ T9468] R13: 0000000000000000 R14: 00007fea34b75fa0 R15: 00007ffc2ab9cd38 [ 349.447548][ T9468] [ 349.482121][ T29] audit: type=1400 audit(1736149541.120:673): avc: denied { read } for pid=9472 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 350.370246][ T9492] syz.5.904[9492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.370353][ T9492] syz.5.904[9492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.382570][ T9492] syz.5.904[9492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.803856][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 350.891210][ T5869] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 351.060427][ T5869] usb 7-1: unable to get BOS descriptor or descriptor too short [ 351.089549][ T5869] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 351.109197][ T5869] usb 7-1: can't read configurations, error -71 [ 351.130873][ T9518] team_slave_0: entered promiscuous mode [ 351.136967][ T9518] team_slave_1: entered promiscuous mode [ 351.151013][ T9518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 351.264595][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 352.407981][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.921'. [ 352.560881][ T5871] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 352.801025][ T5868] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.881371][ T5871] usb 8-1: Using ep0 maxpacket: 32 [ 352.902597][ T5871] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.916103][ T5871] usb 8-1: config 0 has no interface number 0 [ 352.933190][ T5871] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.941027][ T5869] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 352.971261][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 352.980686][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.981327][ T5871] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.991140][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.015920][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.026087][ T5871] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 353.052754][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.065310][ T5868] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 353.447769][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.468931][ T5868] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 353.471364][ T5871] usb 8-1: config 0 descriptor?? [ 353.485988][ T5868] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 353.550825][ T5869] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 353.561604][ T5868] usb 6-1: Manufacturer: syz [ 353.587914][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.602227][ T5868] usb 6-1: config 0 descriptor?? [ 353.610010][ T5869] usb 1-1: Product: syz [ 353.624133][ T5869] usb 1-1: Manufacturer: syz [ 353.628875][ T5869] usb 1-1: SerialNumber: syz [ 353.656602][ T5869] usb 1-1: config 0 descriptor?? [ 353.674315][ T5869] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 017 [ 353.902116][ T5868] rc_core: IR keymap rc-hauppauge not found [ 353.934766][ T5868] Registered IR keymap rc-empty [ 353.939894][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 353.977576][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.015689][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 354.038339][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 354.066878][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.078716][ T5869] (null): failure reading functionality [ 354.089942][ T5869] i2c i2c-1: failure reading functionality [ 354.097849][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.134230][ T5869] i2c i2c-1: connected i2c-tiny-usb device [ 354.151197][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.161615][ T5869] usb 1-1: USB disconnect, device number 17 [ 354.176055][ T9649] overlayfs: missing 'lowerdir' [ 354.181391][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.201819][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.230579][ T9649] batadv0: entered promiscuous mode [ 354.232036][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.272000][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.301530][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.341779][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.363040][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 354.742233][ T5868] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 354.747524][ T9649] can0: slcan on ttyS3. [ 354.825657][ T5868] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 354.957140][ T5868] usb 6-1: USB disconnect, device number 6 [ 354.992673][ T9654] can0 (unregistered): slcan off ttyS3. [ 355.031634][ T9654] Falling back ldisc for ttyS3. [ 355.462334][ T9670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=455 sclass=netlink_route_socket pid=9670 comm=syz.5.939 [ 355.480880][ T5871] usbhid 8-1:0.1: can't add hid device: -71 [ 355.486880][ T5871] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 355.529826][ T5871] usb 8-1: USB disconnect, device number 4 [ 355.546606][ T9670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.939'. [ 