last executing test programs: 16m52.727039749s ago: executing program 1 (id=555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40c000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 16m50.915503062s ago: executing program 1 (id=558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40c000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 16m49.215284746s ago: executing program 1 (id=560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x40c000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 16m47.714578523s ago: executing program 1 (id=563): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r4) 16m46.744724354s ago: executing program 1 (id=566): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000980), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x1000}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x100, 0x100, 0x1, 0x4000}}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x104) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x3f) sync_file_range(r0, 0x9, 0xfffffffffffff643, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x11) r8 = syz_io_uring_setup(0x44b4, &(0x7f0000000a40)={0x0, 0x77c, 0x1000, 0x1, 0x1ab}, &(0x7f0000000ac0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000b40)=[0x1, 0x81], 0x2) 16m41.718841686s ago: executing program 1 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) socket$isdn(0x22, 0x3, 0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r3, 0x0, 0x13) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x60000000}) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r5, r4) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000000, 0x1}, 0xdb, 0x0}, 0x5b4}], 0x1, 0x850) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 16m26.548452607s ago: executing program 32 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) socket$isdn(0x22, 0x3, 0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r3, 0x0, 0x13) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0x60000000}) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r5, r4) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000000, 0x1}, 0xdb, 0x0}, 0x5b4}], 0x1, 0x850) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 22.127493906s ago: executing program 2 (id=2964): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) r8 = dup(r6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3000, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x94, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffffe}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffffffff}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 20.299246619s ago: executing program 2 (id=2967): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x68, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x54, 0xe, 0x0, 0x1, [@nested={0x4d, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="1a68a05c264ea8272f8444b4f5333a24baa53ca02def59ea2d799f9d6db9aa3515d38a4b83dd7e7f5908765e13a0a65d550611bcfeab70872d85", @generic="d59383"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}}, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f00000001c0), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 17.866998075s ago: executing program 2 (id=2971): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffff8ba2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x80001, 0x0) setrlimit(0xb, &(0x7f00000000c0)={0x2, 0x3}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x100001a}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x4004004) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) 14.219187171s ago: executing program 2 (id=2980): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050102f5050102030109021b0001000000000904d60001b5e1450009058300ff03030704"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="0001100000004b6c7848877740989af1c48d24ed0695"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00'}, 0x84) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) close(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 12.678070059s ago: executing program 0 (id=2985): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000009500000a2676be0000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x581004, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'ip6gretap0\x00', 0x20}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = getpid() io_uring_setup(0x30a7, 0x0) syz_pidfd_open(r4, 0x0) r5 = socket(0x40000000015, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x9b1d2dbadea64478) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 12.38628778s ago: executing program 3 (id=2986): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0xc04, 0x7, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x104000, &(0x7f0000000040)="ab72c0ce44325f961389c587aa235d0528a0a9c953a028a1eeda82bf8b654365e784c0", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2844d5741631302b6fabeda6b685a2551ae01f5a7eab52000fb3a55d44d07c29f63044e74b3346f244f2ccc7398861ba4c255668991a0050511c52d5ac297bfd40a17f3b5c32ac39a2e7808050b730d72ddaeb5e2bdd87f38585b869b8c378ab3a57cfac890a0ccab0677e6e496393455128ba4574ae7f06a1f52f") write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 12.378643376s ago: executing program 0 (id=2987): r0 = socket(0x29, 0x800, 0x6a1dae51) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000fe0329bd70000000000000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000300000000000500040000000000"], 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='1', &(0x7f00000005c0)='5C9:M\x9b\x12\xe5+A\xfbVo\xfco\xab!\'>\x12\x13\\\xd2\xb6\x91\xc5IFK\x1f\xd3jOt\x15\xcd1)<\xef\x90l\x06I\x13sb\x1bn\x81\xfc\b\xca>_a\xa9\xee\x1c\x17\xf4\x9d\xd6\xfa\xb5[\x8a\x00\xcf\x81\xc9\x91\xea1\xa3\x89e\xe2<\x96O\"^\x0e\xaf9s\xa7g\xab3B\xa4\xa2F\xdc \xa9\xad\n\xa7\xab\x999\xb6\xda}2\x15\x9b\xa0\x88\xd1I\x10\xa7oL\x81n+\xff\xbcZ\xbfl[\x88\x02\x99\xa5Y%\x83\xcb\xce\xf4)u\x1d\xd3pX9\x96\x95$zAA)u\xdb\xa9\xf3\xf8\xd5\x13\xf3\x03\xa6o\x1d\x9f\xf2\xcd.\'t\fN\xd5\x87#\xbc\x95:\x13\x8b8*\xc1\xceQ\xe6U\xaf\xcd\x8b\xb55\x85D\xdd\x06\x98&\xc3`\f\x91\x8b\xc5U]\xe9w\r\xceT/\x87\x83\x11*\x0fO\xa1\xf6/x\xda\xab\xb9\xa4E2@7+\"x\xe7M\xbb\x15w\xaf\xdb\t-\x04\x9e\xea\xec\xd4\xd5\x8cV2u\xf8\x18\x97\x958\xcf\xa5E\xd5\x8c\xab\xc0\xa7\x957z4-\xc4yG\x84!&a\xbb_$\xad\xc4\x9bK\xe4\f\x9eM\xed\xb0\aK\x93\xf5\xd7\x0f\xabV\xd36)A\xbcJ|\xf6\x8bp W\xa4\x02K\x00<\xf90\xe6\x8c\x02\xaf\x17|Xk\x8a\x9bT\x00 \xbb\xffj\xe1:5\xd6VQjr\xe7\x92N\xed\xedYl\x8cY\x99~\x11\xdbP#\xc6\x1fUn\xddZJ\xeb/\x952iv~\xb8g\x069)s\x14\x99\xda\xb4n9\xd6\xeb\xbc\'|\xa6K\xce\xb1\xcf\xdd\xae9\xad\x92\xec\x98\xe2w`m\xcb1\xd1\x92;\x0f6N\xf1U\x973\xf1A>\xad\x8a\xc7\x7f\xa4\xb30\x9a\x18\xf7\x95\xd9\x86\xfd>A\x0e|\xfc\xefA&Z', 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(r5, r4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x295) syz_usb_disconnect(r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="20000000000c001a8008000a80050071c3"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r8 = getpid() sched_setaffinity(0x0, 0xffffffffffffffee, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 11.379571406s ago: executing program 3 (id=2989): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xc, 0x6, "83a7c7bad0b148cc"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x24020400) unshare(0x2a020400) 9.802287281s ago: executing program 2 (id=2993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000080)={0x100000, 0x7000}) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034700)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 9.636528627s ago: executing program 4 (id=2994): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x8002, 0xffff8001, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x1, 0x1, 0x4, 0x0, @multicast1, @local}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/74, 0x1328000, 0x1000, 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$inet6(0xa, 0x5, 0x84) uname(&(0x7f0000000400)=""/144) setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x41) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_DELSET={0x18, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xc811) 7.208538173s ago: executing program 5 (id=2996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x68, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x54, 0xe, 0x0, 0x1, [@nested={0x50, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="1a68a05c264ea8272f8444b4f5333a24baa53ca02def59ea2d799f9d6db9aa3515d38a4b83dd7e7f5908765e13a0a65d550611bcfeab70872d85263378", @generic="d59383"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7.155261827s ago: executing program 0 (id=2997): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x2000) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ocfs2_control(0xffffff9c, 0x0, 0x28041, 0x0) getsockname$packet(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) 6.176083867s ago: executing program 0 (id=2998): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x600, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 5.041368659s ago: executing program 5 (id=2999): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) getgroups(0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1f, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x1, 0x64, 0x1000007, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xfffffffe}}) 5.014193483s ago: executing program 3 (id=3000): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0xc04, 0x7, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x104000, &(0x7f0000000040)="ab72c0ce44325f961389c587aa235d0528a0a9c953a028a1eeda82bf8b654365e784c0", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2844d5741631302b6fabeda6b685a2551ae01f5a7eab52000fb3a55d44d07c29f63044e74b3346f244f2ccc7398861ba4c255668991a0050511c52d5ac297bfd40a17f3b5c32ac39a2e7808050b730d72ddaeb5e2bdd87f38585b869b8c378ab3a57cfac890a0ccab0677e6e496393455128ba4574ae7f06a1f52f") write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 4.311126388s ago: executing program 0 (id=3001): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000deff"], 0x38}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x1, 0x231, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002d8324fdf3d1b0301bedd0102030109021f02020700805b0904f5bc07ccff40f709050d10400009b40430067b087e91e14a73958cf72cc389cd93b70018551400aa1850f53ab30e3f1658b6b7008845485f2a426c752f9d7c9f09050110080073030207250183030c0009050d0010000306f602230725010007020009055d0440000f02037431cfc9ef25b2f2258e8a37b28547045ca5d175b82f336d5b8ad98223dbd42176a027c4cf204f3cdd3de6de3dc7046c9750847b402ef5587ffe71c837f88820e412270187b9a25e67dd8c17040e2f2e1b02915488716f97cfee7dc5c9d7ae32b6d3afc7072790053d770c4223a290d854da9def09050c030800a40703072501020704000725010302030009050c04080001027f09050f00cb14020602090432690390e30b09050901000003210209050200ff03010502e830fcee5cba47a943dd89e4cec57dc739a82c7cd365a4a259c4056dad8680bbe488167a9ba57bd869e65922ef8c89f0a8b2456fa3891b80c66fd110bfae2b49da4664dd201a314c333aa2c9141374ce210772881b043100ce59c244f56a0100ee5d652be69cdf4b5d1415d001883f4d66dc96118357b23c37cc349812c7ee5e96acf358cac8b86c083d626781b73c8e0450932fddba85d986c067120847"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0xc, 0x9, 0x1, {0x22, 0x7ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x5}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x6, 0x2, 0x2, 0xdf, 0x8}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44f}}, {0x82, &(0x7f0000000800)=@string={0x82, 0x3, "3ec1e91f4f5e5ce51d7833f1b82ed3550d2048000ff925e0fd371d7f6365605cbf37f1f7a900830105af82cc3c43ecc360fa23dbea208ca960b104b613f3912ca04665148d28591e20804b5cdb46ff86916ab5c0627eaafa8ffd28f33444c913c5de189055154edff42679ef527502b807dee6271cc071db8c99297dd2bb246e"}}, {0x6c, &(0x7f0000000580)=@string={0x6c, 0x3, "eebbb0e3de266160112aaf49f25673f243e0e525621dceb3acfea3e7397084a412318f23e7dcee34b6150baf177850ca6e069db4bb5f968548bce7ef6d67ff52ba19383ca216b7cc3c3f75c7bfc5ab8209fc7f66ce74c59d46b920f18ea6592f72eb74145587962b4bd5"}}, {0xc0, &(0x7f00000008c0)=@string={0xc0, 0x3, "2fdf9e29abae065413819ad8e18a951ae0c5c1f2bc3f747f1e7b4880c45407ad665ba3aa907f90066e2290f3d3f8ccbea70728df60bddaca9bb05ec9d3759ae6bcf8fae7ab744d3d1afab1030482c7971819dbdc82f264d9264e0322973c6f3cb33a3b29aea5e75c5c25d06e8937741025e583cd3d7623360856e67d3ec8694bb3fc83dc25532e7c5e9393c9c2ffe253f024596bb1514c66f8740b8ce0d5a9965bb4af6e9b4ca550af04e6be36253a2b487040b5227378fa96a6fd331eb4"}}, {0xf1, &(0x7f0000000d00)=@string={0xf1, 0x3, "e70f5bc6dbfc960290de795658cce6cfbd836068f31a24f35c97590d61c9a3a3b6eb03d6591853f99674ae1801c0f32ac7d412180a9d3e63dd1c7a3b661530dd25a73297cb02e90df43b960e5750cc31091b8fec8c145579de9d49a3f91773a4c9b234600bde2e73489c986708752db82971b39fa0624de0db3be2382cf0e30921d600c8bd15c90bb1142a532f26bc823ceb50a7abc34078a57e55ed190464ecf6f1db99791b435842e4815bbe9a101f59a2e296a08a307add8fd237840a4bc581055af6879c69b2a5b42fc0124b37fe888ba7206bbf4b56f4c4e5dbcd737cceb91cb5085f5a89a1abd246ea36beb4"}}, {0x10, &(0x7f0000000980)=@string={0x10, 0x3, "8097ae8a7828ece69caaf26bcfb3"}}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) chdir(&(0x7f00000001c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r9, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x88f6, 0x8000, 0x1, 0xfffffffa, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r12, 0x1}, &(0x7f0000000100)=0x8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a00090027"], 0xdc}}, 0x8004) 4.233107664s ago: executing program 4 (id=3002): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000002840)={0x22f4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x104, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e6a1a5e873f4"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_SERVICE_INFO={0xe1, 0xb, "7c824f2542385b725f94c1661ae0c733317e6e2ebec81faf207857d97bc0864d85e7a21f091ee3dfd242464207b37fe88637ba13a6c2062ec2051192a40bd0c991253d2611289d6a447fc0e35b69cbc1c7e577c7d5598e793d87ea3bfd1630a450307da3df3df77075d65a38a225f0048f0a0f8569c76577a171d72cc896b6d14de2a7f8ef447752cd9e176b3bad81515d42f422303627399e699a819965c9a28214cdb2f952c826c167fb3244e218227056d4a0c397ade164fb5f544d328a048aa26d31073a53362ca7fc96f802541608404be707477799bde462a110"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x29}]}, @NL80211_ATTR_NAN_FUNC={0x21c8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x211c, 0xd, 0x0, 0x1, [{0xc9, 0x0, "a2df992e85a4017861d682b39e4034fd13a9fbcfc1437203781a265a4326153fd5b2f4f79b6dd8cb68cdf0b52f484aa5798826194123090407aee9481f59af207d22385678d3701015bff370ee6223b501f7479589df3a5b5e64b8484a6b786432f126033fa0b4b7924fcf1c66b635ba883be8ab6c520dbeaa4a2f0b13f0a93ddf47e8cdc9601b604e3cb7ea7f5178aa5fcd707493f56129f24b59dad7a9a41a52bda57b715c7c409e0e50ee706149b1825ac9b03cdd1be874aa5ea60a6be929a7edf2e55d"}, {0x1001, 0x0, "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"}, {0x2d, 0x0, "d01541484294ff5f1ce732a5e27d3e6379812b1a7b8f756bce2fda980b4451a34eb17e0480e9f6edfd"}, {0x11, 0x0, "b4b58398ee3bc65a958fe82ee1"}, {0x1002, 0x0, "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"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xa8, 0xd, 0x0, 0x1, [{0x89, 0x0, "0c506231b9e9c57b61c6b610d9e302b127b2560920d4a99e2e3bb6274346eb44897ce551624981f28ae495fdf26e7170cbb5e397228660f8173789c0c6232d36073c96356744f746df792ce16cb44636a127f9c14b4cf0cf7a5170fe02870ae462b9a53768061bdcbbe015fbc09b42be02dc45a2cc84f97ebd69e06360cbfc9e407d11d752"}, {0x15, 0x0, "d6ab5971c277f21fb0c012a50f505ce6ac"}]}]}]}, 0x22f4}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x6, 0x6e, @dev={0xfe, 0x80, '\x00', 0x21}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0x8000, 0x3, 0x5}}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b40)=@updsa={0x138, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in6=@loopback, 0x4e21, 0x800, 0x4e24, 0x5fa, 0x2, 0x80, 0xa0, 0x2c, r5}, {@in6=@remote, 0x4d4, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, {0x800, 0x1, 0x96e4, 0x2, 0x1, 0x1, 0x0, 0x9}, {0x3, 0x8000, 0x1, 0x401}, {0xfc, 0x2, 0x1}, 0x70bd23, 0x3505, 0xa, 0x3, 0x0, 0x34}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd2b, 0x70bd2a, 0x70bd26, 0x8000, [0x2, 0x0]}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd28, 0x70bd26, 0x70bd2a, 0x5, [0x2, 0xbed9]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4002041}, 0x4c045) read$alg(r4, &(0x7f0000000740)=""/4096, 0x1000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.094456626s ago: executing program 5 (id=3003): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x700, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 3.422317034s ago: executing program 3 (id=3004): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.370998738s ago: executing program 2 (id=3005): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x440, &(0x7f0000000e40)=ANY=[@ANYRES32=r3, @ANYRESHEX=r3, @ANYBLOB="2c726f6f747041246ad98dc7fb30303030303030303030303030303130303030302c757365725f69643dc2a08eb5d391a2404999d099d9940cfc39de747791eaa628d1ed325d50c845ac8428987ad8bf2957e43c5fef01f995d84657f9eab5a9a9041a0ee96075c905ec9f8c547a5a977c618e5c33b2843d0a318d91419388076a2efb0371a239925c49", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75050000003d", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x400, 