last executing test programs: 1m46.20642501s ago: executing program 3 (id=109): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'macvlan1\x00'}}, 0x1e) (async) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) (async) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r6, 0x40285107) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x79a7, 0x2, 0x6}}, @wr_crn={0x67, 0x20, {0x8, 0x5}}, @cpuid={0x64, 0x18, {0x0, 0x10}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0x1ff, 0x3, 0xd}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0xdb1c}, @code={0xa, 0x56, {"0f1861f966ba6100b000ee430f18c066b890008ec0c74424001e000000c744240200b60000ff1c24440f01cf420fc75e07430fc7be000000000fc2880080000074643ef3ab"}}, @wrmsr={0x65, 0x20, {0x87c, 0x2}}, @out_dx={0x6a, 0x28, {0x6421, 0x4, 0x2}}, @out_dx={0x6a, 0x28, {0x9e53, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xcd49, 0x0, 0x10001}}], 0x216}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$AUDIT_SET(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x10000}) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x25000, 0xa000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183f673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m45.909598302s ago: executing program 3 (id=111): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 1m45.588863723s ago: executing program 3 (id=112): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r6, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000180)={r6}, 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m43.6912739s ago: executing program 3 (id=121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@uname={'uname', 0x3d, '^*\\'}}, {@version_u}, {@noextend}, {@nodevmap}, {@posixacl}]}}) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="b7db0000005f72e7103400000000e905000077d9000180"], 0x18}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0xa) fstat(r10, &(0x7f00000002c0)) 1m42.342428705s ago: executing program 3 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000180)='./file1\x00', 0x336) renameat2(r3, &(0x7f0000000000)='./file1\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x1) unlink(&(0x7f00000002c0)='./file0\x00') 1m40.762279338s ago: executing program 3 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x20000) 1m25.562243868s ago: executing program 32 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x20000) 14.006134869s ago: executing program 2 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x18, 0x200000000000027b, &(0x7f00000021c0)=ANY=[@ANYBLOB="1800000010000000000000000000000095", @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0x696, &(0x7f0000000400)={0x0, 0x7db1, 0x10000, 0xc007ffe, 0x3b5}, &(0x7f0000000380), &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000022c0)=0x7) rt_sigqueueinfo(r3, 0x1c, &(0x7f0000002140)={0x3c, 0x5487, 0xfffffff9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) 11.585597003s ago: executing program 2 (id=459): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xf, 0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "2a048f2f1894763660ca6206b311ed58e06141bc6125c8e40072b2df4b1362633095a68afbf49ccf4f349147326c246de28336778e221c92abd45f83d73ae08a246c8d3e66bb5f2aea7ae1b2b4f0c675442ea5261b638bf377c88d10adb1ab1771c0fec44bd8a3a29ae96daa0e671a3a2a0b58ed994085fbf0f610ef01946e3ac03feec31e7808596bdad1978d4ba161de442a2f6a39c18ca6a5fd826a7ded216ba46912be197f49ba10c7889bf7f94c687b897744a5a2b4cd1f006b4ec5cceaf589af8b92ac05853ef9610a0d67569bc4312566416976c1ffbc6dc697abcb74c8e7b84078a75ce98e8b92c785d9d23ec432943416ad881c3876f328ef307c50"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4566, 0x4, 0x2, 0xd, 0xc, 0x19, 0x6}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(0xffffffffffffffff) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRESOCT=r2, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10000005002f000000000005003800"/30], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 9.703393765s ago: executing program 4 (id=466): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0xd21, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) mprotect(&(0x7f0000ad4000/0x3000)=nil, 0x3000, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x7, 0x20080) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x2, 0x2}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000000000b54fab5106947850203179000000000000000000010000c4b6a7cd00000000001010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000d23c00000000000000000000576f27b306f177fcd894e598f6abe4cfebb64453950d69172148cd2c35d97504608d0a24fa01095d3edaba68d6ea55caa0e47c9bed4d529568d300b41c4c66051ae85ad8771439e16edd7ef23420f27c6ae792db54f8087b9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x4040600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) 8.693416712s ago: executing program 4 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000) close(r2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) 8.296132691s ago: executing program 4 (id=469): prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x7, 0x1, {0x7ff, 0x8, 0x406, 0x12, 0x11, 0x15, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x64}, {@in, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, {0x0, 0x0, 0x0, 0x7fffffff, 0x200000}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f00000001c0)=0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000294d28508d219f1b47c2e010203010915120001690280c609044beacfe4cb5c1b"], 0x0) 7.774853987s ago: executing program 1 (id=472): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x44034991684a6d8, 0x4, [{{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @empty}}]}, 0x290) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x24, 0x29, 0x32, {0x73, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0xf4, 0xfffe}}]}}}], 0x24}, 0x40) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x141}, 0x0, &(0x7f0000000380)) 7.678290009s ago: executing program 2 (id=473): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) r7 = socket$kcm(0x25, 0x1, 0x0) socket(0xa, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) 6.6576891s ago: executing program 1 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000300), &(0x7f0000000140)) r3 = epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, 0x0, 0x0, 0x40800) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 6.178722654s ago: executing program 2 (id=478): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x810, r2, 0x9e8fa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x93, @private0={0xfc, 0x0, '\x00', 0xff}, 0xfff}]}, &(0x7f0000000440)=0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.700936621s ago: executing program 1 (id=481): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 5.661307795s ago: executing program 1 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x65) r4 = syz_usb_connect(0x5, 0xe38, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0}) 4.992903827s ago: executing program 4 (id=484): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) syz_usb_connect(0x2, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xa3, 0x8a, 0x53, 0x8, 0x2357, 0x115, 0x3f8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x9, 0x80, 0x150, 0x40, [{{0x9, 0x4, 0x41, 0x4, 0x1, 0x58, 0xd2, 0xbe, 0x5, [], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0xfb, 0x10, [@generic={0x8, 0xb, "8c459687affa"}]}}]}}, {{0x9, 0x4, 0xec, 0xbd, 0x0, 0x81, 0x10, 0x3e, 0x4}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 4.146668277s ago: executing program 1 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000005391026f74ae2bc1a6ee1ed6bf92721dbc764db84e042b09dd86ea9c2e635702a8b11027fc34482300f8dafe59b5359d27bc25ffc77bdd31425b647cf690b40d590278394007697494b25b0ea6db640d5bf80501331512280e2c50085c3c5cc607fcd55c381b05b7fee9a1845bf37345446675bc11668c460866896637d7ffff78b05ece816bbcc1a931209b2786fcb188616cac65605d969f0dcd5ed14c4fc1044017d5109b8b947ea713e9c5441d12f78ea885262c718f1f20a51486c1d81052fe0767a7546e4625d9"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x6a441, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = gettid() capset(&(0x7f0000000b40)={0x19980330, r2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000080), 0x0, 0x80) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 4.014802352s ago: executing program 0 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x57, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) close(0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2$watch_queue(&(0x7f00000003c0), 0x80) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) 3.85753727s ago: executing program 5 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.986032655s ago: executing program 4 (id=490): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000800)=[{0x24, 0x5201, 0x2000, &(0x7f0000000240)="80"}], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r4, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0xc, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x20, 0x30, 0x41, {0x41, 0x22, "5aa7220434682a6aebbf4702a2a40548fcc6413402926a0eb180b717bd2772db5c82728b79e82e621dfc10c9b9b739c216fd59590e19ecc1aae068fce5f312"}}, &(0x7f0000000380)={0x0, 0x3, 0x83, @string={0x83, 0x3, "c5cf5f8d9b5ef9b03d17d38c4dd1e8a2f059b0acbb5aab657db4e4911708aed04676934a46b349ca49e639ba5a510eb6ff14ba84beb9449db5d609ee2210371907a59667fd1f2628240b8e224d7f9c2b03b80af1734090322f93e5e5bdca3597b1fc257d0002117d9bd603dfd3bc748f5db06022b30495ab1a9b0f0831ed5c75de"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x74ecd292157895cd, 0xf9, "7c7b77c051a28bd7725f0ce77211d5c220cb188f5ad67050d4e222a0c27a407cbe39db12a9c266a4ca93ffb4d7ff774311f79375b0e3c70c152644a81a26a36343a8e1c43db6e262399702cc3ade83d90f5732ca9090bfab33bad4f2a66bd62b7262ba7dbdce4a234f75e15033c2aa77afba0c587a46740f8c3eee15ae51f64d59205de857dcd01e372d5b86c2687e936b1902c75d883171fec912dda269d150ee6467f5312c1a3025859dda4d45dcd0c1561ca932244123062e9f24740a93b748cf40c767a5317d94e86056bd4babdfd8ada4605b2a1fe54f4f4dd8df7aedb4d804b4688e2d8bab32dc768b3c631634c5d2e3c40d069262cd"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1d}, &(0x7f00000005c0)={0xc0, 0x5, 0x6, "71abea2acaca"}, &(0x7f0000000600)={0x40, 0x5, 0x5, "c966095153"}}) 2.933314221s ago: executing program 2 (id=491): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000380)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.797200953s ago: executing program 5 (id=492): socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1510c2, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r4, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x10, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x17, 0x11, &(0x7f00000005c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x186, 0x0, 0x0, 0x0, 0xa0c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x93}, @generic={0x0, 0x8, 0x0, 0x4}, @ldst={0x2, 0x2, 0x4, 0x4, 0xa, 0x80, 0x10}, @jmp={0x5, 0x1, 0x6, 0x0, 0x1, 0x50, 0x4}, @generic={0xf, 0x9, 0x4, 0x2, 0x2}], &(0x7f0000001e80)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x17, r2, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x0, 0xd, 0x6, 0x7ff}, 0x10, 0x0, r3, 0x0, &(0x7f0000002500)=[r2, r2, r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x40000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r9, 0x25, 0x4, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) io_setup(0x8, &(0x7f0000004200)) 2.401559316s ago: executing program 1 (id=493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x3, @mcast1, 0x1, 0x1, 0x5, 0x2}}}}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private2, 0x882}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x118) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000008000"/23], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0xfc2a5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0xffffff6f) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.370635526s ago: executing program 0 (id=494): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() (async) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000001140)='map_files\x00') r3 = fanotify_init(0x40, 0x40000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r3, 0x1, 0x40001039, r2, 0x0) (async) fanotify_mark(r3, 0x1, 0x40001039, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000300)=""/33, 0x21) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001b00000000000000002000000000000000000058"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.526295158s ago: executing program 5 (id=495): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x34) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r3, 0x8800000) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000001c0)=0x5, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) dup(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a8"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) fsmount(r7, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x11b040, 0x0) 1.111468161s ago: executing program 5 (id=496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r1, 0x325, 0x2407, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="36d54fdc58de18f9cfd22462e86df75d00000000", @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdf250e0000000800010003000000080001000000000008000e0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x409d1}, 0x8008800) 1.030016355s ago: executing program 0 (id=497): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) r0 = syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb5, 0xe6, 0x74, 0x20, 0x5ac, 0x292, 0x8873, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0x77, 0x0, 0x1, 0x3, 0x9a, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}]}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x24, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x6a, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x10, 0x4, 0x1, 0x7, 0x0, 0x68, 0x7, 0xfc, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x29}, {[@cipso={0x86, 0x23, 0x3, [{0x2, 0xe, "2e4f35d86e814ba1ed3a23ea"}, {0x6, 0xa, "ec6213d7fb5e8cc1"}, {0x6, 0x5, "e690d0"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = memfd_create(&(0x7f0000000840)='/dev/lo\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec%\x14\xf4\x14\xa3\x88i*rR\x17\x1a\vz\x950#(Wy\xc4xnu\xa3c\x9ez7\x88\x15\xdbz\xd1\\\xb5&\xd1\xca\xcb\xc5C\xa6,\xc7~\xa3\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\x03\x00\x00\x00W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\x1b\xb1\xe6*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x00\x00\x00\x00\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00T\xf2\xa8e\t\x986X\x19I\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x0e\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\t\x00\x00\x00\x00\x00\x00\x00{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\xfep\x00\x00\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I\f\x00\t\xa9\xf0\x9d\xb7,l\x15\x16D\xee4\xc5\x81>\x99\xbf\x96\xf44c\xb1\x1e\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\n\xad\xb1\xe5\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa5\xb6\xadT\xd4\t0\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000001740)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050080000850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f00000004c0)=""/202, 0xca}, {0x0}, {0x0}, {&(0x7f0000001600)=""/45, 0x2d}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0xd1) 662.229899ms ago: executing program 5 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) futex_waitv(&(0x7f0000001480)=[{0x2, &(0x7f00000003c0), 0x82}, {0xffffffffffff2307, &(0x7f0000000400)=0x8000, 0x2}, {0x3, &(0x7f0000000440)=0x9, 0x82}, {0x8, &(0x7f0000000480)=0x7, 0x2}, {0xfff, &(0x7f00000004c0)=0x6, 0x82}, {0x8000000000000000, &(0x7f0000000500)=0x100000001, 0x2}, {0x1, &(0x7f0000000540)=0x9, 0x2}, {0x400, &(0x7f0000000580)=0x789, 0x82}, {0x8, &(0x7f00000005c0)=0xfff, 0x82}, {0xb28, &(0x7f0000000600)=0x1, 0x82}, {0x7, &(0x7f0000000640)=0x10, 0x82}, {0xa783, &(0x7f0000000680)=0x9, 0x82}, {0xfff, &(0x7f0000000700)=0x5, 0x2}, {0x10000000000, &(0x7f0000000740)=0x5, 0x82}, {0x50a, &(0x7f0000000780)=0x8d1, 0x82}, {0x6, &(0x7f00000007c0)=0x6, 0x2}, {0x7, &(0x7f0000000800)=0xa2d, 0x82}, {0x37, &(0x7f0000000840)=0x10001, 0x82}, {0x9, &(0x7f0000000880)=0x1, 0x2}, {0x441, &(0x7f00000008c0)=0x100, 0x2}, {0x1ff, &(0x7f0000000900)=0x3, 0x82}, {0x3, &(0x7f0000000940)=0x9, 0x82}, {0x1, &(0x7f0000000980)=0x4, 0x82}, {0x0, &(0x7f00000009c0)=0xc7, 0x82}, {0x2, &(0x7f0000000a00)=0x2}, {0xe, &(0x7f0000000a40)=0x200, 0x2}, {0x9, &(0x7f0000000a80)=0x67, 0x2}, {0x1, &(0x7f0000000ac0)=0x7, 0x82}, {0x0, &(0x7f0000000b00)=0x374, 0x2}, {0x594, &(0x7f0000000b40)=0x1, 