last executing test programs: 9.759959941s ago: executing program 0 (id=456): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x200fad6, 0x100, 0xffffffff, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x20000010) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) sendto$packet(r0, &(0x7f0000000500)="862fda0955b717946af7b302f4c2f2b48568dbd94ccd363eb212c5e2e297988868e49acabc1d0b8e56a4bd1aff4cc366f4b3ece554177ad58298bc2ad9dc777c8592d285ec82f49209ec9aec0650aeeb5d2785f289f5ce291239b769b9d7c2", 0x5f, 0x20000010, 0x0, 0x0) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 9.662354474s ago: executing program 0 (id=457): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103ff030c0000"], 0x0) syz_open_dev$evdev(0x0, 0x1, 0x101401) syz_usb_control_io(r0, 0x0, 0x0) mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x4003) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) mq_getsetattr(r2, &(0x7f0000000000)={0x8000, 0x5, 0x6, 0x3}, &(0x7f0000000180)) 8.439189516s ago: executing program 3 (id=459): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0xf2f9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000015c0)={0xef, 0x1, 0x2, "c6b07c8d7f23d390cdb4d072fcb59d6d4b3194358c4eca954f6a913dba3e4c7f", 0x30324c4a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000961000/0x2000)=nil, 0x2000, 0x1000008, 0x8031, 0xffffffffffffffff, 0xc36e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 8.301978979s ago: executing program 3 (id=460): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) r3 = syz_clone(0x40000000, &(0x7f0000000140)="7e87ce6655944fd98d2a3e4924f5b2a95fed34de29b66997bc838d9106c33112d37f5a", 0x23, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="8315964ee6b95630690f6b09349b1964a0f543bd97") ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000240)={r3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xfffffffa}}, './file0\x00'}) kcmp(r1, r0, 0x6, 0xffffffffffffffff, r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) prlimit64(r0, 0x1, &(0x7f0000000100)={0x4, 0x7}, &(0x7f0000000040)) accept$alg(r4, 0x0, 0x0) 7.860340443s ago: executing program 3 (id=465): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) close(0x4) 7.588522008s ago: executing program 0 (id=467): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) mount(0x0, 0x0, 0x0, 0x12000, &(0x7f0000000840)='/dev/media#\x00') r1 = creat(0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) fcntl$setsig(r0, 0xa, 0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000400)="70d8d4e7cd4b6d472197f11df94a63b13f1dd1f95865be6a0dc14c5760da31fc37fdf62cc82deda26156977709cb457c14c2ef2b6a205eaacd714851a31da2ac212e4391730584c548a92a488f7d172fd9afcc42cf23270fd5f708ad19e2db2f84778ede8d359ee7de561331b8d7935e5058a95ec3f7eaa6e77c5f896f5975ed36caf0a7bbe7110ba5d93744135d75511d9d267ce914ca2b637f1b8ac4521e10a6cfe2", 0xa3}], 0x2}, 0x40000) 6.674986087s ago: executing program 3 (id=469): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000180)={0x3, @bcast}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x184) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000001c0)={"db05b1ec2755caa3e0224418684d24643e0fe9178e54b96f8867cd1798790680", r9}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)={0x0, @aes128, 0x0, @desc1}) 6.610827047s ago: executing program 2 (id=470): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113d00000000008510000002000000850000007600000095000000000000009500a5050000000083d5fffa522e3fefee08fe3838911a1b22ff65141533153eabc277e2fe2b4f93ff6210dd82adf037566cc75c4e786f0f7b90c0dd934e3433af1bedadc1d5c39601737e9436988fe3488f49b2041ace164b46da7f401c07e2acc4d00352086a591f0d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3}, 0xc) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = epoll_create(0x10000e9) fcntl$addseals(r5, 0x409, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) 6.497458887s ago: executing program 4 (id=472): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/image_size', 0x2300, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r0, 0x0) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$inet6(0xa, 0x3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000300)="b40df04569537894b04da641ce18817a8ff856c364cd72f4", 0x18, 0x4000040, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params, @chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 5.399072965s ago: executing program 2 (id=473): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e000100776972656775617264000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r6) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) close(0x4) 5.305073958s ago: executing program 0 (id=475): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.960526874s ago: executing program 1 (id=476): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x200, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0x128480, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 3.835562152s ago: executing program 3 (id=477): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x18b582, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25010000000000000007410000000c001800000ff773797a30"], 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x6, 0x34, {0x34, 0xf, "154119cdcea583025294f5ecf2099a37e8775241a40768c4015b24efabebf3ff7c5b1e071d5bb07d7b9366612d2bee7aec92"}}, &(0x7f0000000200)={0x0, 0x3, 0xce, @string={0xce, 0x3, "eee65278e433c0ab6a45df75b3dfad8df084e3bbc706cf950f4f9c96775603aede3ff1e3d50f32254caef4a0fe68e61c90756c4175e1f3f224ebd6d25594550d9a513200146a9ccb6d4b1ca0ee49c060bbea2a848f4bfb3ba005effc3673ec56fd915d6bc857e8b30012ba544ff90c8f12a57d25246385b47fe041842f18b5341c08d016a44c0b50c3c266d28156d2afb63cb22f41e12ba1b9f27aee358895fe5b5152692c78feda059f7d90b754c220f93d1efda887b491a09348072ab1da7a03b56e705e330a6b7d0deccd"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000440)={0x40, 0xe, 0xf0, "c876a2f53f8107e42bdaf2db50953796322dd6c50576da9d5241dd4f7f092f6a3b098a49997c76779300464ecd7dda3ec7dbc46c9c3608a2fd80b8aa75e91f81c6f716e804daefe5cebc7c5ce5b0559c848cf047f57fee53a95474fbab0f7ba4f8598c20157ce50a914a03632d4d83a7425e95b1fd3c69fa8a1dd96398b1657de255caca88fdbde5639dfd60ddba2e6e16e3a28ae159760fb62cbd7337609ab0c04f4adc25a5bfd93edfb893765bb25673c6482e78ec7f7389722a862747d487caa26a53720af0c77ad1df26794241c2acb47735f15be928d19d12092fca8652b71b60b8482339bcebec6acb10ac2ef2"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x4fb8}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "0a0dc833ec50369864dc57f58fe390e68887702d0438d108ed5196fd1e28b42afbbe688286f1a532cedcf503feec83"}}) 3.834393776s ago: executing program 0 (id=478): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) readv(r0, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3e) ioctl$TCXONC(r1, 0x540a, 0x0) 3.767996769s ago: executing program 4 (id=479): socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.incfs.size\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x200000, 0xffffffff, 0x7, 0x0, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 3.709080445s ago: executing program 2 (id=480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) close(0x4) 3.573967194s ago: executing program 1 (id=481): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x48010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) recvmmsg$unix(r2, &(0x7f0000000ac0), 0x0, 0x160, &(0x7f0000000240)) 3.220072372s ago: executing program 0 (id=482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000004c0)='P\x00') connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000280), 0xf3a, 0x80000) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000340)={0x2, 0x2, 0xc1d}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) 2.028933044s ago: executing program 2 (id=483): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000004a80)={0xd, @output={0x0, 0x1, {0x0, 0x2}, 0x101, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) 909.404271ms ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r4, r3, 0x0, 0x110000) (async, rerun: 32) r5 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) ptrace$getregs(0xc, r0, 0x6, &(0x7f0000000300)=""/192) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getpid() (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%ps \x00'}, 0x20) 807.431879ms ago: executing program 4 (id=485): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2, 0x8, 0x6, 0x2, 0x500, 0x6, 0x20b}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12043600d9fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 798.434647ms ago: executing program 1 (id=486): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0xf2f9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000015c0)={0xef, 0x1, 0x2, "c6b07c8d7f23d390cdb4d072fcb59d6d4b3194358c4eca954f6a913dba3e4c7f", 0x30324c4a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000961000/0x2000)=nil, 0x2000, 0x1000008, 0x8031, 0xffffffffffffffff, 0xc36e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peekuser(0x3, r1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 453.453516ms ago: executing program 2 (id=487): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe, 0x6, "1ec8646db9d3"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd20000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd2c, 0xa8, {0x7, 0x0, 0x0, r1, 0x50d00, 0x2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x44004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 450.291727ms ago: executing program 4 (id=488): r0 = socket(0xf, 0x5, 0x2fd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x9}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x2}, 0x28) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x16000, 0x17000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x48, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0xa, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x280, 0x4) 385.934776ms ago: executing program 3 (id=489): socket$netlink(0x10, 0x3, 0x15) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="70ef46b2b7cc96fd1f588e259b58e0744182092c131b174ee812f197e0731cfcc06f10ed", 0x24}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x0, 0x0, {[0x6, 0xd, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 360.372552ms ago: executing program 1 (id=490): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x21d, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xc, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) 223.619267ms ago: executing program 1 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) getrlimit(0xc, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(r1) 156.064048ms ago: executing program 4 (id=492): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) readv(r0, 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3e) ioctl$TCXONC(r1, 0x540a, 0x0) 53.054865ms ago: executing program 1 (id=493): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x48010) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) r8 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) recvmmsg$unix(r2, &(0x7f0000000ac0), 0x0, 0x160, &(0x7f0000000240)) 0s ago: executing program 4 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sock_exceed_buf_limit\x00', r0, 0x0, 0x7ffffffffff}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000001020500000000000020000005000007060007c000440000"], 0x1c}, 0x1, 0x0, 0x0, 0x21bb5bbf76964103}, 0x8890) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="a9d74663813483c3b9cb850c01c4b27af19c17f4a499cb036edd3b18651663cb5abd9b5a33e85d0676b99fc12bbbe69bcfc1617443553a1e7687cb4700b608481464276babb8a5f623e02449a4676b94d005712900"/96, 0x60}], 0x1}], 0x1, 0x40801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x620, 0x1, 0x0, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x120) kernel console output (not intermixed with test programs): 1761735446.454:204): avc: denied { create } for pid=6085 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.560024][ T30] audit: type=1400 audit(1761735446.804:205): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.633295][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 100.642775][ T30] audit: type=1400 audit(1761735446.884:206): avc: denied { create } for pid=6119 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.840613][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 101.517780][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.532929][ T30] audit: type=1400 audit(1761735447.004:207): avc: denied { map } for pid=6119 comm="syz.3.42" path="socket:[9451]" dev="sockfs" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.555637][ T30] audit: type=1400 audit(1761735447.004:208): avc: denied { read } for pid=6119 comm="syz.3.42" path="socket:[9451]" dev="sockfs" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.873709][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.880882][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.888434][ T6131] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 101.898961][ T6132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.924198][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 101.933318][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 101.947034][ T6131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.44'. [ 102.070722][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 102.126726][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 102.291009][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.499859][ T5948] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 102.544827][ T6141] overlay: Unknown parameter '/' [ 102.577029][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.620996][ T5948] usb 5-1: config 0 descriptor?? [ 103.332417][ T5948] pantherlord 0003:0E8F:0003.0001: unknown main item tag 0x0 [ 103.339983][ T5948] pantherlord 0003:0E8F:0003.0001: unknown main item tag 0x0 [ 103.391978][ T5948] pantherlord 0003:0E8F:0003.0001: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 103.420571][ T5948] pantherlord 0003:0E8F:0003.0001: no output reports found [ 103.586698][ T5870] usb 5-1: USB disconnect, device number 2 [ 104.040969][ T6164] netlink: 'syz.1.55': attribute type 16 has an invalid length. [ 104.048670][ T6164] netlink: 'syz.1.55': attribute type 17 has an invalid length. [ 105.100789][ T5948] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.669283][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.676616][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 105.683835][ T6185] IPv6: NLM_F_CREATE should be set when creating new route [ 105.695076][ T6185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.710561][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 105.719290][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 105.960985][ T5948] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.980605][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.989555][ T5948] usb 1-1: Product: syz [ 105.996305][ T5948] usb 1-1: Manufacturer: syz [ 106.006421][ T5948] usb 1-1: SerialNumber: syz [ 106.015942][ T5948] usb 1-1: config 0 descriptor?? [ 106.324985][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 106.410599][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.434594][ T5948] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.487172][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 106.507076][ T6195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6195 comm=syz.2.64 [ 106.604848][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 106.616014][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 106.616045][ T30] audit: type=1400 audit(1761735452.864:213): avc: denied { read } for pid=6193 