last executing test programs: 2m32.114789439s ago: executing program 4 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) r2 = socket(0x28, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000a40baf572ee5579dd8941531dc414b1026c8830a4710115cd2389376514589d2eae4bd2343de94e9ac33985773c0cf039dc61ae08c1efe717a9c4ad2127015baed4aadd17802161fc2a68864b05f14ffffc63b826608f9c2857d857a7ff2357e12af3e91b05003ebfcb37aeb85", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf2501000000000004000000400000000000000007800000018000000100", @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES32=r2, @ANYBLOB="05000a0025000000"], 0xffffffffffffff51}, 0x1, 0x0, 0x0, 0x2404c084}, 0x4000001) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) 2m31.039763051s ago: executing program 4 (id=264): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc943, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x805}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setrlimit(0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f00000005c0)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x3, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m30.430598509s ago: executing program 1 (id=267): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x3ff, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @empty, 0x8006, 0x7800, 0x5f1, 0x7fff}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x16) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x109102, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m28.210671548s ago: executing program 1 (id=272): unshare(0x22020600) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0xb00) 2m27.927613101s ago: executing program 1 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000000000009a139e071cf8a3a8f725e83ed98a6fb36dfa961a159ea9c28c637ec090fcfc2d578499b8a607037640ae41dd00"/89], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m27.572553314s ago: executing program 4 (id=276): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000600)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc4}]}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x3f) 2m27.400018583s ago: executing program 4 (id=277): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc943, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x805}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000001b000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x50) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f00000005c0)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x3, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m26.956540898s ago: executing program 4 (id=279): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007", @ANYRES16=r1, @ANYRESDEC=r0], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x401, 0x7, 0x3, 0xfffffffc}, {0x5, 0x9, 0xf9, 0x8}, {0xcd, 0x5, 0x7, 0x1}, {0x7, 0x6, 0x2e, 0x6}]}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x2, 0x60010020, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m26.880240129s ago: executing program 1 (id=280): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000500)="18ca278d56a4a6", 0x7, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb", 0x8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=&(0x7f0000000240)}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 2m26.75863019s ago: executing program 4 (id=281): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x4) 2m25.470927329s ago: executing program 1 (id=288): r0 = inotify_init1(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000a000000027000008000000009500fc0000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000300)="201d7d2e110296a5d377cd9738ce2ae2a44820d5ecf4e3684f3610fa3672c569f1785e6cc242524b15f6bf46582f4d6b5a2fa3098f170e44d7d21270deb8892f0912bfba7b884cdd3fc3d84489678c4db10c430720f04e8125116c55d968d11462f4cf5841886ad6f8a0338628ab4c9cb97dfe7ec712dec5be41f7dd15e77bfbe5809859f268ecf6c3b21e9744b2b67a1068", &(0x7f0000000080)=""/20, &(0x7f00000003c0)="8cd5d723b5e82072296dd4f57e6786e87f1a83a57cdd06666809ef686612eb37380dbb7efd9fbc3d8493b4791c50db800a87ec4823f5ba1eae02777d0f2ffae601377c8376fb2c1b57bd22def17b6f5d624e1d", &(0x7f0000000540)="86aab2322b47426c52670dab36a38c2c7aff8a52ba5adfbbcd87ad09e9ded412407ad32a9aa48b79ba7205ee0aa664fdd00f7c0e3c4fa066af8b0030ff5a2527c6db6fb312455b420a01e4bbff9284b6e70965bb8e51690fd63f52adde92aa86d5b3b4e9fc5bb324762933ea53eca342fcd10f53", 0x1ff, r1}, 0x38) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205070000ade00261ec6576f7ef688981fb5c886dccc32487ba5bff4d2b032f12e77a4b0519e56e0eb96a534864aeb8124a1a3d5cf58d69d4c6c980cb84c038ecfa2bd080d50f12397370685242ffffffff499201e7114e5e3a50ef993a31bb93349e1ae85a482006c0749c7e869e1cbd898f783265000000000000"], 0x0}, 0x0) 2m18.34806884s ago: executing program 1 (id=307): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r6, &(0x7f0000000180)='9', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x7, r9, 0x1, 0x0, 0x6, @local}, 0x14) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 2m10.915237374s ago: executing program 32 (id=281): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x4) 2m3.321537438s ago: executing program 33 (id=307): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r6, &(0x7f0000000180)='9', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x7, r9, 0x1, 0x0, 0x6, @local}, 0x14) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 20.340052469s ago: executing program 2 (id=644): syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x40045304, &(0x7f0000000500)) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x3}}, 0x8, 0x1}, 0x90) sendmmsg(r1, &(0x7f0000002080)=[{{&(0x7f00000001c0)=@un=@file={0x0, './bus\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="f79df78908fd9a1c2b7648f2855cbe12fd61fde3caa43df3a503d9c9324fb3850fa10bb99e21be0afcec3e074460f4b6a71b546f85c928592ff5875fe4ae6750b962827f15075c0f21812c317ef6e837639e8401173a335dcbc08608f52bf1d1ec62d68f33c330014d4a3a3a830e3d4ed5a989808e77b9bb761bfe8e0cdea46646590e8b9c86022130affe73bdc6a2dc2e45740005dc8076191971214f8cf348815f954d0c01feb7c2eaa17d6b7f6d77301b63d7f4660c4b40cb98a5f6ff2751", 0xc0}, {&(0x7f00000003c0)="e1c354a44b15588b38b92875cbda1bf8483bc70322c4a036d5587daf6a69d40411799c2849e1b587042bc8010e3d628ec8d49ffe0a48094baf647bce296dc40bbeadea", 0x43}, {&(0x7f0000000440)="d2bce39ee6bdf0f62dbfe33843c76d3d0cee78d77cfbf6c0f68af4367b6bc16c3fb67344c32eda7c9de8b54a27c05f2aed9861b169a1189968664ce7560b860aec245802320cebeeeb73c4e3ece4c7aa13ce0c067d187a0275515dc25ddbe328165baa19fd1ce678f7ba431e1679cbfa2c399e3416eb2590ed263a9534786b649ca70f46a437649ea8c8692c6bdfda2da5763dc2cb20dc7677", 0x99}, {&(0x7f00000006c0)="86206508587a69f38039a9a6c551eb158903d9f70bb9a369c73fb97fc8d9342687a34576350e9aafe1f45f81d7a86b668076aa84a3d6b18a9eb882998124e36a71be124dfeb93a1db86bdfdf8eb3222f30f30f8916c3bb20819a81ac2cf9a3552c8cccd1c724e7f9fcf909d25a6cc61049920e8fa473756135290510ef67ba26a6fbe624ddd0705a49a25049d93e5c2ec8a658aa1921017aa38f0a79949af3c72f357e94d27d6b3f3bc291e0285ae8faa6db163a8450a43a44f20389e5757bc17d090f3ef2055369c58f15dcff581c01ff5080e601e08dfacc822b8884b05965dd2075b838347eff29cd9240e55cac03bd8da761eb", 0xf5}], 0x4, &(0x7f00000007c0)=[{0x90, 0x10a, 0x6, "015b59d6f533aa02837afa7859dc28e4eb258e606f95e551260c7c5584af458a512332453cb2a6151563084867abdf421a6074c41b7954473bb8906344f169a1a659831794772c7be7c70e812ac0ebe7d72bbf2009c61100ec3e75dbbf232de7b5f92a932f3a8df9cb9c1003ee096278cc98696c1be7214ef4ed15"}, {0x40, 0x84, 0x2, "9dd60004210837a2822ac8bf865ab229ed0ab30b244eeab7f95612880e311d4dca7cb2cc6d075d6e93c53a7d"}, {0xe8, 0x118, 0xa8d, "2e6f74e8f768ef8af835e93148c9aebf88ea461c2c6bddd064bb4f0c66f48f986dc1bdbf9d74245129a7ffc9713afb80253c4b63519ae5e7a04166fba63144020e4498948644febdca9ae3dd3ae40aca545125142965dc724c2505f9cc573bb6b70b0c0280397a6cb1ccca1dc7c0749a2811847d5dd17a539dcca6038942de9b244ba7b608840bbfb1b9e5e380f990afd043cf4bd0c0d95f9709f15e09af76b0e050f02fa529138900bba6b29061f0482606dfc0b2cefdf67a47789375442a76aca7ee02a6041cfcdb81cfcc9580a2b0925f"}, {0x28, 0x10c, 0x48eb, "413c16be4095d0e258ea9399d77019e8ec669b9e"}, {0xb0, 0x10b, 0x96, "1f920b45acc87cdfe017378ac1b2f751643cff185b6cca24b4fd45d89803f054bb6e0f23ed9cc62772b405284bc323573ec66bd6e19fefc8e03320946365012bb5a4d11ee1bcd921a932228f558f2bebde257f1de42a7e43b0ce23c952b6a588d3648f181a7dcfa10161010552e9583a0737f20de20e3447efdd554fce212552bb9ec9bdb2dbd0a421300d8b5f35469c29ccad92b29342bab5a380"}, {0x38, 0x10f, 0x8, "c5f484621b84ebd7628c9f94cc767f9014bef9db26c72308141035d3772a1206ef80"}, {0xc8, 0x3a, 0x4, "c60862c6c17e7044163a5f2fda710b5238b99c62d24394473c21a9076fab8cfb1867d5de495ce1e344290974979346d0a160c6320127cbc82f9a6ffc55b41514ec2b75b1c7af9e2ed5054dc6f1ceade60da41af5880aa125b91e4d0f3b861a1d7bf569d51789d0db7ed8531302bc796ac6d49cf32e6a6b7baca027f2d2f8c765332cb2a1c3a3e786d9870e765e61595a530d7686d3b5767899ff6c9200752e731a80bb83f84d335d506e68f9e181c6fbc4f7908207605eee"}, {0x48, 0x2b, 0x5bb, "55e0c16033d7b1510d549880baea1629be6a51e6c98efe3840a967145043121943aba1cef7b80a8170c6a5448fe37caf384758f588e38143"}, {0x10, 0x115}, {0xa0, 0x106, 0x8, "5d3c31da9d389a2a587e208cddec480cfff2d35c9c89f7b96a65e0ba4db06213942ff8a21341c310b426cb61bd02eed27acec48b1ffea19bce68a1600d0058e3e65d545ffabf3e6439b050c756343936fea6f9e2bb6f17b0c32deba8e00565a78931fece68dba507d2a56e185a7178d97a1ea284febe6449c16eafc6965a6b69e250f86a74bd71986f"}], 0x488}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c80)="79b92b1c39bf8c679ad83071d040910e84092b8bf457ef6026e3d831b96ca308178143e98f167a60df445e55f401db7761d371909efc22f96900465da03aa2ab6d66399c4c207b9eaeb006ed52714d1bf512b008ce6bd71116a863b325644e7d3ef26a", 0x63}, {&(0x7f0000000d00)="e002f230a32a8b36d2aa30051ac2d9b514ee4aa64f51c093f52124718de51eb458536bd821bdecaf8364adffce7b9ab33278c2690215d30531bec29feda4318428c565b593f83e08a25a5ed1754074f498c69cbbb529f19b9c1c6846d3e43d4ce0bd0918805b87dc26e4788c485774bc4a40cb98a9b1fdc6fe034aa25d87bb820485e62aa02abcd159040b2a3a8f1c96d33b7461f2ecf21d23930b81d4f69c73ab93", 0xa2}, {&(0x7f0000000dc0)="e21afa3ec1b78cbce896a38661048e079adc4ced323676dc23525a8b1b12c7a67b183f462a178edfa543ea6988d6651814cc6d9bdbe4f4d4e6bf1116a3b5edf99491fe8a10136748bb6248e4722f30b8664b4060f3e27edc52535d72d82c6e4026240cec7932fc96a36037644036c9e1f437e0cf53641a1c43814406fab8d8a588926afb0a", 0x85}, {&(0x7f0000000e80)="a628c956264a24e3a22eb354c7f4907c7db4e20c2800a6ea463344b8c4f3875a66b986e4a5d64c86152768329d15b7910082c3151d50faf7e6038fd43747c1c4f4711a3828ca080a54b724661e9de3f12811c16cad5360c7a1541007c213ffc828e87984f25761f865b5dccffb9fd993dcef29962c1e5abf474ceddd62f7443224bef2a7", 0x84}, {&(0x7f0000000f40)="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", 0x1000}], 0x5, &(0x7f0000001fc0)=[{0x38, 0x10c, 0x9, "a342fda9fce334f9dafde5300cf78e158aaace9598282d263890078007af3f9771e9548e13948838"}, {0x50, 0x0, 0xa22, "40d9193bc382a83fb296726f81134df224c1be2ec0f18ab98b9190c96a5481e86df5d86fdc7d0b0f9118a3c41eb75986aa8417a4904174cf63c108d052"}], 0x88}}], 0x2, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r5 = userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30}}, 0x60800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 19.910633909s ago: executing program 2 (id=647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) fstat(r1, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r4, &(0x7f0000000180)='./file0\x00', 0x224) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c85c2b40000000000000000feff00", @ANYRESDEC=0x0, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24008844}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="fc07755e6221ffa9eb8d7398e1877af247de7d664cc0d30175097e12f7302a8d8d5f3a119eeafa9cbc6109b82f95ab1464ac109b401eb2b00fc84a26044a3fd80036b40ec275de3baa6046e975e1311e385312e9e6af5e22a50af59f137689efef362704de8bd8e017"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x25, r4, 0x8, &(0x7f0000000300)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x3, 0x200, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r4, r4], 0x0, 0x10, 0x58, @void, @value}, 0x94) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000060000000400000091c6be", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000340)=""/210, 0x9}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13.139842045s ago: executing program 2 (id=662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet(0x2, 0x801, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) 10.003717656s ago: executing program 6 (id=680): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000340), 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000280)}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x4, r8, r9, 0x0, 0x0, 0xdead, 0x3, &(0x7f00000001c0)}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) 9.532034945s ago: executing program 2 (id=681): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc943, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x1000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x4, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000001b000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x50) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f00000006c0)=""/216, 0xd8}], 0x3, 0x5, 0x0) 8.036783163s ago: executing program 5 (id=683): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x6d4d, 0x400680) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x4040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000019300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000019500)={{r7, 0x4, 0x1, 0x3d1d, 0x3, 0x9, 0x0, 0x705, 0x8, 0x2, 0x8000, 0x2, 0x8, 0x2, 0xa}}) sendfile(r1, r2, 0x0, 0x80006) 7.531526216s ago: executing program 0 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) futex(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000bc0)={&(0x7f00000006c0)={{@my=0x0, 0x1}, {@local, 0xffefffff}, 0x400, "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"}, 0x418, 0x9}) 7.473081123s ago: executing program 6 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='find_free_extent\x00', r3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x100) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r6}, 0x18) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600), 0x0) close(r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 6.895401644s ago: executing program 5 (id=687): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0x20e0, 0x0, 0x0, 0x0}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) connect$inet(r5, &(0x7f0000000480)={0x2, 0xffff, @local}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0x32) sendfile(r1, r1, 0x0, 0x80001d00c0d0) 6.884475842s ago: executing program 6 (id=688): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921cacd900, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010001", 0x7) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @window={0x3, 0x3, 0x6}, @window={0x3, 0x10, 0x3}, @timestamp, @mss={0x2, 0x9}, @window={0x3, 0x94, 0x9}, @sack_perm], 0x7) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) r4 = getpgid(r3) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x2, 0x5001) r5 = open(&(0x7f0000000000)='.