0x82}, {0x3, &(0x7f0000000b80)=0x1, 0x2}, {0x3, &(0x7f0000000bc0)=0x1, 0x82}, {0x5, &(0x7f0000000c00)=0x2, 0x2}, {0x2, &(0x7f0000000c40)=0x8, 0x2}, {0x6, &(0x7f0000000c80)=0x2, 0x82}, {0x52e, &(0x7f0000000cc0)=0x7a31, 0x41}, {0x4, &(0x7f0000000d00)=0xe20, 0x82}, {0x9, &(0x7f0000000d40)=0x24, 0x2}, {0xffffffffffffffff, &(0x7f0000000d80)=0x88eb, 0x2}, {0x4669, &(0x7f0000000dc0)=0x1, 0x2}, {0x6, &(0x7f0000000e00)=0x5f, 0x2}, {0x8, &(0x7f0000000e40)=0x3, 0x2}, {0x3d, &(0x7f0000000e80), 0x82}, {0x8, &(0x7f0000000ec0)=0x7, 0x82}, {0xfffffffffffffff8, &(0x7f0000000f40)=0x7, 0x2}, {0x0, &(0x7f0000000f80)=0x4, 0x2}, {0x0, &(0x7f0000000fc0)=0x5, 0x82}, {0x1000, &(0x7f0000001000)=0x7, 0x82}, {0x7, &(0x7f0000001040)=0x4, 0x2}, {0x8, &(0x7f0000001100)=0x4, 0x2}, {0x4, &(0x7f0000001140)=0x8a8, 0x2}, {0x1000, &(0x7f0000001180), 0x2}, {0x75, &(0x7f00000011c0)=0x8000000000000000, 0x2}, {0xcd, &(0x7f0000001200)=0x6, 0x82}, {0x1, &(0x7f0000001240)=0x5a7, 0x2}, {0x3, &(0x7f0000001280)=0x8, 0x2}, {0x10001, &(0x7f00000012c0)=0xb9, 0x82}, {0x2, &(0x7f0000001300)=0x200000000000000, 0x82}, {0x3, &(0x7f0000001340), 0x82}, {0x5e7, &(0x7f0000001380)=0xb988, 0x2}, {0x7, &(0x7f00000013c0)=0xc, 0x2}, {0x8000000000000001, &(0x7f0000001400)=0x9, 0x2}, {0x0, &(0x7f0000001440)=0x7, 0x2}], 0x3f, 0x0, &(0x7f0000001a80)={0x77359400}, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) close(r2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x2, @empty}, {0x1, @broadcast}, 0x20, {0x2, 0x4e20, @broadcast}, 'syzkaller1\x00'}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000f9ffffff00000000", @ANYRES32=0x0, @ANYBLOB="832000000004000030001280080001006774700024000280080004000100000008000300610b0001"], 0x50}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000410000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) ioctl$KIOCSOUND(r6, 0x4b2f, 0x7) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x8, 0x10000, 0x20, @remote, @loopback, 0x80, 0x8000, 0x3, 0x621}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="a3042dbd7000ffdbdf251d00000008001e000b00000008000100507b76c41b0b21c3ee5907bb44cdad627163851b0d93f5796f9eac0f26ea6d6297bef92b7521fca8f8036aa02bb9902c2eb13b9fcab0ad2bfd7af31de8b5d9ae7ce622ab1502254508009aa0ba275ae7938b077df58f689383a33a543c0a400b7462a2a4715b003719c07dee8b2655c7670aa577", @ANYRES32=0x0, @ANYBLOB="08001d0002000000"], 0x2c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000420000082fbd7000ffdbdf2500000001"], 0x14}}, 0x0) 573.4522ms ago: executing program 2 (id=500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) semget$private(0x0, 0x4, 0x210) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmctl$SHM_LOCK(r4, 0xb) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="4015060000009438"], 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r2, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6cc577d5030000000000000014000000", @ANYRES16=r2, @ANYBLOB="020025bd7000fcd9df250700000008000400ffffffff14000600fc000000000000000000000000000001140006002001000000000000000000000000000114000500fe8000000000000000000000000000bb110001003830322e31352e34204d414300000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r5, 0x325, 0x2407, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 374.182962ms ago: executing program 0 (id=501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20000000000000df, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='fsi_master_acf_cmd_abs_addr\x00', r2, 0x0, 0x4000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) mknod$loop(0x0, 0x0, 0x1) 276.007611ms ago: executing program 0 (id=502): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) setresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a00)={0x0, 0x9, 0x0, [0x0, 0x4, 0x100000000, 0x9, 0x81], [0xfff, 0xffffffffffffffff, 0x8, 0x4, 0x4, 0x28, 0x0, 0x0, 0x6, 0x12aa00000000000, 0xd, 0x8, 0xffffffffffffd8fe, 0x81, 0x6, 0x1ff, 0x6f3, 0x7, 0x9, 0xb, 0x503f879a, 0x40, 0x400, 0x7, 0x894b, 0x8, 0xbd, 0x1, 0x0, 0x8, 0x9, 0x9, 0x4f, 0x1, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0xf, 0x7, 0x8, 0xe, 0x101, 0x7, 0x80, 0x101, 0xffffffffffffffff, 0x0, 0x40000000000004, 0x8000, 0x9, 0x3, 0x65, 0x5d2, 0x9, 0x6, 0x3, 0x6, 0x1, 0x5, 0x38e, 0x993, 0x800, 0x48, 0x1ff, 0x21, 0xfffffffffffff801, 0x46b7, 0x9, 0x4, 0x1, 0x3, 0x10000, 0x10000006, 0x8, 0x5, 0xbc, 0x45, 0xff, 0xfffffffffffffffb, 0x8, 0x1000, 0x4, 0x0, 0x73e1, 0x9, 0x101, 0x5, 0x974, 0x1, 0x8, 0x82e, 0x677, 0x2f75ac38, 0x9, 0x4, 0xa, 0xe, 0x7, 0x7, 0xfffffffffffffff9, 0x3ff, 0x4, 0x40000, 0x8001, 0xb8b, 0x3, 0x9b, 0x1b, 0xc0, 0x80, 0x6, 0x8000000080000000, 0xff, 0x8, 0x80, 0xfffffffffffff801, 0xff, 0xffffffff00000001, 0x3, 0xa4c]}) syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @tail_call, @generic={0x5, 0x8, 0x0, 0xcf1, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000300)='GPL\x00', 0x3, 0x33, &(0x7f0000000380)=""/51, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x7, 0x2, 0x404}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700), &(0x7f0000000040)=[{0x4, 0x3, 0xb, 0xb}, {0x0, 0x4, 0x1, 0x9}], 0x10, 0x1}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) 127.044359ms ago: executing program 0 (id=503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080), 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000003c0)={0x7, 0x7, 0x800, 0x8}, 0x10) write(r1, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0, 0xffffffffffffff64}, {&(0x7f0000001480)="76e7a2b200000000", 0x8}], 0x2}}], 0x1, 0x20004804) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x401c094}, 0x4008008) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) preadv(r6, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xb14c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x57, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) close(0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2$watch_queue(&(0x7f00000003c0), 0x80) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 7f6bcf1e5fa0 R15: 00007ffe5b94d6d8 [ 74.480456][ T6124] [ 74.480462][ T6124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.517362][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 74.759815][ T5924] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 74.922108][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.017404][ T5924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.108773][ T5924] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 75.163708][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.236046][ T5924] usb 5-1: config 0 descriptor?? [ 75.483677][ T9] usb 5-1: USB disconnect, device number 6 [ 75.539820][ T89] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 75.672319][ T6149] Zero length message leads to an empty skb [ 75.699887][ T89] usb 4-1: device descriptor read/64, error -71 [ 75.809629][ T30] audit: type=1400 audit(1768857992.419:199): avc: denied { ioctl } for pid=6148 comm="syz.2.62" path="socket:[8916]" dev="sockfs" ino=8916 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.955142][ T30] audit: type=1400 audit(1768857992.629:200): avc: denied { create } for pid=6153 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.987573][ T89] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 75.996122][ T24] cfg80211: failed to load regulatory.db [ 76.002432][ T30] audit: type=1400 audit(1768857992.679:201): avc: denied { setopt } for pid=6153 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.181713][ T89] usb 4-1: device descriptor read/64, error -71 [ 76.281891][ T6162] FAULT_INJECTION: forcing a failure. [ 76.281891][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 76.310489][ T89] usb usb4-port1: attempt power cycle [ 76.374419][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.4.67 Not tainted syzkaller #0 PREEMPT(full) [ 76.374441][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.374451][ T6162] Call Trace: [ 76.374456][ T6162] [ 76.374463][ T6162] dump_stack_lvl+0x16c/0x1f0 [ 76.374489][ T6162] should_fail_ex+0x512/0x640 [ 76.374504][ T6162] ? fs_reclaim_acquire+0xae/0x150 [ 76.374528][ T6162] should_failslab+0xc2/0x120 [ 76.374549][ T6162] __kmalloc_noprof+0xeb/0x910 [ 76.374564][ T6162] ? tomoyo_encode2+0x100/0x3e0 [ 76.374591][ T6162] ? tomoyo_encode2+0x100/0x3e0 [ 76.374611][ T6162] tomoyo_encode2+0x100/0x3e0 [ 76.374636][ T6162] tomoyo_encode+0x29/0x50 [ 76.374657][ T6162] tomoyo_realpath_from_path+0x18f/0x6e0 [ 76.374686][ T6162] tomoyo_path_number_perm+0x245/0x580 [ 76.374704][ T6162] ? tomoyo_path_number_perm+0x237/0x580 [ 76.374724][ T6162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.374745][ T6162] ? find_held_lock+0x2b/0x80 [ 76.374791][ T6162] ? find_held_lock+0x2b/0x80 [ 76.374812][ T6162] ? hook_file_ioctl_common+0x144/0x410 [ 76.374833][ T6162] ? __fget_files+0x20e/0x3c0 [ 76.374860][ T6162] security_file_ioctl+0x9b/0x240 [ 76.374884][ T6162] __x64_sys_ioctl+0xb7/0x210 [ 76.374904][ T6162] do_syscall_64+0xcd/0xf80 [ 76.374937][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.374952][ T6162] RIP: 0033:0x7facef38f749 [ 76.374966][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.374979][ T6162] RSP: 002b:00007facf0296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.374995][ T6162] RAX: ffffffffffffffda RBX: 00007facef5e5fa0 RCX: 00007facef38f749 [ 76.375004][ T6162] RDX: 0000000000000000 RSI: 00000000c0285443 RDI: 0000000000000003 [ 76.375013][ T6162] RBP: 00007facf0296090 R08: 0000000000000000 R09: 0000000000000000 [ 76.375021][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.375029][ T6162] R13: 00007facef5e6038 R14: 00007facef5e5fa0 R15: 00007ffcfc4157e8 [ 76.375051][ T6162] [ 76.375932][ T6162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.597575][ T30] audit: type=1400 audit(1768857993.139:202): avc: denied { ioctl } for pid=6167 comm="syz.2.68" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.654617][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.654768][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.829794][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 76.843648][ T24] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 76.853135][ T24] usb 2-1: config 0 has no interface number 0 [ 76.859933][ T89] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 76.881183][ T89] usb 4-1: device descriptor read/8, error -71 [ 76.900288][ T24] usb 2-1: config 0 interface 166 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 76.932028][ T24] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 76.960138][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.968133][ T24] usb 2-1: Product: syz [ 76.990593][ T24] usb 2-1: Manufacturer: syz [ 76.995191][ T24] usb 2-1: SerialNumber: syz [ 77.019043][ T24] usb 2-1: config 0 descriptor?? [ 77.030194][ T6158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.039362][ T24] hub 2-1:0.166: bad descriptor, ignoring hub [ 77.046719][ T24] hub 2-1:0.166: probe with driver hub failed with error -5 [ 77.061450][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 77.072723][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.082817][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 77.096885][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 77.106381][ T30] audit: type=1400 audit(1768857993.779:203): avc: denied { append } for pid=6173 comm="syz.2.71" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.108723][ T6175] loop8: detected capacity change from 0 to 7 [ 77.139009][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.147240][ T89] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 77.159299][ T9] usb 1-1: config 0 descriptor?? [ 77.160444][ T89] usb 4-1: device descriptor read/8, error -71 [ 77.174052][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.183747][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.204822][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.214450][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.223929][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.230010][ T30] audit: type=1400 audit(1768857993.909:204): avc: denied { setopt } for pid=6173 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.233513][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.267499][ T6158] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.279806][ T5830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.279963][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.296845][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.308338][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.311322][ T89] usb usb4-port1: unable to enumerate USB device [ 77.317939][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.324854][ T24] net1080 2-1:0.166 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 16:1f:c6:eb:07:71 [ 77.339463][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.352943][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.362067][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.371694][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.379614][ T6175] ldm_validate_partition_table(): Disk read failed. [ 77.384430][ T30] audit: type=1400 audit(1768857994.049:205): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.396412][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.408576][ T30] audit: type=1400 audit(1768857994.069:206): avc: denied { search } for pid=5484 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.417012][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.419158][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.456001][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.466588][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.476182][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 77.484295][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 77.494696][ T5830] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 77.505725][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.513795][ T6175] Dev loop8: unable to read RDB block 0 [ 77.514406][ T6175] loop8: unable to read partition table [ 77.533895][ T6175] loop8: partition table beyond EOD, truncated [ 77.534915][ T30] audit: type=1400 audit(1768857994.069:207): avc: denied { search } for pid=5484 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.562841][ T6175] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X ) failed (rc=-5) [ 77.566598][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400 [ 77.578165][ T9] wacom 0003:056A:0016.0001: unknown main item tag 0x0 [ 77.589871][ T5830] pvrusb2: ********** [ 77.593915][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 77.605463][ T9] wacom 0003:056A:0016.0001: unknown main item tag 0x0 [ 77.607523][ T5830] pvrusb2: Important functionality might not be entirely working. [ 77.615785][ T10] usb 2-1: USB disconnect, device number 3 [ 77.629973][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 77.642174][ T9] wacom 0003:056A:0016.0001: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 77.653541][ T10] net1080 2-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 77.668889][ T5830] pvrusb2: ********** [ 77.682829][ T9] wacom 0003:056A:0016.0001: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.0-1/input0 [ 77.720593][ T9] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0016.0001/input/input5 [ 77.771564][ T2334] pvrusb2: Invalid write control endpoint [ 77.775630][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.800337][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.914136][ T2334] pvrusb2: Invalid write control endpoint [ 77.924950][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 77.950158][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 77.957700][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 77.981967][ T2334] pvrusb2: Device being rendered inoperable [ 77.991031][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 78.012459][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 78.030493][ T5830] usb 1-1: USB disconnect, device number 4 [ 78.042372][ T2334] pvrusb2: Attached sub-driver cx25840 [ 78.053510][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 78.081835][ T89] usb 5-1: USB disconnect, device number 7 [ 78.109829][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 78.887713][ T6203] /dev/nullb0: Can't open blockdev [ 79.312266][ T6219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.341752][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 79.341765][ T30] audit: type=1400 audit(1768857996.019:224): avc: denied { name_connect } for pid=6218 comm="syz.3.76" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.549820][ T89] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 79.619871][ T5973] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 