355.629444][ T9673] overlay: Unknown parameter 'subj_role' [ 355.708283][ T29] audit: type=1400 audit(1736149547.350:674): avc: denied { unmount } for pid=7073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.874478][ T9684] overlayfs: failed to resolve './file1': -2 [ 355.888189][ T9680] overlayfs: failed to resolve './file1': -2 [ 356.103652][ T9680] Process accounting resumed [ 356.760899][ T29] audit: type=1400 audit(1736149548.400:675): avc: denied { ioctl } for pid=9704 comm="syz.7.946" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 357.207215][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 357.245288][ T29] audit: type=1400 audit(1736149548.890:676): avc: denied { ioctl } for pid=9733 comm="syz.7.953" path="socket:[22120]" dev="sockfs" ino=22120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.257380][ T9737] ieee802154 phy0 wpan0: encryption failed: -90 [ 357.411814][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 357.507370][ T9] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 357.638037][ T9747] binder: 9741:9747 ioctl c06864ce 0 returned -22 [ 357.651492][ T9] usb 7-1: config 2 has no interface number 0 [ 357.757282][ T9] usb 7-1: config 2 interface 31 has no altsetting 0 [ 357.887311][ T9] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 357.921093][ C1] vxcan0: j1939_tp_txtimer: 0xffff88802af3b400: tx aborted with unknown reason: -2 [ 357.934206][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802af39800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 357.935587][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.952605][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802af3b400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 358.229821][ T9] usb 7-1: Product: syz [ 358.234599][ T9] usb 7-1: Manufacturer: syz [ 358.239214][ T9] usb 7-1: SerialNumber: syz [ 358.267184][ T9745] can: request_module (can-proto-0) failed. [ 359.076786][ T5868] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 359.336635][ T9765] tmpfs: Bad value for 'mpol' [ 359.345267][ T29] audit: type=1400 audit(1736149550.960:677): avc: denied { read } for pid=9713 comm="syz.6.948" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 359.398207][ T5868] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.482967][ T9778] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 359.515788][ T29] audit: type=1400 audit(1736149550.960:678): avc: denied { open } for pid=9713 comm="syz.6.948" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 359.598420][ T9778] CIFS mount error: No usable UNC path provided in device string! [ 359.598420][ T9778] [ 359.614656][ T9] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 359.683833][ T9] usb 7-1: USB disconnect, device number 10 [ 359.708214][ T9778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 360.539187][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 360.670932][ T5868] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 360.832768][ T5868] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 360.843974][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.855513][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.866200][ T5868] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 360.881513][ T5868] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 360.891253][ T5818] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 361.011012][ T5868] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 361.020446][ T5868] usb 8-1: Manufacturer: syz [ 361.040946][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 361.049650][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.058166][ T5868] usb 8-1: config 0 descriptor?? [ 361.798967][ T5818] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 361.814206][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.839340][ T5818] usb 3-1: config 0 descriptor?? [ 362.058269][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.067994][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.161009][ T6748] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 362.288025][ T5818] hid (null): report_id 0 is invalid [ 362.300260][ T5818] hid (null): unknown global tag 0xd [ 362.330718][ T6748] usb 1-1: Using ep0 maxpacket: 8 [ 362.339702][ T6748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.350704][ T5818] hid (null): unknown global tag 0x65 [ 362.356265][ T6748] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 362.356294][ T6748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.372411][ T6748] usb 1-1: config 0 descriptor?? [ 362.389588][ T5818] hid (null): unknown global tag 0xe [ 362.397723][ T5818] hid (null): unknown global tag 0xc [ 362.421413][ T5818] corsair-psu 0003:1B1C:1C07.0017: unexpected long global item [ 362.432061][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.447005][ T5818] corsair-psu 0003:1B1C:1C07.0017: probe with driver corsair-psu failed with error -22 [ 362.447209][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.546075][ T29] audit: type=1400 audit(1736149554.190:679): avc: denied { create } for pid=9800 comm="syz.7.