\x00', 0x420082, 0x24d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) 6.531115244s ago: executing program 0 (id=690): socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x6d4d, 0x400680) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec986dd", 0xffbf}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000019300)) 5.990162432s ago: executing program 3 (id=691): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x6, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) keyctl$dh_compute(0x10, &(0x7f0000000100), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4004, r3, 0x2}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r5, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) sched_rr_get_interval(r1, 0x0) fcntl$lock(r0, 0x24, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x4) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 5.655395367s ago: executing program 2 (id=692): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000087c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r2) ioctl$KDSKBLED(r5, 0x4b65, 0xfdfd) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1ff, 0x8, 0x34424752, 0x9, 0xb, [{0x0, 0x103}, {0x0, 0x7fff}, {}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {}, {0xffff61b9}], 0x0, 0x0, 0x0, 0x0, 0x6}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r6, &(0x7f00000028c0)=[{&(0x7f0000000300)="75715b2771a87262505b917e73ca8af4263209", 0x13}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.258475327s ago: executing program 6 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x83625fc5352ba305, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) 5.184048881s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000900c000000000000000009009500000000000000c2e409a5c5f89536521056ce2decaa6856ae9219fa96351cf8f2359a9788aec7c593c2b9729414adcda2d63f7cffe400d377bbb81ffb2310131d9e09040aebd976fb01dfeb68635ca6ec24cb7de85bf816edfeda453db665396de1a2b54379af208873ed350ba67d4409e42be2ab539f15e7830ccf3dcc4d0cb000"/162], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000000035c77af4ab00000000008510000002000000850000000500000095000000000000009500a52500000000e160067f966ef84ce96689ccecdf40b607e0855c830000000300000037f18777a3e6ca35a7cc9016a61ec63989a6172c6a4cbcac940932be6e556dc78391836f8e6a9ec326d852a77c5be1bac431a5231ebe1ca4fe983291f7f6ee9cb3712cbd06000044c720dddba7cc5298a55dc35bd61137bc78e67a3d0dc44117441927bd026c97fc59ed8a5efed83cf9aff7cf997f0757979cd987263abc4b697a53062dd4e7bf4d2e717b2838eb1decaf2197bdcba3929ba517c5af60c45d246a711685a7c00768e723038060eab780ebd275448320ac07ff8d4cbfdc06a72fb857e4fe2dfc97d9e6fd34f0ca0ef57cbb73bc1460624ca00ba6e8f9a9afa617fc7d68f567b9df15655e99f4e159eb6996dbc3f1bb1363f0a2fb9b4ee477efc10e9add22ee85c1661f18a8d539bddb8e55a0386d20c1545fed05a0a246d69527760d969f06de95edc10bee56e64612f2c5ad9f6b"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(r4, 0x541c, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x7, 0x0, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) 4.822016283s ago: executing program 3 (id=695): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 4.819970055s ago: executing program 5 (id=696): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioperm(0x0, 0x9, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000480)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x7, &(0x7f0000000400)=""/7, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r7, r8], &(0x7f0000000080), 0x10, 0x1ff, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x2, 0x1fe000}, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 4.651372114s ago: executing program 6 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e22, 0x4, 0x4e23, 0x101, 0x2, 0x0, 0x180, 0x21}, {0x3, 0x7dd8e330, 0x7, 0x4, 0x0, 0x9, 0x41c, 0x5}, {0xe, 0x8004, 0xe, 0x9}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x0, 0x7, 0x7, 0x1, 0x80}}, 0xf0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 4.291979718s ago: executing program 2 (id=698): socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, 0x0, 0x84) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 3.52193275s ago: executing program 5 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='find_free_extent\x00', r3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x100) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r6}, 0x18) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600), 0x0) close(r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 3.496264271s ago: executing program 0 (id=700): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x18, &(0x7f0000000800)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x2, 0x300) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x20000f7e) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x288000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x7ffffffd, 0xffffffffffffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x80, 0x3}, {0xb1, 0x0, 0x8, 0x1ff}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.404148603s ago: executing program 3 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) futex(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000bc0)={&(0x7f00000006c0)={{@my=0x0, 0x1}, {@local, 0xffefffff}, 0x400, "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"}, 0x418, 0x9}) 2.763098491s ago: executing program 5 (id=702): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.672238301s ago: executing program 3 (id=703): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, 0x3c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x70000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0xfffffffffffffecd, 0x0, 0x0, &(0x7f0000000180)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0xc}, &(0x7f0000000440)=0x6, 0x0, 0x774e, 0x2, 0x5, 0xfffffffffffffffd, 0xe, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x2}, 0x0, 0x0, 0x1, 0x7, 0xa, 0xffffffffffffffff, 0x10, 0x84}}], 0xb0, 0x24040800}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0x4d, 0x0, 0x0) 1.865311352s ago: executing program 3 (id=704): socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x6d4d, 0x400680) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x1, 0x2003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x4040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec986dd", 0xffbf}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000019300)) 1.720193795s ago: executing program 0 (id=705): add_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x1f4, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1.663229974s ago: executing program 5 (id=706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x20, 0xe, 0xc8, {0xc8, 0x23, "a1268a99841f91b891bad8d3f1362c5efd9f1d7e7bf2a74090c65f0c1c86729e207024bb04dbcfc089877139f3226ef8349d177d61c20ea0953ae9defba9ff15acc0802a1dd155fadb213461ec8e3a1bb27132b5cd5a9f53bfc2cc90fd1722b74bf5e7932c98906c6fea0219549d8e7744b65b8ca74fa6039e456aabafb37a452126741690beb53d5293738673265f3c9a67d78b8f2c77c3b4e7beb6bfb715c741c59892f1676eb1be5ec43bb03ecf55e1c5e4700531f22d9bd76d9b15b1e9a9a6d296b4625b"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000e40)={0x34, &(0x7f0000000bc0)={0x40, 0x31, 0xfa, "c252883239719c47ac95def5af4113c66241c2025ed333809c3a99b5b9057114b0a92fb7a5353687a303b2e94fa02adfb76d8372e8839bf0f4056e220668b4726ba2be4ab6bedb38e701f41f9e7a0106ffa806eea6b4d6087de3b41525a188905754a78c4b687f2b55d1bea984a357dfd61ccaf937a225330f8d056e36f1032484832c1fd69d3831bbb96d8c2aacc6c7d5ad6b098f5044d65b1d1846d989ad0b0066a11716863ea20506a6fb2fa3779e4272d79e1d6228675c5cd63740a64282d6a106c3f3169fc1c5e41ecc238920b7f05ed344f75de42852b11b85850a19824eca140c2a8728d4d919cbaa0e488a4174e0abd0560fd4617079"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x45, {0x43, "ea0a9bc2b8b350255c717c69e16344f480fb0698b69b3650b24e0c2b017740c52e4ec4269f2aa9658299545536998113e63939edecae69d11a8529bfed8df047405213"}}, &(0x7f0000000dc0)={0x20, 0x1, 0x1, 0x69}, &(0x7f0000000e00)={0x20, 0x0, 0x1, 0x9}}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xb0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0xda, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0xc, 0x4d}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x3, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x7, 0x40, 0x10, 0xe2}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x9, 0xf00f, 0x2, [0xf, 0x3f00]}]}, 0x2, [{0x67, &(0x7f00000002c0)=@string={0x67, 0x3, "439c0a4f8d6baf275acdda569029a8a564fe1814a3ceaa8824514b5325fdec261ce35927b35f20b47e7414eb61f828ad94b2f12e81675100a69ea4f8c5aa0f5d8182834d84b36ee280c9aac36077bd90928cfa7e049e047808ed2855c33e0b2545f909d93e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0x30, 0x101, {0x101, 0x0, "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"}}, &(0x7f0000000580)={0x0, 0x3, 0x77, @string={0x77, 0x3, "0a60d2db5a4fc3c18b6f89a27db04ff05825a88ed8aa655fc58ae0371264e36d88ae07dc27987e04f774702c64de2670a31b574968c733c664eccc147c6a849a940e2881741c957bf5ff2c70e511079531d7aaecf5bc53bfe2408a0c1fa8bdbf49f8311e158d897b3b8f1874db31c70183c9c7437f"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000640)={0x20, 0x11, 0xfe, "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"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x29}, &(0x7f0000000840)={0x20, 0x0, 0x72, {0x70, "6a33f6c4b3ac5b53939571fa3f0eba38d2569000c020420a39e6c58ecc710cc08a8a9f22b825b9205c43987e1dbb62d767e55b91e6d9e9a4c02ba0d228101c9772a2050b73c1ad9fe2d2b898661ed8ed2558c56181a65d787c5f3ef00e3b6c700d5181c185c3f95756c81b541d66baa1"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x8}}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0xc0d4) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 844.510921ms ago: executing program 3 (id=707): setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) mkdir(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_destroy(0x0) r2 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) ioctl$TUNSETIFF(r2, 0x400454ca, 0xfffffffffffffffd) read$FUSE(r2, 0x0, 0x0) 115.982352ms ago: executing program 6 (id=708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$procfs(0xffffff9c, &(0x7f0000002d00)='/proc/meminfo\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$isdn_base(0x22, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x7], [0x0, 0x0, 0x2, 0x80000000], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xe3d1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000009cd5977ae9c886dd602e5cea01143c0020010000000000000000000000000000ff0200000000000000000000000000010015"], 0x0) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}}, 0x10004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) 0s ago: executing program 0 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) r2 = socket(0x28, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000a40baf572ee5579dd8941531dc414b1026c8830a4710115cd2389376514589d2eae4bd2343de94e9ac33985773c0cf039dc61ae08c1efe717a9c4ad2127015baed4aadd17802161fc2a68864b05f14ffffc63b826608f9c2857d857a7ff2357e12af3e91b05003ebfcb37aeb85", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf2501000000000004000000400000000000000007800000018000000100", @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES32=r2, @ANYBLOB="05000a0025000000"], 0xffffffffffffff51}, 0x1, 0x0, 0x0, 0x2404c084}, 0x4000001) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): b 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.260933][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 106.369192][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 106.413255][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.424289][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.439473][ T58] usb 3-1: USB disconnect, device number 6 [ 106.473448][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.532326][ T1203] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.600628][ T5894] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 106.615883][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.669338][ T5894] usb 4-1: config 0 descriptor?? [ 106.699957][ T30] audit: type=1400 audit(1745726477.466:230): avc: denied { read write } for pid=6280 comm="syz.1.94" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.744055][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 106.770705][ T30] audit: type=1400 audit(1745726477.466:231): avc: denied { open } for pid=6280 comm="syz.1.94" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.839217][ T30] audit: type=1400 audit(1745726477.496:232): avc: denied { ioctl } for pid=6280 comm="syz.1.94" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.870863][ T6282] veth3: entered promiscuous mode [ 106.971127][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.114486][ T5894] ortek 0003:1223:3F07.0001: unexpected long global item [ 107.168196][ T5894] ortek 0003:1223:3F07.0001: probe with driver ortek failed with error -22 [ 107.556979][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.591146][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 107.614338][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.817861][ T30] audit: type=1400 audit(1745726478.576:233): avc: denied { read write } for pid=6263 comm="syz.3.89" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 108.028055][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 108.104668][ T30] audit: type=1400 audit(1745726478.576:234): avc: denied { open } for pid=6263 comm="syz.3.89" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 108.194256][ T5894] usb 4-1: USB disconnect, device number 5 [ 108.304305][ T6301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.99'. [ 108.326949][ T6301] netlink: 164 bytes leftover after parsing attributes in process `syz.2.99'. [ 108.336732][ T6301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.99'. [ 108.996250][ T30] audit: type=1400 audit(1745726479.766:235): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 109.515253][ T1203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.523042][ T1203] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 109.537050][ T1203] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 109.544802][ T1203] usb 5-1: can't read configurations, error -71 [ 109.739743][ T6315] capability: warning: `syz.4.104' uses deprecated v2 capabilities in a way that may be insecure [ 109.851257][ T30] audit: type=1400 audit(1745726480.606:236): avc: denied { create } for pid=6318 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.975523][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.008920][ T9] usb 1-1: too many configurations: 235, using maximum allowed: 8 [ 110.018548][ T30] audit: type=1400 audit(1745726480.626:237): avc: denied { write } for pid=6318 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.041782][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 110.049373][ T9] usb 1-1: can't read configurations, error -71 [ 110.402596][ T6332] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 110.517814][ T6335] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 111.341283][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.428435][ T5812] IPVS: starting estimator thread 0... [ 111.455508][ T6315] mmap: syz.4.104 (6315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.519813][ T30] audit: type=1400 audit(1745726482.286:238): avc: denied { create } for pid=6313 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.541180][ T6346] IPVS: using max 76 ests per chain, 182400 per kthread [ 111.577087][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.578014][ T30] audit: type=1400 audit(1745726482.286:239): avc: denied { listen } for pid=6313 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.607445][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.618640][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.688155][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.708458][ T6351] sch_fq: defrate 7 ignored. [ 111.714193][ T30] audit: type=1400 audit(1745726482.476:240): avc: denied { create } for pid=6350 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.728141][ T9] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 111.746451][ T6351] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 111.757451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.761488][ T30] audit: type=1400 audit(1745726482.516:241): avc: denied { mounton } for pid=6350 comm="syz.4.116" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 111.789373][ T6351] qnx6: wrong signature (magic) in superblock #1. [ 111.799021][ T9] usb 1-1: config 0 descriptor?? [ 111.814154][ T6351] qnx6: unable to read the first superblock [ 111.837301][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'. [ 111.863437][ T6351] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 112.233637][ T9] ortek 0003:1223:3F07.0002: unexpected long global item [ 112.241264][ T9] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 112.513766][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.668928][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.732397][ T30] audit: type=1400 audit(1745726995.968:242): avc: denied { create } for pid=6358 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.751863][ T30] audit: type=1400 audit(1745726995.988:243): avc: denied { mounton } for pid=6355 comm="syz.4.119" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.774174][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.785356][ T30] audit: type=1400 audit(1745726996.367:244): avc: denied { mounton } for pid=6355 comm="syz.4.119" path="/20/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 112.887251][ T5812] usb 1-1: USB disconnect, device number 6 [ 112.966075][ T30] audit: type=1400 audit(1745726996.599:245): avc: denied { mount } for pid=6355 comm="syz.4.119" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.989566][ T30] audit: type=1400 audit(1745726996.619:246): avc: denied { read write } for pid=6339 comm="syz.0.112" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.013472][ T30] audit: type=1400 audit(1745726996.619:247): avc: denied { open } for pid=6339 comm="syz.0.112" path="/20/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.151200][ T6375] ======================================================= [ 113.151200][ T6375] WARNING: The mand mount option has been deprecated and [ 113.151200][ T6375] and is ignored by this kernel. Remove the mand [ 113.151200][ T6375] option from the mount to silence this warning. [ 113.151200][ T6375] ======================================================= [ 113.186073][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.394126][ T30] audit: type=1400 audit(1745726996.638:248): avc: denied { ioctl } for pid=6339 comm="syz.0.112" path="/20/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.437260][ T30] audit: type=1400 audit(1745726997.171:249): avc: denied { mount } for pid=6373 comm="syz.1.123" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.478674][ T6375] capability: warning: `syz.1.123' uses 32-bit capabilities (legacy support in use) [ 115.575240][ T6401] Zero length message leads to an empty skb [ 115.625678][ T6405] netlink: 'syz.0.131': attribute type 2 has an invalid length. [ 115.673003][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 115.696614][ T6405] : entered promiscuous mode [ 115.710851][ T6410] random: crng reseeded on system resumption [ 116.339103][ T5820] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 116.348402][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.348460][ T5820] Bluetooth: hci2: Injecting HCI hardware error event [ 116.363721][ T5820] Bluetooth: hci2: hardware error 0x00 [ 116.604447][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.640057][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 117.282094][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.297649][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.317492][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.334491][ T5894] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 117.500506][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.576863][ T5894] usb 2-1: config 0 descriptor?? [ 117.741361][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.925431][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 117.968317][ T5812] usb 4-1: config 0 has no interfaces? [ 118.235499][ T5894] ortek 0003:1223:3F07.0003: unexpected long global item [ 118.243122][ T5894] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22 [ 118.260710][ T5812] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 118.309182][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.332556][ T5812] usb 4-1: Product: syz [ 118.360638][ T5812] usb 4-1: Manufacturer: syz [ 118.392499][ T5812] usb 4-1: SerialNumber: syz [ 118.440551][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.451530][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.490923][ T5812] usb 4-1: config 0 descriptor?? [ 118.541939][ T5812] usb 2-1: USB disconnect, device number 5 [ 118.550762][ T5820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 118.716762][ T5891] usb 4-1: USB disconnect, device number 6 [ 118.843327][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 118.843339][ T30] audit: type=1400 audit(1745727002.434:262): avc: denied { create } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.900496][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.918425][ T9] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 118.928512][ T30] audit: type=1400 audit(1745727002.502:263): avc: denied { write } for pid=6449 comm="syz.0.146" path="socket:[9134]" dev="sockfs" ino=9134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.957020][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 118.965040][ T9] usb 5-1: can't read configurations, error -71 [ 119.391675][ T5894] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 119.481939][ T30] audit: type=1400 audit(1745727003.070:264): avc: denied { create } for pid=6466 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.464391][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.560546][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.677093][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.691280][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.765434][ T5894] usb 1-1: Product: syz [ 120.769650][ T5894] usb 1-1: Manufacturer: syz [ 120.777077][ T5894] usb 1-1: SerialNumber: syz [ 120.815077][ T5861] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.978185][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 121.224840][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.236027][ T30] audit: type=1400 audit(1745727004.757:265): avc: denied { sys_module } for pid=6473 comm="syz.1.151" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.262065][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 121.280200][ T5861] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 121.298513][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.307386][ T5894] usb 1-1: 0:2 : does not exist [ 121.328538][ T5861] usb 4-1: config 0 descriptor?? [ 121.720798][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6450 comm=syz.0.146 [ 121.785565][ T5861] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.0004/input/input7 [ 122.002785][ T5861] uclogic 0003:28BD:0934.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 122.572804][ T6450] libceph: resolve '. [ 122.572804][ T6450] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 122.572804][ T6450] ' (ret=-3): failed [ 122.782147][ T30] audit: type=1400 audit(1745727006.309:266): avc: denied { name_bind } for pid=6490 comm="syz.1.156" src=16388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.877698][ T1203] usb 1-1: USB disconnect, device number 7 [ 124.940435][ T30] audit: type=1400 audit(1745727008.387:267): avc: denied { read } for pid=6490 comm="syz.1.156" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.976695][ T30] audit: type=1400 audit(1745727008.465:268): avc: denied { rename } for pid=5169 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.100083][ T30] audit: type=1400 audit(1745727008.465:269): avc: denied { unlink } for pid=5169 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.122671][ T30] audit: type=1400 audit(1745727008.465:270): avc: denied { create } for pid=5169 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.183094][ T6504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.192830][ T6504] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 125.203699][ T6504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.307445][ T5894] usb 4-1: USB disconnect, device number 7 [ 125.427787][ T30] audit: type=1400 audit(1745727008.909:271): avc: denied { read } for pid=6506 comm="syz.3.159" lport=49263 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.450982][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.600322][ T1203] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.886985][ T1203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.907621][ T1203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.950526][ T1203] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.989516][ T1203] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 126.008441][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.040784][ T1203] usb 2-1: config 0 descriptor?? [ 126.236681][ T30] audit: type=1400 audit(1745727009.580:272): avc: denied { write } for pid=6515 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.264543][ T30] audit: type=1400 audit(1745727009.678:273): avc: denied { execute } for pid=6517 comm="syz.2.163" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.292852][ T30] audit: type=1400 audit(1745727009.738:274): avc: denied { create } for pid=6509 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.414493][ T30] audit: type=1400 audit(1745727009.738:275): avc: denied { write } for pid=6509 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.442806][ T30] audit: type=1400 audit(1745727009.866:276): avc: denied { unmount } for pid=6515 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.461045][ T1203] ortek 0003:1223:3F07.0005: unexpected long global item [ 126.625190][ T1203] ortek 0003:1223:3F07.0005: probe with driver ortek failed with error -22 [ 126.669695][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.739952][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.232518][ T1203] usb 2-1: USB disconnect, device number 6 [ 127.654119][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.673904][ T6536] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 131.599578][ T6574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.610127][ T6574] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 131.625664][ T6574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.959919][ T30] audit: type=1400 audit(1745727015.364:277): avc: denied { read write } for pid=6568 comm="syz.4.177" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.966927][ T6571] netfs: Couldn't get user pages (rc=-14) [ 131.985010][ T30] audit: type=1400 audit(1745727015.364:278): avc: denied { open } for pid=6568 comm="syz.4.177" path="/32/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.009516][ T30] audit: type=1800 audit(1745727015.364:279): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.177" name="/" dev="9p" ino=2 res=0 errno=0 [ 132.029746][ T30] audit: type=1400 audit(1745727015.364:280): avc: denied { map } for pid=6568 comm="syz.4.177" path="/32/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.057341][ T1203] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.230824][ T1203] usb 4-1: Using ep0 maxpacket: 32 [ 132.251104][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.320382][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.561227][ T1203] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.575400][ T30] audit: type=1400 audit(1745727015.978:281): avc: denied { bind } for pid=6581 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.580932][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.661060][ T1203] usb 4-1: config 0 descriptor?? [ 132.671023][ T30] audit: type=1400 audit(1745727016.008:282): avc: denied { write } for pid=6581 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.710725][ T1203] hub 4-1:0.0: USB hub found [ 132.812824][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 132.819231][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 132.934670][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935709][ T1203] hub 4-1:0.0: 1 port detected [ 132.953526][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.971795][ T6589] ceph: No mds server is up or the cluster is laggy [ 133.217661][ T5861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.252633][ T6601] FAULT_INJECTION: forcing a failure. [ 133.252633][ T6601] name failslab, interval 1, probability 0, space 0, times 1 [ 133.265455][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.4.186 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 133.265478][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.265487][ T6601] Call Trace: [ 133.265493][ T6601] [ 133.265499][ T6601] dump_stack_lvl+0x16c/0x1f0 [ 133.265520][ T6601] should_fail_ex+0x512/0x640 [ 133.265535][ T6601] ? fs_reclaim_acquire+0xae/0x150 [ 133.265553][ T6601] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 133.265575][ T6601] should_failslab+0xc2/0x120 [ 133.265592][ T6601] __kmalloc_noprof+0xd2/0x510 [ 133.265620][ T6601] tomoyo_realpath_from_path+0xc2/0x6e0 [ 133.265640][ T6601] ? tomoyo_profile+0x47/0x60 [ 133.265658][ T6601] tomoyo_path_number_perm+0x245/0x580 [ 133.265672][ T6601] ? tomoyo_path_number_perm+0x237/0x580 [ 133.265686][ T6601] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.265703][ T6601] ? find_held_lock+0x2b/0x80 [ 133.265745][ T6601] ? find_held_lock+0x2b/0x80 [ 133.265763][ T6601] ? hook_file_ioctl_common+0x145/0x410 [ 133.265791][ T6601] ? __fget_files+0x20e/0x3c0 [ 133.265814][ T6601] security_file_ioctl+0x9b/0x240 [ 133.265830][ T6601] __x64_sys_ioctl+0xb7/0x200 [ 133.265845][ T6601] do_syscall_64+0xcd/0x260 [ 133.265864][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.265880][ T6601] RIP: 0033:0x7f88fd18e969 [ 133.265893][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.265907][ T6601] RSP: 002b:00007f88fe06c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.265922][ T6601] RAX: ffffffffffffffda RBX: 00007f88fd3b5fa0 RCX: 00007f88fd18e969 [ 133.265932][ T6601] RDX: 0000200000000000 RSI: 0000000000008983 RDI: 0000000000000003 [ 133.265938][ T6601] RBP: 00007f88fe06c090 R08: 0000000000000000 R09: 0000000000000000 [ 133.265945][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.265950][ T6601] R13: 0000000000000000 R14: 00007f88fd3b5fa0 R15: 00007ffcae40eff8 [ 133.265964][ T6601] [ 133.265991][ T6601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.420293][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 133.551008][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.563300][ T5861] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.628307][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.647368][ T5861] usb 2-1: config 0 descriptor?? [ 134.172733][ T5861] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.364902][ T30] audit: type=1400 audit(1745727017.674:283): avc: denied { read } for pid=6572 comm="syz.3.178" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 134.477444][ T6573] input: syz0 as /devices/virtual/input/input8 [ 134.533673][ T1203] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 134.577057][ T6573] input: failed to attach handler leds to device input8, error: -6 [ 135.362499][ T30] audit: type=1400 audit(1745727017.714:284): avc: denied { ioctl } for pid=6572 comm="syz.3.178" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.548357][ T30] audit: type=1400 audit(1745727018.855:285): avc: denied { create } for pid=6609 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.806871][ T30] audit: type=1400 audit(1745727018.885:286): avc: denied { bind } for pid=6609 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.813353][ T5861] usb 2-1: USB disconnect, device number 7 [ 135.880515][ T6619] trusted_key: encrypted_key: insufficient parameters specified [ 135.968213][ T6622] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 136.040454][ T1203] usb 4-1: USB disconnect, device number 8 [ 136.290340][ T6636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.301039][ T6636] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 136.316377][ T6636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.329127][ T1203] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.392586][ T5820] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 136.402202][ T5820] Bluetooth: hci1: Injecting HCI hardware error event [ 136.410872][ T5825] Bluetooth: hci1: hardware error 0x00 [ 136.471794][ T5861] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 136.763722][ T1203] usb 5-1: device descriptor read/64, error -71 [ 136.792494][ T5861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.803246][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.189961][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 137.189979][ T30] audit: type=1326 audit(1745727020.394:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7fc00000 [ 137.199205][ T5861] usb 4-1: string descriptor 0 read error: -22 [ 137.255893][ T5861] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.273258][ T30] audit: type=1400 audit(1745727020.394:294): avc: denied { create } for pid=6639 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.293855][ T30] audit: type=1400 audit(1745727020.404:295): avc: denied { read write } for pid=6639 comm="syz.0.198" path="socket:[10596]" dev="sockfs" ino=10596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.337633][ T1203] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.357239][ T30] audit: type=1326 audit(1745727020.404:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa7e0b8e969 code=0x7fc00000 [ 137.387949][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.421087][ T5861] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.451783][ T30] audit: type=1400 audit(1745727020.722:297): avc: denied { append } for pid=6644 comm="syz.2.199" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.520205][ T30] audit: type=1326 audit(1745727020.841:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7fc00000 [ 137.548836][ T1203] usb 5-1: device descriptor read/64, error -71 [ 137.595848][ T30] audit: type=1400 audit(1745727020.940:299): avc: denied { ioctl } for pid=6646 comm="syz.2.200" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 137.723135][ T1203] usb usb5-port1: attempt power cycle [ 137.948529][ T6653] overlayfs: missing 'workdir' [ 138.006230][ T6654] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.098846][ T30] audit: type=1400 