0x38e7, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1, 0x0, 0x4, 0x7, r5}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffb, 0x6}]}}}}}}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf1, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)) syz_usb_control_io(r0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x9, 0x1, 0x13, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x9, 0x5d4e156}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) sendmsg$inet(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)="938752ecd92373e65d88012de51bf14f1a0a123949080a07f1982a7eeb99f8074b09b15d8fa6e3cfeb14172b72cc0a17523afa1b977b154eebe9738bd579f85cfb9c141219194f34cf994a2e48236186eda42bd06504c06d6c2fd3f407ccc38445b3201b342441ee4801481b9e8518b9625b15e00bfcd75e41dbe8f1474239e2d8016876e2b6df7fe6215f5f3e40de14189017dd9c8277f73c5b1daf85b1daa8", 0xa0}, {&(0x7f0000000980)="9a151c6dc60d8321c8a8b1ca97d842cf61b2dea412f70d1540cceec0fc8a994c6219408f27d07c110abebf065d5638883bbc100531ecd8bf915866023fc0659c7b286dcef16c780e750e6de1404385cbffdf4eac0a28d14c099722fab300801fd360b4e6c6fd18f48cb6112135d5bd486da89f4b487b345e7c76622108a177c10885da71a54ae627bd7bfd1381b5f7b5318f3dc1d8685b63b9411be8e0fc521f75c8edf2f89ee26ca71bb2e12066c9b03f59ce38642b61b25618c958532b24f70e4d41cda3d86dc98cf82a9fded7e2b2cc94685b8b08635d1a2af70b", 0xdc}, {&(0x7f0000000a80)="3c28f683016a962ff45931a2498d6922a6b6a74661430e5c5543af9cac0fbfadab0ea4c0340bc7fe6a4ab4b5c0be40eb216e9b5d7aad9db241c4c755993431855bcbd714ef617821308818fcea78952abe6514164bc4012385f6ea7a0a54c736c7951660e03715de8b30bd75ff7086de068c67012d13a5ce660201059ae2138779047edb981ce591b4dca8a6054a51ddf7f6ebd26f9b65ddfa89b0e85f9ec9588dd3", 0xa2}, {&(0x7f0000000b40)="dbf73070c2eb68da69d03c6dbb94ba07ab17509db33c3d72bc7b5034846199b13388f61b92abb4db", 0x28}], 0x4, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x58}, 0x40000) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x8, 0x800) r10 = syz_usb_connect$cdc_ncm(0x4, 0x9a, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x3, 0x60, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6bc492a5f112"}, {0x5, 0x24, 0x0, 0x753}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xb23, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x240, 0x7, 0x2, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0xeb, 0x4}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0xfffb, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xa2, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x9, 0xd}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x6, 0x8, 0xf, 0x20, 0xb9}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "5d4328103352c7d749c8153df87c55e6"}]}, 0x4, [{0xa5, &(0x7f0000000200)=@string={0xa5, 0x3, "0d4e73fc85d330bee957803599f32b2afa01d70057a26c974f7d853800459d96acf8dc6a2b5aa2bd253d4172b5de1f6b3fd6d31924b8497b918e6b604f0196daf9d6831a0ba64d02f722af581c9e4b9d547416681a5acaf3dab483f22238f0475c9cb829c4cbdd438ab26821a05d6e16d64ea5c93322c369da1e648df3a8fb42b148994395e99bcfd7c3c1fdebc5632f72ed9123afd9c656bbf44fe04f5d18a69c9aba"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c09}}, {0x9b, &(0x7f0000000400)=@string={0x9b, 0x3, "481ec6f82d303d73099bcc0f07cee4186c02f6258e2b28b6be7d51e0f4e379ef5dc090fa6a9ab4cbfd1016f9fbbecdff2cdbb56800d5e6563c9dbb09b801f3498dc973cb1ed02436bcb8144012278173803b4a0dfa49b99b0431f7a0be5436cf88ca209240a6eac07176dfe3190c79f17b33f20061fc2f1f82c724cf61b3dc49cfd6bd9d2e82dbec850c355bfd58cd42adfd0d749b536c2839"}}]}) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x0, 0x1, 0x4f, {0x4f, 0x2, "ae85a26977b515c7712add2be22b09bbf4b7ec85b752634710dc1b02934d471dd4e0327342bc3f3e9b6f57e1637ecedcd064a17f7c00b45f9c7cd7f309403fbead54a6dc72142d787383d4df66"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x0, 0x10, 0xa8, "7c0516525db6f64b91699a43f58e93fd127988adabab8031ad1bf4996f4ea116a81cd5e4ffe47aac5677e350f7833390dd67280acd132b46b51f15f792190be98035f1a53752e27cdbc8e26b009ab80423d21a539dffab783437491a1a5cd20f59853bce40e1131578049337ed19703f5a07538649a54d3163ab638e7534e34f5e6c31ab941af6c623b294cfc20f2c04300ee39750139101475d40d6a4bea2ffade8699aad19fc75"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x6aa1, 0x3, 0x400, 0x7, 0x3, 0x7, 0x7ff, 0xa260, 0x786f, 0x7f, 0x4, 0x4}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="10") 3.241962254s ago: executing program 4 (id=3006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x802) readv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/165, 0xa5}], 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x5, 0x2, 0x5, 0x200}, 'syz0\x00', 0xd}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000000240)={0x78, 0x0, r7, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0x3, 0x0, 0xa, 0x5, 0x7fffffff, 0x200, 0xa000, 0x0, r8}}}, 0x78) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000000c0)={0x14}, 0x14) 3.090954128s ago: executing program 5 (id=3007): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) close_range(r0, 0xffffffffffffffff, 0xf000) 1.93917923s ago: executing program 5 (id=3008): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x2000) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ocfs2_control(0xffffff9c, 0x0, 0x28041, 0x0) getsockname$packet(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) 1.919372234s ago: executing program 4 (id=3009): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) getgroups(0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x1, 0x64, 0x1000007, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xfffffffe}}) 1.904258771s ago: executing program 3 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x68, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x54, 0xe, 0x0, 0x1, [@nested={0x50, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="1a68a05c264ea8272f8444b4f5333a24baa53ca02def59ea2d799f9d6db9aa3515d38a4b83dd7e7f5908765e13a0a65d550611bcfeab70872d85263378", @generic="d59383"]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 736.839398ms ago: executing program 0 (id=3011): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000500)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b0400000000000000000200000028000480240001800a00010071756575650000001400028006000140002c000006000240000900000900020073797a32000000001400000011ff7f0000000000000000000000000a9cf15520d46de50b5e38da18ff33a11184bc9f28dbc901b691afb2ea9abe48f8d37f86bb3d11f718eb6dbf955918277b061b1c69460365d4d2f5e4119048219f39b60bb092bcdef90c52cf5a5bd96b"], 0x70}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000072eb48b16c00044409007be22dbd8b1500000000", @ANYRES32=r7], 0x18}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) 300.565876ms ago: executing program 4 (id=3012): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e1e, @empty}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) 216.160413ms ago: executing program 5 (id=3013): socket(0x10, 0x803, 0x0) io_uring_enter(0xffffffffffffffff, 0x2458, 0x8f26, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000cc0), 0x4, 0x200) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000f00)=""/133, 0x85}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x2000000000903, 0x4}, 0x20) 186.191015ms ago: executing program 3 (id=3014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0x3, 0x0, 0xa, 0x5, 0x7fffffff, 0x200, 0xa000, 0x0, r3}}}, 0x78) write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000000c0)={0x14}, 0x14) 0s ago: executing program 4 (id=3015): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0xc04, 0x7, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x104000, &(0x7f0000000040)="ab72c0ce44325f961389c587aa235d0528a0a9c953a028a1eeda82bf8b654365e784c0", 0x23, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2844d5741631302b6fabeda6b685a2551ae01f5a7eab52000fb3a55d44d07c29f63044e74b3346f244f2ccc7398861ba4c255668991a0050511c52d5ac297bfd40a17f3b5c32ac39a2e7808050b730d72ddaeb5e2bdd87f38585b869b8c378ab3a57cfac890a0ccab0677e6e496393455128ba4574ae7f06a1f52f") write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) kernel console output (not intermixed with test programs): -1: USB disconnect, device number 69 [ 1131.616066][ T976] usb 3-1: USB disconnect, device number 66 [ 1131.736991][T16929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16929 comm=syz.5.2435 [ 1131.793250][T16934] netlink: 'syz.5.2435': attribute type 1 has an invalid length. [ 1131.862983][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1131.862998][ T30] audit: type=1400 audit(1131.842:840): avc: denied { mount } for pid=16928 comm="syz.5.2435" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1131.876728][T16929] bond1: (slave bridge1): making interface the new active one [ 1131.902638][T16929] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1131.922712][ T30] audit: type=1400 audit(1131.842:841): avc: denied { remount } for pid=16928 comm="syz.5.2435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1131.991466][ T30] audit: type=1400 audit(1131.962:842): avc: denied { unmount } for pid=8851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1132.031358][T10488] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1132.064448][T16939] kernel read not supported for file /!selinۡluxse6;-aejq > (pid: 16939 comm: syz.5.2438) [ 1132.096762][ T30] audit: type=1800 audit(1132.072:843): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2438" name=2173656C696EDBA102BFD96CD7CDC075787365EE0ECDCE36BFFA3BB92D61B8EF8D6514BC9E6AA171A2A509988A8F3EBA dev="mqueue" ino=47854 res=0 errno=0 [ 1132.139077][ T30] audit: type=1400 audit(1132.112:844): avc: denied { create } for pid=16938 comm="syz.5.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.159290][ T30] audit: type=1400 audit(1132.112:845): avc: denied { ioctl } for pid=16938 comm="syz.5.2438" path="socket:[47857]" dev="sockfs" ino=47857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.204777][ T30] audit: type=1400 audit(1132.182:846): avc: denied { create } for pid=16938 comm="syz.5.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1132.238963][T10488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.250362][T10488] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1132.259487][T10488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.279886][T10488] usb 1-1: config 0 descriptor?? [ 1132.364057][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 1132.399407][ T30] audit: type=1400 audit(1132.372:847): avc: denied { setopt } for pid=16943 comm="syz.2.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.427367][ T30] audit: type=1400 audit(1132.402:848): avc: denied { write } for pid=16943 comm="syz.2.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.452312][ T30] audit: type=1400 audit(1132.402:849): avc: denied { read } for pid=16943 comm="syz.2.2439" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1132.837625][T10488] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 1132.877113][T10488] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.004F/input/input91 [ 1133.008221][T16933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.021589][T16933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.045465][T10488] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1133.635920][T16967] sctp: [Deprecated]: syz.0.2437 (pid 16967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1133.635920][T16967] Use struct sctp_sack_info instead [ 1133.711290][T10488] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1133.870664][T16974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.892246][T12016] usb 1-1: USB disconnect, device number 60 [ 1133.913438][T10488] usb 6-1: Using ep0 maxpacket: 32 [ 1133.920250][T10488] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 1133.929990][T10488] usb 6-1: config 0 has no interface number 0 [ 1133.936239][T10488] usb 6-1: config 0 interface 210 has no altsetting 0 [ 1133.953378][T10488] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=3b.9f [ 1133.964357][T10488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.972568][T10488] usb 6-1: Product: syz [ 1133.979123][T10488] usb 6-1: Manufacturer: syz [ 1133.983831][T10488] usb 6-1: SerialNumber: syz [ 1133.991520][T10488] usb 6-1: config 0 descriptor?? [ 1133.999832][T10488] mct_u232 6-1:0.210: MCT U232 converter detected [ 1134.008849][T10488] mct_u232 ttyUSB0: expected endpoint missing [ 1134.020903][T16974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.078580][T16974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.091526][ T5955] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1134.102157][T16974] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2447'. [ 1134.342790][T12016] usb 6-1: USB disconnect, device number 54 [ 1134.353246][T12016] mct_u232 6-1:0.210: device disconnected [ 1134.373109][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.442738][ T5955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.452628][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1134.460673][ T5955] usb 3-1: Product: syz [ 1134.468554][ T5955] usb 3-1: SerialNumber: syz [ 1134.509763][T16983] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2449'. [ 1135.751452][ T5884] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1135.933476][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 1135.940062][ T5955] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1135.959293][ T5955] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 1135.972539][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.014003][ T5884] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1136.031338][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.050111][ T5884] usb 6-1: config 0 descriptor?? [ 1136.311814][ T5884] magicmouse 0003:05AC:0265.0050: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 1136.658965][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.687428][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.879579][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1136.879594][ T30] audit: type=1326 audit(1136.852:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17007 comm="syz.3.2456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc630f8efc9 code=0x0 [ 1136.908114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1137.481885][ T30] audit: type=1400 audit(1137.372:859): avc: denied { read write } for pid=17012 comm="syz.4.2457" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1137.722151][ T30] audit: type=1400 audit(1137.372:860): avc: denied { open } for pid=17012 comm="syz.4.2457" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1137.785119][ T5955] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 1137.816049][ T5955] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1137.861551][ T5955] usb 3-1: USB disconnect, device number 67 [ 1137.876934][ T5955] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1138.313673][ T30] audit: type=1400 audit(1138.222:861): avc: denied { create } for pid=17020 comm="syz.2.2458" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1138.692352][ T30] audit: type=1400 audit(1138.232:862): avc: denied { write } for pid=17020 comm="syz.2.2458" name="file0" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1138.726221][ T30] audit: type=1400 audit(1138.242:863): avc: denied { open } for pid=17020 comm="syz.2.2458" path="/487/file0" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1138.753793][ T30] audit: type=1400 audit(1138.242:864): avc: denied { ioctl } for pid=17020 comm="syz.2.2458" path="/487/file0" dev="tmpfs" ino=2655 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1138.781332][ T30] audit: type=1400 audit(1138.262:865): avc: denied { name_connect } for pid=17020 comm="syz.2.2458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1138.801500][ T30] audit: type=1400 audit(1138.342:866): avc: denied { shutdown } for pid=17020 comm="syz.2.2458" laddr=::ac14:14aa lport=56992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1138.823932][ T30] audit: type=1400 audit(1138.362:867): avc: denied { read } for pid=17020 comm="syz.2.2458" laddr=::ac14:14aa lport=56992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1138.870949][T17020] ALSA: mixer_oss: invalid OSS volume '' [ 1138.945204][ T2989] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1139.196778][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.603301][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.953382][ T10] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1141.166990][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.405309][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1141.433763][ T10] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1141.457770][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1141.503752][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1141.532615][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1141.558982][ T10] usb 3-1: Manufacturer: syz [ 1141.609444][ T10] usb 3-1: config 0 descriptor?? [ 1142.018526][T17071] overlayfs: overlapping lowerdir path [ 1142.368497][ T10] usb 3-1: USB disconnect, device number 68 [ 1142.441798][ T5884] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1142.743062][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 1142.758424][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.780780][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.805409][ T5884] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1142.819198][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.857405][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.868498][ T5884] usb 1-1: Product: syz [ 1142.874090][ T5884] usb 1-1: Manufacturer: syz [ 1142.878896][ T5884] usb 1-1: SerialNumber: syz [ 1142.957591][T17077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.050596][T17077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.157505][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1143.157521][ T30] audit: type=1400 audit(1143.132:874): avc: denied { bind } for pid=17075 comm="syz.5.2472" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1143.183564][ T30] audit: type=1400 audit(1143.132:875): avc: denied { name_bind } for pid=17075 comm="syz.5.2472" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1143.204004][ T30] audit: type=1400 audit(1143.132:876): avc: denied { node_bind } for pid=17075 comm="syz.5.2472" saddr=ff02::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1143.238380][T10488] usb 6-1: USB disconnect, device number 55 [ 1143.305255][ T5884] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1143.324810][ T5884] cdc_ncm 1-1:1.0: bind() failure [ 1143.364305][ T5884] usb 1-1: USB disconnect, device number 61 [ 1143.372403][ T30] audit: type=1400 audit(1143.352:877): avc: denied { read write } for pid=17088 comm="syz.4.2476" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1143.491278][ T5955] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1143.577457][ T30] audit: type=1400 audit(1143.352:878): avc: denied { open } for pid=17088 comm="syz.4.2476" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1143.651265][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 1143.660483][ T5955] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 1143.671666][ T5955] usb 3-1: config 0 has no interface number 1 [ 1143.677799][ T5955] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1143.689226][ T5955] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1143.700975][ T5955] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1143.712372][ T5955] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1143.722650][ T5955] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1143.735778][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1143.762536][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1143.778434][ T30] audit: type=1400 audit(1143.432:879): avc: denied { create } for pid=17088 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1143.801263][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1143.818271][ T5955] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1143.825205][ T30] audit: type=1400 audit(1143.432:880): avc: denied { connect } for pid=17088 comm="syz.4.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1143.835827][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.877876][ T5955] usb 3-1: Product: syz [ 1143.889960][ T5955] usb 3-1: Manufacturer: syz [ 1143.899894][ T5955] usb 3-1: SerialNumber: syz [ 1144.009852][ T5955] usb 3-1: config 0 descriptor?? [ 1144.015871][T17084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1144.583907][ T5955] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.630934][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 1144.644515][ T5955] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.833230][T17106] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 1144.847368][ T30] audit: type=1400 audit(1144.812:881): avc: denied { relabelfrom } for pid=17103 comm="syz.4.2480" name="NETLINK" dev="sockfs" ino=49434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1144.917860][ T30] audit: type=1400 audit(1144.812:882): avc: denied { mac_admin } for pid=17103 comm="syz.4.2480" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1144.948086][ T5955] usb 3-1: USB disconnect, device number 69 [ 1145.281307][ T30] audit: type=1400 audit(1144.882:883): avc: denied { write } for pid=17103 comm="syz.4.2480" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1145.788332][T10168] udevd[10168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1148.068362][T17158] overlayfs: overlapping lowerdir path [ 1148.145756][T17159] overlayfs: failed to verify upper (498/file0, ino=2706, err=-116) [ 1148.153888][T17159] overlayfs: failed to verify index dir 'upper' xattr [ 1148.161394][T17159] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1148.405091][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1148.405107][ T30] audit: type=1400 audit(1148.382:885): avc: denied { create } for pid=17149 comm="syz.2.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1148.482426][ T30] audit: type=1400 audit(1148.382:886): avc: denied { ioctl } for pid=17149 comm="syz.2.2492" path="socket:[49494]" dev="sockfs" ino=49494 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1148.603035][T17164] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2490'. [ 1148.818895][ T30] audit: type=1400 audit(1148.572:887): avc: denied { nlmsg_read } for pid=17142 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1148.924000][ T30] audit: type=1400 audit(1148.602:888): avc: denied { write } for pid=17142 comm="syz.5.2490" name="ipv6_route" dev="proc" ino=4026534037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1149.094019][ T30] audit: type=1400 audit(1149.042:889): avc: denied { ioctl } for pid=17167 comm="syz.4.2495" path="socket:[50204]" dev="sockfs" ino=50204 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1149.251467][T17174] (syz.0.2497,17174,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1149.311311][T17174] (syz.0.2497,17174,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1149.327247][ T30] audit: type=1400 audit(1149.302:890): avc: denied { create } for pid=17173 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1149.579863][ T30] audit: type=1400 audit(1149.332:891): avc: denied { bind } for pid=17173 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1149.642412][ T30] audit: type=1400 audit(1149.532:892): avc: denied { create } for pid=17173 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1149.676761][ T30] audit: type=1400 audit(1149.532:893): avc: denied { ioctl } for pid=17173 comm="syz.0.2497" path="socket:[49516]" dev="sockfs" ino=49516 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1149.779252][ T30] audit: type=1400 audit(1149.682:894): avc: denied { connect } for pid=17173 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1150.201287][ T5884] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1150.362958][ T5884] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1150.373106][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1150.375038][ T5884] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1150.390063][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1150.406611][ T5884] usb 4-1: Product: syz [ 1150.414821][ T5884] usb 4-1: Manufacturer: syz [ 1150.424852][T17185] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1150.425738][ T5884] usb 4-1: SerialNumber: syz [ 1150.445489][ T5884] usb 4-1: config 0 descriptor?? [ 1150.464855][ T5884] usb 4-1: selecting invalid altsetting 0 [ 1150.595136][T17194] support for cryptoloop has been removed. Use dm-crypt instead. [ 1150.727703][T17196] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1150.779229][ T5884] usb 4-1: USB disconnect, device number 70 [ 1151.585376][T17182] xt_hashlimit: Unknown mode mask 600, kernel too old? [ 1151.809409][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 1152.199029][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1153.674529][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 1153.730761][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1153.730773][ T30] audit: type=1400 audit(1153.702:901): avc: denied { execute } for pid=17224 comm="syz.4.2512" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1154.127791][T17235] overlayfs: overlapping lowerdir path [ 1154.208164][T17236] overlayfs: failed to verify upper (494/file0, ino=2699, err=-116) [ 1154.216405][T17236] overlayfs: failed to verify index dir 'upper' xattr [ 1154.223221][T17236] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1154.462200][T17234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.483896][T17234] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1154.509060][ T30] audit: type=1400 audit(1154.472:902): avc: denied { connect } for pid=17228 comm="syz.5.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1154.528962][ T30] audit: type=1400 audit(1154.472:903): avc: denied { bind } for pid=17228 comm="syz.5.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1154.548550][ T30] audit: type=1400 audit(1154.472:904): avc: denied { write } for pid=17228 comm="syz.5.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1154.568178][ T30] audit: type=1400 audit(1154.472:905): avc: denied { getopt } for pid=17228 comm="syz.5.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1154.878202][T17245] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2515'. [ 1155.124890][T17252] random: crng reseeded on system resumption [ 1155.131003][ T30] audit: type=1400 audit(1155.102:906): avc: denied { write } for pid=17251 comm="syz.4.2520" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1155.376700][ T30] audit: type=1400 audit(1155.102:907): avc: denied { open } for pid=17251 comm="syz.4.2520" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1155.608696][ T30] audit: type=1400 audit(1155.202:908): avc: denied { ioctl } for pid=17251 comm="syz.4.2520" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1156.321789][ T30] audit: type=1400 audit(1156.142:909): avc: denied { getopt } for pid=17257 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1157.511714][ T30] audit: type=1400 audit(1156.202:910): avc: denied { bind } for pid=17257 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1157.642836][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 1158.967761][T17300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17300 comm=syz.2.2531 [ 1159.061073][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1159.061084][ T30] audit: type=1400 audit(1159.032:918): avc: denied { mounton } for pid=17299 comm="syz.2.2531" path="/498/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1159.273702][ T30] audit: type=1400 audit(1159.032:919): avc: denied { mount } for pid=17299 comm="syz.2.2531" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1159.295976][ T30] audit: type=1400 audit(1159.072:920): avc: denied { remount } for pid=17299 comm="syz.2.2531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1160.268892][ T30] audit: type=1400 audit(1159.112:921): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1160.758428][ T30] audit: type=1400 audit(1160.672:922): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1160.855053][ T30] audit: type=1400 audit(1160.762:923): avc: denied { name_bind } for pid=17310 comm="syz.0.2534" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1160.934034][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2532'. [ 1161.177087][T17329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2536'. [ 1161.236292][T17328] netlink: 'syz.4.2537': attribute type 6 has an invalid length. [ 1161.267350][ T30] audit: type=1400 audit(1161.202:924): avc: denied { relabelfrom } for pid=17327 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1161.321288][ T30] audit: type=1400 audit(1161.212:925): avc: denied { relabelto } for pid=17327 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1161.506304][T17341] netlink: 'syz.0.2539': attribute type 10 has an invalid length. [ 1161.638756][T17341] veth0_vlan: left promiscuous mode [ 1161.660842][T17341] veth0_vlan: entered promiscuous mode [ 1161.846028][T17341] team0: Device veth0_vlan failed to register rx_handler [ 1162.523271][T17356] FAULT_INJECTION: forcing a failure. [ 1162.523271][T17356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.590354][T17356] CPU: 1 UID: 0 PID: 17356 Comm: syz.5.2544 Not tainted syzkaller #0 PREEMPT(full) [ 1162.590379][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1162.590390][T17356] Call Trace: [ 1162.590396][T17356] [ 1162.590402][T17356] dump_stack_lvl+0x16c/0x1f0 [ 1162.590433][T17356] should_fail_ex+0x512/0x640 [ 1162.590459][T17356] _copy_from_user+0x2e/0xd0 [ 1162.590482][T17356] copy_msghdr_from_user+0x98/0x160 [ 1162.590504][T17356] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1162.590534][T17356] ___sys_sendmsg+0xfe/0x1d0 [ 1162.590557][T17356] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.590576][T17356] ? __lock_acquire+0x622/0x1c90 [ 1162.590633][T17356] __sys_sendmsg+0x16d/0x220 [ 1162.590655][T17356] ? __pfx___sys_sendmsg+0x10/0x10 [ 1162.590698][T17356] do_syscall_64+0xcd/0xfa0 [ 1162.590724][T17356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.590742][T17356] RIP: 0033:0x7f47f318efc9 [ 1162.590755][T17356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.590771][T17356] RSP: 002b:00007f47f40db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.590788][T17356] RAX: ffffffffffffffda RBX: 00007f47f33e5fa0 RCX: 00007f47f318efc9 [ 1162.590798][T17356] RDX: 00000000000000c0 RSI: 00002000000010c0 RDI: 0000000000000003 [ 1162.590815][T17356] RBP: 00007f47f40db090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.590825][T17356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.590834][T17356] R13: 00007f47f33e6038 R14: 00007f47f33e5fa0 R15: 00007ffedcd12fd8 [ 1162.590860][T17356] [ 1162.805971][T17360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17360 comm=syz.2.2545 [ 1162.880795][ T30] audit: type=1400 audit(1162.852:926): avc: denied { load_policy } for pid=17361 comm="syz.3.2549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1162.881614][T17365] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 1162.912838][T17365] SELinux: failed to load policy [ 1162.952806][ T30] audit: type=1400 audit(1162.932:927): avc: denied { read } for pid=17368 comm="syz.4.2550" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1163.150335][ T5884] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1163.462732][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.621433][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.636597][ T5884] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1163.649050][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.125324][ T5884] usb 1-1: config 0 descriptor?? [ 1164.127497][T17380] overlayfs: overlapping lowerdir path [ 1164.164973][T17380] overlayfs: failed to verify upper (501/file0, ino=2749, err=-116) [ 1164.173408][T17380] overlayfs: failed to verify index dir 'upper' xattr [ 1164.180160][T17380] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1164.618857][ T2150] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1164.638998][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2554'. [ 1164.774873][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1164.774904][ T30] audit: type=1400 audit(1164.742:930): avc: denied { open } for pid=17382 comm="syz.5.2554" path="/dev/ttyqf" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1164.807872][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 1164.814072][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1164.831500][ T5884] usb 1-1: USB disconnect, device number 62 [ 1164.851266][ T2150] usb 4-1: Using ep0 maxpacket: 8 [ 1164.860530][ T2150] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1164.868740][ T2150] usb 4-1: config 0 has no interface number 0 [ 1164.888294][ T2150] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1164.928340][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.961179][ T2150] usb 4-1: config 0 descriptor?? [ 1165.098125][ T2150] viperboard 4-1:0.143: version 0.00 found at bus 004 address 071 [ 1165.287654][ T2150] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1165.298451][ T2150] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1165.467361][T17408] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1166.601613][ T5884] usb 4-1: USB disconnect, device number 71 [ 1166.692626][ T2150] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1166.796756][ T30] audit: type=1400 audit(1166.772:931): avc: denied { write } for pid=17420 comm="syz.5.