last executing test programs: 1m4.462194433s ago: executing program 2 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)={0x14, 0x34, 0x400, 0x470bd2b, 0x25dbdbfe, {0x4}}, 0x14}}, 0x24000080) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) shutdown(r5, 0x1) userfaultfd(0x801) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m2.332003733s ago: executing program 2 (id=268): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000180)="8387020a31a802d243b213bccae747c6b642f8261ef0422a62ebd61c14a3bc9362f96bb452b19e4ad675d04e8817bf0a9f23fff291fa0039e980a7d474289720c7a6c9bef5b16d9428f02d7fe6e09f048171c4303e12f722917b8b25bb9759ab96303bbfd4f7fcae25c10d1299750912c6c4a8037198035cab2480b4028ddbcb4166b2196a0826e56573f89dfd36a2c3a21e37f6e14b1f0076802a21d7cd222559ba98acdae74548f4ca0df09e6542cec934b47d25b34b416e872ce659", 0xbd, 0x8041, &(0x7f0000000240)={0x2, 0x9, @rand_addr=0x64010102}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x0, 0x12) lseek(r2, 0xffffffffffffffd9, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00009d000000000000000000f0ff0000000034a5ad359366850f0000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m2.022766223s ago: executing program 2 (id=270): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x4, 0xffff0001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14, 0x10, 0x30}, [], {0x14}}, 0x28}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m0.549248185s ago: executing program 2 (id=273): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="c61f6b65c4e662a0a5c3fe7b614b98ed0825ea99c9156ccb4d0a1273144cba4fcd32b18eba1b", 0x26}], 0x1}, 0x20000000) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000480)={0x4000, 0x8, 0x22}, 0x18) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000004c0)=0x101, 0x4) recvmsg$can_j1939(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1}, 0x100) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r5, 0x0, 0x0, 0xc03, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x9, 0x0, 0x4) 59.380682178s ago: executing program 2 (id=276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x800, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, {0x4, 0x1}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8000, 0x8, 0x3, 0x3, 0x41, 0x5, 0x40003, 0x53, 0x0, 0x1, 0xa}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x4010, 0xffffffffffffffff, 0x10990000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x3, 0x10a21a, 0x1c12f6}) read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3) socket(0x1, 0x5, 0x1000) sched_setscheduler(0x0, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) 59.079176692s ago: executing program 2 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0xe, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) epoll_create1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/294], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e2300050a0000003b000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1e000100000000000000000004000000000000000000009201000000000000a39b803378e7009a7908000000000000ffff0000000000001c250800000000000c00000000000000fcffffffffffffff0000000000000000ffffff00004000000000001f00000000000000feffffffffffffff030000000002000100220000000000666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010010"], 0x50) r5 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000380)={0x0, @sdr={0x3234564e, 0xfffffffa}}) connect$inet6(r7, &(0x7f0000000480)={0xa, 0xfffe, 0x400, @mcast1, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 58.590866242s ago: executing program 32 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0xe, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) epoll_create1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/294], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e2300050a0000003b000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1e000100000000000000000004000000000000000000009201000000000000a39b803378e7009a7908000000000000ffff0000000000001c250800000000000c00000000000000fcffffffffffffff0000000000000000ffffff00004000000000001f00000000000000feffffffffffffff030000000002000100220000000000666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010010"], 0x50) r5 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000380)={0x0, @sdr={0x3234564e, 0xfffffffa}}) connect$inet6(r7, &(0x7f0000000480)={0xa, 0xfffe, 0x400, @mcast1, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 11.029059239s ago: executing program 3 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x379}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x38}}, 0x14834) 10.906575948s ago: executing program 3 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x379}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x38}}, 0x14834) (fail_nth: 2) 10.856151512s ago: executing program 5 (id=401): r0 = socket$packet(0x11, 0x2, 0x300) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/237, 0xed}, {&(0x7f0000000000)=""/55, 0x37}, {0x0}], 0x3}, 0x40010103) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 10.351504113s ago: executing program 5 (id=402): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xe9) 10.350025332s ago: executing program 0 (id=403): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040008000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="1ca0045e2645878edb4a1172dec2c630ddaf2f2a4327ae004bdb568606a244af823fd8029c9aa3d7439ebcd1d9674eee57d1ce44d01c9f133248653384f003435b55987f2d555566c16db6615910ab7c3672"], 0x3c}}, 0x0) 9.954454469s ago: executing program 3 (id=405): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018cfc30000000000240000002400000009918d000000000000000100003d14bf050000000006000000050000000100008002000000000000850e000200000030610000"], 0x0, 0x45, 0x0, 0x1}, 0x28) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x6) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r7, 0x0, 0x0) 9.923260378s ago: executing program 5 (id=406): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x4be, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff7]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x30}, 0x4, 0x700000000000000}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54", @ANYBLOB=',rootmo']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.518709181s ago: executing program 5 (id=409): read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = getpgid(r0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r2, &(0x7f00000002c0)=""/153, 0x99) r3 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/60, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 8.283245911s ago: executing program 1 (id=410): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4140, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3, 0x100, 0x6, 0x85, 0x4, r1}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x50, 0xffffffffffffffff, 0x10000000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000011c0)=@IORING_OP_OPENAT2={0x1c, 0x60, 0x0, r4, &(0x7f0000000180)={0x220200, 0x0, 0x15}, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000001200)={0x81, {{0xa, 0x4e21, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6ab}}, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x40042, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@fallback=r4, 0x1e, 0x1, 0x8001, &(0x7f0000001380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1c, 0x8, &(0x7f0000001500)=@raw=[@ldst={0x2, 0x3, 0x4, 0x0, 0x2, 0x50}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000001540)='GPL\x00', 0x7, 0x7a, &(0x7f0000001580)=""/122, 0x1f00, 0xb, '\x00', 0x0, @fallback=0x13, r4, 0x8, &(0x7f0000001600)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0x4, 0x9, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001680)=[0xffffffffffffffff, r4, r4, r4, r4, r4], 0x0, 0x10, 0x6}, 0x94) syz_usb_connect(0x0, 0x1bd, &(0x7f0000002d00)={{0x12, 0x1, 0x201, 0x9, 0x63, 0xd0, 0x10, 0x582, 0x8d, 0xa5f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ab, 0x1, 0x9, 0x10, 0x80, 0x7, [{{0x9, 0x4, 0x5c, 0x6, 0x4, 0x77, 0xd7, 0x23, 0x83, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0xc, 0x3, 0x7, [@generic={0xb7, 0x22, "1ddcbafc6bda8a0472a811ce315cefb92daacb50b88b2fcb05548df81a054f478ac54e94e2d26a135091401c5c159abd6aa6789f9161180c4e9c83f86703d99a61d1215f1bb9125bb677b148f61e87702efeba9c35171ca21fcf8652572af9eb10f29a19ec2588d8a12c1a8c67f5d057c8aa500dbbbc67cede06c81cffd9e5bde69523124c43948abab6968d8e119e2b58bf0470dc13591dd30c539b81a9e09a768ee2457c299fca9b24d386126ff4054b41f27423"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x4a3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8e, 0xe0, 0x2}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x3, 0xc4, 0x4, [@generic={0xb0, 0xc, "d4345b25132747a866a272e3d8dd6bee4906fed5fc4b152e0631539d46eb203b74f669c3b7407342a0dd0a36bf6d58fea33e09e6aaea4e15dc5d38616db58a552a48c4545fb21c213d8893f44cfe381215d148997e0c7d27876a747f392226d3aecf2582b0984fceca1eda25f8e1090f8ee5b9f5a09275631e93d6c3062f9751dec4483fca69b75be021316be2db89ade32ea8889e065737ca0a76149dfc5669231fc3fee50dcd621924c14856ba"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x100}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0x4, 0xd4}}]}}]}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002ec0)={0xa, 0x6, 0x201, 0x6, 0x1, 0x5, 0x20, 0x2}, 0x5, &(0x7f0000002f00)={0x5, 0xf, 0x5}, 0x3, [{0x56, &(0x7f0000002f40)=@string={0x56, 0x3, "e9970522b5da98a69374c444be1ae90050c0f74c0c17fb440752e76301a85a9e6a4450557ef939f35ed99015599cf0d622910f0cdb6b335e45058a67dd1b25d6919811cc6f112fc3141cf590e6ff61659e0dade9"}}, {0x9, &(0x7f0000002fc0)=@string={0x9, 0x3, "8942221bdc813d"}}, {0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x2409}}]}) 7.242770435s ago: executing program 5 (id=412): syz_open_dev$vim2m(0x0, 0x800, 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f9800"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00', 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) msgsnd(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x18, 0x10, {0x10, 0x24, "aad526d225a7ffa0c82d71ebbc4f"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="200d32000100000009ac41cbbd6ff2de43e1b4e74b69b6fdb6d5324f39a4dd6931ea946f8f0b"], 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3ff, 0x12) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xf, 0x3, 0x2) write(r5, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) socket$inet_udp(0x2, 0x2, 0x0) 6.738781428s ago: executing program 3 (id=413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054003d090000f0ffff00000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000300002001000000000000000000000000000186dd00"], 0x38}}, 0x0) 6.605212826s ago: executing program 3 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00005ce000/0x2000)=nil, 0x2000, 0x6, 0x10010, 0xffffffffffffffff, 0xb547d000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r6, 0x1, {0x0, 0xff, 0x2}, 0xfd}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r7, &(0x7f0000000140)=0x7fd, 0x12) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x448ee) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000100000500060000000000050002"], 0x3c}}, 0x0) 6.25696216s ago: executing program 1 (id=415): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x6800c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x840) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x5) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000040)={0x11080}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, r11, 0x215}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0xba01}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 5.806878664s ago: executing program 4 (id=416): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050011000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) 5.03228676s ago: executing program 1 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400020000000001, 0xfffffffffffffffe, 0x0, 0x200000000000000]}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000001d40)={0xa, 0x4e1d, 0xf, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "69eb047c187e143bddcbe699ef7a74fd2c1a7c6b59dd637719d6395dda566f42", "6e8ae37dc217c78b70a4dc5eeb6f624200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea411688bf272fdef179d", "ff2a09d662def3d2eb45734d1b7067384ff2442258e9fc1dfc1701ba", {"18b0a3516f6b94835c625da017fdd035", "7fa6bc2b0e933988c64a103320cfe3d2"}}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) lsm_set_self_attr(0x68, &(0x7f0000000100)={0x6c, 0x1, 0x20}, 0x20, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) mkdir(0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 4.960078052s ago: executing program 4 (id=418): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x81, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 4.811324452s ago: executing program 0 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc020000210a0108fdffffff1000000000000000630003"], 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x80) 4.606713354s ago: executing program 1 (id=420): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a310000000008000540"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="100000000000000028001280"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372c", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.606194267s ago: executing program 4 (id=421): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x110, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4, "4a1486a411050a35f261562c76637386f1e5dc3ef836c820694bd74b765bceaee4d1e47dff67028b3ff30013a89d74f1019ecbe4b0d13a1b4a71a36492a836bc984b799953e11cdb61a0b121ab404a9033b4b8492d698c5b2336af1c8da97c75fcaa615776ffbd49a5bad7430659cf20e776c5141a56fe1296a824d8bf68c96e2abfb62dd7344025f3dfd1867f6069e32356433b74a049c31ae1e2b99d7f26047e96541181d8726af056a6e4b7c2dde0c3bc748a2e1501deeda061414820b151d032f26a51a923dae23b3bb290453b47707d0eb636c721c16771f594e3962675a4bb6a645c18"}}}}}, 0x0) 4.546205895s ago: executing program 0 (id=422): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, 0x0, 0x0, 0x2}, 0x94) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') r3 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) io_setup(0x206, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa040) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ecffffff000000008100000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff0000060066008e88000014003300f4000a00080211000000080211000001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44800) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newtaction={0x198c, 0x30, 0xb, 0x0, 0x0, {}, [{0x1978, 0x1, [@m_police={0x1974, 0x6, 0x0, 0x0, {{0xb}, {0x18a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x3ff, 0x5a63d30e, 0x2, 0x3, 0x1, 0x8, 0xffffffff, 0x2, 0x200, 0x5094, 0x1, 0x9bf4, 0x0, 0x4, 0x5, 0x9, 0x9, 0xe0, 0x7ff, 0xffff648d, 0x80000001, 0xe717, 0x5, 0x8, 0x0, 0xa, 0xf8, 0x2aac, 0x3b8a, 0x7, 0xfaf0, 0x8, 0x8, 0x3, 0x8, 0x6, 0x800, 0x2, 0x2, 0xa19, 0x21f, 0x7, 0x70, 0x4, 0x1, 0x1, 0x0, 0x2, 0xfffffff1, 0x1, 0x7, 0x2, 0x5, 0x0, 0x7, 0x3, 0x100, 0x6, 0x8000, 0x7ff, 0x8, 0x2, 0x7fffffff, 0xf5400000, 0xfffffff1, 0xfffffff8, 0xfffffff7, 0xd, 0x7, 0x1, 0x200, 0x200000, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x800, 0xb, 0x1, 0x2, 0x1, 0x1, 0x140, 0x7f, 0x7fffffff, 0xff, 0x1000, 0x1, 0x10000004, 0x9, 0x9, 0x4f5f, 0x7, 0xf, 0xf4, 0x179, 0x7ff, 0x9, 0x62, 0x1, 0x3, 0xa, 0xf, 0x102, 0x5, 0x8b0f, 0x4, 0xe, 0x4, 0x3, 0x3ff, 0x2, 0x8, 0x2, 0x100000, 0x7fff, 0x9, 0x9, 0xbd4c, 0x9, 0x7, 0x6, 0x3, 0x83, 0x3, 0x9, 0x81, 0x8, 0x6, 0x20e, 0xfff, 0x6, 0x5, 0x4, 0x5, 0x8001, 0x5, 0x0, 0x4, 0xfffffff7, 0x5, 0x81b, 0xc, 0x5, 0x0, 0x2, 0xc2b0, 0x1, 0xe, 0x0, 0xa, 0x1, 0xffff, 0x3cb, 0x7fffffff, 0x0, 0x1ed, 0x800, 0x3, 0x0, 0xffff, 0x0, 0xb9c1, 0x9, 0x6, 0x3, 0x1, 0x80000001, 0x4, 0x8, 0x7, 0x2, 0x8, 0x7ff, 0x5, 0xdd80, 0x6d, 0x8000, 0xffffffff, 0xad, 0x6, 0x10001, 0xee, 0x7, 0x10001, 0xf40, 0xc62, 0x40, 0x1000, 0x4, 0x2, 0x9, 0x7, 0x800, 0x1, 0x7, 0x2, 0x6, 0xe, 0x5, 0x8, 0x24000000, 0x9440, 0x4, 0x1e3b, 0x3ff, 0x40, 0x462c, 0xffff, 0x1, 0xffffffff, 0x9, 0x6, 0x3, 0x5, 0x1, 0xd, 0x7, 0x4, 0xb, 0x6, 0xef7, 0x7fffffff, 0x9, 0x3, 0xb6d5, 0x93, 0x2, 0x9, 0x81, 0x2, 0x0, 0x7, 0x3, 0x80000000, 0x12c6, 0xf4, 0x24b, 0xfff, 0x9, 0x3, 0x7, 0x81, 0x0, 0x9, 0x7, 0x40, 0x0, 0x2, 0x7, 0x80000001, 0x3, 0x7]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xfffffffc, 0x80000000, 0xe, 0x2, 0x675, 0x9, 0x1, 0x6, 0x9, 0xce76, 0x4, 0x8, 0x7, 0x4, 0x0, 0x6, 0xc71f, 0xffffffff, 0x7, 0x5, 0xffffffff, 0x0, 0x8, 0x37b8, 0x0, 0x1, 0x9, 0x4, 0x8, 0x80000000, 0x90d, 0x1, 0xa7d, 0x4, 0x2, 0x80, 0x4, 0xe3f5, 0x0, 0x0, 0x73c, 0x4, 0xb, 0x2, 0x0, 0xffffff00, 0x3, 0x0, 0x8000, 0x6, 0x8, 0x101, 0x9, 0x8, 0x1, 0x1, 0x3, 0x10, 0x7744, 0x200, 0x40000000, 0x2, 0x9f4, 0x9, 0x9, 0x0, 0xfffffff7, 0x800, 0x7, 0x0, 0x4, 0x7, 0x8, 0x1, 0x0, 0x9, 0x7ff, 0x0, 0x8, 0x6, 0x0, 0x8, 0x7, 0x8, 0x7ff, 0x5, 0x0, 0x3, 0x7, 0x7, 0x7, 0x6, 0x9, 0x9, 0x401, 0xfff, 0xa99, 0x2, 0x5, 0x9, 0x1, 0x1, 0x80000000, 0x9, 0xffffff81, 0x4, 0x9, 0x2, 0x2, 0x10, 0x9, 0x81, 0x3ff, 0x80000000, 0x80000000, 0x1980, 0x4, 0x7, 0x200, 0x400, 0x0, 0x836, 0xfffffff8, 0x0, 0x3ea1f490, 0x8000, 0x3, 0x5, 0x9, 0x1, 0x1, 0x945, 0x5, 0x1, 0xa2, 0x9, 0xcbc, 0x2, 0x8000, 0xff23, 0xffff10fe, 0x81, 0x78f7, 0x4, 0x8001, 0x9, 0xe, 0x7, 0x7, 0x6, 0x1, 0x8, 0x5, 0x803, 0x1, 0x43c, 0x7, 0x8, 0x6, 0x3, 0xe83, 0x9, 0x9, 0xfffffff9, 0x6, 0x1, 0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x9, 0x0, 0xe27, 0x8, 0x35e7335d, 0x0, 0x5, 0xc5, 0x80, 0x75, 0xd5dc, 0x9, 0x7fff, 0x1, 0x6, 0x4000, 0xffffff58, 0x5a, 0x6, 0x1, 0x400, 0xf, 0x7fffffff, 0x9, 0x8, 0x3d23, 0x3, 0x8, 0xf, 0x2, 0x7, 0x9, 0xf, 0x7f, 0xde40, 0x2, 0x6, 0x7fffffff, 0x5, 0x75c6, 0x9, 0x7, 0x7, 0x9, 0x0, 0x4, 0x6403, 0x0, 0x7, 0xd, 0x4, 0x0, 0x808e, 0x7, 0x40, 0xffffff23, 0x5, 0x1, 0xa28, 0xdc30, 0x8, 0x3, 0x9d4, 0x2, 0x2, 0x0, 0xfffffffd, 0x7, 0x8000, 0xd, 0x3, 0x57d0, 0xed, 0xa1, 0xfffffffc, 0x5, 0x1000, 0x5, 0x4, 0x6, 0x0, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x7ff, 0x100, 0x80000001, 0xffffffff, 0x101, 0x7, 0x8, 0x0, 0x3, 0x7fff, 0x7, 0x4, 0x3, 0x2, 0x80000000, 0x6, 0x8, 0x6, 0x3, 0x8, 0x9, 0x6, 0x1, 0x3, 0x7, 0x14, 0x9, 0xb, 0x3, 0x3, 0xd, 0x3, 0x3, 0x6, 0x2, 0x5, 0xff, 0x4a0630b1, 0xa8c, 0x7, 0x8001, 0x8000, 0xefd9, 0x1, 0xeaf9, 0x7, 0xfffffffb, 0x3, 0x6, 0xffff, 0x3ff, 0x80000000, 0x8, 0x5, 0xaf22, 0x101, 0x800, 0x80000000, 0x9, 0x21, 0x0, 0x81, 0x4, 0x5, 0x0, 0x0, 0xdd86, 0xcf, 0x100, 0x3, 0x4, 0x4, 0x2, 0x3, 0x1, 0x4, 0x1, 0x7, 0xc, 0x3, 0x3, 0xe8ce, 0x767, 0x2, 0x2000400, 0x8, 0x3, 0x9, 0x1ff, 0x9, 0x3, 0x6, 0x200, 0x4, 0x2, 0x100, 0x5, 0xb4b, 0x80000001, 0x9, 0x9, 0x7fffffff, 0x1, 0x5, 0x80000001, 0x1, 0x10, 0x9, 0x9, 0x8000, 0xffffffff, 0x2, 0x5, 0x6d3, 0x7, 0x633, 0x0, 0x0, 0x1, 0x7, 0x7fffffff, 0x100, 0x6, 0x8, 0x70, 0x5, 0x8000, 0x9, 0xd1, 0x3, 0x0, 0x80000001, 0x4, 0x8, 0x3, 0xffff, 0x7, 0x8738, 0x7, 0x5, 0x7b4, 0x1, 0x829000, 0x9, 0x33daa145, 0x9, 0xb, 0x1fe5, 0x101, 0x7, 0x13f, 0x96, 0x8001, 0x9, 0x608, 0x72a95057, 0x6, 0x1, 0x200, 0x0, 0x8, 0x5a, 0x8, 0x10001, 0xfffffffd, 0x5, 0x9, 0x2, 0x8, 0xc71, 0x7, 0xf3, 0x4, 0x7, 0x9, 0x2, 0x8001, 0xa6, 0x8001, 0x2, 0x185, 0x6, 0xfff, 0x5, 0x7, 0x9, 0xb, 0x0, 0xfff, 0x5, 0x7, 0x81, 0x2, 0xffff355b, 0xd7, 0x3, 0xe, 0x1, 0xd, 0xffffffff, 0x2, 0x5, 0x7fffffff, 0xfffffffa, 0x7fffffff, 0x7, 0x0, 