comm="syz.3.63" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.621479][ T980] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 106.639081][ T30] audit: type=1400 audit(1761735452.864:214): avc: denied { open } for pid=6193 comm="syz.3.63" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.653719][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.688949][ T30] audit: type=1400 audit(1761735452.874:215): avc: denied { execute } for pid=6193 comm="syz.3.63" path="/13/cpuacct.usage_percpu" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.710260][ T980] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 106.715758][ T6204] binder: 6193:6204 ioctl c0306201 0 returned -14 [ 106.728050][ T30] audit: type=1400 audit(1761735452.964:216): avc: denied { ioctl } for pid=6193 comm="syz.3.63" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.810597][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.961107][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 106.968089][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.993578][ T9] usb 3-1: config 0 has no interface number 0 [ 107.042928][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.070753][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.079531][ T9] usb 3-1: Product: syz [ 107.084441][ T9] usb 3-1: Manufacturer: syz [ 107.089195][ T9] usb 3-1: SerialNumber: syz [ 107.105811][ T9] usb 3-1: config 0 descriptor?? [ 107.122653][ T980] gspca_nw80x: reg_r err -32 [ 107.127334][ T980] nw80x 2-1:3.0: probe with driver nw80x failed with error -32 [ 107.142354][ T30] audit: type=1400 audit(1761735453.374:217): avc: denied { create } for pid=6210 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.149879][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.181517][ T30] audit: type=1400 audit(1761735453.374:218): avc: denied { listen } for pid=6210 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.205802][ T30] audit: type=1400 audit(1761735453.454:219): avc: denied { accept } for pid=6210 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.396892][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 107.416883][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 107.569056][ T30] audit: type=1400 audit(1761735453.814:220): avc: denied { write } for pid=6220 comm="syz.4.71" name="vlan0" dev="proc" ino=4026533862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.627689][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.636573][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.106150][ T30] audit: type=1400 audit(1761735453.894:221): avc: denied { create } for pid=6220 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.179454][ T30] audit: type=1400 audit(1761735453.894:222): avc: denied { connect } for pid=6220 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.261163][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.271557][ T980] usb 3-1: USB disconnect, device number 2 [ 108.288560][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.342735][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.367301][ T980] quatech2 3-1:0.51: device disconnected [ 109.881373][ T5948] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 110.187243][ T5948] usb 1-1: USB disconnect, device number 2 [ 110.263997][ T24] usb 2-1: USB disconnect, device number 3 [ 110.490010][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 111.692136][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 111.692164][ T30] audit: type=1400 audit(1761735456.884:229): avc: denied { write } for pid=6244 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.944471][ T30] audit: type=1400 audit(1761735458.134:230): avc: denied { create } for pid=6241 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.270719][ T5948] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.346383][ T30] audit: type=1400 audit(1761735458.594:231): avc: denied { create } for pid=6254 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.367950][ T6259] delete_channel: no stack [ 112.450165][ T5948] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.529378][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.623983][ T5948] usb 5-1: Product: syz [ 112.668790][ T5948] usb 5-1: Manufacturer: syz [ 112.744180][ T5948] usb 5-1: SerialNumber: syz [ 112.825786][ T30] audit: type=1400 audit(1761735458.674:232): avc: denied { bind } for pid=6254 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.845115][ T30] audit: type=1400 audit(1761735458.674:233): avc: denied { node_bind } for pid=6254 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.866429][ T30] audit: type=1400 audit(1761735458.684:234): avc: denied { write } for pid=6254 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.885946][ T30] audit: type=1400 audit(1761735458.684:235): avc: denied { read } for pid=6254 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.957899][ T30] audit: type=1400 audit(1761735459.204:236): avc: denied { shutdown } for pid=6263 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.022725][ T6264] syzkaller0: entered promiscuous mode [ 113.030611][ T30] audit: type=1400 audit(1761735459.224:237): avc: denied { getopt } for pid=6263 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.054838][ T6264] syzkaller0: entered allmulticast mode [ 113.106939][ T30] audit: type=1400 audit(1761735459.224:238): avc: denied { name_connect } for pid=6263 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 114.255434][ T6275] bridge1: entered promiscuous mode [ 114.356868][ T6260] tipc: Started in network mode [ 114.369183][ T6260] tipc: Node identity 1af3857a5b0c, cluster identity 4711 [ 114.386065][ T6260] tipc: Enabled bearer , priority 0 [ 114.533082][ T6240] tipc: Disabling bearer [ 114.844690][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.886711][ T5900] IPVS: starting estimator thread 0... [ 114.992370][ T6293] IPVS: using max 41 ests per chain, 98400 per kthread [ 115.050788][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 115.076910][ T6298] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 115.091460][ T5893] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 115.142106][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.293131][ T5893] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 115.327457][ T5948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 115.447751][ T5948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 115.479081][ T5948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 115.522919][ T5948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 115.552825][ T5948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 115.741442][ T5948] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 115.763089][ T5893] gspca_nw80x: reg_r err -32 [ 115.810159][ T5893] nw80x 4-1:3.0: probe with driver nw80x failed with error -32 [ 116.003241][ T5948] usb 5-1: USB disconnect, device number 3 [ 116.557145][ T6330] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.733157][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 116.733174][ T30] audit: type=1400 audit(1761735462.984:252): avc: denied { setopt } for pid=6341 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.790579][ T30] audit: type=1400 audit(1761735462.984:253): avc: denied { create } for pid=6341 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.840226][ T30] audit: type=1400 audit(1761735462.984:254): avc: denied { bind } for pid=6341 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.865403][ T30] audit: type=1400 audit(1761735463.014:255): avc: denied { write } for pid=6341 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.973660][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 116.981701][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 116.989506][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 116.997311][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.005104][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.012904][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.020743][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 117.028511][ T6347] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 118.739739][ T6360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.747868][ T6360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.758185][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 118.767082][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 119.009995][ T980] usb 4-1: USB disconnect, device number 4 [ 119.202365][ T6369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.211321][ T6369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.223721][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 119.232648][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 119.368121][ T30] audit: type=1400 audit(1761735465.614:256): avc: denied { write } for pid=6371 comm="syz.3.104" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.578418][ T6366] bridge_slave_0: left allmulticast mode [ 119.603634][ T6366] bridge_slave_0: left promiscuous mode [ 119.609355][ T6376] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 119.609444][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.660569][ T30] audit: type=1400 audit(1761735465.614:257): avc: denied { open } for pid=6371 comm="syz.3.104" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.707788][ T6366] bridge_slave_1: left allmulticast mode [ 120.868677][ T6366] bridge_slave_1: left promiscuous mode [ 120.876073][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.026610][ T6366] bond0: (slave bond_slave_0): Releasing backup interface [ 121.068147][ T6366] bond0: (slave bond_slave_1): Releasing backup interface [ 121.651246][ T30] audit: type=1400 audit(1761735467.824:258): avc: denied { create } for pid=6392 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.802178][ T6366] team0: Port device team_slave_0 removed [ 121.822108][ T6366] team0: Port device team_slave_1 removed [ 121.840656][ T30] audit: type=1400 audit(1761735467.854:259): avc: denied { setopt } for pid=6392 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.860563][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.880397][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.919735][ T30] audit: type=1400 audit(1761735467.864:260): avc: denied { read } for pid=6392 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.941964][ T6366] net_ratelimit: 46 callbacks suppressed [ 121.941975][ T6366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.965047][ T30] audit: type=1400 audit(1761735467.964:261): avc: denied { write } for pid=6392 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.037941][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.049594][ T6376] team0: Port device bond0 added [ 122.113726][ T6399] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 122.115045][ T6398] bridge_slave_0: left allmulticast mode [ 122.149853][ T30] audit: type=1400 audit(1761735468.394:262): avc: denied { connect } for pid=6401 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.177675][ T6398] bridge_slave_0: left promiscuous mode [ 122.194715][ T30] audit: type=1400 audit(1761735468.394:263): avc: denied { getopt } for pid=6401 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.219960][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.303359][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 123.740825][ T30] audit: type=1400 audit(1761735469.984:264): avc: denied { read } for pid=6401 comm="syz.1.112" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.778609][ T30] audit: type=1400 audit(1761735470.014:265): avc: denied { open } for pid=6401 comm="syz.1.112" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.859004][ T30] audit: type=1400 audit(1761735470.014:266): avc: denied { ioctl } for pid=6401 comm="syz.1.112" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.984995][ T6398] bridge_slave_1: left allmulticast mode [ 124.016476][ T6398] bridge_slave_1: left promiscuous mode [ 124.031690][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.060807][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.498794][ T30] audit: type=1400 audit(1761735470.344:267): avc: denied { connect } for pid=6413 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 124.526353][ T6398] bond0: (slave bond_slave_0): Releasing backup interface [ 124.547408][ T6398] bond0: (slave bond_slave_1): Releasing backup interface [ 124.580687][ T6398] team0: Port device team_slave_0 removed [ 124.605123][ T30] audit: type=1400 audit(1761735470.844:268): avc: denied { write } for pid=6419 comm="syz.1.116" lport=60472 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.720630][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 125.011924][ T6398] team0: Port device team_slave_1 removed [ 125.040832][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 125.053240][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.060888][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.093606][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.109351][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 125.188592][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.207830][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.391234][ T6431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.418400][ T6431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.427764][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 125.436969][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 125.609011][ T9] gspca_nw80x: reg_r err -32 [ 125.613787][ T9] nw80x 5-1:3.0: probe with driver nw80x failed with error -32 [ 125.632842][ T6398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.724970][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.746497][ T6399] team0: Port device bond0 added [ 126.780207][ T24] usb 5-1: USB disconnect, device number 4 [ 126.899687][ T6469] bridge_slave_0: left allmulticast mode [ 126.905385][ T6469] bridge_slave_0: left promiscuous mode [ 126.913660][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.937939][ T6469] bridge_slave_1: left allmulticast mode [ 126.963041][ T6469] bridge_slave_1: left promiscuous mode [ 126.971614][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.011907][ T6470] netlink: 'syz.4.133': attribute type 10 has an invalid length. [ 127.047572][ T6469] bond0: (slave bond_slave_0): Releasing backup interface [ 127.072014][ T6469] bond0: (slave bond_slave_1): Releasing backup interface [ 127.114702][ T6469] team0: Port device team_slave_0 removed [ 127.170713][ T6469] team0: Port device team_slave_1 removed [ 127.185834][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.197197][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.228706][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 127.228721][ T30] audit: type=1400 audit(1761735473.474:277): avc: denied { mount } for pid=6449 comm="syz.1.126" name="/" dev="ramfs" ino=10237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.279611][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.288148][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.333814][ T6469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.406347][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.422232][ T6472] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.429314][ T6472] overlayfs: failed to set xattr on upper [ 127.429372][ T30] audit: type=1400 audit(1761735473.664:278): avc: denied { mounton } for pid=6465 comm="syz.2.132" path="/file0" dev="ramfs" ino=11267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 127.435075][ T6472] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.435104][ T6472] overlayfs: ...falling back to index=off. [ 