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1166.857754][T12016] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1166.882571][ T2150] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.921302][ T2150] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1166.958358][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.981653][ T30] audit: type=1400 audit(1166.962:932): avc: denied { append } for pid=17425 comm="syz.5.2565" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.031736][T12016] usb 3-1: Using ep0 maxpacket: 32 [ 1167.038831][ T2150] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1167.051070][T17429] support for cryptoloop has been removed. Use dm-crypt instead. [ 1167.055593][T12016] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1167.122012][T12016] usb 3-1: config 0 has no interface number 0 [ 1167.138354][T12016] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.155491][T12016] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1167.194815][T12016] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1167.207315][T12016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.215637][T12016] usb 3-1: Product: syz [ 1167.219898][T12016] usb 3-1: Manufacturer: syz [ 1167.233083][T12016] usb 3-1: SerialNumber: syz [ 1167.262080][T12016] usb 3-1: config 0 descriptor?? [ 1167.319601][T17436] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1167.585327][T17440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.595522][T17440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.651402][ T5889] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1167.805026][ T5889] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1167.821302][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.840260][ T5889] usb 6-1: Product: syz [ 1167.850735][ T5889] usb 6-1: Manufacturer: syz [ 1167.863298][ T5889] usb 6-1: SerialNumber: syz [ 1167.871074][T12016] appletouch 3-1:0.85: Geyser mode initialized. [ 1167.878634][T12016] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input92 [ 1167.884125][ T5889] usb 6-1: config 0 descriptor?? [ 1168.152222][ T2150] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1168.253535][T17444] overlayfs: overlapping lowerdir path [ 1168.632783][ T2150] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1168.648211][ T2150] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1168.668301][ T2150] usb 1-1: USB disconnect, device number 63 [ 1168.680004][T12016] usb 3-1: USB disconnect, device number 70 [ 1168.692454][ T5889] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1168.703619][T12016] appletouch 3-1:0.85: input: appletouch disconnected [ 1169.025225][ T5889] usb 6-1: USB disconnect, device number 56 [ 1169.038778][ T30] audit: type=1400 audit(1169.012:933): avc: denied { connect } for pid=17451 comm="syz.3.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1169.124110][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 1169.134531][T17453] netlink: 'syz.4.2571': attribute type 16 has an invalid length. [ 1169.142385][T17453] netlink: 'syz.4.2571': attribute type 17 has an invalid length. [ 1169.233637][T17453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1170.431313][ T2150] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1170.608073][ T2150] usb 3-1: Using ep0 maxpacket: 32 [ 1171.325831][T10471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1171.397064][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.407215][ T30] audit: type=1400 audit(1171.372:934): avc: denied { create } for pid=17466 comm="syz.0.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1171.432071][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.453116][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.466689][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.480695][ T2150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.503836][T17469] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 1172.270477][ T2150] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1172.276793][ T30] audit: type=1400 audit(1171.502:935): avc: denied { mount } for pid=17466 comm="syz.0.2575" name="/" dev="rpc_pipefs" ino=51211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1172.279769][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.379772][ T2150] usb 3-1: config 0 descriptor?? [ 1172.385343][ T2150] usb 3-1: can't set config #0, error -71 [ 1172.393806][ T2150] usb 3-1: USB disconnect, device number 71 [ 1172.615826][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'. [ 1172.976501][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1174.094487][ T30] audit: type=1400 audit(1174.042:936): avc: denied { mounton } for pid=17481 comm="syz.3.2580" path="/504/file0" dev="tmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1174.371399][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1174.551807][ T30] audit: type=1400 audit(1174.532:937): avc: denied { create } for pid=17496 comm="syz.2.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1175.787934][ T30] audit: type=1400 audit(1174.532:938): avc: denied { ioctl } for pid=17496 comm="syz.2.2584" path="socket:[50151]" dev="sockfs" ino=50151 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1175.927231][T17510] overlayfs: overlapping lowerdir path [ 1175.934561][ T30] audit: type=1400 audit(1174.732:939): avc: denied { ioctl } for pid=17496 comm="syz.2.2584" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1175.959955][ T30] audit: type=1400 audit(1174.732:940): avc: denied { ioctl } for pid=17496 comm="syz.2.2584" path="socket:[51342]" dev="sockfs" ino=51342 ioctlcmd=0x4b31 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1175.984558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1176.034972][ T30] audit: type=1400 audit(1174.732:941): avc: denied { write } for pid=17496 comm="syz.2.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1176.342070][T17522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2588'. [ 1176.608528][T17526] SELinux: Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped). [ 1176.958992][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.967310][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.977468][ T30] audit: type=1400 audit(1176.582:942): avc: denied { relabelfrom } for pid=17519 comm="syz.4.2589" name="UNIX" dev="sockfs" ino=52296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1177.000414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.304225][ T30] audit: type=1400 audit(1176.592:943): avc: denied { relabelto } for pid=17519 comm="syz.4.2589" name="UNIX" dev="sockfs" ino=52296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="u:object_r:app_data_file:s0:c512,c768" [ 1177.331827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.364091][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 1177.857177][T17539] overlayfs: overlapping lowerdir path [ 1177.865695][T17539] overlayfs: failed to verify upper (518/file0, ino=2826, err=-116) [ 1177.873783][T17539] overlayfs: failed to verify index dir 'upper' xattr [ 1177.880523][T17539] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1177.904663][ T30] audit: type=1400 audit(1177.882:944): avc: denied { mounton } for pid=17537 comm="syz.2.2595" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1177.906337][T17540] /dev/nullb0: Can't open blockdev [ 1177.937781][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1178.242924][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.254515][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.267600][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1178.280732][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1178.291279][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.299702][ T30] audit: type=1400 audit(1178.262:945): avc: denied { write } for pid=17542 comm="syz.4.2597" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1178.632590][ T10] usb 4-1: config 0 descriptor?? [ 1178.667712][T17549] binder: 17548:17549 ioctl 4004662b 0 returned -22 [ 1178.686868][ T30] audit: type=1400 audit(1178.642:946): avc: denied { read } for pid=17548 comm="syz.0.2598" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1178.709921][ T30] audit: type=1400 audit(1178.642:947): avc: denied { open } for pid=17548 comm="syz.0.2598" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1178.733347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.742485][ T30] audit: type=1400 audit(1178.642:948): avc: denied { ioctl } for pid=17548 comm="syz.0.2598" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1178.777289][ T30] audit: type=1400 audit(1178.642:949): avc: denied { set_context_mgr } for pid=17548 comm="syz.0.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1178.822935][ T30] audit: type=1400 audit(1178.722:950): avc: denied { map } for pid=17548 comm="syz.0.2598" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1179.153680][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1179.164563][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1179.216054][ T10] usb 4-1: USB disconnect, device number 72 [ 1179.253110][T17558] can0: slcan on ttyS3. [ 1179.366790][ T30] audit: type=1400 audit(1179.342:951): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.514881][T17549] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1179.942832][T17553] can0 (unregistered): slcan off ttyS3. [ 1180.168168][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 1181.072909][T17585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17585 comm=syz.0.2606 [ 1181.140905][T17589] binder: 17588:17589 ioctl c018620b 0 returned -14 [ 1182.507580][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1182.507595][ T30] audit: type=1400 audit(1182.482:963): avc: denied { create } for pid=17597 comm="syz.3.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1182.609744][ T30] audit: type=1400 audit(1182.562:964): avc: denied { remove_name } for pid=17605 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=10096 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.632732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.650373][T17601] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1182.706839][T17601] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1182.740991][ T30] audit: type=1400 audit(1182.562:965): avc: denied { unlink } for pid=17605 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=10096 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1182.763591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.855800][ T30] audit: type=1400 audit(1182.682:966): avc: denied { firmware_load } for pid=17597 comm="syz.3.2610" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1183.642263][T17622] overlayfs: overlapping lowerdir path [ 1183.673184][ T30] audit: type=1400 audit(1183.642:967): avc: denied { bind } for pid=17625 comm="syz.4.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1183.674478][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2615'. [ 1183.810132][ T30] audit: type=1400 audit(1183.652:968): avc: denied { read } for pid=17625 comm="syz.4.2615" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1183.832308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.875666][ T30] audit: type=1400 audit(1183.652:969): avc: denied { open } for pid=17625 comm="syz.4.2615" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1183.898280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.922451][T17594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2609'. [ 1184.539806][T12016] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1184.691955][T12016] usb 6-1: Using ep0 maxpacket: 32 [ 1184.700629][T12016] usb 6-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 1184.714844][T12016] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1184.724132][T12016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.739317][T12016] usb 6-1: Product: syz [ 1184.748815][T12016] usb 6-1: Manufacturer: syz [ 1184.760248][T12016] usb 6-1: SerialNumber: syz [ 1184.781585][T12016] usb 6-1: config 0 descriptor?? [ 1184.795429][T12016] usb 6-1: bad CDC descriptors [ 1184.801078][T12016] usb 6-1: unsupported MDLM descriptors [ 1185.157602][T10488] usb 6-1: USB disconnect, device number 57 [ 1185.250383][ T30] audit: type=1400 audit(1185.222:970): avc: denied { write } for pid=17657 comm="syz.4.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1186.521441][T10488] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1186.821267][T10488] usb 3-1: Using ep0 maxpacket: 16 [ 1186.837279][T10488] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.848526][T10488] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.858923][T10488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1186.866459][T10488] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1186.876549][T10488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.000131][ T5889] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1187.021393][ T30] audit: type=1400 audit(1186.942:971): avc: denied { bind } for pid=17671 comm="syz.5.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1187.456063][ T5955] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1187.831699][ T5955] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1187.851281][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.865505][T10488] usb 3-1: config 0 descriptor?? [ 1188.046496][ T5955] usb 1-1: config 0 descriptor?? [ 1188.902510][T10488] nzxt-smart2 0003:1E71:2009.0051: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1188.971272][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 1189.101535][T17668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.561789][ T30] audit: type=1400 audit(1189.072:972): avc: denied { create } for pid=17663 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1189.564062][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1189.592642][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1189.604555][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.619786][T17668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.665854][ T5889] usb 4-1: string descriptor 0 read error: -71 [ 1189.665875][ T30] audit: type=1400 audit(1189.072:973): avc: denied { getopt } for pid=17663 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1189.693896][T17668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.711377][ T5889] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1189.731030][T17668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.740865][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1189.750375][ T30] audit: type=1400 audit(1189.672:974): avc: denied { create } for pid=17667 comm="syz.0.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1189.778414][ T5889] usb 4-1: can't set config #1, error -71 [ 1189.788232][ T5889] usb 4-1: USB disconnect, device number 73 [ 1189.814593][ T30] audit: type=1400 audit(1189.672:975): avc: denied { ioctl } for pid=17667 comm="syz.0.2624" path="socket:[52840]" dev="sockfs" ino=52840 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1189.879700][ T30] audit: type=1400 audit(1189.692:976): avc: denied { create } for pid=17663 comm="syz.2.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1189.880942][ T79] usb 3-1: USB disconnect, device number 72 [ 1189.943863][ T30] audit: type=1400 audit(1189.752:977): avc: denied { read } for pid=17690 comm="syz.5.2631" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1189.950680][ T5955] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1190.011738][ T5955] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1190.044274][ T30] audit: type=1400 audit(1189.752:978): avc: denied { open } for pid=17690 comm="syz.5.2631" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1190.045759][ T5955] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1190.183321][ T5955] usb 1-1: USB disconnect, device number 64 [ 1190.643473][T17708] binder: 17706:17708 ioctl 4018620d 0 returned -22 [ 1190.651782][ T30] audit: type=1400 audit(1190.632:979): avc: denied { write } for pid=17706 comm="syz.4.2635" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1191.457279][ T30] audit: type=1400 audit(1191.432:980): avc: denied { read } for pid=17720 comm="syz.0.2641" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1191.783031][ T5889] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1191.844280][ T30] audit: type=1400 audit(1191.822:981): avc: denied { setattr } for pid=17733 comm="syz.2.2644" name="" dev="pipefs" ino=51764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1191.944362][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.020327][ T5889] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1192.057915][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.097047][ T5889] usb 4-1: config 0 descriptor?? [ 1192.191317][ T976] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1192.369401][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.407828][ T976] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1192.577233][ T5889] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 1192.751668][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.762883][ T5889] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0052/input/input93 [ 1192.775362][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.798896][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.808760][ T976] usb 1-1: config 0 descriptor?? [ 1192.879035][ T5889] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1192.917871][ T5889] usb 4-1: USB disconnect, device number 74 [ 1193.002559][T17758] fido_id[17758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1193.081288][T15884] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1193.251294][T15884] usb 3-1: Using ep0 maxpacket: 16 [ 1193.259175][T15884] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.279994][T15884] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.308073][T15884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1193.323514][T15884] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1193.341049][ T976] keytouch 0003:0926:3333.0053: fixing up Keytouch IEC report descriptor [ 1193.357962][T15884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.367369][ T976] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0053/input/input94 [ 1193.381536][T15884] usb 3-1: config 0 descriptor?? [ 1193.556761][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.578694][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.018329][ T976] keytouch 0003:0926:3333.