79.689803][ T89] usb 2-1: device descriptor read/64, error -71 [ 79.781012][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.791555][ T5973] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.801644][ T5973] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 79.811847][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.823905][ T5973] usb 5-1: config 0 descriptor?? [ 79.838941][ T30] audit: type=1400 audit(1768857996.509:225): avc: denied { write } for pid=6232 comm="syz.0.79" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 79.845761][ T6232] [U] [ 79.863785][ T30] audit: type=1400 audit(1768857996.519:226): avc: denied { create } for pid=6232 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.902447][ T30] audit: type=1400 audit(1768857996.519:227): avc: denied { connect } for pid=6232 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.931431][ T89] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 79.998036][ T6236] 8021q: VLANs not supported on lo [ 80.120812][ T89] usb 2-1: device descriptor read/64, error -71 [ 80.182735][ T9] usb 5-1: USB disconnect, device number 8 [ 80.262989][ T89] usb usb2-port1: attempt power cycle [ 80.283039][ T6238] FAULT_INJECTION: forcing a failure. [ 80.283039][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.304955][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 80.304976][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.304985][ T6238] Call Trace: [ 80.304990][ T6238] [ 80.304996][ T6238] dump_stack_lvl+0x16c/0x1f0 [ 80.305021][ T6238] should_fail_ex+0x512/0x640 [ 80.305038][ T6238] _copy_to_user+0x32/0xd0 [ 80.305064][ T6238] simple_read_from_buffer+0xcb/0x170 [ 80.305089][ T6238] proc_fail_nth_read+0x197/0x240 [ 80.305107][ T6238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.305126][ T6238] ? rw_verify_area+0xcf/0x6c0 [ 80.305144][ T6238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.305161][ T6238] vfs_read+0x1e4/0xcf0 [ 80.305182][ T6238] ? __pfx___mutex_lock+0x10/0x10 [ 80.305207][ T6238] ? __pfx_vfs_read+0x10/0x10 [ 80.305231][ T6238] ? __fget_files+0x20e/0x3c0 [ 80.305258][ T6238] ksys_read+0x12a/0x250 [ 80.305277][ T6238] ? __pfx_ksys_read+0x10/0x10 [ 80.305295][ T6238] ? fput+0x70/0xf0 [ 80.305311][ T6238] do_syscall_64+0xcd/0xf80 [ 80.305334][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.305350][ T6238] RIP: 0033:0x7f6bcef8e15c [ 80.305363][ T6238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.305376][ T6238] RSP: 002b:00007f6bcfeb0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.305391][ T6238] RAX: ffffffffffffffda RBX: 00007f6bcf1e5fa0 RCX: 00007f6bcef8e15c [ 80.305401][ T6238] RDX: 000000000000000f RSI: 00007f6bcfeb00a0 RDI: 0000000000000004 [ 80.305410][ T6238] RBP: 00007f6bcfeb0090 R08: 0000000000000000 R09: 0000000000000000 [ 80.305419][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.305427][ T6238] R13: 00007f6bcf1e6038 R14: 00007f6bcf1e5fa0 R15: 00007ffe5b94d6d8 [ 80.305449][ T6238] [ 80.760238][ T89] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 80.763543][ T6250] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.85'. [ 80.780285][ T89] usb 2-1: device descriptor read/8, error -71 [ 81.013284][ T6254] input: syz0 as /devices/virtual/input/input8 [ 81.021945][ T30] audit: type=1400 audit(1768857997.639:228): avc: denied { read write } for pid=6249 comm="syz.0.85" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.049694][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 81.060931][ T89] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 81.079794][ T30] audit: type=1400 audit(1768857997.639:229): avc: denied { open } for pid=6249 comm="syz.0.85" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.100206][ T89] usb 2-1: device descriptor read/8, error -71 [ 81.118745][ T30] audit: type=1400 audit(1768857997.639:230): avc: denied { connect } for pid=6249 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.569102][ T6267] hfs: can't find a HFS filesystem on dev nullb0 [ 81.782306][ T89] usb usb2-port1: unable to enumerate USB device [ 81.826793][ T30] audit: type=1400 audit(1768857997.669:231): avc: denied { ioctl } for pid=6253 comm="syz.4.86" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.928405][ T30] audit: type=1400 audit(1768857997.669:232): avc: denied { create } for pid=6253 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.993248][ T6270] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 1, id = 0 [ 82.012765][ T30] audit: type=1400 audit(1768857997.679:233): avc: denied { ioctl } for pid=6249 comm="syz.0.85" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.092408][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 82.250620][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 82.257890][ T10] usb 4-1: config index 0 descriptor too short (expected 6180, got 36) [ 82.294624][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.353345][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 82.379849][ T10] usb 4-1: config 0 has no interfaces? [ 82.419890][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 82.489817][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.525781][ T10] usb 4-1: config 0 descriptor?? [ 83.229818][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 83.310129][ T6307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.98'. [ 83.401608][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.411872][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.421246][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 83.431246][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.444557][ T10] usb 1-1: config 0 descriptor?? [ 83.672640][ T89] usb 1-1: USB disconnect, device number 5 [ 84.077537][ T89] usb 4-1: USB disconnect, device number 7 [ 84.320064][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 84.363817][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 84.363831][ T30] audit: type=1400 audit(1768858001.039:252): avc: denied { setopt } for pid=6328 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.489816][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 84.599545][ T30] audit: type=1400 audit(1768858001.269:253): avc: denied { open } for pid=6333 comm="syz.0.106" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.629823][ T30] audit: type=1400 audit(1768858001.279:254): avc: denied { ioctl } for pid=6333 comm="syz.0.106" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.776615][ T30] audit: type=1400 audit(1768858001.289:255): avc: denied { read } for pid=6333 comm="syz.0.106" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.822516][ T10] usb 5-1: config 0 has no interfaces? [ 84.829391][ T10] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 84.838747][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.854005][ T10] usb 5-1: config 0 descriptor?? [ 84.957455][ T6338] vivid-007: ================= START STATUS ================= [ 84.973363][ T6338] vivid-007: Enable Output Cropping: true [ 84.980014][ T6338] vivid-007: Enable Output Composing: true [ 84.985931][ T6338] vivid-007: Enable Output Scaler: true [ 84.991601][ T6338] vivid-007: Tx RGB Quantization Range: Automatic [ 84.998069][ T6338] vivid-007: Transmit Mode: HDMI [ 85.046079][ T6338] vivid-007: Hotplug Present: 0x00000000 [ 85.058961][ T30] audit: type=1400 audit(1768858001.719:256): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.079696][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.088868][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.097264][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.105956][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.114118][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.122582][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.131609][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.140097][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.148241][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.156744][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.190945][ T30] audit: type=1400 audit(1768858001.869:257): avc: denied { append } for pid=6343 comm="syz.3.108" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 85.257982][ T6338] vivid-007: RxSense Present: 0x00000000 [ 85.302014][ T6338] vivid-007: EDID Present: 0x00000000 [ 85.402858][ T6338] vivid-007: ================== END STATUS ================== [ 85.534794][ T30] audit: type=1400 audit(1768858002.209:258): avc: denied { execute } for pid=6353 comm="syz.1.110" name="file1" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.680708][ T30] audit: type=1400 audit(1768858002.209:259): avc: denied { execute_no_trans } for pid=6353 comm="syz.1.110" path="/26/file1" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.714527][ T30] audit: type=1400 audit(1768858002.219:260): avc: denied { write } for pid=6353 comm="syz.1.110" name="sockstat" dev="proc" ino=4026532830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.956032][ T30] audit: type=1400 audit(1768858002.629:261): avc: denied { getopt } for pid=6362 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.978030][ T6363] ======================================================= [ 85.978030][ T6363] WARNING: The mand mount option has been deprecated and [ 85.978030][ T6363] and is ignored by this kernel. Remove the mand [ 85.978030][ T6363] option from the mount to silence this warning. [ 85.978030][ T6363] ======================================================= [ 86.787885][ T6376] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.050427][ T89] usb 5-1: USB disconnect, device number 9 [ 88.363433][ T6393] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 88.372187][ T6393] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 88.413988][ T6392] 9pnet_fd: p9_fd_create_tcp (6392): problem connecting socket to 127.0.0.1 [ 88.477019][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 88.487072][ T6401] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 89.259598][ T5896] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.315362][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.457529][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 89.457546][ T30] audit: type=1400 audit(1768858006.129:273): avc: denied { mount } for pid=6418 comm="syz.3.127" name="/" dev="autofs" ino=11453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.500122][ T30] audit: type=1400 audit(1768858006.159:274): avc: denied { mounton } for pid=6418 comm="syz.3.127" path="/24/file1/file0" dev="autofs" ino=10437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 89.520955][ T6420] overlayfs: failed to resolve './file1': -2 [ 89.532924][ T5896] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 89.546699][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.568360][ T5896] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 89.582381][ T5896] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 89.591405][ T5896] usb 5-1: Manufacturer: syz [ 89.611801][ T5896] usb 5-1: config 0 descriptor?? [ 89.681790][ T5896] rc_core: IR keymap rc-hauppauge not found [ 89.687705][ T5896] Registered IR keymap rc-empty [ 89.707052][ T30] audit: type=1400 audit(1768858006.379:275): avc: denied { relabelfrom } for pid=6424 comm="syz.2.130" name="NETLINK" dev="sockfs" ino=10451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.768484][ T5896] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 89.794487][ T5896] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 89.807727][ T30] audit: type=1400 audit(1768858006.489:276): avc: denied { name_bind } for pid=6421 comm="syz.0.129" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.834150][ T30] audit: type=1400 audit(1768858006.489:277): avc: denied { node_bind } for pid=6421 comm="syz.0.129" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.862955][ T30] audit: type=1400 audit(1768858006.509:278): avc: denied { unmount } for pid=6421 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.884195][ T30] audit: type=1400 audit(1768858006.509:279): avc: denied { name_bind } for pid=6433 comm="syz.2.131" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.906225][ T30] audit: type=1400 audit(1768858006.509:280): avc: denied { ioctl } for pid=6433 comm="syz.2.131" path="socket:[11481]" dev="sockfs" ino=11481 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.063649][ T6435] rc rc0: two consecutive events of type space [ 90.359017][ T6439] netlink: 'syz.1.132': attribute type 10 has an invalid length. [ 90.366850][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.132'. [ 90.392952][ T6439] batman_adv: batadv0: Adding interface: virt_wifi0 [ 90.399650][ T6439] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.430424][ T6439] batman_adv: batadv0: Interface activated: virt_wifi0 [ 90.662256][ T30] audit: type=1400 audit(1768858007.009:281): avc: denied { watch watch_reads } for pid=6436 comm="syz.1.132" path="pipe:[4749]" dev="pipefs" ino=4749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 90.686677][ T30] audit: type=1400 audit(1768858007.019:282): avc: denied { relabelfrom } for pid=6436 comm="syz.1.132" name="" dev="pipefs" ino=11485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.575820][ T10] usb 5-1: USB disconnect, device number 10 [ 92.848563][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 93.069937][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 93.118409][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.156383][ T5925] usb 2-1: config 1 has an invalid interface number: 35 but max is 0 [ 93.203320][ T5925] usb 2-1: config 1 has no interface number 0 [ 93.238977][ T5925] usb 2-1: config 1 interface 35 has no altsetting 0 [ 93.255296][ T5925] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=fd.15 [ 93.264506][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.273041][ T5925] usb 2-1: Product: syz [ 93.277239][ T5925] usb 2-1: Manufacturer: syz [ 93.282785][ T5925] usb 2-1: SerialNumber: syz [ 93.512337][ T5925] usb 2-1: USB disconnect, device number 8 [ 93.799839][ T5973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.650444][ T5973] usb 5-1: Using ep0 maxpacket: 16 [ 94.672058][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 94.690062][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.721680][ T5973] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.746426][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.769831][ T5973] usb 5-1: Product: syz [ 94.773987][ T5973] usb 5-1: Manufacturer: syz [ 94.778546][ T5973] usb 5-1: SerialNumber: syz [ 94.792187][ T5973] usb 5-1: config 0 descriptor?? [ 94.804633][ T5973] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.814243][ T5973] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 94.889728][ T6479] fuse: Unknown parameter '' [ 94.900330][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 94.900342][ T30] audit: type=1400 audit(1768858011.579:291): avc: denied { setopt } for pid=6478 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.989848][ T5925] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 95.150396][ T5925] usb 2-1: too many configurations: 27, using maximum allowed: 8 [ 95.158946][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.173814][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.188210][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.198656][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.213240][ T6465] netlink: 27 bytes leftover after parsing attributes in process `syz.4.142'. [ 95.213296][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.234210][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.240675][ T6465] xt_bpf: check failed: parse error [ 95.247956][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.263206][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.279002][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.291958][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.306322][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.316748][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.330618][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.341048][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.354778][ T5925] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 95.365100][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.379179][ T5925] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 95.388296][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.398962][ T5925] usb 2-1: config 0 descriptor?? [ 95.406786][ T5925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 95.474733][ T5973] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 95.481233][ T5973] em28xx 