last executing test programs: 6.720585945s ago: executing program 3 (id=650): syz_create_resource$binfmt(0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x1, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623c, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffb, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x10981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0x645c, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x7ff, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x48, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x2, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x8, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d6e, 0x4, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1001, 0x7f, 0x5, 0x3fa7, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a5, 0x2, 0x40, 0x7, 0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.071865505s ago: executing program 1 (id=652): userfaultfd(0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) read(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0xc8, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x2, 0x1, 0x2, 0x30, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x6, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@mdlm_detail={0x36, 0x24, 0x13, 0xfc, "84f03a1a956823e6d9feef97a57680e18852634d3726fb25b041c17e446507fcd20ad4bda11e1558b59afd23ccf25abc711a"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x2, 0x6, 0xe4, 0x1cf3, 0x7}, @obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0xd, 0x1f1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xf, 0x4d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0xa, 0x19}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x87, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0xd, 0x0, 0x40, 0x3}, 0x4b, &(0x7f0000000180)=ANY=[@ANYBLOB="050f4b00060a100300000009bb00100b0410c95b1e7ffdc6a3e93dfdbd0cef27affe0b10010400000403020031071002247102000b10010c06000a050b0001"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "b5dee1d24d9b39c1e9c4c6580365dc40da194221d7c2f2dfd1c473ca943dfcb4b94d2757d21bca297e5d544181eb759f6197530bf5ee817ff7fdfbb19379c4dfaf4fb94452a2c46b684b61562ca500"}}, {0x14, &(0x7f00000001c0)=@string={0x14, 0x3, "acfb77005b6e9fb48e2f91eb7c984fb13d8b"}}, {0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="44032683b38873e8576bb80fc3c7f3730b35ae36c438f7fb364261a5b37d41ef5bf1086f9508330db9341b3d4d4a6271ca87a2830a1446ca0734d4e23b7b901835ee771ef0"]}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 5.78530603s ago: executing program 3 (id=655): socket(0xa, 0x5, 0x400003) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, 0x0, 0x30, 0x13, @val=@netkit}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = gettid() socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 5.652749085s ago: executing program 2 (id=656): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x9, 0x36, @private1, @mcast1, 0x8000, 0x8, 0xdb90, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', r0, 0x29, 0x8, 0x5, 0x1, 0x10, @remote, @mcast2, 0x7, 0x7, 0x8, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18cafd653c8bc267e3b1342e38f5dd6bec1dbd58840cf363f93b5a7ebb417135337955cb8d44626cbff8bbb808723f03888aa3b8644027e98c5970efb7d39f83751ebbb53aa7c2ad541eb56a135673f1a063156b0e19cb07c1ce756b84eb64d86faa98fbca3814cae5ee2bbbee4b34e944a82d473ede0a5ff20dea76"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_io_uring_setup(0x1cfd, &(0x7f0000000800)={0x0, 0x5941, 0x14200, 0x0, 0xf1}, &(0x7f0000000040), &(0x7f0000000140)) syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0xeb98, 0x40, 0x100003, 0x8000347, 0x0, r2}, &(0x7f0000000340), &(0x7f0000000240)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xe9d0, 0x22, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="011500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000435c000008000000850000009500009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) (async) listen(r9, 0x4) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x40}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) 5.546903342s ago: executing program 0 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) (async, rerun: 32) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xffffffffffffff77}}, 0x4044000) (async) r4 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) (async) r9 = accept4$unix(r3, &(0x7f0000000440)=@abs, &(0x7f0000000100)=0x6e, 0xc00) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1ffffffffffffdcb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r10}, 0x10) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r7]) 5.42438307s ago: executing program 2 (id=658): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RSTATu(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2ad) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) inotify_init() (async) r3 = inotify_init() r4 = open(&(0x7f0000002200)='./file0\x00', 0x9841, 0xa0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_usb_connect$uac1(0x2, 0xa2, 0x0, 0x0) (async) syz_usb_connect$uac1(0x2, 0xa2, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) (async) fcntl$setlease(r4, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x1000101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_io_uring_setup(0x55f2, &(0x7f0000000340)={0x0, 0x5fab, 0x1, 0x3, 0x400200}, &(0x7f0000003400), 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x229) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000020c0)=@raw=[@jmp={0x5, 0x1, 0xc, 0x1, 0x0, 0x30}, @exit, @generic={0x17, 0xd, 0x6, 0xa, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @exit, @ldst={0x1, 0x3, 0x1, 0x0, 0x8, 0xffffffffffffffe0}, @call={0x85, 0x0, 0x0, 0xd4}], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000020c0)=@raw=[@jmp={0x5, 0x1, 0xc, 0x1, 0x0, 0x30}, @exit, @generic={0x17, 0xd, 0x6, 0xa, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @exit, @ldst={0x1, 0x3, 0x1, 0x0, 0x8, 0xffffffffffffffe0}, @call={0x85, 0x0, 0x0, 0xd4}], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1b, 0x7, 0x0, 0xa93, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1b, 0x7, 0x0, 0xa93, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRESDEC=r8, @ANYRES8=r3, @ANYRES8=r5, @ANYRESOCT=r10, @ANYBLOB='\x00'/28, @ANYRES64=r4, @ANYRES16=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa20000000000000702000014f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa20000000000000702000014f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r14, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r11, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x0, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r11, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5.364434993s ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000418e2f4b64ae2767ee8481eab000300040000000a000000f7ff00001174c7327b4cc345730a6aa0c1040000fa4811e92b4d2ccd2686eb80dd80cab9ea6730b676924485393de003b035791fdded5a3cee7e4d4b3969651f8a70ea452598d0bfd0b5b42d0841578d64ba89d6cd3d061c0864e568f43fc0ec1a3fd5523f0e16820552086d808d0ebaa11d140925ef742aa445a90bd412c1a9b2f1f26c31492695", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (fail_nth: 2) fdatasync(r2) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000304000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000002d580800000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_enter\x00', r5}, 0x18) 4.987752282s ago: executing program 0 (id=660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0xe388}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x61cf1a42b05cab89, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0x6}}}}}]}}]}}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x2, 0x30, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="895848587890c09a03f86f28138a1c5cb2ec085c8524278fc9787dc2843c9d582fe0711f207b834c7e8178eb4d499bb90974e7d96ff4b6f798bc1482f1a044aeb4c8a6440295"], 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x35c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x330, 0x2, [@TCA_U32_SEL={0x204, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x7, 0x1, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x7, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x35c}}, 0x24040094) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4606, &(0x7f0000000080)={0x2}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) 4.59489649s ago: executing program 2 (id=662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0400007d00000005db02000000000005d9000400000000000000000000000000100000000000000000fe008000000000001f00046e6f6465767b6376666f7892ffffff81020000ffffff30ffcebc920000002001704a86cec602007dfa673effeb09b5", @ANYRES32=0x0], 0x41c) syz_usb_connect$cdc_ncm(0x0, 0xdc, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x2, 0x1, 0x4a, 0x86fe51c93eb18dbb, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f37d350704c7"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xc6, 0x1e35, 0x7f}, {0x6, 0x24, 0x1a, 0x1, 0x6}, [@mdlm_detail={0x5c, 0x24, 0x13, 0x5, "847f544f6a3dcc0337baa261089e161ec09054f5e57ad61ff93f07e21a4781ce9452c82c338c90153d4db9ccf6726c458c2aac6f09581b1ecaa43d18d73f9420d06018be44b1264aa05c5c485c3683e5e227c1823d2f2c54"}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x1, 0x3, 0x4, 0x0, 0xfe}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x47, 0xfc, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0xc2, 0x6}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0xb7, 0x4, 0x8, 0x1}, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x7f, 0x1, 0x8, 0x3}, @ptm_cap={0x3}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="200750000000500038a08017ae60c8300ee21530c9be7cf83d7b48e23f36cb03a98346c1cb22692a0af2c9d4bc95024ef20c8f58f41a9a5f09503e94a3833303fc761654ab1d35a40c7e22d4d8a928f8613748e6b3c6"], &(0x7f00000003c0)={0x0, 0x3, 0x96, @string={0x96, 0x3, "22cf94b0728e8a917be34beba80223688d0c54a18d94289fb2a160c57aff974ab7a2b4fad7f3e3ba77e6417fd75bf787f221c1d2ec1aaae253e4abf66e20a97185a0ba36da744742ab7bb4267e4b235531b32236767ef0772c1a05a2f3657973b1b9fda9a2198476b1d7c9e5ee83cd487baef5df993d3f28730e649b036093b20cbd78623a46e1993593483f00d8610fbef1edf4"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0xdb, "884fc01d131526c584a3f7c461432a438b4b1888040f3fe65731b53fb1fc7c651731b4cc339e58250bcae6b0725c2517b01a5c2eae29eaf6f7b0a95394074d548ce33d7b9f8d290c153ebe1677e22982b3a6e8a272f9c4a8f9ac482cda788d01d6261470296c05e78ebc14f6416f5f985034f35aaa17dfcc415df72478628dc375222ef235ed6ffdf152fb1bc56368665c6ad47eddc5d291041c2a1809bd8f75ec739121b74f2c0292c278ccd5abeb0c9b02d0c56a3032558974c0da08f06dbf1265cec11db9648accb73473382a5e1eb78b90b691fb69b391b5cc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0), 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0x14, &(0x7f0000000280)={0x40, 0xc, 0x90, {0x90, 0x22, "4b566c5387f476ddbe11f0ed9dd318315f97996aa4be5f6b57ceb273160a983b74b5a5174adfc1f79180c3246d55b20e8494cf588c173707722c68d46d6d7bd18e7b39c717c1ce059a438576be58a2f2fae737621fc683203331d88632155f35e242a1846dc5e7ba7f6727453063cf668e0c888fe5d2f233cea04d9cb5f2675f08ca423c9d87a1fba9d60a8ee968"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x20, 0x14, 0x61, "df1a5f58cbb98362ee0f0eba67dc4b55cb7d7754d9dcdf53cc74ee552a0808f0f719b08437057237725a01dcb108dbfcbf07dfff92951c33623f914ee1872193ad95c1a2dc1ac1b7691cc77d8d4749abecec602582a1b5682bd6643087b08bdd6b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x22}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x7c, {0x7a, "96e31d248ee2a113d1d033325392584701de380f25a2c327fe533ba0c464540a187ec2ad1da6f9ae5c7fd35f33073395c341beb0bb10cafc5b61b4be8831a4197f444c07511e442cf6bbfa30f46ff000c87b76309041697d2f1579eb3fd37b44abb0d1dc0e8b60308c8a494934d46c826ce0aab681f487d9f8f3"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af000000"], 0x0, 0x0, 0x0, 0x0}) 4.100082803s ago: executing program 3 (id=665): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000418e2f4b64ae2767ee8481eab000300040000000a000000f7ff00001174c7327b4cc345730a6aa0c1040000fa4811e92b4d2ccd2686eb80dd80cab9ea6730b676924485393de003b035791fdded5a3cee7e4d4b3969651f8a70ea452598d0bfd0b5b42d0841578d64ba89d6cd3d061c0864e568f43fc0ec1a3fd5523f0e16820552086d808d0ebaa11d140925ef742aa445a90bd412c1a9b2f1f26c31492695", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) fdatasync(r2) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000304000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000002d580800000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_enter\x00', r5}, 0x18) 3.885346481s ago: executing program 3 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000c00000000000000e3780000850000007d00000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) open(0x0, 0x80083, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='rxrpc_skb\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.712810568s ago: executing program 1 (id=668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000000000000000e300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000772bb08e710000018290000", @ANYRES32=0x1, @ANYBLOB="000000000200000085000000080000000435fcff01000000850000005d0000001800000009000000000000005a7400003511080001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002240)=0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000022c0)={0x3, 0x80000000, 0xb16, 0x0, 0xe}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socket$pppoe(0x18, 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000001180)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000003c0)="14f51e8bb33d05e79da2f64a0ffafb013b827aee40049e36ec07ff122529cd7246b5db8134e60bc5f74a90a196d28ddebf6cac299bc448d0abad4acf26057328385db9a83e080ebe43c29be63f454b21abf49ffc90a3e5e252e7eba24306c6dd0391fd7bd00f13f4f515066b256f4b3d296448c591dfc7d0114f7729786f3564f10477464252eb98bb25415d34fcc132b59d2839886135ebff97f8c7", 0x9c}, {&(0x7f0000000480)="bfeed0d4f01c07560ab2e27eb165543f838bb3ae85bda36ed6be86af176970398072b036e692b89d1495f9d3bf51392b15a93bbf2500cd345524031f1a245f7e99b39a5cd7a523e491b552e15df9c60b571b0b6755c8eef643c01b678f259affda49be36f24148d0d94656f49f45947badc67ab861504656098a84c5768cc35e9d60b2ffb2f9240afd19aa31228e34d5", 0x90}, {&(0x7f0000000540)="6402465ce3a8c759d7d2e3a2557b1da072c9c543c5b8d7689dfd37659cfd97584895f84f04039314dbf07397be4a89b6cf629452bf369da8376789c14597bb251d4f85fc91c818df87", 0x49}, {&(0x7f00000006c0)="fa439bddcec386ab2e119db18671ab6b364c0637217f57fa2845c43240c07514c6995715611c8fdf982ecb7b8375771d894abe2a30d533490fb054e33d1aa04f67279e34ebf3e38ba188445770f61759a2c7dbef2f51d9df06a7e8e56d3b8626e13963b312baedcd98a8a71cd5198e447319d3c237315a45b02369f80bb7a2ad814da8e34aae918543aff27de8db4bea7ff8c8bdae23eb662ec5889a745260a5d41a61fafe48ab80c5", 0xa9}, {&(0x7f0000000840)="f7a93dd63b4f360f9e994414912a655b819b29796c4fa9f5b8c15ccd495cac9f6daef634c8ec339d6d77e26123ea1297b403629e02b1f3b6e3fcd2fe37a2a58a5eeaeb6e98facd04a50f673289ac3d9dba5c9056348c4d97a7523691c18912a9801df17687baaf48076a87ce7bd9bfe881ac771f946eaac0df608866b86b0760198006c135718ef711f2bf75c2ea16b61ec67b3efb8ddcbc", 0x98}, {&(0x7f0000000b80)="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", 0x1d0}], 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c0000bf7bf3dd041300000000000100000002000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r4, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000002dd4000005000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32], 0x168, 0xc084}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r6, @ANYRES32=r0, @ANYRES64=r6, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xe, &(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='wchan\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') read$FUSE(r8, &(0x7f00000011c0)={0x2020}, 0x2020) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x1c, &(0x7f0000000040)="ff02040000ffff2be82db1af00"/24, 0x18) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x1ff, 0x0, @remote, @empty, 0x80, 0x80, 0xfffffffc, 0xdc67}}) 3.151875723s ago: executing program 4 (id=669): prctl$PR_CAPBSET_READ(0x17, 0x16) (async) r0 = io_uring_setup(0x265b, &(0x7f0000000340)={0x0, 0xe8e2, 0x1, 0x1fffe, 0x200002c6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) (async) r1 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x3fbe, 0x800, 0x20000001, 0xef, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000280)=[r0], 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x1000, 0x1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x11c3b6617688ac25, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10004) (async, rerun: 64) prctl$PR_CAPBSET_READ(0x17, 0xa) (rerun: 64) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f00000003c0)={{0x0, 0x0, 0x80}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000252a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) 3.092570922s