127.435111][ T6472] overlayfs: ...falling back to uuid=null. [ 127.480280][ T6470] team0: Port device bond0 added [ 127.516358][ T30] audit: type=1400 audit(1761735473.694:279): avc: denied { mount } for pid=6465 comm="syz.2.132" name="/" dev="overlay" ino=11268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.727997][ T30] audit: type=1800 audit(1761735473.894:280): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.135" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 127.851695][ T6480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.860662][ T6480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.869201][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 127.878143][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 128.140428][ T6483] FAULT_INJECTION: forcing a failure. [ 128.140428][ T6483] name failslab, interval 1, probability 0, space 0, times 1 [ 128.179379][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 128.179397][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.179406][ T6483] Call Trace: [ 128.179410][ T6483] [ 128.179414][ T6483] dump_stack_lvl+0x16c/0x1f0 [ 128.179437][ T6483] should_fail_ex+0x512/0x640 [ 128.179450][ T6483] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.179466][ T6483] should_failslab+0xc2/0x120 [ 128.179479][ T6483] kmem_cache_alloc_noprof+0x75/0x6e0 [ 128.179496][ T6483] ? skb_clone+0x190/0x3f0 [ 128.179513][ T6483] ? skb_clone+0x190/0x3f0 [ 128.179525][ T6483] skb_clone+0x190/0x3f0 [ 128.179540][ T6483] netlink_deliver_tap+0xabd/0xd30 [ 128.179559][ T6483] netlink_unicast+0x64c/0x870 [ 128.179576][ T6483] ? __pfx_netlink_unicast+0x10/0x10 [ 128.179597][ T6483] netlink_sendmsg+0x8c8/0xdd0 [ 128.179614][ T6483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.179635][ T6483] ____sys_sendmsg+0xa98/0xc70 [ 128.179653][ T6483] ? copy_msghdr_from_user+0x10a/0x160 [ 128.179667][ T6483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.179696][ T6483] ___sys_sendmsg+0x134/0x1d0 [ 128.179711][ T6483] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.179723][ T6483] ? __lock_acquire+0x622/0x1c90 [ 128.179760][ T6483] __sys_sendmsg+0x16d/0x220 [ 128.179774][ T6483] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.179798][ T6483] do_syscall_64+0xcd/0xfa0 [ 128.179815][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.179826][ T6483] RIP: 0033:0x7f88bf18efc9 [ 128.179836][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.179846][ T6483] RSP: 002b:00007f88bffcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.179857][ T6483] RAX: ffffffffffffffda RBX: 00007f88bf3e5fa0 RCX: 00007f88bf18efc9 [ 128.179864][ T6483] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.179871][ T6483] RBP: 00007f88bffcb090 R08: 0000000000000000 R09: 0000000000000000 [ 128.179877][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.179883][ T6483] R13: 00007f88bf3e6038 R14: 00007f88bf3e5fa0 R15: 00007ffeb64626d8 [ 128.179899][ T6483] [ 128.179918][ T6483] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.446421][ T6483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.453711][ T6483] IPv6: NLM_F_CREATE should be set when creating new route [ 128.460951][ T6483] IPv6: NLM_F_CREATE should be set when creating new route [ 128.711151][ T6494] fuse: Bad value for 'rootmode' [ 128.732834][ T30] audit: type=1400 audit(1761735474.964:281): avc: denied { create } for pid=6493 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.932475][ T6498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.137'. [ 128.998406][ T30] audit: type=1400 audit(1761735474.964:282): avc: denied { setopt } for pid=6493 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.133278][ T30] audit: type=1400 audit(1761735475.014:283): avc: denied { checkpoint_restore } for pid=6487 comm="syz.0.139" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.161111][ T30] audit: type=1400 audit(1761735475.024:284): avc: denied { getopt } for pid=6484 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.186657][ T30] audit: type=1400 audit(1761735475.074:285): avc: denied { write } for pid=6495 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.370661][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.500608][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 130.508046][ T5870] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 130.590415][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.111389][ T30] audit: type=1400 audit(1761735477.354:286): avc: denied { create } for pid=6511 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.269516][ T5870] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 131.750567][ T5870] gspca_nw80x: reg_r err -32 [ 131.813741][ T5870] nw80x 3-1:3.0: probe with driver nw80x failed with error -32 [ 132.001092][ T6522] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 132.606247][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855440][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 132.855455][ T30] audit: type=1400 audit(1761735479.104:289): avc: denied { ioctl } for pid=6529 comm="syz.4.151" path="socket:[10675]" dev="sockfs" ino=10675 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.890773][ T9] usb 3-1: USB disconnect, device number 3 [ 133.511944][ T30] audit: type=1400 audit(1761735479.364:290): avc: denied { read write } for pid=6529 comm="syz.4.151" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.604676][ T30] audit: type=1400 audit(1761735479.364:291): avc: denied { open } for pid=6529 comm="syz.4.151" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.732123][ T6538] fuse: Bad value for 'rootmode' [ 133.909329][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 133.931416][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.154'. [ 135.296702][ T6554] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 135.324249][ T6554] CIFS mount error: No usable UNC path provided in device string! [ 135.324249][ T6554] [ 135.335557][ T6554] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.991820][ T6557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.003800][ T6557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.019565][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 136.028637][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 136.922289][ T30] audit: type=1400 audit(1761735483.144:292): avc: denied { ioctl } for pid=6540 comm="syz.1.155" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.020196][ T6569] FAULT_INJECTION: forcing a failure. [ 137.020196][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 137.172643][ T6571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.181953][ T6571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.190047][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 137.199070][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 137.211007][ T6569] CPU: 0 UID: 0 PID: 6569 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) [ 137.211035][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.211047][ T6569] Call Trace: [ 137.211053][ T6569] [ 137.211059][ T6569] dump_stack_lvl+0x16c/0x1f0 [ 137.211088][ T6569] should_fail_ex+0x512/0x640 [ 137.211108][ T6569] ? __kmalloc_noprof+0xca/0x880 [ 137.211133][ T6569] should_failslab+0xc2/0x120 [ 137.211153][ T6569] __kmalloc_noprof+0xdd/0x880 [ 137.211175][ T6569] ? nla_strdup+0xc6/0x150 [ 137.211199][ T6569] ? nla_strdup+0xc6/0x150 [ 137.211217][ T6569] nla_strdup+0xc6/0x150 [ 137.211239][ T6569] nf_tables_addchain.constprop.0+0x483/0x1c90 [ 137.211271][ T6569] ? nft_chain_lookup+0x5be/0xaa0 [ 137.211290][ T6569] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 137.211337][ T6569] ? nla_strcmp+0xff/0x130 [ 137.211360][ T6569] ? nft_table_lookup.part.0+0x1e3/0x230 [ 137.211386][ T6569] nf_tables_newchain+0x206d/0x2da0 [ 137.211420][ T6569] ? __nla_validate_parse+0x600/0x2880 [ 137.211445][ T6569] ? __pfx_nf_tables_newchain+0x10/0x10 [ 137.211469][ T6569] ? __pfx___nla_validate_parse+0x10/0x10 [ 137.211502][ T6569] ? __nla_parse+0x40/0x60 [ 137.211527][ T6569] nfnetlink_rcv_batch+0x190d/0x2350 [ 137.211560][ T6569] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 137.211595][ T6569] ? avc_has_perm_noaudit+0x149/0x3b0 [ 137.211643][ T6569] ? __nla_parse+0x40/0x60 [ 137.211668][ T6569] nfnetlink_rcv+0x3c1/0x430 [ 137.211686][ T6569] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 137.211712][ T6569] netlink_unicast+0x5aa/0x870 [ 137.211739][ T6569] ? __pfx_netlink_unicast+0x10/0x10 [ 137.211771][ T6569] netlink_sendmsg+0x8c8/0xdd0 [ 137.211798][ T6569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.211830][ T6569] ____sys_sendmsg+0xa98/0xc70 [ 137.211856][ T6569] ? copy_msghdr_from_user+0x10a/0x160 [ 137.211877][ T6569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.211913][ T6569] ___sys_sendmsg+0x134/0x1d0 [ 137.211943][ T6569] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.211962][ T6569] ? __lock_acquire+0x622/0x1c90 [ 137.212019][ T6569] __sys_sendmsg+0x16d/0x220 [ 137.212041][ T6569] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.212078][ T6569] do_syscall_64+0xcd/0xfa0 [ 137.212104][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.212122][ T6569] RIP: 0033:0x7ff1fdb8efc9 [ 137.212136][ T6569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.212151][ T6569] RSP: 002b:00007ff1fe949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.212167][ T6569] RAX: ffffffffffffffda RBX: 00007ff1fdde5fa0 RCX: 00007ff1fdb8efc9 [ 137.212178][ T6569] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 137.212188][ T6569] RBP: 00007ff1fe949090 R08: 0000000000000000 R09: 0000000000000000 [ 137.212198][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.212207][ T6569] R13: 00007ff1fdde6038 R14: 00007ff1fdde5fa0 R15: 00007ffd2ecbf928 [ 137.212232][ T6569] [ 137.700578][ T5893] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 138.127263][ T30] audit: type=1400 audit(1761735484.374:293): avc: denied { create } for pid=6574 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.240608][ T5900] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 138.248397][ T30] audit: type=1400 audit(1761735484.444:294): avc: denied { create } for pid=6574 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.447419][ T30] audit: type=1400 audit(1761735484.454:295): avc: denied { listen } for pid=6574 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.496733][ T5900] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 138.507173][ T5900] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.535840][ T5900] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 138.547483][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.561292][ T30] audit: type=1400 audit(1761735484.464:296): avc: denied { create } for pid=6574 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.598623][ T5900] usb 3-1: Product: syz [ 138.608352][ T5900] usb 3-1: Manufacturer: syz [ 138.620531][ T5900] usb 3-1: SerialNumber: syz [ 138.637266][ T5900] usb 3-1: config 0 descriptor?? [ 138.841160][ T30] audit: type=1400 audit(1761735484.954:297): avc: denied { mount } for pid=6584 comm="syz.0.166" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.070418][ T30] audit: type=1400 audit(1761735484.954:298): avc: denied { search } for pid=6584 comm="syz.0.166" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.141018][ T5893] usb 2-1: device descriptor read/all, error -71 [ 139.603370][ T30] audit: type=1400 audit(1761735484.964:299): avc: denied { accept } for pid=6584 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.624778][ T30] audit: type=1400 audit(1761735485.134:300): avc: denied { ioctl } for pid=6576 comm="syz.2.164" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.696114][ T30] audit: type=1400 audit(1761735485.144:301): avc: denied { read write } for pid=6586 comm="syz.4.168" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.809034][ T30] audit: type=1400 audit(1761735485.144:302): avc: denied { open } for pid=6586 comm="syz.4.168" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.892085][ T6596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.910574][ T6596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.924656][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 139.933654][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 140.032607][ T6601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.062281][ T6601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.070947][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 140.079763][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 140.534458][ T6607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.543139][ T6607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.572784][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 140.581869][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 140.992287][ T5948] usb 3-1: USB disconnect, device number 4 [ 141.077539][ T6613] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.108379][ T6613] block device autoloading is deprecated and will be removed. [ 143.141042][ T6623] IPVS: sed: FWM 3 0x00000003 - no destination available [ 143.148307][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 143.204826][ T10] IPVS: starting estimator thread 0... [ 143.228471][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 143.228503][ T30] audit: type=1400 audit(1761735489.464:305): avc: denied { accept } for pid=6615 comm="syz.0.174" lport=37419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.479734][ T30] audit: type=1400 audit(1761735489.724:306): avc: denied { bind } for pid=6619 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.635649][ T6624] IPVS: using max 63 ests per chain, 151200 per kthread [ 143.646070][ T30] audit: type=1400 audit(1761735489.724:307): avc: denied { connect } for pid=6619 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.149902][ T30] audit: type=1400 audit(1761735489.744:308): avc: denied { write } for pid=6619 comm="syz.4.175" path="socket:[11552]" dev="sockfs" ino=11552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.206166][ T30] audit: type=1400 audit(1761735489.744:309): avc: denied { accept } for pid=6619 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.226167][ T30] audit: type=1400 audit(1761735489.744:310): avc: denied { read } for pid=6619 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.246890][ T30] audit: type=1400 audit(1761735489.874:311): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 144.288306][ T30] audit: type=1800 audit(1761735490.044:312): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.176" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 144.312872][ T30] audit: type=1400 audit(1761735490.504:313): avc: denied { setopt } for pid=6630 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.330717][ T6650] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.438635][ T30] audit: type=1400 audit(1761735491.594:314): avc: denied { append } for pid=6640 comm="syz.4.182" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.023506][ T6687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.032672][ T6687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.050765][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 148.059624][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 148.597889][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 148.597921][ T30] audit: type=1400 audit(1761735494.804:316): avc: denied { setattr } for pid=6689 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.401171][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 152.537001][ T30] audit: type=1400 audit(1761735498.654:317): avc: denied { create } for pid=6699 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.714039][ T30] audit: type=1400 audit(1761735498.964:318): avc: denied { mounton } for pid=6724 comm="syz.2.200" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.827443][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 152.861511][ T30] audit: type=1400 audit(1761735499.114:319): avc: denied { write } for pid=6723 comm="syz.3.198" path="socket:[11942]" dev="sockfs" ino=11942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.178178][ T30] audit: type=1400 audit(1761735499.194:320): avc: denied { setopt } for pid=6723 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.439937][ T6737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.449515][ T6737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.460352][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 153.469342][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 153.733757][ T30] audit: type=1400 audit(1761735499.984:321): avc: denied { map } for pid=6729 comm="syz.1.201" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.018483][ T6755] bond1: entered allmulticast mode [ 155.267975][ T6761] usb usb1: usbfs: process 6761 (syz.4.210) did not claim interface 0 before use [ 155.269794][ T30] audit: type=1400 audit(1761735501.514:322): avc: denied { append } for pid=6760 comm="syz.4.210" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.934927][ T6778] ubi: mtd0 is already attached to ubi31 [ 158.310806][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.399413][ T30] audit: type=1400 audit(1761735505.644:323): avc: denied { map } for pid=6792 comm="syz.0.219" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.442177][ T30] audit: type=1400 audit(1761735505.674:324): avc: denied { execute } for pid=6792 comm="syz.0.219" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.981104][ T5870] usb 4-1: device not accepting address 5, error -71 [ 160.024938][ T30] audit: type=1400 audit(1761735506.274:325): avc: denied { create } for pid=6794 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.169281][ T6804] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 160.616660][ T30] audit: type=1400 audit(1761735506.854:326): avc: denied { ioctl } for pid=6794 comm="syz.4.220" path="socket:[12087]" dev="sockfs" ino=12087 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.651342][ T5893] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 160.846527][ T5893] usb 2-1: not running at top speed; connect to a high speed hub [ 160.899516][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 160.953780][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.991885][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.136448][ T5893] usb 2-1: Product: syz [ 161.218093][ T5893] usb 2-1: Manufacturer: syz [ 161.223021][ T5900] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.291134][ T5893] usb 2-1: SerialNumber: syz [ 161.603507][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.615213][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.627199][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 161.637279][ T5900] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 161.651094][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.743449][ T30] audit: type=1400 audit(1761735507.964:327): avc: denied { mount } for pid=6815 comm="syz.2.217" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 162.133961][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.250891][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.281079][ T5900] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 162.291156][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.351589][ T5900] usb 1-1: config 0 descriptor?? [ 162.403588][ T5900] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 162.722749][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 162.749770][ T30] audit: type=1400 audit(1761735508.974:328): avc: denied { read } for pid=5168 comm="acpid" name="js0" dev="devtmpfs" ino=2829 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.773533][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 162.799726][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 162.821784][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 162.868368][ T30] audit: type=1400 audit(1761735508.974:329): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2829 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.925008][ T30] audit: type=1400 audit(1761735509.084:330): avc: denied { getopt } for pid=6829 comm="syz.2.227" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.984860][ T6833] loop5: detected capacity change from 0 to 7 [ 163.054926][ T6833] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 163.090450][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 163.139379][ T6833] loop5: partition table partially beyond EOD, truncated [ 163.157181][ T6833] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 163.172209][ T5893] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 163.184420][ T6834] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 163.200923][ T5893] usb 2-1: unit 2 not found! [ 163.239302][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 163.333101][ T5168] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 163.366933][ T5893] usb 2-1: USB disconnect, device number 6 [ 163.389052][ T6716] udevd[6716]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 163.436585][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.774439][ T10] usb 1-1: USB disconnect, device number 3 [ 165.337282][ T30] audit: type=1400 audit(1761735511.584:331): avc: denied { read write } for pid=6877 comm="syz.1.239" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.408808][ T30] audit: type=1400 audit(1761735511.614:332): avc: denied { open } for pid=6877 comm="syz.1.239" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.992815][ T5893] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 165.992829][ T30] audit: type=1400 audit(1761735511.854:333): avc: denied { getopt } for pid=6876 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.992876][ T30] audit: type=1400 audit(1761735511.874:334): avc: denied { write } for pid=6876 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.196307][ T30] audit: type=1400 audit(1761735511.884:335): avc: denied { setopt } for pid=6876 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.219413][ T30] audit: type=1400 audit(1761735511.884:336): avc: denied { read } for pid=6876 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.478877][ T30] audit: type=1400 audit(1761735512.724:337): avc: denied { create } for pid=6877 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.492058][ T6878] vxfs: unable to read disk superblock at 1 [ 166.515539][ T6890] team0: Port device bond0 removed [ 166.530317][ T6890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.540990][ T6878] vxfs: unable to read disk superblock at 8 [ 166.695919][ T30] audit: type=1400 audit(1761735512.724:338): avc: denied { connect } for pid=6877 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.716035][ T30] audit: type=1400 audit(1761735512.724:339): avc: denied { write } for pid=6877 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.770308][ T6878] vxfs: can't find superblock. [ 167.533261][ T6897] FAULT_INJECTION: forcing a failure. [ 167.533261][ T6897] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 167.547076][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 167.547106][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.547119][ T6897] Call Trace: [ 167.547126][ T6897] [ 167.547134][ T6897] dump_stack_lvl+0x16c/0x1f0 [ 167.547171][ T6897] should_fail_ex+0x512/0x640 [ 167.547200][ T6897] should_fail_alloc_page+0xe7/0x130 [ 167.547225][ T6897] prepare_alloc_pages+0x3c2/0x610 [ 167.547248][ T6897] ? stack_depot_save_flags+0x29/0x9c0 [ 167.547271][ T6897] ? rcu_is_watching+0x12/0xc0 [ 167.547299][ T6897] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 167.547330][ T6897] ? kasan_save_stack+0x42/0x60 [ 167.547349][ T6897] ? kasan_save_track+0x14/0x30 [ 167.547386][ T6897] ? __kasan_slab_alloc+0x89/0x90 [ 167.547405][ T6897] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 167.547434][ T6897] ? ptlock_alloc+0x1f/0x70 [ 167.547458][ T6897] ? pte_alloc_one+0x84/0x350 [ 167.547481][ T6897] ? __pte_alloc+0x6d/0x380 [ 167.547499][ T6897] ? mfill_atomic_poison+0xdb1/0x1a40 [ 167.547520][ T6897] ? userfaultfd_ioctl+0x10ae/0x3930 [ 167.547545][ T6897] ? __x64_sys_ioctl+0x18e/0x210 [ 167.547571][ T6897] ? do_syscall_64+0xcd/0xfa0 [ 167.547599][ T6897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.547628][ T6897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.547664][ T6897] ? look_up_lock_class+0x59/0x150 [ 167.547705][ T6897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.547734][ T6897] ? policy_nodemask+0xea/0x4e0 [ 167.547761][ T6897] alloc_pages_mpol+0x1fb/0x550 [ 167.547785][ T6897] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.547805][ T6897] ? do_raw_spin_lock+0x12c/0x2b0 [ 167.547825][ T6897] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.547851][ T6897] alloc_pages_noprof+0x131/0x390 [ 167.547876][ T6897] pte_alloc_one+0x1e/0x350 [ 167.547901][ T6897] __pte_alloc+0x6d/0x380 [ 167.547921][ T6897] ? __pfx___pte_alloc+0x10/0x10 [ 167.547941][ T6897] ? __pfx___might_resched+0x10/0x10 [ 167.547967][ T6897] ? mfill_atomic_poison+0xd31/0x1a40 [ 167.547992][ T6897] ? mm_alloc_pmd+0x2c2/0x470 [ 167.548015][ T6897] mfill_atomic_poison+0xdb1/0x1a40 [ 167.548044][ T6897] ? find_held_lock+0x2b/0x80 [ 167.548068][ T6897] ? __might_fault+0xe3/0x190 [ 167.548096][ T6897] ? __might_fault+0xe3/0x190 [ 167.548122][ T6897] ? __might_fault+0x13b/0x190 [ 167.548151][ T6897] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 167.548184][ T6897] userfaultfd_ioctl+0x10ae/0x3930 [ 167.548210][ T6897] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 167.548230][ T6897] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.548280][ T6897] ? selinux_file_ioctl+0x180/0x270 [ 167.548302][ T6897] ? selinux_file_ioctl+0xb4/0x270 [ 167.548324][ T6897] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 167.548347][ T6897] ? __x64_sys_ioctl+0x18e/0x210 [ 167.548373][ T6897] __x64_sys_ioctl+0x18e/0x210 [ 167.548403][ T6897] do_syscall_64+0xcd/0xfa0 [ 167.548434][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.548454][ T6897] RIP: 0033:0x7f88bf18efc9 [ 167.548472][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.548490][ T6897] RSP: 002b:00007f88bffaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.548511][ T6897] RAX: ffffffffffffffda RBX: 00007f88bf3e6090 RCX: 00007f88bf18efc9 [ 167.548524][ T6897] RDX: 0000200000000140 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 167.548542][ T6897] RBP: 00007f88bffaa090 R08: 0000000000000000 R09: 0000000000000000 [ 167.548554][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.548568][ T6897] R13: 00007f88bf3e6128 R14: 00007f88bf3e6090 R15: 00007ffeb64626d8 [ 167.548600][ T6897] [ 168.092970][ T6890] Zero length message leads to an empty skb [ 168.384206][ T5893] usb 2-1: device descriptor read/all, error -71 [ 168.422123][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 168.494674][ T30] audit: type=1400 audit(1761735514.744:340): avc: denied { bind } for pid=6904 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.613796][ T6902] vxlan0: entered promiscuous mode [ 168.631467][ T149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.631898][ T6008] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.631952][ T6008] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.631988][ T6008] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.433383][ T6934] macsec1: entered promiscuous mode [ 170.438624][ T6934] macsec1: entered allmulticast mode [ 171.291927][ T6946] fuse: Bad value for 'rootmode' [ 171.406683][ T6948] bridge_slave_0: left allmulticast mode [ 171.413248][ T6948] bridge_slave_0: left promiscuous mode [ 171.418928][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.429049][ T6948] bridge_slave_1: left allmulticast mode [ 171.438426][ T6948] bridge_slave_1: left promiscuous mode [ 171.444783][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.588660][ T6953] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 171.816526][ T6948] bond0: (slave bond_slave_0): Releasing backup interface [ 172.458648][ T6948] bond0: (slave bond_slave_1): Releasing backup interface [ 172.856732][ T6948] team0: Port device team_slave_0 removed [ 172.910230][ T6948] team0: Port device team_slave_1 removed [ 172.934721][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.955552][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.979496][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.047899][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.343331][ T6948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.686955][ T6966] delete_channel: no stack [ 173.860580][ T980] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.960250][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 173.960265][ T30] audit: type=1400 audit(1761735520.204:343): avc: denied { connect } for pid=6986 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.995846][ T30] audit: type=1400 audit(1761735520.244:344): avc: denied { write } for pid=6986 comm="syz.4.266" lport=47065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.020917][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.032407][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.056790][ T980] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.081112][ T980] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 174.098509][ T980] usb 1-1: Manufacturer: syz [ 174.385528][ T30] audit: type=1400 audit(1761735520.344:345): avc: denied { write } for pid=6988 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.407445][ T980] usb 1-1: config 0 descriptor?? [ 175.359960][ T30] audit: type=1400 audit(1761735521.604:346): avc: denied { search } for pid=7001 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.410188][ T6982] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 175.541980][ T30] audit: type=1400 audit(1761735521.604:347): avc: denied { search } for pid=7001 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.611983][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.265'. [ 175.643374][ T30] audit: type=1400 audit(1761735521.604:348): avc: denied { search } for pid=7001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.667634][ T30] audit: type=1400 audit(1761735521.604:349): avc: denied { search } for pid=7001 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.830753][ T30] audit: type=1400 audit(1761735521.644:350): avc: denied { read open } for pid=7005 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.857502][ T30] audit: type=1400 audit(1761735521.644:351): avc: denied { getattr } for pid=7005 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.910791][ T1161] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.107238][ T1161] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.115844][ T30] audit: type=1400 audit(1761735521.644:352): avc: denied { getattr } for pid=7005 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.360039][ T6982] batadv0: entered promiscuous mode [ 176.372136][ T6982] batadv0: entered allmulticast mode [ 176.456515][ T6982] bridge0: port 1(batadv0) entered blocking state [ 176.457071][ T7026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.472141][ T7026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.480716][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 