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 362.580670][ T5870] usb 3-1: USB disconnect, device number 22 [ 362.591851][ T29] audit: type=1400 audit(1736149554.220:680): avc: denied { bind } for pid=9800 comm="syz.7.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 362.654179][ T5868] usbhid 8-1:0.0: can't add hid device: -71 [ 362.660348][ T5868] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 362.673059][ T5868] usb 8-1: USB disconnect, device number 5 [ 362.795561][ T6748] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 362.819728][ T6748] nti 0003:0757:0A00.0018: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 362.884421][ T9828] FAULT_INJECTION: forcing a failure. [ 362.884421][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 362.905796][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.5.974 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 362.916406][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.926472][ T9828] Call Trace: [ 362.929734][ T9828] [ 362.932647][ T9828] dump_stack_lvl+0x16c/0x1f0 [ 362.937315][ T9828] should_fail_ex+0x497/0x5b0 [ 362.941980][ T9828] ? fs_reclaim_acquire+0xae/0x150 [ 362.947071][ T9828] should_failslab+0xc2/0x120 [ 362.951729][ T9828] __kmalloc_noprof+0xcb/0x510 [ 362.956475][ T9828] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 362.962110][ T9828] tomoyo_realpath_from_path+0xb9/0x720 [ 362.967659][ T9828] ? tomoyo_path_number_perm+0x235/0x590 [ 362.973277][ T9828] ? tomoyo_path_number_perm+0x235/0x590 [ 362.978892][ T9828] tomoyo_path_number_perm+0x248/0x590 [ 362.984344][ T9828] ? tomoyo_path_number_perm+0x235/0x590 [ 362.989959][ T9828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 362.995957][ T9828] ? __pfx_lock_release+0x10/0x10 [ 363.000987][ T9828] ? trace_lock_acquire+0x14e/0x1f0 [ 363.006174][ T9828] ? lock_acquire+0x2f/0xb0 [ 363.010657][ T9828] ? __fget_files+0x40/0x3a0 [ 363.015255][ T9828] ? __fget_files+0x206/0x3a0 [ 363.019916][ T9828] security_file_ioctl+0x9b/0x240 [ 363.024924][ T9828] __x64_sys_ioctl+0xb7/0x200 [ 363.029596][ T9828] do_syscall_64+0xcd/0x250 [ 363.034084][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.039966][ T9828] RIP: 0033:0x7f4470385d29 [ 363.044364][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.051232][ T9831] binder_alloc: 9815: binder_alloc_buf size 4315679902110851512 failed, no address space [ 363.063963][ T9828] RSP: 002b:00007f447118c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.063991][ T9828] RAX: ffffffffffffffda RBX: 00007f4470576080 RCX: 00007f4470385d29 [ 363.064004][ T9828] RDX: 0000000020000140 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 363.064016][ T9828] RBP: 00007f447118c090 R08: 0000000000000000 R09: 0000000000000000 [ 363.064030][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.064042][ T9828] R13: 0000000000000000 R14: 00007f4470576080 R15: 00007ffecd380958 [ 363.064071][ T9828] [ 363.065142][ T29] audit: type=1400 audit(1736149554.660:681): avc: denied { call } for pid=9815 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 363.074873][ T9831] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 363.075436][ T9828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.174997][ T29] audit: type=1400 audit(1736149554.750:682): avc: denied { read } for pid=9815 comm="syz.0.972" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.232168][ T5870] usb 1-1: USB disconnect, device number 18 [ 363.253695][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 363.269304][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 363.285710][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 363.313035][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 363.337828][ T9830] ceph: No mds server is up or the cluster is laggy [ 363.959129][ T29] audit: type=1400 audit(1736149555.600:683): avc: denied { setopt } for pid=9846 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.162219][ T9855] syz.2.980 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 364.397716][ T9857] tipc: Enabling of bearer rejected, already enabled [ 364.425902][ T9853] tipc: Enabling of bearer rejected, already enabled [ 364.493606][ T9858] input: syz1 as /devices/virtual/input/input23 [ 366.010608][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 366.052600][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.185444][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.256702][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.340521][ T29] audit: type=1400 audit(1736149557.980:684): avc: denied { setopt } for pid=9897 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 366.365832][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.369695][ T9898] ax25_connect(): syz.2.998 uses autobind, please contact jreuter@yaina.de [ 366.393213][ T29] audit: type=1400 audit(1736149558.010:685): avc: denied { connect } for pid=9897 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 366.413057][ T5870] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 366.543218][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.590067][ T5870] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 366.611042][ T5870] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 366.624473][ T5870] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.632310][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.636416][ T5870] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 366.657174][ T5870] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 366.669432][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.716788][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 366.737620][ T29] audit: type=1400 audit(1736149558.380:686): avc: denied { ioctl } for pid=9901 comm="syz.0.1001" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.794803][ T9882] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 367.295748][ T29] audit: type=1400 audit(1736149558.920:687): avc: denied { ioctl } for pid=9913 comm="syz.5.1003" path="socket:[23741]" dev="sockfs" ino=23741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.848239][ T5870] ath6kl: Failed to submit usb control message: -110 [ 367.856161][ T5870] ath6kl: unable to send the bmi data to the device: -110 [ 367.863577][ T5870] ath6kl: Unable to send get target info: -110 [ 367.882264][ T5870] ath6kl: Failed to init ath6kl core: -110 [ 367.890016][ T5870] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 368.201329][ T9925] trusted_key: encrypted_key: insufficient parameters specified [ 368.450289][ T9909] syz.0.1001 (9909): drop_caches: 2 [ 368.497449][ T9932] input: syz1 as /devices/virtual/input/input24 [ 368.770901][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 368.995548][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 369.480609][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.502985][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.513294][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 369.525862][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.543140][ T9] usb 8-1: config 0 descriptor?? [ 369.841424][ T6748] usb 7-1: USB disconnect, device number 11 [ 369.973304][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0019/input/input25 [ 369.988530][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 370.012324][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'. [ 370.023982][ T9971] FAULT_INJECTION: forcing a failure. [ 370.023982][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 370.037112][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.6.1018 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 370.045165][ T9] appleir 0003:05AC:8241.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 370.047778][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.047811][ T9971] Call Trace: [ 370.047819][ T9971] [ 370.047828][ T9971] dump_stack_lvl+0x16c/0x1f0 [ 370.081148][ T9971] should_fail_ex+0x497/0x5b0 [ 370.085857][ T9971] should_failslab+0xc2/0x120 [ 370.090539][ T9971] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 370.095908][ T9971] ? trace_lock_acquire+0x14e/0x1f0 [ 370.101126][ T9971] ? skb_clone+0x190/0x3f0 [ 370.105563][ T9971] skb_clone+0x190/0x3f0 [ 370.109820][ T9971] dev_queue_xmit_nit+0x38f/0xbc0 [ 370.114862][ T9971] ? netif_skb_features+0x3b0/0xd50 [ 370.120089][ T9971] dev_hard_start_xmit+0x283/0x7b0 [ 370.125214][ T9971] __dev_queue_xmit+0x7f0/0x43e0 [ 370.130144][ T9971] ? __pfx___dev_queue_xmit+0x10/0x10 [ 370.135528][ T9971] ? __asan_memcpy+0x3c/0x60 [ 370.140117][ T9971] ? __asan_memcpy+0x3c/0x60 [ 370.144702][ T9971] ? __skb_clone+0x570/0x760 [ 370.149291][ T9971] netlink_deliver_tap+0xa87/0xd30 [ 370.154408][ T9971] netlink_unicast+0x6b4/0x7f0 [ 370.159174][ T9971] ? __pfx_netlink_unicast+0x10/0x10 [ 370.164467][ T9971] ? genl_rcv_msg+0x4bd/0x800 [ 370.169156][ T9971] netlink_ack+0x6ac/0xb80 [ 370.173593][ T9971] netlink_rcv_skb+0x348/0x440 [ 370.178368][ T9971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.183403][ T9971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.188709][ T9971] ? down_read+0xc9/0x330 [ 370.193045][ T9971] ? __pfx_down_read+0x10/0x10 [ 370.197810][ T9971] ? netlink_deliver_tap+0x1ae/0xd30 [ 370.203100][ T9971] genl_rcv+0x28/0x40 [ 370.207089][ T9971] netlink_unicast+0x53c/0x7f0 [ 370.211865][ T9971] ? __pfx_netlink_unicast+0x10/0x10 [ 370.217162][ T9971] netlink_sendmsg+0x8b8/0xd70 [ 370.221931][ T9971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.227227][ T9971] ____sys_sendmsg+0xaaf/0xc90 [ 370.232002][ T9971] ? copy_msghdr_from_user+0x10b/0x160 [ 370.237464][ T9971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.242766][ T9971] ___sys_sendmsg+0x135/0x1e0 [ 370.247444][ T9971] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.252662][ T9971] ? __pfx_lock_release+0x10/0x10 [ 370.257689][ T9971] ? trace_lock_acquire+0x14e/0x1f0 [ 370.262899][ T9971] ? __fget_files+0x206/0x3a0 [ 370.267580][ T9971] __sys_sendmsg+0x16e/0x220 [ 370.272166][ T9971] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.277302][ T9971] do_syscall_64+0xcd/0x250 [ 370.281816][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.287708][ T9971] RIP: 0033:0x7f502a785d29 [ 