ago: executing program 4 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf039}, {0x0}], 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c00c0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = syz_usbip_server_init(0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x40000) mmap(&(0x7f0000342000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x3000) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/config\x00') writev(r2, &(0x7f0000000280), 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) fsopen(&(0x7f0000000000)='smb3\x00', 0x1) 2.772666855s ago: executing program 1 (id=671): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000418e2f4b64ae2767ee8481eab000300040000000a000000f7ff00001174c7327b4cc345730a6aa0c1040000fa4811e92b4d2ccd2686eb80dd80cab9ea6730b676924485393de003b035791fdded5a3cee7e4d4b3969651f8a70ea452598d0bfd0b5b42d0841578d64ba89d6cd3d061c0864e568f43fc0ec1a3fd5523f0e16820552086d808d0ebaa11d140925ef742aa445a90bd412c1a9b2f1f26c31492695", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (fail_nth: 3) fdatasync(r2) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000304000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000002d580800000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_enter\x00', r5}, 0x18) 2.422363365s ago: executing program 3 (id=672): syz_create_resource$binfmt(0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@userptr={0x1, 0x4, 0x4, 0xfc6634500d8de9fd, 0xf, {0x77359400}, {0x5, 0x0, 0x4, 0x1, 0x2c, 0xb8, "247d31e3"}, 0x5, 0x2, {0x0}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x1, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623c, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffb, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0x645c, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x7ff, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x48, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x2, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x8, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d6e, 0x4, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1001, 0x7f, 0x5, 0x3fa7, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x28c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2.309776194s ago: executing program 1 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000300)=ANY=[@ANYBLOB="74720600733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000300)=ANY=[@ANYBLOB="74720600733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYBLOB=',\x00']) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0xfffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7f) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, 0x0) (async) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, 0x0, 0x0, 0x185, 0x0) (async) preadv(r7, 0x0, 0x0, 0x185, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f00000001c0)='barrier') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000018b000/0x14000)=nil, 0x14000, 0x2) (async) madvise(&(0x7f000018b000/0x14000)=nil, 0x14000, 0x2) 1.905756811s ago: executing program 0 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32], 0x11) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.873684789s ago: executing program 4 (id=675): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) (async) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0xdffaa000) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000080)={0x9, 0x6}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x74000000) (async) write$dsp(r6, &(0x7f0000002000)='`', 0x88020) (async) sendmsg$nl_xfrm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="a801000016000104fdffffff00000000fc0100000000000000000000000000012001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000020000000000000000f1ffffffffffff02000000feffffff0000000000000000900000000000000008000000fdffffff04001b"], 0x1a8}}, 0x4808) 1.632856573s ago: executing program 4 (id=676): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r5, &(0x7f0000000700)=""/115, 0x73, 0x5) 1.567629476s ago: executing program 0 (id=677): r0 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r1 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @random="ea856e0863ee", 'sit0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) (rerun: 64) 1.435027734s ago: executing program 3 (id=678): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x9c}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x1, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 900.403903ms ago: executing program 2 (id=679): getrlimit(0x2, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x400) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x9000000, r1, 0x20, {0x2, 0xd22}, 0xbf}, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000140)) write(r0, &(0x7f0000000180)="e1995e3e57ccc806c73179b4b75b71677da303148b2fa1e01d1d81976e117f69d66c509be64b1d230b484c6506696f7b1d233c959c07d4debe9195851eb9b19579523065d54536c5989b7e5ac268732f2ad79057b806", 0x56) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, 0x46, 0x8000, 0x15) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x8da) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0xc56c5f146bfdeed8, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @multicast2}, &(0x7f00000003c0)=0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000440), 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x5000, 0x860, 0x4, {0x0, @pix_mp={0xbd18, 0x5, 0x32315258, 0x0, 0xb, [{0x0, 0x80}, {0x8, 0x4}, {0x7, 0x8}, {0x8, 0x8}, {0x7, 0xfffffff8}, {0xfffffff8, 0xf}, {0x2, 0x3}, {0x78, 0x2}], 0x0, 0x2, 0x8, 0x0, 0x5}}, 0x2}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000600)={0x3, 0x8, 0x7a, &(0x7f0000000580)=""/122}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000640)=0x2abb) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000006c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000740)={'veth1_to_bond\x00', 0x800}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000780)={0x28, 0x31, 0x17, 0x1e, 0x7, 0x100, 0x0, 0x73, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x9, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x9, 0x20, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x8, 0xa, 0x9, 0x2, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x9d}, @jmp={0x5, 0x1, 0xc, 0x0, 0x5, 0xfffffffffffffffc, 0x10}, @map_fd={0x18, 0xe, 0x1, 0x0, r1}]}, &(0x7f0000000980)='GPL\x00', 0x7ff, 0x6d, &(0x7f00000009c0)=""/109, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, r2, 0x8, &(0x7f0000000a40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x3, 0x3bce, 0xf}, 0x10, r7, r1, 0x4, &(0x7f0000000b00)=[r1], &(0x7f0000000b40)=[{0x1, 0x1, 0x7, 0x6}, {0x2, 0x4, 0x4, 0x9}, {0x5, 0x2, 0x4, 0x4}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r8, {0x2b, 0x707}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000c80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000e80)={"d6d88cab1184983fe4b6cf3de2a348b8", r9, 0x0, {}, {0x0, 0x6}, 0x5, [0x1d, 0x6, 0x1, 0x4, 0x1618, 0x3, 0x6, 0x1ff, 0x4, 0x80, 0xffffffffffff0001, 0x6, 0xf000, 0x4, 0x8, 0xd3]}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) 897.208514ms ago: executing program 0 (id=680): socket(0x27, 0x1, 0x0) (async, rerun: 64) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r2 = fsopen(&(0x7f0000000180)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = fsmount(r2, 0x0, 0x2) (rerun: 32) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000140)='\x00\x00_\f/\x1a\xccO\x10\tJ\xbdo\x1cA\xcc[(\xc5\xb8\x92\x05\xdb\x15\xd0\xe1Gg\'|\xc9K\xcb\x19c\xb8\x06j\xca\\\x8dJ\x19j\xd8\xd5\xf4g]\x7f', &(0x7f0000000100)='./file0\x00', r3) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040), 0x0}, 0x0) 834.80716ms ago: executing program 2 (id=681): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x4802, 0xd, 0x0, 0x5}, 0x10) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0xc, 0x82) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) fchdir(r2) r3 = socket$netlink(0x10, 0x3, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'}) utimensat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x40400, 0x88) ioctl$SNDCTL_TMR_SELECT(r8, 0x40045408) 735.158183ms ago: executing program 4 (id=682): socket$inet6(0xa, 0x2, 0x3a) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='cachefiles_ondemand_copen\x00', r6, 0x0, 0x1000000a}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(r2, r2) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095", @ANYRESDEC=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) 630.306632ms ago: executing program 1 (id=683): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000418e2f4b64ae2767ee8481eab000300040000000a000000f7ff00001174c7327b4cc345730a6aa0c1040000fa4811e92b4d2ccd2686eb80dd80cab9ea6730b676924485393de003b035791fdded5a3cee7e4d4b3969651f8a70ea452598d0bfd0b5b42d0841578d64ba89d6cd3d061c0864e568f43fc0ec1a3fd5523f0e16820552086d808d0ebaa11d140925ef742aa445a90bd412c1a9b2f1f26c31492695", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (fail_nth: 4) fdatasync(r2) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000304000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000002d580800000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_es_lookup_extent_enter\x00', r5}, 0x18) 364.661365ms ago: executing program 4 (id=684): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="00008000000000f1ffffff8500000028000000181100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000400)={0x40000018}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 41.599302ms ago: executing program 1 (id=685): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000080)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kvm_msi_set_irq\x00', r7, 0x0, 0x2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000000240)=@urb_type_control={0x2, {0x4, 0x1}, 0x400000, 0x80, 0x0, 0xfffffffffffffe79, 0x7, 0x9, 0x0, 0x3, 0x9, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000000240)=@urb_type_control={0x2, {0x4, 0x1}, 0x400000, 0x80, 0x0, 0xfffffffffffffe79, 0x7, 0x9, 0x0, 0x3, 0x9, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)}, 0x20) r9 = syz_io_uring_setup(0x2bfb, &(0x7f0000000180)={0x0, 0xfffffffd, 0x8000, 0x3, 0x0, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x1000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x1000) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffdf, 0x4}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffdf, 0x4}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 0s ago: executing program 2 (id=686): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300)="cb17", 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x1, @mcast1, 0x7}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d6163736563000028fd028008000500", @ANYRES32=r10, @ANYBLOB="08001f0007001fa9"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2000c010) close_range(r1, 0xffffffffffffffff, 0x0) r11 = socket(0x10, 0x80003, 0x0) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r4, @ANYRESDEC=r5, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200008c5}, 0x0) kernel console output (not intermixed with test programs): 330): avc: denied { read } for pid=6699 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.298306][ T30] audit: type=1400 audit(1766095051.414:331): avc: denied { write } for pid=6699 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.322235][ T30] audit: type=1400 audit(1766095051.484:332): avc: denied { bind } for pid=6699 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.434604][ T5867] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 112.596295][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.624528][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 112.643222][ T5867] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 112.664482][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.685217][ T5867] usb 1-1: config 0 descriptor?? [ 112.755264][ T6706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.890559][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.167171][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.200032][ T9] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 113.230501][ T9] asix 5-1:0.98: probe with driver asix failed with error -71 [ 113.265666][ T9] usb 5-1: USB disconnect, device number 3 [ 113.321961][ T30] audit: type=1400 audit(1766095052.894:333): avc: denied { ioctl } for pid=6721 comm="syz.4.202" path="socket:[11219]" dev="sockfs" ino=11219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.382839][ T30] audit: type=1400 audit(1766095052.924:334): avc: denied { connect } for pid=6721 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.388442][ T5867] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0 [ 114.005707][ T30] audit: type=1400 audit(1766095052.924:335): avc: denied { read } for pid=6721 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.052476][ T5867] cypress 0003:04B4:DE64.0004: unknown main item tag 0x0 [ 114.093066][ T5867] cypress 0003:04B4:DE64.0004: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.0-1/input0 [ 114.575021][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 114.738879][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.738988][ T24] usb 2-1: config 0 has no interface number 0 [ 114.739132][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 114.739178][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.776541][ T24] usb 2-1: config 0 descriptor?? [ 114.823342][ T24] usb 2-1: selecting invalid altsetting 1 [ 114.829626][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 114.829722][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 115.172867][ T24] DVB: Unable to find symbol cx22700_attach() [ 115.281057][ T5821] usb 1-1: USB disconnect, device number 22 [ 115.740784][ T24] DVB: Unable to find symbol tda10046_attach() [ 115.760990][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 115.772457][ T24] usb 2-1: USB disconnect, device number 5 [ 116.083806][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.286563][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 116.294129][ T5867] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 116.324542][ T5867] usb 4-1: config 1 has no interface number 0 [ 116.330657][ T5867] usb 4-1: config 1 interface 133 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 116.388202][ T5867] usb 4-1: config 1 interface 133 has no altsetting 0 [ 116.412845][ T5867] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 116.428148][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.438168][ T6769] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.460388][ T30] audit: type=1400 audit(1766095056.034:336): avc: denied { sqpoll } for pid=6763 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.537794][ T30] audit: type=1400 audit(1766095056.034:337): avc: denied { bind } for pid=6767 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.549810][ T6771] input: syz1 as /devices/virtual/input/input9 [ 116.594443][ T30] audit: type=1400 audit(1766095056.124:338): avc: denied { getopt } for pid=6768 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.953117][ T5867] usb 4-1: string descriptor 0 read error: -71 [ 116.959643][ T30] audit: type=1400 audit(1766095056.124:339): avc: denied { append } for pid=6768 comm="syz.2.208" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 117.017374][ T5867] usb 4-1: USB disconnect, device number 8 [ 117.018123][ T30] audit: type=1400 audit(1766095056.334:340): avc: denied { append } for pid=6772 comm="syz.4.216" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.096524][ T30] audit: type=1400 audit(1766095056.504:341): avc: denied { setopt } for pid=6761 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.014576][ T5821] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.205962][ T5821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 119.227991][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 119.272225][ T5821] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 119.292171][ T5821] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 119.297170][ T6829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.231'. [ 119.301877][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.319340][ T5821] usb 5-1: Product: syz [ 119.323575][ T5821] usb 5-1: Manufacturer: syz [ 119.329673][ T5821] usb 5-1: SerialNumber: syz [ 119.368577][ T5821] usb 5-1: config 0 descriptor?? [ 119.394137][ T6812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.420390][ T6812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.443326][ T5821] usb 5-1: ucan: probing device on interface #0 [ 119.502968][ T30] audit: type=1400 audit(1766095059.074:342): avc: denied { read } for pid=6833 comm="syz.2.233" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.526363][ T6834] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 119.531325][ T30] audit: type=1400 audit(1766095059.074:343): avc: denied { open } for pid=6833 comm="syz.2.233" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.533017][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.547092][ T6834] vhci_hcd vhci_hcd.0: Device attached [ 119.650673][ T5821] usb 5-1: ucan: device protocol version 1949267045 is not supported [ 119.659599][ T5821] usb 5-1: ucan: probe failed; try to update the device firmware [ 119.764531][ T5867] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 119.844628][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 119.853060][ T5821] usb 5-1: USB disconnect, device number 4 [ 120.168498][ T10] usb 3-1: no configurations [ 120.173144][ T10] usb 3-1: can't read configurations, error -22 [ 120.183001][ T30] audit: type=1400 audit(1766095059.634:344): avc: denied { write } for pid=6841 comm="syz.0.234" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 120.268127][ T24] libceph: connect (1)[c::]:6789 error -101 [ 120.274265][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.314529][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 120.352225][ T6846] ceph: No mds server is up or the cluster is laggy [ 120.495128][ T10] usb 3-1: no configurations [ 120.499785][ T10] usb 3-1: can't read configurations, error -22 [ 120.514567][ T10] usb usb3-port1: attempt power cycle [ 120.683416][ T30] audit: type=1400 audit(1766095060.224:345): avc: denied { nlmsg_read } for pid=6851 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.894487][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 120.910286][ T30] audit: type=1400 audit(1766095060.484:346): avc: denied { create } for pid=6861 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 120.915410][ T10] usb 3-1: no configurations [ 121.023151][ T10] usb 3-1: can't read configurations, error -22 [ 121.175101][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 121.183798][ T6869] netlink: 272 bytes leftover after parsing attributes in process `syz.0.240'. [ 121.281523][ T30] audit: type=1400 audit(1766095060.854:347): avc: denied { read write } for pid=6866 comm="syz.0.240" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 121.285434][ T10] usb 3-1: no configurations [ 121.319976][ T10] usb 3-1: can't read configurations, error -22 [ 121.328106][ T10] usb usb3-port1: unable to enumerate USB device [ 122.076959][ T30] audit: type=1400 audit(1766095060.884:348): avc: denied { open } for pid=6866 comm="syz.0.240" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.104026][ T30] audit: type=1400 audit(1766095060.884:349): avc: denied { read write } for pid=6866 comm="syz.0.240" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.128433][ T30] audit: type=1400 audit(1766095060.884:350): avc: denied { open } for pid=6866 comm="syz.0.240" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.153496][ T30] audit: type=1326 audit(1766095061.624:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d038f749 code=0x7fc00000 [ 122.256114][ T5821] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.327792][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 122.435003][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 122.447404][ T5821] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.630046][ T6835] vhci_hcd: connection reset by peer [ 122.714495][ T4207] vhci_hcd vhci_hcd.2: stop threads [ 122.720457][ T4207] vhci_hcd vhci_hcd.2: release socket [ 122.883173][ T4207] vhci_hcd vhci_hcd.2: disconnect device [ 122.888878][ T5821] usb 2-1: config 179 has no interface number 0 [ 122.895547][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.936154][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.950218][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.961422][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 123.038999][ T5821] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.108154][ T5821] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.136425][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.151707][ T6868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.405492][ T5822] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 124.038830][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 124.038854][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.038865][ T5822] Workqueue: hci3 hci_rx_work [ 124.038889][ T5822] Call Trace: [ 124.038895][ T5822] [ 124.038902][ T5822] dump_stack_lvl+0x16c/0x1f0 [ 124.038928][ T5822] sysfs_warn_dup+0x7f/0xa0 [ 124.038943][ T5822] sysfs_create_dir_ns+0x24b/0x2b0 [ 124.038956][ T5822] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 124.038967][ T5822] ? find_held_lock+0x2b/0x80 [ 124.038992][ T5822] ? do_raw_spin_unlock+0x172/0x230 [ 124.039015][ T5822] kobject_add_internal+0x2c4/0x9d0 [ 124.039039][ T5822] kobject_add+0x16e/0x240 [ 124.039056][ T5822] ? __pfx_kobject_add+0x10/0x10 [ 124.039081][ T5822] ? kobject_put+0xaf/0x6f0 [ 124.039100][ T5822] ? _raw_spin_unlock+0x28/0x50 [ 124.039125][ T5822] device_add+0x288/0x1980 [ 124.039143][ T5822] ? __pfx_dev_set_name+0x10/0x10 [ 124.039162][ T5822] ? __pfx_device_add+0x10/0x10 [ 124.039180][ T5822] ? mgmt_send_event_skb+0x2fb/0x460 [ 124.039205][ T5822] hci_conn_add_sysfs+0x1a8/0x260 [ 124.039227][ T5822] le_conn_complete_evt+0x11ed/0x1fa0 [ 124.039251][ T5822] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 124.039289][ T5822] hci_le_conn_complete_evt+0x23c/0x3a0 [ 124.039313][ T5822] hci_le_meta_evt+0x357/0x610 [ 124.039334][ T5822] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 124.039356][ T5822] hci_event_packet+0x685/0x1210 [ 124.039375][ T5822] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 124.039396][ T5822] ? __pfx_hci_event_packet+0x10/0x10 [ 124.039417][ T5822] ? kcov_remote_start+0x399/0x680 [ 124.039434][ T5822] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.039460][ T5822] hci_rx_work+0x2c9/0x1020 [ 124.039481][ T5822] process_one_work+0x9ba/0x1b20 [ 124.039512][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 124.039540][ T5822] ? assign_work+0x1a0/0x250 [ 124.039562][ T5822] worker_thread+0x6c8/0xf10 [ 124.039593][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 124.039613][ T5822] kthread+0x3c5/0x780 [ 124.039633][ T5822] ? __pfx_kthread+0x10/0x10 [ 124.039653][ T5822] ? rcu_is_watching+0x12/0xc0 [ 124.039668][ T5822] ? __pfx_kthread+0x10/0x10 [ 124.039688][ T5822] ret_from_fork+0x983/0xb10 [ 124.039707][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 124.039726][ T5822] ? __switch_to+0x7af/0x10d0 [ 124.039747][ T5822] ? __pfx_kthread+0x10/0x10 [ 124.039767][ T5822] ret_from_fork_asm+0x1a/0x30 [ 124.039804][ T5822] [ 124.039885][ T5822] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.085261][ T6907] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 124.086861][ T5822] Bluetooth: hci3: failed to register connection device [ 124.455318][ T5821] usb 2-1: USB disconnect, device number 6 [ 124.461168][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 124.461193][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 124.491941][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 124.566605][ T6911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6911 comm=syz.3.250 [ 124.774673][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 124.774687][ T30] audit: type=1400 audit(1766095064.354:357): avc: denied { create } for pid=6913 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 124.800311][ T6925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.255'. [ 124.914532][ T5867] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 125.110082][ T6931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.256'. [ 125.256686][ T30] audit: type=1400 audit(1766095064.834:358): avc: denied { read } for pid=6917 comm="syz.4.253" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.287083][ T6935] fuse: Unknown parameter 'f”åtd-F„~N’døÚL_$¦ÒÞÁ†§T¥§+±ßUœýXÇÞ?f®Ô-î©~±!öì™HuJµY’êŠñ@ýHS¹…3ú°Ãù›ù`U×.ŠÆâc©q­’L&¶Çˆ34ô”ÿ¤XMsrûbôX/PÕZ€Æ¸œ“”Ë“0ÏEÝóõ–L¦Ao¥Ÿ|feMÝ8ßÃ<‰»yÔªqŒZå¼nu1' [ 125.343398][ T6918] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 125.371368][ T30] audit: type=1400 audit(1766095064.834:359): avc: denied { open } for pid=6917 comm="syz.4.253" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.413126][ T30] audit: type=1400 audit(1766095064.834:360): avc: denied { ioctl } for pid=6917 comm="syz.4.253" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.514572][ T5822] Bluetooth: hci2: command 0x0401 tx timeout [ 125.747904][ T30] audit: type=1400 audit(1766095065.314:361): avc: denied { lock } for pid=6902 comm="syz.2.248" path="socket:[13856]" dev="sockfs" ino=13856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 126.068356][ T30] audit: type=1400 audit(1766095065.644:362): avc: denied { bind } for pid=6956 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.445128][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.695929][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 126.708051][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.724241][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.764733][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.788740][ T5895] usb 2-1: Product: syz [ 126.812333][ T5895] usb 2-1: Manufacturer: syz [ 126.823065][ T5895] usb 2-1: SerialNumber: syz [ 126.841313][ T5895] usb 2-1: config 0 descriptor?? [ 127.161816][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.174608][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.275230][ T6981] input: syz1 as /devices/virtual/input/input10 [ 127.275684][ T5895] usb 2-1: USB disconnect, device number 7 [ 128.754888][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.763713][ T30] audit: type=1400 audit(1766095067.994:363): avc: denied { getopt } for pid=6984 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.800855][ T6998] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 128.814510][ T5931] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 128.822215][ T6997] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 128.894460][ T5895] usb 2-1: device descriptor read/64, error -71 [ 128.981621][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.274'. [ 129.004878][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.012893][ T5931] usb 3-1: not running at top speed; connect to a high speed hub [ 129.065156][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.088815][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.108193][ T30] audit: type=1400 audit(1766095068.684:364): avc: denied { mount } for pid=7000 comm="syz.4.274" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 129.130047][ T5931] usb 3-1: string descriptor 0 read error: -22 [ 129.134488][ T5867] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 129.137548][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.153798][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.174524][ T5895] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.199557][ T5931] usb 3-1: 0:2 : does not exist [ 129.314848][ T5895] usb 2-1: device descriptor read/64, error -71 [ 129.346780][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.366875][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 129.384618][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 129.404491][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 129.419677][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.431881][ T5867] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.440989][ T5895] usb usb2-port1: attempt power cycle [ 129.441203][ T5867] usb 4-1: Manufacturer: syz [ 129.457643][ T5867] usb 4-1: config 0 descriptor?? [ 129.724483][ T5867] rc_core: IR keymap rc-hauppauge not found [ 129.730514][ T5867] Registered IR keymap rc-empty [ 129.736850][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 129.755116][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 129.811977][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.871700][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 129.905394][ T5895] usb 2-1: device descriptor read/8, error -71 [ 129.971602][ T30] audit: type=1400 audit(1766095069.544:365): avc: denied { bind } for pid=6989 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.972998][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 130.004069][ T7006] Unsupported ieee802154 address type: 0 [ 130.139708][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.160059][ T7009] overlay: filesystem on ./bus not supported as upperdir [ 130.174804][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.194783][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.216518][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.254715][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.285179][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.304719][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.324720][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.334784][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 130.344753][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.356154][ T5895] usb 2-1: device descriptor read/8, error -71 [ 130.364730][ T5867] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 130.395647][ T5867] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 130.403631][ T5867] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.490376][ T5895] usb usb2-port1: unable to enumerate USB device [ 130.503326][ T5867] usb 4-1: USB disconnect, device number 9 [ 130.543245][ T7014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.654163][ T7016] input: syz1 as /devices/virtual/input/input12 [ 131.105236][ T30] audit: type=1400 audit(1766095070.674:366): avc: denied { create } for pid=7020 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.160278][ T7025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'. [ 131.411295][ T30] audit: type=1400 audit(1766095070.734:367): avc: denied { write } for pid=7020 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.643494][ T5931] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 132.130123][ T5931] usb 3-1: Warning! Unlikely big volume range (=1861), cval->res is probably wrong. [ 132.138822][ T30] audit: type=1400 audit(1766095071.244:368): avc: denied { write } for pid=7026 comm="syz.0.281" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.152171][ T5931] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -25669/-23808/1 [ 132.241421][ T30] audit: type=1400 audit(1766095071.244:369): avc: denied { open } for pid=7026 comm="syz.0.281" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.246529][ T5931] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.359023][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.359196][ T5931] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 132.366278][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.435317][ T5931] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.461340][ T5931] usb 3-1: USB disconnect, device number 8 [ 132.778571][ T30] audit: type=1400 audit(1766095072.344:370): avc: denied { watch watch_reads } for pid=7045 comm="syz.3.287" path="/proc/235/map_files" dev="proc" ino=12986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 132.999522][ T30] audit: type=1400 audit(1766095072.574:371): avc: denied { module_load } for pid=7040 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 133.074496][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.149538][ T7055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.162230][ T30] audit: type=1400 audit(1766095072.734:372): avc: denied { getopt } for pid=7056 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.265878][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.294491][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.304246][ T5874] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 133.354463][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.388326][ T5874] usb 3-1: config 0 descriptor?? [ 133.679482][ T7067] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 133.747442][ T30] audit: type=1400 audit(1766095073.234:373): avc: denied { connect } for pid=7063 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.196810][ T30] audit: type=1400 audit(1766095074.774:374): avc: denied { create } for pid=7056 comm="syz.0.289" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.327812][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.349624][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.432946][ T5874] hid-corsair-void 0003:1B1C:0A14.