audit(1745727021.358:300): avc: denied { append } for pid=6649 comm="syz.2.202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.196795][ T5892] usb 4-1: USB disconnect, device number 9 [ 138.351237][ T1203] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.374764][ T1203] usb 5-1: device descriptor read/8, error -71 [ 138.501218][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 138.517173][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.655762][ T1203] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.898853][ T1203] usb 5-1: device descriptor read/8, error -71 [ 139.028361][ T1203] usb usb5-port1: unable to enumerate USB device [ 139.238047][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.256484][ T6667] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 139.433306][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 139.480004][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 139.582925][ T30] audit: type=1400 audit(1745727022.918:301): avc: denied { create } for pid=6662 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.773955][ T30] audit: type=1400 audit(1745727022.928:302): avc: denied { read write } for pid=6662 comm="syz.2.205" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.778410][ T6669] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.797341][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.813086][ T6669] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.822519][ T6669] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.832895][ T6669] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.873433][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.010767][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.021468][ T6674] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 140.099863][ T6686] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 140.119322][ T6686] team0: Device veth1_macvtap failed to register rx_handler [ 140.175992][ T5892] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.190626][ T5892] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.235508][ T5891] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 140.255282][ T5892] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.365532][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.383797][ T6675] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.398308][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.923514][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.173549][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.204070][ T5891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.219855][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.271624][ T5891] usb 2-1: Product: syz [ 141.295205][ T5891] usb 2-1: Manufacturer: syz [ 141.307142][ T5891] usb 2-1: SerialNumber: syz [ 141.978829][ T5891] usb 2-1: 0:2 : does not exist [ 142.451418][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 142.451432][ T30] audit: type=1400 audit(1745727025.783:314): avc: denied { write } for pid=6710 comm="syz.3.220" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 142.536043][ T30] audit: type=1400 audit(1745727025.823:315): avc: denied { map } for pid=6710 comm="syz.3.220" path="socket:[9784]" dev="sockfs" ino=9784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.566892][ T30] audit: type=1400 audit(1745727025.823:316): avc: denied { read } for pid=6710 comm="syz.3.220" path="socket:[9784]" dev="sockfs" ino=9784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.591748][ T30] audit: type=1400 audit(1745727025.843:317): avc: denied { map } for pid=6710 comm="syz.3.220" path="/proc/151/map_files" dev="proc" ino=9785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.616828][ T30] audit: type=1400 audit(1745727025.843:318): avc: denied { write } for pid=6710 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.820718][ T5855] usb 3-1: USB disconnect, device number 7 [ 142.840614][ T6672] delete_channel: no stack [ 142.841094][ T6720] syz.0.223 uses obsolete (PF_INET,SOCK_PACKET) [ 142.996785][ T6669] libceph: resolve '. [ 142.996785][ T6669] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 142.996785][ T6669] ' (ret=-3): failed [ 143.350317][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.362691][ T6733] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 143.594909][ T6734] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 143.606554][ T6734] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 143.810617][ T30] audit: type=1400 audit(1745727026.938:319): avc: denied { firmware_load } for pid=6726 comm="syz.0.225" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 143.958153][ T6737] random: crng reseeded on system resumption [ 144.081059][ T30] audit: type=1400 audit(1745727027.406:320): avc: denied { append } for pid=6740 comm="syz.4.229" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 144.091020][ T5892] usb 2-1: USB disconnect, device number 8 [ 144.186246][ T30] audit: type=1400 audit(1745727027.506:321): avc: denied { read } for pid=6739 comm="syz.3.227" name="mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 144.606536][ T5861] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.087708][ T30] audit: type=1400 audit(1745727027.506:322): avc: denied { open } for pid=6739 comm="syz.3.227" path="/dev/input/mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.579702][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 146.409036][ T30] audit: type=1400 audit(1745727027.506:323): avc: denied { ioctl } for pid=6739 comm="syz.3.227" path="/dev/input/mouse0" dev="devtmpfs" ino=988 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.434524][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.458147][ T6743] bond1 (unregistering): Released all slaves [ 146.480842][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.497877][ T5861] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 146.516014][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.525041][ T5861] usb 5-1: Product: syz [ 146.529722][ T5861] usb 5-1: Manufacturer: syz [ 146.536620][ T5861] usb 5-1: SerialNumber: syz [ 146.834340][ T5861] usb 5-1: config 0 descriptor?? [ 147.279135][ T5861] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 147.890805][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 147.899847][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 147.914728][ T6781] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.923639][ T6781] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.932563][ T6781] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.941386][ T6781] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.018024][ T5855] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.395841][ T6786] libceph: resolve '. [ 148.395841][ T6786] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 148.395841][ T6786] ' (ret=-3): failed [ 148.543683][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.543702][ T30] audit: type=1400 audit(1745727031.820:328): avc: denied { map } for pid=6744 comm="syz.4.230" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.573565][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.581215][ T30] audit: type=1400 audit(1745727031.820:329): avc: denied { execute } for pid=6744 comm="syz.4.230" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.604352][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.618967][ T6784] netlink: 96 bytes leftover after parsing attributes in process `syz.1.239'. [ 148.625262][ T5861] usb 5-1: USB disconnect, device number 11 [ 148.753761][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.775613][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.795599][ T30] audit: type=1400 audit(1745727031.820:330): avc: denied { create } for pid=6744 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.815604][ T30] audit: type=1400 audit(1745727031.820:331): avc: denied { setopt } for pid=6744 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.850733][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.892622][ T5855] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 148.911081][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.927176][ T5855] usb 4-1: config 0 descriptor?? [ 149.053667][ T30] audit: type=1400 audit(1745727032.368:332): avc: denied { bind } for pid=6795 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.073931][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.084115][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 149.109163][ T30] audit: type=1400 audit(1745727032.398:333): avc: denied { setopt } for pid=6795 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.130083][ T30] audit: type=1400 audit(1745727032.418:334): avc: denied { setopt } for pid=6795 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.159495][ T30] audit: type=1400 audit(1745727032.418:335): avc: denied { read } for pid=6795 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.427173][ T30] audit: type=1400 audit(1745727032.737:336): avc: denied { mount } for pid=6802 comm="syz.0.248" name="/" dev="autofs" ino=10794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 149.520925][ T6806] random: crng reseeded on system resumption [ 149.679362][ T5855] ortek 0003:1223:3F07.0006: unexpected long global item [ 149.692725][ T5855] ortek 0003:1223:3F07.0006: probe with driver ortek failed with error -22 [ 149.909265][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.924543][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.107512][ T5855] usb 4-1: USB disconnect, device number 10 [ 150.529980][ T6827] overlayfs: invalid origin (000000790065762f6e65742f74756e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 150.588904][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 150.598685][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 150.653342][ T30] audit: type=1400 audit(1745727033.953:337): avc: denied { read write } for pid=6833 comm="syz.4.256" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.729784][ T6834] program syz.4.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.768449][ T6834] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 150.958850][ T6832] libceph: resolve '. [ 150.958850][ T6832] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 150.958850][ T6832] ' (ret=-3): failed [ 152.741252][ T6862] random: crng reseeded on system resumption [ 154.053995][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 154.054011][ T30] audit: type=1400 audit(1745727037.345:347): avc: denied { create } for pid=6877 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.533972][ T30] audit: type=1400 audit(1745727037.444:348): avc: denied { ioctl } for pid=6877 comm="syz.1.267" path="socket:[10929]" dev="sockfs" ino=10929 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.592472][ T6881] batman_adv: batadv0: Adding interface: dummy0 [ 154.602830][ T6881] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.745358][ T30] audit: type=1400 audit(1745727038.023:349): avc: denied { mount } for pid=6879 comm="syz.3.269" name="/" dev="ramfs" ino=10097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.010281][ T6881] batman_adv: batadv0: Interface activated: dummy0 [ 155.129892][ T6882] batadv0: mtu less than device minimum [ 155.166042][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.177378][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.188243][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.199069][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.210740][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.222090][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.233433][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.244811][ T6882] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.991435][ T30] audit: type=1400 audit(1745727039.261:350): avc: denied { block_suspend } for pid=6900 comm="syz.1.275" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.037472][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 156.087146][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 156.140416][ T6911] evm: overlay not supported [ 156.401844][ T6907] libceph: resolve '. [ 156.401844][ T6907] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 156.401844][ T6907] ' (ret=-3): failed [ 156.762872][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 156.934464][ T30] audit: type=1400 audit(1745727040.219:351): avc: denied { setattr } for pid=6927 comm="syz.4.281" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.030553][ T5894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.184155][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.205806][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.219447][ T5894] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.229078][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.240107][ T5894] usb 2-1: SerialNumber: syz [ 157.468452][ T5894] usb 2-1: 0:2 : does not exist [ 157.491638][ T5894] usb 2-1: unit 5: unexpected type 0x03 [ 157.519296][ T5894] usb 2-1: USB disconnect, device number 9 [ 157.541985][ T5802] udevd[5802]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 157.561831][ T5802] udevd[5802]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 158.210265][ T30] audit: type=1400 audit(1745727041.497:352): avc: denied { ioctl } for pid=6941 comm="syz.0.287" path="socket:[11270]" dev="sockfs" ino=11270 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.268654][ T971] IPVS: starting estimator thread 0... [ 158.806124][ T6945] IPVS: using max 46 ests per chain, 110400 per kthread [ 159.003861][ T30] audit: type=1400 audit(1745727042.255:353): avc: denied { ioctl } for pid=6949 comm="syz.2.291" path="socket:[11286]" dev="sockfs" ino=11286 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 159.130730][ T30] audit: type=1400 audit(1745727042.415:354): avc: denied { write } for pid=6952 comm="syz.2.292" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 159.189809][ T6954] netlink: 'syz.3.289': attribute type 4 has an invalid length. [ 159.396062][ T5855] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.571200][ T5855] usb 2-1: device descriptor read/64, error -71 [ 159.577971][ T30] audit: type=1400 audit(1745727042.844:355): avc: denied { setopt } for pid=6952 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.865362][ T5855] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.017101][ T5855] usb 2-1: device descriptor read/64, error -71 [ 161.209835][ T5855] usb usb2-port1: attempt power cycle [ 161.768113][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.091031][ T30] audit: type=1400 audit(1745727045.371:356): avc: denied { mount } for pid=6982 comm="syz.0.300" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.443235][ T6985] overlay: ./file0 is not a directory [ 165.140121][ T6944] net_ratelimit: 11 callbacks suppressed [ 165.140135][ T6944] Set syz1 is full, maxelem 65536 reached [ 165.213703][ T5855] usb 2-1: device descriptor read/8, error -71 [ 165.747239][ T30] audit: type=1400 audit(1745727049.026:357): avc: denied { create } for pid=7006 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.835492][ T30] audit: type=1400 audit(1745727049.116:358): avc: denied { read } for pid=7006 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.922610][ T7012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.933340][ T7012] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 165.948672][ T7012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.067564][ T7030] FAULT_INJECTION: forcing a failure. [ 168.067564][ T7030] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.105585][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.2.314 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 168.105611][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.105620][ T7030] Call Trace: [ 168.105626][ T7030] [ 168.105632][ T7030] dump_stack_lvl+0x16c/0x1f0 [ 168.105657][ T7030] should_fail_ex+0x512/0x640 [ 168.105680][ T7030] should_fail_alloc_page+0xe7/0x130 [ 168.105699][ T7030] prepare_alloc_pages+0x3c2/0x610 [ 168.105725][ T7030] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 168.105755][ T7030] ? mark_held_locks+0x49/0x80 [ 168.105779][ T7030] ? finish_task_switch.isra.0+0x221/0xc10 [ 168.105802][ T7030] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 168.105822][ T7030] ? rcu_is_watching+0x12/0xc0 [ 168.105843][ T7030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.105881][ T7030] ? __lock_acquire+0xaa4/0x1ba0 [ 168.105918][ T7030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.105947][ T7030] ? policy_nodemask+0xea/0x4e0 [ 168.105965][ T7030] alloc_pages_mpol+0x1fb/0x550 [ 168.105983][ T7030] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 168.106007][ T7030] folio_alloc_mpol_noprof+0x36/0x2f0 [ 168.106028][ T7030] alloc_migration_target_by_mpol+0x246/0x490 [ 168.106051][ T7030] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 168.106072][ T7030] ? __pfx___might_resched+0x10/0x10 [ 168.106092][ T7030] ? mtree_range_walk+0x718/0xc00 [ 168.106113][ T7030] migrate_pages_batch+0x3bc/0x31a0 [ 168.106136][ T7030] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 168.106166][ T7030] ? __pfx_migrate_pages_batch+0x10/0x10 [ 168.106190][ T7030] ? __pfx_walk_pgd_range+0x10/0x10 [ 168.106209][ T7030] migrate_pages_sync+0x12d/0x8a0 [ 168.106225][ T7030] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 168.106241][ T7030] ? queue_pages_test_walk+0x279/0x410 [ 168.106252][ T7030] ? __pfx_find_vma+0x10/0x10 [ 168.106264][ T7030] ? __pfx_migrate_pages_sync+0x10/0x10 [ 168.106283][ T7030] migrate_pages+0x1b28/0x2350 [ 168.106296][ T7030] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 168.106314][ T7030] ? __pfx_migrate_pages+0x10/0x10 [ 168.106328][ T7030] ? find_held_lock+0x2b/0x80 [ 168.106343][ T7030] ? up_write+0x1b2/0x520 [ 168.106354][ T7030] do_mbind+0x6f0/0xf30 [ 168.106371][ T7030] ? __pfx_do_mbind+0x10/0x10 [ 168.106382][ T7030] ? find_held_lock+0x2b/0x80 [ 168.106395][ T7030] ? ksys_write+0x190/0x240 [ 168.106416][ T7030] ? __pfx_get_nodes+0x10/0x10 [ 168.106426][ T7030] ? __fget_files+0x20e/0x3c0 [ 168.106445][ T7030] kernel_mbind+0x1e3/0x1f0 [ 168.106459][ T7030] ? __pfx_kernel_mbind+0x10/0x10 [ 168.106471][ T7030] ? rcu_is_watching+0x12/0xc0 [ 168.106486][ T7030] do_syscall_64+0xcd/0x260 [ 168.106500][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.106511][ T7030] RIP: 0033:0x7fbd0ad8e969 [ 168.106520][ T7030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.106531][ T7030] RSP: 002b:00007fbd0bb58038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 168.106542][ T7030] RAX: ffffffffffffffda RBX: 00007fbd0afb6080 RCX: 00007fbd0ad8e969 [ 168.106549][ T7030] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 168.106555][ T7030] RBP: 00007fbd0bb58090 R08: 0000000000000000 R09: 0000000000000002 [ 168.106561][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.106567][ T7030] R13: 0000000000000000 R14: 00007fbd0afb6080 R15: 00007ffc28cde3d8 [ 168.106580][ T7030] [ 169.581876][ T7035] netlink: 96 bytes leftover after parsing attributes in process `syz.2.315'. [ 169.800469][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 169.814008][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 169.843343][ T7040] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.852427][ T7040] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.861340][ T7040] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.870538][ T7040] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.038145][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.080332][ T7048] : renamed from bond0 (while UP) [ 170.227017][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.257014][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.277149][ T5892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.296439][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.304557][ T58] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 170.322866][ T5892] usb 3-1: SerialNumber: syz [ 170.480127][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.497156][ T58] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.522011][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.539857][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.603961][ T30] audit: type=1400 audit(1745727053.882:359): avc: denied { watch } for pid=7037 comm="syz.2.316" path="/68" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.700392][ T30] audit: type=1400 audit(1745727053.882:360): avc: denied { watch_sb watch_reads } for pid=7037 comm="syz.2.316" path="/68" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.378567][ T58] usb 4-1: Product: syz [ 172.383137][ T58] usb 4-1: Manufacturer: syz [ 172.702452][ T58] usb 4-1: SerialNumber: syz [ 172.860333][ T58] usb 4-1: 0:2 : does not exist [ 172.898274][ T30] audit: type=1326 audit(1745727056.170:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 172.929499][ T5892] usb 3-1: 0:2 : does not exist [ 172.979522][ T58] usb 4-1: USB disconnect, device number 11 [ 173.004790][ T5892] usb 3-1: unit 5: unexpected type 0x0c [ 173.068476][ T30] audit: type=1326 audit(1745727056.170:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 173.229901][ T5892] usb 3-1: USB disconnect, device number 8 [ 173.253555][ T30] audit: type=1326 audit(1745727056.170:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 173.744477][ T7058] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 173.819303][ T30] audit: type=1326 audit(1745727056.170:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 173.937355][ T30] audit: type=1326 audit(1745727056.170:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 173.962920][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 174.015515][ T30] audit: type=1326 audit(1745727056.210:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 174.054677][ T7065] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.084352][ T7065] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.093452][ T30] audit: type=1326 audit(1745727056.210:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 174.134871][ T7065] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.159812][ T7065] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.199569][ T7065] geneve2: entered promiscuous mode [ 174.209348][ T30] audit: type=1326 audit(1745727056.210:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 174.219814][ T7065] geneve2: entered allmulticast mode [ 174.243845][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.256000][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.266639][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.276100][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.290059][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.297744][ T30] audit: type=1326 audit(1745727056.220:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 174.329981][ T30] audit: type=1326 audit(1745727056.220:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7052 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e0b8e969 code=0x7ffc0000 [ 175.955218][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 176.580429][ T5825] Bluetooth: hci5: command tx timeout [ 178.402926][ T5855] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 178.540209][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7103 comm=syz.3.331 [ 178.577314][ T5855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.639748][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.650103][ T5825] Bluetooth: hci5: command tx timeout [ 178.685491][ T5855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.696089][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.705049][ T5855] usb 4-1: Product: syz [ 178.721553][ T5855] usb 4-1: Manufacturer: syz [ 178.729548][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.738355][ T5855] usb 4-1: SerialNumber: syz [ 178.746095][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.758225][ T7070] bridge_slave_0: entered allmulticast mode [ 178.770099][ T7070] bridge_slave_0: entered promiscuous mode [ 178.783008][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.951186][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.961888][ T7070] bridge_slave_1: entered allmulticast mode [ 178.969731][ T7070] bridge_slave_1: entered promiscuous mode [ 179.047133][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.073487][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.185819][ T5855] usb 4-1: 0:2 : does not exist [ 179.233688][ T7070] team0: Port device team_slave_0 added [ 179.281677][ T7070] team0: Port device team_slave_1 added [ 179.360753][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.389344][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.457623][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.471381][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.481150][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.507552][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.550820][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.941399][ T7104] libceph: resolve '. [ 179.941399][ T7104] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 179.941399][ T7104] ' (ret=-3): failed [ 180.271801][ T7070] hsr_slave_0: entered promiscuous mode [ 180.292696][ T7070] hsr_slave_1: entered promiscuous mode [ 180.365477][ T7070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.385213][ T7070] Cannot create hsr debugfs directory [ 180.601396][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.612159][ T7129] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 180.627819][ T7129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.932658][ T5825] Bluetooth: hci5: command tx timeout [ 181.063436][ T5855] usb 4-1: USB disconnect, device number 12 [ 181.157764][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.167153][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.190535][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.200241][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.208448][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.811913][ T3455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.830811][ T3455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.877466][ T7070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.992224][ T3455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.006948][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 182.006965][ T30] audit: type=1400 audit(1745727065.276:410): avc: denied { cmd } for pid=7147 comm="syz.0.342" path="socket:[12634]" dev="sockfs" ino=12634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.053522][ T3455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.239327][ T7070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.428381][ T7070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.509880][ T3455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.544253][ T3455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.561510][ T5820] Bluetooth: hci5: command tx timeout [ 183.567068][ T5825] Bluetooth: hci6: command tx timeout [ 183.594157][ T7070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.760796][ T3455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.807693][ T3455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.230338][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 184.283079][ T30] audit: type=1400 audit(1745727067.465:411): avc: denied { name_connect } for pid=7160 comm="syz.0.345" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 184.467308][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.604459][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 184.728342][ T3455] bridge_slave_1: left allmulticast mode [ 184.734280][ T3455] bridge_slave_1: left promiscuous mode [ 184.742870][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.765970][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.785047][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.803796][ T3455] bridge_slave_0: left allmulticast mode [ 184.810678][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.833759][ T3455] bridge_slave_0: left promiscuous mode [ 184.842970][ T30] audit: type=1400 audit(1745727068.115:412): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.843806][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.875844][ T5894] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 184.875973][ T30] audit: type=1400 audit(1745727068.115:413): avc: denied { read } for pid=5481 comm="dhcpcd" name="n102" dev="tmpfs" ino=3224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.886801][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.039167][ T5894] usb 4-1: config 0 descriptor?? [ 185.139883][ T30] audit: type=1400 audit(1745727068.115:414): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.258463][ T30] audit: type=1400 audit(1745727068.115:415): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.524385][ T5894] ortek 0003:1223:3F07.0007: unexpected long global item [ 185.538315][ T5894] ortek 0003:1223:3F07.0007: probe with driver ortek failed with error -22 [ 185.548405][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.567509][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.580416][ T3455] bond0 (unregistering): Released all slaves [ 185.591533][ T7174] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 185.615661][ T5813] Bluetooth: hci6: command tx timeout [ 185.683801][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.704499][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.736337][ T7130] bridge_slave_0: entered allmulticast mode [ 185.771109][ T7130] bridge_slave_0: entered promiscuous mode [ 185.793627][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.832759][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.846991][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.855710][ T30] audit: type=1400 audit(1745727069.124:416): avc: denied { read } for pid=7182 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.891321][ T30] audit: type=1400 audit(1745727069.124:417): avc: denied { open } for pid=7182 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.919540][ T30] audit: type=1400 audit(1745727069.124:418): avc: denied { getattr } for pid=7182 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.946922][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 186.094392][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.103861][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.185346][ T7190] overlayfs: failed to clone upperpath [ 186.526517][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 186.532622][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 186.546046][ T7130] bridge_slave_1: entered allmulticast mode [ 186.558257][ T7130] bridge_slave_1: entered promiscuous mode [ 186.608424][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.658421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.665538][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.682105][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.750424][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.752065][ T30] audit: type=1400 audit(1745727070.014:419): avc: denied { write } for pid=7181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.757602][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.930175][ T3455] hsr_slave_0: left promiscuous mode [ 186.944311][ T3455] hsr_slave_1: left promiscuous mode [ 186.959534][ T3455] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.969330][ T3455] batman_adv: batadv0: Removing interface: dummy0 [ 186.980406][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.988284][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.991309][ T7203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.015374][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.037737][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.058783][ T3455] veth1_macvtap: left promiscuous mode [ 187.064623][ T3455] veth0_macvtap: left promiscuous mode [ 187.072369][ T3455] veth1_vlan: left promiscuous mode [ 187.082248][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 187.082265][ T30] audit: type=1400 audit(1745727070.354:426): avc: denied { ioctl } for pid=7198 comm="syz.2.350" path="socket:[12908]" dev="sockfs" ino=12908 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.368229][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 187.394058][ T5891] usb 4-1: USB disconnect, device number 13 [ 187.430195][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 187.481572][ T7208] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.351'. [ 187.494488][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 187.535231][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 187.552217][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.566633][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.577644][ T30] audit: type=1400 audit(1745727070.844:427): avc: denied { create } for pid=7207 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.584395][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.609630][ T10] usb 3-1: Product: syz [ 187.614201][ T10] usb 3-1: Manufacturer: syz [ 187.625968][ T10] usb 3-1: SerialNumber: syz [ 187.636967][ T10] usb 3-1: config 0 descriptor?? [ 