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1194.037333][T15884] cougar 0003:060B:500A.0054: unexpected long global item [ 1194.045673][T15884] cougar 0003:060B:500A.0054: parse failed [ 1194.059783][T15884] cougar 0003:060B:500A.0054: probe with driver cougar failed with error -22 [ 1194.427726][T17786] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1194.432254][T17739] sctp: [Deprecated]: syz.0.2646 (pid 17739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1194.432254][T17739] Use struct sctp_sack_info instead [ 1194.885379][ T5955] usb 1-1: USB disconnect, device number 65 [ 1195.140072][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1195.140087][ T30] audit: type=1400 audit(1195.112:985): avc: denied { map } for pid=17791 comm="syz.3.2658" path="socket:[52076]" dev="sockfs" ino=52076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1195.183850][ T30] audit: type=1400 audit(1195.112:986): avc: denied { accept } for pid=17791 comm="syz.3.2658" path="socket:[52076]" dev="sockfs" ino=52076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1195.613591][T17804] cgroup: Unknown subsys name 'smackfstransmute' [ 1195.881418][ T30] audit: type=1400 audit(1195.852:987): avc: denied { read write } for pid=17808 comm="syz.3.2662" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1195.939657][ T5955] usb 3-1: USB disconnect, device number 73 [ 1195.975125][ T30] audit: type=1400 audit(1195.852:988): avc: denied { open } for pid=17808 comm="syz.3.2662" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1196.039770][T17813] netlink: 'syz.3.2662': attribute type 21 has an invalid length. [ 1196.047752][T17813] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2662'. [ 1196.069878][T17813] netlink: 'syz.3.2662': attribute type 4 has an invalid length. [ 1196.107471][ T30] audit: type=1400 audit(1196.002:989): avc: denied { create } for pid=17808 comm="syz.3.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1196.139767][T17813] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2662'. [ 1196.693624][ T5955] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1196.702951][ T30] audit: type=1400 audit(1196.682:990): avc: denied { read write } for pid=17827 comm="syz.4.2667" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1196.750800][ T5889] hid-generic 00A0:0006:0003.0055: item fetching failed at offset 0/15 [ 1196.785177][ T5889] hid-generic 00A0:0006:0003.0055: probe with driver hid-generic failed with error -22 [ 1196.798441][ T30] audit: type=1400 audit(1196.712:991): avc: denied { open } for pid=17827 comm="syz.4.2667" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1197.173830][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.186296][ T5955] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1197.205618][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.232638][ T5955] usb 3-1: config 0 descriptor?? [ 1197.659968][ T5955] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 1197.857397][T17825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.869967][T17825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.907930][ T5955] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0056/input/input96 [ 1197.950323][T17825] sctp: [Deprecated]: syz.2.2666 (pid 17825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1197.950323][T17825] Use struct sctp_sack_info instead [ 1198.210732][T17841] could not allocate digest TFM handle cryptd(blake2b-160) [ 1198.422792][ T5955] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1199.099416][ T5955] usb 3-1: USB disconnect, device number 74 acpid: input device has been disconnected, fd 10 [ 1199.785494][T17869] overlayfs: overlapping lowerdir path [ 1200.178694][T17870] comedi comedi0: Minor 3 specified more than once! [ 1200.237972][T17877] netlink: 'syz.4.2675': attribute type 9 has an invalid length. [ 1200.781293][ T5955] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1200.961501][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 1200.983243][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1201.005007][ T5955] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1201.021917][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.061107][ T5955] usb 3-1: Product: syz [ 1201.088439][ T5955] usb 3-1: Manufacturer: syz [ 1201.118570][ T5955] usb 3-1: SerialNumber: syz [ 1201.177251][ T5955] usb 3-1: config 0 descriptor?? [ 1201.465149][T17884] wireguard0: entered promiscuous mode [ 1201.470665][T17884] wireguard0: entered allmulticast mode [ 1201.832574][ T5955] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1201.846302][ T5955] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1202.573491][T17910] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1202.583586][T17911] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2689'. [ 1202.606307][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'. [ 1203.074771][ T30] audit: type=1400 audit(1203.022:992): avc: denied { setopt } for pid=17915 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1203.232536][ T30] audit: type=1400 audit(1203.032:993): avc: denied { ioctl } for pid=17915 comm="syz.3.2692" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1203.366468][ T5955] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1203.413142][T17927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2694'. [ 1203.470934][T17927] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1203.612667][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.624273][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1203.634064][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1203.689569][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.701421][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1203.724806][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1203.742104][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.752560][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1203.762928][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1203.777381][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.787689][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1204.026705][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.073569][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.108450][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1204.117882][T10488] usb 3-1: USB disconnect, device number 75 [ 1204.178988][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.204249][ T30] audit: type=1400 audit(1204.182:994): avc: denied { mount } for pid=17933 comm="syz.2.2696" name="/" dev="ramfs" ino=54601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1204.246051][ T5955] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.265324][ T5955] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1204.275134][ T5955] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1204.290280][ T5955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.299787][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.308148][ T5955] usb 4-1: Product: syz [ 1204.312655][ T5955] usb 4-1: Manufacturer: syz [ 1204.317324][ T5955] usb 4-1: SerialNumber: syz [ 1204.373599][ T3460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1204.511288][ T5889] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1204.551478][T10488] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1204.662569][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1204.673776][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.685283][ T5889] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1204.694365][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.704846][ T5889] usb 6-1: config 0 descriptor?? [ 1204.741324][T10488] usb 3-1: Using ep0 maxpacket: 8 [ 1204.747894][T10488] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.758125][T10488] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1204.768787][T10488] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1204.777957][T10488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.786476][T10488] usb 3-1: Product: syz [ 1204.790650][T10488] usb 3-1: Manufacturer: syz [ 1204.798290][T10488] usb 3-1: SerialNumber: syz [ 1204.804509][T10488] usb 3-1: config 0 descriptor?? [ 1204.811144][T10488] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 1204.912540][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.921156][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.073048][ T30] audit: type=1400 audit(1205.052:995): avc: denied { read } for pid=17933 comm="syz.2.2696" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1205.080838][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.104589][ T30] audit: type=1400 audit(1205.052:996): avc: denied { open } for pid=17933 comm="syz.2.2696" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1205.170255][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.190794][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.202090][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.211961][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 1205.218151][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1205.228071][ T5889] usb 6-1: USB disconnect, device number 58 [ 1206.159491][ T2150] usb 4-1: USB disconnect, device number 75 [ 1206.406406][ T30] audit: type=1400 audit(1206.382:997): avc: denied { read } for pid=17942 comm="syz.3.2699" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1206.508127][ T5889] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1206.528704][ T30] audit: type=1400 audit(1206.382:998): avc: denied { open } for pid=17942 comm="syz.3.2699" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1206.582806][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 1206.691276][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 1206.703480][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.716457][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1206.750545][ T5889] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1206.769840][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.792313][ T5889] usb 6-1: config 0 descriptor?? [ 1206.840363][ T30] audit: type=1400 audit(1206.812:999): avc: denied { create } for pid=17962 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1206.866456][ T30] audit: type=1400 audit(1206.842:1000): avc: denied { write } for pid=17962 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1206.933486][T17964] netlink: 'syz.3.2705': attribute type 4 has an invalid length. [ 1207.041731][T17965] netlink: 'syz.3.2705': attribute type 4 has an invalid length. [ 1207.245497][ T5889] uclogic 0003:5543:0003.0057: item fetching failed at offset 0/3 [ 1207.258111][ T5889] uclogic 0003:5543:0003.0057: parse failed [ 1207.264172][ T5889] uclogic 0003:5543:0003.0057: probe with driver uclogic failed with error -22 [ 1207.313829][ T5889] usb 3-1: USB disconnect, device number 76 [ 1207.732059][ T5889] usb 6-1: USB disconnect, device number 59 [ 1208.049917][T17977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 1208.687580][ T2150] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1209.064859][T17991] overlayfs: overlapping lowerdir path [ 1209.189749][T17991] overlayfs: failed to verify upper (544/file0, ino=2981, err=-116) [ 1209.197948][T17991] overlayfs: failed to verify index dir 'upper' xattr [ 1209.204799][T17991] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1209.347134][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.400849][T17990] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1209.408256][ T2150] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1209.426957][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.460269][ T2150] usb 4-1: config 0 descriptor?? [ 1209.675809][ T30] audit: type=1400 audit(1209.652:1001): avc: denied { create } for pid=17993 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1209.709390][ T30] audit: type=1400 audit(1209.652:1002): avc: denied { write } for pid=17993 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1209.881262][ T2150] usbhid 4-1:0.0: can't add hid device: -71 [ 1209.901377][ T2150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1209.917301][ T2150] usb 4-1: USB disconnect, device number 76 [ 1210.077910][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 1210.095723][T18006] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 1210.104188][T18006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2715'. [ 1211.322637][ T5809] block nbd0: Receive control failed (result -32) [ 1212.190754][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 1214.382319][ T2150] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1214.481083][T18069] binder: 18067:18069 ioctl c0306201 200000000040 returned -22 [ 1214.564247][ T30] audit: type=1400 audit(1214.432:1003): avc: denied { connect } for pid=18067 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1214.696377][ T30] audit: type=1400 audit(1214.432:1004): avc: denied { write } for pid=18067 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1214.823986][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.860885][ T2150] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1214.881275][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.899847][ T2150] usb 4-1: config 0 descriptor?? [ 1214.908761][T18083] sctp: [Deprecated]: syz.0.2732 (pid 18083) Use of int in max_burst socket option. [ 1214.908761][T18083] Use struct sctp_assoc_value instead [ 1214.943402][T18081] tc_dump_action: action bad kind [ 1215.156641][ T30] audit: type=1400 audit(1215.132:1005): avc: denied { setopt } for pid=18088 comm="syz.5.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1215.157398][ T2150] usbhid 4-1:0.0: can't add hid device: -71 [ 1215.189335][ T30] audit: type=1400 audit(1215.132:1006): avc: denied { ioctl } for pid=18088 comm="syz.5.2736" path="socket:[55012]" dev="sockfs" ino=55012 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1215.213552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.225161][T15884] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1215.537662][ T2150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1215.548628][ T2150] usb 4-1: USB disconnect, device number 77 [ 1215.577122][ T30] audit: type=1400 audit(1215.532:1007): avc: denied { write } for pid=18088 comm="syz.5.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1215.595988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.716158][T15884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1215.725613][T15884] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 1215.751432][T15884] usb 1-1: config 6 has no interface number 0 [ 1215.757585][T15884] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1215.820327][T15884] usb 1-1: config 6 interface 200 has no altsetting 0 [ 1215.856556][T15884] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1215.891383][T15884] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1215.901271][T15884] usb 1-1: Product: syz [ 1215.936305][T15884] usb 1-1: Manufacturer: syz [ 1215.949068][T15884] usb 1-1: SerialNumber: syz [ 1216.529793][T18108] overlayfs: overlapping lowerdir path [ 1216.550866][T15884] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1216.574622][T15884] dvb-usb: bulk message failed: -8 (3/0) [ 1216.582357][T15884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1216.594870][T15884] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1216.603618][T15884] usb 1-1: media controller created [ 1216.635288][T15884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.669701][T15884] dvb-usb: bulk message failed: -8 (6/0) [ 1216.676782][T15884] dvb-usb: bulk message failed: -8 (6/0) [ 1216.682670][T15884] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1216.694068][T15884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input97 [ 1216.707498][T15884] dvb-usb: schedule remote query interval to 150 msecs. [ 1216.715245][T15884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1216.729410][T15884] usb 1-1: USB disconnect, device number 66 acpid: input device has been disconnected, fd 3 [ 1216.776916][T15884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1216.987762][ T30] audit: type=1400 audit(1216.962:1008): avc: denied { append } for pid=18117 comm="syz.2.2743" name="event3" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1216.994473][T18120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1217.040628][T18120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1217.755571][ T30] audit: type=1400 audit(1217.722:1009): avc: denied { mount } for pid=18125 comm="syz.2.2745" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1217.937928][T18144] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1217.964677][ T30] audit: type=1400 audit(1217.882:1010): avc: denied { connect } for pid=18127 comm="syz.0.