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:0a14] on usb-dummy_hcd.2-1/input0 [ 135.699938][ T5874] hid-corsair-void 0003:1B1C:0A14.0005: failed to request firmware (reason: -71) [ 135.710815][ T5950] hid-corsair-void 0003:1B1C:0A14.0005: failed to request battery (reason: -71) [ 135.734999][ T5950] usb 3-1: USB disconnect, device number 9 [ 135.997548][ T30] audit: type=1400 audit(1766095075.574:375): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.108631][ T30] audit: type=1400 audit(1766095075.684:376): avc: denied { bind } for pid=7082 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.321287][ T30] audit: type=1400 audit(1766095075.704:377): avc: denied { listen } for pid=7082 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.598597][ T7100] wg1: entered promiscuous mode [ 136.603557][ T7100] wg1: entered allmulticast mode [ 137.837956][ T30] audit: type=1400 audit(1766095077.374:378): avc: denied { module_load } for pid=7101 comm="syz.4.298" path="/sys/kernel/notes" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 138.413980][ T30] audit: type=1400 audit(1766095077.504:379): avc: denied { setopt } for pid=7101 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.534106][ T30] audit: type=1400 audit(1766095077.704:380): avc: denied { ioctl } for pid=7094 comm="syz.0.295" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.054545][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.396718][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.434859][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.446043][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.696885][ T5895] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 139.738855][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.770216][ T5895] usb 4-1: Product: syz [ 139.774371][ T5895] usb 4-1: Manufacturer: syz [ 139.806528][ T5895] usb 4-1: SerialNumber: syz [ 139.832242][ T5895] usb 4-1: config 0 descriptor?? [ 139.842956][ T7132] loop2: detected capacity change from 0 to 7 [ 139.854091][ T5895] usb 4-1: ucan: probing device on interface #0 [ 139.861565][ T7132] loop2: [POWERTEC] p1 p2 p3 [ 139.871651][ T5895] usb 4-1: ucan: invalid EP count (0) [ 139.884865][ T7127] bond1: option tlb_dynamic_lb: invalid value (47) [ 139.894471][ T5895] usb 4-1: ucan: probe failed; try to update the device firmware [ 139.897978][ T7132] loop2: p2 start 524319 is beyond EOD, truncated [ 139.923201][ T7127] bond1 (unregistering): Released all slaves [ 139.967045][ T7132] loop2: p3 start 1932423285 is beyond EOD, truncated [ 140.050666][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.065061][ T933] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 141.256292][ T933] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 141.271182][ T933] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 141.289774][ T933] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 141.308457][ T933] usb 2-1: config 150 has no interface number 0 [ 141.318803][ T933] usb 2-1: config 150 interface 204 has no altsetting 0 [ 141.332279][ T933] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 141.344344][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.357691][ T933] usb 2-1: Product: syz [ 141.362818][ T933] usb 2-1: Manufacturer: syz [ 141.371486][ T933] usb 2-1: SerialNumber: syz [ 142.398431][ T5881] usb 4-1: USB disconnect, device number 10 [ 142.932044][ T7170] Bluetooth: MGMT ver 1.23 [ 143.018328][ T7170] lo speed is unknown, defaulting to 1000 [ 143.212825][ T7179] tmpfs: Bad value for 'mpol' [ 144.092498][ T7184] loop2: detected capacity change from 0 to 7 [ 144.113835][ T7184] loop2: [POWERTEC] p1 p2 p3 [ 144.133601][ T7184] loop2: p2 start 524319 is beyond EOD, truncated [ 144.160375][ T7184] loop2: p3 start 1932423285 is beyond EOD, truncated [ 144.163858][ T933] usb 2-1: USB disconnect, device number 12 [ 144.287824][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 144.828659][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 145.258279][ T30] audit: type=1400 audit(1766095084.834:381): avc: denied { write } for pid=7213 comm="syz.3.325" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.130404][ T7227] capability: warning: `syz.4.327' uses deprecated v2 capabilities in a way that may be insecure [ 146.238268][ T7226] lo speed is unknown, defaulting to 1000 [ 146.592810][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 146.687297][ T7232] loop2: detected capacity change from 0 to 7 [ 146.703185][ T7232] loop2: [POWERTEC] p1 p2 p3 [ 146.801061][ T7232] loop2: p2 start 524319 is beyond EOD, truncated [ 146.848861][ T7237] input: syz1 as /devices/virtual/input/input14 [ 146.857793][ T30] audit: type=1400 audit(1766095086.434:382): avc: denied { read } for pid=5173 comm="acpid" name="event5" dev="devtmpfs" ino=2916 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.894556][ T7232] loop2: p3 start 1932423285 is beyond EOD, truncated [ 147.060468][ T30] audit: type=1400 audit(1766095086.454:383): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2916 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.100524][ T30] audit: type=1400 audit(1766095086.454:384): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2916 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.131669][ T7242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.330'. [ 147.244954][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 147.648178][ T30] audit: type=1400 audit(1766095086.844:385): avc: denied { read } for pid=7240 comm="syz.2.331" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.024448][ T30] audit: type=1400 audit(1766095086.844:386): avc: denied { open } for pid=7240 comm="syz.2.331" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.298404][ T5874] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.499557][ T30] audit: type=1400 audit(1766095088.074:387): avc: denied { create } for pid=7254 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.601986][ T7256] can: request_module (can-proto-3) failed. [ 148.699840][ T7259] netlink: 'syz.2.334': attribute type 2 has an invalid length. [ 149.029057][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 149.036070][ T5874] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 149.044329][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.133390][ T5874] usb 4-1: config 0 has no interface number 0 [ 149.142042][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 149.164531][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.194300][ T5874] usb 4-1: Product: syz [ 149.202055][ T5874] usb 4-1: Manufacturer: syz [ 149.204588][ T5821] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 149.208157][ T5874] usb 4-1: SerialNumber: syz [ 149.221918][ T5874] usb 4-1: config 0 descriptor?? [ 149.597096][ T5821] usb 2-1: device descriptor read/64, error -71 [ 150.092183][ T5874] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 150.151321][ T5874] uvcvideo 4-1:0.105: No valid video chain found. [ 150.185583][ T5874] usb 4-1: USB disconnect, device number 11 [ 150.259515][ T7280] loop2: detected capacity change from 0 to 7 [ 150.295607][ T7280] loop2: [POWERTEC] p1 p2 p3 [ 150.302047][ T7280] loop2: p2 start 524319 is beyond EOD, truncated [ 150.316231][ T7280] loop2: p3 start 1932423285 is beyond EOD, truncated [ 150.374457][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.374457][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.502547][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 150.568961][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.578070][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.586115][ T5821] usb 2-1: device descriptor read/64, error -71 [ 150.586217][ T5881] usb 5-1: Product: syz [ 150.600813][ T5881] usb 5-1: Manufacturer: syz [ 150.606283][ T5881] usb 5-1: SerialNumber: syz [ 150.615753][ T5874] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 150.668055][ T7282] input: syz1 as /devices/virtual/input/input15 [ 150.704886][ T5821] usb usb2-port1: attempt power cycle [ 150.795904][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.826255][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.838258][ T5881] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 150.860116][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.880538][ T5881] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 150.913437][ T5874] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 150.932376][ T5881] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.010170][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.052989][ T5881] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 151.123513][ T5874] usb 4-1: config 0 descriptor?? [ 151.288280][ T5881] usb 5-1: USB disconnect, device number 5 [ 151.394584][ T5821] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.054497][ T5821] usb 2-1: device descriptor read/8, error -71 [ 152.402189][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.414920][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.423325][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.454471][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.462146][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.492851][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.508417][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.528748][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.539224][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.563347][ T30] audit: type=1400 audit(1766095092.134:388): avc: denied { relabelfrom } for pid=7300 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 152.599868][ T5874] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 152.602964][ T30] audit: type=1400 audit(1766095092.134:389): avc: denied { relabelto } for pid=7300 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 152.618337][ T7301] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 152.645476][ T30] audit: type=1804 audit(1766095092.224:390): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.349" name="/newroot/80/file0" dev="tmpfs" ino=483 res=1 errno=0 [ 152.650449][ T5874] hid-multitouch 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 152.694885][ T5874] usb 4-1: USB disconnect, device number 12 [ 152.768204][ T30] audit: type=1400 audit(1766095092.344:391): avc: denied { connect } for pid=7308 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.774595][ T5950] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.794293][ T7307] fido_id[7307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.954548][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 152.963359][ T5950] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 153.017930][ T30] audit: type=1400 audit(1766095092.594:392): avc: denied { bind } for pid=7308 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.044237][ T30] audit: type=1400 audit(1766095092.614:393): avc: denied { write } for pid=7308 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.070461][ T30] audit: type=1400 audit(1766095092.614:394): avc: denied { read } for pid=7308 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.090928][ T5950] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 153.108897][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.117339][ T5950] usb 3-1: Product: syz [ 153.121585][ T5950] usb 3-1: Manufacturer: syz [ 153.130715][ T5950] usb 3-1: SerialNumber: syz [ 153.137808][ T5950] usb 3-1: config 0 descriptor?? [ 153.340589][ T7314] loop2: detected capacity change from 0 to 7 [ 153.349570][ T6594] loop2: [POWERTEC] p1 p2 p3 [ 153.381957][ T6594] loop2: p2 start 524319 is beyond EOD, truncated [ 153.386258][ T5950] usb 3-1: USB disconnect, device number 10 [ 153.388619][ T6594] loop2: p3 start 1932423285 is beyond EOD, truncated [ 153.433388][ T7314] loop2: [POWERTEC] p1 p2 p3 [ 153.501551][ T7314] loop2: p2 start 524319 is beyond EOD, truncated [ 153.513028][ T7314] loop2: p3 start 1932423285 is beyond EOD, truncated [ 153.893329][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 153.988446][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.088492][ T30] audit: type=1400 audit(1766095093.664:395): avc: denied { getopt } for pid=7321 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.247557][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.438332][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 154.452314][ T24] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 154.471127][ T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 154.481211][ T5821] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.511753][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 154.543394][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.558446][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.583639][ T24] usb 3-1: Product: syz [ 154.601823][ T24] usb 3-1: Manufacturer: syz [ 154.615641][ T24] usb 3-1: SerialNumber: syz [ 154.655910][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 154.672557][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.701840][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.733244][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 154.752514][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 154.770120][ T5821] usb 5-1: config 0 has no interfaces? [ 154.816316][ T5821] usb 5-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 154.872464][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.891019][ T5821] usb 5-1: Product: syz [ 154.908885][ T5821] usb 5-1: Manufacturer: syz [ 154.928326][ T5821] usb 5-1: SerialNumber: syz [ 154.988174][ T5821] usb 5-1: config 0 descriptor?? [ 155.219761][ T7329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.624330][ T30] audit: type=1400 audit(1766095095.194:396): avc: denied { write } for pid=7333 comm="syz.1.359" path="socket:[14850]" dev="sockfs" ino=14850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.077259][ T9] usb 5-1: USB disconnect, device number 6 [ 156.184500][ T5950] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 156.194447][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 156.335625][ T5950] usb 4-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 156.344805][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.354483][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 156.359840][ T5950] usb 4-1: config 0 descriptor?? [ 156.367843][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.369274][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.388651][ T24] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 156.396792][ T5950] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 156.403110][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.418185][ T6594] udevd[6594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.435209][ T24] usb 2-1: Product: syz [ 156.439364][ T24] usb 2-1: Manufacturer: syz [ 156.445626][ T24] usb 2-1: SerialNumber: syz [ 156.453909][ T24] usb 2-1: config 0 descriptor?? [ 156.464508][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 156.470390][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 156.479356][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 156.573464][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.582187][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.593532][ T5881] usb 4-1: USB disconnect, device number 13 [ 156.784743][ T24] usb 2-1: USB disconnect, device number 17 [ 157.313415][ T30] audit: type=1400 audit(1766095096.464:397): avc: denied { write } for pid=7345 comm="syz.4.363" name="file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.349455][ T9] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 157.390873][ T7352] loop2: detected capacity change from 0 to 7 [ 157.397963][ T7352] loop2: [POWERTEC] p1 p2 p3 [ 157.403676][ T7352] loop2: p2 start 524319 is beyond EOD, truncated [ 157.411013][ T7352] loop2: p3 start 1932423285 is beyond EOD, truncated [ 157.464076][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 157.754808][ T5881] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.886438][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.886457][ T30] audit: type=1400 audit(1766095097.454:400): avc: denied { listen } for pid=7363 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.029361][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.089857][ T30] audit: type=1400 audit(1766095097.494:401): avc: denied { connect } for pid=7363 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.127534][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.218318][ T5881] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.308964][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.321444][ T30] audit: type=1400 audit(1766095097.524:402): avc: denied { accept } for pid=7363 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.442693][ T5881] usb 3-1: SerialNumber: syz [ 158.624038][ T7373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.822728][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.858626][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.911281][ T5881] usb 3-1: 0:2 : does not exist [ 158.922735][ T7375] binder_alloc: binder_alloc_mmap_handler: 7374 200000ffd000-200001000000 already mapped failed -16 [ 158.955786][ T5881] usb 3-1: USB disconnect, device number 12 [ 158.968119][ T7376] binder: BINDER_SET_CONTEXT_MGR already set [ 158.978252][ T7376] binder: 7374:7376 ioctl 4018620d 200000004a80 returned -16 [ 158.993360][ T7375] binder_alloc: 7374: binder_alloc_buf, no vma [ 159.001815][ T7376] binder_alloc: 7374: binder_alloc_buf, no vma [ 159.042139][ T6594] udevd[6594]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.076147][ T7382] input: syz1 as /devices/virtual/input/input17 [ 159.142306][ T30] audit: type=1400 audit(1766095098.714:403): avc: denied { append } for pid=7377 comm="syz.4.373" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.165658][ T9] IPVS: starting estimator thread 0... [ 159.304207][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.374'. [ 159.405544][ T7386] IPVS: using max 78 ests per chain, 187200 per kthread [ 159.709820][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 159.880321][ T30] audit: type=1400 audit(1766095099.454:404): avc: denied { write } for pid=7401 comm="syz.4.378" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.941394][ T30] audit: type=1400 audit(1766095099.494:405): avc: denied { ioctl } for pid=7401 comm="syz.4.378" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.985871][ T5821] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 160.224422][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 160.232589][ T5821] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 160.249006][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.265478][ T5821] usb 3-1: Product: syz [ 160.273832][ T5821] usb 3-1: Manufacturer: syz [ 160.282653][ T5821] usb 3-1: SerialNumber: syz [ 160.314103][ T5821] usb 3-1: config 0 descriptor?? [ 160.333739][ T5821] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 161.086887][ T5931] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 161.434127][ T7433] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.553166][ T5931] usb 5-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 161.563932][ T30] audit: type=1400 audit(1766095101.134:406): avc: denied { ioctl } for pid=7435 comm="syz.3.388" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 161.597073][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.605116][ T5931] usb 5-1: Product: syz [ 161.610188][ T5931] usb 5-1: Manufacturer: syz [ 161.617666][ T5931] usb 5-1: SerialNumber: syz [ 161.631840][ T5931] usb 5-1: config 0 descriptor?? [ 161.664691][ T7439] input: syz1 as /devices/virtual/input/input18 [ 161.686278][ T5931] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 162.195711][ T5821] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 162.204767][ T5821] visor 3-1:0.0: probe with driver visor failed with error -71 [ 162.234871][ T5821] usb 3-1: USB disconnect, device number 13 [ 162.334625][ T7447] netlink: 'syz.1.391': attribute type 7 has an invalid length. [ 162.369046][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 162.463227][ T30] audit: type=1326 audit(1766095102.034:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7fc00000 [ 162.803293][ T7465] syzkaller1: entered promiscuous mode [ 162.831585][ T7465] syzkaller1: entered allmulticast mode [ 162.946658][ T30] audit: type=1400 audit(1766095102.514:408): avc: denied { mount } for pid=7467 comm="syz.2.396" name="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.989369][ T30] audit: type=1400 audit(1766095102.564:409): avc: denied { search } for pid=7467 comm="syz.2.396" name="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.037636][ T30] audit: type=1400 audit(1766095102.564:410): avc: denied { search } for pid=7467 comm="syz.2.396" name="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.088171][ T30] audit: type=1400 audit(1766095102.594:411): avc: denied { read open } for pid=7467 comm="syz.2.396" path="/" dev="configfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.118329][ T30] audit: type=1400 audit(1766095102.694:412): avc: denied { kexec_image_load } for pid=7467 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 163.234008][ T7473] loop2: detected capacity change from 0 to 7 [ 163.257345][ T6594] loop2: [POWERTEC] p1 p2 p3 [ 163.266030][ T6594] loop2: p2 start 524319 is beyond EOD, truncated [ 163.272581][ T6594] loop2: p3 start 1932423285 is beyond EOD, truncated [ 163.291815][ T7473] loop2: [POWERTEC] p1 p2 p3 [ 163.304276][ T7473] loop2: p2 start 524319 is beyond EOD, truncated [ 163.321609][ T7473] loop2: p3 start 1932423285 is beyond EOD, truncated [ 163.421836][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.462873][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.472830][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.481422][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 163.725779][ T5821] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 163.745379][ T5931] pwc: Failed to set LED on/off time (-71) [ 163.758255][ T5931] pwc: send_video_command error -71 [ 163.763638][ T5931] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 163.771293][ T5931] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 163.784561][ T5931] usb 5-1: USB disconnect, device number 7 [ 163.884780][ T5821] usb 2-1: device descriptor read/64, error -71 [ 164.134507][ T5821] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 164.194807][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 164.253742][ T7492] input: syz1 as /devices/virtual/input/input19 [ 164.294541][ T5821] usb 2-1: device descriptor read/64, error -71 [ 164.394292][ T5881] usb 3-1: config index 0 descriptor too short (expected 256, got 36) [ 164.413238][ T5821] usb usb2-port1: attempt power cycle [ 164.422552][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.445197][ T5881] usb 3-1: config 0 has no interfaces? [ 164.453135][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 164.463499][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.482142][ T5881] usb 3-1: config 0 descriptor?? [ 164.807580][ T5821] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 164.866567][ T5821] usb 2-1: device descriptor read/8, error -71 [ 165.267764][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.429419][ T63] wlan1: Trigger new scan to find an IBSS to join [ 165.616901][ T5821] usb 2-1: device descriptor read/8, error -71 [ 165.815532][ T5821] usb usb2-port1: unable to enumerate USB device [ 166.188438][ T7514] gfs2: gfs2 mount does not exist [ 166.196917][ T7514] hugetlbfs: Unknown parameter 'sie' [ 166.213646][ T30] audit: type=1400 audit(1766095105.774:413): avc: denied { mount } for pid=7483 comm="syz.2.401" name="/" dev="hugetlbfs" ino=15235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 166.248660][ T30] audit: type=1400 audit(1766095105.774:414): avc: denied { remount } for pid=7483 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 166.592645][ T7513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.664880][ T7518] loop2: detected capacity change from 0 to 7 [ 166.706114][ T7518] loop2: [POWERTEC] p1 p2 p3 [ 166.722572][ T7518] loop2: p2 start 524319 is beyond EOD, truncated [ 166.857023][ T7518] loop2: p3 start 1932423285 is beyond EOD, truncated [ 166.906621][ T30] audit: type=1400 audit(1766095106.484:415): avc: denied { connect } for pid=7524 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.999831][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 167.311254][ T7537] syzkaller0: entered promiscuous mode [ 167.326026][ T7537] syzkaller0: entered allmulticast mode [ 167.394474][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.554444][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 167.572944][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.593454][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.603719][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.628330][ T7547] input: syz1 as /devices/virtual/input/input20 [ 167.649956][ T9] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 167.678771][ T5881] usb 3-1: USB disconnect, device number 14 [ 167.686090][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.719518][ T9] usb 5-1: config 0 descriptor?? [ 167.793707][ T30] audit: type=1400 audit(1766095107.364:416): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 168.164288][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 168.186150][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.215129][ T9] usb 5-1: USB disconnect, device number 8 [ 168.467522][ T30] audit: type=1400 audit(1766095108.024:417): avc: denied { append } for pid=7555 comm="syz.1.421" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.104503][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 169.244491][ T9] usb 3-1: device descriptor read/64, error -71 [ 169.271287][ T7576] loop2: detected capacity change from 0 to 7 [ 169.283576][ T7576] loop2: [POWERTEC] p1 p2 p3 [ 169.298097][ T7576] loop2: p2 start 524319 is beyond EOD, truncated [ 169.304887][ T7576] loop2: p3 start 1932423285 is beyond EOD, truncated [ 169.334473][ T5881] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.393003][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 169.394504][ T1096] wlan1: Trigger new scan to find an IBSS to join [ 169.484684][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.494580][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 169.531400][ T5881] usb 5-1: config 4 has an invalid interface number: 209 but max is 1 [ 169.550169][ T5881] usb 5-1: config 4 has an invalid interface number: 101 but max is 1 [ 169.578799][ T5881] usb 5-1: config 4 has no interface number 0 [ 169.603950][ T5881] usb 5-1: config 4 has no interface number 1 [ 169.651591][ T5881] usb 5-1: config 4 interface 101 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 169.674744][ T9] usb 3-1: device descriptor read/64, error -71 [ 169.821864][ T9] usb usb3-port1: attempt power cycle [ 169.846640][ T5881] usb 5-1: config 4 interface 209 has no altsetting 0 [ 169.853542][ T5881] usb 5-1: config 4 interface 101 has no altsetting 0 [ 169.899224][ T5881] usb 5-1: New USB device found, idVendor=413c, idProduct=8180, bcdDevice=7d.9a [ 169.921033][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.938042][ T7586] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 169.943212][ T30] audit: type=1400 audit(1766095109.514:418): avc: denied { module_request } for pid=7587 comm="syz.3.430" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.954605][ T5881] usb 5-1: Product: syz [ 169.978532][ T7586] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 170.011366][ T5881] usb 5-1: Manufacturer: syz [ 170.020599][ T7586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.029168][ T5881] usb 5-1: SerialNumber: syz [ 170.052847][ T5881] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 170.075289][ T5881] usb 5-1: no configuration chosen from 1 choice [ 170.184709][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 170.211705][ T30] audit: type=1400 audit(1766095109.784:419): avc: denied { write } for pid=7601 comm="syz.0.433" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.214934][ T9] usb 3-1: device descriptor read/8, error -71 [ 170.265552][ T5895] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 170.314511][ T5881] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 170.376809][ T1096] wlan1: Creating new IBSS network, BSSID 1a:96:bd:4e:6b:34 [ 170.434479][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 170.446475][ T5895] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.458263][ T5895] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.471706][ T5895] usb 2-1: config 1 interface 0 has no altsetting 0 [ 170.472522][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.480079][ T5895] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 170.522836][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 170.549224][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.595206][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.595342][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.608162][ T5881] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 170.656814][ T5895] usb 2-1: Product: syz [ 170.682944][ T9] usb 3-1: device descriptor read/8, error -71 [ 170.683009][ T5895] usb 2-1: Manufacturer: syz [ 170.701961][ T5895] usb 2-1: SerialNumber: syz [ 170.706818][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.730880][ T5881] usb 4-1: config 0 descriptor?? [ 170.794884][ T9] usb usb3-port1: unable to enumerate USB device [ 171.149584][ T30] audit: type=1400 audit(1766095110.724:420): avc: denied { listen } for pid=7596 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.235322][ T7612] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 171.331093][ T5895] usbhid 2-1:1.0: can't add hid device: -71 [ 171.354558][ T5895] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 171.399364][ T7612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.413090][ T5895] usb 2-1: USB disconnect, device number 22 [ 171.449159][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 171.483749][ T7614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.498320][ T7614] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.523357][ T7614] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 171.544309][ T7612] vivid-001: ================= START STATUS ================= [ 171.559057][ T7612] vivid-001: FM Deviation: 75000 [ 171.564725][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'. [ 171.587137][ T7612] vivid-001: ================== END STATUS ================== [ 171.629993][ T7615] veth3: entered promiscuous mode [ 171.657393][ T7615] bond1: (slave veth3): Enslaving as an active interface with a down link [ 171.704934][ T7618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.755330][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 171.986112][ T7625] binder: 7624:7625 ioctl c0306201 200000000640 returned -14 [ 172.091335][ T5895] usb 5-1: USB disconnect, device number 9 [ 172.350416][ T30] audit: type=1400 audit(1766095111.924:421): avc: denied { write } for pid=7635 comm="syz.2.441" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.431270][ T7636] 9p: Bad value for 'rfdno' [ 172.447029][ T30] audit: type=1400 audit(1766095111.924:422): avc: denied { ioctl } for pid=7631 comm="syz.0.439" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.549168][ T30] audit: type=1400 audit(1766095111.924:423): avc: denied { mount } for pid=7631 comm="syz.0.439" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.593837][ T7630] xt_NFQUEUE: number of total queues is 0 [ 172.773674][ T30] audit: type=1400 audit(1766095112.344:424): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 172.853941][ T30] audit: type=1400 audit(1766095112.424:425): avc: denied { getopt } for pid=7648 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.857279][ T7650] kAFS: unable to lookup cell '(,c¾Ì' [ 173.403359][ T30] audit: type=1400 audit(1766095112.974:426): avc: denied { getopt } for pid=7660 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.474284][ T7669] lo speed is unknown, defaulting to 1000 [ 174.202137][ T7673] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 174.213178][ T7673] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 174.222268][ T933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.245367][ T30] audit: type=1400 audit(1766095113.784:427): avc: denied { firmware_load } for pid=7671 comm="syz.4.449" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.358125][ T7677] Device name cannot be null; rc = [-22] [ 174.367466][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 174.376953][ T933] usb 3-1: Using ep0 maxpacket: 8 [ 174.383223][ T933] usb 3-1: config 1 has an invalid interface number: 79 but max is 0 [ 174.393824][ T933] usb 3-1: config 1 has no interface number 0 [ 174.400011][ T933] usb 3-1: config 1 interface 79 has no altsetting 0 [ 174.408886][ T933] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=34.45 [ 174.418212][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.427141][ T933] usb 3-1: Product: syz [ 174.431314][ T933] usb 3-1: Manufacturer: syz [ 174.442908][ T933] usb 3-1: SerialNumber: syz [ 174.495546][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'. [ 174.547454][ T7683] bond1: entered allmulticast mode [ 174.721104][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.796178][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.796462][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.807737][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.892367][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.914777][ T933] usb_ehset_test 3-1:1.79: probe with driver usb_ehset_test failed with