last executing test programs: 2m31.333271103s ago: executing program 2 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x10}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x10}}, 0x28}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="820000000000000002000040"]) sendmsg(r1, &(0x7f0000000300)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000004c0)=[{0xe8, 0x10d, 0x8, "637ddb26fda3f1a411e48b12aef8882c75db1e984ab24bceaadadcf7cdfe83c835b55e3bf69effc51fc257102037902ca3ac01314739bf5cdd389d6abf0843f80b218d729fb530ff1c91921f94d65b0fc69f9f5f59dc139a03a33acc606cb14d0e728934437494bfc84481603207a030acfc3bd9e1922c4c68a9c7f9fe32a2ecbcbe118e51cdb7814024d8b754b23aa76bedaea193cdf801db8ca473c4bc4eb54ab55b2b99bb567a7bc0eaa3998e0e6a94dab3209d759e84ff47e630139c2725a7521108fc2e03271dadebde9c03ce1814c6321e"}, {0x60, 0x119, 0x3ff, "edef6b43eb0e8659d9ff9f55137f9248fcda19209cc1d703aea347479485d2f559c51a3bc164f0bb01993f78ce0e232c2fbd9feabb722538ef078409ded4a81f94f2bae4048d037cae"}, {0x100, 0x1, 0x40, "e184ab4ad8aa28ec6f230f4cfdc4243f1e9431820ad7ee13a3a89585f3b377cc981e585db1146eb88cc32d03bbee50342f60701bba61e7bdff05eef269c0be0f9cc5a810b30a791e63678679991dcab9bb3765b04d4f87d6fbc7212ba12a9f3fe4407085eac589395f34c036d8e719ceb1f45c8f6289da955a1fd0654114bcd8da54f53f3184f3a9a697e51f1910a9d3f86b675ea8a2f444b5b53e31e91bd1087f7169cdfe70a848df720b3d1dd0b2483c1de6694fb1f75ae3cbe84ea8ca366f792cae6a2395cb60fb40b4cf0be854f72aa742b0e76d8f3ef14ca99295417dcf9c0f1db61fb1f2670c486350a45d15"}, {0x50, 0x108, 0x1, "6aa832e5c3894b9c7445ee1f12a615285f87c40d58f268d4a5a2d846698b690978b37610077d436b21872e69d2ac51917ecf9328e55888b1243107563a"}, {0x20, 0x10f, 0x4, "573d1a3d2a1d725e41e49168"}, {0x58, 0x0, 0x5, "361dca6598cdb2587aa7f259a225b9914893f7883ac1e1d229bcd0765f055c45d44fd8ff931913ec821d71ebc0bcfc13d7e908e45413d9d6d4851c5cb52846d1b5a0a5e2"}, {0x60, 0x0, 0xbc, "8eb103c6448ffea19c112c5729be7f391814358e149e0b16d18ed5e090aa259e6742103ff6820aff45b12f64cf48f932ff5f3aae605144aa6d533e10d8554c0e9236910255a5c198689b"}, {0x98, 0x10a, 0x6d32, "5b468a5958bbc2ba88054ba8ae93406c1d624a3bc9586db15aa2ef417f2385e45ca00c1cec375e195fe52e24b374db01c27fdcaa99553c8dfedc0f31698b054d1d4790352d0fdbfe59d5d64e8f5f05ba836be8a9207c33ad7a2b0baca1bd98ce5767637d3daf737130a541d9b19691d798983c23dbacfca7a5eb3c8d0e2d75589fc2da29d411"}, {0x78, 0x10d, 0x7, "20b27de1077a1ee3d0d7eff6d6bdd497e5704bc56d6832c0f018072b5b0be57d001948e271b2b51821897824f2e5ba9de180519ddd138409727848f6c5ec8624e482823270f334ff33c162e0a43897c7d71f0524a301cceddba6f720ce7a62ed7d66bea6"}, {0x50, 0x3a, 0x9, "c092a1e70ce756ec2a6236a979397c845137cf976470c3a86dba146cd134f7565d76db968ef9a6eded391256e3a3108a0cd9db86484eccd3a4ed575031d7b6"}], 0x4d0}, 0x80c0) (async) sendmsg(r1, &(0x7f0000000300)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000004c0)=[{0xe8, 0x10d, 0x8, "637ddb26fda3f1a411e48b12aef8882c75db1e984ab24bceaadadcf7cdfe83c835b55e3bf69effc51fc257102037902ca3ac01314739bf5cdd389d6abf0843f80b218d729fb530ff1c91921f94d65b0fc69f9f5f59dc139a03a33acc606cb14d0e728934437494bfc84481603207a030acfc3bd9e1922c4c68a9c7f9fe32a2ecbcbe118e51cdb7814024d8b754b23aa76bedaea193cdf801db8ca473c4bc4eb54ab55b2b99bb567a7bc0eaa3998e0e6a94dab3209d759e84ff47e630139c2725a7521108fc2e03271dadebde9c03ce1814c6321e"}, {0x60, 0x119, 0x3ff, "edef6b43eb0e8659d9ff9f55137f9248fcda19209cc1d703aea347479485d2f559c51a3bc164f0bb01993f78ce0e232c2fbd9feabb722538ef078409ded4a81f94f2bae4048d037cae"}, {0x100, 0x1, 0x40, "e184ab4ad8aa28ec6f230f4cfdc4243f1e9431820ad7ee13a3a89585f3b377cc981e585db1146eb88cc32d03bbee50342f60701bba61e7bdff05eef269c0be0f9cc5a810b30a791e63678679991dcab9bb3765b04d4f87d6fbc7212ba12a9f3fe4407085eac589395f34c036d8e719ceb1f45c8f6289da955a1fd0654114bcd8da54f53f3184f3a9a697e51f1910a9d3f86b675ea8a2f444b5b53e31e91bd1087f7169cdfe70a848df720b3d1dd0b2483c1de6694fb1f75ae3cbe84ea8ca366f792cae6a2395cb60fb40b4cf0be854f72aa742b0e76d8f3ef14ca99295417dcf9c0f1db61fb1f2670c486350a45d15"}, {0x50, 0x108, 0x1, "6aa832e5c3894b9c7445ee1f12a615285f87c40d58f268d4a5a2d846698b690978b37610077d436b21872e69d2ac51917ecf9328e55888b1243107563a"}, {0x20, 0x10f, 0x4, "573d1a3d2a1d725e41e49168"}, {0x58, 0x0, 0x5, "361dca6598cdb2587aa7f259a225b9914893f7883ac1e1d229bcd0765f055c45d44fd8ff931913ec821d71ebc0bcfc13d7e908e45413d9d6d4851c5cb52846d1b5a0a5e2"}, {0x60, 0x0, 0xbc, "8eb103c6448ffea19c112c5729be7f391814358e149e0b16d18ed5e090aa259e6742103ff6820aff45b12f64cf48f932ff5f3aae605144aa6d533e10d8554c0e9236910255a5c198689b"}, {0x98, 0x10a, 0x6d32, "5b468a5958bbc2ba88054ba8ae93406c1d624a3bc9586db15aa2ef417f2385e45ca00c1cec375e195fe52e24b374db01c27fdcaa99553c8dfedc0f31698b054d1d4790352d0fdbfe59d5d64e8f5f05ba836be8a9207c33ad7a2b0baca1bd98ce5767637d3daf737130a541d9b19691d798983c23dbacfca7a5eb3c8d0e2d75589fc2da29d411"}, {0x78, 0x10d, 0x7, "20b27de1077a1ee3d0d7eff6d6bdd497e5704bc56d6832c0f018072b5b0be57d001948e271b2b51821897824f2e5ba9de180519ddd138409727848f6c5ec8624e482823270f334ff33c162e0a43897c7d71f0524a301cceddba6f720ce7a62ed7d66bea6"}, {0x50, 0x3a, 0x9, "c092a1e70ce756ec2a6236a979397c845137cf976470c3a86dba146cd134f7565d76db968ef9a6eded391256e3a3108a0cd9db86484eccd3a4ed575031d7b6"}], 0x4d0}, 0x80c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r8, 0x0, 0xfffffffff7ff098b, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r8, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESDEC], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x240080c1}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m30.824325468s ago: executing program 2 (id=113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m30.726978496s ago: executing program 2 (id=115): socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) iopl(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) read$FUSE(r1, &(0x7f0000001c40)={0x2020}, 0x2020) syz_emit_ethernet(0xfe53, &(0x7f0000001ac0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m28.843970727s ago: executing program 2 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f315f0f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="10008100", 0x4, 0x40000, &(0x7f0000000000)={0x11, 0x8100, r6, 0x1, 0x1, 0x6, @local}, 0x14) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, 0x0, &(0x7f0000000240)) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) getuid() sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x444, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1, 0x2, 0x11, [0x9, 0xdd32, 0x2, 0x46d1, 0x0, 0xba34, 0x3, 0xa, 0x5, 0xe, 0x10001, 0x9, 0x3, 0xe, 0x9, 0x4, 0x9b, 0x9, 0x5, 0x38f83de3, 0x2, 0x8, 0x6, 0x0, 0x8, 0x5, 0x7, 0x6, 0x100, 0x0, 0x700, 0x8, 0xc, 0x3, 0xd, 0xd0, 0x0, 0x81, 0x8, 0x5d, 0x1, 0xbb8c, 0x40, 0xc, 0x5, 0x6, 0xfffffff9, 0x5, 0x3, 0x2b, 0x8, 0x9718, 0x0, 0x3, 0x0, 0x800, 0x7, 0x10, 0x1, 0x8000, 0x2, 0x5, 0x6, 0xff], [0x9, 0x5, 0x6, 0x10000, 0x9, 0x1, 0xfff, 0x9, 0x0, 0x3, 0x5, 0xf52a, 0x3, 0x101, 0x4, 0x6, 0x4, 0x400, 0x8153, 0xc3d, 0xffff, 0x3, 0x4, 0xa0c4, 0xfff, 0x8, 0x7, 0x6, 0x1a3c6, 0x7fffffff, 0x5, 0x1, 0x6, 0xfff, 0x4, 0xe6f, 0x5, 0xe, 0x2, 0x9, 0x6, 0x1, 0x5, 0xf, 0x3, 0x5, 0x2, 0x27, 0x9, 0x80000001, 0x5, 0x95, 0x8, 0x5, 0x7, 0x6, 0x80, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x80000000, 0x7fff], [0x43, 0x5, 0x6, 0x8, 0x1e5, 0x1, 0x2, 0x400, 0x5, 0x8, 0x5, 0x3, 0x71, 0x45, 0xffffffff, 0x4e, 0x321c, 0x96bd, 0x1000, 0x400, 0x3, 0xfffffffc, 0x3, 0x3, 0x4, 0x3, 0x8, 0x1, 0x7, 0x6, 0x7ff, 0x1, 0x1000, 0x101, 0x6, 0x3, 0x3, 0x8, 0x4, 0xb26, 0x7, 0x7, 0x91de, 0x2, 0x10001, 0x101, 0x7, 0x8, 0x9, 0x8, 0x14, 0x0, 0x8000, 0x0, 0x1, 0x80000001, 0xff, 0x9, 0x3, 0xffffff01, 0x8, 0x2, 0x81, 0x6], [0xffffffff, 0x6, 0x584dbf24, 0x6, 0x2, 0x7, 0x11a6599a, 0x9, 0x4, 0x2, 0x6, 0x100, 0x5, 0x1000, 0xffff, 0x55b7, 0x6, 0x8, 0x3, 0x9, 0x0, 0x1, 0xa3, 0x0, 0xe, 0x3a1, 0x1, 0x1, 0x8, 0x2, 0x6, 0x1, 0xffff, 0x7, 0x1, 0xc31, 0x9adc3e7, 0xe55d, 0x3, 0xd, 0x75d4, 0x9, 0x2, 0x2, 0x3, 0x8001, 0x3, 0x0, 0x5, 0xc7a, 0x10000, 0xaba, 0xe, 0x5, 0x6, 0x0, 0x4, 0x0, 0x6, 0x41, 0x344, 0x0, 0x6, 0xfffffff8], 0x21, ['streebog256-generic\x00', 'geneve0\x00', '!#*^\x00']}, ["", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m28.298239417s ago: executing program 2 (id=132): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104070000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a0001"], 0x48}}, 0x0) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) 2m27.468438642s ago: executing program 2 (id=134): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000040)='4\x00', 0x2) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) r4 = openat$cgroup_pressure(r1, &(0x7f0000000340)='io.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000040)=""/252, 0xfc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500010007000000090002"], 0x5c}}, 0x0) 2m27.127913041s ago: executing program 32 (id=134): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000040)='4\x00', 0x2) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) r4 = openat$cgroup_pressure(r1, &(0x7f0000000340)='io.