last executing test programs: 57.307097121s ago: executing program 0 (id=480): socket$can_j1939(0x1d, 0x2, 0x7) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000025010000000000003506000002000000170600000ee50000bf050000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7075402000000a2d23da04d1ffc187fa1a2ba7ba0e2d507b92de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd24bab85e2983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f681ff4dab9c694263a75447caec18f217"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socket$kcm(0x29, 0xe, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)={0x10, 0x10, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic]}, 0x10}], 0x1, 0x0, 0x0, 0x8c4}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x4218, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x38, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 55.062794052s ago: executing program 0 (id=483): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000300)=0xb0000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000010c0)=0x11) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_getvlan={0x40, 0x72, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x3, &(0x7f0000000240)}) 49.027831649s ago: executing program 0 (id=498): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @private1, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000001900)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x11, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) 45.417667564s ago: executing program 0 (id=504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x254102, 0x0) lseek(r2, 0x3ff, 0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1805c61, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x4, 0x3cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x94701a, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r8, 0x11e, 0x1, &(0x7f0000000540)=@gcm_256={{}, "dd1f67eeaee232bc", "33dcff273dcda64434083fc81269ec10a61ee1d936119116fc6dfa718b8b5f9a", "15f71a38", "56544408ce8ac9f0"}, 0x38) listen(0xffffffffffffffff, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xe}, {0xffff, 0xffff}, {0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff80}]}, 0x2c}}, 0x5) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x811) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="708ba16b", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff010000000c00020010ca00000000000008000100000000000c00060000000000000000000c000a00697036746e6c30000c0003001cd00000000000000c00020007000000000000000c000300fa00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 44.961155288s ago: executing program 0 (id=509): socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00aabb000000000000000000000003e545a743d626d2e0c80b34b3b63104f0837fc038d9b348a5fbf872a274dea6c3b42e7f44dfcbb8a08260507446d5ba70a131ddf7332c63b58b86d161cbc95ad91c20253aa51326025000c34cf0163cc6facc7be121bafb5e8fa7fe9d25ac5578113edc8474ef18d73d24d79cf078c9971eec3a1423dc0ef0f4e6ae674f87e03d61", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007fff0000000000000000000018110000243e0551e1709b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 43.685529529s ago: executing program 0 (id=514): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @private1, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000001900)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x11, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) 42.670399846s ago: executing program 32 (id=514): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @private1, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000001900)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x11, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) 21.422244531s ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) r5 = geteuid() setresuid(0x0, 0x0, r5) write$cgroup_pid(r4, &(0x7f0000001100), 0x12) 20.219210795s ago: executing program 4 (id=579): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xffff1000, 0x2000, &(0x7f0000415000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_BMAP(r7, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.size\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 18.731156256s ago: executing program 4 (id=584): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 14.231162746s ago: executing program 4 (id=593): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000000)='./file0\x00', 0x240240, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000d3e4c8d886c22e368d2165da93100004", @ANYRES32=0x0, @ANYBLOB="1f00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x100) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snddsp(r7, &(0x7f0000000740)=""/56, 0x38) bpf$ITER_CREATE(0xb, &(0x7f00000005c0)={r7}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000640)={@dev, @empty, 0x0}, &(0x7f0000000680)=0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000040)=@newtclass={0x3c, 0x28, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {0xfff2, 0xd}, {0x6, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xae, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x5a}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x841) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000fedbdf25170000002c003080140004005c5f31453cabb412e078e36d7e7f64f405000200080000000c000180080701000100000008000300", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) syz_clone(0x63a00000, 0x0, 0x1a, 0x0, 0x0, 0x0) r12 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 13.116200793s ago: executing program 4 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008"], 0x40}}, 0x0) 12.163798329s ago: executing program 4 (id=598): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 9.254021611s ago: executing program 3 (id=605): rseq(0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) socket$kcm(0x10, 0x2, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x1001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, 0x8) 8.391343841s ago: executing program 3 (id=606): r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x22, "9dd2ba2c4b9c93463fa3063248d548b816c16d752af84727d90515f888e5c2eb1262"}, &(0x7f0000000140)=0x2a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="8d0243714af41c8628649df3ff21086258a609135f08e1e7d1cbc25e749a83c19dc98ca2aa7d109c941de721b63beedc947d3b5cee85a1f4a889bb6068935c467592c4da66b3fa2497ed78d12a4d36fb1a5288ddcc1c2fe54998485439bed439a613b6ee8257e8b6b64f84bfebe89127bdd853cb7c02c7"], 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_generic(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x11ac}, 0x1, 0x0, 0x0, 0x4084}, 0x4001) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x22040014}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x8, r5, 0x3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 8.247982565s ago: executing program 5 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000040ecff0300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000044) r3 = msgget$private(0x0, 0x101) msgsnd(r3, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x5800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x98, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_IE={0x52, 0x2a, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xb, 0x0, 0x401, @device_b, 0x10, @value=@device_b, 0x7, 0x5, 0x4, [{{}, @broadcast, 0x80000000}, {{0x1, 0x0, 0x1}, @device_a, 0x1000}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}]}}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pipe(&(0x7f0000000380)) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$vsock_stream(0x28, 0x1, 0x0) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3, 0x7}, @timestamp={0x8, 0xa, 0x0, 0x1}, @generic={0x22, 0x2}]}}}}}}, 0x46) 8.229712697s ago: executing program 3 (id=609): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r4, 0xae7e, 0x0) 7.96909097s ago: executing program 1 (id=610): socket$can_j1939(0x1d, 0x2, 0x7) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000025010000000000003506000002000000170600000ee50000bf050000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7075402000000a2d23da04d1ffc187fa1a2ba7ba0e2d507b92de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd24bab85e2983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f681ff4dab9c694263a75447caec18f217"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socket$kcm(0x29, 0xe, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x4218, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x38, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 6.853881543s ago: executing program 3 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b81400800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000240201802400028008000340000000000800034000000000080003400000000008000180000000003c00028008000340000000000800018000000000080003400000000008000340000000000900020073797a30000000000900020073797a310000000044000280080003400000000008000340000000010900020073797a32000000000800034000000000080003400000000108000340000000020900020073797a30000000003400028008000180000000000900020073797a310000000008000340000000000900020073797a320000000008000340000000000c0002800800034000000000400002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a3200000000080001800000000008000180fffffffcfc000100789be1642f8430c460e8692a8f8c45aaf3118316539052ba181a60f03707ec8179fd143ed6c4db73977b77f68686d2ec94b25435ecec60f6ac23db96833cbf99779e33db32e62fe3a078933d3c1122022952988b9550db169ecb6e39fd8720a05d3eeb5d40a7ab91f9b5565dc2b48c9ac61eefd9d0aab86e58ea1940d2240a851dbeabcf0b6cefba164663ad87cbcdb6aa1468529d1206b1fa3aa39118b45ab882df7fb2c6e9c25a706f99002cc42ee9b894b4bbfe66ce8fa1038566ae3407d5c80e28dc3911476785933d1ef923697a44a9cd4271d539e2ecc14d37a5e2074116425f0766b49a6febf9f1b8405ee9de1363b262f1be2839a40101804c0002800900020073797a300000000008000340000000000900020073797a300000000008000180000000000900020073797a30000000000900020073797a3200000000080003400000000104000280380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a32000000002400028008000180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a258bc4300080003"], 0x159c}}, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040eaf003120"], 0x7) 6.704603043s ago: executing program 3 (id=613): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @bcast, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x2f8c, &(0x7f0000000180)={0x0, 0xb0e6, 0x40, 0x1, 0x52}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4000010, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000e15a45c8de218bf962a185122c9d0067719b2378b91aa46ea44437b4feff6b06e0632565e7ef3d3d0246f0f55e54525d2f6579ffde4a980ca327c989917eb55980b94cb56077ca98063f444f860b2f3d1a3065a7b9137dd10c954a459f30e94a92340cfc61f4d57b1cfc2a2e5aa53f2d22f1a41f62d76d7564e59286183e72c4ff00e9f2962c0686970568add4ef79fb2ad1cce4d5ce7a2265f24ebc0f07d5e9a7cb6944d2bba5dda6a0213ce57ad5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000833000/0x3000)=nil, 0x3000}) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x42000000) 6.207832306s ago: executing program 2 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', r6, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@host, 0xec}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x5}) 6.055962993s ago: executing program 1 (id=615): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) (fail_nth: 1) 6.03960934s ago: executing program 5 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2410d0d3", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000ff0e00000008000300", @ANYRES32=r2], 0x78}}, 0x0) 5.149223723s ago: executing program 5 (id=617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pread64(r4, &(0x7f0000000280)=""/38, 0x26, 0x3) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xdb) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x9c200a, &(0x7f00000001c0)='/\\\x00') ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x2) 5.125445284s ago: executing program 2 (id=618): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0xffffff99) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000001580)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) 4.204041306s ago: executing program 1 (id=619): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.078478828s ago: executing program 2 (id=620): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f0000000000), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_FILES2(r0, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 3.068131475s ago: executing program 2 (id=621): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='fuseblk\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f0000000480)={0x40020800, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)=0x0, {0x14}, &(0x7f00000002c0)=""/113, 0x71, &(0x7f00000003c0)=""/138, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, &(0x7f0000000500)) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04"], 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000740)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 1.861734866s ago: executing program 5 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x802) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) cachestat(r1, &(0x7f0000000180)={0x4004, 0xf820}, &(0x7f0000000580), 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x3}, 0x0) recvmmsg(r7, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) 719.105484ms ago: executing program 2 (id=623): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}]}, 0x4c}}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x65}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1bf3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x3) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @loopback}, &(0x7f00000003c0)=0xc) getsockname$l2tp(r3, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x99, 0x0, &(0x7f0000000480)="7f1e4b3b6b599e1aadc0d9c620eeeae77e4dded5b54f027c8314c64b16edfa9791bc6e389f48faf05020264dc14177d45b446c965fceb59429382fd6c0ced8266420f4fca698396789e4247c845ee9cb92f0f22d5c38316bd28e2b604b8fe0f8b02c0dabc13c01ffe4486157077e617abf48b307070aefe75ea834d82edfde831e04a5e78dddf8938cfa030a552a947c811f155decc20e546a", &(0x7f0000000540), 0xfffffffd, 0x0, 0x49, 0xc3, &(0x7f0000000580)="c54b6038e07b8b335e4a5a75e9937b12441a49d96d289f0a58df79778e1d7e7ade592d810fc1ed0ab19c1f2ca337f1d77ba9af6129460a26417ddf48013e5e81f47a1e9fb9fa49f418", &(0x7f0000000600)="5d33c64cf01d9ca996e27fac4187ab9d1840b8b097e2aa2c45e2df74b31b145f583700de7b24ff21cbdb616991d262b7bf738701ec643c6d47a6db02406b6c791943bc52b96acae942a10528eb6e2d316fc74e0f2b44f48ff0fddd1fa742a45b113c683c50a8f51ac5af417000277414c7cb17556434fe0dbf5d56eec01e3f102b91c8b58b928fd567083d51dc7c0dd0acf3ea3d60fa7b7a71b2b5ce98edd88dcfc9fb724bfdd70aea1bfddd91ca069a3dba257b2cc66f65bda738eb4aa620921ba389", 0x1, 0x0, 0x6}, 0x50) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c881) ioctl$KVM_NMI(r3, 0xae9a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000a00)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000a40)={0x3, 0xffffffffffffffc0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4100}, 0x4804) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0xf64b0662daae1313) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x200000, 0xf0, 0x8}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000d80)=@v1={0x0, @aes256, 0x1, @desc3}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000dc0)=0x5, 0x4) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x3000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f40)={r3, 0x0, 0x5b, 0xad, &(0x7f0000000e00)="208dfc5ac785d0c864dd40c706f3f1a7c69789150893fa702589b9d3f370a79b20397b5b5e1e959a1074616df7896e10a0845da79a529c6c6a4e29d898d1bfa186c5685e1d2e50e7a098284a4f2c5aa41c42846ee1897f782e5689", &(0x7f0000000e80)=""/173, 0x0, 0x0, 0x1000, 