5-1:0.0: Config register raw data: 0x3a [ 95.487537][ T5973] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 95.494829][ T5973] em28xx 5-1:0.0: No AC97 audio processor [ 95.617242][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.645531][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.991098][ T89] usb 2-1: USB disconnect, device number 9 [ 96.106749][ T5973] usb 5-1: USB disconnect, device number 11 [ 96.389592][ T30] audit: type=1326 audit(1768858013.059:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.417479][ T30] audit: type=1326 audit(1768858013.069:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.441136][ T30] audit: type=1326 audit(1768858013.069:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.470602][ T30] audit: type=1326 audit(1768858013.069:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.495490][ T30] audit: type=1326 audit(1768858013.089:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.520659][ T30] audit: type=1326 audit(1768858013.089:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.544194][ T30] audit: type=1326 audit(1768858013.089:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.571416][ T30] audit: type=1326 audit(1768858013.089:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.595589][ T30] audit: type=1326 audit(1768858013.089:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 96.930066][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 97.079803][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 97.086484][ T5925] usb 5-1: config 0 has an invalid interface number: 135 but max is 0 [ 97.095937][ T5925] usb 5-1: config 0 has no interface number 0 [ 97.103872][ T5925] usb 5-1: New USB device found, idVendor=0402, idProduct=6521, bcdDevice=c3.6d [ 97.113934][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.122049][ T5925] usb 5-1: Product: syz [ 97.126194][ T5925] usb 5-1: Manufacturer: syz [ 97.129869][ T89] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 97.131033][ T5925] usb 5-1: SerialNumber: syz [ 97.144668][ T5925] usb 5-1: config 0 descriptor?? [ 97.291673][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.301843][ T89] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.310842][ T89] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 97.320290][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.332039][ T89] usb 2-1: config 0 descriptor?? [ 97.358726][ T5925] usb 5-1: USB disconnect, device number 12 [ 97.540438][ T6506] FAULT_INJECTION: forcing a failure. [ 97.540438][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.553509][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT(full) [ 97.553527][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.553536][ T6506] Call Trace: [ 97.553540][ T6506] [ 97.553544][ T6506] dump_stack_lvl+0x16c/0x1f0 [ 97.553562][ T6506] should_fail_ex+0x512/0x640 [ 97.553574][ T6506] _copy_from_user+0x2e/0xd0 [ 97.553590][ T6506] update_counters+0x1e1/0x220 [ 97.553601][ T6506] ? __pfx_update_counters+0x10/0x10 [ 97.553617][ T6506] ? bpf_lsm_capable+0x9/0x10 [ 97.553629][ T6506] ? security_capable+0x7e/0x260 [ 97.553642][ T6506] do_ebt_set_ctl+0x256/0x570 [ 97.553651][ T6506] ? sockopt_release_sock+0x52/0x60 [ 97.553664][ T6506] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 97.553675][ T6506] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 97.553685][ T6506] ? proc_fail_nth_write+0x9f/0x220 [ 97.553704][ T6506] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 97.553721][ T6506] nf_setsockopt+0x8d/0xf0 [ 97.553737][ T6506] ip_setsockopt+0xcb/0xf0 [ 97.553748][ T6506] ipv6_setsockopt+0x155/0x170 [ 97.553759][ T6506] tcp_setsockopt+0xa7/0x100 [ 97.553772][ T6506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 97.553786][ T6506] do_sock_setsockopt+0xf3/0x1d0 [ 97.553801][ T6506] __sys_setsockopt+0x1a0/0x230 [ 97.553815][ T6506] __x64_sys_setsockopt+0xbd/0x160 [ 97.553824][ T6506] ? do_syscall_64+0x91/0xf80 [ 97.553838][ T6506] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.553852][ T6506] do_syscall_64+0xcd/0xf80 [ 97.553866][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.553878][ T6506] RIP: 0033:0x7fdeebb8f749 [ 97.553886][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.553896][ T6506] RSP: 002b:00007fdeeca61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.553906][ T6506] RAX: ffffffffffffffda RBX: 00007fdeebde5fa0 RCX: 00007fdeebb8f749 [ 97.553912][ T6506] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000006 [ 97.553917][ T6506] RBP: 00007fdeeca61090 R08: 0000000000000ba8 R09: 0000000000000000 [ 97.553923][ T6506] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 97.553928][ T6506] R13: 00007fdeebde6038 R14: 00007fdeebde5fa0 R15: 00007fffad710418 [ 97.553941][ T6506] [ 97.555121][ T5925] usb 2-1: USB disconnect, device number 10 [ 98.453011][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 98.471289][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 98.495327][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.159'. [ 100.149849][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 100.149866][ T30] audit: type=1400 audit(1768858015.979:504): avc: denied { create } for pid=6532 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.204166][ T30] audit: type=1400 audit(1768858015.989:505): avc: denied { connect } for pid=6532 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.264207][ T5973] IPVS: starting estimator thread 0... [ 100.374553][ T6541] netlink: 'syz.2.162': attribute type 12 has an invalid length. [ 100.382550][ T30] audit: type=1400 audit(1768858016.059:506): avc: denied { bind } for pid=6532 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.430013][ T6542] IPVS: using max 44 ests per chain, 105600 per kthread [ 100.457896][ T30] audit: type=1400 audit(1768858016.059:507): avc: denied { listen } for pid=6532 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.500671][ T30] audit: type=1400 audit(1768858016.059:508): avc: denied { accept } for pid=6532 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.179271][ T5973] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 102.278752][ T30] audit: type=1400 audit(1768858018.949:509): avc: denied { mount } for pid=6562 comm="syz.4.168" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.408080][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 102.418612][ T6567] netlink: 156 bytes leftover after parsing attributes in process `syz.4.169'. [ 102.431596][ T5973] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 102.442396][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.455482][ T5973] usb 2-1: config 0 descriptor?? [ 102.477688][ T5973] usb 2-1: selecting invalid altsetting 3 [ 102.493830][ T5973] comedi comedi5: could not set alternate setting 3 in high speed [ 102.506727][ T5973] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 102.522319][ T5973] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 102.791424][ T5973] usb 2-1: USB disconnect, device number 11 [ 103.488775][ T6575] netlink: 'syz.0.170': attribute type 2 has an invalid length. [ 104.509654][ T6584] tipc: Started in network mode [ 104.515002][ T6584] tipc: Node identity b691ebb1da7d, cluster identity 4711 [ 104.525863][ T6584] tipc: Enabled bearer , priority 0 [ 104.533622][ T6584] syzkaller0: entered promiscuous mode [ 104.539397][ T6584] syzkaller0: entered allmulticast mode [ 104.549570][ T30] audit: type=1400 audit(1768858021.229:510): avc: denied { write } for pid=6583 comm="syz.1.174" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.606446][ T6585] sch_tbf: peakrate 8 is lower than or equals to rate 8 ! [ 104.625859][ T30] audit: type=1400 audit(1768858021.299:511): avc: denied { mounton } for pid=6583 comm="syz.1.174" path="/proc/159/task" dev="proc" ino=11902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 104.781614][ T6586] tipc: Resetting bearer [ 104.794655][ T6586] tipc: Disabling bearer [ 105.475131][ T6597] overlayfs: failed to clone upperpath [ 105.670855][ T30] audit: type=1400 audit(1768858022.349:512): avc: denied { create } for pid=6599 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.765516][ T30] audit: type=1400 audit(1768858022.369:513): avc: denied { create } for pid=6599 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.802078][ T30] audit: type=1400 audit(1768858022.409:514): avc: denied { read write } for pid=6601 comm="syz.1.179" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.831241][ T30] audit: type=1400 audit(1768858022.419:515): avc: denied { open } for pid=6601 comm="syz.1.179" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 106.227307][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.237142][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.247985][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.265740][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.274023][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.342950][ T30] audit: type=1400 audit(1768858023.019:516): avc: denied { ioctl } for pid=6616 comm="syz.0.183" path="socket:[10881]" dev="sockfs" ino=10881 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.739963][ T5829] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 107.004060][ T3941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.027300][ T30] audit: type=1400 audit(1768858023.699:517): avc: denied { read write } for pid=6626 comm="syz.4.185" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 107.150823][ T30] audit: type=1400 audit(1768858023.729:518): avc: denied { open } for pid=6626 comm="syz.4.185" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 107.387483][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 107.423698][ T6638] batman_adv: batadv0: Adding interface: dummy0 [ 107.430186][ T6638] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.457032][ T6638] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 107.696238][ T3941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.871658][ T30] audit: type=1400 audit(1768858023.979:519): avc: denied { unlink } for pid=6635 comm="syz.2.187" name="#1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.959793][ T3941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.038663][ T30] audit: type=1400 audit(1768858023.989:520): avc: denied { mount } for pid=6635 comm="syz.2.187" name="/" dev="overlay" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.334947][ T30] audit: type=1400 audit(1768858024.669:521): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.370155][ T5829] Bluetooth: hci5: command tx timeout [ 108.679655][ T6656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.687141][ T6656] IPv6: NLM_F_CREATE should be set when creating new route [ 108.694379][ T6656] IPv6: NLM_F_CREATE should be set when creating new route [ 108.701561][ T6656] IPv6: NLM_F_CREATE should be set when creating new route [ 109.047054][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.057882][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.066249][ T6610] bridge_slave_0: entered allmulticast mode [ 109.078721][ T6610] bridge_slave_0: entered promiscuous mode [ 109.107123][ T3941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.123241][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.130801][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.138002][ T6610] bridge_slave_1: entered allmulticast mode [ 109.145416][ T6610] bridge_slave_1: entered promiscuous mode [ 109.183459][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.277868][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.449810][ T5829] Bluetooth: hci5: command tx timeout [ 110.613967][ T6675] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 110.630181][ T6610] team0: Port device team_slave_0 added [ 110.683425][ T6610] team0: Port device team_slave_1 added [ 110.709027][ T6677] overlayfs: missing 'lowerdir' [ 110.736762][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 110.736776][ T30] audit: type=1400 audit(1768858027.409:523): avc: denied { read } for pid=6659 comm="syz.4.192" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.854776][ T30] audit: type=1400 audit(1768858027.439:524): avc: denied { open } for pid=6659 comm="syz.4.192" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.901635][ T30] audit: type=1400 audit(1768858027.439:525): avc: denied { write } for pid=6659 comm="syz.4.192" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.952165][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.959101][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.001787][ T30] audit: type=1400 audit(1768858027.439:526): avc: denied { ioctl } for pid=6659 comm="syz.4.192" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.122456][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.196504][ T3941] bridge_slave_1: left allmulticast mode [ 111.232101][ T3941] bridge_slave_1: left promiscuous mode [ 111.329329][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.440148][ T30] audit: type=1400 audit(1768858027.459:527): avc: denied { ioctl } for pid=6659 comm="syz.4.192" path="socket:[12005]" dev="sockfs" ino=12005 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.526418][ T3941] bridge_slave_0: left allmulticast mode [ 111.625503][ T3941] bridge_slave_0: left promiscuous mode [ 111.709430][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.767892][ T30] audit: type=1400 audit(1768858027.669:528): avc: denied { wake_alarm } for pid=6680 comm="syz.0.197" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.131449][ T6693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.297156][ T30] audit: type=1400 audit(1768858028.969:529): avc: denied { create } for pid=6696 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.337444][ T30] audit: type=1400 audit(1768858029.009:530): avc: denied { ioctl } for pid=6696 comm="syz.4.201" path="socket:[12148]" dev="sockfs" ino=12148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.487816][ T3941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.504004][ T3941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.530122][ T5829] Bluetooth: hci5: command tx timeout [ 112.538279][ T3941] bond0 (unregistering): Released all slaves [ 112.561868][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.575215][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.615661][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.664792][ T6697] dummy0: entered promiscuous mode [ 112.677200][ T6699] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 112.922075][ T6610] hsr_slave_0: entered promiscuous mode [ 112.941787][ T6610] hsr_slave_1: entered promiscuous mode [ 112.953410][ T6610] debugfs: 'hsr0' already exists in 'hsr' [ 112.959411][ T6610] Cannot create hsr debugfs directory [ 113.043833][ T6709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.051089][ T6709] IPv6: NLM_F_CREATE should be set when creating new route [ 113.058349][ T6709] IPv6: NLM_F_CREATE should be set when creating new route [ 113.065611][ T6709] IPv6: NLM_F_CREATE should be set when creating new route [ 113.364044][ T3941] hsr_slave_0: left promiscuous mode [ 113.639150][ T3941] hsr_slave_1: left promiscuous mode [ 113.655278][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.684398][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.719194][ T3941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.759057][ T3941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.806430][ T3941] veth1_macvtap: left promiscuous mode [ 113.895019][ T3941] veth0_macvtap: left promiscuous mode [ 113.900925][ T3941] veth1_vlan: left promiscuous mode [ 113.911102][ T3941] veth0_vlan: left promiscuous mode [ 114.574459][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.207'. [ 114.612324][ T5829] Bluetooth: hci5: command tx timeout [ 114.976092][ T30] audit: type=1400 audit(1768858031.559:531): avc: denied { name_connect } for pid=6736 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.502876][ T3941] team0 (unregistering): Port device team_slave_1 removed [ 115.559228][ T3941] team0 (unregistering): Port device team_slave_0 removed [ 115.889138][ T6696] dummy0: left promiscuous mode [ 115.920296][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.928104][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.348329][ T30] audit: type=1400 audit(1768858032.906:532): avc: denied { append } for pid=6746 comm="syz.1.210" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.729599][ T6475] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 116.883285][ T6610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.387337][ T6610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.430468][ T6475] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 117.440945][ T6475] usb 2-1: config 0 has no interface number 0 [ 117.442952][ T6610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.448247][ T6475] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 117.465351][ T6475] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.479584][ T6475] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 117.491703][ T6475] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 117.504897][ T6475] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 117.521748][ T6475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.538476][ T6475] usb 2-1: Product: syz [ 117.543585][ T6610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.547182][ T6475] usb 2-1: Manufacturer: syz [ 117.565909][ T6475] usb 2-1: SerialNumber: syz [ 117.594780][ T6475] usb 2-1: config 0 descriptor?? [ 117.685068][ T6475] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 117.773479][ T30] audit: type=1400 audit(1768858034.234:533): avc: denied { mount } for pid=6770 comm="syz.4.213" name="/" dev="configfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 117.817583][ T30] audit: type=1400 audit(1768858034.243:534): avc: denied { watch watch_reads } for pid=6770 comm="syz.4.213" path="/45" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.820945][ T6475] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input10 [ 118.241138][ T30] audit: type=1400 audit(1768858034.683:535): avc: denied { read } for pid=5174 comm="acpid" name="js0" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.298550][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.377084][ T30] audit: type=1400 audit(1768858034.702:536): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.412417][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.551762][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.558837][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.619532][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.626681][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.633091][ T5942] usb 2-1: USB disconnect, device number 12 [ 119.703350][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.861082][ T6807] overlayfs: missing 'lowerdir' [ 119.873898][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.891651][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.901065][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.912289][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.972840][ T30] audit: type=1400 audit(1768858036.301:537): avc: denied { write } for pid=6809 comm="syz.1.218" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.004737][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 120.246486][ T5942] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.631602][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 120.772531][ T5942] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.940053][ T5942] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.002606][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 121.054723][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.170552][ T5942] usb 2-1: config 0 descriptor?? [ 121.768557][ T5942] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 121.855467][ T30] audit: type=1400 audit(1768858036.301:538): avc: denied { open } for pid=6809 comm="syz.1.218" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 121.872744][ T5942] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 121.879857][ T30] audit: type=1400 audit(1768858036.301:539): avc: denied { create } for pid=6809 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 121.913241][ T30] audit: type=1400 audit(1768858036.301:540): avc: denied { write } for pid=6809 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 121.991558][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.016118][ T5942] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 122.017059][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.074454][ T5942] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 122.138427][ T5942] logitech-djreceiver 0003:046D:C52B.0002: unknown main item tag 0x0 [ 122.215134][ T30] audit: type=1400 audit(1768858038.359:541): avc: denied { mounton } for pid=6809 comm="syz.1.218" path="/syzcgroup/net/syz1/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 122.255043][ T5830] usb 2-1: USB disconnect, device number 13 [ 123.181387][ T6610] veth0_vlan: entered promiscuous mode [ 123.204368][ T6842] 9p: Bad value for 'rfdno' [ 123.282004][ T6842] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 123.451720][ T6610] veth1_vlan: entered promiscuous mode [ 123.682667][ T6842] veth0_vlan: left promiscuous mode [ 123.694178][ T6842] veth0_vlan: entered promiscuous mode [ 123.803253][ T6842] team0: Device veth0_vlan failed to register rx_handler [ 123.849929][ T6475] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.859730][ T30] audit: type=1400 audit(1768858039.921:542): avc: denied { create } for pid=6851 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.005475][ T6610] veth0_macvtap: entered promiscuous mode [ 124.041414][ T6475] usb 5-1: device descriptor read/64, error -71 [ 124.064933][ T6610] veth1_macvtap: entered promiscuous mode [ 124.159227][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.206191][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.221362][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.288562][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.319363][ T6475] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.217613][ T6475] usb 5-1: device descriptor read/64, error -71 [ 125.251409][ T1169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.307108][ T1169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.341730][ T6475] usb usb5-port1: attempt power cycle [ 125.493125][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.524645][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.672158][ T6883] syz.2.232 uses obsolete (PF_INET,SOCK_PACKET) [ 125.739112][ T30] audit: type=1400 audit(1768858041.595:543): avc: denied { create } for pid=6878 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.792457][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.800203][ T30] audit: type=1400 audit(1768858041.642:544): avc: denied { bind } for pid=6878 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.800456][ T6475] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 125.837377][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.911668][ T30] audit: type=1400 audit(1768858041.642:545): avc: denied { write } for pid=6878 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.952273][ T30] audit: type=1400 audit(1768858041.811:546): avc: denied { mounton } for pid=6610 comm="syz-executor" path="/root/syzkaller.qCWgYL/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 125.977390][ T6475] usb 5-1: device descriptor read/8, error -71 [ 126.031960][ T30] audit: type=1400 audit(1768858041.820:547): avc: denied { mounton } for pid=6610 comm="syz-executor" path="/root/syzkaller.qCWgYL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 126.363277][ T6475] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.692637][ T6475] usb 5-1: device not accepting address 16, error -71 [ 126.757274][ T6475] usb usb5-port1: unable to enumerate USB device [ 126.847159][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.856802][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.580023][ T6475] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.741891][ T6475] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.760831][ T6475] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 127.772073][ T6475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.794271][ T6475] usb 2-1: config 0 descriptor?? [ 128.136336][ T5830] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.310530][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.328995][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.371134][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.391353][ T5830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.610848][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.621721][ T5830] usb 5-1: config 0 descriptor?? [ 129.098171][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.107484][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.117586][ T5830] usbhid 5-1:0.0: can't add hid device: -71 [ 129.125445][ T5830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.136251][ T5830] usb 5-1: USB disconnect, device number 17 [ 130.235991][ T5883] usb 2-1: USB disconnect, device number 14 [ 130.387865][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 130.387876][ T30] audit: type=1400 audit(1768858046.039:551): avc: denied { setopt } for pid=6926 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.602757][ T30] audit: type=1400 audit(1768858046.244:552): avc: denied { read } for pid=6935 comm="syz.1.243" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 130.604794][ T6938] netlink: 180 bytes leftover after parsing attributes in process `syz.1.243'. [ 130.698048][ T6940] openvswitch: netlink: Missing key (keys=2020040, expected=2000) [ 131.057909][ T30] audit: type=1400 audit(1768858046.244:553): avc: denied { open } for pid=6935 comm="syz.1.243" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.952771][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49331 sclass=netlink_route_socket pid=6959 comm=syz.1.247 [ 132.200014][ T5942] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.405307][ T5942] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 132.485155][ T6967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.492479][ T6967] IPv6: NLM_F_CREATE should be set when creating new route [ 132.499818][ T6967] IPv6: NLM_F_CREATE should be set when creating new route [ 132.507043][ T6967] IPv6: NLM_F_CREATE should be set when creating new route [ 132.562040][ T5942] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 132.581416][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.728662][ T5942] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 133.295119][ T6975] overlayfs: failed to clone upperpath [ 133.378691][ T30] audit: type=1400 audit(1768858048.845:554): avc: denied { ioctl } for pid=6980 comm="syz.0.255" path="socket:[13979]" dev="sockfs" ino=13979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.438405][ T5973] IPVS: starting estimator thread 0... [ 133.518450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.524815][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.566906][ T6984] IPVS: using max 81 ests per chain, 194400 per kthread [ 133.574998][ T30] audit: type=1400 audit(1768858049.023:555): avc: denied { connect } for pid=6980 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.815065][ T30] audit: type=1400 audit(1768858049.023:556): avc: denied { write } for pid=6980 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.815707][ T5925] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 134.021139][ T5925] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 134.032295][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.079853][ T5925] usb 5-1: Product: syz [ 134.084587][ T5925] usb 5-1: Manufacturer: syz [ 134.091028][ T5925] usb 5-1: SerialNumber: syz [ 134.105941][ T5925] usb 5-1: config 0 descriptor?? [ 134.134632][ T5925] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 018 [ 134.181107][ T30] audit: type=1400 audit(1768858049.593:557): avc: denied { module_request } for pid=6991 comm="syz.0.257" kmod="crypto-xcbc(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 134.264318][ T30] audit: type=1400 audit(1768858049.668:558): avc: denied { write } for pid=6991 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.365803][ T5925] (null): failure reading functionality [ 134.400855][ T5942] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 134.409128][ T5942] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 134.446742][ T5925] i2c i2c-1: failure reading functionality [ 134.479167][ T5925] i2c i2c-1: connected i2c-tiny-usb device [ 134.488929][ T5942] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 134.614502][ T30] audit: type=1400 audit(1768858049.995:559): avc: denied { accept } for pid=7001 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.835247][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 134.860813][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 135.035035][ T5942] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 135.045592][ T5925] usb 5-1: USB disconnect, device number 18 [ 135.057920][ T5942] usb 6-1: USB disconnect, device number 2 [ 135.210942][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 135.245600][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 135.266607][ T30] audit: type=1400 audit(1768858050.500:560): avc: denied { read } for pid=7016 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.761098][ T7008] ceph: No mds server is up or the cluster is laggy [ 135.770732][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 135.777697][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 136.209271][ T7039] lo speed is unknown, defaulting to 1000 [ 136.215377][ T7039] lo speed is unknown, defaulting to 1000 [ 136.229165][ T7039] lo speed is unknown, defaulting to 1000 [ 136.251389][ T7039] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.300799][ T7039] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.439678][ T7039] lo speed is unknown, defaulting to 1000 [ 136.454689][ T7039] lo speed is unknown, defaulting to 1000 [ 136.468931][ T7039] lo speed is unknown, defaulting to 1000 [ 136.483153][ T7039] lo speed is unknown, defaulting to 1000 [ 136.497362][ T7039] lo speed is unknown, defaulting to 1000 [ 137.992711][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.166635][ T5925] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.191508][ T5925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.239616][ T5925] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.292813][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.302514][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.336295][ T5925] usb 6-1: Product: syz [ 138.350024][ T5925] usb 6-1: Manufacturer: syz [ 138.368424][ T5925] usb 6-1: SerialNumber: syz [ 138.835253][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 138.835267][ T30] audit: type=1400 audit(1768858053.943:562): avc: denied { write } for pid=7049 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.887299][ T30] audit: type=1400 audit(1768858053.971:563): avc: denied { nlmsg_write } for pid=7049 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.111023][ T30] audit: type=1400 audit(1768858054.205:564): avc: denied { read } for pid=7092 comm="syz.2.273" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 139.450429][ T7101] : entered promiscuous mode [ 139.794965][ T30] audit: type=1400 audit(1768858054.233:565): avc: denied { open } for pid=7092 comm="syz.2.273" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 139.892926][ T30] audit: type=1400 audit(1768858054.485:566): avc: denied { mount } for pid=7095 comm="syz.0.274" name="/" dev="rpc_pipefs" ino=14107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 139.966650][ T5925] cdc_ncm 6-1:1.0: bind() failure [ 139.975634][ T5925] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 139.986077][ T5925] cdc_ncm 6-1:1.1: bind() failure [ 140.405055][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 140.411219][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 140.499005][ T7115] ceph: No mds server is up or the cluster is laggy [ 141.015241][ T30] audit: type=1400 audit(1768858055.982:567): avc: denied { ioctl } for pid=7140 comm="syz.2.276" path="socket:[14138]" dev="sockfs" ino=14138 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.277298][ T7149] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 141.295786][ T7149] netlink: 'syz.1.277': attribute type 2 has an invalid length. [ 141.327052][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'. [ 141.426453][ T5883] usb 6-1: USB disconnect, device number 3 [ 141.586705][ T30] audit: type=1400 audit(1768858056.524:568): avc: denied { write } for pid=7176 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.726094][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 141.792142][ T7172] openvswitch: netlink: Flow key attr not present in new flow. [ 141.893898][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 142.044989][ T5883] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.097819][ T5925] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.110829][ T5876] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 142.241042][ T5883] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.261400][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.285576][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.373292][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 142.373293][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.390889][ T5883] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.401084][ T5876] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 142.427601][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.435986][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.467052][ T5883] usb 2-1: Product: syz [ 142.468667][ T5925] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 142.481673][ T5876] usb 5-1: Product: syz [ 142.488415][ T5876] usb 5-1: Manufacturer: syz [ 142.493010][ T5883] usb 2-1: Manufacturer: syz [ 142.508903][ T5876] usb 5-1: SerialNumber: syz [ 142.517933][ T5883] cdc_wdm 2-1:1.0: skipping garbage [ 142.518597][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.551643][ T5876] usb 5-1: config 0 descriptor?? [ 142.558470][ T5883] cdc_wdm 2-1:1.0: skipping garbage [ 142.561632][ T5925] usb 6-1: config 0 descriptor?? [ 142.572270][ T5883] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 142.599281][ T5925] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 142.604141][ T5876] usb 5-1: interface 1 not found [ 142.742356][ T5876] usb 2-1: USB disconnect, device number 15 [ 142.810859][ T5883] usb 5-1: USB disconnect, device number 19 [ 143.016106][ T5925] gspca_sonixj: reg_r err -71 [ 143.025072][ T5925] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 143.054997][ T5925] usb 6-1: USB disconnect, device number 4 [ 143.447664][ T7233] syz_tun: entered allmulticast mode [ 143.556809][ T7231] syz_tun: left allmulticast mode [ 143.813969][ T30] audit: type=1400 audit(1768858058.601:569): avc: denied { accept } for pid=7239 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.002889][ T7253] netlink: 172 bytes leftover after parsing attributes in process `syz.1.297'. [ 144.305441][ T7257] batadv_slave_0: entered promiscuous mode [ 144.563651][ T7257] batman_adv: batadv0: Adding interface: macsec1 [ 144.572270][ T7257] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.629824][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.631265][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.668914][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.689280][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.702583][ T7257] batman_adv: batadv0: Interface activated: macsec1 [ 144.877405][ T5883] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 145.092545][ T5883] usb 5-1: config index 0 descriptor too short (expected 27, got 18) [ 145.102202][ T5883] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 145.110769][ T5883] usb 5-1: config 0 has no interface number 0 [ 145.125609][ T5883] usb 5-1: config 0 interface 148 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.146885][ T5883] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 145.572522][ T30] audit: type=1400 audit(1768858059.911:570): avc: denied { create } for pid=7273 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.589604][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.618141][ T5883] usb 5-1: Product: syz [ 145.622479][ T5883] usb 5-1: Manufacturer: syz [ 145.627128][ T5883] usb 5-1: SerialNumber: syz [ 145.636954][ T5883] usb 5-1: config 0 descriptor?? [ 145.648316][ T5883] kobil_sct 5-1:0.148: required endpoints missing [ 145.685104][ T30] audit: type=1400 audit(1768858059.920:571): avc: denied { write } for pid=7273 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.860228][ T5883] usb 5-1: USB disconnect, device number 20 [ 146.049433][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.309'. [ 146.309921][ T974] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 146.471965][ T974] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.483828][ T974] usb 6-1: not running at top speed; connect to a high speed hub [ 146.503038][ T974] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 146.523837][ T974] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.552537][ T974] usb 6-1: config 1 interface 0 has no altsetting 0 [ 146.567188][ T974] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.40 [ 146.576271][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.586073][ T974] usb 6-1: Product: 喌堫뉡堒救配焲腞斲鲂挶ᮭ튲窻㼚ꯛ谮镗뫣첉㾄꣮ꢕኵ蠙蝅턢쪎웠˪኉쑕ƬᏘ퉕隓钯ﴨ꾢ꐟ䬹⩨⧆鱇楷«㴿૯纋ゝಭㅄﻻꤌ嚞捝㐷䑐Ṏ踉󧒵 [ 146.636452][ T974] usb 6-1: SerialNumber: syz [ 146.652940][ T7290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.969702][ T974] usbhid 6-1:1.0: can't add hid device: -71 [ 146.975755][ T974] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 146.986563][ T974] usb 6-1: USB disconnect, device number 5 [ 147.467923][ T7327] sp0: Synchronizing with TNC [ 147.516262][ T30] audit: type=1400 audit(1768858062.062:572): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 147.560566][ T7330] [U] [ 147.709126][ T30] audit: type=1400 audit(1768858062.240:573): avc: denied { mounton } for pid=7333 comm="syz.5.325" path="/14/file1" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 147.709175][ T7335] 9p: Bad value for 'rfdno' [ 148.614807][ T30] audit: type=1400 audit(1768858063.091:574): avc: denied { write } for pid=7340 comm="syz.5.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.532989][ T30] audit: type=1400 audit(1768858063.933:575): avc: denied { read write } for pid=7358 comm="syz.2.332" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.655897][ T30] audit: type=1400 audit(1768858063.942:576): avc: denied { open } for pid=7358 comm="syz.2.332" path="/dev/input/mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.026177][ T7371] 9p: Could not find request transport:  [ 150.180028][ T30] audit: type=1400 audit(1768858064.531:577): avc: denied { map } for pid=7379 comm="syz.0.339" path="socket:[15520]" dev="sockfs" ino=15520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.261448][ T30] audit: type=1400 audit(1768858064.531:578): avc: denied { read accept } for pid=7379 comm="syz.0.339" path="socket:[15520]" dev="sockfs" ino=15520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.372575][ T5925] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 150.864107][ T5925] usb 5-1: device descriptor read/64, error -71 [ 151.517946][ T7406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.698912][ T7415] FAULT_INJECTION: forcing a failure. [ 151.698912][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 151.914100][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.4.350 Not tainted syzkaller #0 PREEMPT(full) [ 151.914124][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.914133][ T7415] Call Trace: [ 151.914139][ T7415] [ 151.914145][ T7415] dump_stack_lvl+0x16c/0x1f0 [ 151.914174][ T7415] should_fail_ex+0x512/0x640 [ 151.914190][ T7415] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 151.914209][ T7415] should_failslab+0xc2/0x120 [ 151.914234][ T7415] kmem_cache_alloc_noprof+0x83/0x770 [ 151.914253][ T7415] ? skb_clone+0x190/0x3f0 [ 151.914276][ T7415] ? skb_clone+0x190/0x3f0 [ 151.914294][ T7415] skb_clone+0x190/0x3f0 [ 151.914313][ T7415] netlink_deliver_tap+0xabd/0xd30 [ 151.914341][ T7415] netlink_unicast+0x64c/0x870 [ 151.914367][ T7415] ? __pfx_netlink_unicast+0x10/0x10 [ 151.914399][ T7415] netlink_sendmsg+0x8c8/0xdd0 [ 151.914426][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.914458][ T7415] ____sys_sendmsg+0xa5d/0xc30 [ 151.914483][ T7415] ? copy_msghdr_from_user+0x10a/0x160 [ 151.914502][ T7415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.914537][ T7415] ___sys_sendmsg+0x134/0x1d0 [ 151.914558][ T7415] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.914609][ T7415] __sys_sendmsg+0x16d/0x220 [ 151.914629][ T7415] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.914664][ T7415] do_syscall_64+0xcd/0xf80 [ 151.914690][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.914707][ T7415] RIP: 0033:0x7facef38f749 [ 151.914720][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.914736][ T7415] RSP: 002b:00007facf0296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.914752][ T7415] RAX: ffffffffffffffda RBX: 00007facef5e5fa0 RCX: 00007facef38f749 [ 151.914762][ T7415] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 151.914772][ T7415] RBP: 00007facf0296090 R08: 0000000000000000 R09: 0000000000000000 [ 151.914782][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.914791][ T7415] R13: 00007facef5e6038 R14: 00007facef5e5fa0 R15: 00007ffcfc4157e8 [ 151.914815][ T7415] [ 151.914903][ T7415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.911988][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.949134][ T7427] batadv_slave_0: entered promiscuous mode [ 153.339272][ T30] audit: type=1400 audit(1768858067.478:579): avc: denied { setopt } for pid=7429 comm="syz.5.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.901943][ T30] audit: type=1400 audit(1768858068.039:580): avc: denied { ioctl } for pid=7442 comm="syz.2.357" path="socket:[14834]" dev="sockfs" ino=14834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.149754][ T7449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.157032][ T7449] IPv6: NLM_F_CREATE should be set when creating new route [ 154.164245][ T7449] IPv6: NLM_F_CREATE should be set when creating new route [ 154.171478][ T7449] IPv6: NLM_F_CREATE should be set when creating new route [ 155.134627][ T7469] netlink: 168 bytes leftover after parsing attributes in process `syz.4.365'. [ 155.143777][ T7469] netlink: 168 bytes leftover after parsing attributes in process `syz.4.365'. [ 155.291489][ T30] audit: type=1400 audit(1768858069.330:581): avc: denied { ioctl } for pid=7467 comm="syz.2.366" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.424220][ T30] audit: type=1400 audit(1768858069.367:582): avc: denied { set_context_mgr } for pid=7467 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.532305][ T30] audit: type=1400 audit(1768858069.452:583): avc: denied { map } for pid=7467 comm="syz.2.366" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.956463][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 155.985412][ T7468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.366'. [ 156.022491][ T30] audit: type=1400 audit(1768858069.947:584): avc: denied { call } for pid=7467 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.045905][ T30] audit: type=1400 audit(1768858070.013:585): avc: denied { accept } for pid=7470 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.826185][ T30] audit: type=1400 audit(1768858070.340:586): avc: denied { write } for pid=7470 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.914998][ T5830] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 157.103690][ T5830] usb 2-1: device descriptor read/64, error -71 [ 157.411120][ T5830] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 157.620895][ T5830] usb 2-1: device descriptor read/64, error -71 [ 157.738559][ T5830] usb usb2-port1: attempt power cycle [ 158.123840][ T5830] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.166182][ T5830] usb 2-1: device descriptor read/8, error -71 [ 158.287635][ T30] audit: type=1400 audit(1768858072.146:587): avc: denied { create } for pid=7512 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 158.444177][ T5830] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 158.501310][ T5830] usb 2-1: device descriptor read/8, error -71 [ 158.521843][ T7520] fuse: Bad value for 'fd' [ 158.553906][ T30] audit: type=1400 audit(1768858072.379:588): avc: denied { ioctl } for pid=7519 comm="syz.0.380" path="socket:[15805]" dev="sockfs" ino=15805 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.582408][ T7520] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 158.667094][ T5830] usb usb2-port1: unable to enumerate USB device [ 159.005790][ T7530] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 159.448487][ T7536] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 159.553676][ T30] audit: type=1400 audit(1768858073.306:589): avc: denied { ioctl } for pid=7533 comm="syz.4.386" path="socket:[14960]" dev="sockfs" ino=14960 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 159.909610][ T30] audit: type=1400 audit(1768858073.661:590): avc: denied { ioctl } for pid=7538 comm="syz.0.387" path="socket:[14968]" dev="sockfs" ino=14968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.336131][ T7544] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.376035][ T7561] FAULT_INJECTION: forcing a failure. [ 160.376035][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 160.442944][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.1.392 Not tainted syzkaller #0 PREEMPT(full) [ 160.442970][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.442980][ T7561] Call Trace: [ 160.442985][ T7561] [ 160.442992][ T7561] dump_stack_lvl+0x16c/0x1f0 [ 160.443027][ T7561] should_fail_ex+0x512/0x640 [ 160.443043][ T7561] ? __kmalloc_cache_noprof+0x5f/0x800 [ 160.443063][ T7561] should_failslab+0xc2/0x120 [ 160.443085][ T7561] __kmalloc_cache_noprof+0x80/0x800 [ 160.443102][ T7561] ? __asan_memcpy+0x3c/0x60 [ 160.443117][ T7561] ? ip6_route_multipath_add+0x15b4/0x1c30 [ 160.443140][ T7561] ? ip6_route_info_create+0x71b/0xaa0 [ 160.443165][ T7561] ? ip6_route_multipath_add+0x15b4/0x1c30 [ 160.443185][ T7561] ip6_route_multipath_add+0x15b4/0x1c30 [ 160.443212][ T7561] ? __pfx_rtm_to_fib6_config+0x10/0x10 [ 160.443235][ T7561] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 160.443273][ T7561] ? avc_has_perm_noaudit+0x117/0x3b0 [ 160.443296][ T7561] ? avc_has_perm_noaudit+0x149/0x3b0 [ 160.443315][ T7561] ? inet6_rtm_newroute+0xe4/0x1a0 [ 160.443333][ T7561] inet6_rtm_newroute+0xe4/0x1a0 [ 160.443354][ T7561] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 160.443373][ T7561] ? __lock_acquire+0x436/0x2890 [ 160.443406][ T7561] ? find_held_lock+0x2b/0x80 [ 160.443430][ T7561] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 160.443450][ T7561] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 160.443468][ T7561] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 160.443491][ T7561] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 160.443511][ T7561] rtnetlink_rcv_msg+0x95e/0xe90 [ 160.443534][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.443561][ T7561] ? ref_tracker_free+0x37c/0x830 [ 160.443581][ T7561] netlink_rcv_skb+0x158/0x420 [ 160.443603][ T7561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.443626][ T7561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.443656][ T7561] ? netlink_deliver_tap+0x1ae/0xd30 [ 160.443683][ T7561] netlink_unicast+0x5aa/0x870 [ 160.443709][ T7561] ? __pfx_netlink_unicast+0x10/0x10 [ 160.443740][ T7561] netlink_sendmsg+0x8c8/0xdd0 [ 160.443767][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.443797][ T7561] ____sys_sendmsg+0xa5d/0xc30 [ 160.443822][ T7561] ? copy_msghdr_from_user+0x10a/0x160 [ 160.443840][ T7561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.443875][ T7561] ___sys_sendmsg+0x134/0x1d0 [ 160.443896][ T7561] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.443945][ T7561] __sys_sendmsg+0x16d/0x220 [ 160.443965][ T7561] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.444003][ T7561] do_syscall_64+0xcd/0xf80 [ 160.444034][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.444051][ T7561] RIP: 0033:0x7fdeebb8f749 [ 160.444064][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.444079][ T7561] RSP: 002b:00007fdeeca61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.444096][ T7561] RAX: ffffffffffffffda RBX: 00007fdeebde5fa0 RCX: 00007fdeebb8f749 [ 160.444106][ T7561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 160.444116][ T7561] RBP: 00007fdeeca61090 R08: 0000000000000000 R09: 0000000000000000 [ 160.444125][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.444134][ T7561] R13: 00007fdeebde6038 R14: 00007fdeebde5fa0 R15: 00007fffad710418 [ 160.444158][ T7561] [ 160.891409][ T7565] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 161.473131][ T7567] tipc: Started in network mode [ 161.478057][ T7567] tipc: Node identity 9a3ba2f29034, cluster identity 4711 [ 161.487066][ T7567] tipc: Enabled bearer , priority 0 [ 161.495056][ T7567] syzkaller0: entered promiscuous mode [ 161.500529][ T7567] syzkaller0: entered allmulticast mode [ 161.770171][ T7567] tipc: Resetting bearer [ 161.861399][ T30] audit: type=1400 audit(1768858075.485:591): avc: denied { write } for pid=7574 comm="syz.5.395" path="socket:[14998]" dev="sockfs" ino=14998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.715322][ T7559] tipc: Resetting bearer [ 162.775487][ T7582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.945782][ T7559] tipc: Disabling bearer [ 162.958442][ T5830] tipc: Node number set to 168796914 [ 163.192370][ T7589] mac80211_hwsim hwsim5 4: renamed from wlan1 (while UP) [ 163.727861][ T30] audit: type=1400 audit(1768858077.234:592): avc: denied { bind } for pid=7594 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.828179][ T30] audit: type=1400 audit(1768858077.253:593): avc: denied { connect } for pid=7594 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.688293][ T7603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.717099][ T7603] FAULT_INJECTION: forcing a failure. [ 164.717099][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 164.751233][ T7603] CPU: 0 UID: 0 PID: 7603 Comm: syz.2.404 Not tainted syzkaller #0 PREEMPT(full) [ 164.751256][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.751264][ T7603] Call Trace: [ 164.751270][ T7603] [ 164.751275][ T7603] dump_stack_lvl+0x16c/0x1f0 [ 164.751301][ T7603] should_fail_ex+0x512/0x640 [ 164.751314][ T7603] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 164.751334][ T7603] should_failslab+0xc2/0x120 [ 164.751354][ T7603] kmem_cache_alloc_node_noprof+0x86/0x800 [ 164.751369][ T7603] ? __alloc_skb+0x156/0x410 [ 164.751382][ T7603] ? __alloc_skb+0x35d/0x410 [ 164.751398][ T7603] ? __alloc_skb+0x156/0x410 [ 164.751410][ T7603] __alloc_skb+0x156/0x410 [ 164.751423][ T7603] ? __alloc_skb+0x35d/0x410 [ 164.751437][ T7603] ? __pfx___alloc_skb+0x10/0x10 [ 164.751450][ T7603] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 164.751477][ T7603] netlink_ack+0x15d/0xb80 [ 164.751505][ T7603] netlink_rcv_skb+0x332/0x420 [ 164.751525][ T7603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.751545][ T7603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.751571][ T7603] ? netlink_deliver_tap+0x1ae/0xd30 [ 164.751594][ T7603] netlink_unicast+0x5aa/0x870 [ 164.751617][ T7603] ? __pfx_netlink_unicast+0x10/0x10 [ 164.751644][ T7603] netlink_sendmsg+0x8c8/0xdd0 [ 164.751667][ T7603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.751696][ T7603] ____sys_sendmsg+0xa5d/0xc30 [ 164.751717][ T7603] ? copy_msghdr_from_user+0x10a/0x160 [ 164.751740][ T7603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.751771][ T7603] ___sys_sendmsg+0x134/0x1d0 [ 164.751789][ T7603] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.751833][ T7603] __sys_sendmsg+0x16d/0x220 [ 164.751850][ T7603] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.751877][ T7603] do_syscall_64+0xcd/0xf80 [ 164.751900][ T7603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.751916][ T7603] RIP: 0033:0x7f9b2e18f749 [ 164.751929][ T7603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.751943][ T7603] RSP: 002b:00007f9b2ef3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.751958][ T7603] RAX: ffffffffffffffda RBX: 00007f9b2e3e5fa0 RCX: 00007f9b2e18f749 [ 164.751968][ T7603] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 164.751976][ T7603] RBP: 00007f9b2ef3e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.751985][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.751993][ T7603] R13: 00007f9b2e3e6038 R14: 00007f9b2e3e5fa0 R15: 00007ffd0cb4be88 [ 164.752017][ T7603] [ 165.160469][ T30] audit: type=1400 audit(1768858078.572:594): avc: denied { ioctl } for pid=7607 comm="syz.2.406" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 165.785813][ T30] audit: type=1400 audit(1768858078.796:595): avc: denied { write } for pid=7607 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.998548][ T7624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.005797][ T7624] IPv6: NLM_F_CREATE should be set when creating new route [ 167.905190][ T30] audit: type=1400 audit(1768858081.144:596): avc: denied { setopt } for pid=7648 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.935372][ T30] audit: type=1400 audit(1768858081.163:597): avc: denied { ioctl } for pid=7648 comm="syz.4.413" path="socket:[15117]" dev="sockfs" ino=15117 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 168.095567][ T30] audit: type=1400 audit(1768858081.163:598): avc: denied { ioctl } for pid=7648 comm="syz.4.413" path="socket:[15111]" dev="sockfs" ino=15111 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.792314][ T5925] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 168.824527][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.942545][ T5925] usb 2-1: device descriptor read/64, error -71 [ 169.009599][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.028610][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.207055][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.221985][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 169.320139][ T5925] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 169.508004][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.527382][ T5925] usb 2-1: device descriptor read/64, error -71 [ 169.616941][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.639316][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.655622][ T10] usb 5-1: Product: syz [ 169.665442][ T10] usb 5-1: Manufacturer: syz [ 169.681943][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 169.692567][ T5925] usb usb2-port1: attempt power cycle [ 169.703492][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 169.716736][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 169.728261][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 169.995609][ T30] audit: type=1400 audit(1768858083.090:599): avc: denied { setopt } for pid=7675 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.075392][ T5925] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 170.119217][ T5925] usb 2-1: device descriptor read/8, error -71 [ 170.141043][ T7678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.148243][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 170.155448][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 170.162632][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 170.379191][ T30] audit: type=1400 audit(1768858083.455:600): avc: denied { read write } for pid=7655 comm="syz.4.414" name="cdc-wdm0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 170.438721][ T5925] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 170.471310][ T5925] usb 2-1: device descriptor read/8, error -71 [ 170.487553][ T30] audit: type=1400 audit(1768858083.455:601): avc: denied { open } for pid=7655 comm="syz.4.414" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 170.503316][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.517898][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.525587][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.532188][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.538429][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.545013][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.551401][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.557979][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.564328][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.570903][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.577720][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.584308][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.590715][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.597298][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.603511][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.610087][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.616307][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.622884][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.629104][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 170.635680][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 170.670688][ T5925] usb usb2-port1: unable to enumerate USB device [ 170.672577][ T5971] usb 5-1: USB disconnect, device number 23 [ 170.677083][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 171.581461][ T30] audit: type=1400 audit(1768858084.568:602): avc: denied { setopt } for pid=7696 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.979705][ T7705] binder: 7704:7705 ioctl c00c620f 0 returned -14 [ 173.604911][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 173.614846][ T7732] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 173.635106][ T5925] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 173.716549][ T7734] misc userio: No port type given on /dev/userio [ 174.077895][ T30] audit: type=1400 audit(1768858086.560:603): avc: denied { create } for pid=7729 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.103291][ T30] audit: type=1400 audit(1768858086.560:604): avc: denied { setopt } for pid=7729 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.170636][ T30] audit: type=1400 audit(1768858086.934:605): avc: denied { create } for pid=7727 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 174.256684][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.267692][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.286235][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.335251][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.362955][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.379202][ T5925] usb 2-1: config 0 descriptor?? [ 174.639346][ T7750] libceph: resolve '. [ 174.639346][ T7750] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 174.639346][ T7750] ' (ret=-3): failed [ 175.201258][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.454070][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 175.460105][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.901346][ T5830] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 175.925090][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.926458][ T5925] usb 2-1: USB disconnect, device number 24 [ 176.191339][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.223527][ T5830] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 176.232565][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.327338][ T7772] overlayfs: failed to clone upperpath [ 176.688811][ T5830] usb 5-1: config 0 descriptor?? [ 176.694387][ T7771] trusted_key: encrypted_key: insufficient parameters specified [ 177.079820][ T5830] usbhid 5-1:0.0: can't add hid device: -71 [ 177.085759][ T5830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 177.098860][ T5830] usb 5-1: USB disconnect, device number 24 [ 178.232350][ T30] audit: type=1400 audit(1768858090.797:606): avc: denied { getopt } for pid=7794 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.536930][ T7802] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.646341][ T7809] overlayfs: conflicting lowerdir path [ 180.658860][ T5942] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 180.771942][ T30] audit: type=1400 audit(1768858093.173:607): avc: denied { read } for pid=7835 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.840688][ T5942] usb 2-1: device descriptor read/64, error -71 [ 181.087665][ T7843] mmap: syz.5.465 (7843) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.105009][ T5942] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 181.247357][ T5942] usb 2-1: device descriptor read/64, error -71 [ 181.364780][ T5942] usb usb2-port1: attempt power cycle [ 181.727921][ T5942] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 181.761045][ T5942] usb 2-1: device descriptor read/8, error -71 [ 182.038077][ T30] audit: type=1400 audit(1768858094.296:608): avc: denied { ioctl } for pid=7846 comm="syz.4.466" path="socket:[16529]" dev="sockfs" ino=16529 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 182.358649][ T5942] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 182.380536][ T5942] usb 2-1: device descriptor read/8, error -71 [ 182.499687][ T5942] usb usb2-port1: unable to enumerate USB device [ 182.707118][ T3941] wlan1: Trigger new scan to find an IBSS to join [ 182.820505][ T7852] netlink: 168 bytes leftover after parsing attributes in process `syz.4.467'. [ 182.832696][ T7852] netlink: 168 bytes leftover after parsing attributes in process `syz.4.467'. [ 183.120987][ T7854] overlayfs: failed to clone upperpath [ 183.133095][ T7854] overlayfs: failed to clone upperpath [ 183.672369][ T5883] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.744737][ T7867] overlayfs: missing 'lowerdir' [ 184.389847][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 184.402096][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.424082][ T5883] usb 5-1: can't read configurations, error -61 [ 184.459958][ T7881] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 184.486421][ T7881] CIFS mount error: No usable UNC path provided in device string! [ 184.486421][ T7881] [ 184.496493][ T7881] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.600441][ T5883] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 184.685011][ T7886] mac80211_hwsim hwsim7 4: renamed from wlan1 (while UP) [ 184.827248][ T30] audit: type=1326 audit(1768858096.962:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.1.476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeebb8f749 code=0x0 [ 184.870958][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 184.893336][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.911751][ T5883] usb 5-1: can't read configurations, error -61 [ 184.932475][ T30] audit: type=1400 audit(1768858097.065:610): avc: denied { block_suspend } for pid=7887 comm="syz.1.476" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.933536][ T5883] usb usb5-port1: attempt power cycle [ 184.967692][ T5830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 185.159645][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 185.183473][ T5830] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 185.213998][ T5830] usb 6-1: config 0 has no interface number 0 [ 185.220064][ T5830] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 185.245073][ T5830] usb 6-1: config 0 interface 196 has no altsetting 0 [ 185.258290][ T5830] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 185.272154][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.289240][ T5830] usb 6-1: Product: syz [ 185.293400][ T5830] usb 6-1: Manufacturer: syz [ 185.297993][ T5830] usb 6-1: SerialNumber: syz [ 185.317081][ T5830] usb 6-1: config 0 descriptor?? [ 185.328395][ T7885] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 185.416213][ T5883] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 185.437966][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 185.447562][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.457674][ T5883] usb 5-1: can't read configurations, error -61 [ 185.554485][ T7902] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 185.598003][ T5883] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 185.619772][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 185.626665][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.634485][ T5883] usb 5-1: can't read configurations, error -61 [ 185.641113][ T5883] usb usb5-port1: unable to enumerate USB device [ 186.012096][ T5830] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 186.025379][ T5830] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 186.035615][ T5830] usb 6-1: USB disconnect, device number 6 [ 186.068348][ T5942] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 186.080144][ T5830] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 186.228689][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 186.235551][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.244314][ T5942] usb 2-1: config 4 has an invalid interface number: 98 but max is 2 [ 186.252569][ T5942] usb 2-1: config 4 has an invalid interface number: 11 but max is 2 [ 186.260850][ T5942] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 186.269536][ T5942] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 186.279634][ T5942] usb 2-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 186.288594][ T5942] usb 2-1: config 4 has no interface number 0 [ 186.294717][ T5942] usb 2-1: config 4 has no interface number 1 [ 186.300788][ T5942] usb 2-1: config 4 interface 98 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 186.312239][ T5942] usb 2-1: config 4 interface 98 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 186.323269][ T5942] usb 2-1: config 4 interface 98 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 186.334920][ T5942] usb 2-1: config 4 interface 98 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 186.348059][ T5942] usb 2-1: config 4 interface 11 altsetting 31 