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000040)=""/252, 0xfc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500010007000000090002"], 0x5c}}, 0x0) 9.932052353s ago: executing program 1 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xb6abe5feb15ab5a3, &(0x7f0000000640)={0xe1fc, 0x8000}, &(0x7f0000000680)) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000008340)=[{{&(0x7f00000006c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)="9476a9ffb29c467f87dbd8b393042f96a5c63929f2bb44c22e3d9c1df086b92192450dfae63a8d23d1212d", 0x2b}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000780)="1799579cedfdaa545fec759ab6b1783b9e72914b5ae41682bcfd055be634e06649e3d2b64a57a05b6dbb5c42e8299df1fa5a65be2b9ec580a31613b17433bbfa5fa5f9b158c20721cdd3a9f4fc084a6d0fd84154e82d35d817e10b39", 0x5c}, {&(0x7f0000000800)="e2762e6b17ebdecba94b709dbff78d502f36cb4c75e33496920c4b206da5ca3b5a47b1a378fac25229426b54b2d0556701eac3a3ea6d769b54e2c7aaed930b22ba37", 0x42}, {&(0x7f0000000880)="03faae14fac02ff060ec5ebcca8380d9222b08e1bb051dad9ad50c83627c2d95776bb17697", 0x25}, {&(0x7f00000008c0)="ba7b9164eac57bb2abf808558add7862b8c5c87aa1c1f3e804a903d236e1b2e7e476270a019861c5ddfc5f79bc5e7d941a841d7e22e20b93b3a7df2092dc3e87bc4f8c6d7316cda5710234869e933461c730515edd4df2453afd1a876328f7", 0x5f}, {&(0x7f0000000940)="deed44e030df1081894576a66e77580ea8127ad4721b332d1de9844ba2643504331838cb13c40a94be6fcf1f1b0d4d5d9d68339cb3f0ee2b25b0b99d4136cc7e6a9f4a73fc58f47448d9a2318a0d2550af592e22067e44716429b360acc1", 0x5e}, {&(0x7f00000009c0)="b220ca44a601f7bbb5cd1f38", 0xc}, {&(0x7f0000000a00)="f31d413771e1e0eeb090380d1403e74f94b17fb4aad500e8daa0198365b4f3566c65bc30be1ef6cc50e6582662b7ecf0da3542be2617d25cf9a46b0c91d3cbd0bbb667887136e273c5", 0x49}], 0x9, 0x0, 0x0, 0x22004800}}, {{&(0x7f0000000b40)=@file={0x1, './file0/file0/file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000005280)="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", 0x1000}], 0x1, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [r0, r4, r3, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xa0, 0x41030}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)="26a3c10c17aaa5dc3426356f069dbd34eed2c9a7b941f3270e3ecd4dd05977e178767f4aa942a303dde42beaf0902378ad8d3c4fdfbebdd454c17dd2cd426217beaf5b6bbfa97cc225cb73327f5b010e6207124ca1fe8282fd1f8b17b7575d70eb03f57ef4e1d1a66904c3361a1b2036ec034c73b55958d5c94f2cd37a45b5776502877f2310c75f267a2d96f09e4d54b4686ca6798acbedb5173cdd63b1fa7ed408f6fa50b1d7cda8d260426c9e19382306f1bb04a84c05b358a732fdf778da6cfca2c2878ed6d14906b26057dfd5122ae57b38", 0xd4}, {&(0x7f0000000e40)="99e854faadc799556473dfaeff62c5bd92d2616074fc698c5975ee8a66", 0x1d}], 0x2, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x40, 0x20000084}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f40)="a6b010f5a52714784debf3482d0ce9ebee0c6dd235981a0d5139e8670a9e76727008ffb7e4164d3143000d3da7eb48a0d73aa43a3b9da53032189c0d1f18250dd448287c5a243487afb2ae967e179527a5382b3b182a01572b8dd08d4d1eb572d62d630f95248e3a20d861fb00cdb184266b2875c22ff33ba41e586332bfa9ea0d11498d3b330816cbed8263d77ff1e7d43dcbb905febe4c969d5c7b09aec826a85cb99e68d06cc57f80aab7696bc33cae143da1d6f1b9b5", 0xb8}, {&(0x7f0000001000)="2425a4868c6d3f9777656084eef7936d4707a6e79c9d4b1d343cf71b6567384c9ba2957985dc70ffc78e4af060042ace8089dd49521e8695af8c17beb91985144e59410f7f134d7b468322ae6140c4b892c0962cec9a7bd6b4b7b13ebe1d291f1a7d9d1386a822fb3f9cdc525c0079472734576ecfea528075362fc08fd447def16991dcd9c34fe8", 0x88}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e5ffff1b000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0x70, 0x4000805}}, {{&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000082c0)=[{&(0x7f0000001280)="d46d0bc41011e2b6cdfc60f82391a006970daac0e84a1c4a37dac0f61b5f0172f708d4997a4bfabefa468468ffaa7ce1496ac1d2fe0c22eb92dce7e2f62a63861c512719e7248a641e586835b84b68a4d2dc7d6edcc0ff6c51126fa5c0c7a83d1ca38549f08f6d8c0a77978fd636b435da3249260e90c629aae068d69fcad0777d16877a62bbbd2122e2aa0f517f02bead541869d6b029c7b7afb48c543462bcd9ec803f939f91e5af31046cfe15a8", 0xaf}, {&(0x7f00000013c0)="6cc0e9ce1afca4b3def587ad9d590374e5eaa0f328ff79ace8403fe41d1e1917e6e68a9016a7da630c152465cb11806c1450b21f7856cba93065fd6b4de66e84fd259e5580346aaf471293a6688823d452e74fcdfd8e378621580023fe7d31893f96a79683f56174f045931c92b4fc59d667d708cf20a6651c004614cbd4f67ff4a887b56bb75b384376461bcb0931ef4665e2b312bdc4f7975054b920cfc609455f6e583d466abe08d4bc4f7821f6b84c", 0xb1}, {&(0x7f0000001100)="5f9b4ca73bcfaacd15e1b915589a1e3df7567041e8d5b874e6e1af72544ecd4305843b653446d3d951c3196103a292c7c8f348ceb51c3043458ff267036afd68c2c6bf0a99898bbc4c7668b6c98ac0fe8fa349dd2dd2278dac59e39fafff3ebb9510a9c99ab7c2ee96eec0e0e25c98fb35ee3555e8be1658713d30ac662a5121", 0x80}, {&(0x7f00000015c0)="6700dcf5da842fda6fd01817133c3bd28fc72ebb227e4a60d85c7b869d3885a0b03497b49d7b25e0341fcb4d1d7dc7da6640d74de2d6f7998e4cea9a5f9cbb35ad3e0555ff6d981e6d89f92220c1cf3502bfeb6d", 0x54}, {&(0x7f0000001640)="99b749b71d318afd", 0x8}, {&(0x7f0000008200)="a09e0632cb8e19b1edaf6ec87d51c81e573b9669f43dd2cd5570510e0a43cbb72c665d56102ea17834b9edcb96750d9d562eac400ce98daed3e619fcf19cf4a9e87f34552f4b7045535bf02e986122472a7137606e14407bebc61d2be74cb1036e6899e8186b70d6e02bfcd513d82eb0595134f96819ee00b9192d8b9a1be16d0409dbc2868c2dc5bd9005e540f0119f3a8192651405485a4518561c58d1df64393e18161f9149153dda7be9", 0xac}], 0x6, 0x0, 0x0, 0x4}}], 0x5, 0x8001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r7) fcntl$setstatus(r6, 0x4, 0x42800) read$FUSE(r5, &(0x7f0000003240)={0x2020}, 0x2020) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001340)=@newtaction={0x18, 0x30, 0x42b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 9.477428225s ago: executing program 5 (id=732): r0 = socket$inet_sctp(0x2, 0x0, 0x84) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = eventfd(0xfffffe01) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x9, 0x2000, 0x2, r2, 0x10}) (async, rerun: 32) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="cf11a1fe45a02ad70aabe73df0ce0ff84acca96970a81037674b471d6fbc648b3c865f4db408b093cfe49624cc265dd3910144653dd4917e93e780c0fdeb2305a8299e29ab0eb76007b7f0d816f27295d6a8128b0acd349f0118fe6b1df5531bb243814c3014", 0x66, 0x0) (async, rerun: 32) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="5cd725b8a32301d0ac7573d0b9", 0xd, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, r3, r4}, &(0x7f0000000240)=""/12, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={'digest_null-generic\x00'}, &(0x7f00000002c0)="2ae0db3a2e7903597cc79f25746227e02617a8bb4c", 0x15}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, &(0x7f0000000380)=""/172, &(0x7f0000000440)=""/84, &(0x7f00000004c0)=""/215}) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100400, 0xe0, 0x4}, 0x18) r7 = openat(r6, &(0x7f0000000680)='./file0\x00', 0x480000, 0x89) (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000006c0)=0x0) sched_setscheduler(r8, 0x5, &(0x7f0000000700)=0x40) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r10 = getgid() (rerun: 64) keyctl$chown(0x4, r9, 0xee00, r10) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x3, 0x7, 0x4}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3369, 0x2e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x1) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000940)='rxrpc\x00', &(0x7f0000000980)=@keyring={'key_or_keyring:', r9}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)=@deltaction={0x188, 0x31, 0xf00, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8c3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) (async, rerun: 64) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r7) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r13, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) (async) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000e40)=0xfff) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r7) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40801080}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, r15, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x1) close(r1) 9.336020716s ago: executing program 5 (id=734): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x1f8a, &(0x7f0000000180)={0x0, 0x2c97, 0x13580, 0x0, 0x284}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2a, 0x2, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x1, r5, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r13}}, 0x40) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40091}, 0xc800) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x448c1}, 0x40088c1) io_uring_enter(r6, 0xe85, 0x0, 0x42, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x40) 9.212707068s ago: executing program 5 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@window={0x3, 0x101, 0x7}, @sack_perm, @sack_perm, @mss={0x2, 0xffffffff}, @mss={0x2, 0xd}, @window={0x3, 0x0, 0xfffc}, @sack_perm], 0x7) 9.004129453s ago: executing program 5 (id=738): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x3000000}, 0x0) r5 = dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf000100000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101042, 0x40) 8.445609889s ago: executing program 1 (id=739): r0 = inotify_init1(0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 7.900387352s ago: executing program 1 (id=740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60480) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') setns(r6, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = eventfd(0x8000) read$eventfd(r7, &(0x7f0000000100), 0x8) r8 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1000, 0x0) 6.952375546s ago: executing program 5 (id=746): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="87de00"/18, @ANYRES32=r2, @ANYBLOB="04005b00"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) creat(&(0x7f0000000380)='./file0\x00', 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.19410674s ago: executing program 1 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.179517791s ago: executing program 0 (id=754): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='reclaim_retry_zone\x00', r3}, 0x18) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000d7f73277c55b505009ebb08b3f5ebff9f818c2c8a7cb11582e98e82387d784c4fee3bd83cfbefb877ba90204bc0c264fcb574135dd9cef42a8aaa1da575ea19574c73ad762642a33fc0000000001000000cc39aad2376233dc64bbbb963bcd39cc867a97", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250100000008000500ac1e00010c000300010000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000c00fc020000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) flock(r1, 0x1) flock(r1, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) flock(r0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x1c1}, 0x18) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000000c0), 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) flock(r4, 0x2) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000100)=ANY=[], 0x10) 4.892312643s ago: executing program 0 (id=755): mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0xe6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x1}], 0x2, 0x60010020, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4a0c0}, 0x40017) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x48, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x3c, @multicast1, 0x4e24, 0x3, 'dh\x00', 0x4, 0x9, 0x2a}, 0x2c) r7 = socket$isdn(0x22, 0x2, 0x26) syz_emit_ethernet(0x0, 0x0, 0x0) bind$isdn(r7, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 4.794878928s ago: executing program 1 (id=757): syz_usb_connect(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000c29afc4094225a42adae000000010902240001000000000904003c02573adf7a09050e00ff0307960609050d"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) syslog(0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0xf) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x1324c000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8800"], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8800"], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c) dup(r0) (async) r4 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0xdc}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24004004}, 0x44054) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24004004}, 0x44054) gettid() (async) r5 = gettid() waitid(0x2, r5, 0xfffffffffffffffd, 0x8, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') timer_create(0x4, &(0x7f0000000080)={0x0, 0x3a, 0x2, @tid=r5}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) (async) timer_settime(r6, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) 3.900991853s ago: executing program 0 (id=758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x20000094) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x5, 0x2, 0x0, 0x70bd2e}, 0x10}, 0x1, 0xfdffffff}, 0x40880) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3.723031499s ago: executing program 0 (id=760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 3.164124751s ago: executing program 5 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="400012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad12143a"], 0xffdd) 3.1055457s ago: executing program 0 (id=764): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09", 0xa) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000000)={r0, 0x1, 0x5}) 2.98664741s ago: executing program 0 (id=766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1f0000000b0000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff000063cc8287cfb1134c3f9ff4acb5ea7b0000e84c68ec2fffffef00"/43], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="318ff903dea44ebd067d86b696df0c1800000000000100008000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f80)={0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/72, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000001c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x138, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44844}, 0x4000800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0xfaa8, 0x7, 0x4, 0xfff, 0x5}, &(0x7f0000000480)=0x14) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010027bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 2.556128205s ago: executing program 4 (id=768): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203", @ANYBLOB="146cb7a7eb51e3cdaf0cc55cd7e81ddee4cc115d4635fcd6f36f6826584c"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000007, 0x50, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="44008f00", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300028000000800090004000000"], 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x4064010) syz_io_uring_setup(0x281, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r7 = syz_io_uring_setup(0x1f84, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x80}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x7ff, &(0x7f0000000140)=0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_submit(r12, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}]) close_range(r11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r2, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x50, 0x0, r0, 0x80, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x0, {0x0, r10}}) 2.232825032s ago: executing program 3 (id=769): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0002000006004f000000e20002000000850000002f0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.064202595s ago: executing program 3 (id=770): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}], 0x3c) 2.010341941s ago: executing program 1 (id=771): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r2, 0x0, &(0x7f0000000140)={0x400000008, 0x95}, 0x0) r3 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r3, 0x184) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r6 = dup(r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) accept$nfc_llcp(r6, &(0x7f00000000c0), &(0x7f0000000040)=0x60) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) read$msr(r1, &(0x7f00000000c0)=""/56, 0x38) socket$kcm(0x29, 0x0, 0x0) 1.861939224s ago: executing program 3 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000b80)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="2896d441", @ANYRESOCT, @ANYBLOB="929c59cf458a1f6865486273684b", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="6ab0709f22b529150374ed75ea9ff3a27396e08d683e7d213fe512513fe68aca9ab59ece290867290ee91bc06e62fa5b926805f42cfb629cfb1ebff9162586cb81bd89bfa9a58a89669fc2ea387c5253d7f85d51b59bee79476a65e246a5853963cba2024587a1fd01e2f06ebf62e530a44795dbf3fc604a6d9c474d2001feca16e9e36b6f9609cb006b6a248bb2d84e71b7b8dfe6a50a68e6b07453767810c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="79ef34395d4c410d25e52319c6a502980fd70906f311e78ea6dce2f7034f799843", 0x21}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="fa55a399db34dd5dad061348", 0xc}], 0x1}}], 0x1, 0x404000c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0xa8abc233c0273240, 0x7f}, 0xb17, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0xfffffffffffffffb, 0x24e, 0x1, 0x2}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1}], 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x4e0, 0x2e8, 0x1e8, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000140), {[{{@arp={@multicast2, @remote, 0xffffff00, 0xff000000, 0x10, 0x10, {@empty, {[0x0, 0xff, 0x0, 0x588e1c0f7b938399, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfff7, 0x5, 0x3, 0x1, 0x4, 0x75b2, 'veth0_macvtap\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x10}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x200, 'system_u:object_r:fixed_disk_device_t:s0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xb3, 0x2}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0xb, 0x4, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x931, 0x5, 0x9f4e, 0x2, 0x80, 0xbf70, 'veth0_to_bond\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x1c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x530) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x1, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in6=@local, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 952.699732ms ago: executing program 4 (id=773): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x28e3}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) 846.009624ms ago: executing program 3 (id=774): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCCONS(r2, 0x541d) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 