0x1000, &(0x7f0000000f40)="e7cca7f8b485aea362a7c8db2088c6a2aa5c8af8301aad751ce039ddbe3b19cfd1b60d63c08cf30b13ae0c106b7bc63db66a3e2cabfa124ae1756f852ecc3ab67a99c03c48f8288e5af681fd1d321d7ec0819b0c94644682f1e996040ca579c98692de82b8a2f001056f2ab368338d7748b7b284588a08642ceedc605ef469d3e3c7a6acec179410369dd2eb0986c81078578fb37819becec1815c918ceed9651f6129f6c1274e0dd0bbc8b852cff042cf094af303adfff0553d7744a41c14d884b39c1f7143225c69f00d361d77a6800896991d4ba5454cb8b325f10cef3eb884b424940a7c3c72c72bdd3723e5b4429bec0d954cfb92f25c1451ead025004603de0e112cdc8022fcb84070bdb5a4eed4412d2a2dd37142cb2a4c3f75dbcf057bf0febf4cf87f108e5af0e728af272d3664aef3074c95a3c9b3ef90335f0f01765d246432dce0b6129f7f903021b28455b5bd76d53d71840c1d6b8571f24774f1918c8947c9bfbfbee5e02a159b24b5d28fc79f248609daa8929f0c88605c8bff328ff9b8279e9150b0c0a4cf2375658924336732ab48f739eb2bd392882959d1a910d07f9e93d4cfd8cb5e30b6ff09e4b70bd9851d8cf0931d737a23446f3a1998ac032ecd1087cf2f198bb6e9aaddeddd4e4b9f69f076233e6bee4c8c6687724bfa762d56a0249cc5dbb4dc62771da600e0b257e8647587224c6b337eac3a126451ead5140286e304dbe873e52d9341730498ca00d0f0c997d97aeb1914c3836e52a18c9bcbfab0dccad09c1d7622a1e75a4de9259150d02fe0b54f86cd557e1e05471b519cc2fe6ecf3114a1419980ef8b7bed08e98e9c89f0a85ead009a50fcae71fc84e0d42cd5f88c0e3895f1d17b8abda3f43fdca0f7c29f662e6af56ce0f2872c18911c88b4a20b874f9d13f63e5f3bf4cb727f07c035ef7109d9effe49617c5f5a39a2edbbe84905af06eada6cb5a535c62085bd65ddd803aa80859bc33ac37c761f915fbdd1dbaeb1bbb8f1cb1c058e37323c75ab8f78801fbd8ea4948a3a6334792714f62a7475159cdede01ff7390ec2561a5f95668a3b5c7967ecff6a1daa6f6353150db9e3b23c07b445d575598d50457c35a487f0588beb246dd9375dbec5d39e0d7cef6f191991c5a1d8c9e47d1e783aed6cdd6c0dad5fbd7c67c65c92597587cae67049a04c969428bb35142ae43f9d64f589f5715e845778f00b8586d2ae546dcfaae5e039bd4db7e27db456dc6acfe78146e67de3e11e2d03bd7b62305ce3690deeb4f8d5ca05a1bd3f9d4c2bb5bcf7845d56a975014711ba29118d482841f87506610248d2ea5bbc036bad1df46bf58415a3c4d24f77c67f6fc6ef586de6a9e90f2732760531462635e498550c823ffca593b0b3dbbea81c5d52d2cc982ec36505e9bf58546b2d8fbbce6ab2bb31340c9bcfc9f6f6e88efd27f1124c0f4397157871fa2bfac4d89a97bbf66968952a4caffe2aa5eda14f1618623a85cd487dde6ff69af65ac8f952933decc6380784bc61a8258190b685493b9f4e7f684498a8aaa3937f77bfbb778d44d2e9a1e7bc81a9b82473edccd94758865443527fdb237cc8584a829b97c27cbb8285df47d1f57e5c772c71f432d20b37610687789c949b18bde00dff93c1d24fc4773d5fe17462e721de3dabe5f62ef4a7084baca9faa5a77ac30d103fc968f9a01621e0e0f2faf1310bedd2b532dbcbb9ba60b1cb7e44f93d23ef673062499f1aed126d62c3ef620dd1ccc3307ea8f77dba1d97dc60a51a9d81f33f94abdb9a19facd0432225c16875e5839014545b17204e186efc8acf6c028949da3d94084531a97e5916495b31a0285a70874c25f2dff7f647237f79b09e6350a631f6efbe55e4d17f1655661f263e0a401ad08d6858f47777a3c03b2f1e37f70d67c824a51a489b7d9ff22d5f00cd754bf259537a4463cb6e566755bf43c2833a25e90d5d6a9cf88245313d554436ef074df103b715623ecb4b164977618f213ccfcb67845e94164e579f098b61d9d7a675a2e74994a0f084651ce1323b87266672b0a59e8e6a5a09223f016f60f1a86104b5eefdc4e7a9fb09be8eb2afe59a5c522f722a8248a58431254c2dd1e321c6aededbbcf77c08b7b5188e847c7e76e70600be5133377151c29c75e9faec904e9bdbd58e2324cb57938836e6f5a48a3f514b0f2df7670e70af57c71c91fa06b1d13a03fdcb10131dea08bc8292f33dbdd3e696aa42a71bf5117dba85ed594ed16b07241b87d8d108cf75f15ca46df1e23bd7b739930b08b8405fbcdb9e8dbfe7dfe6d948660e810cd52612cf1fad1afff46e18b911cdb56f39554a001d1ed7749bac0db6b93e23d669459bedbbf0c6853180d0d01b96db8a916599a1906df776d088c04e7ae2dda1d801d84183ddd48f1f4af016e4b21bb89e019e28711855bbdbfb16ead3b6670c41efc5851889aa2488cf6d175ab964c953ee85007ace28c77c06a68392fad16ecee2b12a2eb1dd5de4d3da2230cd7a20fde38aac67573cd64af64b2fd5ed0110fb1c142119ccf08de52a75d6f14233db87439c47a4d3cfde6d0e06aad30283c555ffea995b876e0cd66a2cb1cff1e7405be029999f5e2644a7625d724b1b24e200632693a42152988e25a8c4c8581bf42d91dd674127fd053697eed887ab7a044210ccbf65e867fd7be72c0bf2e46898563058b2f7791da24c1960f8b10714d8eeb306e8636dc4086a8a6a629b8bbe3a2ccf64c12bc531e155bee829c4930d7e4acd95b8d8887a5e3ef42eda9616607d940661d90ef928c7e872c5347ab021721ff3c0e2ebf4527aa5e9588186cc38ad3e7e4509bc0791f7168c8783799985b0df9c66e78f9c0af793e38a0417a948290ed76d120406575300cb1d6ec22051e03cdf16c6338ebdaf87ef94d99930f62450fc8c7413c22df442d3283abe9a3e3c9915f64c2c3e2f220ddf3888f27887b4eba22dbc7d7c4d1deab127232dd8a89c58ea64a51716462d4466b390aabd6ce77e764c20803570ed7363b3cbe994b0af7d6477d30bcc674e5045c4e53f951c2a5c092d5dba6b9939377ee5f71b050152a012b3eba53437f088e3c4a2a0cdfd2555a939f441b13f300f8fa6f13a6c938eaf1d2c082e1ca76db80df77c35cc4b4ede07a93445976f5a45173d94e9182336a3a6d6808729f81d35012cd6012f1f5bc869f4dd00c268ed26b29f12c0aaa2a1f2d96b00fa838dc278e75ca21955231715783df7548613da80533105e7f54a212be619f0efd895769df0e20221ded9efe1db0788de884999aa9dd96890003d37141582a4febee7b6c4b0ea82f32264912b1f16701a5506ac28b363cb82c4e655979dcd5c6d5ada31f0c5d358f0a8f8a680e396ccfd54ec91239095897eabce6804929865ec70c25518e83aa40d1c6f38f219ab1ca7dbabd45c56f098e8c35b722947a388e4287870a36430b5e902465d33caac5249cb79df53e55510bec4affd887c3cde169349ce55b7536f4a5561c1208d846e302c21de04a6e57e27afd18d5eaac60e1cad94eb4171232f7951b17966fc58cefaa4cb453795f9dede16080e0fce52574bc5cbd37891143b9e7fe4ce71579b96c62b64e3806110203527d36de4ab31157fcee551cfaf2dc81c4772de278cc028ea189f7ee863245cb24350f9e3a1bef37d3103ee83031f6034c8ae7cb6591f3fac8fb6fd424b34641c79d2442d9106a50d254c998fb3b77b74cbedf42d04b0d162c5aedbfd0e3496794188358596a9ca5aba037381b86a2fba74cf1e659007ab281a6505284023f83f4c59094ee866d85bd7fdb8b495dfe2106f7847145603210532466321cb875e8d919f9f47976fc36890f9be450776ffcd2bac2d73d59dbd138681bd3209833c03fa04de259761903b977a7124c98c241444d92d978b08817ab6e6cc6927693e357ba4528b19e7fe0331955328fb3899abdb3c5eb848c393098af6da621f834fa8320d94ec9e5fc9b36d981cf078dd45ed8175b1748edf76adef282b690c4316e13f7e1684fe0d4751e235d5801539268cd19e1863d77fbfb5e61f2aa02315df0ad66aa055215a1ac239522ee59eed4eb93f90e8bd6a885a2c2000cdecc1b99e70bfec18db46f59faaf83b4bcbdf10567452316a108d1f8852a454ae115b20fa2ff7ace434e734056a0fd029b613c3171ba3dd84296459802d6183266b176062a6f7c40fe4e2b2707ce0633729f524780686381f82de646d1854221c4edb90f4ab9b93b0c00b3b892dd6db99a66cad91597332f7f8d1b4086be66bd7c8146174e86fb603743b14ecaaf2268a319adc52417bd8d71c376c31c97c10e8397d0bf65e5ad9c5dbf526d92752594b92b68ecda409f32d21700c90f6d44c9dc3d5f705f5bf0ed35c3b9cfc2342da6a9d8c3bbd6892b9e412ddcc07ec1d276c6a79f3183c95e0ade7b52fca8480b998bbb55eb45feea4dcf7f1b82045261cd390f5bf23758dad7593ee8008291271cf7c198ad5e6e29d14a59c6edfb84a7724aef03bc299c54b150cce809cba5593d8b130bb55c2dd74623d5426e195200d1274ea78df90eee70a162f0a66a67afa13da2392d52d94ecf21494b315362abc61455d8b9eb98fbbbeb52ca8bf281cc8a3d5b80a4b697bbaf840c8b763a493db04dac964edddb27c80df5ea90fe0689f206ca8f771e460b6cb59785c1a1ef0554856b8f869e4e01b206f8cfbd4c2c23a56efb07dd9210b884c9a78b23960a90f8b5415f391c8a9e719c5830147287046716650fa0b49ceeca65f64bc16b2090f449106cb70380ce444fefadbcf3981714f68a3139ef378f498f6ab4938557a5b1cb73f0406e66c82907a57bb6c8ede430c4b6e3baca4eb3e220373642df8513edbdbc0306c1564f82212b2e3c0c2ed1ff739e816c89438ddaeed8b8e3682d98034fbc610c62b2d7ec984986ee91ae84ff2b16238321e20d6a4759f8a3786a647e7d593c2029419acc7380a345e0d7176874156b4fff0ebfacc4cd4b5fb637ccad9fef5b23a43155feee075ce217274bc91189de08090ba36a5e538dfd771638f0a37cd0a9e69a96f9bad0ce9d8fb82277f3d7a30ffef1c009efed3f91329e5df883180a42975b5bb4858d502df103b42b5f702a64c04faa1dfeb7a8b6c2e94480f85c7c5e27b00d161e173506609d99340df6e590dec11e4007c6b2ca54c4a6aabcd749972f8cc3dcf8d1c85708bafc6edd3450ca90fda9aa40187e7b140db7b07e24273306cb3be9a5d9f6f876fd2bcdb68177d98fece490bffdebad0ddea5a8a712c01535d74e6c5641c5612b73c713bea5a7a6fb4d00a76bb3db9b31036bbdfe87086aebfcc956a92f5a7b349f875c3016069a9e5312d5263a7e9eda8859525777d184dc53c00069bcd716f50f7547b0aba4a7518b7779d42075663417f87317c907c716e78c54dd5ef9e85516b77692ec9a23732559b833060211f03b7e46cdcc818ea8fabdbb5caa792212ff188b4413ccc0da42faefc100f38a672eb401c7f5cef84ff817b803e94896bd5cdb4b5b77d39aa4232cb2bd93e8e6f575f22e9f8d7d73dee0732538c783fef6886a05a5b4b4dbb7e8119d8474056e51a9a3a1b03c6d7d553f7f3602703ce1021874ce158dc4ebdff595a1efe1ab622907e174ee23387b6a5e3134806dbaef3514f3ac22d85cbf4cc510ddc71ad54ac8d1258297aee6061dc376185cd76a947925343064d231d2b99fdee98def723a00588d3518331cc7e0ede5440044767acdac87ccf0d8e45ad86a2ebee912903f349d12c", &(0x7f0000001f40)="8076a39681fc35b1f0714b90713894b4c29b91441d3aec6026252b98534cfcf1cc3651df1dd48d65bf2f90793e25c291c809d68977278a80a2f69efacb87aaf3760f22031e8f72de31ab1b2f7d58ba5fdc803f352760b91d6bfacf64d8eb82c11ba253b2cd7937c21789f27ede5f6429d7c75aeea53126868c68d4480fd2dbff74c3713ac972ad492066215c50311daa13dbcff4d6dedab36ffca46a97d1a81dbec9bed1ba3c924f81c0fc24bff6bc3c4073c889e490b33381fa3dbcfa0837c7f8c4c10a209bf9f61ee05b54ff2c6e8798703b77dc630cb527ea220d5b2549c15489de58984c384d7e9373c2643b6801cacb4d58e9541ebe1745973552edfc0fe1a2226d68500ae83cba2fbb0c16aabd8b3547ad0c3c39ee6500a707705aa91b63816727afb0309313701da05b54ac669bb1687f31817b775267b4269eb6a2dbde8d46d78f12f4fceff3edf275d542f5698ec69aa16196c942722aa261f9e836d14bf90482fd4f58a2bd6646ce06b525f94ef8ef35feda59e21a40d6ebbb287c14667235a470d8b8a7bb5a5dfc510ea70d18f21f36da82e6f093526179cf8e0d2e125d4b751573631f44ca581f4e4fe1c701fc8afc947a20bfd81f1e0db7ce93792f7afadc7108f322ea81de17555385837645dbe268db4fdb387a956f03f3455ceb672fd70466dbc549716eeeb401987f54e239769766ef700f128a10466fefb76fae60a0f02fcdb16994d1f88073c803aef42f49d9fd5f95c9cc88e487040a1e676da832dab2e236f754eb0ebe7dc646fc7f56bf8da7543419f8f0f2df8579e5a98fbcbf36c9e3242d2f30f6ac45e788653031c5213bf7ef39c41943b7f0c36b0c254797d612863a8e039cdbf5aeaad26290163f6f5d767dce55b993caf8815c4b2e15c3c363998872937ffcae4cf186eaefea5c2ff07bae45b625e4a74584b7301c10aea9b9b3910bc2cfb9332f6b8e6d4884ab2f32df5eefa9a244a2106a841bb3ca03345792a9b257fe7d72e1a55bd31d202b02f7945cf63291b0f255c848f4b00f4d90b2fbb5fc95cbc78dad06212ce03e0eb1b8d6d86ab3084097d1c0623d259d7508e7e8af6c33d181cc83b0637ff893f15423b1c7ef268fd92f486b8cc5b815cb42d01c3ff01eccb5530f9d7b59de4a0c3e90d9cc5904b010577fd250255518a2f8db25e7a7db5c2c5ae0504432017911def4e028bb62821ef2bb278aaad29981cf0a77b21ff4d12fed747bf8b2ba3284d0c57787e29673f68410112c39893fc7700371e79b6fb10d40319333c4ca5f973f3bb5003c9932369e892b7fccc17ffc512be06e9c382bfa269cae127dcabd724573fc26bbae23c8a26a00b68772cb81fb87d59cc43677a9f9c709b97c0ae9c8dd8d39acea8842b9a6eff50bce09c19104bb9f50b6532fe2be9a62e13a13e7e9cf76a28f075e0e9b569adb187e7755538115d71ba2c3d3578f7999c25ec72232f029a7c0cf8b41894f60fcdfdd7ad504f948469b48cd3de52db4cbe1d1a19b7ea792ab54ba868dd0a8996c88e288b64e721956223ec7f36412f0ff26335eccb008e74b35fa32eba39b4997bff393a26a41aba64abd8c5b0391babfd57eda1c737f2f9f417fa7d95934f892e3665bed0c36b2fc6edccda432744b570eac8f49cd6ec4378adf8c619193b9163dc3818a9560225fe3306d8fde7c861290b0fe86a138481a1933b67be3ebe908bb38c5629484ccad8b29588919774d3c63469eb13ade7205a3f27ec942a17b2354e791cead2c7716ac406a85f0069875dffbb865f0827f6ae406dc38d627425192fe4bc291a38307ad51d71742cbc1284961032385866173c6c444077567fafdb57628cb578982d25917cd08b36af5bbd0fcfea5d7fc8ea43ccdd97d2f3af6fcbf92e0ef2b30a348a8ea854e1a7daeba98692196670648f2c0d647088b36d3523c4cd0d3d497f097b868cbb3b8264cac17b88684f78ef27396704c668b4bfd47848e94a55f439b6e8f604c5c2c68d273ecc2b0672c9d107f55738cddfcb1469b7c63c43141a894acde663cb8bb71e3fd483e3d92698a404b1b46b38c8299a310bd634a8056abb0fb390e04e6695867e2bb766a4a325afc538f219d4e0d2a887975ed8665213d4f59a112a48c097335afe81f47280de8e177534572a1237a311742a17ab5b61c62ee061d32d75f73d655cf5dbcbd07049fa9c35c75a0baaccb78b0bb2c841e0d5cfe38fc3ced013c70b47abf5ff1a9e5c32fbde25a87afa260008ad9be8faa939bdf5b90fcbc3cca9dd837d379cabfa1d3324f06f920a4b559c73910bf75187cde639483a99e9705cf95b1046e02c3fd3fb16643aa540318232b8a918d8b7e3fd48ebc63ad31943f17de182529124cf1eff02916ed1c04c6d55b567478ffd946f333bd1d67f0f0ecb16dceda2f743a29f3c9a61051df540409a3f0dbe1a7d414318b08a7a1b61e3d58788f977fbd00864af17be1e75e1b61eb4a4916637781e5566b2f5dc5cfc259819726053653d3e674da382d74351fc38a727269a9dd893048c5a8c1d5501da98dc2c741281bedff367c21bc9915c2497b918d95bf5042d3b12bd31be58f1707e82fbe4e6d66639013fff1b6c67e8f7d60c59b0c8e0d1d20fb706f28674b8d471840fb423faf1229fd80e538c8d3e37e1b30d682960b6d42a98183271e3beb66dea2283c3344fb79f0a528d88b1f059203840cd9cfc68c46d098c9344c5dbff8d4f328893765870ce4115b96e1dd6c8a3cd771f9145442f03997dbae640899b3816ec4770bdf052238b30a0425f226c33fedb99fad040c2bc1ac3172c40906a1b1205b7760d835c688c7fb550e2c021b84dd06233dde019cf5da52c73e14c6edd5d70cfa7e8f149164abdebb3ac28108f4fdfbea3778fb6893534074e62fa703c1d2b0b0fc1268ca7b630b5c4e58eac0ba4a2611c27fc69dfb708a26a2026d292c3607f8dff2ab3e27414c706af3b9a0815e1c44b38ea4b3eab4129542d0f2c42c48e4e3359cf5ff984eb6e1ca8ac5bf5f5be176f7f6cb7418039d180f2746b9d4eb8d92409e0f0deb6dddf9c7d8e8b7de8e5e54c15251587828a264c58c5b76467d446cca78ab50758e7a23bcfb001ff95ecde719e1f822ec3fa158521da7096273abebc4d3f61522899dd4cf09bef37aba7e83ed235ce486cc37b3a3bdf8f659f0f228a271024bdd28efdcc7c72229cc3cb2e902de180a54442ba986a26c1afa9d0330368ad0f08d1ef03fe443da9c482b4c84f958d508c522c946ac2bae3276c3d82a5f72a2ef31396392543b34b0a6b2ae9257d1279955830bac136c95423949e1a6cfc205118f76527284bd635874754d6b7060d801aa569e12402c4c3a37a76453988775188d22e186cb62937c369fb28dc0becc3ec4400f8b32e7345281269c0a91e5f602f139c0362ed271c14b62804de38372c038bf89c288dee0d1e79ddccbbb25e3645769df68e35409bb3be289d379e798a6c0e4b7e16f4943195ff4a10d972b0bf5a3d2776a2b359cc33939f642f63116a096a6b0bb10bb709c95a2f7b2c7e99d4c89aea4c2d2a84ffb7b65c9c2ee2eb7d3e3a65c3b3a86c0f61df5c5ea4e89ebfc1bb0db0d86f22da8f16c971884797a098768cd55487df65b0a0ca35763ff7a0dbccf27ee39d3eeed202f62862f6c9d639b63ac279c5adce5d102290f6a8d97b06050d819d916881a1f406d1e84d05ffaebe13d91864baa3930806fcbfa84f23dad8812d9d4c235413832929ccc93ef086cce97c8b67265554fe74faea0298848a1cf9d5de41ca8ef9da8385f895882f1737b6062399cfc9df8525a5f408ec199028530f3b5427e613003e2905a5fd8cd186aff2239d519350420c5be6f6fe631f576c6816c3409a274416b9903629f23f940ea879272ef71aec7cc37e0053f020e73a07794f8734f2af4f7b904194116752b126a4e2e1f9678bfd1943a9a7f2c615eca18373aa5b955ebdcdecb47acd83cbc082d2b2efc901c9d575bec7b8e9c93253d9c5f067171168890907bbfe300daf383caab31c948de125805f731b77b8c8b3f73efbe83a82283eb2bee8298ecf48bfa5fbc453083b82370a3a955c1ec18dc2121d460e7f3647c046924d08db75f76cfbf0483f4ab05105df10e6e832142cf60ec03ea220c07fe79a77fc8c2ddccad7cb0ca7a5fe2387e4e08218e6a1167c5ede5209df4701246becabf18906bf0a1977020027db50994577a18cf7866f0faf1ca85cd524fd5b6ae867d3cadab710502f969a1878bc9114bfd7ef965905db977185903333ad32e15afba52c678c19836285574ca5aed07bfb3dee87e997f5594f5bf58ea5a7802934a7cd3404011194039627a5404aef6f87309d63d4faab4263462c7f235c912df4d8d021c254343e14d58cfa306140e3b5879190c6dae7eb65673fa2c44ada7d44634af049b21e8c679f9afb4a19ee76d3ab5da7eb39dd0998052e9ed22ef4f3bf51d235f4855e531699fcbbcf20008d468689fde498787650892f37015db67968c5eabd21f84eff7fc46dfd0f30e300de3351778232ea5c655c653947f22a69dd3d9818955f3a5567431cbd625f08212b94fb2553ef4037a6c325543b5e89c30230e08d8e43488c2a83dea22a23624644eaf05854f7a0e62e715119024330270d45601ebd80cbd1cb0b455a02c8d2e8e553e7cecc8fdf18bec6ad4d5fa5ecf981913b6b597037f78cdcbd88eee7a3dc103ba630436b7d79aad6e6b1cc946198ffbd6a9fa3690943bb8a65139a0fc954abf52cc042a99e3bb7546cc1ecefa0cc74071ba2f8298c1e905859290a5047f3c0fe0b3dc66faec01fdb49f690a8c7bc6398162b2ba70a5fdc4af4e790abf47ab2771abc0f26e92829070103dd37b909850284ca0b83d0b5110395b3b4e27336d8ebe16265eaac362e7baca88f277f95cfc66cd046daf2804839bf6d64da2924a46289a6da13114c72bd519be3ba1f5eb3689dc6ab5b5c4c27fef270148c6458e3f9291291bb49474c69260f729a0afcbe41771e251fcf7bf2d6175f3c9a3810a9263c013529dfaa33d4ea9c5b3724bf94e6ecfe8dc6a9562aceee789df8fb54ab0e98c1da591f54afd9a1e2763a428c43e3f670e763bb9d1044ef6f6e5da91170ef53b3a57f007ad95bcda8c0ccf114504121945c6c2cf0c10e911260bd6babfa528ef53afd72cb7a95d6fed09a798cab8e321f3ed803a26647708a4170084eed010beb15c6f97da608ca183431d9f94382a8dd103354fe0db60141751e1b6e8126a35b94f37f361c40b66a0e9f6fc7aa13ec3b14847703d5b966f6c26dae53411d6e481a13d48a9576c8819c69dde88676a87e3c287637e67f6910bbf43765d53d56726f13c1acc5473603cdcb05dd2eceb64b0ad0aac90bba56354055aae9301fc8f9411f6c34c8580f6f4166f4154e313ec1506f8f46ed40824ceb63585044900c30ddddfe5019502329d717bc0d859b9c270512e549d87e8bcc05e8809777443c4b789859ea1e616df1b2ae74b656d0fe01446150cb862ea5c07193a5e678380fee242b84ebc76e4bf0b85db6ed4d25cde86572f50fa8281ec5e6747689b841ce857aac51ae795d094d1ea319080c5790af541f1aa5081b2c54280d8675ee7052fb86be7f0c426a77ee2125da9f75acd9ab7511020f8e7579c0ba568330b5b541a2aac35496df1fbff79f8a1a11eb674889ff1473a0c58a5e693d80d4805f9132a79515509f4ef783365864fdcc7869f751f63fd8e2b06b0afaf64101deb900212c35b716c934b852d56cbffb6", 0x1, 0x0, 0x7}, 0x50) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000002fc0), &(0x7f0000003000)=0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x81) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003140), 0x51d000, 0x0) write$P9_RVERSION(r7, &(0x7f0000003180)={0x15, 0x65, 0xffff, 0xf, 0x8, '9P2000.L'}, 0x15) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000003200)={0xc9, 0x0, 0xc}) 631.245705ms ago: executing program 5 (id=624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122", 0xea}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21", 0x1b}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x240, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000000cc0)="24e266f311bfc34d205676161ea41ddaadf890793efca7f44791a16cdbaac927fd152b30e1a0844903ed80c4455d5241cde9c46460964a6832700b1d9d8a5c8c0300865cc19dd948865c6280a0f3cb250dd3d97756dae4517286691e19487618d9223b395789ce9ca001e71c19b11800b5015550ee7b1528ae37fbe2ae56936ce5dc700d29780e33c4acfa135d893b3e22602e793a5afc5ad7ac84a220062072848c18b72a858b28cc36", 0xaa}, {&(0x7f0000000e80)="4a7685477e9139292c7c7924d7d45febace2e35bb97de3146dd04b1f8c8ae63120315a187795aaf3f790a5c6d90074e37404a38cbe48126d8d213169fa06eb1af1cd909b1ed0a2bcd16327b33b713cb28d02409a779c55aba877cdaf14b9c60b25950c949834c46ed1e612798659bea0d02fa11990a35da33db90f3650df7914e714b0350dcf7a37ded5dc159dbc8ce4c7e71c0325f36bf7254eaf8c", 0x9c}, {&(0x7f0000000d80)="9f217da8c62d67c931918e15d750e2ee056b6edf476f24e100ab4875420c8b60f1ae43b9f09f771ca7a24598e134964a919d0962d9d52c335d423ac06240fd04f1b62fb8060cdd11cc1bee1d173bf786c08f74daeb18754fec112daaef0334724f1a13551be845ed7128416f0b0e0d5701073ee67549f0ef294749702c", 0x7d}, {&(0x7f0000000f40)="c155ddac41cc598ac7f8be65e329237f6b62b964033ffe497c27352f2aa747c275d5b80fbe0dce272352cf7f00cbf2afdcabc66061b16e8b62d9507bc3d4575a5674688c1d9032523e72b0027871d797285830d91bd17e723701995d484623ea07d1", 0x62}, {&(0x7f0000000c40)="1b0b22b9c6385ada7a573f7fed5032", 0xf}], 0x6, &(0x7f00000011c0)}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 630.549817ms ago: executing program 1 (id=625): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x8010, 0xffffffffffffffff, 0x7bb25000) r0 = io_uring_setup(0x3eae, &(0x7f0000000240)={0x0, 0x6d33, 0x1000, 0x1, 0x2b1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 504.207139ms ago: executing program 2 (id=626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) shutdown(r1, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x88a0) eventfd2(0x0, 0x80001) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x60, 0x12, 0x2, "b398"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)={0x20, 0x7, 0x2, "0300"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 367.125596ms ago: executing program 5 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000003d0007010000000007000000017c00000400fc800c00018006000600800a00000c00028008000100f137bb"], 0x30}}, 0x4010) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) bind(r0, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa010102}, 0x2, 0x4, 0x3, 0x3}}, 0x80) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, &(0x7f00000008c0)=0x8, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x408000) syz_usb_control_io(r1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2410d0d3", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000ff0e00000008000300", @ANYRES32=r9], 0x78}}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) r12 = eventfd(0x8) ioctl$VHOST_SET_VRING_ERR(r11, 0x4008af22, &(0x7f0000000380)={0x2, r12}) 181.683458ms ago: executing program 3 (id=628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=629): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x151ff000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000380)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000280)={'full', 0x20, 0x47e2, 0x20, 0x843e}, 0x2f) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): descriptor 0 read error: -71 [ 170.504477][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 170.514516][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 