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1217.984081][ T30] audit: type=1400 audit(1217.892:1011): avc: denied { shutdown } for pid=18127 comm="syz.0.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1218.006111][ T30] audit: type=1400 audit(1217.892:1012): avc: denied { accept } for pid=18127 comm="syz.0.2746" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1218.150726][T18146] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2749'. [ 1218.260309][ T30] audit: type=1400 audit(1218.202:1013): avc: denied { create } for pid=18145 comm="syz.0.2749" name="#95" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1218.471336][ T2150] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1218.633507][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.751387][ T2150] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1218.765025][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.787331][ T2150] usb 6-1: config 0 descriptor?? [ 1219.048396][T18162] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1219.074653][T18162] CIFS mount error: No usable UNC path provided in device string! [ 1219.074653][T18162] [ 1219.085096][T18162] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1219.344610][ T2150] usbhid 6-1:0.0: can't add hid device: -71 [ 1219.361370][ T2150] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1219.378899][ T2150] usb 6-1: USB disconnect, device number 60 [ 1219.577565][T18179] netlink: 'syz.3.2758': attribute type 1 has an invalid length. [ 1219.890310][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1219.890349][ T30] audit: type=1400 audit(1219.862:1021): avc: denied { create } for pid=18184 comm="syz.3.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1219.987100][T18189] lo speed is unknown, defaulting to 1000 [ 1220.017861][T18189] lo speed is unknown, defaulting to 1000 [ 1220.047196][T18189] lo speed is unknown, defaulting to 1000 [ 1220.056843][ T30] audit: type=1400 audit(1219.952:1022): avc: denied { write } for pid=18184 comm="syz.3.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1220.265585][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1220.279573][ T30] audit: type=1400 audit(1220.242:1023): avc: denied { ioctl } for pid=18195 comm="syz.4.2764" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1220.313278][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1220.322219][T18196] netlink: 'syz.4.2764': attribute type 12 has an invalid length. [ 1220.330025][T18196] netlink: 'syz.4.2764': attribute type 11 has an invalid length. [ 1220.341795][ T30] audit: type=1400 audit(1220.242:1024): avc: denied { lock } for pid=18195 comm="syz.4.2764" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1220.482179][ T2150] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1220.595696][T18189] infiniband sz1: set active [ 1220.600467][T10488] lo speed is unknown, defaulting to 1000 [ 1220.629240][T18189] infiniband sz1: added lo [ 1220.636353][T18189] sz1: rxe_create_cq: returned err = -12 [ 1220.646755][T18189] infiniband sz1: Couldn't create ib_mad CQ [ 1220.669914][ T2150] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1220.679971][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.688223][ T2150] usb 6-1: Product: syz [ 1220.692761][T18189] infiniband sz1: Couldn't open port 1 [ 1220.698403][ T2150] usb 6-1: Manufacturer: syz [ 1220.711968][T18208] 9pnet_fd: Insufficient options for proto=fd [ 1220.761329][ T976] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1220.768638][ T30] audit: type=1400 audit(1220.632:1025): avc: denied { accept } for pid=18206 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1221.501287][ T2150] usb 6-1: SerialNumber: syz [ 1221.526034][ T30] audit: type=1400 audit(1220.682:1026): avc: denied { ioctl } for pid=18206 comm="syz.4.2767" path="socket:[55404]" dev="sockfs" ino=55404 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1221.555168][ T30] audit: type=1400 audit(1220.692:1027): avc: denied { read } for pid=18206 comm="syz.4.2767" dev="sockfs" ino=56368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1221.555883][ T2150] usb 6-1: config 0 descriptor?? [ 1221.604926][T18189] RDS/IB: sz1: added [ 1221.634938][T18211] ceph: No mds server is up or the cluster is laggy [ 1221.688841][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.699930][ T976] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1221.711769][ T2150] hub 6-1:0.0: bad descriptor, ignoring hub [ 1221.717770][ T2150] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1221.720126][T18189] smc: adding ib device sz1 with port count 1 [ 1221.737107][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.754388][T18189] smc: ib device sz1 port 1 has no pnetid [ 1221.761442][ T976] usb 3-1: config 0 descriptor?? [ 1221.767152][T10488] lo speed is unknown, defaulting to 1000 [ 1221.777611][T18189] lo speed is unknown, defaulting to 1000 [ 1221.837947][ T30] audit: type=1400 audit(1221.812:1028): avc: denied { read } for pid=18218 comm="syz.4.2770" dev="sockfs" ino=55418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1221.862398][T18219] 9pnet_fd: Insufficient options for proto=fd [ 1221.913338][ T2150] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1221.931085][ T30] audit: type=1400 audit(1221.842:1029): avc: denied { write } for pid=18218 comm="syz.4.2770" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1221.956868][ T2150] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.989564][ T2150] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1222.011241][ T2150] usb 6-1: media controller created [ 1222.054780][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1222.168781][T18189] lo speed is unknown, defaulting to 1000 [ 1222.184066][ T976] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 1222.195104][ T976] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0058/input/input98 [ 1222.228268][ T30] audit: type=1400 audit(1222.202:1030): avc: denied { write } for pid=18222 comm="syz.0.2771" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1222.359451][ T2150] DVB: Unable to find symbol dib7000p_attach() [ 1222.366383][ T2150] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1222.383901][T18205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.401470][T18205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.414575][ T976] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1222.651272][ T2150] rc_core: IR keymap rc-dib0700-rc5 not found [ 1222.657369][ T2150] Registered IR keymap rc-empty [ 1222.662417][ T2150] dvb-usb: could not initialize remote control. [ 1222.669123][ T2150] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1222.772151][T18205] sctp: [Deprecated]: syz.2.2766 (pid 18205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1222.772151][T18205] Use struct sctp_sack_info instead [ 1222.815565][T18189] lo speed is unknown, defaulting to 1000 [ 1222.863894][T10488] usb 3-1: USB disconnect, device number 77 acpid: input device has been disconnected, fd 3 [ 1222.900880][ T2150] usb 6-1: USB disconnect, device number 61 [ 1222.932924][ T2150] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1222.974841][T18189] lo speed is unknown, defaulting to 1000 [ 1223.082638][T18189] lo speed is unknown, defaulting to 1000 [ 1225.376417][T13897] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1225.391513][T18267] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1225.741331][ T5955] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1226.036817][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1226.048935][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1226.059314][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1226.069126][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1226.078138][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1226.101261][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 1226.108136][ T5955] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.127862][ T5955] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.140686][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1226.147662][ T5955] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1226.157206][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.167650][ T5955] usb 3-1: config 0 descriptor?? [ 1226.922720][ T5955] hid (null): bogus close delimiter [ 1226.937479][ T5955] cougar 0003:060B:500A.0059: unexpected long global item [ 1226.960694][ T5955] cougar 0003:060B:500A.0059: parse failed [ 1226.981060][ T5955] cougar 0003:060B:500A.0059: probe with driver cougar failed with error -22 [ 1226.991277][ T976] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1227.161276][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 1227.174380][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.211041][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.239214][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1227.271352][ T976] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1227.293263][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.328663][ T976] usb 1-1: config 0 descriptor?? [ 1227.441269][ T5955] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1227.568206][T18292] lo speed is unknown, defaulting to 1000 [ 1227.699776][ T5955] usb 6-1: config 0 has no interfaces? [ 1227.707889][ T5955] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1227.736401][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.017745][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1228.017775][ T30] audit: type=1400 audit(1227.992:1032): avc: denied { getattr } for pid=18294 comm="syz.3.2789" path="cgroup:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1228.152492][ T5955] usb 6-1: config 0 descriptor?? [ 1228.189671][ T976] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.005A/input/input100 [ 1228.306686][ T5955] usb 3-1: USB disconnect, device number 78 [ 1228.331526][ T976] appleir 0003:05AC:8241.005A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 1228.412695][T18303] FAULT_INJECTION: forcing a failure. [ 1228.412695][T18303] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.449164][ T976] usb 1-1: USB disconnect, device number 67 [ 1228.460607][T18303] CPU: 0 UID: 0 PID: 18303 Comm: syz.2.2791 Not tainted syzkaller #0 PREEMPT(full) [ 1228.460633][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1228.460643][T18303] Call Trace: [ 1228.460649][T18303] [ 1228.460655][T18303] dump_stack_lvl+0x16c/0x1f0 [ 1228.460685][T18303] should_fail_ex+0x512/0x640 [ 1228.460705][T18303] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1228.460732][T18303] should_failslab+0xc2/0x120 [ 1228.460753][T18303] __kmalloc_cache_noprof+0x72/0x780 [ 1228.460776][T18303] ? __lock_acquire+0xb8a/0x1c90 [ 1228.460800][T18303] ? univ8250_setup_irq+0x34e/0x760 [ 1228.460825][T18303] ? univ8250_setup_irq+0x34e/0x760 [ 1228.460843][T18303] univ8250_setup_irq+0x34e/0x760 [ 1228.460859][T18303] ? io_serial_out+0x65/0xb0 [ 1228.460879][T18303] ? io_serial_in+0x60/0xb0 [ 1228.460903][T18303] serial8250_do_startup+0x726/0x3440 [ 1228.460926][T18303] ? mark_held_locks+0x49/0x80 [ 1228.460954][T18303] serial8250_startup+0x62/0x80 [ 1228.460971][T18303] uart_startup+0x50a/0x1300 [ 1228.461002][T18303] uart_ioctl+0xfe5/0x3080 [ 1228.461033][T18303] ? __pfx_uart_ioctl+0x10/0x10 [ 1228.461056][T18303] ? tomoyo_path_number_perm+0x18d/0x580 [ 1228.461094][T18303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1228.461127][T18303] ? __pfx_uart_ioctl+0x10/0x10 [ 1228.461153][T18303] tty_ioctl+0x661/0x1680 [ 1228.461181][T18303] ? __pfx_tty_ioctl+0x10/0x10 [ 1228.461203][T18303] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1228.461228][T18303] ? hook_file_ioctl_common+0x145/0x410 [ 1228.461255][T18303] ? selinux_file_ioctl+0x180/0x270 [ 1228.461268][T18303] ? selinux_file_ioctl+0xb4/0x270 [ 1228.461280][T18303] ? __pfx_tty_ioctl+0x10/0x10 [ 1228.461295][T18303] __x64_sys_ioctl+0x18e/0x210 [ 1228.461312][T18303] do_syscall_64+0xcd/0xfa0 [ 1228.461331][T18303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.461345][T18303] RIP: 0033:0x7fb891d8efc9 [ 1228.461359][T18303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.461373][T18303] RSP: 002b:00007fb892bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.461389][T18303] RAX: ffffffffffffffda RBX: 00007fb891fe5fa0 RCX: 00007fb891d8efc9 [ 1228.461399][T18303] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 1228.461409][T18303] RBP: 00007fb892bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.461418][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.461426][T18303] R13: 00007fb891fe6038 R14: 00007fb891fe5fa0 R15: 00007ffc64858d38 [ 1228.461441][T18303] [ 1228.477011][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. [ 1228.728040][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'. acpid: input device has been disconnected, fd 3 [ 1229.251367][ T5955] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1229.423483][ T5955] usb 4-1: too many configurations: 243, using maximum allowed: 8 [ 1229.431581][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1229.490399][ T5955] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1229.509740][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.540107][ T5955] usb 4-1: Product: syz [ 1229.544615][ T5955] usb 4-1: Manufacturer: syz [ 1229.546154][ T976] usb 6-1: USB disconnect, device number 62 [ 1229.549202][ T5955] usb 4-1: SerialNumber: syz [ 1229.566193][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1229.598891][ T5955] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1229.636428][ T30] audit: type=1400 audit(1229.602:1033): avc: denied { firmware_load } for pid=2150 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1229.654713][ T2150] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1229.971266][T10488] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1230.122630][T10488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.142885][T10488] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1230.165560][T10488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.192777][T10488] usb 1-1: config 0 descriptor?? [ 1231.087639][ T2150] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1231.136060][T10488] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 1231.141405][ T2150] ath9k_htc: Failed to initialize the device [ 1231.185180][T10488] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.005B/input/input101 [ 1231.189857][ T2150] usb 4-1: ath9k_htc: USB layer deinitialized [ 1231.306725][T18327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.327276][T18327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.339518][T10488] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1231.379418][T18342] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1231.698177][T12016] usb 4-1: USB disconnect, device number 78 [ 1231.935016][T18327] sctp: [Deprecated]: syz.0.2797 (pid 18327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1231.935016][T18327] Use struct sctp_sack_info instead [ 1232.094145][T18371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2807'. [ 1232.184846][T12016] usb 1-1: USB disconnect, device number 68 acpid: input device has been disconnected, fd 3 [ 1232.306965][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1232.357958][T18378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1232.358856][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'. [ 1232.383314][T18380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2811'. [ 1232.512397][ T30] audit: type=1400 audit(1232.492:1034): avc: denied { create } for pid=18385 comm="syz.5.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1232.629882][ T30] audit: type=1400 audit(1232.602:1035): avc: denied { create } for pid=18393 comm="syz.5.