786.637411ms ago: executing program 4 (id=775): getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0x4) 656.207635ms ago: executing program 3 (id=776): r0 = fanotify_init(0x0, 0x1) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x4800003a, r1, 0x0) r2 = fanotify_init(0x8, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) fanotify_mark(r2, 0x61, 0x40001002, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, 0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x12, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) close_range(r5, 0xffffffffffffffff, 0x0) 486.177312ms ago: executing program 4 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c22930", 0x20) socket$alg(0x26, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r1, 0x2}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, 0x0) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 485.166646ms ago: executing program 3 (id=778): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x10001, 0x4}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040084) 343.611898ms ago: executing program 4 (id=779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x6, 0x4, 0x1, r3, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe45) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x22c8417, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) syz_io_uring_setup(0x416c, &(0x7f0000000780)={0x0, 0xf1aa, 0x10100}, &(0x7f0000001240), 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 0s ago: executing program 4 (id=780): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r5, 0x7}, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x29) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000300)={0x6, 0x9, 0x4, 0x10, 0x112, {0x77359400}, {0x5, 0x2, 0x0, 0x0, 0xfe, 0xff, "604ae0ba"}, 0xfffffffd, 0x4, {}, 0xe7ae}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) kernel console output (not intermixed with test programs): /firmware/. failed with error -22 [ 126.517273][ T7203] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 126.525754][ T7203] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 126.636039][ T971] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 127.150684][ T5830] Bluetooth: hci4: command tx timeout [ 127.164974][ T971] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 127.174308][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.185869][ T971] usb 4-1: Product: syz [ 127.190042][ T971] usb 4-1: Manufacturer: syz [ 127.194752][ T971] usb 4-1: SerialNumber: syz [ 127.202268][ T971] usb 4-1: config 0 descriptor?? [ 127.335602][ T971] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 127.377068][ T30] audit: type=1400 audit(1742232592.741:377): avc: denied { map } for pid=7216 comm="syz.4.278" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.400973][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.407146][ T971] usb 4-1: setting power ON [ 127.421345][ T971] dvb-usb: bulk message failed: -22 (2/0) [ 127.453527][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.483661][ T971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 127.527188][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.550296][ T971] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 127.572013][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.580845][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.706731][ T7225] ALSA: seq fatal error: cannot create timer (-22) [ 127.924533][ T971] dvb_usb_cxusb 4-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 127.963728][ T971] usb 4-1: USB disconnect, device number 11 [ 128.060731][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.284220][ T7243] 9pnet_fd: Insufficient options for proto=fd [ 128.982375][ T30] audit: type=1400 audit(1742232594.311:378): avc: denied { mount } for pid=7251 comm="syz.3.287" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.085049][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 129.135621][ T30] audit: type=1400 audit(1742232594.441:379): avc: denied { create } for pid=7257 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.181669][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 129.236856][ T30] audit: type=1326 audit(1742232594.601:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7257 comm="syz.5.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb26598d169 code=0x0 [ 129.842377][ T7274] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 129.898525][ T30] audit: type=1400 audit(1742232594.671:381): avc: denied { create } for pid=7257 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.976556][ T30] audit: type=1400 audit(1742232594.671:382): avc: denied { write } for pid=7257 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.079231][ T30] audit: type=1400 audit(1742232594.701:383): avc: denied { bind } for pid=7257 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.079343][ T7282] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 130.137797][ T30] audit: type=1400 audit(1742232594.711:384): avc: denied { name_bind } for pid=7257 comm="syz.5.288" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 130.174626][ T7282] audit: out of memory in audit_log_start [ 130.185397][ T7281] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.224563][ T30] audit: type=1400 audit(1742232594.711:385): avc: denied { node_bind } for pid=7257 comm="syz.5.288" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 131.864282][ T7310] pimreg3: entered allmulticast mode [ 132.241963][ T971] page_pool_release_retry() stalled pool shutdown: id 24, 2 inflight 60 sec [ 132.510686][ T52] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 132.568356][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.574874][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.680617][ T52] usb 6-1: Using ep0 maxpacket: 16 [ 132.740381][ T5830] Bluetooth: hci1: Unable to find connection for big 0x00 [ 132.749570][ T7336] openvswitch: netlink: Key type 30 is not supported [ 132.839610][ T7342] 9pnet_fd: Insufficient options for proto=fd [ 132.853385][ T54] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 132.888473][ T52] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.931479][ T54] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 132.940910][ T52] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 132.948503][ T52] usb 6-1: can't read configurations, error -71 [ 134.012818][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 134.012834][ T30] audit: type=1400 audit(1742232599.381:492): avc: denied { sys_module } for pid=7356 comm="syz.1.311" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 134.239163][ T30] audit: type=1400 audit(1742232599.601:493): avc: denied { create } for pid=7381 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.294094][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.315'. [ 134.322242][ T30] audit: type=1400 audit(1742232599.681:494): avc: denied { ioctl } for pid=7381 comm="syz.1.314" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.768287][ T30] audit: type=1400 audit(1742232599.681:495): avc: denied { create } for pid=7381 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.874215][ T30] audit: type=1400 audit(1742232599.691:496): avc: denied { ioctl } for pid=7381 comm="syz.1.314" path="socket:[14198]" dev="sockfs" ino=14198 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.950678][ T30] audit: type=1400 audit(1742232599.871:497): avc: denied { ioctl } for pid=7381 comm="syz.1.314" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15539 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.977625][ T5822] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.019744][ T30] audit: type=1400 audit(1742232600.201:498): avc: denied { mounton } for pid=7399 comm="syz.5.317" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 135.044318][ T30] audit: type=1400 audit(1742232600.201:499): avc: denied { mount } for pid=7399 comm="syz.5.317" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.066483][ T30] audit: type=1400 audit(1742232600.291:500): avc: denied { create } for pid=7402 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.152236][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.170244][ T30] audit: type=1400 audit(1742232600.321:501): avc: denied { write } for pid=7402 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.881278][ T5822] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.889326][ T5822] usb 4-1: config 0 has no interface number 0 [ 135.901693][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 135.906955][ T5830] Bluetooth: hci1: command 0x0405 tx timeout [ 135.925103][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.940539][ T5822] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.961281][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.972344][ T5822] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.982768][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.003673][ T5822] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 136.020581][ T10] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 136.038277][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.049465][ T7415] openvswitch: netlink: Key type 30 is not supported [ 136.065731][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 136.085524][ T5822] usb 4-1: config 0 descriptor?? [ 136.110917][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 136.150807][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.186172][ T10] usb 6-1: config 0 descriptor?? [ 136.633768][ T7440] ceph: No mds server is up or the cluster is laggy [ 136.667283][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 136.681840][ T971] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.701068][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 136.751762][ T5822] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.000C/input/input8 [ 136.792394][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.802211][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.827562][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.944768][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 136.954922][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 136.966028][ T54] Bluetooth: hci1: hardware error 0x00 [ 136.979300][ T5822] holtek_kbd 0003:04D9:A055.