170.526295][ T5868] usb 1-1: USB disconnect, device number 5 [ 171.610639][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 171.631520][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 171.631536][ T29] audit: type=1400 audit(1736063448.538:842): avc: denied { create } for pid=7062 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 171.730253][ T29] audit: type=1400 audit(1736063448.628:843): avc: denied { block_suspend } for pid=7062 comm="syz.4.298" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.940720][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.030637][ T29] audit: type=1400 audit(1736063448.818:844): avc: denied { read write } for pid=7067 comm="syz.0.300" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.106868][ T25] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 172.143939][ T25] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 172.256436][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.303238][ T29] audit: type=1400 audit(1736063448.818:845): avc: denied { open } for pid=7067 comm="syz.0.300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.303381][ T29] audit: type=1400 audit(1736063448.878:846): avc: denied { create } for pid=7061 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 172.303511][ T29] audit: type=1400 audit(1736063448.888:847): avc: denied { create } for pid=7061 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.303714][ T29] audit: type=1400 audit(1736063448.888:848): avc: denied { write } for pid=7061 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.303845][ T29] audit: type=1400 audit(1736063448.898:849): avc: denied { nlmsg_write } for pid=7061 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.410709][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 172.413151][ T5902] usb 2-1: unable to get BOS descriptor set [ 172.414094][ T5902] usb 2-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 172.414119][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.414157][ T5902] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.415868][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.415887][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.415908][ T5902] usb 2-1: Product: Њ [ 172.415925][ T5902] usb 2-1: Manufacturer: 谕葫崘腜雕簭袛肷䴆਱尮愸ᥟﺤíºê¿„ᢔ鳾䔩æ¿ãŒ§èŸ¡ç‰ã¢—ë㙎ï•é‘’鈄舘库툈길텞쟚眣絴峋ᯎ῾⠛槛㼵㱷붘¼儗扸笽ㆱ箾뜵â§è½ë›ä ©ç°Ÿî¢„媿⊥렰ꓱ떠鱟쑚䒷㎧嚮繎䇔㶲ê´å‹™ë§â¨§â ­è¦—黵ₒ [ 172.415955][ T5902] usb 2-1: SerialNumber: Г [ 172.434868][ T25] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 172.642804][ T25] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 172.642873][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.642899][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.675788][ T7060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.767711][ T29] audit: type=1400 audit(1736063449.678:850): avc: denied { listen } for pid=7077 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 172.860295][ T7066] openvswitch: netlink: Missing valid actions attribute. [ 172.867638][ T7066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.877733][ T5868] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.939215][ T29] audit: type=1400 audit(1736063449.848:851): avc: denied { bind } for pid=7059 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.998293][ T25] ath6kl: Failed to submit usb control message: -71 [ 173.005592][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 173.013514][ T25] ath6kl: Unable to send get target info: -71 [ 173.021040][ T25] ath6kl: Failed to init ath6kl core: -71 [ 173.027550][ T25] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 173.030771][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 173.045365][ T25] usb 3-1: USB disconnect, device number 12 [ 173.054634][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.073141][ T5868] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.085682][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.094177][ T5868] usb 4-1: Product: syz [ 173.098408][ T5868] usb 4-1: Manufacturer: syz [ 173.104665][ T5868] usb 4-1: SerialNumber: syz [ 173.118158][ T5868] usb 4-1: config 0 descriptor?? [ 173.126544][ T7075] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 173.210716][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.349236][ T25] usb 4-1: USB disconnect, device number 8 [ 173.370664][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 173.378124][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.389442][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.400167][ T5898] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 173.410137][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.420031][ T5898] usb 1-1: config 0 descriptor?? [ 173.638004][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.646740][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.472295][ T7091] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.481270][ T7091] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.489977][ T7091] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.498896][ T7091] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.519811][ T7091] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 174.771812][ T5902] usb 2-1: 0:2 : does not exist [ 174.790715][ T5902] usb 2-1: USB disconnect, device number 7 [ 174.991868][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.505026][ T7103] Bluetooth: Invalid byte 02 after esc byte [ 176.039804][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 176.048246][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 176.059088][ T5898] usb 1-1: USB disconnect, device number 6 [ 176.164598][ T7113] xt_connbytes: Forcing CT accounting to be enabled [ 176.181256][ T7113] Cannot find add_set index 0 as target [ 176.220765][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 176.978685][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 177.273387][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 177.273404][ T29] audit: type=1400 audit(1736063454.188:867): avc: denied { read } for pid=7130 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.299110][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.334804][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.319'. [ 177.506641][ T7136] loop6: detected capacity change from 0 to 524287999 [ 178.072727][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 178.080776][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.093805][ T29] audit: type=1400 audit(1736063454.238:868): avc: denied { setopt } for pid=7130 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.114257][ T29] audit: type=1400 audit(1736063454.418:869): avc: denied { append } for pid=7128 comm="syz.2.318" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.137710][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.143984][ T29] audit: type=1400 audit(1736063454.428:870): avc: denied { map } for pid=7128 comm="syz.2.318" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.167599][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.238694][ T29] audit: type=1400 audit(1736063454.428:871): avc: denied { execute } for pid=7128 comm="syz.2.318" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.359911][ T29] audit: type=1400 audit(1736063454.988:872): avc: denied { watch watch_reads } for pid=7130 comm="syz.0.319" path="/60" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.574117][ T29] audit: type=1400 audit(1736063455.438:873): avc: denied { write } for pid=7141 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.594660][ T29] audit: type=1400 audit(1736063455.448:874): avc: denied { read } for pid=7141 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.634790][ T29] audit: type=1400 audit(1736063455.548:875): avc: denied { ioctl } for pid=7143 comm="syz.0.323" path="socket:[12944]" dev="sockfs" ino=12944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.200786][ T5902] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.760714][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.806330][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.924702][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.940738][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.953778][ T5902] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.963041][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.979025][ T5902] usb 3-1: config 0 descriptor?? [ 182.832120][ T5898] usb 1-1: device descriptor read/all, error -71 [ 182.842370][ T29] audit: type=1400 audit(1736063459.718:876): avc: denied { bind } for pid=7177 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.101594][ T29] audit: type=1400 audit(1736063460.008:877): avc: denied { setopt } for pid=7188 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.131248][ T7191] overlayfs: failed to resolve '/77777': -2 [ 183.134876][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.146967][ T29] audit: type=1400 audit(1736063460.038:878): avc: denied { mount } for pid=7188 comm="syz.0.336" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.340902][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 183.451198][ T5906] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 183.460649][ T5906] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 183.463851][ T29] audit: type=1400 audit(1736063460.038:879): avc: denied { mounton } for pid=7188 comm="syz.0.336" path="/64/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.499304][ T5906] usb 2-1: config 0 has no interface number 0 [ 183.531779][ T5906] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.797378][ T7196] overlayfs: failed to resolve '/77777': -2 [ 183.875138][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.886201][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.900898][ T5906] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 183.910016][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 183.918079][ T5906] usb 2-1: Product: syz [ 183.924421][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 183.931525][ T5906] usb 2-1: config 0 descriptor?? [ 183.937332][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 183.940230][ T7180] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.961378][ T29] audit: type=1400 audit(1736063460.128:880): avc: denied { read } for pid=7188 comm="syz.0.336" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.987114][ T5902] usb 3-1: USB disconnect, device number 13 [ 184.198817][ T29] audit: type=1400 audit(1736063460.128:881): avc: denied { open } for pid=7188 comm="syz.0.336" path="/64/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 184.302901][ T29] audit: type=1400 audit(1736063461.048:882): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.395551][ T7203] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.404487][ T7203] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.413251][ T7203] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.422004][ T7203] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.430854][ T970] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.517592][ T7203] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 184.585911][ T29] audit: type=1400 audit(1736063461.498:883): avc: denied { setopt } for pid=7209 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 184.608194][ T970] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 184.629595][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.641845][ T970] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.654741][ T29] audit: type=1400 audit(1736063461.568:884): avc: denied { sqpoll } for pid=7209 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.677488][ T970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.687100][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.695228][ T970] usb 4-1: Product: syz [ 184.699785][ T970] usb 4-1: Manufacturer: syz [ 184.709828][ T970] usb 4-1: SerialNumber: syz [ 184.770735][ T5868] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.960437][ T5906] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input7 [ 185.281530][ T29] audit: type=1400 audit(1736063462.148:885): avc: denied { connect } for pid=7197 comm="syz.3.334" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.406960][ T5834] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 185.631528][ T5868] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 185.684703][ T5868] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 185.696244][ T5868] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 185.706310][ T5868] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 185.719418][ T5868] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.728601][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.747288][ T7208] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.871640][ T970] usb 4-1: 0:2 : does not exist [ 185.898418][ T970] usb 4-1: USB disconnect, device number 9 [ 185.979119][ T5868] ath6kl: Failed to submit usb control message: -71 [ 185.985982][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 186.000008][ T5868] ath6kl: Unable to send get target info: -71 [ 186.037260][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 186.043797][ T5868] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 186.058312][ T5868] usb 1-1: USB disconnect, device number 9 [ 186.112782][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.595649][ T7231] tty tty29: ldisc open failed (-12), clearing slot 28 [ 186.861867][ T7237] overlayfs: failed to resolve '/77777': -2 [ 186.915909][ T970] usb 2-1: USB disconnect, device number 8 [ 186.915909][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 187.320788][ T970] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 188.055800][ T970] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.067115][ T970] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.244743][ T970] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.307826][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 188.307870][ T29] audit: type=1400 audit(1736063465.218:891): avc: denied { getopt } for pid=7255 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.361465][ T7263] pim6reg: entered allmulticast mode [ 188.376926][ T7263] pim6reg: left allmulticast mode [ 188.841248][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.851210][ T29] audit: type=1400 audit(1736063465.248:892): avc: denied { create } for pid=7256 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.945676][ T29] audit: type=1400 audit(1736063465.458:893): avc: denied { write } for pid=7256 comm="syz.0.357" path="socket:[13892]" dev="sockfs" ino=13892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 189.601002][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.815983][ T7243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.825899][ T970] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.882282][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 189.907045][ T970] usb 2-1: USB disconnect, device number 9 [ 189.918700][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 190.076671][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 190.209819][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 190.270633][ T5868] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.311025][ T7280] overlayfs: failed to resolve '/77777': -2 [ 190.316425][ T25] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 190.479782][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.506674][ T25] usb 4-1: Product: syz [ 190.541234][ T25] usb 4-1: Manufacturer: syz [ 190.556353][ T5868] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 190.556505][ T25] usb 4-1: SerialNumber: syz [ 190.591060][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.604268][ T25] usb 4-1: config 0 descriptor?? [ 190.618510][ T25] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 190.630607][ T5868] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 190.674700][ T5868] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 190.704641][ T5868] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 190.724413][ T5868] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 190.734649][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.746669][ T7279] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.774451][ T29] audit: type=1400 audit(1736063467.688:894): avc: denied { mount } for pid=7289 comm="syz.1.364" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.866955][ T5897] IPVS: starting estimator thread 0... [ 191.303897][ T29] audit: type=1400 audit(1736063467.718:895): avc: denied { read } for pid=7295 comm="syz.2.365" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.342229][ T29] audit: type=1400 audit(1736063467.718:896): avc: denied { open } for pid=7295 comm="syz.2.365" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.367708][ T5868] ath6kl: Failed to submit usb control message: -71 [ 191.376152][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 191.389524][ T5868] ath6kl: Unable to send get target info: -71 [ 191.389992][ T7300] IPVS: using max 28 ests per chain, 67200 per kthread [ 191.404825][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.424876][ T29] audit: type=1400 audit(1736063467.728:897): avc: denied { remount } for pid=7289 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.457043][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 191.475483][ T5868] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 191.488711][ T29] audit: type=1400 audit(1736063467.728:898): avc: denied { create } for pid=7295 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.514376][ T5868] usb 1-1: USB disconnect, device number 10 [ 191.528869][ T29] audit: type=1400 audit(1736063467.728:899): avc: denied { setopt } for pid=7295 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.553007][ T29] audit: type=1400 audit(1736063468.388:900): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.600662][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 191.611244][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.637345][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 191.678423][ T5906] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 