176.487956][ T6982] bridge0: port 1(batadv0) entered disabled state [ 176.489664][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 176.623038][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 176.632537][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 176.719999][ T6982] bridge0: port 1(batadv0) entered blocking state [ 176.726568][ T6982] bridge0: port 1(batadv0) entered forwarding state [ 176.896837][ T980] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 177.048756][ T980] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 177.314727][ T980] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 177.329622][ T980] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 177.343689][ T7035] team0: Port device bond0 removed [ 177.356960][ T7035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.388244][ T980] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 177.437405][ T980] usb 1-1: USB disconnect, device number 4 [ 177.863159][ T7047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.876137][ T7047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.880610][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 177.891176][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 177.891289][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 177.906368][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 177.965312][ T5870] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 178.312796][ T5870] usb 3-1: device descriptor read/64, error -71 [ 178.701050][ T5870] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 179.490586][ T5870] usb 3-1: device descriptor read/64, error -71 [ 180.510229][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 180.510246][ T30] audit: type=1400 audit(1761735526.184:362): avc: denied { setopt } for pid=7071 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.538432][ T5870] usb usb3-port1: attempt power cycle [ 181.670640][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.863736][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 182.152201][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 182.289468][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.544326][ T10] usb 2-1: config 0 descriptor?? [ 182.563332][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 182.603211][ T7098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.851819][ T30] audit: type=1400 audit(1761735529.044:363): avc: denied { write } for pid=7101 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.973479][ T30] audit: type=1400 audit(1761735529.224:364): avc: denied { name_connect } for pid=7101 comm="syz.0.291" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 183.022567][ T30] audit: type=1400 audit(1761735529.224:365): avc: denied { nlmsg_write } for pid=7101 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.092105][ T30] audit: type=1400 audit(1761735529.274:366): avc: denied { read } for pid=7078 comm="syz.1.283" path="socket:[12837]" dev="sockfs" ino=12837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.260041][ T7117] loop5: detected capacity change from 0 to 7 [ 183.277186][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.470553][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.566874][ T6841] Dev loop5: unable to read RDB block 7 [ 183.580554][ T6841] loop5: unable to read partition table [ 183.586561][ T6841] loop5: partition table beyond EOD, truncated [ 183.623609][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.637178][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.653294][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 183.696868][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.600315][ T10] gspca_vc032x: reg_w err -110 [ 184.621205][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 184.621491][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.629457][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 184.643044][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 184.652520][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 184.670579][ T24] usb 3-1: Product: syz [ 184.674761][ T24] usb 3-1: Manufacturer: syz [ 184.679263][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.679350][ T24] usb 3-1: SerialNumber: syz [ 184.878754][ T9] usb 4-1: config 0 descriptor?? [ 184.890928][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.915174][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.960832][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.989498][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.000566][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.005897][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.011803][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.017161][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.035773][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.057222][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.078675][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.110660][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.156782][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.487449][ T24] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 185.502920][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.512511][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 185.514643][ T24] visor 3-1:1.0: probe with driver visor failed with error -110 [ 185.520163][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.535192][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 185.542450][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.547946][ T9] hid-steam 0003:28DE:1142.0003: item fetching failed at offset 2/5 [ 185.556059][ T10] gspca_vc032x: Unknown sensor... [ 185.562445][ T9] hid-steam 0003:28DE:1142.0003: steam_probe:parse of hid interface failed [ 185.571053][ T7117] Dev loop5: unable to read RDB block 7 [ 185.571102][ T7117] loop5: unable to read partition table [ 185.571273][ T7117] loop5: partition table beyond EOD, truncated [ 185.571307][ T7117] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 185.604758][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 185.641058][ T10] usb 2-1: USB disconnect, device number 9 [ 185.653919][ T9] hid-steam 0003:28DE:1142.0003: probe with driver hid-steam failed with error -22 [ 185.731755][ T9] usb 4-1: USB disconnect, device number 7 [ 185.846380][ T30] audit: type=1400 audit(1761735532.094:367): avc: denied { write } for pid=7142 comm="syz.0.298" path="socket:[12898]" dev="sockfs" ino=12898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.009885][ T7172] program syz.3.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.034351][ T5870] usb 3-1: USB disconnect, device number 8 [ 187.336707][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 188.347056][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 188.400538][ T9] usb 2-1: config 0 has no interface number 0 [ 188.440834][ T9] usb 2-1: New USB device found, idVendor=e2e2, idProduct=5873, bcdDevice=2d.b4 [ 188.449902][ T9] usb 2-1: New USB device strings: Mfr=121, Product=239, SerialNumber=3 [ 188.490560][ T9] usb 2-1: Product: syz [ 188.494750][ T9] usb 2-1: Manufacturer: syz [ 188.499342][ T9] usb 2-1: SerialNumber: syz [ 188.532221][ T9] usb 2-1: config 0 descriptor?? [ 188.702049][ T30] audit: type=1400 audit(1761735534.954:368): avc: denied { connect } for pid=7201 comm="syz.0.311" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.802497][ T7204] netlink: 84 bytes leftover after parsing attributes in process `syz.3.312'. [ 189.057770][ T7204] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 189.070864][ T30] audit: type=1400 audit(1761735535.074:369): avc: denied { read } for pid=7201 comm="syz.0.311" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.107134][ T30] audit: type=1400 audit(1761735535.074:370): avc: denied { open } for pid=7201 comm="syz.0.311" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.165727][ T7202] Process accounting resumed [ 189.175814][ T30] audit: type=1400 audit(1761735535.074:371): avc: denied { ioctl } for pid=7201 comm="syz.0.311" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.202605][ T7210] mmap: syz.1.299 (7210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.663395][ T30] audit: type=1400 audit(1761735535.904:372): avc: denied { mount } for pid=7211 comm="syz.0.313" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 189.742047][ T30] audit: type=1400 audit(1761735535.944:373): avc: denied { mounton } for pid=7211 comm="syz.0.313" path="/66/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 190.305915][ T30] audit: type=1400 audit(1761735536.554:374): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.325566][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.370157][ T9] usb 2-1: USB disconnect, device number 10 [ 190.497753][ T7239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.508044][ T7239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.522896][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 190.535804][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 192.460723][ T7265] FAULT_INJECTION: forcing a failure. [ 192.460723][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.476400][ T7265] CPU: 1 UID: 0 PID: 7265 Comm: syz.3.325 Not tainted syzkaller #0 PREEMPT(full) [ 192.476437][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.476449][ T7265] Call Trace: [ 192.476456][ T7265] [ 192.476464][ T7265] dump_stack_lvl+0x16c/0x1f0 [ 192.476498][ T7265] should_fail_ex+0x512/0x640 [ 192.476527][ T7265] _copy_to_user+0x32/0xd0 [ 192.476555][ T7265] bpf_test_finish.isra.0+0x570/0x6e0 [ 192.476582][ T7265] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 192.476611][ T7265] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 192.476641][ T7265] ? __pfx____migrate_enable+0x10/0x10 [ 192.476671][ T7265] bpf_prog_test_run_flow_dissector+0x5d8/0x980 [ 192.476710][ T7265] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 192.476740][ T7265] ? find_held_lock+0x2b/0x80 [ 192.476766][ T7265] ? __fget_files+0x204/0x3c0 [ 192.476790][ T7265] ? __fget_files+0x20e/0x3c0 [ 192.476808][ T7265] ? __might_fault+0xb0/0x190 [ 192.476841][ T7265] ? fput+0x9b/0xd0 [ 192.476866][ T7265] ? __bpf_prog_get+0x97/0x2a0 [ 192.476889][ T7265] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 192.476918][ T7265] __sys_bpf+0x1035/0x4980 [ 192.476951][ T7265] ? __pfx___sys_bpf+0x10/0x10 [ 192.476978][ T7265] ? find_held_lock+0x2b/0x80 [ 192.477009][ T7265] ? find_held_lock+0x2b/0x80 [ 192.477041][ T7265] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 192.477090][ T7265] ? fput+0x9b/0xd0 [ 192.477113][ T7265] ? ksys_write+0x1ac/0x250 [ 192.477132][ T7265] ? __pfx_ksys_write+0x10/0x10 [ 192.477156][ T7265] __x64_sys_bpf+0x78/0xc0 [ 192.477182][ T7265] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.477210][ T7265] do_syscall_64+0xcd/0xfa0 [ 192.477237][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.477258][ T7265] RIP: 0033:0x7f575238efc9 [ 192.477275][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.477293][ T7265] RSP: 002b:00007f57531bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.477313][ T7265] RAX: ffffffffffffffda RBX: 00007f57525e5fa0 RCX: 00007f575238efc9 [ 192.477327][ T7265] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 192.477340][ T7265] RBP: 00007f57531bb090 R08: 0000000000000000 R09: 0000000000000000 [ 192.477352][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.477364][ T7265] R13: 00007f57525e6038 R14: 00007f57525e5fa0 R15: 00007ffe7e889238 [ 192.477394][ T7265] [ 192.732618][ T30] audit: type=1400 audit(1761735538.984:375): avc: denied { search } for pid=7268 comm="syz.0.326" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.767944][ T30] audit: type=1400 audit(1761735538.984:376): avc: denied { search } for pid=7268 comm="syz.0.326" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.790001][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.865489][ T30] audit: type=1400 audit(1761735538.984:377): avc: denied { read open } for pid=7268 comm="syz.0.326" path="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.894522][ T30] audit: type=1400 audit(1761735538.984:378): avc: denied { search } for pid=7268 comm="syz.0.326" name="/" dev="configfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.010572][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 193.091259][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.162079][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.202274][ T24] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 193.211910][ T24] usb 1-1: config 8 has no interface number 0 [ 193.218446][ T24] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 193.241122][ T24] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 193.255226][ T24] usb 1-1: config 8 interface 177 has no altsetting 0 [ 193.262946][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 193.271940][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 193.272789][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.280949][ T5870] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 193.291580][ T7269] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.310571][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.328957][ T5870] usb 4-1: Product: syz [ 193.333723][ T5870] usb 4-1: Manufacturer: syz [ 193.338326][ T5870] usb 4-1: SerialNumber: syz [ 193.343166][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 193.358374][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.464212][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 193.474836][ T5870] usb 4-1: config 0 descriptor?? [ 193.479953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.491327][ T5870] gspca_main: se401-2.14.0 probing 047d:5003 [ 193.500051][ T9] usb 5-1: config 0 descriptor?? [ 193.508522][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 193.660668][ T24] usb 1-1: string descriptor 0 read error: -71 [ 193.736975][ T24] ir_toy 1-1:8.177: required endpoints not found [ 193.999559][ T30] audit: type=1400 audit(1761735540.244:379): avc: denied { setopt } for pid=7272 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.019189][ T24] usb 1-1: USB disconnect, device number 5 [ 194.046753][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.054264][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.076193][ T9] gspca_vc032x: reg_r err -71 [ 194.082895][ T30] audit: type=1400 audit(1761735540.274:380): avc: denied { write } for pid=7272 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.102980][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 194.199901][ T9] usb 5-1: USB disconnect, device number 5 [ 194.852281][ T5870] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 194.870899][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 194.878243][ T10] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 194.891962][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.914731][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.924514][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.933373][ T10] usb 3-1: Product: syz [ 194.938179][ T10] usb 3-1: Manufacturer: syz [ 194.943389][ T10] usb 3-1: SerialNumber: syz [ 195.161073][ T7277] netlink: 14 bytes leftover after parsing attributes in process `syz.2.329'. [ 195.219804][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.258168][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.293529][ T5870] gspca_se401: read req failed req 0x06 error -71 [ 195.333035][ T5870] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 195.421904][ T7297] random: crng reseeded on system resumption [ 195.553274][ T5870] usb 4-1: USB disconnect, device number 8 [ 195.581254][ T7277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.786688][ T7300] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 195.801673][ T30] audit: type=1400 audit(1761735542.034:381): avc: denied { read append } for pid=7299 comm="syz.1.336" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.826488][ T30] audit: type=1400 audit(1761735542.034:382): avc: denied { open } for pid=7299 comm="syz.1.336" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.856509][ T7308] netlink: 'syz.1.336': attribute type 2 has an invalid length. [ 195.984645][ T7277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.036795][ T7277] bond0 (unregistering): Released all slaves [ 196.141918][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 196.148044][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 196.150594][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 196.154190][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 196.260566][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.671163][ T30] audit: type=1400 audit(1761735542.844:383): avc: denied { open } for pid=7312 comm="syz.3.337" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 196.720722][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 196.765706][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 196.860596][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 196.941133][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 196.951569][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.963631][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 196.976867][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 196.983798][ T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 196.993622][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.025599][ T10] usb 3-1: 0:2 : does not exist [ 197.036207][ T24] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 197.184001][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 198.343444][ T10] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 199.192828][ T10] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 199.214990][ T10] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 199.234743][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 199.382761][ T10] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 199.430894][ T10] usb 3-1: USB disconnect, device number 9 [ 199.475948][ T24] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 199.595995][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 200.021218][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 200.235438][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.295183][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.343419][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.446584][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.474876][ T24] usb 5-1: USB disconnect, device number 6 [ 200.510677][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.621310][ T7327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.641190][ T30] audit: type=1400 audit(1761735546.894:384): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.643480][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.880959][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.091678][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 201.098674][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.123577][ T24] usb 5-1: config 0 has no interface number 0 [ 201.158434][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.170875][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.195856][ T5900] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.207149][ T24] usb 5-1: Product: syz [ 201.222178][ T24] usb 5-1: Manufacturer: syz [ 201.357744][ T24] usb 5-1: SerialNumber: syz [ 201.389918][ T5900] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.527843][ T5900] usb 2-1: config 0 has no interface number 0 [ 201.559503][ T24] usb 5-1: config 0 descriptor?? [ 201.707717][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 201.718591][ T5900] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 201.753721][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.787484][ T5900] usb 2-1: Product: syz [ 201.796692][ T5900] usb 2-1: Manufacturer: syz [ 201.813436][ T5900] usb 2-1: SerialNumber: syz [ 201.826570][ T5900] usb 2-1: config 0 descriptor?? [ 201.892643][ T30] audit: type=1804 audit(1761735548.144:385): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.348" name="/newroot/73/bus/file0" dev="overlay" ino=401 res=1 errno=0 [ 201.896893][ T7354] input: syz1 as /devices/virtual/input/input8 [ 201.941846][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 201.957762][ T30] audit: type=1400 audit(1761735548.184:386): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2894 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.990681][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.065759][ T5900] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 202.076786][ T5900] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 202.104131][ T30] audit: type=1400 audit(1761735548.344:387): avc: denied { firmware_load } for pid=5900 comm="kworker/1:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 202.124951][ T5900] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 202.159139][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.162960][ T30] audit: type=1326 audit(1761735548.374:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.191526][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.230684][ T30] audit: type=1326 audit(1761735548.374:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.260080][ T30] audit: type=1326 audit(1761735548.424:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.295009][ T7342] overlayfs: missing 'lowerdir' [ 202.329679][ T30] audit: type=1326 audit(1761735548.424:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.369688][ T7361] comedi comedi0: dt2814: I/O port conflict (0x1,2) [ 202.389559][ T30] audit: type=1326 audit(1761735548.424:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.413417][ T30] audit: type=1326 audit(1761735548.424:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575238efc9 code=0x7ffc0000 [ 202.443683][ T5892] usb 3-1: USB disconnect, device number 10 [ 202.518687][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.665043][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.104803][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.105164][ T10] usb 5-1: USB disconnect, device number 7 [ 203.443490][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.629834][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.744250][ T10] quatech2 5-1:0.51: device disconnected [ 204.234853][ T7382] warning: `syz.0.354' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.880530][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.655652][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 206.655691][ T30] audit: type=1400 audit(1761735552.504:420): avc: denied { append } for pid=7396 comm="syz.4.362" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.656465][ T7399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.714280][ T7399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.723708][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 206.732647][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 206.996270][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 207.021780][ T10] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 207.029915][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.118524][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.130183][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.143938][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 207.153278][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.173717][ T10] usb 3-1: config 0 descriptor?? [ 207.185267][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 207.212585][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.227199][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.266880][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.329949][ T6716] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.420171][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.470042][ T7392] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.478200][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.541168][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 207.800551][ T5893] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 207.964443][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.982372][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.996758][ T5893] usb 1-1: Product: syz [ 208.010618][ T5893] usb 1-1: Manufacturer: syz [ 208.024529][ T5893] usb 1-1: SerialNumber: syz [ 208.038083][ T5893] usb 1-1: config 0 descriptor?? [ 208.081012][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.250598][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 208.259554][ T5893] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.268409][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.282981][ T10] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 208.291882][ T10] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 208.305539][ T10] usb 5-1: config 0 has no interface number 0 [ 208.311732][ T10] usb 5-1: too many endpoints for config 0 interface 88 altsetting 49: 56, using maximum allowed: 30 [ 208.327192][ T10] usb 5-1: config 0 interface 88 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 208.344544][ T10] usb 5-1: config 0 interface 88 has no altsetting 0 [ 208.354156][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 208.363420][ T10] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 208.390508][ T10] usb 5-1: Product: syz [ 208.394825][ T10] usb 5-1: Manufacturer: syz [ 208.399426][ T10] usb 5-1: SerialNumber: syz [ 208.421134][ T10] usb 5-1: config 0 descriptor?? [ 208.592484][ T5885] usb 3-1: USB disconnect, device number 11 [ 208.661438][ T10] usb 5-1: USB disconnect, device number 8 [ 208.887901][ T7420] fuse: Bad value for 'fd' [ 210.159919][ T30] audit: type=1400 audit(1761735556.404:421): avc: denied { write } for pid=7422 comm="syz.2.368" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.300237][ T5893] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 210.334527][ T5893] usb 1-1: USB disconnect, device number 6 [ 211.953780][ T7454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.436474][ T30] audit: type=1400 audit(1761735558.284:422): avc: denied { getopt } for pid=7450 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.562170][ T7463] netlink: 256 bytes leftover after parsing attributes in process `syz.1.380'. [ 212.580913][ T7463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.380'. [ 212.748533][ T7467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.846473][ T30] audit: type=1326 audit(1761735559.034:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 212.921434][ T30] audit: type=1326 audit(1761735559.044:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 213.046386][ T30] audit: type=1326 audit(1761735559.044:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.012695][ T30] audit: type=1326 audit(1761735559.044:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.035960][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.087845][ T30] audit: type=1326 audit(1761735559.044:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.111718][ T30] audit: type=1326 audit(1761735559.044:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.134845][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.174911][ T30] audit: type=1326 audit(1761735559.044:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.219489][ T30] audit: type=1326 audit(1761735559.044:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.260584][ T5885] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 214.280156][ T30] audit: type=1326 audit(1761735559.044:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bf18efc9 code=0x7ffc0000 [ 214.421228][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 214.437927][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.462627][ T5885] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.485832][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.510314][ T5885] usb 1-1: Product: syz [ 214.530542][ T5885] usb 1-1: Manufacturer: syz [ 214.541615][ T5885] usb 1-1: SerialNumber: syz [ 214.557863][ T5885] usb 1-1: config 0 descriptor?? [ 214.574895][ T7488] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.590046][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 214.603540][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 214.882288][ T7502] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 214.890111][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'. [ 214.920796][ T5885] usb 1-1: USB disconnect, device number 7 [ 216.669067][ T7531] netlink: 'syz.2.405': attribute type 29 has an invalid length. [ 216.677129][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 216.716088][ T7531] syzkaller1: entered promiscuous mode [ 216.721765][ T7531] syzkaller1: entered allmulticast mode [ 216.960632][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.333413][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 217.404108][ T10] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 217.404176][ T7533] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 217.420592][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.438182][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.448383][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.462823][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 217.474270][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.519214][ T10] usb 4-1: config 0 descriptor?? [ 217.535158][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 217.573743][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.605803][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 217.605820][ T30] audit: type=1400 audit(1761735563.834:493): avc: denied { write } for pid=7541 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.676104][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.694238][ T30] audit: type=1400 audit(1761735563.834:494): avc: denied { ioctl } for pid=7541 comm="syz.1.408" path="socket:[14883]" dev="sockfs" ino=14883 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.724173][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.760821][ T7526] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.770184][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.781957][ T7424] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.794238][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.822407][ T7549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.831948][ T7549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.839729][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 217.848859][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 217.954536][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 217.969046][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 218.451322][ T7558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.463638][ T7558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.474775][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 218.483779][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 218.761050][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 219.703363][ T5927] usb 4-1: USB disconnect, device number 9 [ 220.099534][ T7580] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 