187.685762][ T5825] Bluetooth: hci6: command tx timeout [ 187.872577][ T7130] team0: Port device team_slave_0 added [ 187.924258][ T7130] team0: Port device team_slave_1 added [ 188.014919][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.022546][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.061858][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.076526][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.091432][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.121660][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.840936][ T7130] hsr_slave_0: entered promiscuous mode [ 188.848055][ T7130] hsr_slave_1: entered promiscuous mode [ 188.856476][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.865299][ T7130] Cannot create hsr debugfs directory [ 189.078503][ T30] audit: type=1400 audit(1745727072.344:428): avc: denied { create } for pid=7225 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.132590][ T30] audit: type=1400 audit(1745727072.344:429): avc: denied { getopt } for pid=7225 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.489589][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.511968][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 189.620385][ T7130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.660516][ T7130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.712758][ T7130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.781015][ T5825] Bluetooth: hci6: command tx timeout [ 189.792139][ T7130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.967862][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 189.980423][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 190.095837][ T10] usb 3-1: USB disconnect, device number 9 [ 190.193659][ T30] audit: type=1400 audit(1745727073.453:430): avc: denied { ioctl } for pid=7259 comm="syz.2.362" path="socket:[13274]" dev="sockfs" ino=13274 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.270614][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.446974][ T971] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 190.461769][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.508111][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.515231][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.596351][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.603640][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.626761][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 190.654591][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.689892][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.712708][ T7070] veth0_vlan: entered promiscuous mode [ 190.727354][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.765585][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.786385][ T971] usb 4-1: config 0 descriptor?? [ 190.805049][ T7070] veth1_vlan: entered promiscuous mode [ 190.815037][ T971] hub 4-1:0.0: USB hub found [ 190.949298][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.968952][ T7070] veth0_macvtap: entered promiscuous mode [ 190.983431][ T7070] veth1_macvtap: entered promiscuous mode [ 191.074486][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.113432][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.124385][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 191.137193][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 191.146146][ T10] usb 3-1: config 179 has no interface number 0 [ 191.152459][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 191.166910][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.181154][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.191982][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 191.203666][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.209856][ T971] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.215498][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 55, changing to 9 [ 191.230067][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.241858][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.249675][ T30] audit: type=1400 audit(1745727074.493:431): avc: denied { create } for pid=7261 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 191.276234][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.292973][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 191.299322][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.304728][ T30] audit: type=1400 audit(1745727074.493:432): avc: denied { write } for pid=7261 comm="syz.3.361" path="socket:[13329]" dev="sockfs" ino=13329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 191.344365][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 191.348188][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.367428][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 191.375134][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 191.393525][ T30] audit: type=1400 audit(1745727074.493:433): avc: denied { nlmsg_read } for pid=7261 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 191.419499][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.429527][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.431859][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.493085][ T7280] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.522852][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 191.566724][ T7070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.577140][ T7070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.586025][ T971] usbhid 4-1:0.0: can't add hid device: -71 [ 191.592927][ T7070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.601985][ T971] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.610635][ T7070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.627303][ T5172] input input11: unable to receive magic message: -110 [ 191.637367][ T971] usb 4-1: USB disconnect, device number 14 [ 191.654515][ T5172] input input11: unable to receive magic message: -32 [ 191.757961][ T5172] input input11: unable to receive magic message: -32 [ 191.856215][ T5172] input input11: unable to receive magic message: -32 [ 191.961298][ T6697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.991212][ T6697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.058919][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.077972][ T7302] input: syz1 as /devices/virtual/input/input12 [ 192.097753][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.153209][ T30] audit: type=1400 audit(1745727075.403:434): avc: denied { mounton } for pid=7070 comm="syz-executor" path="/root/syzkaller.4Y7C0E/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 192.203641][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.658742][ T7331] warning: `syz.5.319' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.774071][ T7335] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 192.822202][ T7336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.833020][ T7336] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 192.845282][ T7336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.733624][ T7130] veth0_vlan: entered promiscuous mode [ 194.092586][ T7130] veth1_vlan: entered promiscuous mode [ 194.122419][ T5855] usb 3-1: USB disconnect, device number 10 [ 194.128422][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.149951][ T5855] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 194.210781][ T30] audit: type=1400 audit(1745727077.483:435): avc: denied { setrlimit } for pid=7352 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 194.439839][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446169][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585071][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.592948][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.984884][ T30] audit: type=1400 audit(1745727077.872:436): avc: denied { setopt } for pid=7358 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.038552][ T7362] fuse: Bad value for 'fd' [ 195.304105][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.319204][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.802940][ T7340] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.813079][ T7340] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.822692][ T7340] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.831746][ T7340] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.020757][ T7130] veth0_macvtap: entered promiscuous mode [ 196.091904][ T7368] pim6reg1: entered promiscuous mode [ 196.117798][ T7368] pim6reg1: entered allmulticast mode [ 196.190147][ T7130] veth1_macvtap: entered promiscuous mode [ 196.277051][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.300453][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.768475][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.792323][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 196.801431][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.818538][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.828861][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.839751][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.851103][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.862005][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.876409][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.894044][ T7130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.908517][ T7130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.917821][ T7130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.926597][ T7130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.317164][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.327345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.335187][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.407066][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.595003][ T7401] xt_hashlimit: size too large, truncated to 1048576 [ 197.903072][ T30] audit: type=1400 audit(1745727080.842:437): avc: denied { bind } for pid=7395 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.847789][ T30] audit: type=1400 audit(1745727080.852:438): avc: denied { write } for pid=7395 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.532059][ T30] audit: type=1400 audit(1745727083.802:439): avc: denied { read append } for pid=7423 comm="syz.3.391" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.842222][ T30] audit: type=1400 audit(1745727083.802:440): avc: denied { open } for pid=7423 comm="syz.3.391" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.999369][ T30] audit: type=1400 audit(1745727084.092:441): avc: denied { map } for pid=7423 comm="syz.3.391" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 201.425655][ T30] audit: type=1400 audit(1745727084.092:442): avc: denied { write execute } for pid=7423 comm="syz.3.391" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 202.137616][ T30] audit: type=1400 audit(1745727085.402:443): avc: denied { ioctl } for pid=7451 comm="syz.6.396" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 202.313851][ T30] audit: type=1400 audit(1745727085.581:444): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 202.957606][ T7482] netlink: 'syz.6.401': attribute type 1 has an invalid length. [ 203.004573][ T7482] netlink: 224 bytes leftover after parsing attributes in process `syz.6.401'. [ 203.063312][ T7482] geneve1: entered promiscuous mode [ 204.094630][ T30] audit: type=1804 audit(1745727087.361:445): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.406" name="file0" dev="ramfs" ino=14979 res=1 errno=0 [ 204.155044][ T30] audit: type=1804 audit(1745727087.391:446): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.406" name="file0" dev="ramfs" ino=14979 res=1 errno=0 [ 204.297445][ T5825] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 204.530761][ T30] audit: type=1400 audit(1745727087.801:447): avc: denied { bind } for pid=7522 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.667898][ T971] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 205.457253][ T971] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 205.498359][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.506399][ T971] usb 7-1: Product: syz [ 205.547951][ T971] usb 7-1: Manufacturer: syz [ 205.565972][ T971] usb 7-1: SerialNumber: syz [ 205.588829][ T971] usb 7-1: config 0 descriptor?? [ 205.825789][ T971] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 205.855841][ T971] airspy 7-1:0.0: Could not detect board [ 205.874260][ T971] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 205.908290][ T971] usb 7-1: USB disconnect, device number 2 [ 206.226423][ T7553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.904213][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'. [ 206.993633][ T30] audit: type=1400 audit(1745727090.241:448): avc: denied { read } for pid=7568 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.027385][ T7567] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 207.198097][ T971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.538163][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 207.584056][ T971] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.631307][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.656403][ T7582] veth0_vlan: entered allmulticast mode [ 207.665054][ T971] usb 4-1: Product: syz [ 207.681034][ T971] usb 4-1: Manufacturer: syz [ 207.685680][ T971] usb 4-1: SerialNumber: syz [ 207.731990][ T971] usb 4-1: config 0 descriptor?? [ 207.966007][ T971] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.412115][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 208.424697][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 208.437686][ T5820] Bluetooth: hci3: hardware error 0x00 [ 209.178794][ T5855] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 209.472322][ T5855] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 209.521885][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.554504][ T5855] usb 3-1: Product: syz [ 209.584196][ T5855] usb 3-1: Manufacturer: syz [ 209.600245][ T5855] usb 3-1: SerialNumber: syz [ 209.622937][ T5855] usb 3-1: config 0 descriptor?? [ 209.668624][ T30] audit: type=1400 audit(1745727092.941:449): avc: denied { connect } for pid=7615 comm="syz.6.