191.714477][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.748454][ T5906] usb 5-1: config 0 descriptor?? [ 191.933973][ T25] scsi host1: usb-storage 4-1:0.0 [ 191.943506][ T25] usb 4-1: USB disconnect, device number 10 [ 192.067660][ T7308] overlayfs: failed to resolve '/77777': -2 [ 192.429092][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 192.429286][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 192.435452][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 192.449203][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 193.105411][ T7314] overlayfs: failed to resolve './file1': -2 [ 193.161767][ T7315] Bluetooth: Invalid byte 02 after esc byte [ 193.182611][ T7317] random: crng reseeded on system resumption [ 193.680782][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 193.680797][ T29] audit: type=1400 audit(1736063470.598:906): avc: denied { ioctl } for pid=7293 comm="syz.4.366" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.964199][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 193.977676][ T7323] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 195.282837][ T7338] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 195.308938][ T7337] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 195.315887][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.325691][ T7337] vhci_hcd vhci_hcd.0: Device attached [ 195.379342][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.489650][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.496105][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.573971][ T5868] vhci_hcd: vhci_device speed not set [ 195.650621][ T5868] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 196.384329][ T7339] vhci_hcd: connection reset by peer [ 196.540032][ T3488] vhci_hcd: stop threads [ 196.545398][ T3488] vhci_hcd: release socket [ 196.553803][ T3488] vhci_hcd: disconnect device [ 196.673698][ T7344] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 196.750698][ T7344] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 196.823928][ T7344] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 196.824177][ T5906] usbhid 5-1:0.0: can't add hid device: -32 [ 196.855603][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 197.484557][ T5906] usb 5-1: USB disconnect, device number 6 [ 197.894048][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 198.127831][ T25] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 198.194039][ T25] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 198.227989][ T25] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 203 [ 198.243839][ T25] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 198.352640][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 198.362147][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.383214][ T7358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.608396][ T7377] 9pnet_fd: Insufficient options for proto=fd [ 199.404691][ T25] ath6kl: Failed to submit usb control message: -71 [ 199.411532][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 199.419252][ T25] ath6kl: Unable to send get target info: -71 [ 199.427581][ T25] ath6kl: Failed to init ath6kl core: -71 [ 199.434162][ T25] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 199.833823][ T25] usb 2-1: USB disconnect, device number 10 [ 199.885619][ T29] audit: type=1400 audit(1736063476.798:907): avc: denied { getopt } for pid=7384 comm="syz.0.389" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.161361][ T29] audit: type=1400 audit(1736063477.028:908): avc: denied { setopt } for pid=7387 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.313090][ T7390] overlayfs: failed to resolve './file1': -2 [ 200.443838][ T7390] Bluetooth: Invalid byte 02 after esc byte [ 201.339024][ T5868] vhci_hcd: vhci_device speed not set [ 201.380652][ T7384] mmap: syz.0.389 (7384): VmData 25841664 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 202.315466][ T29] audit: type=1400 audit(1736063479.228:909): avc: denied { relabelfrom } for pid=7406 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 202.335742][ T29] audit: type=1400 audit(1736063479.228:910): avc: denied { relabelto } for pid=7406 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 202.515210][ T5906] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.646725][ T29] audit: type=1400 audit(1736063479.548:911): avc: denied { append } for pid=7409 comm="syz.3.397" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.713162][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.734767][ T5906] usb 1-1: config 0 has no interfaces? [ 202.740423][ T5906] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.765048][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.792685][ T5906] usb 1-1: config 0 descriptor?? [ 202.960851][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.132336][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 203.308230][ T29] audit: type=1400 audit(1736063480.228:912): avc: denied { read write } for pid=7421 comm="syz.4.399" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 203.370592][ T29] audit: type=1400 audit(1736063480.228:913): avc: denied { open } for pid=7421 comm="syz.4.399" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 204.140205][ T29] audit: type=1400 audit(1736063481.048:914): avc: denied { mounton } for pid=7403 comm="syz.0.395" path="/proc/264/task" dev="proc" ino=14517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 204.213395][ T29] audit: type=1400 audit(1736063481.098:915): avc: denied { mount } for pid=7403 comm="syz.0.395" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 204.269968][ T7434] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 204.518359][ T29] audit: type=1400 audit(1736063481.428:916): avc: denied { getopt } for pid=7435 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.643752][ T7438] netlink: 72 bytes leftover after parsing attributes in process `syz.4.403'. [ 205.241062][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 205.241076][ T29] audit: type=1400 audit(1736063482.148:918): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 205.815707][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.010556][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 206.116355][ T5906] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 206.153931][ T5906] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 206.162506][ T5906] usb 2-1: config 0 has no interface number 0 [ 206.168973][ T5906] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.180601][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.191621][ T5906] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.218150][ T5906] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 206.227458][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 206.247078][ T5906] usb 2-1: Product: syz [ 206.257896][ T5906] usb 2-1: config 0 descriptor?? [ 206.268016][ T7444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 207.283869][ T5906] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input8 [ 207.493055][ T5816] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 208.581497][ T5866] usb 2-1: USB disconnect, device number 11 [ 208.581511][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 208.655542][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.663533][ T29] audit: type=1400 audit(1736063485.578:919): avc: denied { append } for pid=7464 comm="syz.1.410" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 208.790159][ T29] audit: type=1400 audit(1736063485.698:920): avc: denied { create } for pid=7470 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.846332][ T29] audit: type=1400 audit(1736063485.728:921): avc: denied { connect } for pid=7470 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.969466][ T7479] syz.1.414 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.010655][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 209.588316][ T47] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 209.692057][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.700168][ T47] usb 5-1: Product: syz [ 209.707290][ T47] usb 5-1: Manufacturer: syz [ 209.712043][ T47] usb 5-1: SerialNumber: syz [ 209.724437][ T47] usb 5-1: config 0 descriptor?? [ 209.734606][ T47] as10x_usb: device has been detected [ 209.740390][ T47] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 209.797852][ T47] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 210.271835][ T47] as10x_usb: error during firmware upload part1 [ 210.299841][ T47] Registered device Abilis Systems DVB-Titan [ 210.309417][ T47] usb 5-1: USB disconnect, device number 7 [ 210.403034][ T47] Unregistered device Abilis Systems DVB-Titan [ 210.417671][ T47] as10x_usb: device has been disconnected [ 210.733741][ T47] usb 1-1: USB disconnect, device number 11 [ 210.913106][ T29] audit: type=1400 audit(1736063487.828:922): avc: denied { read } for pid=7481 comm="syz.3.415" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.011695][ T29] audit: type=1400 audit(1736063487.828:923): avc: denied { open } for pid=7481 comm="syz.3.415" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.035565][ T29] audit: type=1400 audit(1736063487.828:924): avc: denied { ioctl } for pid=7481 comm="syz.3.415" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.061071][ T29] audit: type=1400 audit(1736063487.828:925): avc: denied { setopt } for pid=7481 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.080866][ T29] audit: type=1400 audit(1736063487.868:926): avc: denied { write } for pid=7494 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 211.391531][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 211.483255][ T29] audit: type=1400 audit(1736063488.398:927): avc: denied { ioctl } for pid=7503 comm="syz.3.423" path="socket:[14644]" dev="sockfs" ino=14644 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.548756][ T7506] can: request_module (can-proto-0) failed. [ 211.740894][ T29] audit: type=1400 audit(1736063488.398:928): avc: denied { ioctl } for pid=7503 comm="syz.3.423" path="socket:[14651]" dev="sockfs" ino=14651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.770230][ T29] audit: type=1400 audit(1736063488.478:929): avc: denied { write } for pid=7503 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 212.371449][ T7503] delete_channel: no stack [ 212.695067][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.705413][ T5866] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 212.715281][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.725238][ T5866] usb 5-1: config 0 descriptor?? [ 212.734417][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 213.678128][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.695389][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.317639][ T29] audit: type=1400 audit(1736063490.708:930): avc: denied { ioctl } for pid=7519 comm="syz.3.426" path="socket:[14671]" dev="sockfs" ino=14671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.654790][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.719102][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 214.732026][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.930556][ T47] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.071914][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 216.078721][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 216.304238][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 216.311141][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 216.317919][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 216.340668][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 216.348105][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 216.364138][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 216.373250][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 216.381739][ T29] audit: type=1400 audit(1736063493.278:931): avc: denied { getopt } for pid=7543 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.451687][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 216.466317][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 216.599386][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 216.606989][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 216.613955][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 216.620793][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 216.647722][ T5866] pwc: Registered as video103. [ 216.736788][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 65535, setting to 1024 [ 216.751567][ T7554] FAULT_INJECTION: forcing a failure. [ 216.751567][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 216.764256][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.1.434 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 216.774857][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.784919][ T7554] Call Trace: [ 216.788209][ T7554] [ 216.791151][ T7554] dump_stack_lvl+0x16c/0x1f0 [ 216.795849][ T7554] should_fail_ex+0x497/0x5b0 [ 216.800553][ T7554] should_failslab+0xc2/0x120 [ 216.805252][ T7554] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 216.810649][ T7554] ? skb_clone+0x190/0x3f0 [ 216.815090][ T7554] skb_clone+0x190/0x3f0 [ 216.819345][ T7554] netlink_deliver_tap+0xabd/0xd30 [ 216.824476][ T7554] netlink_unicast+0x5e1/0x7f0 [ 216.829255][ T7554] ? __pfx_netlink_unicast+0x10/0x10 [ 216.834566][ T7554] netlink_sendmsg+0x8b8/0xd70 [ 216.839352][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.844664][ T7554] ____sys_sendmsg+0xaaf/0xc90 [ 216.849442][ T7554] ? copy_msghdr_from_user+0x10b/0x160 [ 216.854909][ T7554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.860218][ T7554] ___sys_sendmsg+0x135/0x1e0 [ 216.864906][ T7554] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.870143][ T7554] ? __pfx_lock_release+0x10/0x10 [ 216.874022][ T7553] FAULT_INJECTION: forcing a failure. [ 216.874022][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.875171][ T7554] ? trace_lock_acquire+0x14e/0x1f0 [ 216.893381][ T7554] ? __fget_files+0x206/0x3a0 [ 216.898085][ T7554] __sys_sendmsg+0x16e/0x220 [ 216.902687][ T7554] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.907817][ T7554] do_syscall_64+0xcd/0x250 [ 216.912335][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.918244][ T7554] RIP: 0033:0x7f4754185d29 [ 216.922663][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.942319][ T7554] RSP: 002b:00007f475506c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.946053][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 216.950732][ T7554] RAX: ffffffffffffffda RBX: 00007f4754376080 RCX: 00007f4754185d29 [ 216.950751][ T7554] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000007 [ 216.950762][ T7554] RBP: 00007f475506c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.950774][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.950786][ T7554] R13: 0000000000000000 R14: 00007f4754376080 R15: 00007ffeedc95bf8 [ 216.950812][ T7554] [ 216.958877][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 216.990765][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.4.435 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 216.997472][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.000374][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.004183][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 217.012202][ T7553] Call Trace: [ 217.012214][ T7553] [ 217.012223][ T7553] dump_stack_lvl+0x16c/0x1f0 [ 217.012253][ T7553] should_fail_ex+0x497/0x5b0 [ 217.012281][ T7553] _copy_from_iter+0x2a1/0x1560 [ 217.012312][ T7553] ? _copy_from_iter+0x15e/0x1560 [ 217.027836][ T47] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 217.030383][ T7553] ? __pfx__copy_from_iter+0x10/0x10 [ 217.040651][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.050284][ T7553] ? __pfx__copy_from_iter+0x10/0x10 [ 217.053596][ T47] usb 4-1: Product: syz [ 217.056456][ T7553] ? __virt_addr_valid+0x1a4/0x590 [ 217.061140][ T47] usb 4-1: Manufacturer: syz [ 217.065785][ T7553] copy_page_from_iter+0xa5/0x120 [ 217.070638][ T47] usb 4-1: SerialNumber: syz [ 217.075609][ T7553] skb_copy_datagram_from_iter+0x29b/0x710 [ 217.075648][ T7553] tun_get_user+0x199c/0x3e50 [ 217.096414][ T47] usb 4-1: config 0 descriptor?? [ 217.097827][ T7553] ? __pfx_tun_get_user+0x10/0x10 [ 217.104549][ T7536] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 217.107324][ T7553] ? find_held_lock+0x2d/0x110 [ 217.113699][ T47] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 217.116971][ T7553] ? __pfx_lock_release+0x10/0x10 [ 217.117010][ T7553] tun_chr_write_iter+0xdc/0x210 [ 217.117051][ T7553] vfs_write+0x5ae/0x1150 [ 217.117072][ T7553] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.117100][ T7553] ? __pfx_vfs_write+0x10/0x10 [ 217.117123][ T7553] ? __fget_files+0x40/0x3a0 [ 217.117157][ T7553] ksys_write+0x12b/0x250 [ 217.117178][ T7553] ? __pfx_ksys_write+0x10/0x10 [ 217.117205][ T7553] do_syscall_64+0xcd/0x250 [ 217.117234][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.117262][ T7553] RIP: 0033:0x7fe54af847df [ 217.117278][ T7553] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 217.117296][ T7553] RSP: 002b:00007fe548dd5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.117323][ T7553] RAX: ffffffffffffffda RBX: 00007fe54b176080 RCX: 00007fe54af847df [ 217.117339][ T7553] RDX: 000000000000fdef RSI: 00000000200003c0 RDI: 00000000000000c8 [ 217.117352][ T7553] RBP: 00007fe548dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 217.117366][ T7553] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 217.117379][ T7553] R13: 0000000000000001 R14: 00007fe54b176080 R15: 00007ffee312a148 [ 217.117402][ T7553] [ 217.414142][ T5866] usb 5-1: USB disconnect, device number 8 [ 217.452120][ T5906] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.461091][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.472979][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.487698][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.510531][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.518658][ T5906] usb 3-1: Product: syz [ 217.522969][ T5906] usb 3-1: Manufacturer: syz [ 217.527967][ T5906] usb 3-1: SerialNumber: syz [ 217.572422][ T29] audit: type=1400 audit(1736063494.488:932): avc: denied { create } for pid=7560 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 217.840918][ T29] audit: type=1400 audit(1736063494.718:933): avc: denied { getopt } for pid=7560 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.936000][ T7566] Bluetooth: Invalid byte 02 after esc byte [ 218.286179][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 218.404986][ T5906] usb 3-1: 0:2 : does not exist [ 218.417530][ T29] audit: type=1800 audit(1736063495.328:934): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.438" name="bus" dev="overlay" ino=495 res=0 errno=0 [ 218.467886][ T5906] usb 3-1: USB disconnect, device number 14 [ 218.531817][ T47] scsi host1: usb-storage 4-1:0.0 [ 218.619489][ T47] usb 4-1: USB disconnect, device number 11 [ 218.712368][ T970] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.764340][ T7284] udevd[7284]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.860576][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 218.862284][ T970] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 218.862311][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.862333][ T970] usb 5-1: config 0 has no interface number 0 [ 218.862369][ T970] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 218.862400][ T970] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 218.862421][ T970] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.862436][ T970] usb 5-1: config 0 interface 52 has no altsetting 0 [ 218.863431][ T970] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 218.863472][ T970] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 218.863500][ T970] usb 5-1: Manufacturer: syz [ 218.865047][ T970] usb 5-1: config 0 descriptor?? [ 218.981179][ T47] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 219.140637][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 219.159000][ T47] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 219.159031][ T47] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 219.159053][ T47] usb 4-1: config 0 has no interface number 0 [ 219.159084][ T47] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.159113][ T47] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.159142][ T47] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.169893][ T47] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 219.169927][ T47] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 219.169952][ T47] usb 4-1: Product: syz [ 219.172321][ T47] usb 4-1: config 0 descriptor?? [ 219.174853][ T7575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.041934][ T47] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input10 [ 220.210701][ T5829] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 220.297715][ T970] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 220.320707][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 220.328630][ T970] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 220.347911][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.672737][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 221.234231][ T29] audit: type=1400 audit(1736063498.148:935): avc: denied { ioctl } for pid=7596 comm="syz.1.446" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14760 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.260103][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.560500][ C1] hrtimer: interrupt took 27188 ns [ 221.980962][ T29] audit: type=1400 audit(1736063498.898:936): avc: denied { create } for pid=7602 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.054944][ T47] usb 4-1: USB disconnect, device number 12 [ 222.060942][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 222.160720][ T29] audit: type=1400 audit(1736063498.938:937): avc: denied { bind } for pid=7602 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.225745][ T29] audit: type=1400 audit(1736063498.938:938): avc: denied { setopt } for pid=7602 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.245067][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.154447][ T7610] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 223.236926][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 223.300680][ T29] audit: type=1400 audit(1736063498.948:939): avc: denied { accept } for pid=7602 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.321149][ T29] audit: type=1400 audit(1736063500.058:940): avc: denied { write } for pid=7602 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.554481][ T29] audit: type=1400 audit(1736063500.098:941): avc: denied { shutdown } for pid=7606 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.458093][ T29] audit: type=1400 audit(1736063500.848:942): avc: denied { write } for pid=7605 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.477212][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.526515][ T29] audit: type=1400 audit(1736063500.868:943): avc: denied { create } for pid=7605 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 224.580038][ T29] audit: type=1400 audit(1736063500.888:944): avc: denied { sys_admin } for pid=7605 comm="syz.3.448" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 224.602317][ T7616] gfs2: gfs2 mount does not exist [ 224.665076][ T29] audit: type=1400 audit(1736063501.578:945): avc: denied { sys_module } for pid=7605 comm="syz.3.448" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.700564][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.815953][ T970] usb 5-1: USB disconnect, device number 9 [ 224.951495][ T5898] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.960426][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.975557][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.992237][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.007055][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.017648][ T5898] usb 2-1: Product: syz [ 225.030904][ T5898] usb 2-1: Manufacturer: syz [ 225.035796][ T5898] usb 2-1: SerialNumber: syz [ 225.577434][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 225.608214][ T7645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 226.009635][ T7647] libceph: resolve '+ælc' (ret=-3): failed [ 226.739090][ T5898] usb 2-1: 0:2 : does not exist [ 226.755328][ T5898] usb 2-1: USB disconnect, device number 12 [ 227.398173][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.547713][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 227.674923][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 227.674940][ T29] audit: type=1400 audit(1736063504.588:958): avc: denied { mount } for pid=7665 comm="syz.4.462" name="/" dev="ramfs" ino=15617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 227.708650][ T7666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.944536][ T7667] Process accounting resumed [ 229.307518][ T7669] Process accounting resumed [ 229.377100][ T29] audit: type=1400 audit(1736063506.288:959): avc: denied { read append } for pid=7670 comm="syz.0.464" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.423390][ T7672] netlink: 256 bytes leftover after parsing attributes in process `syz.0.464'. [ 229.457382][ T7675] netem: change failed [ 229.462117][ T29] audit: type=1400 audit(1736063506.288:960): avc: denied { open } for pid=7670 comm="syz.0.464" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.494827][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'. [ 229.508263][ T7675] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 229.551099][ T7672] netlink: 'syz.0.464': attribute type 7 has an invalid length. [ 229.559577][ T29] audit: type=1400 audit(1736063506.368:961): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.590863][ T7672] netlink: 'syz.0.464': attribute type 8 has an invalid length. [ 229.614058][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 229.635671][ T29] audit: type=1400 audit(1736063506.488:962): avc: denied { connect } for pid=7671 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.834999][ T29] audit: type=1400 audit(1736063506.488:963): avc: denied { write } for pid=7671 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.496976][ T29] audit: type=1400 audit(1736063507.168:964): avc: denied { write } for pid=7683 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.657886][ T29] audit: type=1400 audit(1736063507.528:965): avc: denied { read } for pid=7689 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.676922][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.140999][ T7702] netlink: 'syz.3.474': attribute type 9 has an invalid length. [ 232.148712][ T7702] netlink: 244 bytes leftover after parsing attributes in process `syz.3.474'. [ 232.551462][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.940592][ T5815] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 234.051859][ T5902] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.060728][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.070970][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.121308][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.161446][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.169982][ T5902] usb 5-1: Product: syz [ 234.219901][ T5902] usb 5-1: Manufacturer: syz [ 234.250933][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 234.274962][ T5902] usb 5-1: SerialNumber: syz [ 234.433044][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.490736][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.505387][ T7732] overlayfs: missing 'lowerdir' [ 234.523268][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.550632][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.574953][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.584119][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.802045][ T7738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.803218][ T29] audit: type=1400 audit(1736063511.708:966): avc: denied { append } for pid=7735 comm="syz.0.483" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.873410][ T5815] usb 3-1: GET_CAPABILITIES returned 0 [ 234.879028][ T5815] usbtmc 3-1:16.0: can't read capabilities [ 235.549522][ T5902] usb 5-1: 0:2 : does not exist [ 235.556237][ T5898] usb 3-1: USB disconnect, device number 15 [ 235.596021][ T5902] usb 5-1: USB disconnect, device number 10 [ 235.779711][ T7755] pim6reg: entered allmulticast mode [ 235.836659][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.907575][ T7756] delete_channel: no stack [ 235.916791][ T7756] pim6reg: left allmulticast mode [ 235.920600][ T29] audit: type=1400 audit(1736063512.828:967): avc: denied { create } for pid=7754 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.029296][ T29] audit: type=1400 audit(1736063512.828:968): avc: denied { setopt } for pid=7754 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.542756][ T7765] FAULT_INJECTION: forcing a failure. [ 236.542756][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 236.558665][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.1.490 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 236.569282][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.579355][ T7765] Call Trace: [ 236.582644][ T7765] [ 236.585581][ T7765] dump_stack_lvl+0x16c/0x1f0 [ 236.590287][ T7765] should_fail_ex+0x497/0x5b0 [ 236.594990][ T7765] should_failslab+0xc2/0x120 [ 236.599741][ T7765] __kmalloc_cache_noprof+0x68/0x410 [ 236.605045][ T7765] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 236.610618][ T7765] qp_broker_alloc+0xa8a/0x1ce0 [ 236.615496][ T7765] ? __pfx_qp_broker_alloc+0x10/0x10 [ 236.620797][ T7765] ? __pfx_lock_release+0x10/0x10 [ 236.625837][ T7765] ? trace_lock_acquire+0x14e/0x1f0 [ 236.631060][ T7765] vmci_qp_broker_alloc+0x93/0xc0 [ 236.636107][ T7765] vmci_host_do_alloc_queuepair.constprop.0+0x2ff/0x3d0 [ 236.643067][ T7765] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 236.650545][ T7765] ? tomoyo_path_number_perm+0x298/0x590 [ 236.656193][ T7765] ? __pfx_lock_release+0x10/0x10 [ 236.661253][ T7765] vmci_host_unlocked_ioctl+0x508/0x1fb0 [ 236.666909][ T7765] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 236.673009][ T7765] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 236.679531][ T7765] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 236.686055][ T7765] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.692935][ T7765] ? __pfx_lock_release+0x10/0x10 [ 236.697984][ T7765] ? selinux_file_ioctl+0x180/0x270 [ 236.703214][ T7765] ? selinux_file_ioctl+0xb4/0x270 [ 236.708343][ T7765] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 236.714436][ T7765] __x64_sys_ioctl+0x190/0x200 [ 236.719226][ T7765] do_syscall_64+0xcd/0x250 [ 236.723751][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.729666][ T7765] RIP: 0033:0x7f4754185d29 [ 236.734092][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.753710][ T7765] RSP: 002b:00007f475508d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.762137][ T7765] RAX: ffffffffffffffda RBX: 00007f4754375fa0 RCX: 00007f4754185d29 [ 236.770117][ T7765] RDX: 0000000020000540 RSI: 00000000000007a8 RDI: 0000000000000003 [ 236.778099][ T7765] RBP: 00007f475508d090 R08: 0000000000000000 R09: 0000000000000000 [ 236.786088][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.794073][ T7765] R13: 0000000000000000 R14: 00007f4754375fa0 R15: 00007ffeedc95bf8 [ 236.802068][ T7765] [ 237.506342][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.810012][ T7738] can0: slcan on ptm0. [ 239.272468][ T7775] capability: warning: `syz.1.494' uses 32-bit capabilities (legacy support in use) [ 239.364279][ T29] audit: type=1400 audit(1736063516.268:969): avc: denied { connect } for pid=7778 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.384515][ T29] audit: type=1400 audit(1736063516.268:970): avc: denied { setopt } for pid=7778 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.404016][ T29] audit: type=1400 audit(1736063516.278:971): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 239.702486][ T29] audit: type=1400 audit(1736063516.448:972): avc: denied { write } for pid=7778 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.951315][ T7743] can0 (unregistered): slcan off ptm0. [ 240.530801][ T29] audit: type=1400 audit(1736063516.828:973): avc: denied { setopt } for pid=7776 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 241.017168][ T29] audit: type=1400 audit(1736063517.828:974): avc: denied { getopt } for pid=7787 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 241.600951][ T29] audit: type=1400 audit(1736063518.478:975): avc: denied { append } for pid=7797 comm="syz.2.499" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.830759][ T970] IPVS: starting estimator thread 0... [ 243.090604][ T7808] IPVS: using max 27 ests per chain, 64800 per kthread [ 243.221388][ T7823] netlink: 'syz.4.502': attribute type 9 has an invalid length. [ 244.322479][ T7831] 9pnet_fd: Insufficient options for proto=fd [ 244.361518][ T29] audit: type=1400 audit(1736063521.238:976): avc: denied { remount } for pid=7830 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 244.438439][ T29] audit: type=1400 audit(1736063521.248:977): avc: denied { mounton } for pid=7830 comm="syz.0.504" path="/99/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 244.493317][ T29] audit: type=1400 audit(1736063521.258:978): avc: denied { unmount } for pid=7830 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 244.514458][ T29] audit: type=1400 audit(1736063521.308:979): avc: denied { mounton } for pid=7832 comm="syz.2.505" path="/111/file0" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 244.562853][ T29] audit: type=1400 audit(1736063521.478:980): avc: denied { mount } for pid=7832 comm="syz.2.505" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 244.778277][ T29] audit: type=1400 audit(1736063521.688:981): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.749791][ T29] audit: type=1400 audit(1736063522.658:982): avc: denied { setopt } for pid=7840 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.803070][ T29] audit: type=1400 audit(1736063522.708:983): avc: denied { ioctl } for pid=7845 comm="syz.3.511" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.400393][ T47] IPVS: starting estimator thread 0... [ 246.522563][ T7856] IPVS: using max 22 ests per chain, 52800 per kthread [ 246.923983][ T7073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.117858][ T7073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.705951][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.715274][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.728718][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.768129][ T7073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.799085][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.834963][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.852140][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.947052][ T29] audit: type=1400 audit(1736063524.858:984): avc: denied { create } for pid=7850 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.976180][ T7073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.457576][ T29] audit: type=1400 audit(1736063524.888:985): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 248.604078][ T29] audit: type=1400 audit(1736063525.308:986): avc: denied { ioctl } for pid=7869 comm="syz.4.519" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 248.867774][ T29] audit: type=1400 audit(1736063525.618:987): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.966323][ T29] audit: type=1400 audit(1736063525.618:988): avc: denied { read } for pid=5485 comm="dhcpcd" name="n106" dev="tmpfs" ino=3943 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.020004][ T29] audit: type=1400 audit(1736063525.618:989): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3943 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.101645][ T29] audit: type=1400 audit(1736063525.618:990): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3943 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.163560][ T7073] bridge_slave_1: left allmulticast mode [ 249.173864][ T7073] bridge_slave_1: left promiscuous mode [ 249.181736][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.221674][ T29] audit: type=1400 audit(1736063525.978:991): avc: denied { read } for pid=7886 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.282254][ T7073] bridge_slave_0: left allmulticast mode [ 249.289075][ T7073] bridge_slave_0: left promiscuous mode [ 249.340807][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.391636][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 249.400437][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 250.011733][ T5816] Bluetooth: hci4: command tx timeout [ 250.730853][ T7073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.743436][ T7073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.761704][ T7073] bond0 (unregistering): Released all slaves [ 250.820314][ T7914] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.829288][ T7914] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.838025][ T7914] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.846738][ T7914] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.886424][ T7914] team0: Port device vxlan0 added [ 250.912368][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 251.001234][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 251.001250][ T29] audit: type=1400 audit(1736063527.908:1001): avc: denied { create } for pid=7917 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 251.096159][ T29] audit: type=1400 audit(1736063527.918:1002): avc: denied { ioctl } for pid=7917 comm="syz.3.526" path="socket:[16212]" dev="sockfs" ino=16212 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 252.154085][ T5816] Bluetooth: hci4: command tx timeout [ 252.428747][ T7940] FAULT_INJECTION: forcing a failure. [ 252.428747][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.445953][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.1.532 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 252.456573][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.466930][ T7940] Call Trace: [ 252.470215][ T7940] [ 252.473154][ T7940] dump_stack_lvl+0x16c/0x1f0 [ 252.477853][ T7940] should_fail_ex+0x497/0x5b0 [ 252.482560][ T7940] _copy_from_user+0x2e/0xd0 [ 252.487175][ T7940] copy_msghdr_from_user+0x99/0x160 [ 252.492384][ T7940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 252.498191][ T7940] ? hlock_class+0x4e/0x130 [ 252.502711][ T7940] ? __lock_acquire+0x15a9/0x3c40 [ 252.507732][ T7940] ___sys_sendmsg+0xff/0x1e0 [ 252.512318][ T7940] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.517516][ T7940] ? __pfx___lock_acquire+0x10/0x10 [ 252.522711][ T7940] ? handle_mm_fault+0x497/0xaa0 [ 252.527682][ T7940] ? __pfx___might_resched+0x10/0x10 [ 252.532975][ T7940] ? __might_fault+0xe3/0x190 [ 252.537663][ T7940] __sys_sendmmsg+0x201/0x420 [ 252.542350][ T7940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 252.547556][ T7940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.553554][ T7940] ? fput+0x67/0x440 [ 252.557453][ T7940] ? ksys_write+0x1ba/0x250 [ 252.561951][ T7940] ? __pfx_ksys_write+0x10/0x10 [ 252.566799][ T7940] __x64_sys_sendmmsg+0x9c/0x100 [ 252.571732][ T7940] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.576928][ T7940] do_syscall_64+0xcd/0x250 [ 252.581436][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.587329][ T7940] RIP: 0033:0x7f4754185d29 [ 252.591768][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.611371][ T7940] RSP: 002b:00007f475508d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.619790][ T7940] RAX: ffffffffffffffda RBX: 00007f4754375fa0 RCX: 00007f4754185d29 [ 252.627755][ T7940] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006 [ 252.635726][ T7940] RBP: 00007f475508d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.643691][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.651665][ T7940] R13: 0000000000000000 R14: 00007f4754375fa0 R15: 00007ffeedc95bf8 [ 252.659644][ T7940] [ 252.714489][ T29] audit: type=1400 audit(1736063529.628:1003): avc: denied { write } for pid=5815 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16221 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.778030][ T29] audit: type=1400 audit(1736063529.668:1004): avc: denied { mount } for pid=7941 comm="syz.3.531" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 253.094270][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.128240][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.294304][ T5816] Bluetooth: hci4: command tx timeout [ 254.343971][ T7866] bridge_slave_0: entered allmulticast mode [ 254.384538][ T7866] bridge_slave_0: entered promiscuous mode [ 254.404942][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.418420][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.456470][ T7866] bridge_slave_1: entered allmulticast mode [ 254.472671][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'. [ 254.484135][ T7866] bridge_slave_1: entered promiscuous mode [ 254.527186][ T29] audit: type=1400 audit(1736063531.438:1005): avc: denied { ioctl } for pid=7959 comm="syz.1.533" path="socket:[16252]" dev="sockfs" ino=16252 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 254.660896][ T29] audit: type=1400 audit(1736063531.558:1006): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 254.862166][ T29] audit: type=1400 audit(1736063531.778:1007): avc: denied { read } for pid=7974 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.026767][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.047814][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.066330][ T29] audit: type=1400 audit(1736063531.978:1008): avc: denied { append } for pid=7980 comm="syz.1.538" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.100600][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.101012][ T29] audit: type=1400 audit(1736063532.008:1009): avc: denied { mount } for pid=7980 comm="syz.1.538" name="/" dev="configfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.135408][ T7982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7982 comm=syz.3.534 [ 255.178479][ T7866] team0: Port device team_slave_0 added [ 255.253962][ T7073] hsr_slave_0: left promiscuous mode [ 255.263586][ T7073] hsr_slave_1: left promiscuous mode [ 255.302113][ T5815] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 255.312953][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.339711][ T5815] usb 3-1: config 0 descriptor?? [ 255.390945][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.400035][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.417235][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.426394][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.455523][ T7073] veth1_macvtap: left promiscuous mode [ 255.465340][ T7073] veth0_macvtap: left promiscuous mode [ 255.471386][ T7073] veth1_vlan: left promiscuous mode [ 255.477066][ T7073] veth0_vlan: left promiscuous mode [ 255.583607][ T5815] kaweth 3-1:0.0: Firmware present in device. [ 255.770088][ T5815] kaweth 3-1:0.0: Statistics collection: 0 [ 256.055512][ T5815] kaweth 3-1:0.0: Multicast filter limit: 0 [ 256.061825][ T5815] kaweth 3-1:0.0: MTU: 0 [ 256.066883][ T5815] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 256.141086][ T7993] openvswitch: netlink: Key type 74 is out of range max 32 [ 256.323005][ T5834] Bluetooth: hci4: command tx timeout [ 256.328482][ T29] audit: type=1326 audit(1736063533.228:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.353160][ T29] audit: type=1326 audit(1736063533.228:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.376949][ T29] audit: type=1326 audit(1736063533.278:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.404413][ T29] audit: type=1326 audit(1736063533.278:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.428918][ T29] audit: type=1326 audit(1736063533.278:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.453072][ T29] audit: type=1326 audit(1736063533.278:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.476589][ T29] audit: type=1326 audit(1736063533.278:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.506214][ T29] audit: type=1326 audit(1736063533.278:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.550201][ T29] audit: type=1326 audit(1736063533.278:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.609218][ T29] audit: type=1326 audit(1736063533.278:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7996 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54af85d29 code=0x7ffc0000 [ 256.806017][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.812750][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.045581][ T7073] team0 (unregistering): Port device team_slave_1 removed [ 257.267988][ T7073] team0 (unregistering): Port device team_slave_0 removed [ 257.757026][ T7866] team0: Port device team_slave_1 added [ 257.768954][ T7984] tipc: Started in network mode [ 257.775053][ T7984] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 257.786559][ T7984] tipc: Enabled bearer , priority 10 [ 257.813282][ T5815] kaweth 3-1:0.0: kaweth interface created at eth5 [ 257.833900][ T5815] usb 3-1: USB disconnect, device number 16 [ 258.023277][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.030435][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.078784][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.124123][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.131298][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.216957][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.595515][ T8017] binder: 8015:8017 ioctl c0306201 20000580 returned -14 [ 259.068871][ T5902] tipc: Node number set to 4269801491 [ 259.141214][ T7866] hsr_slave_0: entered promiscuous mode [ 259.171849][ T7866] hsr_slave_1: entered promiscuous mode [ 259.220946][ T7866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.296453][ T7866] Cannot create hsr debugfs directory [ 259.520565][ T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 259.982071][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 260.120997][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 260.162397][ T47] usb 3-1: config 8 has an invalid interface number: 121 but max is 0 [ 260.189274][ T7073] IPVS: stop unused estimator thread 0... [ 260.196267][ T47] usb 3-1: config 8 has no interface number 0 [ 260.207464][ T47] usb 3-1: config 8 interface 121 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 16 [ 260.243195][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 260.252256][ T8056] bridge_slave_1: left allmulticast mode [ 260.257914][ T8056] bridge_slave_1: left promiscuous mode [ 260.263750][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.355041][ T8056] bridge_slave_0: left allmulticast mode [ 260.360761][ T8056] bridge_slave_0: left promiscuous mode [ 260.366482][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.873256][ T47] usb 3-1: config 8 interface 121 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 261.002989][ T47] usb 3-1: config 8 interface 121 has no altsetting 0 [ 261.011784][ T47] usb 3-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=a4.50 [ 261.021012][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.029032][ T47] usb 3-1: Product: syz [ 261.033254][ T47] usb 3-1: Manufacturer: syz [ 261.041053][ T47] usb 3-1: SerialNumber: syz [ 261.063677][ T8033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.129385][ T7866] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.140553][ T5937] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 261.154917][ T7866] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.173558][ T7866] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.211134][ T7866] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.323432][ T5937] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 261.340574][ T5937] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 261.359367][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 261.359384][ T29] audit: type=1400 audit(1736063538.268:1035): avc: denied { map } for pid=8067 comm="syz.3.558" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.362609][ T5937] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 261.378099][ T29] audit: type=1400 audit(1736063538.288:1036): avc: denied { execute } for pid=8067 comm="syz.3.558" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.443946][ T5937] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.493778][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.499013][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.509247][ T47] kvaser_usb 3-1:8.121: error -ENODEV: Cannot get usb endpoint(s) [ 261.519364][ T47] usbhid 3-1:8.121: couldn't find an input interrupt endpoint [ 261.527079][ T5937] usb 5-1: SerialNumber: syz [ 261.539162][ T47] usb 3-1: USB disconnect, device number 17 [ 261.553991][ T29] audit: type=1400 audit(1736063538.458:1037): avc: denied { execute } for pid=8067 comm="syz.3.558" path="/proc/sysvipc/sem" dev="proc" ino=4026532172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 261.589014][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.636357][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.643521][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.715852][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.723004][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.278924][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 262.305847][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 262.464901][ T8086] wireguard0: entered promiscuous mode [ 262.484812][ T8086] wireguard0: entered allmulticast mode [ 262.514241][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.064410][ T8097] netlink: 'syz.2.561': attribute type 5 has an invalid length. [ 263.213019][ T5937] usb 5-1: bad CDC descriptors [ 263.699777][ T5937] usb 5-1: USB disconnect, device number 11 [ 263.865995][ T8107] FAULT_INJECTION: forcing a failure. [ 263.865995][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 263.879729][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.4.564 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 263.890603][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.900650][ T8107] Call Trace: [ 263.903919][ T8107] [ 263.906840][ T8107] dump_stack_lvl+0x16c/0x1f0 [ 263.911518][ T8107] should_fail_ex+0x497/0x5b0 [ 263.916203][ T8107] ? fs_reclaim_acquire+0xae/0x150 [ 263.921326][ T8107] should_failslab+0xc2/0x120 [ 263.926002][ T8107] __kmalloc_noprof+0xcb/0x510 [ 263.930765][ T8107] qrtr_tun_write_iter+0xbf/0x1a0 [ 263.935792][ T8107] vfs_write+0x5ae/0x1150 [ 263.940146][ T8107] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 263.945799][ T8107] ? __pfx_vfs_write+0x10/0x10 [ 263.950554][ T8107] ? __fget_files+0x40/0x3a0 [ 263.955152][ T8107] ksys_write+0x12b/0x250 [ 263.959474][ T8107] ? __pfx_ksys_write+0x10/0x10 [ 263.964322][ T8107] do_syscall_64+0xcd/0x250 [ 263.968826][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.974718][ T8107] RIP: 0033:0x7fe54af85d29 [ 263.979125][ T8107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.998730][ T8107] RSP: 002b:00007fe548df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.007136][ T8107] RAX: ffffffffffffffda RBX: 00007fe54b175fa0 RCX: 00007fe54af85d29 [ 264.015129][ T8107] RDX: 00000000000000c8 RSI: 0000000020000000 RDI: 0000000000000003 [ 264.023093][ T8107] RBP: 00007fe548df6090 R08: 0000000000000000 R09: 0000000000000000 [ 264.031056][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.039032][ T8107] R13: 0000000000000000 R14: 00007fe54b175fa0 R15: 00007ffee312a148 [ 264.047004][ T8107] [ 264.150668][ T29] audit: type=1400 audit(1736063541.048:1038): avc: denied { sys_chroot } for pid=8108 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 264.172282][ T29] audit: type=1400 audit(1736063541.048:1039): avc: denied { setgid } for pid=8108 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 264.193368][ T29] audit: type=1400 audit(1736063541.058:1040): avc: denied { setrlimit } for pid=8108 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 265.311093][ T7866] veth0_vlan: entered promiscuous mode [ 265.322315][ T7866] veth1_vlan: entered promiscuous mode [ 265.793760][ T7866] veth0_macvtap: entered promiscuous mode [ 265.895513][ T7866] veth1_macvtap: entered promiscuous mode [ 265.919842][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 266.017050][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.028240][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.054374][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.075254][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.122279][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.147385][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.167069][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.198858][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.200571][ T5815] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.214604][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.833738][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.924606][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.977497][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.988721][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.000658][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 267.007636][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.010512][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.017942][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.043206][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.065427][ T7866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.079534][ T7866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.121207][ T5815] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 267.140614][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.161889][ T5815] usb 3-1: config 0 descriptor?? [ 267.181868][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.191314][ T5815] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 267.411492][ T7866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.427962][ T5866] usb 3-1: USB disconnect, device number 18 [ 267.434204][ T7866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.458809][ T7866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.498667][ T7866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.323160][ T7073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.350615][ T7073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.451680][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.459538][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.560307][ T29] audit: type=1400 audit(1736063545.468:1041): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/root/syzkaller.46TAP6/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 268.610643][ T29] audit: type=1400 audit(1736063545.498:1042): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/root/syzkaller.46TAP6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 269.138690][ T29] audit: type=1400 audit(1736063545.498:1043): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/root/syzkaller.46TAP6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 269.166438][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.238653][ T29] audit: type=1400 audit(1736063546.118:1044): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 269.474485][ T29] audit: type=1400 audit(1736063546.118:1045): avc: denied { mount } for pid=7866 comm="syz-executor" name="/" dev="gadgetfs" ino=7564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 269.497072][ T29] audit: type=1400 audit(1736063546.118:1046): avc: denied { mounton } for pid=7866 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 270.130114][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.438707][ T8196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.529193][ T5937] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.700584][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 270.720695][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 270.743354][ T5815] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 270.743522][ T29] audit: type=1400 audit(1736063547.648:1047): avc: denied { write } for pid=8187 comm="syz.4.579" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.755059][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.775392][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.838592][ T5815] usb 3-1: Product: syz [ 270.840261][ T5937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.848713][ T5815] usb 3-1: Manufacturer: syz [ 270.860594][ T5815] usb 3-1: SerialNumber: syz [ 270.871238][ T5937] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 270.886529][ T5937] usb 6-1: config 7 has no interface number 0 [ 270.920656][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 270.930818][ T5937] usb 6-1: config 7 interface 187 has no altsetting 0 [ 270.950842][ T5815] usb 3-1: config 0 descriptor?? [ 270.959247][ T29] audit: type=1400 audit(1736063547.648:1048): avc: denied { setattr } for pid=8187 comm="syz.4.579" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.977950][ T5937] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 271.004939][ T5815] as10x_usb: device has been detected [ 271.021261][ T5815] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 271.033878][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.060595][ T5937] usb 6-1: Product: syz [ 271.064801][ T5937] usb 6-1: Manufacturer: syz [ 271.069405][ T5937] usb 6-1: SerialNumber: syz [ 271.075332][ T5815] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 271.115707][ T5815] as10x_usb: error during firmware upload part1 [ 271.136182][ T5815] Registered device Abilis Systems DVB-Titan [ 271.231313][ T5815] usb 3-1: USB disconnect, device number 19 [ 271.330679][ T5815] Unregistered device Abilis Systems DVB-Titan [ 271.331731][ T5815] as10x_usb: device has been disconnected [ 271.385980][ T5937] usb 6-1: Not enough endpoints found in device, aborting! [ 271.604436][ T8192] netlink: 'syz.5.515': attribute type 62 has an invalid length. [ 271.633534][ T5815] usb 6-1: USB disconnect, device number 2 [ 271.708137][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 271.726696][ T8222] overlayfs: failed to resolve './bus': -2 [ 271.766276][ T8221] bridge_slave_1: left allmulticast mode [ 271.796852][ T8221] bridge_slave_1: left promiscuous mode [ 271.802294][ T5868] kernel write not supported for file bpf-map (pid: 5868 comm: kworker/0:6) [ 271.819903][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.929442][ T8221] bridge_slave_0: left allmulticast mode [ 271.974880][ T8221] bridge_slave_0: left promiscuous mode [ 272.011976][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.026102][ T29] audit: type=1400 audit(1736063548.938:1049): avc: denied { mounton } for pid=8227 comm="syz.2.585" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 272.089805][ T8232] XFS (nullb0): Invalid superblock magic number [ 272.352254][ T8249] FAULT_INJECTION: forcing a failure. [ 272.352254][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 272.365056][ T8249] CPU: 1 UID: 0 PID: 8249 Comm: syz.1.586 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 272.375672][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.385718][ T8249] Call Trace: [ 272.388990][ T8249] [ 272.391911][ T8249] dump_stack_lvl+0x16c/0x1f0 [ 272.396603][ T8249] should_fail_ex+0x497/0x5b0 [ 272.401285][ T8249] ? fs_reclaim_acquire+0xae/0x150 [ 272.406398][ T8249] should_failslab+0xc2/0x120 [ 272.411075][ T8249] __kmalloc_noprof+0xcb/0x510 [ 272.415839][ T8249] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 272.421488][ T8249] tomoyo_realpath_from_path+0xb9/0x720 [ 272.427048][ T8249] ? tomoyo_path_number_perm+0x235/0x590 [ 272.432678][ T8249] ? tomoyo_path_number_perm+0x235/0x590 [ 272.438310][ T8249] tomoyo_path_number_perm+0x248/0x590 [ 272.443764][ T8249] ? tomoyo_path_number_perm+0x235/0x590 [ 272.449414][ T8249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.455421][ T8249] ? __pfx_lock_release+0x10/0x10 [ 272.460446][ T8249] ? trace_lock_acquire+0x14e/0x1f0 [ 272.465649][ T8249] ? lock_acquire+0x2f/0xb0 [ 272.470145][ T8249] ? __fget_files+0x40/0x3a0 [ 272.474734][ T8249] ? __fget_files+0x206/0x3a0 [ 272.479412][ T8249] security_file_ioctl+0x9b/0x240 [ 272.484436][ T8249] __x64_sys_ioctl+0xb7/0x200 [ 272.489114][ T8249] do_syscall_64+0xcd/0x250 [ 272.493638][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.499541][ T8249] RIP: 0033:0x7f4754185d29 [ 272.503950][ T8249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.523560][ T8249] RSP: 002b:00007f475504b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.531970][ T8249] RAX: ffffffffffffffda RBX: 00007f4754376160 RCX: 00007f4754185d29 [ 272.539932][ T8249] RDX: 0000000020000040 RSI: 00000000c0405602 RDI: 0000000000000008 [ 272.547897][ T8249] RBP: 00007f475504b090 R08: 0000000000000000 R09: 0000000000000000 [ 272.555857][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.563817][ T8249] R13: 0000000000000000 R14: 00007f4754376160 R15: 00007ffeedc95bf8 [ 272.571793][ T8249] [ 272.577336][ T8249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.402026][ T5868] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 273.572096][ T5868] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 273.581977][ T5868] usb 3-1: config 0 has no interface number 0 [ 273.582044][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.194532][ T5868] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 274.203713][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.212215][ T5868] usb 3-1: Product: syz [ 274.216461][ T5868] usb 3-1: Manufacturer: syz [ 274.218562][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.232971][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.243034][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.256471][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.265291][ T5868] usb 3-1: SerialNumber: syz [ 274.265992][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.284957][ T25] usb 6-1: config 0 descriptor?? [ 274.289183][ T5868] usb 3-1: config 0 descriptor?? [ 274.310613][ T5868] sierra 3-1:0.153: Sierra USB modem converter detected [ 274.474557][ T29] audit: type=1400 audit(1736063551.388:1050): avc: denied { setopt } for pid=8268 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.690696][ T970] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 275.505707][ T970] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 275.514495][ T970] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 275.523711][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.534439][ T970] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 275.550560][ T970] usb 4-1: config 1 has no interface number 0 [ 275.556721][ T970] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 275.580994][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.599071][ T970] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 275.620295][ T5868] usb 3-1: USB disconnect, device number 20 [ 275.630854][ T5868] sierra 3-1:0.153: device disconnected [ 275.714493][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 275.725204][ T5866] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 275.831779][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.842545][ T29] audit: type=1400 audit(1736063552.748:1051): avc: denied { bind } for pid=8292 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.871432][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.894471][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 275.926621][ T5866] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 275.942591][ T970] snd_usb_pod 4-1:1.1: set_interface failed [ 275.948795][ T970] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 275.964712][ T5866] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 275.964718][ T29] audit: type=1400 audit(1736063552.748:1052): avc: denied { node_bind } for pid=8292 comm="syz.2.594" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 276.018053][ T970] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 276.018676][ T29] audit: type=1400 audit(1736063552.758:1053): avc: denied { listen } for pid=8292 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.052354][ T29] audit: type=1400 audit(1736063552.798:1054): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.076740][ T5866] usb 2-1: config 0 has no interface number 0 [ 276.079816][ T29] audit: type=1400 audit(1736063552.798:1055): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.086364][ T5866] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.118415][ T5866] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.143186][ T29] audit: type=1400 audit(1736063552.798:1056): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.169640][ T29] audit: type=1400 audit(1736063552.798:1057): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.210044][ T970] usb 4-1: USB disconnect, device number 14 [ 276.229640][ T5866] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 276.277599][ T29] audit: type=1400 audit(1736063552.798:1058): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.329778][ T5866] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 276.344413][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 276.354098][ T8302] evm: overlay not supported [ 276.368682][ T5866] usb 2-1: Product: syz [ 276.411464][ T29] audit: type=1400 audit(1736063552.798:1059): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.438437][ T5866] usb 2-1: config 0 descriptor?? [ 276.470326][ T8275] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 276.867757][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 276.887783][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 276.980429][ T25] usb 6-1: USB disconnect, device number 3 [ 277.117000][ T5866] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input12 [ 277.281729][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 277.405688][ T5834] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 277.434665][ T5937] usb 2-1: USB disconnect, device number 13 [ 277.434716][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 277.474362][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.497931][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.508449][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.522428][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.556013][ T8310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 277.576452][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.775136][ T970] usb 6-1: USB disconnect, device number 4 [ 277.786517][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.817677][ T8314] overlayfs: failed to resolve './bus': -2 [ 277.828817][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.301966][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.369175][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.618827][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.630849][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.639914][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.666415][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.675486][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.691624][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.752791][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 278.763570][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.798483][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.024506][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.056585][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.146071][ T8347] netlink: 80 bytes leftover after parsing attributes in process `syz.5.603'. [ 279.301902][ T5829] Bluetooth: hci5: sending frame failed (-49) [ 279.310085][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 279.361116][ T8350] Bluetooth: Invalid byte 02 after esc byte [ 279.381486][ T25] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 279.935416][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.055602][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.427274][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.440788][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.449169][ T25] usb 6-1: Product: syz [ 280.453451][ T25] usb 6-1: Manufacturer: syz [ 280.458059][ T25] usb 6-1: SerialNumber: syz [ 280.686179][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 280.686196][ T29] audit: type=1400 audit(1736063557.598:1068): avc: denied { map } for pid=8341 comm="syz.5.603" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 280.722647][ T5834] Bluetooth: hci0: command tx timeout [ 280.744181][ T25] usb 6-1: 0:2 : does not exist [ 280.757557][ T25] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 280.851001][ T25] usb 6-1: USB disconnect, device number 5 [ 280.871045][ T29] audit: type=1400 audit(1736063557.598:1069): avc: denied { execute } for pid=8341 comm="syz.5.603" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 281.283077][ T3488] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 281.496641][ T29] audit: type=1400 audit(1736063558.408:1070): avc: denied { append } for pid=8382 comm="syz.2.607" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 281.571679][ T8388] FAULT_INJECTION: forcing a failure. [ 281.571679][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 281.724997][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.2.607 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 281.735627][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.745699][ T8388] Call Trace: [ 281.748987][ T8388] [ 281.751929][ T8388] dump_stack_lvl+0x16c/0x1f0 [ 281.756630][ T8388] should_fail_ex+0x497/0x5b0 [ 281.761322][ T8388] ? fs_reclaim_acquire+0xae/0x150 [ 281.766420][ T8388] should_failslab+0xc2/0x120 [ 281.771094][ T8388] __kmalloc_noprof+0xcb/0x510 [ 281.775877][ T8388] ? d_absolute_path+0x137/0x1b0 [ 281.780837][ T8388] ? rcu_is_watching+0x12/0xc0 [ 281.785628][ T8388] tomoyo_encode2+0x100/0x3e0 [ 281.790296][ T8388] tomoyo_encode+0x29/0x50 [ 281.794714][ T8388] tomoyo_realpath_from_path+0x19d/0x720 [ 281.800351][ T8388] tomoyo_path_number_perm+0x248/0x590 [ 281.805817][ T8388] ? tomoyo_path_number_perm+0x235/0x590 [ 281.811452][ T8388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.817482][ T8388] ? __pfx_lock_release+0x10/0x10 [ 281.822531][ T8388] ? trace_lock_acquire+0x14e/0x1f0 [ 281.827759][ T8388] ? lock_acquire+0x2f/0xb0 [ 281.832278][ T8388] ? __fget_files+0x40/0x3a0 [ 281.836900][ T8388] ? __fget_files+0x206/0x3a0 [ 281.841596][ T8388] security_file_ioctl+0x9b/0x240 [ 281.846635][ T8388] __x64_sys_ioctl+0xb7/0x200 [ 281.851333][ T8388] do_syscall_64+0xcd/0x250 [ 281.855844][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.861745][ T8388] RIP: 0033:0x7f3911785d29 [ 281.866158][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.885779][ T8388] RSP: 002b:00007f39125d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.894191][ T8388] RAX: ffffffffffffffda RBX: 00007f3911976080 RCX: 00007f3911785d29 [ 281.902155][ T8388] RDX: 0000000020000080 RSI: 0000000080404509 RDI: 0000000000000003 [ 281.910119][ T8388] RBP: 00007f39125d7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.918084][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.926050][ T8388] R13: 0000000000000001 R14: 00007f3911976080 R15: 00007ffe9f66c318 [ 281.934031][ T8388] [ 281.967431][ T8388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.821487][ T5834] Bluetooth: hci0: command tx timeout [ 282.906332][ T8402] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.611'. [ 282.915638][ T8402] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.611'. [ 282.946577][ T5834] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 283.075450][ T29] audit: type=1400 audit(1736063559.988:1071): avc: denied { create } for pid=8404 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 283.155124][ T29] audit: type=1400 audit(1736063560.028:1072): avc: denied { connect } for pid=8404 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 283.247260][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 