0xffffffff, 0x3d, 0x800, 0x3, 0x1, 0x1, 0x3, 0x47, 0x2, 0x6, 0x2, 0x1, 0x4, 0x80000, 0x8, 0x9, 0x9, 0x9, 0xfffff001, 0x0, 0x2, 0x2, 0x7fff, 0x8998, 0x6, 0xe056, 0x7, 0xfa, 0x8, 0x100, 0x7, 0x4, 0x6, 0x2, 0xd7, 0x5, 0x3b29, 0x12000, 0x8a, 0x200, 0xd5, 0x80000000, 0x80, 0x40, 0x8, 0x4, 0x7, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x1, 0x4, 0xfffff294, 0x609, 0x8, 0x0, 0x97cb, 0x3, 0x1, 0x2, 0x0, 0x4, 0xffffffff, 0x5f79, 0x5, 0x40, 0x5, 0x6, 0xca1, 0xb9, 0x4, 0x5, 0x4, 0x3, 0x2, 0x8, 0x56, 0x8, 0x638, 0x7, 0x18, 0x6, 0x100020, 0xd1, 0x3, 0x6, 0x9, 0x80000000, 0x4, 0x1, 0x4, 0x6, 0x1, 0x1, 0x2, 0x0, 0x2258, 0x18d6, 0x8, 0x1ff, 0x3400000, 0x7fffffff, 0x6, 0x942, 0x6, 0x7, 0x2, 0x0, 0x0, 0x5, 0x4, 0xf24, 0x2, 0x8, 0xffffffff, 0x9, 0x0, 0x0, 0x1, 0x8000, 0xb, 0x4, 0x10bb7671, 0x7fff, 0x6, 0x6, 0x762, 0x1, 0x1, 0x800, 0x3, 0x8, 0x8, 0xc8d, 0x4, 0x5, 0x1, 0x4, 0x4, 0x5, 0xa3c, 0x7fffffff, 0xffff5c07, 0x40, 0xff, 0x0, 0x800, 0x2, 0x2, 0xb, 0x4, 0x0, 0x2, 0xa62d, 0x1, 0xe, 0x1, 0x400, 0x2, 0xfff, 0x1000, 0x2, 0x9, 0x7, 0x5, 0x4, 0x10, 0x401, 0x3, 0x9, 0x0, 0xa5, 0x7, 0xf, 0xffff, 0x80000001, 0x3, 0x3, 0x6, 0xff, 0xd, 0x800, 0x64ee, 0xf, 0x3, 0x40, 0xc000000, 0x4, 0x1fa2, 0x6, 0x8, 0x30000, 0x6eb8, 0x7, 0x7f, 0x80000001, 0x4, 0x4, 0x4, 0x800, 0xa, 0x8, 0x2, 0xff6, 0x100, 0x401, 0x8, 0x6, 0xe2a, 0x3, 0x7, 0x9, 0x7fffffff, 0x3, 0x1, 0x57e7, 0x5, 0x2, 0x5, 0x6, 0x1, 0x2, 0xadd, 0x7, 0x6, 0x200, 0x8, 0x1, 0x5ccc, 0x9, 0xd97, 0x418, 0x0, 0x101, 0x4, 0x6, 0x8, 0x9b6, 0x8, 0x100, 0x200, 0xd9, 0x0, 0x6, 0x3, 0xb78, 0x7, 0xfffffff3, 0x1ee4, 0x4, 0x1, 0x5, 0x33aa, 0x1, 0x5, 0x200, 0x1, 0xb113, 0x4, 0x6, 0xb5, 0x80000000, 0x7000000, 0x8, 0x748, 0x17, 0x6, 0x1, 0xda27, 0x3, 0x9, 0x6, 0x80, 0x5, 0x0, 0xa31a, 0x80, 0x8e, 0x1000, 0x100, 0x6, 0xffffffd2, 0x6, 0xc, 0xfffffffc, 0x5, 0x8, 0x3, 0x61b2, 0x6, 0x10, 0x3, 0xee49, 0x7f, 0x2f6b, 0x1, 0x8, 0x3ff, 0x9, 0x6, 0x0, 0x4, 0x1, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0x3, 0xe, 0x9, 0x3ff, 0x6, 0x1, 0x3f0, 0x0, 0x7, 0x7, 0x7fffffff, 0x7, 0x9, 0x9, 0x3000, 0x0, 0x1000, 0x7, 0xc, 0x1f, 0x6, 0x0, 0x5f24, 0x3, 0xa5e, 0xfffffff9, 0x0, 0x0, 0x5a6, 0x9, 0x8ac, 0x1, 0x6, 0x7, 0x22c00000, 0x2, 0x6, 0x0, 0x6, 0x2, 0x7, 0x1, 0xc, 0x0, 0xe, 0x9, 0xa3, 0x8, 0xa70f, 0x6, 0x7, 0x3, 0x8649, 0x101, 0x56, 0x8, 0x8, 0x9, 0x3, 0x401, 0x2, 0x4, 0x4c02, 0x6, 0x100, 0x5, 0x0, 0x6000000, 0xfffffffd, 0xffffffd3, 0x80000000, 0x1, 0x5, 0xf, 0x4, 0x8, 0xe75, 0x1, 0xa2be, 0x180, 0x6, 0x6, 0x9, 0x0, 0x45, 0x0, 0x3, 0x9, 0x7fffffff, 0x1, 0x6, 0xbd83, 0x9, 0x7ff, 0x5, 0xfffffff1, 0x6, 0x0, 0x4fa, 0xc6, 0xad, 0x3, 0x6, 0x1fce, 0xffffff0a, 0x9, 0x80, 0x9, 0x2, 0x0, 0x30a, 0x93d1, 0x0, 0x3, 0x3, 0x9f, 0x9, 0x7, 0xf92, 0xb63b, 0x1, 0x3, 0x4, 0x3, 0x1, 0x7, 0x7, 0xfff, 0x200, 0x8, 0xe75, 0x7, 0x9, 0x7, 0x74, 0x1, 0x9, 0x7, 0x7, 0x9, 0x9, 0x401, 0x7, 0x7, 0x5, 0x6, 0x5, 0x5, 0x2, 0x7, 0x2, 0x8000, 0x6, 0x1, 0x1, 0xfffffff8, 0x5, 0x3, 0xee7, 0x3a4, 0x1, 0x0, 0x10001, 0x8, 0x2, 0x1, 0x1, 0x74, 0xb0, 0xfffffffe, 0x7745, 0x0, 0xb93, 0x200, 0x0, 0xf, 0x1, 0x40, 0x7d04, 0x5, 0x3, 0x10001, 0x6, 0x1, 0x10000, 0xf7, 0x9, 0x1, 0x6, 0xfffffffb, 0xfffeffff, 0xffffffff, 0x1, 0x1000, 0x272, 0x1000, 0x9, 0x0, 0x80, 0x2, 0x0, 0x7fff, 0x8, 0x81, 0x1, 0x6, 0x0, 0x3, 0x10000, 0x6, 0x1, 0x5, 0x9, 0x8, 0x8, 0x9, 0x80, 0x1, 0x1, 0x6, 0x1, 0x6, 0x0, 0x3, 0x9, 0x7fff, 0x2, 0x94, 0x2, 0x4, 0x100, 0xd, 0x7b, 0x5, 0x80, 0x0, 0x1, 0x3, 0x2, 0x4, 0x0, 0xffff649f, 0x9, 0x6f, 0x1, 0x6, 0x6, 0x9, 0x8, 0x6, 0x10, 0x400, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f3, 0x4, 0x5, 0x6, 0x5de7d637, {0x3, 0x2, 0x2f1, 0xb, 0x7fff, 0x2}, {0x0, 0x2, 0x4, 0xdaf3, 0xf18, 0x2}, 0xc788, 0xbb, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9e, 0x1, 0x3, 0x6, 0x6f8, 0x0, 0x2, 0x80000000, 0x0, 0x7ff, 0xfffffffa, 0x5, 0x8, 0xc5, 0x0, 0x0, 0xecd, 0x5, 0x0, 0x0, 0x7, 0x80000000, 0xffff, 0x7, 0x8, 0x7fffffff, 0x6, 0x7, 0x4, 0xb41, 0x5, 0xd, 0x17aa, 0x10, 0xd, 0x3a, 0x2, 0x4, 0x0, 0xfff, 0x6, 0x9, 0xe7, 0x6, 0x1, 0x0, 0x8, 0x32510b2a, 0x7f, 0x7, 0x8d1f, 0x80, 0x4, 0x2, 0x2, 0x101, 0x5, 0x1, 0x0, 0x5, 0x9, 0x7, 0x1, 0x8000, 0x3799, 0xd8e, 0xaa1c, 0x3, 0x7, 0x5, 0xa, 0x1, 0x6, 0xb8, 0x5932, 0x92f, 0x4, 0x9, 0x9, 0x5, 0x3, 0x15, 0x800, 0xffff, 0x2, 0x2, 0x7, 0x3, 0x4, 0x5, 0x200, 0xfac8, 0x336, 0x6, 0xb5d5, 0x1, 0x1, 0x9, 0x3, 0xa, 0x0, 0xa, 0xff, 0xe5eb, 0x1d0e, 0xfffffffb, 0xfffffff4, 0x0, 0x195, 0x36, 0x4, 0xb, 0x9843, 0x0, 0x1000000, 0x6, 0x2, 0x3, 0x80, 0x7, 0x100, 0xa, 0x1ff, 0xfffff7c9, 0xfff, 0x2, 0x2, 0x3, 0x10000, 0x2, 0x4, 0xad9, 0x6, 0x7f5, 0x2, 0x7000000, 0x3, 0xff, 0x4, 0x8, 0x998, 0x3, 0x5, 0x0, 0xe, 0x4, 0x8, 0x9, 0x63, 0x7, 0xb, 0x7, 0x5, 0x8, 0x400, 0xb, 0x257, 0xb719, 0x200, 0x343, 0x0, 0x0, 0x5, 0x4, 0x5, 0xb28, 0xf5ba, 0x63630896, 0x7, 0xa, 0x3, 0x7, 0x8, 0x7f, 0x0, 0x9, 0xff, 0x4, 0xffffffff, 0x4, 0x8, 0x3cf, 0x7f, 0xffff, 0xd, 0x5, 0x0, 0x7, 0x8, 0x12f, 0x9, 0x6, 0x40, 0x6, 0x1, 0x0, 0x9, 0x101, 0x800, 0xf, 0x7, 0x5, 0x3, 0x6d, 0x1, 0x3ff, 0x3, 0x0, 0xea46, 0x7, 0xffffffc4, 0xff, 0x82a, 0xd, 0x326, 0x6, 0x2, 0x5, 0xa, 0x2, 0x81, 0x80000000, 0xfffffffc, 0xd, 0x9, 0x4, 0x2, 0xfffffff8, 0x2, 0x2, 0x7fffffff, 0x6, 0x2, 0x1, 0x1, 0xb1f, 0xffffffff, 0x1, 0x2996, 0xb2, 0x8, 0x1, 0x3, 0xb7, 0x6, 0x3, 0x3, 0x0, 0x4ac, 0x2, 0x7fffffff, 0x0, 0x1, 0xce, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}]]}, {0xa2, 0x6, "d50c5a1f8a3c2c3c37e2b5ecfde679d4ef81012c32b24abbc8eb9af45099042f2ce00e705f08acdd62546f8006e9b592ab049fc423eda80c5039aff974e23c636add1609ca3aa113683ad3bb177616539edcf349e8860eb49d33df62c5654a7e2e1462c50ba612f77786a6e2de0d175546ddba05671489e307f8ce7ee54aa04207365f823401b71df982452833f6de0eced4380471eab728a53acee5f6fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x198c}}, 0x41) 4.540143104s ago: executing program 3 (id=423): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100), 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40084) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000003c0)={0x4, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg$unix(r2, &(0x7f0000003b80)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000380)=""/13, 0xd}], 0x4, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/146, 0x92}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/72, 0x48}, {&(0x7f0000001740)=""/150, 0x96}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/84, 0x54}, {&(0x7f00000019c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/127, 0x7f}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/208, 0xd0}, {&(0x7f0000001c40)=""/104, 0x68}], 0x6, &(0x7f0000001d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001e80), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/61, 0x3d}, {&(0x7f0000002040)}], 0x3}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/116, 0x74}, {&(0x7f0000002140)=""/52, 0x34}], 0x2, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002300)=""/37, 0x25}, {&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002440)=""/185, 0xb9}, {&(0x7f0000002500)=""/254, 0xfe}, {&(0x7f0000002600)=""/78, 0x4e}, {&(0x7f0000002680)=""/140, 0x8c}], 0x6, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/253, 0xfd}], 0x2, &(0x7f0000003a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x7, 0x40000081, &(0x7f0000003d40)={0x77359400}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x51, 0x12, 0x5, 0x0, 0x29, 0x0, 0x657, 0x0, 0xbdf], 0xffff1001, 0x2429c0}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 4.42280176s ago: executing program 4 (id=424): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x8}) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000140)={0x0, 0x10000}) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0xfffffffffffffff3, 0x1003ff}, 0xffffffff, 0x7}) 4.009764048s ago: executing program 4 (id=425): r0 = fanotify_init(0x20, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) fanotify_mark(r0, 0x201, 0x20, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0)=0x8000000, 0x8) 3.8376997s ago: executing program 0 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xb, 0x800, 0x6, 0x4, 0x602, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) syz_usb_connect(0x0, 0x62, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x62, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) (async) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d20000000020000010900010073797a3100000000080002400000000304000600140000001100017e087b942cea1ef548a687c85b2e18ea013fb66aabbde9436552bc871970571951ceba80452bfcd0c945089354ba40e430eef273f92b6510268e1a12a83a656411d0749f45d6df8ae0abfbde8bccbd4b8624fa73b206600f638118e8cb540a201fa91800000000"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d20000000020000010900010073797a3100000000080002400000000304000600140000001100017e087b942cea1ef548a687c85b2e18ea013fb66aabbde9436552bc871970571951ceba80452bfcd0c945089354ba40e430eef273f92b6510268e1a12a83a656411d0749f45d6df8ae0abfbde8bccbd4b8624fa73b206600f638118e8cb540a201fa91800000000"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140b, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x24000840) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 3.806503852s ago: executing program 5 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64070000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delqdisc={0x214, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0x7, 0x1}, {0x4, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0xf7, 0x2}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa9, 0xc, 0xa138, 0x5, 0x1, 0xee8, 0x9, 0xa}}, {0x18, 0x2, [0x2, 0x6, 0x1, 0x6, 0xfffd, 0xff01, 0x4, 0x2, 0x3, 0x1]}}, {{0x1c, 0x1, {0x7, 0x5, 0x5, 0x0, 0x1, 0xe, 0x0, 0x8}}, {0x14, 0x2, [0xfff6, 0x7, 0xe1, 0xa990, 0x8001, 0x2, 0x4000, 0x8ded]}}, {{0x1c, 0x1, {0xef, 0xa1, 0x4, 0x9, 0x0, 0x6, 0x7fffffff}}, {0x4}}, {{0x1c, 0x1, {0x1e, 0x8, 0x7, 0x1, 0x2, 0x9, 0xf, 0x1}}, {0x6, 0x2, [0x34]}}, {{0x1c, 0x1, {0x8e, 0xf7, 0x8, 0xffffc17b, 0x2, 0x2, 0x14, 0x3}}, {0xa, 0x2, [0x1, 0x9, 0x2]}}, {{0x1c, 0x1, {0x5, 0x24, 0x3, 0x9, 0x1, 0x759, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xfa, 0x6, 0x7ff, 0x601, 0x0, 0x7ff, 0xe, 0x8}}, {0x14, 0x2, [0xff, 0x0, 0x1, 0x8, 0x570d, 0x4, 0x60, 0x7]}}, {{0x1c, 0x1, {0x9, 0x3, 0x2, 0x101, 0x0, 0xfe3, 0x6, 0x6}}, {0x10, 0x2, [0x6, 0x2, 0x8, 0x3a89, 0x9, 0x5a3f]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x20, 0xa1, 0x0, 0xc3b3, 0x1, 0x7fffffff, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x2f, 0x1, 0x9, 0x2, 0x0, 0x9, 0x8}}, {0x14, 0x2, [0x9, 0x1ff, 0x729, 0x9, 0x9, 0x5, 0x6, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xf3}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x20008851) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r4 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_create(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x9, 0x7, 0x6, 0x8, 0x19, "8cff18beea7dfd4b55fac8996de31f8ad1bb0b"}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) 3.796740041s ago: executing program 1 (id=428): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 3.738714337s ago: executing program 4 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x0, @sdr={0x3234564e, 0xfffffffa}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$nl_generic(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x44, 0x19, 0x100, 0x70bd29, 0x25dfdbfe, {0xc}, [@typed={0x8, 0x4b, 0x0, 0x0, @pid}, @generic, @generic="e77667f80196857b644e31a73d3855629fce4d302c23f0ad11427fa440ede4b1a574c84a45b2"]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000180)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = dup(r3) ioctl$BLKRRPART(r9, 0x125f, 0x0) 3.645689988s ago: executing program 0 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0x1e}, {&(0x7f0000001500)}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62ad7971b583", 0xa2}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f89b9fc2b651d28e2c961aa12e584ee3b", 0x86}, {&(0x7f0000000400)="03802e32b59b4735cde66da12d219704f9cef1779ad81d7e8d8c6ac93f0f9b1a42c0feb9fa792769f390914ff6423a6c2fbca23a925d3529297d8ef23611cd1abaeb17ad9edbec0a8e62da3d21578d2f0197bfdd390f53eba02169162b4c0224b679c5e15f9ccbdc15ca8f05d54d6c73cf7d40a11e3156b3feeea4a98c7a199b2b14ca13920d7b0109372c18ffaf4d894cea0cdec047fa82f801acc706a02a57fc7c468a2cd9847cdee0875e59446f1fe4", 0xb1}], 0x8, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000025c0)=""/188, &(0x7f0000000100)=0xbc) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3.472367259s ago: executing program 1 (id=431): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddb452508000000180004801300010062726f6164636173742d6c696e7d6b"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setgid(0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r8, 0x2, {0x2, 0xf0}, 0xff}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x1, &(0x7f0000000600)=0x8, 0x5) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20000001) 0s ago: executing program 0 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc020000210a0108fdffffff1000000000000000630003"], 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x80) kernel console output (not intermixed with test programs): 3490][ T30] audit: type=1400 audit(1760783556.716:254): avc: denied { write } for pid=6200 comm="syz.4.67" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 100.113340][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.422984][ T30] audit: type=1400 audit(1760783558.006:255): avc: denied { write } for pid=6217 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.859459][ T30] audit: type=1326 audit(1760783558.566:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 101.882591][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.970339][ T30] audit: type=1326 audit(1760783558.566:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 102.218150][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.448609][ T6238] netlink: 596 bytes leftover after parsing attributes in process `syz.4.75'. [ 102.474195][ T30] audit: type=1400 audit(1760783558.566:258): avc: denied { mount } for pid=6217 comm="syz.0.71" name="/" dev="ramfs" ino=9627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.496120][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.867237][ T30] audit: type=1326 audit(1760783558.836:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 102.985914][ T30] audit: type=1326 audit(1760783559.426:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 103.139367][ T30] audit: type=1326 audit(1760783559.426:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 103.152956][ T6252] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 103.162533][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.261982][ T6257] veth0_to_bridge: entered promiscuous mode [ 103.390895][ T30] audit: type=1326 audit(1760783559.426:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 103.414093][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.600726][ T6248] veth0_to_bridge: left promiscuous mode [ 103.606697][ T30] audit: type=1326 audit(1760783559.436:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18438efc9 code=0x7fc00000 [ 103.635295][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.912942][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 103.930115][ T5925] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.421055][ T6268] tipc: Can't bind to reserved service type 1 [ 104.427233][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.471295][ T5925] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.281923][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 105.303583][ T5925] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.318065][ T5925] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.327166][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.438983][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 105.438998][ T30] audit: type=1400 audit(1760783562.156:272): avc: denied { mount } for pid=6284 comm="syz.2.88" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 105.475691][ T30] audit: type=1400 audit(1760783562.196:273): avc: denied { mounton } for pid=6284 comm="syz.2.88" path="/18/file0" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.498187][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.512960][ T30] audit: type=1400 audit(1760783562.226:274): avc: denied { read } for pid=6284 comm="syz.2.88" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.553156][ T5925] usb 5-1: usb_control_msg returned -71 [ 105.564239][ T30] audit: type=1400 audit(1760783562.226:275): avc: denied { open } for pid=6284 comm="syz.2.88" path="/18/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.592319][ T5925] usbtmc 5-1:16.0: can't read capabilities [ 105.641202][ T61] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 105.649245][ T5925] usb 5-1: USB disconnect, device number 2 [ 105.650475][ T30] audit: type=1400 audit(1760783562.226:276): avc: denied { read } for pid=6284 comm="syz.2.88" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.683011][ T30] audit: type=1400 audit(1760783562.406:277): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 106.096072][ T30] audit: type=1400 audit(1760783562.816:278): avc: denied { connect } for pid=6290 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.278499][ T30] audit: type=1400 audit(1760783562.996:279): avc: denied { execute } for pid=6307 comm="syz.2.91" path="/20/cpuacct.usage_percpu" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.379151][ T30] audit: type=1400 audit(1760783563.096:280): avc: denied { mount } for pid=6311 comm="syz.3.93" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.673673][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.993356][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 107.010833][ T30] audit: type=1400 audit(1760783563.726:281): avc: denied { create } for pid=6317 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.052562][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 107.086536][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.096049][ T10] usb 4-1: Product: syz [ 107.100370][ T10] usb 4-1: Manufacturer: syz [ 107.190047][ T10] usb 4-1: SerialNumber: syz [ 107.199641][ T10] usb 4-1: config 0 descriptor?? [ 107.207917][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 107.388816][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.929096][ T6328] evm: overlay not supported [ 107.992955][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 108.000037][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.033722][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.052954][ T5896] usb 2-1: config 0 has no interfaces? [ 108.060681][ T5896] usb 2-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 108.083477][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.091514][ T5896] usb 2-1: Product: 䕜 [ 108.096985][ T5896] usb 2-1: Manufacturer: Й [ 108.101499][ T5896] usb 2-1: SerialNumber: syz [ 108.115248][ T5896] usb 2-1: config 0 descriptor?? [ 108.709312][ T6348] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 108.716961][ T6348] netlink: 17 bytes leftover after parsing attributes in process `syz.1.95'. [ 108.857413][ T6348] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.869412][ T6348] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 110.274453][ T5925] usb 2-1: USB disconnect, device number 8 [ 110.292935][ T10] gspca_sonixj: i2c_w8 err -110 [ 110.342999][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 111.152950][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.842704][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 111.842752][ T30] audit: type=1400 audit(1760783568.116:287): avc: denied { create } for pid=6368 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.931872][ T5925] usb 5-1: device descriptor read/64, error -71 [ 111.974025][ T30] audit: type=1400 audit(1760783568.666:288): avc: denied { create } for pid=6371 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.312080][ T24] usb 4-1: USB disconnect, device number 6 [ 112.350379][ T30] audit: type=1400 audit(1760783569.066:289): avc: denied { getopt } for pid=6371 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.383211][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.392672][ T6378] virtiofs: Unknown parameter 'always 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 18 nlmon0 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 20 batadv0 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 21 vxcan0 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 22 vxcan1 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 23 veth0 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 24 veth1 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 25 wg0 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 26 wg1 : 1 V3 [ 112.392672][ T6378] 010000E0 1 0:00000000 0 [ 112.392672][ T6378] 27 wg2 : 1 ' [ 112.442152][ T30] audit: type=1400 audit(1760783569.156:290): avc: denied { accept } for pid=6371 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.508390][ T30] audit: type=1400 audit(1760783569.156:291): avc: denied { ioctl } for pid=6371 comm="syz.2.103" path="socket:[10641]" dev="sockfs" ino=10641 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.622276][ T6384] FAULT_INJECTION: forcing a failure. [ 112.622276][ T6384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.632970][ T5925] usb 5-1: device descriptor read/64, error -71 [ 112.659443][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 112.659467][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.659478][ T6384] Call Trace: [ 112.659484][ T6384] [ 112.659491][ T6384] dump_stack_lvl+0x16c/0x1f0 [ 112.659519][ T6384] should_fail_ex+0x512/0x640 [ 112.659547][ T6384] _copy_from_user+0x2e/0xd0 [ 112.659571][ T6384] copy_msghdr_from_user+0x98/0x160 [ 112.659594][ T6384] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.659629][ T6384] ___sys_sendmsg+0xfe/0x1d0 [ 112.659652][ T6384] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.659672][ T6384] ? __lock_acquire+0x622/0x1c90 [ 112.659731][ T6384] __sys_sendmsg+0x16d/0x220 [ 112.659754][ T6384] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.659797][ T6384] do_syscall_64+0xcd/0xfa0 [ 112.659821][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.659840][ T6384] RIP: 0033:0x7fdf9538efc9 [ 112.659854][ T6384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.659871][ T6384] RSP: 002b:00007fdf961b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.659889][ T6384] RAX: ffffffffffffffda RBX: 00007fdf955e5fa0 RCX: 00007fdf9538efc9 [ 112.659900][ T6384] RDX: 0000000000020000 RSI: 0000200000000480 RDI: 0000000000000005 [ 112.659909][ T6384] RBP: 00007fdf961b2090 R08: 0000000000000000 R09: 0000000000000000 [ 112.659919][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.659929][ T6384] R13: 00007fdf955e6038 R14: 00007fdf955e5fa0 R15: 00007ffef39504c8 [ 112.659955][ T6384] [ 112.823700][ T5925] usb usb5-port1: attempt power cycle [ 112.883648][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.045880][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.092678][ T5871] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 113.106851][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.119862][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.131099][ T5871] usb 1-1: Product: syz [ 113.135590][ T5871] usb 1-1: Manufacturer: syz [ 113.140865][ T5871] usb 1-1: SerialNumber: syz [ 113.164844][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.194328][ T5925] usb 5-1: device descriptor read/8, error -71 [ 113.414002][ T6380] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 113.503193][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.639724][ T30] audit: type=1326 audit(1760783570.356:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f98efc9 code=0x7ffc0000 [ 113.643366][ T5925] usb 5-1: device descriptor read/8, error -71 [ 113.663731][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.679669][ T30] audit: type=1326 audit(1760783570.356:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8b7f98efc9 code=0x7ffc0000 [ 113.731135][ T30] audit: type=1326 audit(1760783570.356:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f98efc9 code=0x7ffc0000 [ 113.754723][ T6401] blktrace: Concurrent blktraces are not allowed on nullb0 [ 113.774193][ T30] audit: type=1326 audit(1760783570.366:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b7f98efc9 code=0x7ffc0000 [ 113.812389][ T30] audit: type=1326 audit(1760783570.386:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f98efc9 code=0x7ffc0000 [ 113.813377][ T5925] usb usb5-port1: unable to enumerate USB device [ 113.873227][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 113.882766][ T5896] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 113.956659][ T5896] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.968563][ T5896] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.982692][ T5896] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.984314][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.993708][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.013357][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.068333][ T5896] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 114.078762][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.088060][ T5896] usb 3-1: Product: syz [ 114.092345][ T5896] usb 3-1: Manufacturer: syz [ 114.295619][ T5896] usb 3-1: SerialNumber: syz [ 114.465098][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.470134][ T5896] usb 3-1: config 0 descriptor?? [ 114.486087][ T5871] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 114.527422][ T5871] cdc_ncm 1-1:1.0: bind() failure [ 114.546989][ T5871] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 114.562932][ T5871] cdc_ncm 1-1:1.1: bind() failure [ 114.586558][ T5871] usb 1-1: USB disconnect, device number 2 [ 114.634271][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 114.641720][ T5925] usb 5-1: config 9 has an invalid interface number: 92 but max is 0 [ 114.653136][ T5925] usb 5-1: config 9 has no interface number 0 [ 114.662434][ T5925] usb 5-1: config 9 interface 92 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 114.761847][ T5896] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 114.787741][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 114.798933][ T5925] usb 5-1: config 9 interface 92 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 114.815707][ T5925] usb 5-1: config 9 interface 92 has no altsetting 0 [ 114.871630][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 114.880377][ T5925] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 114.889830][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.899136][ T5925] usb 5-1: Product: ␉ [ 114.925671][ T5925] usb 5-1: Manufacturer: 䊉ᬢ臜 [ 114.933277][ T5925] usb 5-1: SerialNumber: syz [ 114.942738][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 114.955922][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 114.957511][ T6416] No such timeout policy "syz1" [ 115.010687][ T6416] openvswitch: netlink: nsh attr 0 has unexpected len 324 expected 0 [ 115.019210][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.155111][ T6221] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.155467][ T6401] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.204395][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.246730][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.267843][ T5168] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 115.497093][ T6424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'. [ 115.506930][ T6424] openvswitch: netlink: Flow key attr not present in new flow. [ 115.550871][ T5925] hub 5-1:9.92: bad descriptor, ignoring hub [ 115.567388][ T5925] hub 5-1:9.92: probe with driver hub failed with error -5 [ 115.661491][ T5925] usb 5-1: USB disconnect, device number 7 [ 116.283275][ T5878] usb 3-1: USB disconnect, device number 3 [ 116.771775][ T6431] binder: 6430:6431 ioctl c0306201 200000000040 returned -14 [ 116.784385][ T6435] virtiofs: Unknown parameter 'always 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 18 nlmon0 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 20 batadv0 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 21 vxcan0 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 22 vxcan1 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 23 veth0 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 24 veth1 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 25 wg0 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 26 wg1 : 1 V3 [ 116.784385][ T6435] 010000E0 1 0:00000000 0 [ 116.784385][ T6435] 27 wg2 : 1 ' [ 118.811692][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 118.811706][ T30] audit: type=1400 audit(1760783575.526:326): avc: denied { ioctl } for pid=6452 comm="syz.2.123" path="socket:[11041]" dev="sockfs" ino=11041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.042972][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.222945][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 119.234263][ T976] usb 2-1: config 0 has no interfaces? [ 119.241464][ T976] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.251546][ T976] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.272026][ T30] audit: type=1400 audit(1760783575.986:327): avc: denied { map } for pid=6471 comm="syz.3.129" path="socket:[10164]" dev="sockfs" ino=10164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.321831][ T30] audit: type=1400 audit(1760783575.986:328): avc: denied { read accept } for pid=6471 comm="syz.3.129" path="socket:[10164]" dev="sockfs" ino=10164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.365041][ T976] usb 2-1: Manufacturer: syz [ 119.400838][ T976] usb 2-1: config 0 descriptor?? [ 119.411582][ T30] audit: type=1400 audit(1760783576.126:329): avc: denied { read write } for pid=6464 comm="syz.2.128" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 `  ./file0/file0@   /dev/fusefd=0x0000000000000007,rootmode=00000000000000000040000,user_id=0[ 119.557520][ T30] audit: type=1400 audit(1760783576.126:330): avc: denied { open } for pid=6464 comm="syz.2.128" path="/26/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 0000000000000000000,group_id=00000000000000000000P)@s[ 119.656740][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 119.670399][ T6457] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.074291][ T5925] usb 2-1: USB disconnect, device number 9 [ 120.158027][ T6480] veth0_to_bridge: entered promiscuous mode [ 121.073452][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.144267][ T6475] veth0_to_bridge: left promiscuous mode [ 121.263093][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 121.294255][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 121.323678][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.358233][ T5896] usb 1-1: config 0 descriptor?? [ 121.661807][ T6505] veth0_to_bridge: entered promiscuous mode [ 121.717165][ T5896] usb 1-1: interface 1 not found [ 121.832983][ T30] audit: type=1400 audit(1760783578.546:331): avc: denied { sys_module } for pid=6497 comm="syz.2.136" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.899798][ T5896] usb 1-1: USB disconnect, device number 3 [ 121.929651][ T6511] FAULT_INJECTION: forcing a failure. [ 121.929651][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.931285][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.944888][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 121.944915][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.944927][ T6511] Call Trace: [ 121.944934][ T6511] [ 121.944941][ T6511] dump_stack_lvl+0x16c/0x1f0 [ 121.944970][ T6511] should_fail_ex+0x512/0x640 [ 121.944997][ T6511] _copy_from_user+0x2e/0xd0 [ 121.945024][ T6511] copy_msghdr_from_user+0x98/0x160 [ 121.945049][ T6511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 121.945087][ T6511] ___sys_sendmsg+0xfe/0x1d0 [ 121.945111][ T6511] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.945132][ T6511] ? __lock_acquire+0x622/0x1c90 [ 121.945190][ T6511] __sys_sendmsg+0x16d/0x220 [ 121.945214][ T6511] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.945255][ T6511] do_syscall_64+0xcd/0xfa0 [ 121.945280][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.945300][ T6511] RIP: 0033:0x7f8b7f98efc9 [ 121.945316][ T6511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.945333][ T6511] RSP: 002b:00007f8b807b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.945359][ T6511] RAX: ffffffffffffffda RBX: 00007f8b7fbe5fa0 RCX: 00007f8b7f98efc9 [ 121.945372][ T6511] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 121.945383][ T6511] RBP: 00007f8b807b9090 R08: 0000000000000000 R09: 0000000000000000 [ 121.945394][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.945405][ T6511] R13: 00007f8b7fbe6038 R14: 00007f8b7fbe5fa0 R15: 00007ffc379cca78 [ 121.945432][ T6511] [ 121.945902][ T6510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.134771][ T6496] veth0_to_bridge: left promiscuous mode [ 122.417986][ T30] audit: type=1400 audit(1760783579.136:332): avc: denied { write } for pid=6516 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.805805][ T6528] virtiofs: Unknown parameter 'always 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 18 nlmon0 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 20 batadv0 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 21 vxcan0 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 22 vxcan1 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 23 veth0 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 24 veth1 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 25 wg0 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 26 wg1 : 1 V3 [ 122.805805][ T6528] 010000E0 1 0:00000000 0 [ 122.805805][ T6528] 27 wg2 : 1 ' [ 123.870223][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 123.983526][ T6539] veth0_to_bridge: entered promiscuous mode [ 124.178961][ T6534] veth0_to_bridge: left promiscuous mode [ 124.404785][ T30] audit: type=1400 audit(1760783581.106:333): avc: denied { setopt } for pid=6548 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.930762][ T30] audit: type=1400 audit(1760783581.456:334): avc: denied { read write } for pid=6552 comm="syz.1.151" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.405911][ T30] audit: type=1400 audit(1760783581.456:335): avc: denied { open } for pid=6552 comm="syz.1.151" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.430897][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.611771][ T30] audit: type=1400 audit(1760783582.326:336): avc: denied { write } for pid=6556 comm="syz.2.152" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.654300][ T30] audit: type=1400 audit(1760783582.326:337): avc: denied { open } for pid=6556 comm="syz.2.152" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.715537][ T30] audit: type=1400 audit(1760783582.356:338): avc: denied { setopt } for pid=6556 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.752626][ T6565] FAULT_INJECTION: forcing a failure. [ 125.752626][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.765961][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(full) [ 125.765988][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.765999][ T6565] Call Trace: [ 125.766006][ T6565] [ 125.766014][ T6565] dump_stack_lvl+0x16c/0x1f0 [ 125.766043][ T6565] should_fail_ex+0x512/0x640 [ 125.766071][ T6565] _copy_to_user+0x32/0xd0 [ 125.766099][ T6565] simple_read_from_buffer+0xcb/0x170 [ 125.766126][ T6565] proc_fail_nth_read+0x197/0x240 [ 125.766156][ T6565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.766186][ T6565] ? rw_verify_area+0xcf/0x6c0 [ 125.766207][ T6565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.766235][ T6565] vfs_read+0x1e4/0xcf0 [ 125.766263][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 125.766288][ T6565] ? __pfx_vfs_read+0x10/0x10 [ 125.766326][ T6565] ? __fget_files+0x20e/0x3c0 [ 125.766360][ T6565] ksys_read+0x12a/0x250 [ 125.766383][ T6565] ? __pfx_ksys_read+0x10/0x10 [ 125.766409][ T6565] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 125.766436][ T6565] do_syscall_64+0xcd/0xfa0 [ 125.766462][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.766482][ T6565] RIP: 0033:0x7fdf9538d9dc [ 125.766498][ T6565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.766515][ T6565] RSP: 002b:00007fdf96170030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.766534][ T6565] RAX: ffffffffffffffda RBX: 00007fdf955e6180 RCX: 00007fdf9538d9dc [ 125.766547][ T6565] RDX: 000000000000000f RSI: 00007fdf961700a0 RDI: 000000000000000a [ 125.766559][ T6565] RBP: 00007fdf96170090 R08: 0000000000000000 R09: 0000000000000000 [ 125.766570][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.766581][ T6565] R13: 00007fdf955e6218 R14: 00007fdf955e6180 R15: 00007ffef39504c8 [ 125.766612][ T6565] [ 126.010584][ T30] audit: type=1400 audit(1760783582.356:339): avc: denied { connect } for pid=6556 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.843003][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.899871][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.017437][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 127.032554][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 127.060348][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.073036][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 127.086224][ T5896] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 127.095833][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.107003][ T5896] usb 2-1: config 0 descriptor?? [ 127.158941][ T5896] usb 2-1: interface 1 not found [ 127.175449][ T5925] usb 4-1: config 0 descriptor?? [ 127.488274][ T6584] xt_connbytes: Forcing CT accounting to be enabled [ 128.004392][ T5925] usb 4-1: interface 1 not found [ 128.011309][ T5925] usb 4-1: USB disconnect, device number 7 [ 128.330421][ T5925] usb 2-1: USB disconnect, device number 10 [ 128.679287][ T30] audit: type=1400 audit(1760783585.226:340): avc: denied { create } for pid=6596 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.731875][ T30] audit: type=1400 audit(1760783585.246:341): avc: denied { ioctl } for pid=6596 comm="syz.2.162" path="socket:[12676]" dev="sockfs" ino=12676 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.756342][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.872760][ T6616] syz.2.166 uses obsolete (PF_INET,SOCK_PACKET) [ 129.919776][ T976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.673515][ T30] audit: type=1400 audit(1760783587.396:342): avc: denied { read append } for pid=6614 comm="syz.2.166" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.697569][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 130.707937][ T30] audit: type=1400 audit(1760783587.426:343): avc: denied { ioctl } for pid=6612 comm="syz.1.165" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.737931][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.755687][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 130.832184][ T30] audit: type=1400 audit(1760783587.426:344): avc: denied { map } for pid=6614 comm="syz.2.166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.855729][ T976] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 130.893710][ T976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 130.913105][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.921116][ T976] usb 2-1: Product: syz [ 130.933021][ T30] audit: type=1400 audit(1760783587.426:345): avc: denied { execute } for pid=6614 comm="syz.2.166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.965342][ T976] usb 2-1: Manufacturer: syz [ 130.984052][ T976] usb 2-1: SerialNumber: syz [ 131.003620][ T976] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 131.020602][ T976] usbtest 2-1:1.0: Linux user mode ISO test driver [ 131.038192][ T976] usbtest 2-1:1.0: high-speed {control iso-out} tests (+alt) [ 131.325318][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 131.366856][ T6622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6622 comm=syz.0.168 [ 131.388155][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 131.405343][ T30] audit: type=1400 audit(1760783588.126:346): avc: denied { read write } for pid=6629 comm="syz.3.171" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.433561][ T30] audit: type=1400 audit(1760783588.126:347): avc: denied { open } for pid=6629 comm="syz.3.171" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.514418][ T6622] overlayfs: missing 'lowerdir' [ 131.642959][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.689886][ T30] audit: type=1400 audit(1760783588.406:348): avc: denied { setopt } for pid=6644 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.812988][ T5925] usb 4-1: device descriptor read/64, error -71 [ 132.072971][ T5925] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.272249][ T6651] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.175'. [ 132.352944][ T5925] usb 4-1: device descriptor read/64, error -71 [ 132.468056][ T5925] usb usb4-port1: attempt power cycle [ 132.733313][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833791][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.854368][ T5925] usb 4-1: device descriptor read/8, error -71 [ 133.103217][ T5925] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.111112][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233688][ T976] usb 2-1: USB disconnect, device number 11 [ 133.233763][ T5925] usb 4-1: device descriptor read/8, error -71 [ 133.847330][ T5925] usb usb4-port1: unable to enumerate USB device [ 135.227679][ T5925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.282951][ T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.363085][ T5925] usb 2-1: device descriptor read/64, error -71 [ 135.713078][ T5925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.000658][ T976] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.027678][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.043298][ T976] usb 1-1: Product: syz [ 136.047483][ T976] usb 1-1: Manufacturer: syz [ 136.052078][ T976] usb 1-1: SerialNumber: syz [ 136.079214][ T976] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.099155][ T30] audit: type=1400 audit(1760783592.816:349): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.138374][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.153199][ T5925] usb 2-1: device descriptor read/64, error -71 [ 136.383182][ T5925] usb usb2-port1: attempt power cycle [ 136.391754][ T6696] openvswitch: netlink: Multiple metadata blocks provided [ 136.413235][ T5878] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.582951][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 136.646271][ T5871] usb 1-1: USB disconnect, device number 4 [ 136.654697][ T5878] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 136.669371][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.186642][ T5878] usb 5-1: config 0 descriptor?? [ 137.227127][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 137.286525][ T5925] usb 2-1: device descriptor read/8, error -71 [ 137.373376][ T24] usb 1-1: Service connection timeout for: 256 [ 137.379712][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 137.383562][ T30] audit: type=1800 audit(1760783594.076:350): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.188" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 137.410239][ T5878] as10x_usb: device has been detected [ 137.410916][ T24] ath9k_htc: Failed to initialize the device [ 137.460305][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.469878][ T5871] usb 1-1: ath9k_htc: USB layer deinitialized [ 137.491859][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.528275][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.593268][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 137.597275][ T6672] trusted_key: syz.4.183 sent an empty control message without MSG_MORE. [ 137.607253][ T5878] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 137.643035][ T5925] usb 2-1: device descriptor read/8, error -71 [ 137.839507][ T5878] as10x_usb: error during firmware upload part1 [ 137.879971][ T5878] Registered device nBox DVB-T Dongle [ 137.895388][ T5925] usb usb2-port1: unable to enumerate USB device [ 137.944736][ T5878] usb 5-1: USB disconnect, device number 8 [ 137.986726][ T5878] Unregistered device nBox DVB-T Dongle [ 137.995597][ T5878] as10x_usb: device has been disconnected [ 138.244469][ T30] audit: type=1400 audit(1760783594.966:351): avc: denied { read } for pid=5168 comm="acpid" name="mouse7" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 138.650795][ T30] audit: type=1400 audit(1760783594.966:352): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 138.674045][ T30] audit: type=1400 audit(1760783594.966:353): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=2846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 139.034704][ T6734] gfs2: error -5 reading superblock [ 139.275280][ T6740] Bluetooth: MGMT ver 1.23 [ 139.348453][ T30] audit: type=1400 audit(1760783595.956:354): avc: denied { append } for pid=6736 comm="syz.4.195" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.710195][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.111463][ T30] audit: type=1400 audit(1760783597.826:355): avc: denied { mount } for pid=6752 comm="syz.2.200" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.480768][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.487267][ T5818] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 141.796466][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 142.108721][ T30] audit: type=1400 audit(1760783598.826:356): avc: denied { name_connect } for pid=6772 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 143.072414][ T30] audit: type=1400 audit(1760783599.766:357): avc: denied { bind } for pid=6772 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.423071][ T5896] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 143.604064][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 143.615117][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.627653][ T5896] usb 2-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 143.665091][ T5896] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 143.678441][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.931139][ T30] audit: type=1400 audit(1760783600.446:358): avc: denied { create } for pid=6795 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.961499][ T5896] usb 2-1: Product: syz [ 144.035836][ T5896] usb 2-1: Manufacturer: syz [ 144.054690][ T5896] usb 2-1: SerialNumber: syz [ 144.685035][ T30] audit: type=1400 audit(1760783601.396:359): avc: denied { write } for pid=6772 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.837513][ T6789] bond1: entered promiscuous mode [ 145.042771][ T30] audit: type=1400 audit(1760783601.756:360): avc: denied { read } for pid=6812 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.404798][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.216'. [ 145.595087][ T5925] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 145.782339][ T30] audit: type=1400 audit(1760783602.496:361): avc: denied { ioctl } for pid=6821 comm="syz.2.217" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 145.825771][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.825806][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.825844][ T5925] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 145.825860][ T5925] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 145.848226][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.848256][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.848273][ T5925] usb 1-1: Product: syz [ 145.848289][ T5925] usb 1-1: Manufacturer: syz [ 145.848303][ T5925] usb 1-1: SerialNumber: syz [ 145.885323][ T6813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.891298][ T5925] cdc_mbim 1-1:1.0: skipping garbage [ 146.005395][ T5896] comedi comedi5: Wrong number of endpoints [ 146.005430][ T5896] dt9812 2-1:244.0: driver 'dt9812' failed to auto-configure device. [ 146.031441][ T5896] usb 2-1: USB disconnect, device number 16 [ 146.088930][ T6813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.089030][ T6813] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.699001][ T6834] veth0_to_bridge: entered promiscuous mode [ 146.963894][ T5925] cdc_mbim 1-1:1.0: bind() failure [ 147.017235][ T5925] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 147.090197][ T6825] veth0_to_bridge: left promiscuous mode [ 147.096167][ T30] audit: type=1400 audit(1760783603.816:362): avc: denied { setopt } for pid=6838 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.117085][ T5925] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 147.217429][ T30] audit: type=1400 audit(1760783603.936:363): avc: denied { ioctl } for pid=6838 comm="syz.0.222" path="socket:[13081]" dev="sockfs" ino=13081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.247320][ T5925] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 147.691594][ T5925] usb 1-1: USB disconnect, device number 5 [ 147.705454][ T30] audit: type=1400 audit(1760783604.036:364): avc: denied { bind } for pid=6838 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.143094][ T6848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 148.149724][ T6848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.165488][ T6848] vhci_hcd vhci_hcd.0: Device attached [ 148.363088][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.365378][ T6858] veth0_to_bridge: entered promiscuous mode [ 148.562319][ T5896] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 149.232989][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 149.313414][ T6851] veth0_to_bridge: left promiscuous mode [ 149.321161][ T24] usb 3-1: config 0 has no interfaces? [ 149.327062][ T24] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 149.342229][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.377748][ T24] usb 3-1: config 0 descriptor?? [ 149.435474][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 150.128492][ T30] audit: type=1400 audit(1760783606.846:365): avc: denied { ioctl } for pid=6846 comm="syz.2.223" path="socket:[13357]" dev="sockfs" ino=13357 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.128941][ T24] usb 3-1: USB disconnect, device number 4 [ 150.187433][ T6852] vhci_hcd: connection closed [ 150.197621][ T6680] vhci_hcd: stop threads [ 150.232925][ T5896] usb 37-1: device descriptor read/64, error -71 [ 150.233751][ T6680] vhci_hcd: release socket [ 150.252192][ T30] audit: type=1400 audit(1760783606.876:366): avc: denied { create } for pid=6866 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.268483][ T6680] vhci_hcd: disconnect device [ 150.423017][ T5896] vhci_hcd: vhci_device speed not set [ 152.146497][ T6906] comedi: No check for data length of config insn id 25 is implemented [ 152.262237][ T6906] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 152.878857][ T6906] comedi: Assuming n=15 is correct [ 153.643459][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.906014][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 153.922264][ T43] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 153.953666][ T43] usb 5-1: New USB device strings: Mfr=84, Product=2, SerialNumber=3 [ 153.961835][ T43] usb 5-1: Product: syz [ 153.967280][ T43] usb 5-1: Manufacturer: syz [ 153.992255][ T43] usb 5-1: SerialNumber: syz [ 154.030416][ T43] usb 5-1: config 0 descriptor?? [ 154.126793][ T43] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 154.158215][ T43] usb 5-1: Detected FT4233HP [ 154.838970][ T30] audit: type=1400 audit(1760783611.556:367): avc: denied { block_suspend } for pid=6930 comm="syz.3.246" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.673201][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.008234][ T5925] usb 1-1: device descriptor read/64, error -71 [ 156.323088][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 156.347397][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 156.354013][ T30] audit: type=1400 audit(1760783613.076:368): avc: denied { remount } for pid=6952 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.374394][ T6953] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 156.473042][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.783299][ T5925] usb 1-1: device descriptor read/64, error -71 [ 156.858936][ T43] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 156.871813][ T43] usb 5-1: USB disconnect, device number 9 [ 156.911592][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 156.936051][ T30] audit: type=1400 audit(1760783613.646:369): avc: denied { create } for pid=6960 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.992576][ T43] ftdi_sio 5-1:0.0: device disconnected [ 157.446637][ T5925] usb usb1-port1: attempt power cycle [ 157.548764][ T30] audit: type=1400 audit(1760783613.656:370): avc: denied { ioctl } for pid=6960 comm="syz.3.254" path="socket:[13519]" dev="sockfs" ino=13519 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.114138][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.127600][ T6975] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 158.266874][ T6979] syz.4.257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.474165][ T5925] usb 1-1: device not accepting address 8, error -71 [ 158.767504][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 158.862956][ T6975] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 158.958733][ T6975] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 158.977410][ T6975] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.221302][ T30] audit: type=1400 audit(1760783615.936:371): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 159.912117][ T7000] netlink: 'syz.0.264': attribute type 21 has an invalid length. [ 160.037273][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.038203][ T30] audit: type=1400 audit(1760783616.756:372): avc: denied { write } for pid=6989 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.292941][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.493241][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 160.542476][ T43] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 160.561189][ T43] usb 4-1: config 0 has no interface number 0 [ 160.704141][ T7013] veth0_to_bridge: entered promiscuous mode [ 161.078273][ T7010] pim6reg: entered allmulticast mode [ 161.153009][ T43] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.173967][ T43] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 161.184768][ T43] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 161.195549][ T43] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x6A, changing to 0xA [ 161.217189][ T43] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 161.233100][ T43] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 161.261897][ T7011] veth0_to_bridge: left promiscuous mode [ 161.291047][ T43] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 161.312465][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.313750][ T30] audit: type=1400 audit(1760783618.026:373): avc: denied { write } for pid=7014 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.373136][ T976] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 161.425657][ T7018] netlink: 348 bytes leftover after parsing attributes in process `syz.0.269'. [ 161.581631][ T43] usb 4-1: Product: syz [ 161.610036][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 162.176906][ T43] usb 4-1: Manufacturer: syz [ 162.197240][ T43] usb 4-1: SerialNumber: syz [ 162.248166][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.278733][ T43] usb 4-1: config 0 descriptor?? [ 162.388242][ T976] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 162.416069][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.435735][ T976] usb 2-1: Product: syz [ 162.446112][ T976] usb 2-1: Manufacturer: syz [ 162.460926][ T976] usb 2-1: SerialNumber: syz [ 162.484238][ T976] usb 2-1: config 0 descriptor?? [ 162.520346][ T976] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 162.543090][ T43] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 162.559201][ T976] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 162.574354][ T43] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 162.596517][ T43] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 162.652391][ T43] usb 4-1: USB disconnect, device number 12 [ 162.702462][ T7027] sp0: Synchronizing with TNC [ 162.842556][ T30] audit: type=1400 audit(1760783619.446:374): avc: denied { setopt } for pid=7007 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.862579][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.886328][ T976] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 162.927666][ T7030] comedi: No check for data length of config insn id 25 is implemented [ 162.936121][ T7030] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 163.015256][ T7030] comedi: Assuming n=15 is correct [ 163.332156][ T30] audit: type=1400 audit(1760783620.046:375): avc: denied { getopt } for pid=7035 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.515124][ T7024] [U] [ 164.015761][ T30] audit: type=1400 audit(1760783620.386:376): avc: denied { mount } for pid=7041 comm="syz.3.275" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.369046][ T5925] usb 2-1: USB disconnect, device number 17 [ 164.470576][ T7010] pim6reg: left allmulticast mode [ 164.745581][ T6687] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.937638][ T6687] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.959666][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 165.043372][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 165.075378][ T6687] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.186143][ T7058] bond0: (slave bond_slave_1): Releasing backup interface [ 165.250347][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.260057][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.268118][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.278827][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.286512][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.306296][ T30] audit: type=1400 audit(1760783622.016:377): avc: denied { mounton } for pid=7061 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 165.327698][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.474630][ T6687] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.604907][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 166.048690][ T6687] bridge_slave_1: left allmulticast mode [ 166.072230][ T6687] bridge_slave_1: left promiscuous mode [ 166.095264][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.258718][ T6687] bridge_slave_0: left allmulticast mode [ 166.279015][ T6687] bridge_slave_0: left promiscuous mode [ 166.285082][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.049829][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.101336][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.283218][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.373773][ T5818] Bluetooth: hci1: command tx timeout [ 167.623641][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 167.632233][ T30] audit: type=1400 audit(1760783624.336:378): avc: denied { setopt } for pid=7091 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.789308][ T43] usb 1-1: config 0 has an invalid interface number: 254 but max is 0 [ 167.841339][ T43] usb 1-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 167.980204][ T43] usb 1-1: config 0 has no interface number 0 [ 167.986538][ T43] usb 1-1: too many endpoints for config 0 interface 254 altsetting 192: 37, using maximum allowed: 30 [ 167.998483][ T43] usb 1-1: config 0 interface 254 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 168.014780][ T43] usb 1-1: config 0 interface 254 has no altsetting 0 [ 168.035192][ T43] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 168.056111][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.088082][ T43] usb 1-1: Product: syz [ 168.092813][ T43] usb 1-1: Manufacturer: syz [ 168.098677][ T43] usb 1-1: SerialNumber: syz [ 168.127048][ T43] usb 1-1: config 0 descriptor?? [ 168.852594][ T43] ir_usb 1-1:0.254: required endpoints missing [ 169.118722][ T30] audit: type=1400 audit(1760783625.836:379): avc: denied { create } for pid=7088 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.194129][ T30] audit: type=1400 audit(1760783625.836:380): avc: denied { ioctl } for pid=7088 comm="syz.0.288" path="socket:[15041]" dev="sockfs" ino=15041 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.201871][ T7108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.231472][ T7108] block device autoloading is deprecated and will be removed. [ 169.252950][ T30] audit: type=1400 audit(1760783625.886:381): avc: denied { read } for pid=7103 comm="syz.4.292" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 169.310805][ T30] audit: type=1400 audit(1760783625.886:382): avc: denied { open } for pid=7103 comm="syz.4.292" path="/48/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 169.620023][ T5818] Bluetooth: hci1: command tx timeout [ 169.842516][ T30] audit: type=1400 audit(1760783626.006:383): avc: denied { ioctl } for pid=7103 comm="syz.4.292" path="/48/file0/file0" dev="fuse" ino=5 ioctlcmd=0x930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.324260][ T6687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.337883][ T6687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.366053][ T6687] bond0 (unregistering): Released all slaves [ 170.387588][ T7113] veth0_to_bridge: entered promiscuous mode [ 170.430345][ T7113] veth0_to_bridge: left promiscuous mode [ 170.548394][ T5925] usb 1-1: USB disconnect, device number 10 [ 170.811074][ T7127] overlayfs: missing 'lowerdir' [ 171.284247][ T6687] hsr_slave_0: left promiscuous mode [ 171.297085][ T6687] hsr_slave_1: left promiscuous mode [ 171.303503][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.310976][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.323634][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.331187][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.445439][ T6687] veth1_macvtap: left promiscuous mode [ 171.693426][ T5818] Bluetooth: hci1: command tx timeout [ 171.957553][ T6687] veth0_macvtap: left promiscuous mode [ 171.963360][ T6687] veth1_vlan: left promiscuous mode [ 171.969619][ T6687] veth0_vlan: left promiscuous mode [ 172.230729][ T7141] netlink: 348 bytes leftover after parsing attributes in process `syz.4.298'. [ 172.521650][ T30] audit: type=1400 audit(1760783629.226:384): avc: denied { create } for pid=7145 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 173.175104][ T7165] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 173.183950][ T30] audit: type=1400 audit(1760783629.886:385): avc: denied { ioctl } for pid=7145 comm="syz.3.299" path="socket:[15153]" dev="sockfs" ino=15153 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.607240][ T976] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 173.764281][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 173.775393][ T5818] Bluetooth: hci1: command tx timeout [ 173.781005][ T976] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 173.791964][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.816593][ T976] usb 2-1: config 0 descriptor?? [ 173.823204][ T7163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.352382][ T7165] veth0_vlan: left promiscuous mode [ 174.362748][ T7165] veth0_vlan: entered promiscuous mode [ 174.377630][ T7165] team0: Device veth0_vlan failed to register rx_handler [ 175.196304][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 175.592970][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.332995][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 176.347706][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 176.387110][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.390069][ T5871] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 176.434238][ T5871] usb 1-1: config 0 has no interface number 0 [ 176.446717][ T5871] usb 1-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 176.469352][ T5871] usb 1-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 176.549476][ T976] usb 2-1: USB disconnect, device number 18 [ 176.589992][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.617269][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.625126][ T5871] usb 1-1: config 0 interface 97 has no altsetting 0 [ 176.636794][ T7061] bridge_slave_0: entered allmulticast mode [ 176.665300][ T5871] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 176.680262][ T7061] bridge_slave_0: entered promiscuous mode [ 176.714506][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.718214][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.739628][ T5871] usb 1-1: Product: syz [ 176.744716][ T5871] usb 1-1: Manufacturer: syz [ 176.749403][ T5871] usb 1-1: SerialNumber: syz [ 176.766889][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.773637][ T5871] usb 1-1: config 0 descriptor?? [ 176.806963][ T7061] bridge_slave_1: entered allmulticast mode [ 176.835793][ T7061] bridge_slave_1: entered promiscuous mode [ 176.854346][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 176.915682][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.588430][ T976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 177.710354][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.825355][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 177.828419][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.559005][ T5871] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 178.565694][ T5871] gspca_stk1135: reg_w 0x2 err -71 [ 178.571837][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.587662][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.587889][ T30] audit: type=1400 audit(1760783635.286:386): avc: denied { create } for pid=7211 comm="syz.3.309" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 178.612907][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.637529][ T7216] veth0_to_bridge: entered promiscuous mode [ 178.679507][ T5871] gspca_stk1135: Sensor write failed [ 178.685832][ T7215] veth0_to_bridge: left promiscuous mode [ 178.698279][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.716461][ T976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 178.723045][ T5871] gspca_stk1135: Sensor write failed [ 178.755919][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.773416][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.790162][ T5871] gspca_stk1135: Sensor read failed [ 178.804391][ T976] usb 2-1: config 0 descriptor?? [ 178.814338][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.818785][ T7061] team0: Port device team_slave_0 added [ 178.842919][ T5871] gspca_stk1135: Sensor read failed [ 178.848134][ T5871] gspca_stk1135: Detected sensor type unknown (0x0) [ 178.885694][ T7061] team0: Port device team_slave_1 added [ 178.896004][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.937141][ T5871] gspca_stk1135: Sensor read failed [ 178.953589][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 178.967306][ T5871] gspca_stk1135: Sensor read failed [ 178.989600][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 179.001031][ T5871] gspca_stk1135: Sensor write failed [ 179.009269][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.016450][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.021268][ T5871] gspca_stk1135: serial bus timeout: status=0x00 [ 179.059526][ T5871] gspca_stk1135: Sensor write failed [ 179.061627][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.075765][ T5871] stk1135 1-1:0.97: probe with driver stk1135 failed with error -71 [ 179.083374][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.098063][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.112518][ T5871] usb 1-1: USB disconnect, device number 11 [ 179.124472][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.260490][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.273332][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.436178][ T30] audit: type=1400 audit(1760783636.146:387): avc: denied { setopt } for pid=7234 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 179.466688][ T7061] hsr_slave_0: entered promiscuous mode [ 179.474203][ T7061] hsr_slave_1: entered promiscuous mode [ 179.480527][ T30] audit: type=1400 audit(1760783636.156:388): avc: denied { read write } for pid=7234 comm="syz.3.314" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.504946][ T7061] debugfs: 'hsr0' already exists in 'hsr' [ 179.513447][ T7061] Cannot create hsr debugfs directory [ 179.552129][ T30] audit: type=1400 audit(1760783636.156:389): avc: denied { open } for pid=7234 comm="syz.3.314" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.702696][ T7244] netlink: 'syz.3.316': attribute type 11 has an invalid length. [ 180.379442][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 180.391794][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.446437][ T976] usb 2-1: USB disconnect, device number 19 [ 181.221688][ T7271] netlink: 596 bytes leftover after parsing attributes in process `syz.3.319'. [ 181.353930][ T7061] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.380968][ T30] audit: type=1400 audit(1760783638.096:390): avc: denied { connect } for pid=7272 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.389272][ T7061] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.466707][ T30] audit: type=1400 audit(1760783638.136:391): avc: denied { write } for pid=7272 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.489746][ T7061] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.517291][ T7061] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.663089][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 181.893254][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 182.061826][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.071288][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.100242][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.191357][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.198272][ T10] usb 2-1: config 0 has no interfaces? [ 182.205915][ T10] usb 2-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 182.218238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.242027][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.249151][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.257894][ T10] usb 2-1: Product: 䕜 [ 182.262102][ T10] usb 2-1: Manufacturer: Й [ 182.267414][ T10] usb 2-1: SerialNumber: syz [ 182.277131][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.284340][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.293287][ T10] usb 2-1: config 0 descriptor?? [ 182.868143][ T7306] netlink: 'syz.1.322': attribute type 4 has an invalid length. [ 182.875896][ T7306] netlink: 17 bytes leftover after parsing attributes in process `syz.1.322'. [ 183.746713][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.877073][ T10] usb 2-1: USB disconnect, device number 20 [ 184.982188][ T7314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=7314 comm=syz.1.324 [ 185.044500][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 185.447106][ T30] audit: type=1400 audit(1760783642.136:392): avc: denied { name_bind } for pid=7313 comm="syz.1.324" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 185.743460][ T976] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 186.353148][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 186.448832][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 186.472199][ T7061] veth0_vlan: entered promiscuous mode [ 186.496393][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.512874][ T7061] veth1_vlan: entered promiscuous mode [ 186.532940][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.568306][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 186.816085][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 186.826294][ T976] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 186.835829][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.845876][ T5925] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 186.849889][ T976] usb 2-1: config 0 descriptor?? [ 186.857797][ T7061] veth0_macvtap: entered promiscuous mode [ 186.883781][ T7320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.917384][ T7061] veth1_macvtap: entered promiscuous mode [ 187.048168][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.065130][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.086346][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.095468][ T5925] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 187.113666][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 187.127667][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.152628][ T5925] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 187.155637][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.192931][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.193341][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.224358][ T5925] imon_raw 4-1:64.0: IR endpoint missing [ 187.234095][ T7339] virtiofs: Unknown parameter 'always 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 18 nlmon0 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 20 batadv0 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 21 vxcan0 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 22 vxcan1 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 23 veth0 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 24 veth1 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 25 wg0 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 26 wg1 : 1 V3 [ 187.234095][ T7339] 010000E0 1 0:00000000 0 [ 187.234095][ T7339] 27 wg2 : 1 ' [ 187.467697][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.744458][ T6689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.752320][ T6689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.614823][ T7349] veth0_to_bridge: entered promiscuous mode [ 188.887378][ T6689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.956387][ T6689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.977182][ T5818] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 188.991516][ T7345] veth0_to_bridge: left promiscuous mode [ 189.070996][ T30] audit: type=1400 audit(1760783645.786:393): avc: denied { mounton } for pid=7061 comm="syz-executor" path="/root/syzkaller.AcF9sL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 189.073898][ T5925] usb 2-1: USB disconnect, device number 21 [ 189.120176][ T30] audit: type=1400 audit(1760783645.836:394): avc: denied { mount } for pid=7061 comm="syz-executor" name="/" dev="gadgetfs" ino=7523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 189.949589][ T7365] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 189.974662][ T5920] usb 4-1: USB disconnect, device number 13 [ 190.445947][ T7377] netlink: 596 bytes leftover after parsing attributes in process `syz.0.335'. [ 190.503327][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.672969][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 190.688959][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.712652][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.726730][ T5925] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.735666][ T9] usb 5-1: config 0 has no interfaces? [ 190.746387][ T9] usb 5-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 190.764032][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.784770][ T9] usb 5-1: Product: 䕜 [ 190.789946][ T9] usb 5-1: Manufacturer: Й [ 190.799084][ T9] usb 5-1: SerialNumber: syz [ 190.812974][ T9] usb 5-1: config 0 descriptor?? [ 191.022507][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 191.091044][ T5925] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 191.110046][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.139841][ T5925] usb 2-1: config 0 descriptor?? [ 191.157206][ T5925] usb 2-1: interface 1 not found [ 191.407269][ T7386] netlink: 'syz.4.333': attribute type 4 has an invalid length. [ 191.415040][ T7386] netlink: 17 bytes leftover after parsing attributes in process `syz.4.333'. [ 193.373561][ T5925] usb 2-1: USB disconnect, device number 22 [ 193.478853][ T5920] usb 5-1: USB disconnect, device number 10 [ 194.051162][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.099994][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106736][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.283375][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 194.423389][ T10] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 194.653765][ T5920] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 194.938424][ T10] usb 5-1: config 0 has no interface number 0 [ 195.010427][ T10] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 195.056981][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.065167][ T10] usb 5-1: Product: syz [ 195.073370][ T10] usb 5-1: Manufacturer: syz [ 195.114011][ T10] usb 5-1: SerialNumber: syz [ 195.124213][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.172755][ T10] usb 5-1: config 0 descriptor?? [ 195.222205][ T5920] usb 1-1: not running at top speed; connect to a high speed hub [ 195.261761][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.300634][ T30] audit: type=1400 audit(1760783652.016:395): avc: denied { search } for pid=7413 comm="syz.3.347" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.350613][ T5920] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.414391][ T5920] usb 1-1: config 1 has no interface number 1 [ 195.421302][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 195.480685][ T30] audit: type=1400 audit(1760783652.016:396): avc: denied { search } for pid=7413 comm="syz.3.347" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.482958][ T5920] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 195.556798][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.568828][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.582979][ T5920] usb 1-1: Product: syz [ 195.587712][ T30] audit: type=1400 audit(1760783652.016:397): avc: denied { read open } for pid=7413 comm="syz.3.347" path="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.589024][ T5920] usb 1-1: Manufacturer: syz [ 195.661476][ T5920] usb 1-1: SerialNumber: syz [ 195.685778][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 195.882955][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 195.916872][ T5920] hub 1-1:1.0: Invalid hub with more than one config or interface [ 195.937858][ T5920] hub 1-1:1.0: probe with driver hub failed with error -22 [ 195.987193][ T5920] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 196.093376][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 196.183687][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 196.187503][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 196.189812][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 196.198114][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.222501][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.342183][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.413135][ T10] usb 6-1: config 0 has no interfaces? [ 196.460712][ T10] usb 6-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 196.485945][ T5920] usb 1-1: USB disconnect, device number 12 [ 196.512969][ T5925] usb 5-1: USB disconnect, device number 11 [ 196.534683][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.542716][ T10] usb 6-1: Product: 䕜 [ 196.560446][ T10] usb 6-1: Manufacturer: Й [ 196.566326][ T10] usb 6-1: SerialNumber: syz [ 196.590886][ T10] usb 6-1: config 0 descriptor?? [ 196.656028][ T30] audit: type=1400 audit(1760783653.376:398): avc: denied { map } for pid=7434 comm="syz.3.352" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 196.725667][ T30] audit: type=1400 audit(1760783653.396:399): avc: denied { map } for pid=7426 comm="syz.0.350" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 196.810631][ T30] audit: type=1400 audit(1760783653.526:400): avc: denied { create } for pid=7439 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.162147][ T7447] netlink: 'syz.5.349': attribute type 4 has an invalid length. [ 197.169937][ T7447] netlink: 17 bytes leftover after parsing attributes in process `syz.5.349'. [ 197.361761][ T7447] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 198.018709][ T5920] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.903003][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.111283][ T5896] usb 6-1: USB disconnect, device number 2 [ 199.276182][ T30] audit: type=1400 audit(1760783655.996:401): avc: denied { ioctl } for pid=7441 comm="syz.1.355" path="socket:[16275]" dev="sockfs" ino=16275 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 199.331540][ T5920] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 199.474940][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.498952][ T30] audit: type=1400 audit(1760783655.996:402): avc: denied { read write } for pid=7441 comm="syz.1.355" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.035471][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 200.076659][ T30] audit: type=1400 audit(1760783655.996:403): avc: denied { open } for pid=7441 comm="syz.1.355" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.095664][ T7443] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 200.130186][ T5920] usb 4-1: Product: syz [ 200.142207][ T5920] usb 4-1: Manufacturer: syz [ 200.147213][ T5920] usb 4-1: SerialNumber: syz [ 200.161600][ T30] audit: type=1400 audit(1760783656.846:404): avc: denied { connect } for pid=7457 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.171399][ T5920] usb 4-1: config 0 descriptor?? [ 200.279287][ T5920] usb 4-1: can't set config #0, error -71 [ 200.337383][ T5920] usb 4-1: USB disconnect, device number 14 [ 200.479523][ T7470] blktrace: Concurrent blktraces are not allowed on nullb0 [ 200.578672][ T7474] random: crng reseeded on system resumption [ 200.616639][ T30] audit: type=1400 audit(1760783657.296:405): avc: denied { read write } for pid=7467 comm="syz.5.359" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.722994][ T30] audit: type=1400 audit(1760783657.296:406): avc: denied { ioctl open } for pid=7467 comm="syz.5.359" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.747920][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.781064][ T7477] kernel read not supported for file /eth0 (pid: 7477 comm: syz.4.362) [ 200.801700][ T30] audit: type=1800 audit(1760783657.516:407): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.362" name="eth0" dev="mqueue" ino=16780 res=0 errno=0 [ 200.917381][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 200.927671][ T5896] usb 1-1: config 9 has an invalid interface number: 92 but max is 0 [ 200.946120][ T5896] usb 1-1: config 9 has no interface number 0 [ 200.962791][ T5896] usb 1-1: config 9 interface 92 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 200.981617][ T5896] usb 1-1: config 9 interface 92 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 200.996771][ T5896] usb 1-1: config 9 interface 92 has no altsetting 0 [ 201.006303][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 201.015972][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.046705][ T5896] usb 1-1: Product: ␉ [ 201.069016][ T5896] usb 1-1: Manufacturer: 䊉ᬢ臜 [ 201.078569][ T5896] usb 1-1: SerialNumber: syz [ 201.096805][ T7470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.256208][ T7486] FAULT_INJECTION: forcing a failure. [ 201.256208][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 201.339679][ T7486] CPU: 0 UID: 0 PID: 7486 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 201.339707][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.339719][ T7486] Call Trace: [ 201.339726][ T7486] [ 201.339733][ T7486] dump_stack_lvl+0x16c/0x1f0 [ 201.339762][ T7486] should_fail_ex+0x512/0x640 [ 201.339785][ T7486] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 201.339809][ T7486] should_failslab+0xc2/0x120 [ 201.339836][ T7486] kmem_cache_alloc_noprof+0x75/0x6e0 [ 201.339855][ T7486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.339885][ T7486] ? mas_preallocate+0xe6a/0x11f0 [ 201.339913][ T7486] ? mas_preallocate+0xe6a/0x11f0 [ 201.339935][ T7486] mas_preallocate+0xe6a/0x11f0 [ 201.339963][ T7486] ? __pfx_mas_preallocate+0x10/0x10 [ 201.339985][ T7486] ? rcu_is_watching+0x12/0xc0 [ 201.340014][ T7486] ? anon_vma_name+0x81/0x2f0 [ 201.340046][ T7486] __split_vma+0x34a/0x1070 [ 201.340069][ T7486] ? __pfx___split_vma+0x10/0x10 [ 201.340088][ T7486] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 201.340126][ T7486] vms_gather_munmap_vmas+0x3aa/0x1340 [ 201.340150][ T7486] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 201.340174][ T7486] ? mas_walk+0x6f5/0x980 [ 201.340204][ T7486] __mmap_region+0x434/0x27a0 [ 201.340229][ T7486] ? __pfx___mmap_region+0x10/0x10 [ 201.340258][ T7486] ? find_held_lock+0x2b/0x80 [ 201.340279][ T5896] hub 1-1:9.92: bad descriptor, ignoring hub [ 201.340284][ T7486] ? kernel_text_address+0x8d/0x100 [ 201.340310][ T7486] ? __kernel_text_address+0xd/0x40 [ 201.340338][ T7486] ? find_held_lock+0x2b/0x80 [ 201.340355][ T7486] ? avc_has_perm_noaudit+0x117/0x3b0 [ 201.340412][ T7486] ? __lock_acquire+0xb8a/0x1c90 [ 201.340443][ T7486] mmap_region+0x32b/0x3f0 [ 201.340468][ T7486] do_mmap+0xa3e/0x1210 [ 201.340497][ T7486] ? __pfx_do_mmap+0x10/0x10 [ 201.340532][ T7486] ? __pfx_down_write_killable+0x10/0x10 [ 201.340564][ T7486] vm_mmap_pgoff+0x29e/0x470 [ 201.340599][ T7486] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 201.340630][ T7486] ? __fget_files+0x20e/0x3c0 [ 201.340660][ T7486] ksys_mmap_pgoff+0x32c/0x5c0 [ 201.340685][ T7486] ? __pfx_ksys_write+0x10/0x10 [ 201.340712][ T7486] __x64_sys_mmap+0x125/0x190 [ 201.340739][ T7486] do_syscall_64+0xcd/0xfa0 [ 201.340763][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.340783][ T7486] RIP: 0033:0x7fdf9538efc9 [ 201.340799][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.340816][ T7486] RSP: 002b:00007fdf961b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 201.340835][ T7486] RAX: ffffffffffffffda RBX: 00007fdf955e5fa0 RCX: 00007fdf9538efc9 [ 201.340848][ T7486] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 201.340860][ T7486] RBP: 00007fdf961b2090 R08: 0000000000000003 R09: 0000000000000000 [ 201.340871][ T7486] R10: 0000000000018811 R11: 0000000000000246 R12: 0000000000000001 [ 201.340883][ T7486] R13: 00007fdf955e6038 R14: 00007fdf955e5fa0 R15: 00007ffef39504c8 [ 201.340910][ T7486] [ 201.535669][ T7490] veth0_to_bridge: entered promiscuous mode [ 201.779145][ T5896] hub 1-1:9.92: probe with driver hub failed with error -5 [ 201.809433][ T7488] veth0_to_bridge: left promiscuous mode [ 201.864817][ T5896] usb 1-1: USB disconnect, device number 13 [ 201.952945][ T5925] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 202.772923][ T5925] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.933877][ T5925] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 203.192978][ T5925] usb 4-1: Invalid ep0 maxpacket: 64 [ 203.208890][ T5925] usb usb4-port1: attempt power cycle [ 203.226193][ T7518] blktrace: Concurrent blktraces are not allowed on nullb0 [ 203.502541][ T30] audit: type=1400 audit(1760783660.216:408): avc: denied { read } for pid=7527 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.524579][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 203.618386][ T5925] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 203.736281][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 203.768450][ T5925] usb 4-1: Invalid ep0 maxpacket: 64 [ 203.903236][ T10] usb 1-1: config 9 has an invalid interface number: 92 but max is 0 [ 203.964832][ T10] usb 1-1: config 9 has no interface number 0 [ 203.971114][ T10] usb 1-1: config 9 interface 92 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 204.002994][ T10] usb 1-1: config 9 interface 92 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 204.022105][ T10] usb 1-1: config 9 interface 92 has no altsetting 0 [ 204.042224][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 204.058070][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.079921][ T10] usb 1-1: Product: ␉ [ 204.084201][ T5925] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 204.101661][ T10] usb 1-1: Manufacturer: 䊉ᬢ臜 [ 204.110988][ T10] usb 1-1: SerialNumber: syz [ 204.117376][ T5925] usb 4-1: Invalid ep0 maxpacket: 64 [ 204.123636][ T5925] usb usb4-port1: unable to enumerate USB device [ 204.141023][ T7518] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.420040][ T5896] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 204.467396][ T10] hub 1-1:9.92: bad descriptor, ignoring hub [ 204.490901][ T10] hub 1-1:9.92: probe with driver hub failed with error -5 [ 204.877597][ T10] usb 1-1: USB disconnect, device number 14 [ 205.213173][ T5896] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 205.224173][ T7558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.378'. [ 205.225170][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.378'. [ 205.255377][ T5896] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.299997][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.378'. [ 205.406924][ T7561] fuse: Unknown parameter '0x0000000000000005' [ 205.443560][ T30] audit: type=1400 audit(1760783662.126:409): avc: denied { mounton } for pid=7554 comm="syz.4.377" path="/69/file0" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.575770][ T5896] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.793733][ T7563] FAULT_INJECTION: forcing a failure. [ 205.793733][ T7563] name failslab, interval 1, probability 0, space 0, times 0 [ 205.806689][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.5.379 Not tainted syzkaller #0 PREEMPT(full) [ 205.806716][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.806728][ T7563] Call Trace: [ 205.806735][ T7563] [ 205.806742][ T7563] dump_stack_lvl+0x16c/0x1f0 [ 205.806771][ T7563] should_fail_ex+0x512/0x640 [ 205.806799][ T7563] should_failslab+0xc2/0x120 [ 205.806828][ T7563] __kmalloc_cache_noprof+0x72/0x780 [ 205.806851][ T7563] ? sel_netnode_sid+0x364/0xbe0 [ 205.806880][ T7563] ? sel_netnode_sid+0x364/0xbe0 [ 205.806903][ T7563] sel_netnode_sid+0x364/0xbe0 [ 205.806931][ T7563] selinux_socket_bind+0x579/0xa40 [ 205.806960][ T7563] ? __pfx_selinux_socket_bind+0x10/0x10 [ 205.806989][ T7563] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.807023][ T7563] ? tomoyo_socket_bind_permission+0x14f/0x350 [ 205.807055][ T7563] security_socket_bind+0xc6/0x240 [ 205.807080][ T7563] __sys_bind+0x13e/0x260 [ 205.807101][ T7563] ? __pfx___sys_bind+0x10/0x10 [ 205.807131][ T7563] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 205.807164][ T7563] __x64_sys_bind+0x72/0xb0 [ 205.807185][ T7563] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.807208][ T7563] do_syscall_64+0xcd/0xfa0 [ 205.807234][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.807253][ T7563] RIP: 0033:0x7fe44f58efc9 [ 205.807270][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.807289][ T7563] RSP: 002b:00007fe450421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 205.807308][ T7563] RAX: ffffffffffffffda RBX: 00007fe44f7e5fa0 RCX: 00007fe44f58efc9 [ 205.807322][ T7563] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000004 [ 205.807334][ T7563] RBP: 00007fe450421090 R08: 0000000000000000 R09: 0000000000000000 [ 205.807346][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.807357][ T7563] R13: 00007fe44f7e6038 R14: 00007fe44f7e5fa0 R15: 00007ffeb9f9f938 [ 205.807387][ T7563] [ 206.220907][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.232957][ T5896] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 206.242014][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.327295][ T5896] usb 2-1: config 0 descriptor?? [ 206.607125][ T30] audit: type=1400 audit(1760783663.326:410): avc: denied { getopt } for pid=7568 comm="syz.0.380" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.733539][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 206.806256][ T5896] hid-alps 0003:044E:120C.0001: item fetching failed at offset 5/8 [ 206.879256][ T5896] hid-alps 0003:044E:120C.0001: parse failed [ 206.895437][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 206.905487][ T5896] hid-alps 0003:044E:120C.0001: probe with driver hid-alps failed with error -22 [ 206.907117][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 206.933501][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 206.946253][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 206.964708][ T7567] openvswitch: netlink: Message has 2103 unknown bytes. [ 206.971751][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.043957][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 207.044289][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.055126][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 207.096490][ T7585] veth0_to_bridge: entered promiscuous mode [ 207.142049][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 207.339036][ T7567] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 207.365322][ T7567] CIFS mount error: No usable UNC path provided in device string! [ 207.365322][ T7567] [ 207.375527][ T7567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.393020][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.404116][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.420037][ T5920] usb 6-1: config 0 descriptor?? [ 207.473054][ T7580] veth0_to_bridge: left promiscuous mode [ 207.483115][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 207.489932][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.540648][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.586192][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.606988][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 207.617312][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.637781][ T10] usb 1-1: config 0 descriptor?? [ 207.660549][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 207.802315][ T7567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.809275][ T7567] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 207.817956][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.861990][ T7567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.867992][ T7567] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.874963][ T7567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.880882][ T7567] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 207.889936][ T7567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.895904][ T7567] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.947286][ T6221] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.961648][ T7567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.968017][ T7567] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 207.988022][ T7567] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.053024][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.107066][ T7569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.380'. [ 208.123685][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.138490][ T43] usb 2-1: USB disconnect, device number 23 [ 208.153212][ T7598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.183271][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.197536][ T7573] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.554437][ T7602] ALSA: mixer_oss: invalid OSS volume '' [ 208.583382][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.647581][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 208.674245][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.682827][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.696935][ T10] usb 1-1: USB disconnect, device number 15 [ 208.727938][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.737184][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.857355][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.381'. [ 208.967035][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.134472][ T5896] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 