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1234.365084][T18431] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1235.402493][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1235.632097][T12016] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1235.741333][ T30] audit: type=1400 audit(1235.722:1036): avc: denied { bind } for pid=18440 comm="syz.5.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1235.764612][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2828'. [ 1235.784734][T12016] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1235.801309][T12016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.811601][T12016] usb 1-1: Product: syz [ 1235.815774][T12016] usb 1-1: Manufacturer: syz [ 1235.820362][T12016] usb 1-1: SerialNumber: syz [ 1235.833830][T12016] usb 1-1: config 0 descriptor?? [ 1236.045172][T18437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.061137][T18437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.089620][T12016] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1236.291647][T18437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.300217][T18437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.309400][T10488] usb 1-1: USB disconnect, device number 69 [ 1236.897447][ T30] audit: type=1400 audit(1236.872:1037): avc: denied { setopt } for pid=18463 comm="syz.5.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1236.934785][ T30] audit: type=1400 audit(1236.892:1038): avc: denied { ioctl } for pid=18463 comm="syz.5.2834" path="socket:[55993]" dev="sockfs" ino=55993 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1237.041589][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1237.265327][ T30] audit: type=1400 audit(1237.242:1039): avc: denied { mount } for pid=18479 comm="syz.0.2838" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1237.266836][T18480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1237.341896][ T30] audit: type=1400 audit(1237.242:1040): avc: denied { mounton } for pid=18479 comm="syz.0.2838" path="/574/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1237.432575][ T30] audit: type=1400 audit(1237.372:1041): avc: denied { bind } for pid=18482 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1237.467024][T18480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1237.474782][ T30] audit: type=1400 audit(1237.392:1042): avc: denied { listen } for pid=18482 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1237.598623][ T30] audit: type=1400 audit(1237.532:1043): avc: denied { read } for pid=18479 comm="syz.0.2838" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1237.626141][ T30] audit: type=1400 audit(1237.532:1044): avc: denied { open } for pid=18479 comm="syz.0.2838" path="/574/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1237.671382][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1238.118730][ T30] audit: type=1400 audit(1237.532:1045): avc: denied { read } for pid=18479 comm="syz.0.2838" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1238.366924][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.373585][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.021274][T10488] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1240.214203][ T976] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1240.252931][T10488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.264546][T10488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.275803][T10488] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1240.284927][T10488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.298545][T10488] usb 3-1: config 0 descriptor?? [ 1240.371518][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 1240.379393][ T976] usb 6-1: config 255 has too many interfaces: 244, using maximum allowed: 32 [ 1240.388428][ T976] usb 6-1: config 255 has an invalid interface descriptor of length 8, skipping [ 1240.397591][ T976] usb 6-1: config 255 descriptor has 1 excess byte, ignoring [ 1240.405201][ T976] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 244 [ 1240.417938][ T976] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1240.427964][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.436077][ T976] usb 6-1: Product: syz [ 1240.441141][ T976] usb 6-1: Manufacturer: syz [ 1240.445840][ T976] usb 6-1: SerialNumber: syz [ 1240.452922][ T976] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1240.461833][ T976] usb 6-1: no configuration chosen from 1 choice [ 1240.501278][ T2150] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1240.801048][ T2150] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1240.807481][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1240.807496][ T30] audit: type=1400 audit(1240.772:1054): avc: denied { append } for pid=18532 comm="syz.3.2855" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1240.811290][ T2150] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1241.458085][ T2150] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1241.459559][T10488] usb 3-1: string descriptor 0 read error: -22 [ 1241.467964][ T2150] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1241.482037][ T2150] usb 1-1: Product: syz [ 1241.486196][ T2150] usb 1-1: Manufacturer: syz [ 1241.490797][ T2150] usb 1-1: SerialNumber: syz [ 1241.497886][ T2150] usb 1-1: config 0 descriptor?? [ 1241.508495][ T30] audit: type=1400 audit(1241.482:1055): avc: denied { map } for pid=18532 comm="syz.3.2855" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1241.510016][ T2150] usb 1-1: selecting invalid altsetting 0 [ 1241.553441][ T30] audit: type=1400 audit(1241.512:1056): avc: denied { execute } for pid=18532 comm="syz.3.2855" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1241.773987][T10488] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.005C/input/input102 [ 1242.404287][T18544] kernel profiling enabled (shift: 17) [ 1242.603458][T18510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=18510 comm=syz.2.2847 [ 1242.764064][T10488] uclogic 0003:256C:006D.005C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1242.877422][T10488] usb 3-1: USB disconnect, device number 79 [ 1242.922749][T12016] usb 6-1: USB disconnect, device number 63 [ 1243.735731][T18565] overlayfs: overlapping lowerdir path [ 1243.760739][T18565] overlayfs: failed to verify upper (455/file0, ino=2517, err=-116) [ 1243.769272][T18565] overlayfs: failed to verify index dir 'upper' xattr [ 1243.776078][T18565] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1243.798526][ T2150] usb 1-1: USB disconnect, device number 70 [ 1243.904394][T18576] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1243.916564][T18576] Cannot find set identified by id 1 to match [ 1244.293269][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 1244.582349][ T30] audit: type=1400 audit(1244.542:1057): avc: denied { append } for pid=18590 comm="syz.3.2874" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1245.045356][ T30] audit: type=1400 audit(1245.022:1058): avc: denied { write } for pid=18604 comm="syz.3.2877" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1245.315800][T18609] FAULT_INJECTION: forcing a failure. [ 1245.315800][T18609] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.338172][T18609] CPU: 1 UID: 0 PID: 18609 Comm: syz.0.2878 Not tainted syzkaller #0 PREEMPT(full) [ 1245.338199][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1245.338208][T18609] Call Trace: [ 1245.338215][T18609] [ 1245.338222][T18609] dump_stack_lvl+0x16c/0x1f0 [ 1245.338253][T18609] should_fail_ex+0x512/0x640 [ 1245.338274][T18609] ? fs_reclaim_acquire+0xae/0x150 [ 1245.338296][T18609] should_failslab+0xc2/0x120 [ 1245.338317][T18609] __kmalloc_noprof+0xdd/0x880 [ 1245.338342][T18609] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1245.338368][T18609] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1245.338387][T18609] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1245.338410][T18609] ? tomoyo_profile+0x47/0x60 [ 1245.338436][T18609] tomoyo_path_number_perm+0x245/0x580 [ 1245.338462][T18609] ? tomoyo_path_number_perm+0x237/0x580 [ 1245.338490][T18609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1245.338523][T18609] ? find_held_lock+0x2b/0x80 [ 1245.338570][T18609] ? find_held_lock+0x2b/0x80 [ 1245.338589][T18609] ? hook_file_ioctl_common+0x145/0x410 [ 1245.338617][T18609] ? __fget_files+0x20e/0x3c0 [ 1245.338640][T18609] security_file_ioctl+0x9b/0x240 [ 1245.338661][T18609] __x64_sys_ioctl+0xb7/0x210 [ 1245.338688][T18609] do_syscall_64+0xcd/0xfa0 [ 1245.338715][T18609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.338733][T18609] RIP: 0033:0x7f766158efc9 [ 1245.338748][T18609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.338765][T18609] RSP: 002b:00007f7662443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.338781][T18609] RAX: ffffffffffffffda RBX: 00007f76617e5fa0 RCX: 00007f766158efc9 [ 1245.338793][T18609] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000004 [ 1245.338803][T18609] RBP: 00007f7662443090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.338813][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.338823][T18609] R13: 00007f76617e6038 R14: 00007f76617e5fa0 R15: 00007ffea7d76c98 [ 1245.338849][T18609] [ 1245.338878][T18609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1245.632712][T18622] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1245.670971][T18622] veth1_macvtap: left promiscuous mode [ 1245.683768][T18622] macsec0: entered promiscuous mode [ 1245.689119][T18622] macsec0: entered allmulticast mode [ 1245.713327][T18622] veth1_macvtap: entered promiscuous mode [ 1245.719081][T18622] veth1_macvtap: entered allmulticast mode [ 1245.725325][T18622] macsec0: left promiscuous mode [ 1245.730552][T18622] macsec0: left allmulticast mode [ 1245.745911][T18622] veth1_macvtap: left allmulticast mode [ 1246.351060][ T30] audit: type=1400 audit(1246.302:1059): avc: denied { write } for pid=18633 comm="syz.4.2886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1248.810929][ T30] audit: type=1400 audit(1248.782:1060): avc: denied { mount } for pid=18657 comm="syz.0.2892" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1248.957207][ T30] audit: type=1400 audit(1248.922:1061): avc: denied { block_suspend } for pid=18660 comm="syz.2.2893" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1249.042259][T18668] FAULT_INJECTION: forcing a failure. [ 1249.042259][T18668] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.091248][T18668] CPU: 0 UID: 0 PID: 18668 Comm: syz.3.2897 Not tainted syzkaller #0 PREEMPT(full) [ 1249.091273][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1249.091283][T18668] Call Trace: [ 1249.091288][T18668] [ 1249.091295][T18668] dump_stack_lvl+0x16c/0x1f0 [ 1249.091326][T18668] should_fail_ex+0x512/0x640 [ 1249.091346][T18668] ? fs_reclaim_acquire+0xae/0x150 [ 1249.091368][T18668] should_failslab+0xc2/0x120 [ 1249.091389][T18668] __kmalloc_noprof+0xdd/0x880 [ 1249.091413][T18668] ? tomoyo_encode2+0x100/0x3e0 [ 1249.091437][T18668] ? tomoyo_encode2+0x100/0x3e0 [ 1249.091455][T18668] tomoyo_encode2+0x100/0x3e0 [ 1249.091477][T18668] tomoyo_encode+0x29/0x50 [ 1249.091495][T18668] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1249.091518][T18668] ? tomoyo_profile+0x47/0x60 [ 1249.091543][T18668] tomoyo_path_number_perm+0x245/0x580 [ 1249.091569][T18668] ? tomoyo_path_number_perm+0x237/0x580 [ 1249.091598][T18668] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1249.091627][T18668] ? find_held_lock+0x2b/0x80 [ 1249.091673][T18668] ? find_held_lock+0x2b/0x80 [ 1249.091693][T18668] ? hook_file_ioctl_common+0x145/0x410 [ 1249.091721][T18668] ? __fget_files+0x20e/0x3c0 [ 1249.091743][T18668] security_file_ioctl+0x9b/0x240 [ 1249.091764][T18668] __x64_sys_ioctl+0xb7/0x210 [ 1249.091790][T18668] do_syscall_64+0xcd/0xfa0 [ 1249.091817][T18668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.091833][T18668] RIP: 0033:0x7fc630f8efc9 [ 1249.091847][T18668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.091867][T18668] RSP: 002b:00007fc631eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.091884][T18668] RAX: ffffffffffffffda RBX: 00007fc6311e5fa0 RCX: 00007fc630f8efc9 [ 1249.091895][T18668] RDX: 0000200000000100 RSI: 0000000000008933 RDI: 0000000000000004 [ 1249.091905][T18668] RBP: 00007fc631eff090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.091915][T18668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.091925][T18668] R13: 00007fc6311e6038 R14: 00007fc6311e5fa0 R15: 00007ffddd038d48 [ 1249.091951][T18668] [ 1249.092019][T18668] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1249.253484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.864120][T18699] overlayfs: overlapping lowerdir path [ 1252.011256][ T5955] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1252.173498][ T5955] usb 6-1: Using ep0 maxpacket: 16 [ 1252.180298][ T5955] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1252.281511][ T5955] usb 6-1: config 1 has no interface number 1 [ 1252.287639][ T5955] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1252.311770][ T5955] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1252.521244][ T5955] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.543006][ T5955] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1252.552510][ T30] audit: type=1400 audit(1252.522:1062): avc: denied { bind } for pid=18722 comm="syz.3.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1252.572109][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.580098][ T5955] usb 6-1: Product: syz [ 1252.601221][ T5955] usb 6-1: Manufacturer: syz [ 1252.607092][ T5955] usb 6-1: SerialNumber: syz [ 1252.845419][T18709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.864268][T18709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.999652][T18727] fusectl: Unknown parameter 'HJу :{^-b4vB2[Aco' [ 1253.086107][ T5955] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1253.135088][T18731] support for cryptoloop has been removed. Use dm-crypt instead. [ 1253.321291][ T2150] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1253.488380][T18734] netlink: 'syz.0.2914': attribute type 4 has an invalid length. [ 1253.512946][ T2150] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1253.528205][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.539175][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.549389][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1253.563187][ T2150] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1253.572257][ T2150] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1253.580346][ T2150] usb 3-1: Manufacturer: syz [ 1253.587280][ T2150] usb 3-1: config 0 descriptor?? [ 1253.689319][ T5955] usb 6-1: failed to enable PITCH for EP 0x82 [ 1253.697751][ T5955] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1253.712075][ T5955] usb 6-1: USB disconnect, device number 64 [ 1253.999442][T18728] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1254.011850][ T2150] appleir 0003:05AC:8243.005D: item fetching failed at offset 0/1 [ 1254.019918][ T2150] appleir 0003:05AC:8243.005D: parse failed [ 1254.025950][ T2150] appleir 0003:05AC:8243.005D: probe with driver appleir failed with error -22 [ 1254.311299][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1256.005743][ T5955] usb 3-1: USB disconnect, device number 80 [ 1266.325559][ T6744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1286.311395][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1297.250442][ T6744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1299.754131][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.760408][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1316.147700][T18747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=18747 comm=syz.2.2917 [ 1316.293789][T18758] tmpfs: Unknown parameter 'usrquota_inode_hardli' [ 1316.373986][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2916'. [ 1318.830677][ T30] audit: type=1400 audit(1318.802:1063): avc: denied { setopt } for pid=18748 comm="syz.4.