283.318618][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.345773][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.357316][ T3488] bond0 (unregistering): Released all slaves [ 284.205598][ T8423] netlink: 92 bytes leftover after parsing attributes in process `syz.5.616'. [ 284.246257][ T8424] FAULT_INJECTION: forcing a failure. [ 284.246257][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.261509][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.1.615 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 284.272138][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 284.282194][ T8424] Call Trace: [ 284.285458][ T8424] [ 284.288398][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 284.293069][ T8424] should_fail_ex+0x497/0x5b0 [ 284.297753][ T8424] _copy_from_user+0x2e/0xd0 [ 284.302354][ T8424] sk_setsockopt+0x73e/0x3dd0 [ 284.307033][ T8424] ? hlock_class+0x4e/0x130 [ 284.311528][ T8424] ? __pfx_sk_setsockopt+0x10/0x10 [ 284.316623][ T8424] ? __pfx_sock_has_perm+0x10/0x10 [ 284.321738][ T8424] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 284.328164][ T8424] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 284.335007][ T8424] ? selinux_socket_setsockopt+0x6a/0x80 [ 284.340680][ T8424] do_sock_setsockopt+0x3f4/0x480 [ 284.345756][ T8424] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 284.351315][ T8424] ? lock_acquire+0x2f/0xb0 [ 284.355870][ T8424] __sys_setsockopt+0x1a0/0x230 [ 284.360721][ T8424] __x64_sys_setsockopt+0xbd/0x160 [ 284.365826][ T8424] ? do_syscall_64+0x91/0x250 [ 284.370508][ T8424] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.375726][ T8424] do_syscall_64+0xcd/0x250 [ 284.380250][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.386148][ T8424] RIP: 0033:0x7f4754185d29 [ 284.390563][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.410263][ T8424] RSP: 002b:00007f475506c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.418676][ T8424] RAX: ffffffffffffffda RBX: 00007f4754376080 RCX: 00007f4754185d29 [ 284.426646][ T8424] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 284.434609][ T8424] RBP: 00007f475506c090 R08: 0000000000000004 R09: 0000000000000000 [ 284.442571][ T8424] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 284.450533][ T8424] R13: 0000000000000001 R14: 00007f4754376080 R15: 00007ffeedc95bf8 [ 284.458516][ T8424] [ 284.513317][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 284.622791][ T29] audit: type=1400 audit(1736063561.538:1073): avc: denied { mount } for pid=8429 comm="syz.2.618" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 284.966680][ T5834] Bluetooth: hci0: command tx timeout [ 285.548042][ T8435] Bluetooth: Invalid byte 02 after esc byte [ 285.576634][ T29] audit: type=1400 audit(1736063562.488:1074): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 285.632588][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.654041][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.671002][ T8329] bridge_slave_0: entered allmulticast mode [ 285.689855][ T8329] bridge_slave_0: entered promiscuous mode [ 285.699178][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.721151][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.728782][ T8329] bridge_slave_1: entered allmulticast mode [ 285.736238][ T8329] bridge_slave_1: entered promiscuous mode [ 285.879334][ T3488] hsr_slave_0: left promiscuous mode [ 285.948201][ T3488] hsr_slave_1: left promiscuous mode [ 285.955123][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.972308][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.003567][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.023974][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.138588][ T3488] veth1_macvtap: left promiscuous mode [ 286.183222][ T3488] veth0_macvtap: left promiscuous mode [ 286.216047][ T3488] veth1_vlan: left promiscuous mode [ 286.248611][ T3488] veth0_vlan: left promiscuous mode [ 286.379886][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 287.010880][ T5829] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 287.022556][ T5829] Bluetooth: hci3: Injecting HCI hardware error event [ 287.031571][ T970] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 287.039542][ T5829] Bluetooth: hci3: hardware error 0x00 [ 287.107576][ T5816] Bluetooth: hci0: command tx timeout [ 287.211484][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 287.233372][ T970] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 287.252313][ T970] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 287.265278][ T970] usb 3-1: config 0 has no interface number 0 [ 287.274153][ T970] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.290895][ T970] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.302478][ T970] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.315234][ T970] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 287.336258][ T970] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 287.358701][ T970] usb 3-1: Product: syz [ 287.387219][ T970] usb 3-1: config 0 descriptor?? [ 287.405282][ T8462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.600713][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.606016][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 288.029224][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 288.085612][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 288.095592][ T970] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input13 [ 288.413976][ T5834] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 288.432780][ T5902] usb 3-1: USB disconnect, device number 21 [ 288.432843][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 288.876029][ T8468] netlink: 'syz.5.622': attribute type 29 has an invalid length. [ 288.924274][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.972456][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.120622][ T5829] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 289.195316][ T8329] team0: Port device team_slave_0 added [ 289.259101][ T8329] team0: Port device team_slave_1 added [ 289.442917][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.449974][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.501525][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.518520][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.525777][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.530689][ T29] audit: type=1400 audit(1736063566.408:1075): avc: denied { create } for pid=8482 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 289.552783][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.640922][ T5937] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 289.822562][ T8329] hsr_slave_0: entered promiscuous mode [ 289.860840][ T8329] hsr_slave_1: entered promiscuous mode [ 289.870658][ T5898] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 289.880898][ T29] audit: type=1400 audit(1736063566.778:1076): avc: denied { write } for pid=8502 comm="syz.1.629" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 289.908625][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 289.945603][ T29] audit: type=1400 audit(1736063566.848:1077): avc: denied { write } for pid=8502 comm="syz.1.629" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 290.128466][ T8507] [ 290.128487][ T8507] ============================= [ 290.128491][ T8507] [ BUG: Invalid wait context ] [ 290.128500][ T8507] 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Not tainted [ 290.128509][ T8507] ----------------------------- [ 290.128513][ T8507] iou-wrk-8499/8507 is trying to lock: [ 290.128521][ T8507] ffff8880283fef18 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 290.128569][ T8507] other info that might help us debug this: [ 290.128574][ T8507] context-{5:5} [ 290.128581][ T8507] 3 locks held by iou-wrk-8499/8507: [ 290.128590][ T8507] #0: ffff888055cd9128 (&acct->lock){+.+.}-{2:2}, at: io_wq_worker+0x34c/0xdf0 [ 290.128632][ T8507] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 290.128670][ T8507] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 290.128706][ T8507] stack backtrace: [ 290.128712][ T8507] CPU: 0 UID: 0 PID: 8507 Comm: iou-wrk-8499 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.128730][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.128740][ T8507] Call Trace: [ 290.128745][ T8507] [ 290.128751][ T8507] dump_stack_lvl+0x116/0x1f0 [ 290.128773][ T8507] __lock_acquire+0x878/0x3c40 [ 290.128795][ T8507] ? __pfx___lock_acquire+0x10/0x10 [ 290.128811][ T8507] ? __pfx___lock_acquire+0x10/0x10 [ 290.128828][ T8507] ? hlock_class+0x4e/0x130 [ 290.128851][ T8507] lock_acquire.part.0+0x11b/0x380 [ 290.128868][ T8507] ? __lock_task_sighand+0xc2/0x340 [ 290.128885][ T8507] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 290.128902][ T8507] ? rcu_is_watching+0x12/0xc0 [ 290.128924][ T8507] ? trace_lock_acquire+0x14e/0x1f0 [ 290.128946][ T8507] ? trace_lock_acquire+0x14e/0x1f0 [ 290.128967][ T8507] ? __lock_task_sighand+0xc2/0x340 [ 290.128983][ T8507] ? lock_acquire+0x2f/0xb0 [ 290.129002][ T8507] ? __lock_task_sighand+0xc2/0x340 [ 290.129020][ T8507] _raw_spin_lock_irqsave+0x3a/0x60 [ 290.129034][ T8507] ? __lock_task_sighand+0xc2/0x340 [ 290.129046][ T8507] __lock_task_sighand+0xc2/0x340 [ 290.129058][ T8507] group_send_sig_info+0x290/0x300 [ 290.129073][ T8507] ? __pfx_group_send_sig_info+0x10/0x10 [ 290.129091][ T8507] ? __pfx___lock_acquire+0x10/0x10 [ 290.129103][ T8507] ? __pfx_mark_lock+0x10/0x10 [ 290.129115][ T8507] bpf_send_signal_common+0x3d3/0x530 [ 290.129126][ T8507] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 290.129139][ T8507] ? trace_lock_acquire+0x14e/0x1f0 [ 290.129154][ T8507] ? hlock_class+0x4e/0x130 [ 290.129169][ T8507] ? bpf_trace_run2+0x1c2/0x590 [ 290.129181][ T8507] bpf_send_signal+0x1d/0x30 [ 290.129191][ T8507] bpf_prog_631417f49dd64198+0x25/0x48 [ 290.129200][ T8507] bpf_trace_run2+0x231/0x590 [ 290.129212][ T8507] ? __pfx_bpf_trace_run2+0x10/0x10 [ 290.129223][ T8507] ? __lock_acquire+0x15a9/0x3c40 [ 290.129237][ T8507] __bpf_trace_contention_end+0xca/0x110 [ 290.129252][ T8507] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 290.129265][ T8507] ? hlock_class+0x4e/0x130 [ 290.129280][ T8507] ? __lock_acquire+0x15a9/0x3c40 [ 290.129293][ T8507] trace_contention_end.constprop.0+0xf0/0x170 [ 290.129323][ T8507] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 290.129338][ T8507] ? io_wq_for_each_worker.isra.0+0xc0/0x2d0 [ 290.129353][ T8507] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 290.129368][ T8507] ? lock_acquire.part.0+0x11b/0x380 [ 290.129381][ T8507] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 290.129394][ T8507] do_raw_spin_lock+0x210/0x2c0 [ 290.129408][ T8507] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 290.129422][ T8507] ? lock_acquire+0x2f/0xb0 [ 290.129433][ T8507] ? io_wq_worker+0x34c/0xdf0 [ 290.129448][ T8507] io_wq_worker+0x34c/0xdf0 [ 290.129463][ T8507] ? __pfx_io_wq_worker+0x10/0x10 [ 290.129478][ T8507] ? ret_from_fork+0x23/0x80 [ 290.129491][ T8507] ? __pfx_lock_release+0x10/0x10 [ 290.129503][ T8507] ? do_raw_spin_lock+0x12d/0x2c0 [ 290.129517][ T8507] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 290.129532][ T8507] ? __pfx_io_wq_worker+0x10/0x10 [ 290.129546][ T8507] ret_from_fork+0x45/0x80 [ 290.129561][ T8507] ? __pfx_io_wq_worker+0x10/0x10 [ 290.129575][ T8507] ret_from_fork_asm+0x1a/0x30 [ 290.129595][ T8507] [ 290.132562][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.132603][ T5937] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 290.132628][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.147133][ T5937] usb 6-1: config 0 descriptor?? [ 290.179660][ T3488] IPVS: stop unused estimator thread 0... [ 290.220488][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 290.230636][ T29] audit: type=1400 audit(1736063567.098:1078): avc: denied { write } for pid=5803 comm="syz-executor" path="pipe:[4654]" dev="pipefs" ino=4654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 290.304818][ T5898] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 290.676063][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.676090][ T5898] usb 3-1: Product: syz [ 290.676105][ T5898] usb 3-1: Manufacturer: syz [ 290.676120][ T5898] usb 3-1: SerialNumber: syz [ 290.762306][ T5898] usb 3-1: config 0 descriptor?? [ 291.310065][ T5898] usb 3-1: can't set config #0, error -71 [ 291.411277][ T5898] usb 3-1: USB disconnect, device number 22 [ 291.516871][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.532739][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.576280][ T5937] usbhid 6-1:0.0: can't add hid device: -71 [ 291.582322][ T5937] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 291.622622][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.623324][ T5937] usb 6-1: USB disconnect, device number 6 [ 291.651556][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.725290][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.735631][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.774171][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.784605][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.914872][ T52] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 291.932629][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.948330][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.957831][ T52] bond0 (unregistering): Released all slaves [ 292.129196][ T52] hsr_slave_0: left promiscuous mode [ 292.137237][ T52] hsr_slave_1: left promiscuous mode [ 292.143431][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.153053][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.162374][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.169780][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.181319][ T52] veth1_macvtap: left promiscuous mode [ 292.186825][ T52] veth0_macvtap: left promiscuous mode [ 292.193882][ T52] veth1_vlan: left promiscuous mode [ 292.199146][ T52] veth0_vlan: left promiscuous mode [ 292.315543][ T52] team0 (unregistering): Port device team_slave_1 removed [ 292.337112][ T52] team0 (unregistering): Port device team_slave_0 removed [ 292.724661][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.777910][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.837114][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.884219][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.957500][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.968314][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.006647][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.017025][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.063359][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.075049][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.124559][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.135963][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.221677][ T52] bridge_slave_1: left allmulticast mode [ 293.232235][ T52] bridge_slave_1: left promiscuous mode [ 293.237905][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.248326][ T52] bridge_slave_0: left allmulticast mode [ 293.254175][ T52] bridge_slave_0: left promiscuous mode [ 293.259847][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.272235][ T52] bridge_slave_1: left allmulticast mode [ 293.277877][ T52] bridge_slave_1: left promiscuous mode [ 293.285306][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.293975][ T52] bridge_slave_0: left allmulticast mode [ 293.299619][ T52] bridge_slave_0: left promiscuous mode [ 293.305809][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.419290][ T52] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 293.624815][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.634479][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.645779][ T52] bond0 (unregistering): Released all slaves [ 293.653861][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.663880][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.673974][ T52] bond0 (unregistering): Released all slaves [ 293.684982][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.694270][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.704339][ T52] bond0 (unregistering): Released all slaves [ 293.789803][ T52] : left promiscuous mode [ 294.057731][ T52] hsr_slave_0: left promiscuous mode [ 294.063689][ T52] hsr_slave_1: left promiscuous mode [ 294.069926][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.078508][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.086296][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.094996][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.105184][ T52] hsr_slave_0: left promiscuous mode [ 294.112096][ T52] hsr_slave_1: left promiscuous mode [ 294.118004][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.127573][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.138104][ T52] hsr_slave_0: left promiscuous mode [ 294.144050][ T52] hsr_slave_1: left promiscuous mode [ 294.149776][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.158687][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.168050][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.176558][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.186975][ T52] veth1_macvtap: left promiscuous mode [ 294.193539][ T52] veth0_macvtap: left promiscuous mode [ 294.199085][ T52] veth1_vlan: left promiscuous mode [ 294.204408][ T52] veth0_vlan: left promiscuous mode [ 294.210166][ T52] veth1_macvtap: left promiscuous mode [ 294.216770][ T52] veth0_macvtap: left promiscuous mode [ 294.222349][ T52] veth1_vlan: left promiscuous mode [ 294.227773][ T52] veth0_vlan: left promiscuous mode [ 294.335817][ T52] team0 (unregistering): Port device team_slave_1 removed [ 294.358801][ T52] team0 (unregistering): Port device team_slave_0 removed [ 294.497239][ T52] team0 (unregistering): Port device team_slave_1 removed [ 294.524487][ T52] team0 (unregistering): Port device team_slave_0 removed [ 294.670608][ T52] team0 (unregistering): Port device team_slave_1 removed [ 294.693501][ T52] team0 (unregistering): Port device team_slave_0 removed [ 295.329339][ T52] IPVS: stop unused estimator thread 0...