370.292131][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.311746][ T9971] RSP: 002b:00007f502b67b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.320160][ T9971] RAX: ffffffffffffffda RBX: 00007f502a975fa0 RCX: 00007f502a785d29 [ 370.328129][ T9971] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000005 [ 370.336103][ T9971] RBP: 00007f502b67b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.344074][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.352051][ T9971] R13: 0000000000000000 R14: 00007f502a975fa0 R15: 00007fffa292b378 [ 370.360037][ T9971] [ 370.396574][ T9976] nftables ruleset with unbound set [ 370.398495][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 370.743023][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1021'. [ 370.976321][ T9] usb 8-1: USB disconnect, device number 6 [ 371.133343][ T9983] input: syz1 as /devices/virtual/input/input26 [ 371.214744][ T29] audit: type=1400 audit(1736149562.640:688): avc: denied { view } for pid=9982 comm="syz.5.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 371.354570][ T9988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1025'. [ 371.700879][ T5818] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 371.872724][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 371.911026][T10009] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.062729][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1034'. [ 372.107431][ T9995] bridge0: port 3(syz_tun) entered blocking state [ 372.201102][ T9995] bridge0: port 3(syz_tun) entered disabled state [ 372.214319][ T9995] syz_tun: entered allmulticast mode [ 372.299637][ T9995] syz_tun: entered promiscuous mode [ 372.332575][ T9995] bridge0: port 3(syz_tun) entered blocking state [ 372.339492][ T9995] bridge0: port 3(syz_tun) entered forwarding state [ 372.380941][ T5833] Bluetooth: hci0: unexpected event for opcode 0x203c [ 372.466306][ T5818] usb 7-1: unable to get BOS descriptor or descriptor too short [ 372.484097][ T5818] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 372.568764][ T5818] usb 7-1: can't read configurations, error -71 [ 373.077135][T10030] input: syz1 as /devices/virtual/input/input27 [ 373.112111][ T5818] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 373.304924][ T5818] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 373.316218][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.484575][ T5818] usb 7-1: config 0 descriptor?? [ 373.514978][T10037] can: request_module (can-proto-0) failed. [ 373.700552][ T29] audit: type=1400 audit(1736149565.340:689): avc: denied { create } for pid=10043 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.766465][ T29] audit: type=1400 audit(1736149565.370:690): avc: denied { ioctl } for pid=10033 comm="syz.0.1040" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.791319][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.803729][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1046'. [ 373.890810][ T29] audit: type=1400 audit(1736149565.380:691): avc: denied { create } for pid=10043 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 373.913864][ T29] audit: type=1400 audit(1736149565.380:692): avc: denied { create } for pid=10043 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 373.935008][ T29] audit: type=1400 audit(1736149565.400:693): avc: denied { name_bind } for pid=10045 comm="syz.5.1045" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 373.960244][ T29] audit: type=1400 audit(1736149565.400:694): avc: denied { create } for pid=10045 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.994268][ T29] audit: type=1400 audit(1736149565.400:695): avc: denied { bind } for pid=10043 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 374.016042][ T29] audit: type=1400 audit(1736149565.400:696): avc: denied { name_bind } for pid=10043 comm="syz.2.1044" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 374.037068][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.044342][ T29] audit: type=1400 audit(1736149565.400:697): avc: denied { node_bind } for pid=10043 comm="syz.2.1044" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 374.078412][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.783667][ T5818] kaweth 7-1:0.0: Firmware present in device. [ 375.109052][ T5871] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.117887][ T5871] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.128678][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.138276][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 375.150893][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 375.190608][ T5871] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.200012][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.208377][ T5871] usb 1-1: Product: syz [ 375.215560][ T5871] usb 1-1: Manufacturer: syz [ 375.235706][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 375.243009][ T5871] cdc_wdm 1-1:1.0: skipping garbage [ 375.250487][ T5871] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 375.258479][ T5871] cdc_wdm 1-1:1.0: Unknown control protocol [ 375.384181][ T5818] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 375.392981][ T5818] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 375.450717][ T5818] usb 7-1: USB disconnect, device number 13 [ 375.465143][ T6748] usb 1-1: USB disconnect, device number 19 [ 375.552856][ T5833] Bluetooth: hci1: unexpected event for opcode 0x203c [ 375.641738][ T5871] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 375.802455][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.831031][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.849045][ T5871] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 375.870837][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.880879][ T5871] usb 3-1: SerialNumber: syz [ 376.101929][ T5871] usb 3-1: 0:2 : does not exist [ 376.125613][ T5871] usb 3-1: unit 5: unexpected type 0x03 [ 376.141441][ T5871] usb 3-1: unit 255 not found! [ 376.182535][ T5871] usb 3-1: USB disconnect, device number 23 [ 376.300870][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 376.300887][ T29] audit: type=1400 audit(1736149567.930:767): avc: denied { execmem } for pid=10084 comm="syz.5.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 376.412165][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.611400][ T29] audit: type=1400 audit(1736149568.220:768): avc: denied { setopt } for pid=10084 comm="syz.5.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.033176][ T29] audit: type=1400 audit(1736149568.220:769): avc: denied { bind } for pid=10084 comm="syz.5.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.094280][ T29] audit: type=1400 audit(1736149568.220:770): avc: denied { name_bind } for pid=10084 comm="syz.5.1058" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 377.225737][ T29] audit: type=1400 audit(1736149568.220:771): avc: denied { node_bind } for pid=10084 comm="syz.5.1058" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 377.299918][ T29] audit: type=1400 audit(1736149568.230:772): avc: denied { setopt } for pid=10084 comm="syz.5.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 377.336137][ T29] audit: type=1400 audit(1736149568.970:773): avc: denied { write } for pid=10090 comm="syz.7.1060" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.357628][ T29] audit: type=1400 audit(1736149568.970:774): avc: denied { connect } for pid=10090 comm="syz.7.1060" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.379998][ T29] audit: type=1400 audit(1736149568.970:775): avc: denied { name_connect } for pid=10090 comm="syz.7.1060" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 377.411901][T10097] overlayfs: workdir and upperdir must be separate subtrees [ 377.661160][ T29] audit: type=1400 audit(1736149569.260:776): avc: denied { ioctl } for pid=10093 comm="syz.5.1062" path="socket:[24920]" dev="sockfs" ino=24920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.685790][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.060978][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 378.244158][T10106] netlink: 'syz.7.1064': attribute type 32 has an invalid length. [ 378.322722][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 378.348716][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.367174][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.380896][ T9] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 378.393821][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.400714][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 378.410154][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.436051][ T9] usb 6-1: config 0 descriptor?? [ 378.452117][T10114] fuse: Bad value for 'rootmode' [ 378.556154][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568219][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.125564][ T9] hid-generic 0003:045E:05DA.001A: unknown main item tag 0x0 [ 379.147221][ T9] hid-generic 0003:045E:05DA.001A: unknown main item tag 0x0 [ 379.154847][ T9] hid-generic 0003:045E:05DA.001A: unknown main item tag 0x0 [ 379.164251][ T9] hid-generic 0003:045E:05DA.001A: ignoring exceeding usage max [ 379.188283][ T9] hid-generic 0003:045E:05DA.001A: unknown main item tag 0x0 [ 379.210753][ T9] hid-generic 0003:045E:05DA.001A: unknown main item tag 0x0 [ 379.229036][ T9] hid-generic 0003:045E:05DA.001A: unbalanced collection at end of report description [ 379.248428][ T9] hid-generic 0003:045E:05DA.001A: probe with driver hid-generic failed with error -22 [ 380.365991][ T5870] usb 6-1: USB disconnect, device number 7 [ 380.620949][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 380.782577][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 380.789727][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.810935][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 380.867119][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 380.901049][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.934681][ T9] usb 3-1: config 0 descriptor?? [ 380.972040][T10144] ------------[ cut here ]------------ [ 380.978533][T10144] WARNING: CPU: 0 PID: 10144 at mm/page_table_check.c:207 __page_table_check_ptes_set+0x2fa/0x3e0 [ 380.989302][T10144] Modules linked in: [ 380.993359][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.0.1076 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 381.004158][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.014229][T10144] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 381.021218][T10144] Code: e9 91 fe ff ff e8 16 9a 91 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 75 9c 91 ff 48 85 ed 0f 84 85 00 00 00 e8 f7 99 91 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 e9 99 91 ff eb 69 cc cc cc e8 df 99 91 [ 381.040961][T10144] RSP: 0018:ffffc90017aef4f8 EFLAGS: 00010287 [ 381.047464][T10144] RAX: 00000000000001bb RBX: ffff8880358df000 RCX: ffffc90005112000 [ 381.055466][T10144] RDX: 0000000000080000 RSI: ffffffff82087c19 RDI: 0000000000000007 [ 381.063811][T10144] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 381.072548][T10144] R10: 0000000000000002 R11: 0000000000000003 R12: 0000000000000001 [ 381.080526][T10144] R13: ffff88807a74ce00 R14: 0000000000000001 R15: 1ffff92002f5dea1 [ 381.088741][T10144] FS: 00007fea3573c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 381.097872][T10144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.104491][T10144] CR2: 00007f66cbd9db80 CR3: 0000000032ea0000 CR4: 00000000003526f0 [ 381.112728][T10144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.120695][T10144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.128681][T10144] Call Trace: [ 381.131969][T10144] [ 381.134896][T10144] ? __warn+0xea/0x3c0 [ 381.138958][T10144] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 381.144965][T10144] ? report_bug+0x3c0/0x580 [ 381.149473][T10144] ? handle_bug+0x54/0xa0 [ 381.153827][T10144] ? exc_invalid_op+0x17/0x50 [ 381.158504][T10144] ? asm_exc_invalid_op+0x1a/0x20 [ 381.163927][T10144] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 381.169898][T10144] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 381.176279][T10144] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 381.182383][T10144] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 381.188705][T10144] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 381.195140][T10144] madvise_free_pte_range+0x912/0x1860 [ 381.200605][T10144] ? __pfx_madvise_free_pte_range+0x10/0x10 [ 381.206524][T10144] ? find_held_lock+0x2d/0x110 [ 381.211323][T10144] ? __pfx_madvise_free_pte_range+0x10/0x10 [ 381.217212][T10144] walk_pgd_range+0xc7b/0x1a70 [ 381.222006][T10144] ? mt_find+0x4c8/0xa20 [ 381.226250][T10144] ? __pfx_walk_pgd_range+0x10/0x10 [ 381.231477][T10144] __walk_page_range+0x161/0x820 [ 381.236409][T10144] ? find_vma+0xc0/0x140 [ 381.240667][T10144] ? __pfx_find_vma+0x10/0x10 [ 381.245398][T10144] ? walk_page_test+0x9b/0x180 [ 381.250164][T10144] walk_page_range_mm+0x55a/0x940 [ 381.255300][T10144] ? __pfx_walk_page_range_mm+0x10/0x10 [ 381.261001][T10144] ? __pfx_lock_release+0x10/0x10 [ 381.266438][T10144] ? trace_lock_acquire+0x14e/0x1f0 [ 381.271999][T10144] ? mlock_drain_local+0x6f/0x4f0 [ 381.277072][T10144] walk_page_range+0x63/0x90 [ 381.281677][T10144] madvise_free_single_vma+0x466/0x8d0 [ 381.287134][T10144] ? __pfx_madvise_free_single_vma+0x10/0x10 [ 381.293137][T10144] ? userfaultfd_remove+0x128/0x2d0 [ 381.298366][T10144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.304324][T10144] ? madvise_dontneed_free_valid_vma+0x198/0x320 [ 381.310659][T10144] madvise_vma_behavior+0x581/0x1da0 [ 381.315973][T10144] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 381.321747][T10144] ? find_vma_prev+0xdb/0x160 [ 381.326421][T10144] ? __pfx_find_vma_prev+0x10/0x10 [ 381.331568][T10144] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 381.337116][T10144] ? __pfx_futex_wait+0x10/0x10 [ 381.342006][T10144] ? do_madvise+0x25b/0x770 [ 381.346511][T10144] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 381.352373][T10144] madvise_walk_vmas+0x1cf/0x2c0 [ 381.357313][T10144] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 381.362810][T10144] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.368007][T10144] do_madvise+0x30e/0x770 [ 381.372675][T10144] ? __pfx_do_madvise+0x10/0x10 [ 381.377515][T10144] ? __x64_sys_futex+0x1e1/0x4c0 [ 381.382769][T10144] ? rcu_is_watching+0x12/0xc0 [ 381.387538][T10144] __x64_sys_madvise+0xa9/0x110 [ 381.392531][T10144] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.397727][T10144] do_syscall_64+0xcd/0x250 [ 381.402284][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.408178][T10144] RIP: 0033:0x7fea34985d29 [ 381.412625][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.432477][T10144] RSP: 002b:00007fea3573c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 381.440908][T10144] RAX: ffffffffffffffda RBX: 00007fea34b75fa0 RCX: 00007fea34985d29 [ 381.448874][T10144] RDX: 0000000000000008 RSI: 0000000000600002 RDI: 0000000020000000 [ 381.456887][T10144] RBP: 00007fea34a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 381.464873][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.473155][T10144] R13: 0000000000000000 R14: 00007fea34b75fa0 R15: 00007ffc2ab9cd38 [ 