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 210.188623][ T5855] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 210.196292][ T971] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 210.220300][ T971] usb 4-1: USB disconnect, device number 15 [ 210.262053][ T5855] airspy 3-1:0.0: Could not detect board [ 210.312802][ T5855] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 210.352906][ T5855] usb 3-1: USB disconnect, device number 11 [ 210.488290][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 211.396203][ T7644] Invalid source name [ 211.907914][ T30] audit: type=1400 audit(1745727095.171:450): avc: denied { append } for pid=7645 comm="syz.2.431" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.226300][ T7658] netlink: 'syz.6.432': attribute type 4 has an invalid length. [ 212.553095][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.969470][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 212.984266][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.000268][ T5892] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 213.025885][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.035577][ T5892] usb 3-1: Product: syz [ 213.044657][ T5892] usb 3-1: Manufacturer: syz [ 213.061149][ T5892] usb 3-1: SerialNumber: syz [ 213.074807][ T5892] usb 3-1: config 0 descriptor?? [ 213.092387][ T5892] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 213.292105][ T5892] usb 3-1: USB disconnect, device number 12 [ 214.042682][ T30] audit: type=1400 audit(1745727097.311:451): avc: denied { name_bind } for pid=7679 comm="syz.3.440" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 214.099957][ T5892] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 214.260084][ T5892] usb 3-1: config 0 has no interfaces? [ 214.267520][ T5892] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 214.294447][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.316128][ T5892] usb 3-1: Product: syz [ 214.320592][ T5892] usb 3-1: Manufacturer: syz [ 214.325374][ T5892] usb 3-1: SerialNumber: syz [ 214.385647][ T5892] usb 3-1: config 0 descriptor?? [ 214.978505][ T30] audit: type=1400 audit(1745727098.021:452): avc: denied { watch_sb watch_reads } for pid=7674 comm="syz.2.439" path="/96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.677132][ T30] audit: type=1400 audit(1745727098.941:453): avc: denied { name_bind } for pid=7696 comm="syz.0.443" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 215.754298][ T7698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.765031][ T7698] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 216.089770][ T7698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.290060][ T5855] usb 3-1: USB disconnect, device number 13 [ 217.458826][ T30] audit: type=1400 audit(1745727100.721:454): avc: denied { nlmsg_write } for pid=7722 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 217.520118][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 217.572637][ T7725] xfrm1: entered promiscuous mode [ 217.577717][ T7725] xfrm1: entered allmulticast mode [ 219.613500][ T7773] serio: Serial port ttyS3 [ 219.988699][ T5855] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 220.009779][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 220.023059][ T7792] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.031893][ T7792] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.040663][ T7792] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.049551][ T7792] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.085526][ T7792] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.095130][ T7792] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.104432][ T7792] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.113519][ T7792] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.180916][ T7799] loop2: detected capacity change from 0 to 7 [ 220.212119][ T7801] netlink: 52 bytes leftover after parsing attributes in process `syz.6.460'. [ 220.240263][ T5855] usb 4-1: config 0 has no interfaces? [ 220.259992][ T5855] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 220.299929][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.403911][ T5829] Dev loop2: unable to read RDB block 7 [ 220.434212][ T5855] usb 4-1: Product: syz [ 220.472678][ T5829] loop2: unable to read partition table [ 220.478399][ T5855] usb 4-1: Manufacturer: syz [ 221.019677][ T5855] usb 4-1: SerialNumber: syz [ 221.031657][ T5829] loop2: partition table beyond EOD, truncated [ 221.095520][ T5855] usb 4-1: config 0 descriptor?? [ 221.149341][ T7811] veth0_vlan: left promiscuous mode [ 221.155242][ T7811] veth0_vlan: entered promiscuous mode [ 221.471366][ T7799] Dev loop2: unable to read RDB block 7 [ 221.884360][ T7799] loop2: unable to read partition table [ 221.959992][ T971] usb 4-1: USB disconnect, device number 16 [ 222.071828][ T7799] loop2: partition table beyond EOD, truncated [ 222.078127][ T7799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.735545][ T7842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.470'. [ 226.930826][ T30] audit: type=1400 audit(1745727110.200:455): avc: denied { connect } for pid=7896 comm="syz.6.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.953126][ T30] audit: type=1400 audit(1745727110.220:456): avc: denied { read } for pid=7896 comm="syz.6.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 227.010950][ T971] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 227.027488][ T30] audit: type=1400 audit(1745727110.290:457): avc: denied { ioctl } for pid=7896 comm="syz.6.482" path="socket:[16692]" dev="sockfs" ino=16692 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 227.081823][ T58] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 227.183871][ T971] usb 4-1: config 0 has no interfaces? [ 227.213213][ T971] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 227.232387][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.251183][ T971] usb 4-1: Product: syz [ 227.260659][ T971] usb 4-1: Manufacturer: syz [ 227.266515][ T971] usb 4-1: SerialNumber: syz [ 227.285797][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 227.292802][ T58] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.301402][ T58] usb 3-1: config 0 has no interface number 0 [ 227.307517][ T58] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.323639][ T971] usb 4-1: config 0 descriptor?? [ 227.353923][ T58] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.386841][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.400523][ T58] usb 3-1: config 0 descriptor?? [ 227.425900][ T58] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 227.842777][ T30] audit: type=1400 audit(1745727111.110:458): avc: denied { write } for pid=7912 comm="syz.6.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.876277][ T7934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.926282][ T30] audit: type=1400 audit(1745727111.190:459): avc: denied { setattr } for pid=7889 comm="syz.2.480" name="iowarrior0" dev="devtmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.856937][ T30] audit: type=1400 audit(1745727111.790:460): avc: denied { setopt } for pid=7946 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.042406][ T5861] usb 3-1: USB disconnect, device number 14 [ 229.425983][ T58] usb 4-1: USB disconnect, device number 17 [ 232.344644][ T30] audit: type=1400 audit(1745727115.600:461): avc: denied { append } for pid=7993 comm="syz.5.494" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.438943][ T7996] ubi31: attaching mtd0 [ 232.450770][ T7996] ubi31: scanning is finished [ 232.455519][ T7996] ubi31: empty MTD device detected [ 233.364557][ T7996] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 233.446881][ T7996] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 233.455842][ T7996] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 233.463196][ T7996] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 233.470936][ T7996] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 233.477833][ T7996] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 233.486235][ T7996] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3065531372 [ 233.496646][ T7996] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 233.699063][ T8005] ubi31: background thread "ubi_bgt31d" started, PID 8005 [ 235.193948][ T30] audit: type=1400 audit(1745727117.910:462): avc: denied { connect } for pid=8013 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.087171][ T30] audit: type=1400 audit(1745727119.350:463): avc: denied { connect } for pid=8034 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.791578][ T30] audit: type=1400 audit(1745727120.060:464): avc: denied { write } for pid=8034 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.331057][ T30] audit: type=1400 audit(1745727120.580:465): avc: denied { watch } for pid=8054 comm="syz.3.510" path="/88" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.689059][ T8056] Invalid source name [ 238.529457][ T30] audit: type=1400 audit(1745727121.700:466): avc: denied { map } for pid=8062 comm="syz.2.512" path="socket:[16150]" dev="sockfs" ino=16150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 238.603781][ T30] audit: type=1400 audit(1745727121.840:467): avc: denied { accept } for pid=8062 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 240.536597][ T8093] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 241.725983][ T30] audit: type=1400 audit(1745727124.990:468): avc: denied { bind } for pid=8103 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.791935][ T30] audit: type=1400 audit(1745727124.990:469): avc: denied { name_bind } for pid=8103 comm="syz.2.525" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 241.816385][ T30] audit: type=1400 audit(1745727124.990:470): avc: denied { node_bind } for pid=8103 comm="syz.2.525" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 242.134527][ T30] audit: type=1400 audit(1745727125.400:471): avc: denied { read } for pid=8112 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.185491][ T8115] netlink: 92 bytes leftover after parsing attributes in process `syz.3.528'. [ 243.649178][ T5855] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.240408][ T5855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.261636][ T5855] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.608232][ T5855] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.617461][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.642822][ T8131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.689878][ T5855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.949302][ T8159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.965990][ T8159] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 245.160636][ T8160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.817091][ T8177] syzkaller1: entered promiscuous mode [ 246.849224][ T8177] syzkaller1: entered allmulticast mode [ 246.907182][ T5812] usb 4-1: USB disconnect, device number 18 [ 247.119613][ T5855] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 247.702759][ T5855] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 247.716732][ T8191] netlink: 'syz.6.548': attribute type 1 has an invalid length. [ 247.733491][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.759141][ T8191] netlink: 'syz.6.548': attribute type 2 has an invalid length. [ 247.768678][ T5855] usb 3-1: config 0 descriptor?? [ 248.069376][ T5855] kaweth 3-1:0.0: Firmware present in device. [ 248.109232][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 248.270648][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.273787][ T8177] input: syz0 as /devices/virtual/input/input13 [ 248.289105][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59144, setting to 1024 [ 248.309541][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.323355][ T5855] kaweth 3-1:0.0: Statistics collection: 0 [ 248.338801][ T5855] kaweth 3-1:0.0: Multicast filter limit: 0 [ 248.348135][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.363100][ T5855] kaweth 3-1:0.0: MTU: 0 [ 248.376717][ T5855] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 248.396247][ T10] usb 7-1: config 0 descriptor?? [ 248.411033][ T8191] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 248.588417][ T8203] syz.3.550 (8203): /proc/8195/oom_adj is deprecated, please use /proc/8195/oom_score_adj instead. [ 248.693749][ T8189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.107579][ T5855] kaweth 3-1:0.0: kaweth interface created at eth5 [ 249.121767][ T30] audit: type=1400 audit(1745727131.380:472): avc: denied { write } for pid=8188 comm="syz.6.548" path="socket:[17225]" dev="sockfs" ino=17225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.183430][ T10] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 249.197569][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0008/input/input14 [ 249.212050][ T30] audit: type=1400 audit(1745727131.390:473): avc: denied { read } for pid=8188 comm="syz.6.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.265082][ T30] audit: type=1400 audit(1745727131.390:474): avc: denied { read write } for pid=8188 comm="syz.6.548" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 249.331449][ T58] usb 3-1: USB disconnect, device number 15 [ 249.352661][ T30] audit: type=1400 audit(1745727131.390:475): avc: denied { open } for pid=8188 comm="syz.6.548" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 250.212632][ T8214] netlink: 96 bytes leftover after parsing attributes in process `syz.5.553'. [ 250.282964][ T10] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 250.683224][ T8222] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 250.691047][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 251.511091][ T10] usb 7-1: USB disconnect, device number 3 [ 251.861915][ T8245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.873360][ T8245] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 253.798227][ T8276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.566'. [ 254.459584][ T8271] netlink: 'syz.5.565': attribute type 4 has an invalid length. [ 255.917567][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.927277][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.678438][ T30] audit: type=1400 audit(1745727138.920:476): avc: denied { unmount } for pid=7070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 257.171559][ T30] audit: type=1400 audit(1745727139.430:477): avc: denied { bind } for pid=8333 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.507358][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.578'. [ 257.728489][ T8335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.743184][ T8335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.767532][ T8335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 257.903443][ T8335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.916875][ T8335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.934094][ T8335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.472067][ T8335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.482542][ T8335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.495561][ T8335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.520802][ T8346] netlink: 96 bytes leftover after parsing attributes in process `syz.3.581'. [ 259.665359][ T8335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.693233][ T8335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.703740][ T8335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 260.631414][ T8335] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.645262][ T8335] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 260.655581][ T8335] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.789811][ T8335] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.798051][ T8335] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.622864][ T8335] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.817205][ T8335] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.909840][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.589'. [ 261.940980][ T8335] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.950199][ T8335] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.018549][ T8335] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.032946][ T8335] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.051664][ T8335] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.579233][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 262.644179][ T8388] netlink: 96 bytes leftover after parsing attributes in process `syz.0.594'. [ 262.997041][ T10] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 263.067622][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.224170][ T10] usb 6-1: Product: syz [ 263.337437][ T8392] netlink: 'syz.3.595': attribute type 4 has an invalid length. [ 263.703992][ T10] usb 6-1: Manufacturer: syz [ 263.723933][ T10] usb 6-1: SerialNumber: syz [ 263.744087][ T10] usb 6-1: config 0 descriptor?? [ 263.760157][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 264.431343][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 264.441334][ T10] sq905c 6-1:0.0: Get version command failed [ 264.519177][ T10] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 264.808389][ T8406] xt_hashlimit: size too large, truncated to 1048576 [ 265.697161][ T10] usb 6-1: USB disconnect, device number 2 [ 269.851439][ T30] audit: type=1400 audit(1745727152.110:478): avc: denied { read } for pid=8452 comm="syz.2.611" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.050319][ T30] audit: type=1400 audit(1745727152.110:479): avc: denied { open } for pid=8452 comm="syz.2.611" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.107998][ T30] audit: type=1400 audit(1745727152.110:480): avc: denied { ioctl } for pid=8452 comm="syz.2.611" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.204807][ T30] audit: type=1400 audit(1745727152.160:481): avc: denied { execute } for pid=8452 comm="syz.2.611" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 272.438198][ T8488] xt_hashlimit: size too large, truncated to 1048576 [ 274.010965][ T8504] xt_hashlimit: size too large, truncated to 1048576 [ 278.032200][ T8520] 9pnet_fd: p9_fd_create_tcp (8520): problem connecting socket to 127.0.0.1 [ 278.307126][ T8528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.322310][ T8528] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 278.647881][ T8528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.689226][ T5812] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 278.849905][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 279.017979][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.047964][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 279.093422][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 279.212219][ T8533] netlink: 'syz.6.629': attribute type 4 has an invalid length. [ 279.315569][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 