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 186.359126][ T5942] usb 2-1: config 4 interface 11 altsetting 31 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.372299][ T5942] usb 2-1: config 4 interface 98 has no altsetting 0 [ 186.379322][ T5942] usb 2-1: config 4 interface 11 has no altsetting 0 [ 186.403410][ T5942] usb 2-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=5b.73 [ 186.421233][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.429229][ T5942] usb 2-1: Product: syz [ 186.437001][ T5942] usb 2-1: Manufacturer: syz [ 186.446080][ T5942] usb 2-1: SerialNumber: syz [ 186.717976][ T5942] ums-usbat 2-1:4.98: USB Mass Storage device detected [ 186.750347][ T5942] ums-usbat 2-1:4.98: Quirks match for vid 04e6 pid 1010: 1 [ 187.015938][ T5942] ums-usbat 2-1:4.11: USB Mass Storage device detected [ 187.038343][ T5942] ums-usbat 2-1:4.11: Quirks match for vid 04e6 pid 1010: 1 [ 187.052897][ T6726] wlan1: Trigger new scan to find an IBSS to join [ 187.085655][ T5942] usb 2-1: USB disconnect, device number 29 [ 187.139650][ T5925] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 187.283506][ T7924] capability: warning: `syz.1.487' uses 32-bit capabilities (legacy support in use) [ 187.320767][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.328909][ T5925] usb 5-1: not running at top speed; connect to a high speed hub [ 187.337560][ T5925] usb 5-1: config 9 has an invalid interface number: 65 but max is 1 [ 187.345753][ T5925] usb 5-1: config 9 has an invalid interface number: 236 but max is 1 [ 187.354092][ T5925] usb 5-1: config 9 has no interface number 0 [ 187.360209][ T5925] usb 5-1: config 9 has no interface number 1 [ 187.366406][ T5925] usb 5-1: config 9 interface 65 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 187.377215][ T5925] usb 5-1: config 9 interface 65 has no altsetting 0 [ 187.383942][ T5925] usb 5-1: config 9 interface 236 has no altsetting 0 [ 187.396704][ T5925] usb 5-1: New USB device found, idVendor=2357, idProduct=0115, bcdDevice=3f.8b [ 187.415899][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.428259][ T5925] usb 5-1: Product: syz [ 187.433216][ T5925] usb 5-1: Manufacturer: syz [ 187.438204][ T5925] usb 5-1: SerialNumber: syz [ 187.679058][ T5925] usb 5-1: USB disconnect, device number 29 [ 187.833011][ T7932] netlink: 'syz.5.489': attribute type 2 has an invalid length. [ 188.553121][ T3840] wlan1: Creating new IBSS network, BSSID aa:f0:25:fb:f0:2b [ 188.719569][ T5925] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 188.901905][ T30] audit: type=1326 audit(1768858100.778:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 188.952014][ T30] audit: type=1326 audit(1768858100.778:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.091647][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.144870][ T30] audit: type=1326 audit(1768858100.778:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.168976][ T5925] usb 5-1: config 0 has no interface number 0 [ 189.306955][ T5925] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 189.400512][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.426125][ T30] audit: type=1326 audit(1768858100.778:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.531037][ T5925] usb 5-1: Product: syz [ 189.578099][ T5925] usb 5-1: Manufacturer: syz [ 189.655823][ T5925] usb 5-1: SerialNumber: syz [ 189.684468][ T5925] usb 5-1: config 0 descriptor?? [ 189.693308][ T30] audit: type=1326 audit(1768858100.778:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.764985][ T30] audit: type=1326 audit(1768858100.778:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.842880][ T30] audit: type=1326 audit(1768858100.778:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 189.956054][ T5925] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 189.975451][ T30] audit: type=1326 audit(1768858100.778:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9b2e18f749 code=0x7ffc0000 [ 190.022381][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.045411][ T5925] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 190.077881][ T5925] usb 5-1: media controller created [ 190.088876][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.173252][ T5925] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 190.182164][ T7956] tipc: Started in network mode [ 190.187107][ T7956] tipc: Node identity ac14140f, cluster identity 4711 [ 190.194326][ T7956] tipc: New replicast peer: 255.255.255.255 [ 190.200877][ T7956] tipc: Enabled bearer , priority 10 [ 190.221957][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 190.251937][ T7956] tipc: Disabling bearer [ 190.277404][ T7956] 9p: Bad value for 'rfdno' [ 190.559489][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 190.560339][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 190.565512][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 190.576509][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.586703][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 190.765827][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.827946][ T5925] usb 5-1: USB disconnect, device number 30 [ 191.189114][ T5942] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 191.477781][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 191.491827][ T5942] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.509214][ T5942] usb 6-1: config 0 has no interface number 0 [ 191.524469][ T5942] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.542162][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.573074][ T5942] usb 6-1: Product: syz [ 191.580841][ T5942] usb 6-1: SerialNumber: syz [ 191.598915][ T5942] usb 6-1: config 0 descriptor?? [ 191.608850][ T5942] cm109 6-1:0.8: invalid payload size 20, expected 4 [ 191.620362][ T5942] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input12 [ 191.649307][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 191.649314][ T30] audit: type=1400 audit(1768858103.351:628): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2926 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.825973][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.499'. [ 192.170219][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 192.181689][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 192.183421][ T5883] usb 6-1: USB disconnect, device number 7 [ 192.188641][ C0] ------------[ cut here ]------------ [ 192.200056][ C0] URB ffff88802a1a0b00 submitted while active [ 192.206109][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15a0/0x1970, CPU#0: syz.1.493/7946 [ 192.216679][ C0] Modules linked in: [ 192.220653][ C0] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT(full) [ 192.229836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.239885][ C0] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 192.245503][ C0] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 44 a8 fa 48 8d 3d 40 cf 7d 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 44 a8 fa 0f 1f [ 192.265085][ C0] RSP: 0018:ffffc90000007a90 EFLAGS: 00010083 [ 192.271124][ C0] RAX: 0000000000003e2a RBX: ffff88802a1a0b00 RCX: ffffc90002151000 [ 192.279069][ C0] RDX: 0000000000040000 RSI: ffff88802a1a0b00 RDI: ffffffff909489e0 [ 192.287022][ C0] RBP: ffff88803456f058 R08: 0000000000000001 R09: 0000000000000000 [ 192.294975][ C0] R10: 0000000000000001 R11: ffff888028380b30 R12: 0000000000000001 [ 192.302928][ C0] R13: ffff88803456f057 R14: ffff88807991b2a0 R15: 000000000000000f [ 192.310881][ C0] FS: 0000555573b4d500(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000 [ 192.319797][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.326367][ C0] CR2: 00007f7da41f9f98 CR3: 0000000029bd8000 CR4: 00000000003526f0 [ 192.334323][ C0] Call Trace: [ 192.337586][ C0] [ 192.340412][ C0] ? find_held_lock+0x2b/0x80 [ 192.345082][ C0] ? __pfx____ratelimit+0x10/0x10 [ 192.350096][ C0] cm109_urb_irq_callback+0x2ed/0xbb0 [ 192.355458][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 192.360817][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 192.366177][ C0] dummy_timer+0x1809/0x3ad0 [ 192.370763][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 192.375781][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 192.381403][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.387200][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 192.392821][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 192.398789][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 192.403712][ C0] ? rcu_is_watching+0x12/0xc0 [ 192.408455][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.414247][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 192.419171][ C0] __hrtimer_run_queues+0x202/0xc40 [ 192.424367][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 192.430072][ C0] ? read_tsc+0x9/0x20 [ 192.434134][ C0] hrtimer_run_softirq+0x17d/0x350 [ 192.439234][ C0] handle_softirqs+0x219/0x950 [ 192.443989][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 192.449265][ C0] __irq_exit_rcu+0x109/0x170 [ 192.453930][ C0] irq_exit_rcu+0x9/0x30 [ 192.458166][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 192.463783][ C0] [ 192.466694][ C0] [ 192.469608][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.475658][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 192.482064][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 64 1e f6 48 89 df e8 5e b7 1e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 b6 0e f6 65 8b 05 9e 4b 37 08 85 c0 74 16 5b [ 192.501673][ C0] RSP: 0018:ffffc90016bdfc28 EFLAGS: 00000246 [ 192.507729][ C0] RAX: 0000000000000002 RBX: ffffffff9ae35208 RCX: ffffffff81c722df [ 192.515682][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf385 RDI: ffffffff8bf2b280 [ 192.523634][ C0] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000001 [ 192.531612][ C0] R10: ffffffff9088cbd7 R11: ffff888028380b30 R12: 1ffff92002d7bf8c [ 192.539568][ C0] R13: ffffc90016bdfd68 R14: 0000000000000000 R15: ffffffff9ae35208 [ 192.547526][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 192.553501][ C0] __debug_object_init+0x2de/0x3d0 [ 192.558603][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 192.564231][ C0] hrtimer_nanosleep+0xa0/0x380 [ 192.569080][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 192.574527][ C0] ? get_timespec64+0x147/0x240 [ 192.579367][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 192.584551][ C0] common_nsleep+0xa1/0xd0 [ 192.588974][ C0] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 192.594595][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 192.600742][ C0] do_syscall_64+0xcd/0xf80 [ 192.605501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.611374][ C0] RIP: 0033:0x7fdeebbc2005 [ 192.615772][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 192.635366][ C0] RSP: 002b:00007fffad710510 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 192.643760][ C0] RAX: ffffffffffffffda RBX: 00007fdeebde5fa0 RCX: 00007fdeebbc2005 [ 192.651709][ C0] RDX: 00007fffad710550 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.659659][ C0] RBP: 00007fdeebde7da0 R08: 0000000000000000 R09: 00007fdeeca62000 [ 192.667609][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002de74 [ 192.675650][ C0] R13: 00007fdeebde6090 R14: ffffffffffffffff R15: 00007fffad710690 [ 192.683718][ C0] [ 192.686720][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.693980][ C0] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT(full) [ 192.703166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.713207][ C0] Call Trace: [ 192.716474][ C0] [ 192.719299][ C0] dump_stack_lvl+0x3d/0x1f0 [ 192.723878][ C0] vpanic+0x640/0x6f0 [ 192.727843][ C0] ? usb_submit_urb+0x15a0/0x1970 [ 192.732854][ C0] panic+0xca/0xd0 [ 192.736555][ C0] ? __pfx_panic+0x10/0x10 [ 192.740964][ C0] check_panic_on_warn+0xab/0xb0 [ 192.745893][ C0] __warn+0x108/0x3c0 [ 192.749862][ C0] __report_bug+0x2a0/0x520 [ 192.754349][ C0] ? usb_submit_urb+0x15a0/0x1970 [ 192.759360][ C0] ? __pfx___report_bug+0x10/0x10 [ 192.764374][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 192.769655][ C0] report_bug_entry+0xe1/0x290 [ 192.774577][ C0] ? usb_submit_urb+0x15a3/0x1970 [ 192.779588][ C0] handle_bug+0x18a/0x260 [ 192.783898][ C0] exc_invalid_op+0x17/0x50 [ 192.788383][ C0] asm_exc_invalid_op+0x1a/0x20 [ 192.793213][ C0] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 192.798846][ C0] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 44 a8 fa 48 8d 3d 40 cf 7d 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 44 a8 fa 0f 1f [ 192.818605][ C0] RSP: 0018:ffffc90000007a90 EFLAGS: 00010083 [ 192.824650][ C0] RAX: 0000000000003e2a RBX: ffff88802a1a0b00 RCX: ffffc90002151000 [ 192.832602][ C0] RDX: 0000000000040000 RSI: ffff88802a1a0b00 RDI: ffffffff909489e0 [ 192.840554][ C0] RBP: ffff88803456f058 R08: 0000000000000001 R09: 0000000000000000 [ 192.849025][ C0] R10: 0000000000000001 R11: ffff888028380b30 R12: 0000000000000001 [ 192.856977][ C0] R13: ffff88803456f057 R14: ffff88807991b2a0 R15: 000000000000000f [ 192.864939][ C0] ? find_held_lock+0x2b/0x80 [ 192.869603][ C0] ? __pfx____ratelimit+0x10/0x10 [ 192.874615][ C0] cm109_urb_irq_callback+0x2ed/0xbb0 [ 192.879975][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 192.885337][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 192.890518][ C0] dummy_timer+0x1809/0x3ad0 [ 192.895101][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 192.900111][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 192.905742][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.911533][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 192.917149][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 192.923115][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 192.928040][ C0] ? rcu_is_watching+0x12/0xc0 [ 192.932783][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 192.938572][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 192.943495][ C0] __hrtimer_run_queues+0x202/0xc40 [ 192.948688][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 192.954394][ C0] ? read_tsc+0x9/0x20 [ 192.958455][ C0] hrtimer_run_softirq+0x17d/0x350 [ 192.963558][ C0] handle_softirqs+0x219/0x950 [ 192.968313][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 192.973590][ C0] __irq_exit_rcu+0x109/0x170 [ 192.978253][ C0] irq_exit_rcu+0x9/0x30 [ 192.982480][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 192.988097][ C0] [ 192.991007][ C0] [ 192.993920][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.999880][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 193.006279][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 64 1e f6 48 89 df e8 5e b7 1e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 b6 0e f6 65 8b 05 9e 4b 37 08 85 c0 74 16 5b [ 193.025866][ C0] RSP: 0018:ffffc90016bdfc28 EFLAGS: 00000246 [ 193.031914][ C0] RAX: 0000000000000002 RBX: ffffffff9ae35208 RCX: ffffffff81c722df [ 193.039867][ C0] RDX: 0000000000000000 RSI: ffffffff8dacf385 RDI: ffffffff8bf2b280 [ 193.047825][ C0] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000001 [ 193.055775][ C0] R10: ffffffff9088cbd7 R11: ffff888028380b30 R12: 1ffff92002d7bf8c [ 193.063728][ C0] R13: ffffc90016bdfd68 R14: 0000000000000000 R15: ffffffff9ae35208 [ 193.071683][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 193.077657][ C0] __debug_object_init+0x2de/0x3d0 [ 193.082755][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 193.088386][ C0] hrtimer_nanosleep+0xa0/0x380 [ 193.093831][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 193.099278][ C0] ? get_timespec64+0x147/0x240 [ 193.104111][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 193.109295][ C0] common_nsleep+0xa1/0xd0 [ 193.113699][ C0] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 193.119317][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 193.125469][ C0] do_syscall_64+0xcd/0xf80 [ 193.129960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.135833][ C0] RIP: 0033:0x7fdeebbc2005 [ 193.140226][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 193.159812][ C0] RSP: 002b:00007fffad710510 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 193.168203][ C0] RAX: ffffffffffffffda RBX: 00007fdeebde5fa0 RCX: 00007fdeebbc2005 [ 193.176154][ C0] RDX: 00007fffad710550 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.184103][ C0] RBP: 00007fdeebde7da0 R08: 0000000000000000 R09: 00007fdeeca62000 [ 193.192534][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002de74 [ 193.200486][ C0] R13: 00007fdeebde6090 R14: ffffffffffffffff R15: 00007fffad710690 [ 193.208450][ C0] [ 193.211722][ C0] Kernel Offset: disabled [ 193.216019][ C0] Rebooting in 86400 seconds..