381.481436][T10144] [ 381.484451][T10144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.491705][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.0.1076 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 381.502438][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.512557][T10144] Call Trace: [ 381.515813][T10144] [ 381.518743][T10144] dump_stack_lvl+0x3d/0x1f0 [ 381.523317][T10144] panic+0x71d/0x800 [ 381.527194][T10144] ? __pfx_panic+0x10/0x10 [ 381.531606][T10144] ? show_trace_log_lvl+0x29d/0x3d0 [ 381.536788][T10144] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 381.542748][T10144] check_panic_on_warn+0xab/0xb0 [ 381.547662][T10144] __warn+0xf6/0x3c0 [ 381.551533][T10144] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 381.557493][T10144] report_bug+0x3c0/0x580 [ 381.561802][T10144] handle_bug+0x54/0xa0 [ 381.565942][T10144] exc_invalid_op+0x17/0x50 [ 381.570425][T10144] asm_exc_invalid_op+0x1a/0x20 [ 381.575261][T10144] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 381.581836][T10144] Code: e9 91 fe ff ff e8 16 9a 91 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 75 9c 91 ff 48 85 ed 0f 84 85 00 00 00 e8 f7 99 91 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 e9 99 91 ff eb 69 cc cc cc e8 df 99 91 [ 381.601421][T10144] RSP: 0018:ffffc90017aef4f8 EFLAGS: 00010287 [ 381.607479][T10144] RAX: 00000000000001bb RBX: ffff8880358df000 RCX: ffffc90005112000 [ 381.615431][T10144] RDX: 0000000000080000 RSI: ffffffff82087c19 RDI: 0000000000000007 [ 381.623382][T10144] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 381.631331][T10144] R10: 0000000000000002 R11: 0000000000000003 R12: 0000000000000001 [ 381.639283][T10144] R13: ffff88807a74ce00 R14: 0000000000000001 R15: 1ffff92002f5dea1 [ 381.647251][T10144] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 381.653223][T10144] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 381.659197][T10144] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 381.665502][T10144] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 381.671898][T10144] madvise_free_pte_range+0x912/0x1860 [ 381.677347][T10144] ? __pfx_madvise_free_pte_range+0x10/0x10 [ 381.683225][T10144] ? find_held_lock+0x2d/0x110 [ 381.687971][T10144] ? __pfx_madvise_free_pte_range+0x10/0x10 [ 381.693845][T10144] walk_pgd_range+0xc7b/0x1a70 [ 381.698594][T10144] ? mt_find+0x4c8/0xa20 [ 381.702824][T10144] ? __pfx_walk_pgd_range+0x10/0x10 [ 381.708007][T10144] __walk_page_range+0x161/0x820 [ 381.712930][T10144] ? find_vma+0xc0/0x140 [ 381.717172][T10144] ? __pfx_find_vma+0x10/0x10 [ 381.721824][T10144] ? walk_page_test+0x9b/0x180 [ 381.726568][T10144] walk_page_range_mm+0x55a/0x940 [ 381.731573][T10144] ? __pfx_walk_page_range_mm+0x10/0x10 [ 381.737102][T10144] ? __pfx_lock_release+0x10/0x10 [ 381.742144][T10144] ? trace_lock_acquire+0x14e/0x1f0 [ 381.747327][T10144] ? mlock_drain_local+0x6f/0x4f0 [ 381.752332][T10144] walk_page_range+0x63/0x90 [ 381.756903][T10144] madvise_free_single_vma+0x466/0x8d0 [ 381.762357][T10144] ? __pfx_madvise_free_single_vma+0x10/0x10 [ 381.768319][T10144] ? userfaultfd_remove+0x128/0x2d0 [ 381.773516][T10144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.779394][T10144] ? madvise_dontneed_free_valid_vma+0x198/0x320 [ 381.785705][T10144] madvise_vma_behavior+0x581/0x1da0 [ 381.790978][T10144] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 381.796675][T10144] ? find_vma_prev+0xdb/0x160 [ 381.801345][T10144] ? __pfx_find_vma_prev+0x10/0x10 [ 381.806457][T10144] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 381.811997][T10144] ? __pfx_futex_wait+0x10/0x10 [ 381.816833][T10144] ? do_madvise+0x25b/0x770 [ 381.821324][T10144] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 381.827031][T10144] madvise_walk_vmas+0x1cf/0x2c0 [ 381.832052][T10144] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 381.837496][T10144] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.842706][T10144] do_madvise+0x30e/0x770 [ 381.847021][T10144] ? __pfx_do_madvise+0x10/0x10 [ 381.851852][T10144] ? __x64_sys_futex+0x1e1/0x4c0 [ 381.856776][T10144] ? rcu_is_watching+0x12/0xc0 [ 381.861526][T10144] __x64_sys_madvise+0xa9/0x110 [ 381.866445][T10144] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.871624][T10144] do_syscall_64+0xcd/0x250 [ 381.876111][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.881994][T10144] RIP: 0033:0x7fea34985d29 [ 381.886389][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.905974][T10144] RSP: 002b:00007fea3573c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 381.914363][T10144] RAX: ffffffffffffffda RBX: 00007fea34b75fa0 RCX: 00007fea34985d29 [ 381.922311][T10144] RDX: 0000000000000008 RSI: 0000000000600002 RDI: 0000000020000000 [ 381.930256][T10144] RBP: 00007fea34a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 381.938204][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.946151][T10144] R13: 0000000000000000 R14: 00007fea34b75fa0 R15: 00007ffc2ab9cd38 [ 381.954107][T10144] [ 381.957369][T10144] Kernel Offset: disabled [ 381.962149][T10144] Rebooting in 86400 seconds..