220.113223][ T7580] netlink: 'syz.4.415': attribute type 3 has an invalid length. [ 220.325299][ T7587] syz.3.418(7587): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 220.340168][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 220.536994][ T7580] netlink: 172 bytes leftover after parsing attributes in process `syz.4.415'. [ 220.604410][ T7580] NCSI netlink: No device for ifindex 813332851 [ 221.717613][ T7596] FAULT_INJECTION: forcing a failure. [ 221.717613][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.882728][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(full) [ 221.882756][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.882763][ T7596] Call Trace: [ 221.882768][ T7596] [ 221.882773][ T7596] dump_stack_lvl+0x16c/0x1f0 [ 221.882794][ T7596] should_fail_ex+0x512/0x640 [ 221.882810][ T7596] _copy_to_user+0x32/0xd0 [ 221.882825][ T7596] simple_read_from_buffer+0xcb/0x170 [ 221.882844][ T7596] proc_fail_nth_read+0x197/0x240 [ 221.882858][ T7596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.882872][ T7596] ? rw_verify_area+0xcf/0x6c0 [ 221.882887][ T7596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.882900][ T7596] vfs_read+0x1e4/0xcf0 [ 221.882912][ T7596] ? __pfx___mutex_lock+0x10/0x10 [ 221.882923][ T7596] ? __pfx_vfs_read+0x10/0x10 [ 221.882937][ T7596] ? __fget_files+0x20e/0x3c0 [ 221.882953][ T7596] ksys_read+0x12a/0x250 [ 221.882962][ T7596] ? __pfx_ksys_read+0x10/0x10 [ 221.882977][ T7596] do_syscall_64+0xcd/0xfa0 [ 221.882994][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.883006][ T7596] RIP: 0033:0x7f33e1b8d9dc [ 221.883020][ T7596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.883031][ T7596] RSP: 002b:00007f33e2952030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.883042][ T7596] RAX: ffffffffffffffda RBX: 00007f33e1de6090 RCX: 00007f33e1b8d9dc [ 221.883049][ T7596] RDX: 000000000000000f RSI: 00007f33e29520a0 RDI: 0000000000000004 [ 221.883056][ T7596] RBP: 00007f33e2952090 R08: 0000000000000000 R09: 0000000000000000 [ 221.883063][ T7596] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 221.883069][ T7596] R13: 00007f33e1de6128 R14: 00007f33e1de6090 R15: 00007ffd38d65f98 [ 221.883085][ T7596] [ 222.859757][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.282104][ T5893] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 224.066108][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.096740][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.108076][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.132155][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.160615][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.183195][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.195182][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.332151][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.350738][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.358449][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.377953][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.526395][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.534456][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.543659][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.555838][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.611146][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.623049][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.724124][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 224.750526][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.770957][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.981340][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 225.011343][ T5892] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 225.023415][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.069093][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.195269][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.200542][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.206685][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.229294][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.229361][ T5892] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 225.700570][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.714207][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.779393][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.790801][ T5893] usb 1-1: string descriptor 0 read error: -71 [ 225.813863][ T5893] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.816953][ T5892] usb 3-1: config 0 descriptor?? [ 225.835030][ T5893] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.887432][ T5893] usb 1-1: config 0 descriptor?? [ 225.911195][ T5893] usb 1-1: can't set config #0, error -71 [ 226.105985][ T5893] usb 1-1: USB disconnect, device number 8 [ 226.123057][ T5927] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 226.248168][ T5892] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 226.311996][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.366054][ T5927] usb 5-1: device descriptor read/64, error -71 [ 226.399535][ T7428] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.450036][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.466833][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.493352][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.514928][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.537944][ T5168] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 226.840845][ T5927] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 227.305545][ T5948] usb 3-1: USB disconnect, device number 12 [ 227.314574][ T5927] usb 5-1: device descriptor read/64, error -71 [ 227.433891][ T5927] usb usb5-port1: attempt power cycle [ 228.070662][ T30] audit: type=1400 audit(1761735574.254:495): avc: denied { execute } for pid=7639 comm="syz.3.435" dev="hugetlbfs" ino=16073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 228.125771][ T7664] process 'syz.3.435' launched '/dev/fd/9' with NULL argv: empty string added [ 228.214693][ T30] audit: type=1400 audit(1761735574.394:496): avc: denied { execute_no_trans } for pid=7639 comm="syz.3.435" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=16073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 228.243045][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.390614][ T5927] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 228.701189][ T5927] usb 5-1: device descriptor read/8, error -71 [ 230.020542][ T5892] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 230.183426][ T5892] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.206887][ T5892] usb 3-1: config 0 has no interface number 0 [ 230.265393][ T5892] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 230.302409][ T5892] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 230.315903][ T5892] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 230.328778][ T5892] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.338211][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.350525][ T5892] usb 3-1: Product: syz [ 230.354720][ T5892] usb 3-1: SerialNumber: syz [ 230.380588][ T5892] usb 3-1: config 0 descriptor?? [ 230.784040][ T5892] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 230.903785][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.140578][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 231.151382][ T10] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 231.170373][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.194129][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.230838][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.263116][ T7709] ======================================================= [ 231.263116][ T7709] WARNING: The mand mount option has been deprecated and [ 231.263116][ T7709] and is ignored by this kernel. Remove the mand [ 231.263116][ T7709] option from the mount to silence this warning. [ 231.263116][ T7709] ======================================================= [ 231.280789][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 231.384473][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.426445][ T10] usb 4-1: config 0 descriptor?? [ 231.450959][ T30] audit: type=1400 audit(1761735577.694:497): avc: denied { ioctl } for pid=7708 comm="syz.1.450" path="/81/file0/file0" dev="fuse" ino=64 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 231.480019][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 231.866805][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 231.920369][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 231.965433][ T7424] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 232.002474][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 232.055060][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 232.076483][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 232.098047][ T5168] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 232.137039][ T5927] usb 3-1: USB disconnect, device number 13 [ 232.182114][ T5893] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 232.360619][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 232.367686][ T5893] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 232.378167][ T5893] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 232.389858][ T5893] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.401008][ T5893] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 232.416164][ T5893] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 232.425273][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.433284][ T5893] usb 5-1: Product: syz [ 232.437423][ T5893] usb 5-1: Manufacturer: syz [ 232.443597][ T5893] usb 5-1: SerialNumber: syz [ 232.451275][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 232.459734][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 232.469970][ T5893] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input13 [ 232.611989][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 232.623018][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 232.632600][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.642720][ T10] usb 1-1: config 0 descriptor?? [ 232.648371][ T7725] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.680956][ T5893] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 232.689469][ T5893] (id 0x00) [ 232.764000][ T5893] rc_core: IR keymap rc-imon-pad not found [ 232.780493][ T5893] Registered IR keymap rc-empty [ 232.785436][ T5893] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 232.795833][ T5893] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 232.945487][ T5893] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 233.030265][ T5893] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input14 [ 233.133137][ T5893] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:13> initialized [ 233.268703][ T10] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 233.363178][ T24] usb 4-1: USB disconnect, device number 10 [ 233.374883][ T5893] usb 5-1: USB disconnect, device number 13 [ 233.563548][ T10] usb 1-1: USB disconnect, device number 9 [ 234.572930][ T7759] bridge0: port 1(batadv0) entered disabled state [ 235.132342][ T7765] netlink: 'syz.0.467': attribute type 10 has an invalid length. [ 235.287442][ T7759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.340265][ T30] audit: type=1326 audit(1761735581.574:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 235.424664][ T30] audit: type=1326 audit(1761735581.574:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 236.414507][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.451953][ T7765] team0: Port device bond0 added [ 236.470812][ T30] audit: type=1326 audit(1761735581.614:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 236.670582][ T30] audit: type=1326 audit(1761735581.614:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 236.698251][ T30] audit: type=1326 audit(1761735581.614:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 236.856872][ T7787] loop7: detected capacity change from 0 to 7 [ 237.264008][ T30] audit: type=1326 audit(1761735581.624:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 237.300839][ T30] audit: type=1326 audit(1761735581.624:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 237.302112][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.324456][ T30] audit: type=1326 audit(1761735581.624:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 237.333526][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.541727][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.550922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.559487][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.568697][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.578135][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.587321][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.599351][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.608539][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.616715][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.625959][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.634074][ T7787] ldm_validate_partition_table(): Disk read failed. [ 237.645406][ T30] audit: type=1326 audit(1761735581.624:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 237.668783][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.668818][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.691254][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.700406][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.719064][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.728251][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.739552][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 237.748709][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 237.756741][ T7787] Dev loop7: unable to read RDB block 0 [ 237.769867][ T7787] loop7: unable to read partition table [ 237.775840][ T7787] loop7: partition table beyond EOD, truncated [ 237.782045][ T7787] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 237.865243][ T30] audit: type=1326 audit(1761735581.624:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff1fdb8efc9 code=0x7ffc0000 [ 238.234688][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 239.933853][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 240.280418][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.293130][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.302485][ T10] usb 4-1: Product: syz [ 240.306674][ T10] usb 4-1: Manufacturer: syz [ 240.311589][ T10] usb 4-1: SerialNumber: syz [ 240.322426][ T10] usb 4-1: config 0 descriptor?? [ 240.381002][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.390786][ T7817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.483'. [ 241.321019][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 241.337372][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.358312][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.378713][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.401626][ T24] usb 1-1: config 0 descriptor?? [ 241.402750][ T10] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 241.407781][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 241.497619][ T10] usb 4-1: USB disconnect, device number 11 [ 241.735366][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.883222][ T24] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 241.890532][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 241.907060][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 241.928838][ T5892] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 241.948767][ T5892] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 241.971022][ T5892] usb 3-1: Product: syz [ 241.977889][ T5892] usb 3-1: Manufacturer: syz [ 241.998441][ T5892] usb 3-1: SerialNumber: syz [ 242.166738][ C1] ================================================================== [ 242.174833][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 242.182846][ C1] Read of size 1 at addr ffff88807775ffff by task syz-executor/5806 [ 242.190824][ C1] [ 242.193160][ C1] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 242.193198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.193217][ C1] Call Trace: [ 242.193228][ C1] [ 242.193238][ C1] dump_stack_lvl+0x116/0x1f0 [ 242.193287][ C1] print_report+0xcd/0x630 [ 242.193320][ C1] ? __virt_addr_valid+0x81/0x610 [ 242.193366][ C1] ? __phys_addr+0xe8/0x180 [ 242.193406][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 242.193447][ C1] kasan_report+0xe0/0x110 [ 242.193479][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 242.193524][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 242.193564][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.193607][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 242.193637][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 242.193679][ C1] hid_irq_in+0x35e/0x870 [ 242.193720][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 242.193765][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 242.193810][ C1] dummy_timer+0x1809/0x3a00 [ 242.193851][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.193898][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 242.193927][ C1] ? rcu_is_watching+0x12/0xc0 [ 242.193964][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.194006][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 242.194033][ C1] __hrtimer_run_queues+0x202/0xad0 [ 242.194073][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 242.194105][ C1] ? read_tsc+0x9/0x20 [ 242.194144][ C1] hrtimer_run_softirq+0x17d/0x350 [ 242.194181][ C1] handle_softirqs+0x219/0x8e0 [ 242.194218][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 242.194258][ C1] __irq_exit_rcu+0x109/0x170 [ 242.194292][ C1] irq_exit_rcu+0x9/0x30 [ 242.194331][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 242.194374][ C1] [ 242.194384][ C1] [ 242.194394][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.194428][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 242.194470][ C1] Code: fb 09 00 00 44 8b 05 39 ef f7 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 0f d5 3a 00 fb 65 48 8b 1d de 27 17 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 242.194499][ C1] RSP: 0018:ffffc90003177a20 EFLAGS: 00000206 [ 242.194523][ C1] RAX: 00000000000c02c9 RBX: ffff88802657a480 RCX: ffffffff81c50c3f [ 242.194544][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a287 RDI: ffffffff8bf06e40 [ 242.194564][ C1] RBP: ffffc90003177a68 R08: 0000000000000001 R09: 0000000000000001 [ 242.194581][ C1] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: ffff8880b853a380 [ 242.194600][ C1] R13: ffff888020f74900 R14: ffff8880b843a380 R15: ffff8880b853b1b0 [ 242.194625][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 242.194670][ C1] ? __switch_to+0x7af/0x11b0 [ 242.194705][ C1] __schedule+0x1198/0x5de0 [ 242.194736][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.194774][ C1] ? debug_object_activate+0x2ec/0x4c0 [ 242.194820][ C1] ? __lock_acquire+0x622/0x1c90 [ 242.194865][ C1] ? __pfx___schedule+0x10/0x10 [ 242.194906][ C1] ? find_held_lock+0x2b/0x80 [ 242.194941][ C1] ? schedule+0x2d7/0x3a0 [ 242.194980][ C1] schedule+0xe7/0x3a0 [ 242.195018][ C1] do_nanosleep+0x219/0x580 [ 242.195055][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 242.195088][ C1] ? __asan_memset+0x23/0x50 [ 242.195130][ C1] ? __hrtimer_setup+0x176/0x280 [ 242.195163][ C1] hrtimer_nanosleep+0x155/0x380 [ 242.195199][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 242.195238][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 242.195270][ C1] ? get_timespec64+0x147/0x240 [ 242.195312][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 242.195362][ C1] common_nsleep+0xa1/0xd0 [ 242.195400][ C1] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 242.195436][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 242.195477][ C1] do_syscall_64+0xcd/0xfa0 [ 242.195512][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.195541][ C1] RIP: 0033:0x7f33e1bc1885 [ 242.195563][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 242.195592][ C1] RSP: 002b:00007ffd38d662b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 242.195617][ C1] RAX: ffffffffffffffda RBX: 0000000000000145 RCX: 00007f33e1bc1885 [ 242.195636][ C1] RDX: 00007ffd38d662f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.195654][ C1] RBP: 00007ffd38d6635c R08: 0000000000000000 R09: 0000000000000000 [ 242.195671][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 242.195689][ C1] R13: 00000000000927c0 R14: 000000000003b107 R15: 00007ffd38d663b0 [ 242.195717][ C1] [ 242.195726][ C1] [ 242.647557][ C1] Allocated by task 36: [ 242.651693][ C1] kasan_save_stack+0x33/0x60 [ 242.656358][ C1] kasan_save_track+0x14/0x30 [ 242.661031][ C1] __kasan_kmalloc+0xaa/0xb0 [ 242.665609][ C1] __kmalloc_noprof+0x32f/0x880 [ 242.670457][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 242.676346][ C1] ieee80211_inform_bss+0x10b/0x1140 [ 242.681626][ C1] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 242.687871][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 242.693501][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 242.699563][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 242.705189][ C1] ieee80211_ibss_rx_queued_mgmt+0x191b/0x2fe0 [ 242.711337][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 242.716620][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 242.721716][ C1] process_one_work+0x9cf/0x1b70 [ 242.726652][ C1] worker_thread+0x6c8/0xf10 [ 242.731229][ C1] kthread+0x3c5/0x780 [ 242.735280][ C1] ret_from_fork+0x675/0x7d0 [ 242.739851][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.744610][ C1] [ 242.746912][ C1] Freed by task 36: [ 242.750694][ C1] kasan_save_stack+0x33/0x60 [ 242.755374][ C1] kasan_save_track+0x14/0x30 [ 242.760056][ C1] __kasan_save_free_info+0x3b/0x60 [ 242.765252][ C1] __kasan_slab_free+0x5f/0x80 [ 242.770005][ C1] kfree+0x2b8/0x6d0 [ 242.773891][ C1] ieee80211_inform_bss+0x77c/0x1140 [ 242.779166][ C1] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 242.785410][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 242.791039][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 242.797105][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 242.802730][ C1] ieee80211_ibss_rx_queued_mgmt+0x191b/0x2fe0 [ 242.808875][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 242.814155][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 242.819255][ C1] process_one_work+0x9cf/0x1b70 [ 242.824186][ C1] worker_thread+0x6c8/0xf10 [ 242.828768][ C1] kthread+0x3c5/0x780 [ 242.832821][ C1] ret_from_fork+0x675/0x7d0 [ 242.837397][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.842161][ C1] [ 242.844465][ C1] The buggy address belongs to the object at ffff88807775f800 [ 242.844465][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 242.858507][ C1] The buggy address is located 1023 bytes to the right of [ 242.858507][ C1] allocated 1024-byte region [ffff88807775f800, ffff88807775fc00) [ 242.873346][ C1] [ 242.875664][ C1] The buggy address belongs to the physical page: [ 242.882066][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77758 [ 242.890819][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 242.899319][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 242.906878][ C1] page_type: f5(slab) [ 242.910871][ C1] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea0000a35a00 dead000000000002 [ 242.919462][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 242.928570][ C1] head: 00fff00000000040 ffff88813ffa6dc0 ffffea0000a35a00 dead000000000002 [ 242.937238][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 242.945907][ C1] head: 00fff00000000003 ffffea0001ddd601 00000000ffffffff 00000000ffffffff [ 242.954573][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 242.963228][ C1] page dumped because: kasan: bad access detected [ 242.969631][ C1] page_owner tracks the page as allocated [ 242.975323][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5878, tgid 5878 (kworker/0:6), ts 76881944615, free_ts 76811960062 [ 242.994510][ C1] post_alloc_hook+0x1c0/0x230 [ 242.999269][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 243.004809][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 243.010701][ C1] alloc_pages_mpol+0x1fb/0x550 [ 243.015539][ C1] new_slab+0x24a/0x360 [ 243.019682][ C1] ___slab_alloc+0xdae/0x1a60 [ 243.024357][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 243.029815][ C1] __kmalloc_noprof+0x501/0x880 [ 243.034661][ C1] ___neigh_create+0x14e6/0x28c0 [ 243.039582][ C1] ip6_finish_output2+0x11aa/0x1cf0 [ 243.044770][ C1] __ip6_finish_output+0x3cd/0x1010 [ 243.049960][ C1] ip6_output+0x253/0x710 [ 243.054275][ C1] mld_sendpack+0xac1/0x1350 [ 243.058857][ C1] mld_ifc_work+0x740/0xbf0 [ 243.063357][ C1] process_one_work+0x9cf/0x1b70 [ 243.068280][ C1] worker_thread+0x6c8/0xf10 [ 243.072856][ C1] page last free pid 5878 tgid 5878 stack trace: [ 243.079168][ C1] __free_frozen_pages+0x7df/0x1160 [ 243.084373][ C1] __put_partials+0x130/0x170 [ 243.089057][ C1] qlist_free_all+0x4d/0x120 [ 243.093635][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 243.099095][ C1] __kasan_slab_alloc+0x69/0x90 [ 243.103933][ C1] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 243.109824][ C1] __alloc_skb+0x2b2/0x380 [ 243.114230][ C1] mld_newpack.isra.0+0x18e/0xa20 [ 243.119263][ C1] add_grhead+0x299/0x340 [ 243.123584][ C1] add_grec+0x11b5/0x1720 [ 243.127907][ C1] mld_ifc_work+0x41f/0xbf0 [ 243.132406][ C1] process_one_work+0x9cf/0x1b70 [ 243.137330][ C1] worker_thread+0x6c8/0xf10 [ 243.141920][ C1] kthread+0x3c5/0x780 [ 243.146011][ C1] ret_from_fork+0x675/0x7d0 [ 243.150607][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.155373][ C1] [ 243.157678][ C1] Memory state around the buggy address: [ 243.163288][ C1] ffff88807775fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.171341][ C1] ffff88807775ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.179388][ C1] >ffff88807775ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.187429][ C1] ^ [ 243.195386][ C1] ffff888077760000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 243.203439][ C1] ffff888077760080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 243.211478][ C1] ================================================================== [ 243.219521][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.226701][ C1] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 243.236151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 243.246198][ C1] Call Trace: [ 243.249465][ C1] [ 243.252293][ C1] dump_stack_lvl+0x3d/0x1f0 [ 243.256890][ C1] vpanic+0x640/0x6f0 [ 243.260879][ C1] panic+0xca/0xd0 [ 243.264614][ C1] ? __pfx_panic+0x10/0x10 [ 243.269032][ C1] ? end_report+0x4c/0x170 [ 243.273440][ C1] ? rcu_is_watching+0x12/0xc0 [ 243.278205][ C1] ? lock_release+0x201/0x2f0 [ 243.282874][ C1] check_panic_on_warn+0xab/0xb0 [ 243.287817][ C1] end_report+0x107/0x170 [ 243.292136][ C1] kasan_report+0xee/0x110 [ 243.296541][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 243.301824][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 243.306933][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.312741][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 243.318795][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 243.324256][ C1] hid_irq_in+0x35e/0x870 [ 243.328584][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 243.333961][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 243.339158][ C1] dummy_timer+0x1809/0x3a00 [ 243.343748][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.349559][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 243.354484][ C1] ? rcu_is_watching+0x12/0xc0 [ 243.359245][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.365051][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 243.369978][ C1] __hrtimer_run_queues+0x202/0xad0 [ 243.375173][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 243.380904][ C1] ? read_tsc+0x9/0x20 [ 243.384980][ C1] hrtimer_run_softirq+0x17d/0x350 [ 243.390082][ C1] handle_softirqs+0x219/0x8e0 [ 243.394865][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 243.400150][ C1] __irq_exit_rcu+0x109/0x170 [ 243.404822][ C1] irq_exit_rcu+0x9/0x30 [ 243.409055][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 243.414690][ C1] [ 243.417602][ C1] [ 243.420514][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.426490][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 243.432908][ C1] Code: fb 09 00 00 44 8b 05 39 ef f7 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 0f d5 3a 00 fb 65 48 8b 1d de 27 17 12 <48> 8d bb 58 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 243.452512][ C1] RSP: 0018:ffffc90003177a20 EFLAGS: 00000206 [ 243.458570][ C1] RAX: 00000000000c02c9 RBX: ffff88802657a480 RCX: ffffffff81c50c3f [ 243.466527][ C1] RDX: 0000000000000000 RSI: ffffffff8da2a287 RDI: ffffffff8bf06e40 [ 243.474485][ C1] RBP: ffffc90003177a68 R08: 0000000000000001 R09: 0000000000000001 [ 243.482442][ C1] R10: ffffffff9081f6d7 R11: 0000000000000001 R12: ffff8880b853a380 [ 243.490411][ C1] R13: ffff888020f74900 R14: ffff8880b843a380 R15: ffff8880b853b1b0 [ 243.498377][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 243.504362][ C1] ? __switch_to+0x7af/0x11b0 [ 243.509031][ C1] __schedule+0x1198/0x5de0 [ 243.513535][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.519341][ C1] ? debug_object_activate+0x2ec/0x4c0 [ 243.524805][ C1] ? __lock_acquire+0x622/0x1c90 [ 243.529745][ C1] ? __pfx___schedule+0x10/0x10 [ 243.534597][ C1] ? find_held_lock+0x2b/0x80 [ 243.539271][ C1] ? schedule+0x2d7/0x3a0 [ 243.543600][ C1] schedule+0xe7/0x3a0 [ 243.547667][ C1] do_nanosleep+0x219/0x580 [ 243.552162][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 243.557184][ C1] ? __asan_memset+0x23/0x50 [ 243.561777][ C1] ? __hrtimer_setup+0x176/0x280 [ 243.566706][ C1] hrtimer_nanosleep+0x155/0x380 [ 243.571637][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 243.577102][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 243.582290][ C1] ? get_timespec64+0x147/0x240 [ 243.587140][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 243.592338][ C1] common_nsleep+0xa1/0xd0 [ 243.596755][ C1] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 243.602383][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 243.608544][ C1] do_syscall_64+0xcd/0xfa0 [ 243.613054][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.618939][ C1] RIP: 0033:0x7f33e1bc1885 [ 243.623339][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 243.642943][ C1] RSP: 002b:00007ffd38d662b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 243.651351][ C1] RAX: ffffffffffffffda RBX: 0000000000000145 RCX: 00007f33e1bc1885 [ 243.659313][ C1] RDX: 00007ffd38d662f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.667268][ C1] RBP: 00007ffd38d6635c R08: 0000000000000000 R09: 0000000000000000 [ 243.675226][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 243.683183][ C1] R13: 00000000000927c0 R14: 000000000003b107 R15: 00007ffd38d663b0 [ 243.691152][ C1] [ 243.694387][ C1] Kernel Offset: disabled [ 243.698691][ C1] Rebooting in 86400 seconds..