279.489227][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.513918][ T5812] usb 3-1: Product: syz [ 279.526520][ T5812] usb 3-1: Manufacturer: syz [ 279.605415][ T5812] usb 3-1: SerialNumber: syz [ 279.630305][ T5812] usb 3-1: config 0 descriptor?? [ 279.657011][ T5812] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 279.679924][ T5812] gspca_stv06xx: st6422 sensor detected [ 280.150032][ T5812] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 280.170132][ T5812] usb 3-1: USB disconnect, device number 16 [ 280.744675][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 280.971390][ T5855] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 281.732715][ T30] audit: type=1400 audit(1745727163.990:482): avc: denied { setattr } for pid=8565 comm="syz.6.638" name="NETLINK" dev="sockfs" ino=18903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.757594][ T5855] usb 4-1: device descriptor read/64, error -71 [ 282.782685][ T8579] trusted_key: encrypted_key: key user:syz not found [ 283.194954][ T5855] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 284.416368][ T8600] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 287.867034][ T8634] xt_hashlimit: size too large, truncated to 1048576 [ 288.998706][ T8633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.959231][ T8653] fuse: Bad value for 'group_id' [ 289.964249][ T8653] fuse: Bad value for 'group_id' [ 290.910011][ T30] audit: type=1400 audit(1745727173.170:483): avc: denied { setopt } for pid=8658 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 291.191473][ T8673] trusted_key: encrypted_key: insufficient parameters specified [ 291.311054][ T30] audit: type=1400 audit(1745727173.320:484): avc: denied { read } for pid=8658 comm="syz.3.664" name="file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.335468][ T30] audit: type=1400 audit(1745727173.320:485): avc: denied { open } for pid=8658 comm="syz.3.664" path="/124/file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.382254][ T30] audit: type=1400 audit(1745727173.320:486): avc: denied { append } for pid=8658 comm="syz.3.664" name="file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 291.445401][ T30] audit: type=1400 audit(1745727173.320:487): avc: denied { ioctl } for pid=8658 comm="syz.3.664" path="/124/file0" dev="tmpfs" ino=658 ioctlcmd=0x4b4d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.284591][ T8709] SET target dimension over the limit! [ 293.609186][ T5855] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 293.799465][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.808735][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.059038][ T8713] infiniband syz!: set down [ 294.063703][ T8713] infiniband syz!: added team_slave_0 [ 294.126743][ T8713] RDS/IB: syz!: added [ 294.131590][ T8713] smc: adding ib device syz! with port count 1 [ 294.138482][ T8713] smc: ib device syz! port 1 has pnetid [ 294.254502][ T5855] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 294.277800][ T30] audit: type=1400 audit(1745727176.420:488): avc: denied { create } for pid=8712 comm="syz.5.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.280175][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.501587][ T5855] usb 4-1: Product: syz [ 294.505799][ T5855] usb 4-1: Manufacturer: syz [ 294.517054][ T5855] usb 4-1: SerialNumber: syz [ 294.524292][ T30] audit: type=1400 audit(1745727176.420:489): avc: denied { getopt } for pid=8712 comm="syz.5.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.738304][ T8723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.891592][ T30] audit: type=1400 audit(1745727176.590:490): avc: denied { sqpoll } for pid=8716 comm="syz.6.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 294.911135][ T5855] usb 4-1: config 0 descriptor?? [ 295.158878][ T8715] overlayfs: failed to resolve './file0': -2 [ 295.180191][ T5855] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 295.208931][ T5855] airspy 4-1:0.0: Could not detect board [ 295.249837][ T5855] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 295.310045][ T5855] usb 4-1: USB disconnect, device number 21 [ 297.493517][ T8755] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 298.429582][ T30] audit: type=1400 audit(1745727180.680:491): avc: denied { ioctl } for pid=8762 comm="syz.3.691" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 298.889747][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 298.955154][ T8768] ALSA: mixer_oss: invalid OSS volume 'uq['q¨rbP[‘~sÊŠô&2' [ 299.344492][ T8773] xt_hashlimit: size too large, truncated to 1048576 [ 299.969151][ T5855] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 300.189595][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.269269][ T5855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 300.359043][ T5855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.919071][ T5855] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 300.928158][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.065878][ T5855] usb 7-1: config 0 descriptor?? [ 301.148845][ T8775] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 301.689313][ T8775] netlink: 'syz.6.697': attribute type 58 has an invalid length. [ 301.769442][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.6.697'. [ 302.259150][ T5855] usbhid 7-1:0.0: can't add hid device: -71 [ 302.265217][ T5855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 302.268779][ T8815] process 'syz.5.706' launched './file2' with NULL argv: empty string added [ 302.503328][ T30] audit: type=1400 audit(1745727184.770:492): avc: denied { execute_no_trans } for pid=8814 comm="syz.5.706" path="/63/file2" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 302.538637][ T5855] usb 7-1: USB disconnect, device number 4 [ 302.799182][ T1203] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 303.039296][ T1203] usb 6-1: Using ep0 maxpacket: 32 [ 303.074595][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.249082][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.296599][ T8785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.394622][ T1203] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.568074][ T1203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.639788][ T1203] usb 6-1: config 0 descriptor?? [ 303.645760][ T8785] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 303.693125][ T1203] hub 6-1:0.0: USB hub found [ 303.830997][ T8828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.001871][ T1203] hub 6-1:0.0: 1 port detected [ 304.009242][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 304.040284][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.173404][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.321356][ T1203] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 304.327864][ T1203] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 304.481089][ T1203] usbhid 6-1:0.0: can't add hid device: -71 [ 304.487131][ T1203] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 304.489643][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 304.519065][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 304.526745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.734679][ T31] task:kworker/u8:1 state:D stack:23048 pid:13 tgid:13 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 304.747053][ T31] Workqueue: events_unbound netfs_write_collection_worker [ 304.755350][ T1203] usb 6-1: USB disconnect, device number 3 [ 304.789101][ T31] Call Trace: [ 304.859058][ T31] [ 304.865302][ T8830] base_sock_release(ffff88807f7bf200) sk=ffff888035730000 [ 304.894748][ T31] __schedule+0x116f/0x5de0 [ 304.945306][ T31] ? add_lock_to_list+0x9d/0x130 [ 305.019026][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 305.024032][ T31] ? __pfx___schedule+0x10/0x10 [ 305.159065][ T31] ? find_held_lock+0x2b/0x80 [ 305.163818][ T31] ? schedule+0x2d7/0x3a0 [ 305.168161][ T31] schedule+0xe7/0x3a0 [ 305.301308][ T31] bit_wait+0x15/0xe0 [ 305.305353][ T31] __wait_on_bit+0x62/0x180 [ 305.361258][ T31] ? __pfx_bit_wait+0x10/0x10 [ 305.366000][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 305.431222][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 305.437273][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 305.512569][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 305.548223][ T31] netfs_retry_writes+0x300/0x1a50 [ 305.589034][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 305.628531][ T31] ? __pfx_netfs_retry_writes+0x10/0x10 [ 305.668617][ T31] ? look_up_lock_class+0x59/0x150 [ 305.718486][ T31] ? register_lock_class+0x41/0x4c0 [ 305.762260][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 305.802800][ T31] netfs_write_collection_worker+0x23fd/0x3830 [ 305.859412][ T31] process_one_work+0x9cc/0x1b70 [ 305.911399][ T31] ? __pfx_process_one_work+0x10/0x10 [ 305.916838][ T31] ? assign_work+0x1a0/0x250 [ 305.989032][ T31] worker_thread+0x6c8/0xf10 [ 305.993692][ T31] ? __pfx_worker_thread+0x10/0x10 [ 305.998814][ T31] kthread+0x3c2/0x780 [ 306.104367][ T31] ? __pfx_kthread+0x10/0x10 [ 306.139844][ T31] ? __pfx_kthread+0x10/0x10 [ 306.144495][ T31] ? __pfx_kthread+0x10/0x10 [ 306.199046][ T31] ? __pfx_kthread+0x10/0x10 [ 306.203701][ T31] ? rcu_is_watching+0x12/0xc0 [ 306.271814][ T31] ? __pfx_kthread+0x10/0x10 [ 306.276465][ T31] ret_from_fork+0x45/0x80 [ 306.341407][ T31] ? __pfx_kthread+0x10/0x10 [ 306.346067][ T31] ret_from_fork_asm+0x1a/0x30 [ 306.409040][ T31] [ 306.429331][ T31] [ 306.429331][ T31] Showing all locks held in the system: [ 306.496282][ T31] 2 locks held by kworker/u8:1/13: [ 306.501819][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 306.529106][ T31] #1: ffffc90000127d18 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 306.559104][ T31] 1 lock held by khungtaskd/31: [ 306.563992][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 306.579383][ T31] 2 locks held by udevd/5187: [ 306.585295][ T31] 2 locks held by getty/5572: [ 306.591860][ T31] #0: ffff8880370020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 306.612212][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 306.625020][ T31] 2 locks held by syz.4.281/6928: [ 306.632453][ T31] #0: ffff888028bdc420 (sb_writers#16){.+.+}-{0:0}, at: do_pwritev+0x1af/0x270 [ 306.643768][ T31] #1: ffff88805add87b8 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 306.660597][ T31] no locks held by syz.0.671/8696. [ 306.665747][ T31] [ 306.668066][ T31] ============================================= [ 306.668066][ T31] [ 306.696539][ T31] NMI backtrace for cpu 0 [ 306.696557][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 306.696579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.696589][ T31] Call Trace: [ 306.696596][ T31] [ 306.696602][ T31] dump_stack_lvl+0x116/0x1f0 [ 306.696627][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 306.696654][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 306.696672][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 306.696700][ T31] watchdog+0xf70/0x12c0 [ 306.696721][ T31] ? __pfx_watchdog+0x10/0x10 [ 306.696735][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.696755][ T31] ? __kthread_parkme+0x19e/0x250 [ 306.696779][ T31] ? __pfx_watchdog+0x10/0x10 [ 306.696794][ T31] kthread+0x3c2/0x780 [ 306.696810][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696823][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696837][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696851][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696864][ T31] ? rcu_is_watching+0x12/0xc0 [ 306.696883][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696899][ T31] ret_from_fork+0x45/0x80 [ 306.696915][ T31] ? __pfx_kthread+0x10/0x10 [ 306.696929][ T31] ret_from_fork_asm+0x1a/0x30 [ 306.696965][ T31] [ 306.696971][ T31] Sending NMI from CPU 0 to CPUs 1: [ 306.829703][ C1] NMI backtrace for cpu 1 [ 306.829715][ C1] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 306.829732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.829740][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 306.829762][ C1] RIP: 0010:write_comp_data+0x3c/0x90 [ 306.829782][ C1] Code: 8b 05 98 95 e8 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c 16 00 00 85 c0 74 4f <8b> 82 18 16 00 00 83 f8 03 75 44 48 8b 82 20 16 00 00 8b 92 1c 16 [ 306.829794][ C1] RSP: 0018:ffffc900015575e8 EFLAGS: 00000246 [ 306.829803][ C1] RAX: 0000000080000000 RBX: 0000000000000006 RCX: ffffffff8aefe80b [ 306.829811][ C1] RDX: ffff88801d73a440 RSI: 0000000000000020 RDI: 0000000000000001 [ 306.829819][ C1] RBP: ffffffff8ce48800 R08: 0000000000000001 R09: 0000000000000020 [ 306.829826][ C1] R10: 0000000000000000 R11: 0000000000002bc0 R12: 0000000000000000 [ 306.829834][ C1] R13: 0000000000000001 R14: 000000000000002b R15: dffffc0000000000 [ 306.829841][ C1] FS: 0000000000000000(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 306.829861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.829869][ C1] CR2: 00007fa7e0d7d2d8 CR3: 0000000032abe000 CR4: 00000000003526f0 [ 306.829877][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.829883][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.829891][ C1] Call Trace: [ 306.829895][ C1] [ 306.829899][ C1] __sanitizer_cov_trace_switch+0x54/0x90 [ 306.829919][ C1] _ieee802_11_parse_elems_full+0x6db/0x44e0 [ 306.829937][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 306.829951][ C1] ? __kmalloc_noprof+0x242/0x510 [ 306.829969][ C1] ? cfg80211_find_elem_match+0x1aa/0x1f0 [ 306.829983][ C1] ieee802_11_parse_elems_full+0xac2/0x3780 [ 306.829996][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 306.830008][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 306.830032][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 306.830047][ C1] ? ieee80211_sta_active_ibss+0x21d/0x420 [ 306.830070][ C1] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 306.830093][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 306.830112][ C1] ? __pfx___might_resched+0x10/0x10 [ 306.830134][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 306.830149][ C1] ieee80211_iface_work+0xbf4/0x1020 [ 306.830162][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.830177][ C1] cfg80211_wiphy_work+0x3dc/0x550 [ 306.830194][ C1] process_one_work+0x9cc/0x1b70 [ 306.830211][ C1] ? __pfx_process_one_work+0x10/0x10 [ 306.830227][ C1] ? assign_work+0x1a0/0x250 [ 306.830239][ C1] worker_thread+0x6c8/0xf10 [ 306.830255][ C1] ? __kthread_parkme+0x19e/0x250 [ 306.830271][ C1] ? __pfx_worker_thread+0x10/0x10 [ 306.830282][ C1] kthread+0x3c2/0x780 [ 306.830293][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830302][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830312][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830322][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830331][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.830344][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830355][ C1] ret_from_fork+0x45/0x80 [ 306.830366][ C1] ? __pfx_kthread+0x10/0x10 [ 306.830376][ C1] ret_from_fork_asm+0x1a/0x30 [ 306.830398][ C1] [ 306.837525][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 307.165844][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 307.177638][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 307.187678][ T31] Call Trace: [ 307.190942][ T31] [ 307.193859][ T31] dump_stack_lvl+0x3d/0x1f0 [ 307.198440][ T31] panic+0x71c/0x800 [ 307.202325][ T31] ? __pfx_panic+0x10/0x10 [ 307.206730][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 307.212088][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.218052][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 307.223406][ T31] ? watchdog+0xdda/0x12c0 [ 307.227803][ T31] ? watchdog+0xdcd/0x12c0 [ 307.232205][ T31] watchdog+0xdeb/0x12c0 [ 307.236434][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.241092][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.246281][ T31] ? __kthread_parkme+0x19e/0x250 [ 307.251309][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.255970][ T31] kthread+0x3c2/0x780 [ 307.260024][ T31] ? __pfx_kthread+0x10/0x10 [ 307.264593][ T31] ? __pfx_kthread+0x10/0x10 [ 307.269164][ T31] ? __pfx_kthread+0x10/0x10 [ 307.273733][ T31] ? __pfx_kthread+0x10/0x10 [ 307.278303][ T31] ? rcu_is_watching+0x12/0xc0 [ 307.283052][ T31] ? __pfx_kthread+0x10/0x10 [ 307.287624][ T31] ret_from_fork+0x45/0x80 [ 307.292021][ T31] ? __pfx_kthread+0x10/0x10 [ 307.296592][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.301356][ T31] [ 307.304554][ T31] Kernel Offset: disabled [ 307.308869][ T31] Rebooting in 86400 seconds..