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 137.077151][ T5822] usb 4-1: USB disconnect, device number 12 [ 137.290911][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.720659][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 137.756020][ T5867] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 137.772726][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.780812][ T5867] usb 1-1: Product: syz [ 137.789982][ T5867] usb 1-1: Manufacturer: syz [ 137.794983][ T5867] usb 1-1: SerialNumber: syz [ 137.825401][ T5867] usb 1-1: bad CDC descriptors [ 138.146921][ T5871] usb 1-1: USB disconnect, device number 12 [ 139.184484][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 139.184499][ T30] audit: type=1400 audit(1742232604.551:524): avc: denied { create } for pid=7511 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 139.273061][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 139.458938][ T30] audit: type=1400 audit(1742232604.641:525): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 139.520114][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 139.574379][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 139.596620][ T7561] xt_policy: too many policy elements [ 139.628055][ T30] audit: type=1400 audit(1742232604.691:526): avc: denied { audit_write } for pid=7511 comm="syz.1.338" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.649073][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.850837][ T30] audit: type=1107 audit(1742232604.691:527): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 140.058367][ T10] usb 6-1: USB disconnect, device number 7 [ 140.073663][ T30] audit: type=1400 audit(1742232604.721:528): avc: denied { read write } for pid=7511 comm="syz.1.338" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.097145][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.126425][ T30] audit: type=1400 audit(1742232604.721:529): avc: denied { open } for pid=7511 comm="syz.1.338" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.150038][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.207312][ T30] audit: type=1400 audit(1742232604.921:530): avc: denied { write } for pid=7559 comm="syz.3.340" name="vlan1" dev="proc" ino=4026533597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 140.229912][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.240964][ T30] audit: type=1400 audit(1742232605.081:531): avc: denied { create } for pid=7559 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.759657][ T30] audit: type=1400 audit(1742232606.121:532): avc: denied { bind } for pid=7569 comm="syz.5.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.779922][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.806613][ T30] audit: type=1400 audit(1742232606.121:533): avc: denied { create } for pid=7569 comm="syz.5.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 142.269702][ T7598] fuse: Bad value for 'rootmode' [ 142.423520][ T7607] netlink: 'syz.5.351': attribute type 7 has an invalid length. [ 142.455147][ T7607] netlink: 140 bytes leftover after parsing attributes in process `syz.5.351'. [ 142.600693][ T52] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.772973][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.851116][ T52] usb 5-1: no configurations [ 142.870596][ T52] usb 5-1: can't read configurations, error -22 [ 143.032101][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.100455][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 143.145346][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.235071][ T10] usb 6-1: config 0 descriptor?? [ 143.265153][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 143.461122][ T52] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.591438][ T7643] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 143.642589][ T52] usb 5-1: no configurations [ 143.647220][ T52] usb 5-1: can't read configurations, error -22 [ 143.690651][ T52] usb usb5-port1: attempt power cycle [ 144.030792][ T52] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.061891][ T52] usb 5-1: no configurations [ 144.066613][ T52] usb 5-1: can't read configurations, error -22 [ 144.130139][ T7673] FAULT_INJECTION: forcing a failure. [ 144.130139][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 144.143847][ T7673] CPU: 1 UID: 0 PID: 7673 Comm: syz.0.365 Not tainted 6.14.0-rc7-syzkaller #0 [ 144.143870][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.143879][ T7673] Call Trace: [ 144.143884][ T7673] [ 144.143890][ T7673] dump_stack_lvl+0x16c/0x1f0 [ 144.143919][ T7673] should_fail_ex+0x50a/0x650 [ 144.143945][ T7673] ? fs_reclaim_acquire+0xae/0x150 [ 144.143971][ T7673] ? tomoyo_encode2+0x100/0x3e0 [ 144.143994][ T7673] should_failslab+0xc2/0x120 [ 144.144013][ T7673] __kmalloc_noprof+0xcb/0x510 [ 144.144030][ T7673] ? d_absolute_path+0x137/0x1b0 [ 144.144050][ T7673] ? rcu_is_watching+0x12/0xc0 [ 144.144070][ T7673] tomoyo_encode2+0x100/0x3e0 [ 144.144098][ T7673] tomoyo_encode+0x29/0x50 [ 144.144120][ T7673] tomoyo_realpath_from_path+0x19d/0x720 [ 144.144151][ T7673] tomoyo_path_number_perm+0x248/0x590 [ 144.144171][ T7673] ? tomoyo_path_number_perm+0x235/0x590 [ 144.144194][ T7673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.144239][ T7673] ? __pfx_lock_release+0x10/0x10 [ 144.144262][ T7673] ? trace_lock_acquire+0x14e/0x1f0 [ 144.144284][ T7673] ? lock_acquire+0x2f/0xb0 [ 144.144305][ T7673] ? __fget_files+0x40/0x3a0 [ 144.144324][ T7673] ? __fget_files+0x206/0x3a0 [ 144.144344][ T7673] security_file_ioctl+0x9b/0x240 [ 144.144370][ T7673] __x64_sys_ioctl+0xb7/0x200 [ 144.144395][ T7673] do_syscall_64+0xcd/0x250 [ 144.144420][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.144442][ T7673] RIP: 0033:0x7fa08ed8d169 [ 144.144456][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.144471][ T7673] RSP: 002b:00007fa08fcbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.144488][ T7673] RAX: ffffffffffffffda RBX: 00007fa08efa5fa0 RCX: 00007fa08ed8d169 [ 144.144498][ T7673] RDX: ffffffffffffffff RSI: 000000000000ab07 RDI: 0000000000000003 [ 144.144507][ T7673] RBP: 00007fa08fcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 144.144516][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.144526][ T7673] R13: 0000000000000000 R14: 00007fa08efa5fa0 R15: 00007ffedf7a6638 [ 144.144550][ T7673] [ 144.144562][ T7673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 144.378862][ T52] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.549882][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 144.549900][ T30] audit: type=1400 audit(1742232609.911:548): avc: denied { unmount } for pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 144.600603][ T52] usb 5-1: device not accepting address 14, error -71 [ 144.607672][ T52] usb usb5-port1: unable to enumerate USB device [ 144.872720][ T5867] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.910610][ T52] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.030886][ T5867] usb 2-1: device descriptor read/64, error -71 [ 145.040704][ T52] usb 5-1: device descriptor read/64, error -71 [ 145.072811][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.260892][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 145.267168][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.278604][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.280677][ T52] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.286253][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 145.304490][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 145.316114][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.325234][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.333597][ T10] usb 4-1: Product: syz [ 145.337769][ T10] usb 4-1: Manufacturer: syz [ 145.342937][ T10] usb 4-1: SerialNumber: syz [ 145.420654][ T52] usb 5-1: device descriptor read/64, error -71 [ 145.470570][ T5867] usb 2-1: device descriptor read/64, error -71 [ 145.540872][ T52] usb usb5-port1: attempt power cycle [ 145.558885][ T10] cdc_ncm 4-1:1.0: bind() failure [ 145.570160][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 145.578964][ T10] cdc_ncm 4-1:1.1: bind() failure [ 145.585419][ T5867] usb usb2-port1: attempt power cycle [ 145.596413][ T10] usb 4-1: USB disconnect, device number 13 [ 145.817323][ T7700] overlayfs: missing 'lowerdir' [ 146.232122][ T26] usb 6-1: USB disconnect, device number 8 [ 146.250842][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.276586][ T30] audit: type=1400 audit(1742232611.641:549): avc: denied { create } for pid=7704 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.280658][ T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 146.296700][ T30] audit: type=1400 audit(1742232611.641:550): avc: denied { bind } for pid=7704 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.323228][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.331896][ T5867] usb 2-1: device descriptor read/8, error -71 [ 146.340033][ T52] usb 5-1: device descriptor read/8, error -71 [ 146.580853][ T5867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.600646][ T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 146.601098][ T5867] usb 2-1: device descriptor read/8, error -71 [ 146.620946][ T6999] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.632161][ T52] usb 5-1: device descriptor read/8, error -71 [ 146.720902][ T5867] usb usb2-port1: unable to enumerate USB device [ 146.740603][ T5868] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.743934][ T52] usb usb5-port1: unable to enumerate USB device [ 146.772197][ T6999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.782157][ T6999] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 146.792363][ T6999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.804088][ T6999] usb 4-1: config 0 descriptor?? [ 146.894103][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.904201][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 146.913353][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.925304][ T5868] usb 1-1: config 0 descriptor?? [ 147.225600][ T6999] lg-g15 0003:046D:C222.000D: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 147.349616][ T5868] lg-g15 0003:046D:C222.000E: hidraw1: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 147.493247][ T7709] xt_hashlimit: size too large, truncated to 1048576 [ 147.614865][ T7711] xt_hashlimit: size too large, truncated to 1048576 [ 148.072303][ T30] audit: type=1400 audit(1742232613.431:551): avc: denied { watch watch_reads } for pid=7721 comm="syz.1.380" path="/76/cgroup" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 148.115453][ T30] audit: type=1400 audit(1742232613.441:552): avc: denied { read } for pid=7721 comm="syz.1.380" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=19489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.195110][ T30] audit: type=1400 audit(1742232613.521:553): avc: denied { ioctl } for pid=7721 comm="syz.1.380" path="socket:[16154]" dev="sockfs" ino=16154 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.226494][ T30] audit: type=1400 audit(1742232613.521:554): avc: denied { write } for pid=7728 comm="syz.5.381" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.259072][ T30] audit: type=1400 audit(1742232613.531:555): avc: denied { read } for pid=7728 comm="syz.5.381" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.290430][ T30] audit: type=1400 audit(1742232613.531:556): avc: denied { open } for pid=7728 comm="syz.5.381" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.295597][ T26] usb 4-1: USB disconnect, device number 14 [ 148.314456][ T30] audit: type=1400 audit(1742232613.531:557): avc: denied { append } for pid=7728 comm="syz.5.381" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.330675][ T52] usb 1-1: USB disconnect, device number 13 [ 148.441032][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 148.600895][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 148.607254][ T5868] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 148.615569][ T5868] usb 6-1: config 0 has no interface number 0 [ 148.625123][ T5868] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 2.cb [ 148.634557][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.642640][ T5868] usb 6-1: Product: syz [ 148.646902][ T5868] usb 6-1: Manufacturer: syz [ 148.651566][ T5868] usb 6-1: SerialNumber: syz [ 148.657682][ T5868] usb 6-1: config 0 descriptor?? [ 148.917209][ T5868] mdc800 6-1:0.202: probe fails -> wrong Interface [ 148.943867][ T5868] usb 6-1: USB disconnect, device number 9 [ 149.101950][ T7742] loop2: detected capacity change from 0 to 7 [ 149.156195][ T7736] xt_hashlimit: size too large, truncated to 1048576 [ 149.166641][ T7736] xt_hashlimit: max too large, truncated to 1048576 [ 149.179525][ T7742] Dev loop2: unable to read RDB block 7 [ 149.194754][ T7742] loop2: AHDI p1 p2 p3 p4 [ 149.201041][ T7742] loop2: partition table partially beyond EOD, truncated [ 149.209556][ T7742] loop2: p1 start 1601398130 is beyond EOD, truncated [ 149.216488][ T7742] loop2: p2 start 1702059890 is beyond EOD, truncated [ 149.223388][ T7742] loop2: p3 size 150995200 extends beyond EOD, truncated [ 149.576813][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 149.576828][ T30] audit: type=1400 audit(1742232614.941:585): avc: denied { create } for pid=7751 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.715219][ T7755] FAULT_INJECTION: forcing a failure. [ 149.715219][ T7755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 149.753396][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.1.391 Not tainted 6.14.0-rc7-syzkaller #0 [ 149.753420][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.753429][ T7755] Call Trace: [ 149.753433][ T7755] [ 149.753440][ T7755] dump_stack_lvl+0x16c/0x1f0 [ 149.753464][ T7755] should_fail_ex+0x50a/0x650 [ 149.753484][ T7755] copy_fpstate_to_sigframe+0x894/0xb20 [ 149.753500][ T7755] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 149.753516][ T7755] ? find_held_lock+0x2d/0x110 [ 149.753529][ T7755] get_sigframe+0x4aa/0x9c0 [ 149.753542][ T7755] ? __pfx_get_sigframe+0x10/0x10 [ 149.753554][ T7755] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.753565][ T7755] ? siginfo_layout+0x1d2/0x290 [ 149.753582][ T7755] x64_setup_rt_frame+0x129/0xcf0 [ 149.753596][ T7755] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 149.753611][ T7755] arch_do_signal_or_restart+0x5e6/0x7e0 [ 149.753622][ T7755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 149.753637][ T7755] ? exc_general_protection+0x1bc/0x230 [ 149.753656][ T7755] irqentry_exit_to_user_mode+0x13f/0x280 [ 149.753670][ T7755] asm_exc_general_protection+0x26/0x30 [ 149.753685][ T7755] RIP: 0033:0x7f9539b65e38 [ 149.753694][ T7755] Code: 1f 84 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 89 f8 62 a1 fd 00 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 38 01 00 00 <62> f3 7d 20 3f 07 00 c5 fb 93 c0 85 c0 74 59 f3 0f bc c0 c3 0f 1f [ 149.753703][ T7755] RSP: 002b:00007f953a9c27c8 EFLAGS: 00010283 [ 149.753717][ T7755] RAX: 0000000000000999 RBX: 00007f953a9c2d30 RCX: 00007f9539d6d120 [ 149.753723][ T7755] RDX: 00007f953a9c2ee8 RSI: 00007f9539c0dfac RDI: 9999999999999999 [ 149.753729][ T7755] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 149.753734][ T7755] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 149.753740][ T7755] R13: 00007f953a9c2eb0 R14: 9999999999999999 R15: 0000000000000000 [ 149.753752][ T7755] [ 149.942463][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.510602][ T52] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 150.526491][ T30] audit: type=1400 audit(1742232615.891:586): avc: denied { nlmsg_write } for pid=7756 comm="syz.5.