209.152925][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.163417][ T5896] usb 4-1: config 0 descriptor?? [ 209.177348][ T5896] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 209.223260][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 209.411991][ T7616] syz.4.391: attempt to access beyond end of device [ 209.411991][ T7616] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 209.475233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 209.557722][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.594642][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.632911][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.673896][ T9] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 209.693516][ T9] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 209.723072][ T9] usb 2-1: Product: syz [ 209.733142][ T9] usb 2-1: Manufacturer: syz [ 209.737996][ T9] usb 2-1: SerialNumber: syz [ 209.788749][ T9] usb 2-1: config 0 descriptor?? [ 209.794066][ T5896] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 209.810686][ T9] smsusb:smsusb_probe: board id=2, interface number 0 [ 209.811116][ T7620] blktrace: Concurrent blktraces are not allowed on nullb0 [ 209.835369][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 209.933163][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 209.936089][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 209.945573][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 209.987415][ T7623] FAULT_INJECTION: forcing a failure. [ 209.987415][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 210.013366][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.028443][ T43] usb 6-1: USB disconnect, device number 3 [ 210.036919][ T7623] CPU: 1 UID: 0 PID: 7623 Comm: syz.4.393 Not tainted syzkaller #0 PREEMPT(full) [ 210.036946][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.036958][ T7623] Call Trace: [ 210.036965][ T7623] [ 210.036972][ T7623] dump_stack_lvl+0x16c/0x1f0 [ 210.037003][ T7623] should_fail_ex+0x512/0x640 [ 210.037026][ T7623] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 210.037052][ T7623] should_failslab+0xc2/0x120 [ 210.037080][ T7623] kmem_cache_alloc_node_noprof+0x78/0x770 [ 210.037101][ T7623] ? __alloc_skb+0x2b2/0x380 [ 210.037128][ T7623] ? __alloc_skb+0x2b2/0x380 [ 210.037146][ T7623] ? __pfx_netlink_insert+0x10/0x10 [ 210.037168][ T7623] __alloc_skb+0x2b2/0x380 [ 210.037189][ T7623] ? __pfx___alloc_skb+0x10/0x10 [ 210.037211][ T7623] ? netlink_autobind.isra.0+0x158/0x370 [ 210.037244][ T7623] netlink_alloc_large_skb+0x69/0x140 [ 210.037270][ T7623] netlink_sendmsg+0x698/0xdd0 [ 210.037300][ T7623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.037337][ T7623] ____sys_sendmsg+0xa98/0xc70 [ 210.037366][ T7623] ? copy_msghdr_from_user+0x10a/0x160 [ 210.037388][ T7623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.037428][ T7623] ___sys_sendmsg+0x134/0x1d0 [ 210.037453][ T7623] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.037473][ T7623] ? __lock_acquire+0x622/0x1c90 [ 210.037531][ T7623] __sys_sendmsg+0x16d/0x220 [ 210.037554][ T7623] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.037595][ T7623] do_syscall_64+0xcd/0xfa0 [ 210.037619][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.037638][ T7623] RIP: 0033:0x7fda6ed8efc9 [ 210.037654][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.037672][ T7623] RSP: 002b:00007fda6fc71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.037691][ T7623] RAX: ffffffffffffffda RBX: 00007fda6efe5fa0 RCX: 00007fda6ed8efc9 [ 210.037704][ T7623] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 210.037715][ T7623] RBP: 00007fda6fc71090 R08: 0000000000000000 R09: 0000000000000000 [ 210.037727][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.037738][ T7623] R13: 00007fda6efe6038 R14: 00007fda6efe5fa0 R15: 00007ffcde2e67c8 [ 210.037766][ T7623] [ 210.322941][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.487878][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 210.565550][ T5925] usb 1-1: config 9 has an invalid interface number: 92 but max is 0 [ 210.567583][ T30] audit: type=1400 audit(1760783667.236:411): avc: denied { name_bind } for pid=7606 comm="syz.3.388" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 210.764235][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.852337][ T5925] usb 1-1: config 9 has no interface number 0 [ 210.869187][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.919911][ T5925] usb 1-1: config 9 interface 92 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 210.932728][ T5925] usb 1-1: config 9 interface 92 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 210.969726][ T5925] usb 1-1: config 9 interface 92 has no altsetting 0 [ 211.065031][ T5896] gspca_cpia1: usb_control_msg 02, error -71 [ 211.074605][ T5896] gspca_cpia1: usb_control_msg 05, error -71 [ 211.080672][ T5896] cpia1 4-1:0.0: unexpected systemstate: 00 [ 211.110982][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 211.119958][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 211.126435][ T5896] usb 4-1: USB disconnect, device number 19 [ 211.137330][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.148033][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.180934][ T5925] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 211.211647][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.242432][ T5925] usb 1-1: Product: ␉ [ 211.277042][ T5925] usb 1-1: Manufacturer: 䊉ᬢ臜 [ 211.362206][ T5925] usb 1-1: SerialNumber: syz [ 211.402943][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 211.432961][ T7620] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.557118][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.582334][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 211.594761][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.610606][ T10] usb 5-1: Product: syz [ 211.632343][ T10] usb 5-1: Manufacturer: syz [ 211.642486][ T10] usb 5-1: SerialNumber: syz [ 211.752830][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.878203][ T5925] hub 1-1:9.92: bad descriptor, ignoring hub [ 211.885753][ T5925] hub 1-1:9.92: probe with driver hub failed with error -5 [ 211.926654][ T10] usb 5-1: config 0 descriptor?? [ 211.934280][ T5925] usb 1-1: USB disconnect, device number 16 [ 211.963646][ T10] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 212.014596][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 212.019099][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 212.020753][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 212.097802][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.830196][ T30] audit: type=1400 audit(1760783669.546:412): avc: denied { read } for pid=7650 comm="syz.5.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.047040][ T7653] FAULT_INJECTION: forcing a failure. [ 213.047040][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 213.130552][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT(full) [ 213.130580][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.130591][ T7653] Call Trace: [ 213.130597][ T7653] [ 213.130604][ T7653] dump_stack_lvl+0x16c/0x1f0 [ 213.130646][ T7653] should_fail_ex+0x512/0x640 [ 213.130669][ T7653] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 213.130701][ T7653] should_failslab+0xc2/0x120 [ 213.130728][ T7653] kmem_cache_alloc_node_noprof+0x78/0x770 [ 213.130751][ T7653] ? __alloc_skb+0x2b2/0x380 [ 213.130778][ T7653] ? __alloc_skb+0x2b2/0x380 [ 213.130796][ T7653] ? __pfx_netlink_insert+0x10/0x10 [ 213.130818][ T7653] __alloc_skb+0x2b2/0x380 [ 213.130838][ T7653] ? __pfx___alloc_skb+0x10/0x10 [ 213.130859][ T7653] ? netlink_autobind.isra.0+0x158/0x370 [ 213.130892][ T7653] netlink_alloc_large_skb+0x69/0x140 [ 213.130919][ T7653] netlink_sendmsg+0x698/0xdd0 [ 213.130949][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.130985][ T7653] ____sys_sendmsg+0xa98/0xc70 [ 213.131013][ T7653] ? copy_msghdr_from_user+0x10a/0x160 [ 213.131035][ T7653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.131076][ T7653] ___sys_sendmsg+0x134/0x1d0 [ 213.131100][ T7653] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.131121][ T7653] ? __lock_acquire+0x622/0x1c90 [ 213.131180][ T7653] __sys_sendmsg+0x16d/0x220 [ 213.131203][ T7653] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.131245][ T7653] do_syscall_64+0xcd/0xfa0 [ 213.131270][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.131290][ T7653] RIP: 0033:0x7fdf9538efc9 [ 213.131305][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.131323][ T7653] RSP: 002b:00007fdf961b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.131342][ T7653] RAX: ffffffffffffffda RBX: 00007fdf955e5fa0 RCX: 00007fdf9538efc9 [ 213.131354][ T7653] RDX: 0000000000014834 RSI: 0000200000000240 RDI: 0000000000000004 [ 213.131366][ T7653] RBP: 00007fdf961b2090 R08: 0000000000000000 R09: 0000000000000000 [ 213.131378][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.131389][ T7653] R13: 00007fdf955e6038 R14: 00007fdf955e5fa0 R15: 00007ffef39504c8 [ 213.131418][ T7653] [ 213.353740][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.383749][ T7658] sp0: Synchronizing with TNC [ 213.390409][ T7658] sp0: Found TNC [ 213.395579][ T7657] [U] ` [ 213.425769][ T5896] usb 2-1: USB disconnect, device number 24 [ 213.584907][ T52] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 213.632945][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 213.961695][ T30] audit: type=1400 audit(1760783670.516:413): avc: denied { kexec_image_load } for pid=7663 comm="syz.3.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 214.178389][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.230684][ T30] audit: type=1400 audit(1760783670.646:414): avc: denied { mounton } for pid=7663 comm="syz.3.405" path="/93/file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 214.254841][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 214.265632][ T7673] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 214.394975][ T5925] usb 5-1: USB disconnect, device number 12 [ 214.435297][ T5920] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.446525][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.453446][ T5920] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 214.462479][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.476944][ T5920] usb 1-1: config 0 descriptor?? [ 215.131858][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 215.325190][ T5920] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 215.442360][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.453666][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.537635][ T7685] blktrace: Concurrent blktraces are not allowed on nullb0 [ 215.898987][ T7680] bond0: (slave bond_slave_1): Releasing backup interface [ 215.921252][ T7687] bridge0: entered promiscuous mode [ 215.984439][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 216.117085][ T30] audit: type=1400 audit(1760783672.836:415): avc: denied { append } for pid=7693 comm="syz.4.411" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.150474][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 216.165692][ T10] usb 2-1: config 9 has an invalid interface number: 92 but max is 0 [ 216.183658][ T10] usb 2-1: config 9 has no interface number 0 [ 216.211252][ T10] usb 2-1: config 9 interface 92 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 216.251954][ T10] usb 2-1: config 9 interface 92 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 216.263420][ T10] usb 2-1: config 9 interface 92 has no altsetting 0 [ 216.274058][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=a5.f9 [ 216.285542][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.296268][ T10] usb 2-1: Product: ␉ [ 216.300571][ T10] usb 2-1: Manufacturer: 䊉ᬢ臜 [ 216.308195][ T10] usb 2-1: SerialNumber: syz [ 216.328256][ T7685] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.545790][ T10] hub 2-1:9.92: bad descriptor, ignoring hub [ 216.552786][ T10] hub 2-1:9.92: probe with driver hub failed with error -5 [ 216.583280][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 216.594018][ T10] usb 2-1: USB disconnect, device number 25 [ 216.803320][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 216.820825][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.831589][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.850294][ T9] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 216.859892][ T9] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 216.875355][ T9] usb 6-1: Product: syz [ 216.889807][ T9] usb 6-1: Manufacturer: syz [ 216.903418][ T9] usb 6-1: SerialNumber: syz [ 216.927144][ T9] usb 6-1: config 0 descriptor?? [ 216.944057][ T9] smsusb:smsusb_probe: board id=2, interface number 0 [ 216.950915][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 217.398184][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.416774][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.788573][ T7708] bridge0: entered allmulticast mode [ 217.846008][ T30] audit: type=1400 audit(1760783674.486:416): avc: denied { ioctl } for pid=7705 comm="syz.1.415" path="/" dev="configfs" ino=63 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.191256][ T7711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 218.246614][ T7711] netlink: 19 bytes leftover after parsing attributes in process `syz.4.416'. [ 218.291445][ T7711] netlink: 'syz.4.416': attribute type 6 has an invalid length. [ 218.296653][ T9] usb 1-1: USB disconnect, device number 17 [ 218.344719][ T7711] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 218.465358][ T30] audit: type=1400 audit(1760783675.186:417): avc: denied { load_policy } for pid=7712 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 218.493582][ T7713] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 218.581280][ T7713] SELinux: failed to load policy [ 218.722631][ T30] audit: type=1400 audit(1760783675.436:418): avc: denied { read } for pid=7715 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.848023][ T7719] netlink: 596 bytes leftover after parsing attributes in process `syz.0.419'. [ 219.087917][ T7729] netlink: 'syz.3.423': attribute type 6 has an invalid length. [ 219.158066][ T7727] virtiofs: Unknown parameter 'always 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 18 nlmon0 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 20 batadv0 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 21 vxcan0 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 22 vxcan1 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 23 veth0 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 24 veth1 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 25 wg0 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 26 wg1 : 1 V3 [ 219.158066][ T7727] 010000E0 1 0:00000000 0 [ 219.158066][ T7727] 27 wg2 : 1 ' [ 219.315829][ T30] audit: type=1400 audit(1760783676.036:419): avc: denied { ioctl } for pid=7732 comm="syz.4.424" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.541261][ T30] audit: type=1400 audit(1760783676.256:420): avc: denied { name_bind } for pid=7738 comm="syz.4.425" path="socket:[18478]" dev="sockfs" ino=18478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 219.640427][ T5896] usb 6-1: USB disconnect, device number 4 [ 219.772390][ T7744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=7744 comm=syz.4.429 [ 219.831865][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'. [ 219.926541][ T30] audit: type=1400 audit(1760783676.546:421): avc: denied { mount } for pid=7746 comm="syz.1.428" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 219.976114][ T7750] netlink: 'syz.5.427': attribute type 20 has an invalid length. [ 329.302869][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.309853][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6682/1:b..l P5183/1:b..l [ 329.319289][ C1] rcu: (detected by 1, t=10502 jiffies, g=20205, q=492 ncpus=2) [ 329.327001][ C1] task:udevd state:R running task stack:24728 pid:5183 tgid:5183 ppid:1 task_flags:0x400140 flags:0x00080001 [ 329.341267][ C1] Call Trace: [ 329.344717][ C1] [ 329.347642][ C1] __schedule+0x1190/0x5de0 [ 329.352146][ C1] ? try_to_wake_up+0x160/0x1870 [ 329.357091][ C1] ? sched_ttwu_pending+0x630/0x640 [ 329.362305][ C1] ? __pfx___schedule+0x10/0x10 [ 329.367159][ C1] ? ep_poll_callback+0x9ab/0xbc0 [ 329.372190][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 329.377988][ C1] ? ep_poll_callback+0x699/0xbc0 [ 329.383010][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 329.388382][ C1] preempt_schedule_common+0x44/0xc0 [ 329.393662][ C1] preempt_schedule_thunk+0x16/0x30 [ 329.398862][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 329.404489][ C1] sock_def_readable+0x15b/0x600 [ 329.409425][ C1] netlink_unicast+0x75f/0x870 [ 329.414193][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 329.419472][ C1] ? cap_capable+0xb3/0x250 [ 329.423982][ C1] netlink_sendmsg+0x8c8/0xdd0 [ 329.428748][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.434042][ C1] ____sys_sendmsg+0xa98/0xc70 [ 329.438806][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 329.444257][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.449544][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 329.454834][ C1] ___sys_sendmsg+0x134/0x1d0 [ 329.459504][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.464266][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.469488][ C1] ? find_held_lock+0x2b/0x80 [ 329.474155][ C1] ? timespec64_add_safe+0x18c/0x210 [ 329.479445][ C1] __sys_sendmsg+0x16d/0x220 [ 329.484031][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.489157][ C1] do_syscall_64+0xcd/0xfa0 [ 329.493659][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.499550][ C1] RIP: 0033:0x7f7d19ca7407 [ 329.503954][ C1] RSP: 002b:00007ffc089dac00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 329.512358][ C1] RAX: ffffffffffffffda RBX: 00007f7d1a3f9880 RCX: 00007f7d19ca7407 [ 329.520316][ C1] RDX: 0000000000000000 RSI: 00007ffc089dac60 RDI: 0000000000000004 [ 329.528280][ C1] RBP: 000055abef625870 R08: 0000000000000000 R09: 0000000000000000 [ 329.536240][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b3 [ 329.544209][ C1] R13: 000055abef109d80 R14: 0000000000000000 R15: 0000000000000000 [ 329.552191][ C1] [ 329.555201][ C1] task:kworker/u8:13 state:R running task stack:25592 pid:6682 tgid:6682 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 329.568783][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 329.575037][ C1] Call Trace: [ 329.578305][ C1] [ 329.581234][ C1] __schedule+0x1190/0x5de0 [ 329.585746][ C1] ? lock_acquire+0x179/0x350 [ 329.590426][ C1] ? __pfx___schedule+0x10/0x10 [ 329.595270][ C1] ? __lock_acquire+0x622/0x1c90 [ 329.600216][ C1] ? mark_held_locks+0x49/0x80 [ 329.604978][ C1] preempt_schedule_irq+0x51/0x90 [ 329.609999][ C1] irqentry_exit+0x36/0x90 [ 329.614414][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.620386][ C1] RIP: 0010:unwind_next_frame+0x5fc/0x20a0 [ 329.626194][ C1] Code: 00 00 0f 87 20 02 00 00 41 80 fe 04 0f 84 c7 0b 00 00 41 80 fe 05 0f 85 cf 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 <48> c1 ea 03 80 3c 02 00 0f 85 0c 17 00 00 48 89 c8 4d 8b 7d 38 48 [ 329.645793][ C1] RSP: 0018:ffffc9001be86df8 EFLAGS: 00000246 [ 329.651853][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff912608bc [ 329.659814][ C1] RDX: ffffc9001be86ea0 RSI: 0000000000000001 RDI: ffffffff909dbd1c [ 329.667779][ C1] RBP: ffffc9001be86eb0 R08: ffffffff912608c0 R09: 0000000000000000 [ 329.675742][ C1] R10: 0000000000000000 R11: 000000000001258a R12: ffffc9001be86eb8 [ 329.683700][ C1] R13: ffffc9001be86e68 R14: 0000000000000005 R15: 0000000000000000 [ 329.691679][ C1] ? unwind_next_frame+0x2ec/0x20a0 [ 329.696882][ C1] ? kasan_save_stack+0x33/0x60 [ 329.701735][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.707883][ C1] arch_stack_walk+0x94/0x100 [ 329.712573][ C1] ? kasan_save_stack+0x33/0x60 [ 329.717424][ C1] stack_trace_save+0x8e/0xc0 [ 329.722095][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 329.727467][ C1] kasan_save_stack+0x33/0x60 [ 329.732141][ C1] ? kasan_save_stack+0x33/0x60 [ 329.737031][ C1] kasan_save_track+0x14/0x30 [ 329.741702][ C1] __kasan_kmalloc+0xaa/0xb0 [ 329.746293][ C1] __kmalloc_noprof+0x32f/0x880 [ 329.751152][ C1] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 329.757568][ C1] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 329.763977][ C1] cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 329.770223][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 329.775429][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 329.782122][ C1] ? stack_trace_save+0x8e/0xc0 [ 329.786972][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 329.792339][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 329.797801][ C1] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 329.803604][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 329.809235][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 329.813991][ C1] ? __kmalloc_noprof+0x32f/0x880 [ 329.819008][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 329.825064][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 329.831311][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 329.836592][ C1] ? kthread+0x3c5/0x780 [ 329.840829][ C1] ? ret_from_fork+0x675/0x7d0 [ 329.845587][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 329.850530][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 329.856603][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.862502][ C1] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 329.868671][ C1] ? __lock_acquire+0x622/0x1c90 [ 329.873616][ C1] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 329.879683][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 329.885757][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 329.891398][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 329.897558][ C1] ? find_held_lock+0x2b/0x80 [ 329.902227][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18e1/0x2fe0 [ 329.908560][ C1] ieee80211_ibss_rx_queued_mgmt+0x191b/0x2fe0 [ 329.914730][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 329.921231][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 329.926188][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 329.931303][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 329.936579][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.941337][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 329.946713][ C1] process_one_work+0x9cf/0x1b70 [ 329.951658][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 329.957285][ C1] ? __pfx_process_one_work+0x10/0x10 [ 329.962675][ C1] ? assign_work+0x1a0/0x250 [ 329.967267][ C1] worker_thread+0x6c8/0xf10 [ 329.971876][ C1] ? __pfx_worker_thread+0x10/0x10 [ 329.976991][ C1] kthread+0x3c5/0x780 [ 329.981060][ C1] ? __pfx_kthread+0x10/0x10 [ 329.985650][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.990404][ C1] ? __pfx_kthread+0x10/0x10 [ 329.994993][ C1] ret_from_fork+0x675/0x7d0 [ 329.999584][ C1] ? __pfx_kthread+0x10/0x10 [ 330.004173][ C1] ret_from_fork_asm+0x1a/0x30 [ 330.008950][ C1] [ 330.011952][ C1] rcu: rcu_preempt kthread starved for 9882 jiffies! g20205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 330.023024][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 330.032958][ C1] rcu: RCU grace-period kthread stack dump: [ 330.038811][ C1] task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 330.052252][ C1] Call Trace: [ 330.055501][ C1] [ 330.058404][ C1] __schedule+0x1190/0x5de0 [ 330.062901][ C1] ? __pfx___schedule+0x10/0x10 [ 330.067732][ C1] ? find_held_lock+0x2b/0x80 [ 330.072377][ C1] ? schedule+0x2d7/0x3a0 [ 330.076679][ C1] schedule+0xe7/0x3a0 [ 330.080720][ C1] schedule_timeout+0x123/0x290 [ 330.085538][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 330.090877][ C1] ? __pfx_process_timeout+0x10/0x10 [ 330.096133][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.101906][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 330.107336][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 330.112078][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 330.117334][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.122505][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 330.127410][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 330.132234][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.138008][ C1] rcu_gp_kthread+0x26d/0x380 [ 330.142658][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.147825][ C1] ? rcu_is_watching+0x12/0xc0 [ 330.152556][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.157730][ C1] ? __kthread_parkme+0x19e/0x250 [ 330.162723][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.167905][ C1] kthread+0x3c5/0x780 [ 330.171978][ C1] ? __pfx_kthread+0x10/0x10 [ 330.176566][ C1] ? rcu_is_watching+0x12/0xc0 [ 330.181325][ C1] ? __pfx_kthread+0x10/0x10 [ 330.185914][ C1] ret_from_fork+0x675/0x7d0 [ 330.190499][ C1] ? __pfx_kthread+0x10/0x10 [ 330.195086][ C1] ret_from_fork_asm+0x1a/0x30 [ 330.199858][ C1] [ 330.202862][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 330.209174][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 330.218099][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.228141][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 330.233769][ C1] Code: 97 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 95 23 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 330.253366][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 330.259425][ C1] RAX: 0000000000e6a993 RBX: 0000000000000001 RCX: ffffffff8b6692a9 [ 330.267384][ C1] RDX: 0000000000000000 RSI: ffffffff8db03f46 RDI: ffffffff8bf1ea40 [ 330.275343][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 330.283303][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 330.291268][ C1] R13: ffff88801d6da480 R14: ffffffff908339d0 R15: 0000000000000000 [ 330.299228][ C1] FS: 0000000000000000(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 330.308150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.314720][ C1] CR2: 00007feeab2156c8 CR3: 0000000077b8a000 CR4: 00000000003526f0 [ 330.322682][ C1] Call Trace: [ 330.325950][ C1] [ 330.328870][ C1] default_idle+0x13/0x20 [ 330.333198][ C1] default_idle_call+0x6c/0xb0 [ 330.337957][ C1] do_idle+0x38d/0x500 [ 330.342028][ C1] ? __pfx_do_idle+0x10/0x10 [ 330.346605][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 330.351810][ C1] cpu_startup_entry+0x4f/0x60 [ 330.356566][ C1] start_secondary+0x21d/0x2b0 [ 330.361323][ C1] ? __pfx_start_secondary+0x10/0x10 [ 330.366606][ C1] common_startup_64+0x13e/0x148 [ 330.371555][ C1] [ 330.660939][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.667362][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.676159][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.682438][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.943754][ T6687] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 SYZFAIL: failed to send rpc fd=3 want=664 sent=0 n=-1 (errno 32: Broken pipe) [ 331.436307][ T7766] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.647616][ T7766] CPU: 0 UID: 0 PID: 7766 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 331.647645][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.647656][ T7766] Call Trace: [ 331.647663][ T7766] [ 331.647670][ T7766] dump_stack_lvl+0x16c/0x1f0 [ 331.647700][ T7766] warn_alloc+0x248/0x3a0 [ 331.647725][ T7766] ? __pfx_warn_alloc+0x10/0x10 [ 331.647758][ T7766] ? kcov_ioctl+0x4c/0x730 [ 331.647775][ T7766] ? __vmalloc_node_noprof+0xad/0xf0 [ 331.647810][ T7766] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 331.647849][ T7766] ? kcov_ioctl+0x4c/0x730 [ 331.647873][ T7766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.647908][ T7766] ? hook_file_ioctl_common+0x145/0x410 [ 331.647937][ T7766] ? kcov_ioctl+0x4c/0x730 [ 331.647954][ T7766] vmalloc_user_noprof+0x9e/0xe0 [ 331.647983][ T7766] ? kcov_ioctl+0x4c/0x730 [ 331.648002][ T7766] kcov_ioctl+0x4c/0x730 [ 331.648019][ T7766] ? __pfx_kcov_ioctl+0x10/0x10 [ 331.648039][ T7766] __x64_sys_ioctl+0x18e/0x210 [ 331.648063][ T7766] do_syscall_64+0xcd/0xfa0 [ 331.648088][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.648108][ T7766] RIP: 0033:0x7f72df98ebcb [ 331.648125][ T7766] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 331.648143][ T7766] RSP: 002b:00007ffc4ac46d80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.648162][ T7766] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f72df98ebcb [ 331.648174][ T7766] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 331.648186][ T7766] RBP: 00007f72dfbe6038 R08: 0000000000000005 R09: 0000000000000000 [ 331.648198][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.648210][ T7766] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 331.648238][ T7766] [ 331.648245][ T7766] Mem-Info: [ 332.154779][ T6680] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.176330][ T6680] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.185143][ T6680] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.194020][ T7766] active_anon:7093 inactive_anon:0 isolated_anon:0 [ 332.194020][ T7766] active_file:2913 inactive_file:50954 isolated_file:0 [ 332.194020][ T7766] unevictable:768 dirty:7 writeback:23 [ 332.194020][ T7766] slab_reclaimable:11807 slab_unreclaimable:99176 [ 332.194020][ T7766] mapped:2864 shmem:1374 pagetables:836 [ 332.194020][ T7766] sec_pagetables:0 bounce:0 [ 332.194020][ T7766] kernel_misc_reclaimable:0 [ 332.194020][ T7766] free:1340074 free_pcp:19601 free_cma:0 [ 332.249589][ T7766] Node 0 active_anon:28372kB inactive_anon:0kB active_file:11652kB inactive_file:203612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:11456kB dirty:28kB writeback:92kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12348kB pagetables:3184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.286149][ T7766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 332.329018][ T7766] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.423703][ T7766] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 332.439580][ T7766] Node 0 DMA32 free:1531296kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28472kB inactive_anon:0kB active_file:8952kB inactive_file:203612kB unevictable:1536kB writepending:20kB zspages:0kB present:3129332kB managed:2541316kB mlocked:0kB bounce:0kB free_pcp:50936kB local_pcp:25116kB free_cma:0kB [ 332.504701][ T7766] lowmem_reserve[]: 0 0 1 1 1 [ 332.509440][ T7766] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.555908][ T7766] lowmem_reserve[]: 0 0 0 0 0 [ 332.560697][ T7766] Node 1 Normal free:3885240kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23488kB local_pcp:11904kB free_cma:0kB [ 332.601143][ T7766] lowmem_reserve[]: 0 0 0 0 0 [ 332.607294][ T7766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.620096][ T7766] Node 0 DMA32: 4001*4kB (UM) 1463*8kB (UME) 625*16kB (UME) 722*32kB (UM) 286*64kB (UM) 176*128kB (UM) 123*256kB (UM) 84*512kB (UM) 53*1024kB (UM) 34*2048kB (UM) 308*4096kB (UM) = 1561612kB [ 332.639708][ T7766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.651747][ T7766] Node 1 Normal: 210*4kB (U) 56*8kB (UME) 41*16kB (UME) 63*32kB (UME) 27*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885240kB [ 332.673196][ T7766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.682760][ T7766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.692269][ T7766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.701868][ T7766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.713627][ T7766] 54449 total pagecache pages [ 332.718332][ T7766] 0 pages in swap cache [ 332.722468][ T7766] Free swap = 124996kB [ 332.726767][ T7766] Total swap = 124996kB [ 332.730918][ T7766] 2097051 pages RAM [ 332.735107][ T7766] 0 pages HighMem/MovableOnly [ 332.740850][ T7766] 429696 pages reserved [ 332.745191][ T7766] 0 pages cma reserved [ 332.806251][ T6689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.906224][ T6689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.984452][ T6689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.064181][ T6689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.174249][ T6689] bridge_slave_1: left allmulticast mode [ 333.179919][ T6689] bridge_slave_1: left promiscuous mode [ 333.185758][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.195486][ T6689] bridge_slave_0: left allmulticast mode [ 333.201141][ T6689] bridge_slave_0: left promiscuous mode [ 333.207940][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.582130][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.593974][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.605202][ T6689] bond0 (unregistering): Released all slaves [ 333.946389][ T6689] hsr_slave_0: left promiscuous mode [ 333.952337][ T6689] hsr_slave_1: left promiscuous mode [ 333.958319][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.966320][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.974567][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.981953][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.005727][ T6689] veth1_macvtap: left promiscuous mode [ 334.011271][ T6689] veth0_macvtap: left promiscuous mode [ 334.018192][ T6689] veth1_vlan: left promiscuous mode [ 334.292622][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 334.322740][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 334.900519][ T6689] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.912362][ T6689] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.978868][ T6689] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.991790][ T6689] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.050940][ T6689] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.065176][ T6689] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.124106][ T6689] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.135824][ T6689] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.326297][ T6689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.384473][ T6689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.453117][ T6689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.531947][ T6689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.710425][ T6689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.788293][ T6689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.839804][ T6689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.904672][ T6689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.069935][ T6689] bridge_slave_1: left allmulticast mode [ 336.077246][ T6689] bridge_slave_1: left promiscuous mode [ 336.083373][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.098284][ T6689] bridge_slave_0: left allmulticast mode [ 336.104059][ T6689] bridge_slave_0: left promiscuous mode [ 336.109824][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.122776][ T6689] bridge_slave_1: left allmulticast mode [ 336.130311][ T6689] bridge_slave_1: left promiscuous mode [ 336.136564][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.147932][ T6689] bridge_slave_0: left allmulticast mode [ 336.155240][ T6689] bridge_slave_0: left promiscuous mode [ 336.160974][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.172469][ T6689] bridge_slave_1: left allmulticast mode [ 336.178460][ T6689] bridge_slave_1: left promiscuous mode [ 336.185155][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.196229][ T6689] bridge_slave_0: left allmulticast mode [ 336.201894][ T6689] bridge_slave_0: left promiscuous mode [ 336.207970][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.544900][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.555747][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.566099][ T6689] bond0 (unregistering): Released all slaves [ 336.789465][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.799344][ T6689] bond0 (unregistering): Released all slaves [ 337.013476][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.025084][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.035062][ T6689] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 337.047404][ T6689] bond0 (unregistering): Released all slaves [ 337.058719][ T6689] bond1 (unregistering): Released all slaves [ 337.707541][ T6689] hsr_slave_0: left promiscuous mode [ 337.715161][ T6689] hsr_slave_1: left promiscuous mode [ 337.721159][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.729395][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.738216][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.745836][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.764262][ T6689] hsr_slave_0: left promiscuous mode [ 337.770139][ T6689] hsr_slave_1: left promiscuous mode [ 337.778792][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.786621][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.795514][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.803080][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.815700][ T6689] hsr_slave_0: left promiscuous mode [ 337.821675][ T6689] hsr_slave_1: left promiscuous mode [ 337.829715][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.838005][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.846046][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.853487][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.901192][ T6689] veth1_macvtap: left promiscuous mode [ 337.907425][ T6689] veth0_macvtap: left promiscuous mode [ 337.914762][ T6689] veth1_vlan: left promiscuous mode [ 337.920097][ T6689] veth0_vlan: left promiscuous mode [ 337.927938][ T6689] veth1_macvtap: left promiscuous mode [ 337.933539][ T6689] veth0_macvtap: left promiscuous mode [ 337.939150][ T6689] veth1_vlan: left promiscuous mode [ 337.945690][ T6689] veth0_vlan: left promiscuous mode [ 337.952154][ T6689] veth1_macvtap: left promiscuous mode [ 337.958051][ T6689] veth0_macvtap: left promiscuous mode [ 337.965108][ T6689] veth1_vlan: left promiscuous mode [ 337.970337][ T6689] veth0_vlan: left promiscuous mode [ 338.336360][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 338.365221][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 338.811506][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 338.841341][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 339.265511][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 339.295562][ T6689] team0 (unregistering): Port device team_slave_0 removed