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1318.881806][T18766] fuse: Bad value for 'fd' [ 1318.904387][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1320.010228][T18795] lo speed is unknown, defaulting to 1000 [ 1320.210932][T18802] rdma_rxe: rxe_newlink: failed to add lo [ 1320.248887][T18806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2932'. [ 1320.656642][T18817] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1320.675319][T10488] IPVS: starting estimator thread 0... [ 1320.682524][T18817] support for cryptoloop has been removed. Use dm-crypt instead. [ 1320.772140][T18818] IPVS: using max 51 ests per chain, 122400 per kthread [ 1321.686637][ T30] audit: type=1400 audit(1321.642:1064): avc: denied { ioctl } for pid=18826 comm="syz.0.2939" path="socket:[57770]" dev="sockfs" ino=57770 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1322.283936][ T30] audit: type=1400 audit(1322.262:1065): avc: denied { ioctl } for pid=18831 comm="syz.2.2940" path="socket:[57779]" dev="sockfs" ino=57779 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1322.744735][T18848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18848 comm=syz.2.2946 [ 1322.822135][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2946'. [ 1324.041242][ T5889] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1324.221247][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1324.229099][ T5889] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1324.241195][ T5889] usb 4-1: config 0 has no interface number 0 [ 1324.247317][ T5889] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1324.262117][ T5889] usb 4-1: New USB device found, idVendor=0596, idProduct=0201, bcdDevice= 5.f5 [ 1324.281842][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.743027][ T5889] usb 4-1: Product: syz [ 1324.748559][ T5889] usb 4-1: Manufacturer: syz [ 1324.759880][ T5889] usb 4-1: SerialNumber: syz [ 1324.770083][ T5889] usb 4-1: config 0 descriptor?? [ 1326.027727][T18903] bond0: entered promiscuous mode [ 1326.032872][T18903] bond_slave_0: entered promiscuous mode [ 1326.038667][T18903] bond_slave_1: entered promiscuous mode [ 1326.046011][T18903] dummy0: entered promiscuous mode [ 1326.052591][T18903] hsr1: entered promiscuous mode [ 1326.057571][T18903] hsr1: entered allmulticast mode [ 1326.062618][T18903] bond0: entered allmulticast mode [ 1326.067719][T18903] bond_slave_0: entered allmulticast mode [ 1326.078486][T18903] bond_slave_1: entered allmulticast mode [ 1326.084272][T18903] dummy0: entered allmulticast mode [ 1327.476288][ T30] audit: type=1400 audit(1327.452:1066): avc: denied { connect } for pid=18912 comm="syz.2.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1328.230883][ T5889] usb 4-1: USB disconnect, device number 79 [ 1328.231454][ T6730] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1328.335210][T18921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18921 comm=syz.0.2963 [ 1328.451875][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1330.313803][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 1331.448525][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1333.412074][T18954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1336.306692][T18990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18990 comm=syz.5.2979 [ 1336.337321][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2979'. [ 1336.633245][ T30] audit: type=1400 audit(1336.612:1067): avc: denied { setopt } for pid=18995 comm="syz.5.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1336.706237][T18998] netem: incorrect gi model size [ 1336.713756][T18998] netem: change failed [ 1336.765308][T18998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=18998 comm=syz.5.2982 [ 1336.975119][T19006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1336.994105][ T30] audit: type=1400 audit(1336.942:1068): avc: denied { map } for pid=19001 comm="syz.0.2984" path="/proc/2412/net/ip_tables_names" dev="proc" ino=4026533159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1337.018535][ T2150] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1337.181205][ T2150] usb 3-1: Using ep0 maxpacket: 16 [ 1337.196818][ T2150] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1337.211265][ T2150] usb 3-1: config 0 has no interface number 0 [ 1337.217340][ T2150] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1337.255085][ T2150] usb 3-1: New USB device found, idVendor=0596, idProduct=0201, bcdDevice= 5.f5 [ 1337.264251][ T2150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.274466][ T2150] usb 3-1: Product: syz [ 1337.284233][ T2150] usb 3-1: Manufacturer: syz [ 1337.310626][ T2150] usb 3-1: SerialNumber: syz [ 1337.415082][ T2150] usb 3-1: config 0 descriptor?? [ 1337.927315][T19010] rdma_rxe: rxe_newlink: failed to add lo [ 1338.160012][ T30] audit: type=1400 audit(1338.132:1069): avc: denied { create } for pid=19011 comm="syz.0.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1338.857377][T15884] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1338.870938][T19023] bond0: entered promiscuous mode [ 1338.876057][T19023] bond_slave_0: entered promiscuous mode [ 1338.881818][T19023] bond_slave_1: entered promiscuous mode [ 1338.888691][T19023] dummy0: entered promiscuous mode [ 1338.894626][T19023] debugfs: 'hsr1' already exists in 'hsr' [ 1338.900341][T19023] Cannot create hsr debugfs directory [ 1338.905893][T19023] hsr1: entered promiscuous mode [ 1338.910829][T19023] hsr1: entered allmulticast mode [ 1338.915872][T19023] bond0: entered allmulticast mode [ 1338.921040][T19023] bond_slave_0: entered allmulticast mode [ 1338.928314][T19023] bond_slave_1: entered allmulticast mode [ 1338.934129][T19023] dummy0: entered allmulticast mode [ 1339.247333][T15884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1339.277991][T15884] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.311333][T15884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1339.320603][T15884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.339499][T15884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1339.360596][T15884] usb 1-1: invalid MIDI out EP 0 [ 1339.728165][T19020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.766153][T19020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.795944][T15884] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1340.626434][ T5884] usb 3-1: USB disconnect, device number 81 [ 1342.869723][T19054] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2995'. [ 1343.326388][ T79] usb 1-1: USB disconnect, device number 71 [ 1345.861354][T19072] overlayfs: overlapping lowerdir path [ 1345.940838][T19073] overlayfs: failed to verify upper (488/file0, ino=2699, err=-116) [ 1345.948979][T19073] overlayfs: failed to verify index dir 'upper' xattr [ 1345.955837][T19073] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1346.565101][T15884] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1346.769580][T15884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.114235][T15884] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.140444][T15884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.151503][T15884] usb 1-1: config 0 descriptor?? [ 1347.421929][T10488] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1347.569885][T15884] keytouch 0003:0926:3333.005E: fixing up Keytouch IEC report descriptor [ 1347.593999][T10488] usb 3-1: Using ep0 maxpacket: 16 [ 1347.602671][T10488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.616976][T15884] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.005E/input/input103 [ 1347.630363][T10488] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1347.649241][T10488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.043421][T19078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.057003][T10488] usb 3-1: config 0 descriptor?? [ 1348.587716][T19078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.678549][T15884] keytouch 0003:0926:3333.005E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1348.977417][T19109] overlayfs: overlapping lowerdir path [ 1349.043006][T19110] overlayfs: failed to verify upper (619/file0, ino=3370, err=-116) [ 1349.051363][T19110] overlayfs: failed to verify index dir 'upper' xattr [ 1349.058208][T19110] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1349.782776][ T10] usb 1-1: USB disconnect, device number 72 [ 1349.821540][T19088] fuse: Unknown parameter '' [ 1350.232116][T19115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.292834][T19115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.511563][T19123] netem: incorrect gi model size acpid: input device has been disconnected, fd 3 [ 1350.532177][T19123] netem: change failed [ 1350.550358][T10488] mcp2221 0003:04D8:00DD.005F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1350.655289][T19125] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1350.946445][ C0] ================================================================== [ 1350.954562][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x1070/0x10a0 [ 1350.962177][ C0] Read of size 1 at addr ffff888079cdffff by task syz.5.3013/19120 [ 1350.970043][ C0] [ 1350.972342][ C0] CPU: 0 UID: 0 PID: 19120 Comm: syz.5.3013 Not tainted syzkaller #0 PREEMPT(full) [ 1350.972356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1350.972363][ C0] Call Trace: [ 1350.972369][ C0] [ 1350.972374][ C0] dump_stack_lvl+0x116/0x1f0 [ 1350.972396][ C0] print_report+0xcd/0x630 [ 1350.972410][ C0] ? __virt_addr_valid+0x81/0x610 [ 1350.972426][ C0] ? __phys_addr+0xe8/0x180 [ 1350.972442][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 1350.972458][ C0] kasan_report+0xe0/0x110 [ 1350.972469][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 1350.972485][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 1350.972501][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1350.972518][ C0] __hid_input_report.constprop.0+0x314/0x450 [ 1350.972530][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 1350.972546][ C0] hid_irq_in+0x35e/0x870 [ 1350.972562][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 1350.972580][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 1350.972596][ C0] dummy_timer+0x1809/0x3a00 [ 1350.972615][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1350.972626][ C0] ? rcu_is_watching+0x12/0xc0 [ 1350.972640][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1350.972656][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1350.972666][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1350.972682][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1350.972694][ C0] ? read_tsc+0x9/0x20 [ 1350.972709][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1350.972723][ C0] handle_softirqs+0x219/0x8e0 [ 1350.972737][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1350.972752][ C0] __irq_exit_rcu+0x109/0x170 [ 1350.972764][ C0] irq_exit_rcu+0x9/0x30 [ 1350.972776][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1350.972793][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1350.972805][ C0] RIP: 0033:0x7f47f3068218 [ 1350.972816][ C0] Code: 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 <48> 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 [ 1350.972827][ C0] RSP: 002b:00007ffedcd12f10 EFLAGS: 00000216 [ 1350.972836][ C0] RAX: 00007f47f2bc4ae0 RBX: 00007f47f2bc11a0 RCX: ffffffff8b5b2e8c [ 1350.972844][ C0] RDX: ffffffff8b5b2e8c RSI: ffffffff8b5b2e8c RDI: 00007f47f2bc5748 [ 1350.972851][ C0] RBP: 00007f47f2bc0750 R08: 00007f47f2bc2f48 R09: 00007f47f33d2000 [ 1350.972858][ C0] R10: 00007f47f27fd008 R11: 0000000000000017 R12: 00007f47f2bc0748 [ 1350.972865][ C0] R13: 000000000000001b R14: 00007ffedcd130f8 R15: 00007f47f27fd008 [ 1350.972874][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1350.972886][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1350.972898][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1350.972911][ C0] [ 1350.972914][ C0] [ 1350.991346][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1350.992270][ C0] The buggy address belongs to the physical page: [ 1351.248890][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79cdf [ 1351.257644][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1351.264758][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1351.273340][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1351.282336][ C0] page dumped because: kasan: bad access detected [ 1351.288723][ C0] page_owner tracks the page as freed [ 1351.294066][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13897, tgid 13897 (kworker/u8:3), ts 1275132577026, free_ts 1316062419531 [ 1351.315334][ C0] post_alloc_hook+0x1c0/0x230 [ 1351.320089][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 1351.325626][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1351.331509][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1351.336358][ C0] new_slab+0x24a/0x360 [ 1351.340497][ C0] ___slab_alloc+0xdae/0x1a60 [ 1351.345157][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 1351.350611][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 1351.357004][ C0] kmalloc_reserve+0xef/0x2c0 [ 1351.361674][ C0] __alloc_skb+0x166/0x380 [ 1351.366074][ C0] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1351.371692][ C0] process_one_work+0x9cf/0x1b70 [ 1351.376613][ C0] worker_thread+0x6c8/0xf10 [ 1351.381198][ C0] kthread+0x3c5/0x780 [ 1351.385247][ C0] ret_from_fork+0x675/0x7d0 [ 1351.389817][ C0] ret_from_fork_asm+0x1a/0x30 [ 1351.394567][ C0] page last free pid 8851 tgid 8851 stack trace: [ 1351.400883][ C0] __free_frozen_pages+0x7df/0x1160 [ 1351.406073][ C0] __put_partials+0x130/0x170 [ 1351.410738][ C0] qlist_free_all+0x4d/0x120 [ 1351.415305][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1351.420744][ C0] __kasan_slab_alloc+0x69/0x90 [ 1351.425576][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1351.431056][ C0] dup_fd+0x4e/0xb90 [ 1351.434937][ C0] copy_process+0x2312/0x76a0 [ 1351.439608][ C0] kernel_clone+0xfc/0x930 [ 1351.444007][ C0] __do_sys_clone+0xce/0x120 [ 1351.448592][ C0] do_syscall_64+0xcd/0xfa0 [ 1351.453099][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.458998][ C0] [ 1351.461309][ C0] Memory state around the buggy address: [ 1351.466937][ C0] ffff888079cdfe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1351.474976][ C0] ffff888079cdff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1351.483022][ C0] >ffff888079cdff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1351.491060][ C0] ^ [ 1351.499013][ C0] ffff888079ce0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1351.507055][ C0] ffff888079ce0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1351.515105][ C0] ================================================================== [ 1351.523141][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1351.530313][ C0] CPU: 0 UID: 0 PID: 19120 Comm: syz.5.3013 Not tainted syzkaller #0 PREEMPT(full) [ 1351.539661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1351.549699][ C0] Call Trace: [ 1351.552964][ C0] [ 1351.555880][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1351.560461][ C0] vpanic+0x640/0x6f0 [ 1351.564438][ C0] panic+0xca/0xd0 [ 1351.568152][ C0] ? __pfx_panic+0x10/0x10 [ 1351.572559][ C0] ? end_report+0x4c/0x170 [ 1351.576958][ C0] ? rcu_is_watching+0x12/0xc0 [ 1351.581713][ C0] ? lock_release+0x201/0x2f0 [ 1351.586370][ C0] check_panic_on_warn+0xab/0xb0 [ 1351.591301][ C0] end_report+0x107/0x170 [ 1351.595627][ C0] kasan_report+0xee/0x110 [ 1351.600033][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 1351.605312][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 1351.610412][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.616210][ C0] __hid_input_report.constprop.0+0x314/0x450 [ 1351.622280][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 1351.627729][ C0] hid_irq_in+0x35e/0x870 [ 1351.632059][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 1351.637423][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 1351.642611][ C0] dummy_timer+0x1809/0x3a00 [ 1351.647196][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1351.652114][ C0] ? rcu_is_watching+0x12/0xc0 [ 1351.656862][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.662658][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1351.667584][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1351.672773][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1351.678495][ C0] ? read_tsc+0x9/0x20 [ 1351.682555][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1351.687652][ C0] handle_softirqs+0x219/0x8e0 [ 1351.692418][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1351.697691][ C0] __irq_exit_rcu+0x109/0x170 [ 1351.702353][ C0] irq_exit_rcu+0x9/0x30 [ 1351.706584][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1351.712206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1351.718170][ C0] RIP: 0033:0x7f47f3068218 [ 1351.722568][ C0] Code: 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 <48> 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 [ 1351.742159][ C0] RSP: 002b:00007ffedcd12f10 EFLAGS: 00000216 [ 1351.748211][ C0] RAX: 00007f47f2bc4ae0 RBX: 00007f47f2bc11a0 RCX: ffffffff8b5b2e8c [ 1351.756162][ C0] RDX: ffffffff8b5b2e8c RSI: ffffffff8b5b2e8c RDI: 00007f47f2bc5748 [ 1351.764114][ C0] RBP: 00007f47f2bc0750 R08: 00007f47f2bc2f48 R09: 00007f47f33d2000 [ 1351.772082][ C0] R10: 00007f47f27fd008 R11: 0000000000000017 R12: 00007f47f2bc0748 [ 1351.780037][ C0] R13: 000000000000001b R14: 00007ffedcd130f8 R15: 00007f47f27fd008 [ 1351.787996][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1351.793364][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1351.798737][ C0] ? plist_check_prev_next+0x1c/0x1a0 [ 1351.804109][ C0] [ 1351.807340][ C0] Kernel Offset: disabled [ 1351.811655][ C0] Rebooting in 86400 seconds..