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 150.765550][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.789603][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 150.799282][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.877479][ T52] usb 1-1: config 0 descriptor?? [ 151.410681][ T52] lg-g15 0003:046D:C222.000F: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 151.504999][ T7772] ALSA: seq fatal error: cannot create timer (-22) [ 151.540323][ T7758] xt_hashlimit: size too large, truncated to 1048576 [ 151.637832][ T30] audit: type=1400 audit(1742232617.001:587): avc: denied { accept } for pid=7774 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.761853][ T30] audit: type=1400 audit(1742232617.131:588): avc: denied { write } for pid=7782 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.782056][ T7783] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.788932][ T7783] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.817705][ T7786] syz.4.399: attempt to access beyond end of device [ 151.817705][ T7786] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.830588][ T7786] exFAT-fs (nbd4): unable to read boot sector [ 151.836634][ T7786] exFAT-fs (nbd4): failed to read boot sector [ 151.842883][ T7786] exFAT-fs (nbd4): failed to recognize exfat type [ 151.898642][ T26] usb 1-1: USB disconnect, device number 14 [ 151.971008][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 152.047151][ T30] audit: type=1400 audit(1742232617.411:589): avc: denied { map } for pid=7788 comm="syz.3.402" path="socket:[16381]" dev="sockfs" ino=16381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 152.262526][ T30] audit: type=1400 audit(1742232617.621:590): avc: denied { listen } for pid=7788 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.282275][ T30] audit: type=1400 audit(1742232617.621:591): avc: denied { accept } for pid=7788 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.301547][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.344757][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.355112][ T5868] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 152.365964][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.377041][ T5868] usb 6-1: config 0 descriptor?? [ 152.392388][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 152.798098][ T30] audit: type=1400 audit(1742232618.161:592): avc: denied { write } for pid=7798 comm="syz.1.403" path="socket:[17432]" dev="sockfs" ino=17432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.821695][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.916603][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 152.956707][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 152.975924][ T30] audit: type=1107 audit(1742232618.341:593): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 152.996800][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 153.537652][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 153.557159][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 153.780854][ T5867] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 154.828630][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.868400][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 154.923399][ T7814] syz.1.410: attempt to access beyond end of device [ 154.923399][ T7814] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 154.942274][ T7814] syz.1.410: attempt to access beyond end of device [ 154.942274][ T7814] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 154.956928][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 154.967346][ T7814] syz.1.410: attempt to access beyond end of device [ 154.967346][ T7814] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 154.990781][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 155.007243][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.021679][ T7814] syz.1.410: attempt to access beyond end of device [ 155.021679][ T7814] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 155.044536][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.055925][ T7814] syz.1.410: attempt to access beyond end of device [ 155.055925][ T7814] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 155.080548][ T5867] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 155.099395][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 155.109411][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.487058][ T7814] syz.1.410: attempt to access beyond end of device [ 155.487058][ T7814] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 155.523697][ T30] audit: type=1400 audit(1742232620.661:594): avc: denied { create } for pid=7816 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.571283][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 155.574565][ T30] audit: type=1400 audit(1742232620.661:595): avc: denied { listen } for pid=7816 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.582722][ T5867] usb 4-1: config 0 descriptor?? [ 155.600452][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.605944][ T30] audit: type=1400 audit(1742232620.671:596): avc: denied { checkpoint_restore } for pid=7816 comm="syz.4.411" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.633320][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.644052][ T30] audit: type=1400 audit(1742232620.671:597): avc: denied { write } for pid=7816 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.672029][ T30] audit: type=1400 audit(1742232620.671:598): avc: denied { nlmsg_read } for pid=7816 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.684148][ T5868] pwc: recv_control_msg error -71 req 02 val 2100 [ 155.699164][ T7814] syz.1.410: attempt to access beyond end of device [ 155.699164][ T7814] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 155.713732][ T7814] syz.1.410: attempt to access beyond end of device [ 155.713732][ T7814] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 155.727041][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 155.750098][ T7814] syz.1.410: attempt to access beyond end of device [ 155.750098][ T7814] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 155.776478][ T5868] pwc: recv_control_msg error -71 req 04 val 1500 [ 155.815660][ T5868] pwc: recv_control_msg error -71 req 02 val 2500 [ 155.855361][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 155.880588][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 155.909477][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 155.940580][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 155.954636][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 155.964479][ T7814] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 155.974098][ T7814] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 155.991202][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.017670][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.075656][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 156.206018][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.241672][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 156.496868][ T5868] pwc: Registered as video103. [ 156.532432][ T5867] usb 4-1: USB disconnect, device number 15 [ 156.550051][ T30] audit: type=1400 audit(1742232621.911:599): avc: denied { mount } for pid=7829 comm="syz.3.417" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 156.551386][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 156.666242][ T30] audit: type=1400 audit(1742232622.001:600): avc: denied { ioctl } for pid=7829 comm="syz.3.417" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.695812][ T30] audit: type=1400 audit(1742232622.001:601): avc: denied { map } for pid=7829 comm="syz.3.417" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.719108][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.746920][ T7835] FAULT_INJECTION: forcing a failure. [ 156.746920][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 156.753205][ T5868] usb 6-1: USB disconnect, device number 10 [ 156.844621][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.5.418 Not tainted 6.14.0-rc7-syzkaller #0 [ 156.844644][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.844653][ T7835] Call Trace: [ 156.844658][ T7835] [ 156.844665][ T7835] dump_stack_lvl+0x16c/0x1f0 [ 156.844699][ T7835] should_fail_ex+0x50a/0x650 [ 156.844724][ T7835] ? fs_reclaim_acquire+0xae/0x150 [ 156.844748][ T7835] ? tomoyo_realpath_from_path+0xb9/0x720 [ 156.844771][ T7835] should_failslab+0xc2/0x120 [ 156.844789][ T7835] __kmalloc_noprof+0xcb/0x510 [ 156.844805][ T7835] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 156.844832][ T7835] tomoyo_realpath_from_path+0xb9/0x720 [ 156.844854][ T7835] ? tomoyo_path_number_perm+0x235/0x590 [ 156.844875][ T7835] ? tomoyo_path_number_perm+0x235/0x590 [ 156.844899][ T7835] tomoyo_path_number_perm+0x248/0x590 [ 156.844918][ T7835] ? tomoyo_path_number_perm+0x235/0x590 [ 156.844941][ T7835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.844983][ T7835] ? __pfx_lock_release+0x10/0x10 [ 156.845003][ T7835] ? trace_lock_acquire+0x14e/0x1f0 [ 156.845023][ T7835] ? lock_acquire+0x2f/0xb0 [ 156.845042][ T7835] ? __fget_files+0x40/0x3a0 [ 156.845061][ T7835] ? __fget_files+0x206/0x3a0 [ 156.845080][ T7835] security_file_ioctl+0x9b/0x240 [ 156.845103][ T7835] __x64_sys_ioctl+0xb7/0x200 [ 156.845127][ T7835] do_syscall_64+0xcd/0x250 [ 156.845152][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.845174][ T7835] RIP: 0033:0x7fb26598d169 [ 156.845188][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.845204][ T7835] RSP: 002b:00007fb2667e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.845221][ T7835] RAX: ffffffffffffffda RBX: 00007fb265ba5fa0 RCX: 00007fb26598d169 [ 156.845232][ T7835] RDX: 0000400000000140 RSI: 00000000c040564a RDI: 0000000000000003 [ 156.845242][ T7835] RBP: 00007fb2667e6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.845252][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.845261][ T7835] R13: 0000000000000000 R14: 00007fb265ba5fa0 R15: 00007ffd698be158 [ 156.845284][ T7835] [ 156.845495][ T7835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.445302][ T30] audit: type=1400 audit(1742232622.801:602): avc: denied { connect } for pid=7840 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.087510][ T7862] openvswitch: netlink: Key type 30 is not supported [ 158.257247][ T30] audit: type=1400 audit(1742232623.621:603): avc: denied { getopt } for pid=7866 