error -32 [ 174.937200][ T933] usb 3-1: USB disconnect, device number 19 [ 175.035947][ T9] usb 5-1: device descriptor read/64, error -71 [ 175.240608][ T30] audit: type=1400 audit(1766095114.804:428): avc: denied { bind } for pid=7666 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.342492][ T30] audit: type=1400 audit(1766095114.914:429): avc: denied { ioctl } for pid=7694 comm="syz.0.454" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.414906][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.524067][ T7697] input: syz1 as /devices/virtual/input/input21 [ 175.554693][ T9] usb 5-1: device descriptor read/64, error -71 [ 175.828379][ T7704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 175.886026][ T9] usb usb5-port1: attempt power cycle [ 176.234555][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.275884][ T9] usb 5-1: device descriptor read/8, error -71 [ 176.704954][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 176.724449][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 176.838833][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 176.845265][ T9] usb 5-1: device descriptor read/8, error -71 [ 176.866912][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 176.914500][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 176.914633][ T5881] usb 4-1: USB disconnect, device number 14 [ 176.931255][ T24] usb 2-1: unable to get BOS descriptor set [ 176.945284][ T24] usb 2-1: config 0 has no interfaces? [ 176.969858][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.985621][ T9] usb usb5-port1: unable to enumerate USB device [ 177.002091][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.020320][ T24] usb 2-1: Product: syz [ 177.024588][ T24] usb 2-1: Manufacturer: syz [ 177.029172][ T24] usb 2-1: SerialNumber: syz [ 177.096367][ T24] usb 2-1: config 0 descriptor?? [ 177.310413][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.332862][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.366210][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.377233][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.397477][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.414988][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.430451][ T5821] usb 2-1: USB disconnect, device number 23 [ 177.854801][ T7725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.079203][ T7732] netlink: 'syz.1.466': attribute type 12 has an invalid length. [ 178.109600][ T7734] overlayfs: failed to resolve './file1': -2 [ 178.193846][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 178.195603][ T30] audit: type=1400 audit(1766095117.764:430): avc: denied { create } for pid=7729 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.324452][ T30] audit: type=1400 audit(1766095117.804:431): avc: denied { listen } for pid=7729 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.537360][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 178.550335][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 178.564509][ T5874] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 178.894453][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 178.901244][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.912418][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.924510][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.186626][ T5874] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.197205][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.210965][ T5874] usb 2-1: config 0 descriptor?? [ 179.252930][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 179.272342][ T7760] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.473'. [ 179.335101][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 179.341976][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.355798][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.377907][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.391831][ T7764] tipc: Started in network mode [ 179.401251][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.431071][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.442729][ T7764] tipc: Node identity dafadfcc11e1, cluster identity 4711 [ 179.452324][ T5950] usb 4-1: config 0 descriptor?? [ 179.488715][ T7764] tipc: Enabled bearer , priority 0 [ 179.524469][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.562921][ T7764] syzkaller0: entered promiscuous mode [ 179.584524][ T7764] syzkaller0: entered allmulticast mode [ 179.611381][ T7763] tipc: Resetting bearer [ 179.632766][ T7763] tipc: Disabling bearer [ 179.694465][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 179.724130][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 179.739090][ T30] audit: type=1400 audit(1766095119.314:432): avc: denied { ioctl } for pid=7778 comm="syz.0.477" path="socket:[17548]" dev="sockfs" ino=17548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.740872][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.804757][ T30] audit: type=1400 audit(1766095119.384:433): avc: denied { connect } for pid=7778 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.826688][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 179.875974][ T30] audit: type=1400 audit(1766095119.404:434): avc: denied { write } for pid=7778 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.925447][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.943522][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.951838][ T9] usb 3-1: Product: syz [ 179.956091][ T5874] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 179.968107][ T9] usb 3-1: Manufacturer: syz [ 179.972803][ T9] usb 3-1: SerialNumber: syz [ 179.984212][ T9] usb 3-1: config 0 descriptor?? [ 180.043257][ T7789] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.051754][ T7789] use the actual size instead. [ 180.059067][ T30] audit: type=1400 audit(1766095119.634:435): avc: denied { ioctl } for pid=7777 comm="syz.4.478" path="socket:[17559]" dev="sockfs" ino=17559 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.211366][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 180.212464][ T7747] ip6gretap0: entered promiscuous mode [ 180.230819][ T9] usb 3-1: Detected FT2232H [ 180.237835][ T5950] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input22 [ 180.249935][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 180.258877][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 180.265569][ T5821] usb 2-1: USB disconnect, device number 24 [ 180.270501][ T5950] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 180.286064][ T7747] vlan2: entered promiscuous mode [ 180.300325][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.330290][ T9] usb 3-1: USB disconnect, device number 20 [ 180.349576][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 180.427557][ T9] ftdi_sio 3-1:0.0: device disconnected [ 180.500035][ T5895] usb 4-1: USB disconnect, device number 15 [ 180.542052][ T7795] fido_id[7795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 182.358128][ T30] audit: type=1400 audit(1766095121.934:436): avc: denied { mounton } for pid=7814 comm="syz.4.485" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 182.572679][ T30] audit: type=1400 audit(1766095122.054:437): avc: denied { execute } for pid=7814 comm="syz.4.485" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 182.848287][ T7818] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 182.854881][ T7818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.869431][ T7818] vhci_hcd vhci_hcd.0: Device attached [ 183.053892][ T7822] vhci_hcd: connection closed [ 183.057054][ T4508] vhci_hcd vhci_hcd.3: stop threads [ 183.074436][ T4508] vhci_hcd vhci_hcd.3: release socket [ 183.224202][ T30] audit: type=1400 audit(1766095122.764:438): avc: denied { connect } for pid=7816 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.574439][ T5874] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 183.582411][ T4508] vhci_hcd vhci_hcd.3: disconnect device [ 184.265066][ T30] audit: type=1400 audit(1766095123.834:439): avc: denied { ioctl } for pid=7847 comm="syz.4.492" path="socket:[17708]" dev="sockfs" ino=17708 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.375769][ T5950] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 184.410632][ T30] audit: type=1400 audit(1766095123.884:440): avc: denied { write } for pid=7847 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.514469][ T5950] usb 2-1: device descriptor read/64, error -71 [ 184.764607][ T5950] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 184.994543][ T5950] usb 2-1: device descriptor read/64, error -71 [ 185.105334][ T7872] lo speed is unknown, defaulting to 1000 [ 185.126979][ T5950] usb usb2-port1: attempt power cycle [ 185.256342][ T7873] lo speed is unknown, defaulting to 1000 [ 185.284747][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 185.435846][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 185.448517][ T9] usb 3-1: config 3 has an invalid interface number: 155 but max is 0 [ 185.467179][ T9] usb 3-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 185.694039][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 185.702878][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 185.774542][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 185.976147][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 185.989343][ T5817] Bluetooth: hci2: command 0x0401 tx timeout [ 185.995367][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 186.007626][ T5950] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 186.017071][ T7888] IPv6: sit1: Disabled Multicast RS [ 186.049762][ T9] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 186.063887][ T5950] usb 2-1: device descriptor read/8, error -71 [ 186.075492][ T9] usb 3-1: config 3 has no interface number 0 [ 186.085731][ T9] usb 3-1: config 3 interface 155 has no altsetting 0 [ 186.097154][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 186.109122][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.118367][ T9] usb 3-1: Product: syz [ 186.122559][ T9] usb 3-1: Manufacturer: syz [ 186.219458][ T9] usb 3-1: SerialNumber: syz [ 186.396543][ T7893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.404906][ T5950] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 186.432871][ T7863] binder: BC_ACQUIRE_RESULT not supported [ 186.440322][ T7863] binder: 7862:7863 ioctl c0306201 200000000040 returned -22 [ 186.448298][ T5950] usb 2-1: device descriptor read/8, error -71 [ 186.455862][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'. [ 186.488161][ T9] uvcvideo 3-1:3.155: Found Unit with invalid ID 0 [ 186.495875][ T9] uvcvideo 3-1:3.155: Found UVC 0.00 device syz (05a9:264a) [ 186.503171][ T9] uvcvideo 3-1:3.155: No valid video chain found. [ 186.504256][ T30] audit: type=1400 audit(1766095126.074:441): avc: denied { setopt } for pid=7898 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.511936][ T9] usb 3-1: USB disconnect, device number 21 [ 186.529386][ T7899] capability: warning: `syz.3.506' uses 32-bit capabilities (legacy support in use) [ 186.574731][ T5950] usb usb2-port1: unable to enumerate USB device [ 186.614543][ T30] audit: type=1400 audit(1766095126.174:442): avc: denied { read } for pid=7898 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.413569][ T30] audit: type=1400 audit(1766095126.984:443): avc: denied { bind } for pid=7908 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.582321][ T7924] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 187.607512][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.643031][ T30] audit: type=1400 audit(1766095127.174:444): avc: denied { create } for pid=7916 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 188.103817][ T30] audit: type=1400 audit(1766095127.674:445): avc: denied { read } for pid=7913 comm="syz.1.511" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.128811][ T7925] tmpfs: Unknown parameter 'mpo' [ 188.603462][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 188.664513][ T5874] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.885498][ T7939] vivid-002: disconnect [ 188.999751][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 189.049442][ T30] audit: type=1400 audit(1766095128.624:446): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.076650][ T30] audit: type=1400 audit(1766095128.624:447): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.114601][ T30] audit: type=1400 audit(1766095128.624:448): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.148045][ T30] audit: type=1400 audit(1766095128.714:449): avc: denied { read } for pid=7944 comm="syz.2.520" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.251823][ T30] audit: type=1400 audit(1766095128.714:450): avc: denied { open } for pid=7944 comm="syz.2.520" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.579749][ T7937] vivid-002: reconnect [ 191.934799][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 191.934813][ T30] audit: type=1400 audit(1766095131.514:497): avc: denied { read write } for pid=8002 comm="syz.3.535" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 192.896186][ T30] audit: type=1400 audit(1766095131.544:498): avc: denied { open } for pid=8002 comm="syz.3.535" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 192.949589][ T30] audit: type=1400 audit(1766095131.544:499): avc: denied { read } for pid=8008 comm="syz.0.537" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.004200][ T30] audit: type=1400 audit(1766095131.544:500): avc: denied { open } for pid=8008 comm="syz.0.537" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.028141][ T30] audit: type=1400 audit(1766095131.884:501): avc: denied { setattr } for pid=8000 comm="syz.4.534" name="NETLINK" dev="sockfs" ino=18092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.052334][ T30] audit: type=1400 audit(1766095131.884:502): avc: denied { create } for pid=8000 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.118595][ T30] audit: type=1400 audit(1766095131.894:503): avc: denied { bind } for pid=8000 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.202600][ T30] audit: type=1400 audit(1766095131.894:504): avc: denied { setopt } for pid=8000 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.345752][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 193.401493][ T30] audit: type=1400 audit(1766095132.444:505): avc: denied { create } for pid=8017 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.416910][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 193.500512][ T3900] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.500607][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 193.521314][ T3900] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.542470][ T3900] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.553414][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 193.562441][ T3900] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.563759][ T30] audit: type=1400 audit(1766095133.114:506): avc: denied { write } for pid=8030 comm="syz.1.541" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.800524][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.816409][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.896868][ T5895] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 194.167892][ T5895] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.181876][ T5895] usb 2-1: can't read configurations, error -61 [ 194.230880][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 194.334470][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 194.486195][ T5895] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.493874][ T5895] usb 2-1: can't read configurations, error -61 [ 194.500496][ T5895] usb usb2-port1: attempt power cycle [ 194.590807][ T8040] syz.0.543 (8040) used greatest stack depth: 18424 bytes left [ 194.911545][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 194.937522][ T5895] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.964582][ T5895] usb 2-1: can't read configurations, error -61 [ 194.995210][ T8061] loop6: detected capacity change from 0 to 524287487 [ 195.046839][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.077856][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.102050][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.121564][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.152166][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.196230][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.233713][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.255719][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.275978][ T6594] ldm_validate_partition_table(): Disk read failed. [ 195.292640][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.301260][ T8079] evm: overlay not supported [ 195.309642][ T6594] Buffer I/O error on dev loop6, logical block 0, async page read [ 195.324015][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 195.339954][ T6594] Dev loop6: unable to read RDB block 0 [ 195.343572][ T5895] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 195.349706][ T6594] loop6: unable to read partition table [ 195.476468][ T5895] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 195.494681][ T5895] usb 2-1: can't read configurations, error -61 [ 195.501461][ T8061] ldm_validate_partition_table(): Disk read failed. [ 195.505854][ T5895] usb usb2-port1: unable to enumerate USB device [ 195.994960][ T8061] Dev loop6: unable to read RDB block 0 [ 196.006836][ T8061] loop6: unable to read partition table [ 196.016708][ T8061] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 196.230631][ T8095] pim6reg: entered allmulticast mode [ 196.725988][ T8095] netlink: get zone limit has 8 unknown bytes [ 196.874793][ T8109] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 196.881335][ T8109] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.902692][ T8113] bridge0: entered allmulticast mode [ 196.980589][ T8109] vhci_hcd vhci_hcd.0: Device attached [ 197.011234][ T8110] vhci_hcd: connection closed [ 197.014603][ T6053] vhci_hcd vhci_hcd.1: stop threads [ 197.035539][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 197.035552][ T30] audit: type=1400 audit(1766095136.614:558): avc: denied { read } for pid=8118 comm="syz.2.563" path="socket:[17145]" dev="sockfs" ino=17145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.064943][ T6053] vhci_hcd vhci_hcd.1: release socket [ 197.070316][ T6053] vhci_hcd vhci_hcd.1: disconnect device [ 197.482295][ T30] audit: type=1326 audit(1766095137.054:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 199.316588][ T30] audit: type=1326 audit(1766095137.094:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 199.340503][ T30] audit: type=1326 audit(1766095137.104:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 199.363931][ T30] audit: type=1326 audit(1766095137.104:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 199.387443][ T30] audit: type=1326 audit(1766095137.104:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 199.915428][ T30] audit: type=1326 audit(1766095137.104:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 200.027261][ T30] audit: type=1326 audit(1766095137.104:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 200.121359][ T30] audit: type=1326 audit(1766095137.104:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 200.213048][ T30] audit: type=1326 audit(1766095137.104:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44ff8f749 code=0x7ffc0000 [ 200.461499][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.520765][ T8157] sch_fq: defrate 0 ignored. [ 201.122140][ T8176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.481601][ T8187] kAFS: unable to lookup cell '(' [ 201.613504][ T8187] kAFS: unable to lookup cell '(,c¾ûL' [ 202.333935][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 202.333950][ T30] audit: type=1400 audit(1766095141.904:616): avc: denied { ioctl } for pid=8202 comm="syz.2.582" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.396849][ T8132] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 202.634447][ T5949] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.796968][ T5949] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.805612][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.838596][ T8132] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 202.846277][ T8132] usb 4-1: can't read configurations, error -71 [ 202.854225][ T5949] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.893305][ T5949] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.915859][ T8212] lo speed is unknown, defaulting to 1000 [ 202.917091][ T5949] usb 3-1: Manufacturer: syz [ 202.943930][ T5949] usb 3-1: config 0 descriptor?? [ 203.031835][ T5949] rc_core: IR keymap rc-hauppauge not found [ 203.054000][ T5949] Registered IR keymap rc-empty [ 203.061313][ T5949] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 203.076901][ T5949] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 203.089858][ T30] audit: type=1400 audit(1766095142.664:617): avc: denied { read } for pid=5173 comm="acpid" name="event5" dev="devtmpfs" ino=3041 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.118652][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 203.134651][ T30] audit: type=1400 audit(1766095142.664:618): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3041 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.164532][ T30] audit: type=1400 audit(1766095142.664:619): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3041 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.275774][ T9] usb 2-1: config 0 has no interfaces? [ 203.281326][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 203.297539][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.315013][ T9] usb 2-1: config 0 descriptor?? [ 203.351980][ T8218] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 203.400072][ T8218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.469305][ T8218] bond2: (slave ip6gretap1): making interface the new active one [ 203.487726][ T8218] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 203.520675][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.557325][ T9] usb 2-1: USB disconnect, device number 33 [ 203.597561][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.974471][ T8132] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 203.984129][ T8231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.277071][ T8132] usb 4-1: config 0 has no interfaces? [ 204.825668][ T30] audit: type=1400 audit(1766095143.854:620): avc: denied { mounton } for pid=8240 comm="syz.1.592" path="/125/file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 204.850055][ T8238] lo speed is unknown, defaulting to 1000 [ 204.859560][ T8132] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 204.890281][ T8132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.017340][ T8132] usb 4-1: config 0 descriptor?? [ 205.025015][ T30] audit: type=1400 audit(1766095143.954:621): avc: denied { connect } for pid=8234 comm="syz.4.590" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.086868][ T30] audit: type=1400 audit(1766095143.954:622): avc: denied { name_connect } for pid=8234 comm="syz.4.590" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 205.172886][ T5951] usb 3-1: USB disconnect, device number 22 [ 205.176945][ T30] audit: type=1400 audit(1766095144.434:623): avc: denied { mount } for pid=8240 comm="syz.1.592" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.207504][ T30] audit: type=1400 audit(1766095144.784:624): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.315931][ T30] audit: type=1400 audit(1766095144.874:625): avc: denied { create } for pid=8221 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.596303][ T5951] usb 4-1: USB disconnect, device number 17 [ 205.688489][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.593'. [ 205.984473][ T5951] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 207.324805][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 207.331293][ T5951] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 207.356035][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 207.356047][ T30] audit: type=1400 audit(1766095146.934:634): avc: denied { read write } for pid=8280 comm="syz.3.602" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.362936][ T5951] usb 2-1: config 0 has no interface number 0 [ 207.394287][ T5951] usb 2-1: config 0 interface 12 has no altsetting 0 [ 207.407659][ T5951] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 207.434569][ T30] audit: type=1400 audit(1766095146.964:635): avc: denied { open } for pid=8280 comm="syz.3.602" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.468139][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.479832][ T5951] usb 2-1: Product: syz [ 207.484000][ T5951] usb 2-1: Manufacturer: syz [ 207.519625][ T5951] usb 2-1: SerialNumber: syz [ 207.520729][ T30] audit: type=1400 audit(1766095147.094:636): avc: denied { read write } for pid=8290 comm="syz.3.604" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.540423][ T5951] usb 2-1: config 0 descriptor?? [ 207.550991][ T5881] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 207.878616][ T5881] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 207.894407][ T5881] usb 3-1: config 0 has no interface number 0 [ 207.899398][ T30] audit: type=1400 audit(1766095147.094:637): avc: denied { open } for pid=8290 comm="syz.3.604" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.916109][ T5881] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 207.926973][ T30] audit: type=1400 audit(1766095147.104:638): avc: denied { ioctl } for pid=8290 comm="syz.3.604" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.960537][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.993156][ T5881] usb 3-1: Product: syz [ 207.997920][ T5881] usb 3-1: Manufacturer: syz [ 208.002643][ T5881] usb 3-1: SerialNumber: syz [ 208.059422][ T5881] usb 3-1: config 0 descriptor?? [ 208.180784][ T5881] usb 3-1: disable ehci-hcd to run US-144 [ 208.538434][ T8279] fuse: Bad value for 'fd' [ 208.579273][ T8298] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 208.592786][ T5881] usb 3-1: USB disconnect, device number 23 [ 208.849859][ T5951] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 208.859398][ T5951] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 208.939569][ T5951] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 208.950905][ T5951] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 208.981282][ T5951] usb 2-1: USB disconnect, device number 34 [ 209.300743][ T30] audit: type=1400 audit(1766095148.874:639): avc: denied { setopt } for pid=8312 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.345970][ T30] audit: type=1400 audit(1766095148.874:640): avc: denied { write } for pid=8312 comm="syz.3.609" name="udp6" dev="proc" ino=4026532977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 209.404790][ T30] audit: type=1400 audit(1766095148.984:641): avc: denied { getopt } for pid=8321 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.425873][ T8323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.612'. [ 209.459611][ T30] audit: type=1400 audit(1766095149.004:642): avc: denied { write } for pid=8321 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.492339][ T30] audit: type=1326 audit(1766095149.064:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8327 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97fd8f749 code=0x7ffc0000 [ 209.674751][ T8332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.575554][ T8343] wireguard0: entered promiscuous mode [ 210.592041][ T8343] wireguard0: entered allmulticast mode [ 211.174449][ T5821] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.404421][ T5821] usb 3-1: device descriptor read/64, error -71 [ 211.664437][ T5821] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 212.574639][ T5821] usb 3-1: device descriptor read/64, error -71 [ 212.591304][ T8378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.694590][ T5821] usb usb3-port1: attempt power cycle [ 212.755800][ T8383] loop2: detected capacity change from 0 to 7 [ 212.773497][ T6594] loop2: [POWERTEC] p1 p2 p3 [ 212.788833][ T6594] loop2: p2 start 524319 is beyond EOD, truncated [ 212.805889][ T6594] loop2: p3 start 1932423285 is beyond EOD, truncated [ 212.929636][ T8383] loop2: [POWERTEC] p1 p2 p3 [ 213.470005][ T8383] loop2: p2 start 524319 is beyond EOD, truncated [ 213.481833][ T8383] loop2: p3 start 1932423285 is beyond EOD, truncated [ 213.534446][ T5821] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.541108][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.558549][ T5821] usb 3-1: device descriptor read/8, error -71 [ 213.618555][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 213.618565][ T30] audit: type=1400 audit(1766095153.194:659): avc: denied { create } for pid=8388 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.687855][ T6594] udevd[6594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.693224][ T30] audit: type=1400 audit(1766095153.224:660): avc: denied { listen } for pid=8388 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.844509][ T30] audit: type=1400 audit(1766095153.414:661): avc: denied { mount } for pid=8393 comm="syz.4.633" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 213.874492][ T5821] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 213.924787][ T5821] usb 3-1: device descriptor read/8, error -71 [ 214.071115][ T5821] usb usb3-port1: unable to enumerate USB device [ 214.655270][ T30] audit: type=1400 audit(1766095154.234:662): avc: denied { create } for pid=8406 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.676498][ T8407] input: syz1 as /devices/virtual/input/input25 [ 214.693698][ T30] audit: type=1400 audit(1766095154.254:663): avc: denied { setopt } for pid=8406 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 215.648653][ T5821] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 215.700547][ T30] audit: type=1400 audit(1766095155.274:664): avc: denied { map } for pid=8419 comm="syz.1.640" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.838244][ T5821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.861300][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.880797][ T5821] usb 4-1: Product: syz [ 215.903477][ T5821] usb 4-1: Manufacturer: syz [ 216.082304][ T8423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.095638][ T5821] usb 4-1: SerialNumber: syz [ 216.117007][ T5821] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 216.214243][ T5949] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.344283][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 216.385981][ T8425] IPVS: Error connecting to the multicast addr [ 216.437807][ T8427] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:0 [ 216.656610][ T30] audit: type=1400 audit(1766095156.224:665): avc: denied { mount } for pid=8432 comm="syz.4.645" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.729548][ T30] audit: type=1400 audit(1766095156.234:666): avc: denied { write } for pid=8412 comm="syz.3.638" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 216.775299][ T9] usb 4-1: USB disconnect, device number 18 [ 216.895860][ T30] audit: type=1400 audit(1766095156.264:667): avc: denied { name_bind } for pid=8433 comm="syz.2.644" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.972576][ T30] audit: type=1400 audit(1766095156.544:668): avc: denied { create } for pid=8440 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.984531][ T5881] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 217.234480][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 217.245077][ T5881] usb 3-1: config 0 has no interfaces? [ 217.266299][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 217.286637][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.305617][ T5881] usb 3-1: Product: syz [ 217.314428][ T5949] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 217.315731][ T5881] usb 3-1: Manufacturer: syz [ 217.358310][ T5881] usb 3-1: SerialNumber: syz [ 217.385459][ T5881] usb 3-1: config 0 descriptor?? [ 217.394614][ T5949] ath9k_htc: Failed to initialize the device [ 217.417635][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 217.540819][ T8453] input: syz1 as /devices/virtual/input/input26 [ 217.671215][ T9] usb 3-1: USB disconnect, device number 28 [ 218.307463][ T8469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.392517][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.654'. [ 218.414472][ T5949] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 218.495984][ T8473] lo speed is unknown, defaulting to 1000 [ 218.584501][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 218.612274][ T5949] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 218.643686][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.692769][ T5949] usb 2-1: config 0 has no interface number 0 [ 218.712962][ T5949] usb 2-1: config 0 interface 52 has no altsetting 0 [ 218.719785][ T5949] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 218.755902][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.807812][ T5949] usb 2-1: config 0 descriptor?? [ 218.872277][ T8487] FAULT_INJECTION: forcing a failure. [ 218.872277][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 218.884933][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.0.659 Not tainted syzkaller #0 PREEMPT(full) [ 218.884947][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.884953][ T8487] Call Trace: [ 218.884956][ T8487] [ 218.884960][ T8487] dump_stack_lvl+0x16c/0x1f0 [ 218.884977][ T8487] should_fail_ex+0x512/0x640 [ 218.884993][ T8487] ? __kvmalloc_node_noprof+0x129/0xa40 [ 218.885008][ T8487] should_failslab+0xc2/0x120 [ 218.885022][ T8487] __kvmalloc_node_noprof+0x14a/0xa40 [ 218.885033][ T8487] ? __might_fault+0xe3/0x190 [ 218.885042][ T8487] ? __might_fault+0x13b/0x190 [ 218.885051][ T8487] ? xt_alloc_table_info+0x43/0xa0 [ 218.885069][ T8487] ? xt_alloc_table_info+0x43/0xa0 [ 218.885083][ T8487] xt_alloc_table_info+0x43/0xa0 [ 218.885098][ T8487] do_ipt_set_ctl+0x59b/0xc40 [ 218.885114][ T8487] ? find_held_lock+0x2b/0x80 [ 218.885130][ T8487] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 218.885146][ T8487] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 218.885164][ T8487] ? sockopt_release_sock+0x52/0x60 [ 218.885175][ T8487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.885196][ T8487] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 218.885212][ T8487] nf_setsockopt+0x8d/0xf0 [ 218.885227][ T8487] ip_setsockopt+0xcb/0xf0 [ 218.885249][ T8487] raw_setsockopt+0xb7/0x2a0 [ 218.885259][ T8487] ? __pfx_raw_setsockopt+0x10/0x10 [ 218.885269][ T8487] ? selinux_socket_setsockopt+0x6a/0x80 [ 218.885281][ T8487] ? sock_common_setsockopt+0x2e/0xf0 [ 218.885293][ T8487] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 218.885307][ T8487] do_sock_setsockopt+0xf3/0x1d0 [ 218.885321][ T8487] __sys_setsockopt+0x1a0/0x230 [ 218.885333][ T8487] __x64_sys_setsockopt+0xbd/0x160 [ 218.885342][ T8487] ? do_syscall_64+0x91/0xf80 [ 218.885354][ T8487] ? lockdep_hardirqs_on+0x7c/0x110 [ 218.885367][ T8487] do_syscall_64+0xcd/0xf80 [ 218.885381][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.885391][ T8487] RIP: 0033:0x7f44bbf8f749 [ 218.885400][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.885410][ T8487] RSP: 002b:00007f44bcebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.885419][ T8487] RAX: ffffffffffffffda RBX: 00007f44bc1e5fa0 RCX: 00007f44bbf8f749 [ 218.885426][ T8487] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 218.885432][ T8487] RBP: 00007f44bcebc090 R08: 0000000000000398 R09: 0000000000000000 [ 218.885437][ T8487] R10: 0000200000001900 R11: 0000000000000246 R12: 0000000000000001 [ 218.885443][ T8487] R13: 00007f44bc1e6038 R14: 00007f44bc1e5fa0 R15: 00007ffefc6f8398 [ 218.885456][ T8487] [ 219.336938][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 219.336952][ T30] audit: type=1400 audit(1766095158.914:670): avc: denied { read } for pid=8488 comm="syz.0.660" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.365630][ T30] audit: type=1400 audit(1766095158.914:671): avc: denied { open } for pid=8488 comm="syz.0.660" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.399397][ T30] audit: type=1400 audit(1766095158.974:672): avc: denied { create } for pid=8472 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 219.421590][ T30] audit: type=1400 audit(1766095158.974:673): avc: denied { write } for pid=8472 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 219.449017][ T30] audit: type=1400 audit(1766095158.974:674): avc: denied { ioctl } for pid=8491 comm="syz.4.661" path="socket:[18940]" dev="sockfs" ino=18940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.473657][ T30] audit: type=1400 audit(1766095158.974:675): avc: denied { write } for pid=8491 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.476446][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.537457][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.751278][ T8506] 8021q: VLANs not supported on ip6tnl0 [ 219.808815][ T30] audit: type=1400 audit(1766095159.384:676): avc: denied { connect } for pid=8507 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.843244][ T9] usb 2-1: USB disconnect, device number 35 [ 219.863528][ T30] audit: type=1400 audit(1766095159.434:677): avc: denied { setopt } for pid=8507 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.965229][ T5931] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 220.154412][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 220.160887][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.229023][ T8511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.244430][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.267644][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.304441][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.355896][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.384616][ T5931] usb 3-1: config 0 descriptor?? [ 220.395970][ T8503] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 220.411756][ T5931] hub 3-1:0.0: USB hub found [ 220.629400][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.664926][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.764598][ T5931] hub 3-1:0.0: 1 port detected [ 221.166704][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.189756][ T30] audit: type=1400 audit(1766095160.764:678): avc: denied { map } for pid=8526 comm="syz.4.670" path="socket:[19998]" dev="sockfs" ino=19998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 221.242471][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.460054][ T8529] FAULT_INJECTION: forcing a failure. [ 221.460054][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.474394][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(full) [ 221.474415][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.474424][ T8529] Call Trace: [ 221.474430][ T8529] [ 221.474436][ T8529] dump_stack_lvl+0x16c/0x1f0 [ 221.474461][ T8529] should_fail_ex+0x512/0x640 [ 221.474488][ T8529] _copy_from_user+0x2e/0xd0 [ 221.474513][ T8529] do_ipt_set_ctl+0xa69/0xc40 [ 221.474537][ T8529] ? find_held_lock+0x2b/0x80 [ 221.474561][ T8529] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 221.474585][ T8529] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 221.474612][ T8529] ? sockopt_release_sock+0x52/0x60 [ 221.474629][ T8529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.474664][ T8529] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 221.474688][ T8529] nf_setsockopt+0x8d/0xf0 [ 221.474711][ T8529] ip_setsockopt+0xcb/0xf0 [ 221.474739][ T8529] raw_setsockopt+0xb7/0x2a0 [ 221.474756][ T8529] ? __pfx_raw_setsockopt+0x10/0x10 [ 221.474773][ T8529] ? selinux_socket_setsockopt+0x6a/0x80 [ 221.474791][ T8529] ? sock_common_setsockopt+0x2e/0xf0 [ 221.474810][ T8529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 221.474831][ T8529] do_sock_setsockopt+0xf3/0x1d0 [ 221.474854][ T8529] __sys_setsockopt+0x1a0/0x230 [ 221.474873][ T8529] __x64_sys_setsockopt+0xbd/0x160 [ 221.474887][ T8529] ? do_syscall_64+0x91/0xf80 [ 221.474906][ T8529] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.474925][ T8529] do_syscall_64+0xcd/0xf80 [ 221.474952][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.474969][ T8529] RIP: 0033:0x7fe97fd8f749 [ 221.474982][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.474998][ T8529] RSP: 002b:00007fe980cab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.475013][ T8529] RAX: ffffffffffffffda RBX: 00007fe97ffe5fa0 RCX: 00007fe97fd8f749 [ 221.475024][ T8529] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.475033][ T8529] RBP: 00007fe980cab090 R08: 0000000000000398 R09: 0000000000000000 [ 221.475042][ T8529] R10: 0000200000001900 R11: 0000000000000246 R12: 0000000000000001 [ 221.475052][ T8529] R13: 00007fe97ffe6038 R14: 00007fe97ffe5fa0 R15: 00007ffe72d62c48 [ 221.475075][ T8529] [ 221.813911][ T8531] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 221.827395][ T8531] input: syz1 as /devices/virtual/input/input27 [ 222.276510][ T9] usb 3-1: USB disconnect, device number 29 [ 222.384132][ T30] audit: type=1400 audit(1766095161.954:679): avc: denied { bind } for pid=8535 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.465011][ T8536] netlink: 172 bytes leftover after parsing attributes in process `syz.4.675'. [ 222.554970][ T8542] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.673'. [ 222.647609][ T5931] usb 3-1-port1: config error [ 223.727192][ T6877] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.851792][ T8571] FAULT_INJECTION: forcing a failure. [ 223.851792][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 223.864489][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.1.683 Not tainted syzkaller #0 PREEMPT(full) [ 223.864504][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.864510][ T8571] Call Trace: [ 223.864514][ T8571] [ 223.864518][ T8571] dump_stack_lvl+0x16c/0x1f0 [ 223.864536][ T8571] should_fail_ex+0x512/0x640 [ 223.864551][ T8571] ? __kvmalloc_node_noprof+0x129/0xa40 [ 223.864566][ T8571] should_failslab+0xc2/0x120 [ 223.864581][ T8571] __kvmalloc_node_noprof+0x14a/0xa40 [ 223.864595][ T8571] ? xt_alloc_entry_offsets+0x3f/0x60 [ 223.864610][ T8571] ? __lock_acquire+0x436/0x2890 [ 223.864625][ T8571] ? xt_alloc_entry_offsets+0x3f/0x60 [ 223.864639][ T8571] xt_alloc_entry_offsets+0x3f/0x60 [ 223.864653][ T8571] translate_table+0x22d/0x1720 [ 223.864672][ T8571] ? find_held_lock+0x2b/0x80 [ 223.864686][ T8571] ? __might_fault+0xe3/0x190 [ 223.864697][ T8571] ? __pfx_translate_table+0x10/0x10 [ 223.864717][ T8571] do_ipt_set_ctl+0x603/0xc40 [ 223.864733][ T8571] ? find_held_lock+0x2b/0x80 [ 223.864748][ T8571] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 223.864765][ T8571] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 223.864782][ T8571] ? sockopt_release_sock+0x52/0x60 [ 223.864793][ T8571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.864814][ T8571] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 223.864830][ T8571] nf_setsockopt+0x8d/0xf0 [ 223.864845][ T8571] ip_setsockopt+0xcb/0xf0 [ 223.864862][ T8571] raw_setsockopt+0xb7/0x2a0 [ 223.864873][ T8571] ? __pfx_raw_setsockopt+0x10/0x10 [ 223.864883][ T8571] ? selinux_socket_setsockopt+0x6a/0x80 [ 223.864895][ T8571] ? sock_common_setsockopt+0x2e/0xf0 [ 223.864907][ T8571] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 223.864920][ T8571] do_sock_setsockopt+0xf3/0x1d0 [ 223.864934][ T8571] __sys_setsockopt+0x1a0/0x230 [ 223.864946][ T8571] __x64_sys_setsockopt+0xbd/0x160 [ 223.864959][ T8571] ? do_syscall_64+0x91/0xf80 [ 223.864972][ T8571] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.864984][ T8571] do_syscall_64+0xcd/0xf80 [ 223.864998][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.865008][ T8571] RIP: 0033:0x7fe97fd8f749 [ 223.865017][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.865026][ T8571] RSP: 002b:00007fe980cab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.865036][ T8571] RAX: ffffffffffffffda RBX: 00007fe97ffe5fa0 RCX: 00007fe97fd8f749 [ 223.865043][ T8571] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 223.865048][ T8571] RBP: 00007fe980cab090 R08: 0000000000000398 R09: 0000000000000000 [ 223.865054][ T8571] R10: 0000200000001900 R11: 0000000000000246 R12: 0000000000000001 [ 223.865060][ T8571] R13: 00007fe97ffe6038 R14: 00007fe97ffe5fa0 R15: 00007ffe72d62c48 [ 223.865073][ T8571] [ 224.152258][ T6877] usb 4-1: device descriptor read/64, error -71 [ 224.721273][ T8574] ------------[ cut here ]------------ [ 224.726784][ T8574] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#1: syz.1.685/8574 [ 224.735947][ T8574] Modules linked in: [ 224.740020][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) [ 224.749237][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.759335][ T8574] RIP: 0010:path_noexec+0x1ca/0x230 [ 224.764574][ T8574] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 224.784973][ T8574] RSP: 0018:ffffc9000dc77c60 EFLAGS: 00010293 [ 224.791034][ T8574] RAX: 0000000000000000 RBX: ffff8881416c41e0 RCX: ffffffff823dc730 [ 224.799123][ T8574] RDX: ffff888050a5a4c0 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 224.807599][ T8574] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 224.815870][ T8574] R10: 0000000000000000 R11: ffff888050a5aff0 R12: 0000200000000000 [ 224.823848][ T8574] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff88807e3b9dd0 [ 224.833032][ T8574] FS: 00007fe980cab6c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 224.843476][ T8574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.850113][ T8574] CR2: ffffffffffffffff CR3: 000000007dded000 CR4: 00000000003526f0 [ 224.858132][ T8574] Call Trace: [ 224.861401][ T8574] [ 224.864511][ T8574] do_mmap+0xd23/0x1210 [ 224.868669][ T8574] ? __pfx_do_mmap+0x10/0x10 [ 224.873250][ T8574] ? __pfx_down_write_killable+0x10/0x10 [ 224.878912][ T8574] vm_mmap_pgoff+0x29e/0x470 [ 224.883500][ T8574] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 224.888947][ T8574] ? __fget_files+0x20e/0x3c0 [ 224.893626][ T8574] ksys_mmap_pgoff+0x32c/0x5c0 [ 224.896267][ T6877] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 224.898689][ T8574] __x64_sys_mmap+0x125/0x190 [ 224.910723][ T8574] do_syscall_64+0xcd/0xf80 [ 224.913907][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 224.915277][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.930060][ T8574] RIP: 0033:0x7fe97fd8f749 [ 224.934850][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.954816][ T8574] RSP: 002b:00007fe980cab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.963711][ T8574] RAX: ffffffffffffffda RBX: 00007fe97ffe5fa0 RCX: 00007fe97fd8f749 [ 224.971721][ T8574] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 224.979789][ T8574] RBP: 00007fe97fe13f91 R08: 0000000000000004 R09: 0000000000001000 [ 224.987789][ T8574] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 224.995794][ T8574] R13: 00007fe97ffe6038 R14: 00007fe97ffe5fa0 R15: 00007ffe72d62c48 [ 225.003759][ T8574] [ 225.006779][ T8574] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.014045][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) [ 225.023227][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.033258][ T8574] Call Trace: [ 225.036521][ T8574] [ 225.039439][ T8574] dump_stack_lvl+0x3d/0x1f0 [ 225.044024][ T8574] vpanic+0x640/0x6f0 [ 225.047989][ T8574] ? path_noexec+0x1ca/0x230 [ 225.052553][ T8574] panic+0xca/0xd0 [ 225.056273][ T8574] ? __pfx_panic+0x10/0x10 [ 225.060664][ T8574] ? check_panic_on_warn+0x1f/0xb0 [ 225.065774][ T8574] check_panic_on_warn+0xab/0xb0 [ 225.070704][ T8574] __warn+0x108/0x3c0 [ 225.074672][ T8574] __report_bug+0x2a0/0x520 [ 225.079154][ T8574] ? path_noexec+0x1ca/0x230 [ 225.083744][ T8574] ? __pfx___report_bug+0x10/0x10 [ 225.088765][ T8574] ? arch_get_unmapped_area_topdown+0x60b/0xa00 [ 225.094992][ T8574] ? path_noexec+0x1ca/0x230 [ 225.099560][ T8574] report_bug+0xb2/0x220 [ 225.103780][ T8574] ? path_noexec+0x1ca/0x230 [ 225.108354][ T8574] handle_bug+0x127/0x260 [ 225.112667][ T8574] exc_invalid_op+0x17/0x50 [ 225.117152][ T8574] asm_exc_invalid_op+0x1a/0x20 [ 225.121982][ T8574] RIP: 0010:path_noexec+0x1ca/0x230 [ 225.127159][ T8574] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 225.146746][ T8574] RSP: 0018:ffffc9000dc77c60 EFLAGS: 00010293 [ 225.152792][ T8574] RAX: 0000000000000000 RBX: ffff8881416c41e0 RCX: ffffffff823dc730 [ 225.160742][ T8574] RDX: ffff888050a5a4c0 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 225.168689][ T8574] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 225.176637][ T8574] R10: 0000000000000000 R11: ffff888050a5aff0 R12: 0000200000000000 [ 225.184586][ T8574] R13: 0000000000000001 R14: 000000007c07f9f3 R15: ffff88807e3b9dd0 [ 225.192555][ T8574] ? path_noexec+0x110/0x230 [ 225.197126][ T8574] ? path_noexec+0x1c9/0x230 [ 225.201699][ T8574] do_mmap+0xd23/0x1210 [ 225.205843][ T8574] ? __pfx_do_mmap+0x10/0x10 [ 225.210418][ T8574] ? __pfx_down_write_killable+0x10/0x10 [ 225.216062][ T8574] vm_mmap_pgoff+0x29e/0x470 [ 225.220640][ T8574] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 225.225731][ T8574] ? __fget_files+0x20e/0x3c0 [ 225.230392][ T8574] ksys_mmap_pgoff+0x32c/0x5c0 [ 225.235139][ T8574] __x64_sys_mmap+0x125/0x190 [ 225.239795][ T8574] do_syscall_64+0xcd/0xf80 [ 225.244282][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.250155][ T8574] RIP: 0033:0x7fe97fd8f749 [ 225.254550][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.274133][ T8574] RSP: 002b:00007fe980cab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 225.282522][ T8574] RAX: ffffffffffffffda RBX: 00007fe97ffe5fa0 RCX: 00007fe97fd8f749 [ 225.290469][ T8574] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 225.298415][ T8574] RBP: 00007fe97fe13f91 R08: 0000000000000004 R09: 0000000000001000 [ 225.306362][ T8574] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 225.314328][ T8574] R13: 00007fe97ffe6038 R14: 00007fe97ffe5fa0 R15: 00007ffe72d62c48 [ 225.322302][ T8574] [ 225.325501][ T8574] Kernel Offset: disabled [ 225.329811][ T8574] Rebooting in 86400 seconds..