comm="syz.0.429" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.294523][ T7868] veth0_vlan: entered allmulticast mode [ 158.309434][ T7868] veth0_vlan: left promiscuous mode [ 158.315576][ T7868] veth0_vlan: entered promiscuous mode [ 159.593916][ T7909] openvswitch: netlink: Key type 30 is not supported [ 159.833080][ T7919] xt_ecn: cannot match TCP bits for non-tcp packets [ 160.211102][ T5867] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 160.486620][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.503213][ T5867] usb 4-1: not running at top speed; connect to a high speed hub [ 160.531334][ T5867] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 160.542667][ T5867] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.563996][ T5867] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.700818][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.750615][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 160.750632][ T30] audit: type=1400 audit(1742232626.111:609): avc: denied { ioctl } for pid=7925 comm="syz.5.449" path="socket:[17814]" dev="sockfs" ino=17814 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.810126][ T7928] FAULT_INJECTION: forcing a failure. [ 160.810126][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 160.832585][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.870532][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.888869][ T5867] usb 4-1: Product: syz [ 160.894401][ T5867] usb 4-1: Manufacturer: syz [ 160.899111][ T5867] usb 4-1: SerialNumber: syz [ 160.908534][ T7928] CPU: 1 UID: 0 PID: 7928 Comm: syz.4.450 Not tainted 6.14.0-rc7-syzkaller #0 [ 160.908565][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.908575][ T7928] Call Trace: [ 160.908580][ T7928] [ 160.908586][ T7928] dump_stack_lvl+0x16c/0x1f0 [ 160.908613][ T7928] should_fail_ex+0x50a/0x650 [ 160.908638][ T7928] ? fs_reclaim_acquire+0xae/0x150 [ 160.908663][ T7928] should_failslab+0xc2/0x120 [ 160.908683][ T7928] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 160.908699][ T7928] ? __pfx_map_id_range_down+0x10/0x10 [ 160.908725][ T7928] ? prepare_creds+0x2e/0x750 [ 160.908746][ T7928] ? lock_acquire+0x2f/0xb0 [ 160.908770][ T7928] prepare_creds+0x2e/0x750 [ 160.908791][ T7928] __sys_setuid+0x9a/0x440 [ 160.908814][ T7928] do_syscall_64+0xcd/0x250 [ 160.908837][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.908858][ T7928] RIP: 0033:0x7f611ad8d169 [ 160.908871][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.908887][ T7928] RSP: 002b:00007f611bc1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 160.908904][ T7928] RAX: ffffffffffffffda RBX: 00007f611afa5fa0 RCX: 00007f611ad8d169 [ 160.908916][ T7928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 160.908925][ T7928] RBP: 00007f611bc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.908934][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.908943][ T7928] R13: 0000000000000000 R14: 00007f611afa5fa0 R15: 00007ffdaa8f1e68 [ 160.908964][ T7928] [ 160.914103][ T7919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.393388][ T30] audit: type=1107 audit(1742232626.761:610): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 161.431510][ T5867] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 161.477271][ T117] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 161.685030][ T5867] usb 4-1: USB disconnect, device number 16 [ 161.690902][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.799035][ T117] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 161.809063][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.830854][ T117] usb 1-1: config 0 descriptor?? [ 161.938880][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.5.454'. [ 162.373969][ T117] lg-g15 0003:046D:C222.0010: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 162.446296][ T30] audit: type=1400 audit(1742232627.811:611): avc: denied { read } for pid=7946 comm="syz.3.458" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 162.469688][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.542839][ T7935] xt_hashlimit: size too large, truncated to 1048576 [ 162.611433][ T30] audit: type=1400 audit(1742232627.811:612): avc: denied { open } for pid=7946 comm="syz.3.458" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 162.635180][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.736589][ T30] audit: type=1400 audit(1742232628.101:613): avc: denied { setattr } for pid=7954 comm="syz.5.460" path="/dev/mixer" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 162.899923][ T5867] usb 1-1: USB disconnect, device number 15 [ 163.310598][ T117] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 163.983885][ T117] usb 5-1: Using ep0 maxpacket: 32 [ 163.993092][ T117] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 132, changing to 11 [ 164.008028][ T117] usb 5-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.059061][ T117] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.069524][ T117] usb 5-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.00 [ 164.102166][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.310454][ T117] usb 5-1: config 0 descriptor?? [ 164.815617][ T30] audit: type=1400 audit(1742232630.181:614): avc: denied { name_bind } for pid=7967 comm="syz.4.463" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 164.927305][ T30] audit: type=1400 audit(1742232630.291:615): avc: denied { wake_alarm } for pid=7990 comm="syz.5.470" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.020688][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 165.083887][ T117] usbhid 5-1:0.0: can't add hid device: -71 [ 165.094329][ T117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.135323][ T117] usb 5-1: USB disconnect, device number 19 [ 165.307584][ T26] usb 1-1: no configurations [ 165.307602][ T26] usb 1-1: can't read configurations, error -22 [ 165.981358][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.132748][ T26] usb 1-1: no configurations [ 166.137363][ T26] usb 1-1: can't read configurations, error -22 [ 166.176805][ T26] usb usb1-port1: attempt power cycle [ 166.420634][ T30] audit: type=1400 audit(1742232631.681:616): avc: denied { setopt } for pid=7999 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 166.630654][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 166.679605][ T26] usb 1-1: no configurations [ 166.816621][ T26] usb 1-1: can't read configurations, error -22 [ 167.505923][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 167.533586][ T8004] ALSA: mixer_oss: invalid OSS volume '' [ 167.769384][ T26] usb 1-1: device not accepting address 19, error -71 [ 168.650132][ T30] audit: type=1400 audit(1742232633.261:617): avc: denied { name_bind 0x1000000 } for pid=8010 comm="syz.0.476" path="socket:[18048]" dev="sockfs" ino=18048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 168.739192][ T26] usb usb1-port1: unable to enumerate USB device [ 169.016951][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 169.910095][ T30] audit: type=1400 audit(1742232635.271:618): avc: denied { read write } for pid=8036 comm="syz.0.485" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.034685][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 170.074086][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 170.091201][ T30] audit: type=1400 audit(1742232635.391:619): avc: denied { open } for pid=8036 comm="syz.0.485" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.097703][ T8043] FAULT_INJECTION: forcing a failure. [ 170.097703][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 170.140303][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 170.176391][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.4.486 Not tainted 6.14.0-rc7-syzkaller #0 [ 170.176416][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.176424][ T8043] Call Trace: [ 170.176428][ T8043] [ 170.176433][ T8043] dump_stack_lvl+0x16c/0x1f0 [ 170.176458][ T8043] should_fail_ex+0x50a/0x650 [ 170.176482][ T8043] ? find_held_lock+0x2d/0x110 [ 170.176502][ T8043] should_failslab+0xc2/0x120 [ 170.176520][ T8043] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 170.176538][ T8043] ? dst_alloc+0x99/0x1a0 [ 170.176559][ T8043] dst_alloc+0x99/0x1a0 [ 170.176575][ T8043] rt_dst_alloc+0x35/0x3a0 [ 170.176590][ T8043] ip_route_output_key_hash_rcu+0x88d/0x2930 [ 170.176605][ T8043] ip_route_output_key_hash+0x138/0x2e0 [ 170.176616][ T8043] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 170.176629][ T8043] ? __call_rcu_common.constprop.0+0x3ea/0x870 [ 170.176645][ T8043] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.176660][ T8043] ip_route_output_flow+0x27/0x150 [ 170.176671][ T8043] tcp_v4_connect+0x85b/0x1b80 [ 170.176696][ T8043] ? __pfx_tcp_v4_connect+0x10/0x10 [ 170.176712][ T8043] ? __pfx_mark_lock+0x10/0x10 [ 170.176728][ T8043] __inet_stream_connect+0x3c7/0x1020 [ 170.176744][ T8043] ? find_held_lock+0x2d/0x110 [ 170.176757][ T8043] ? __pfx___inet_stream_connect+0x10/0x10 [ 170.176772][ T8043] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 170.176782][ T8043] ? __pfx_inet_stream_connect+0x10/0x10 [ 170.176797][ T8043] ? mark_held_locks+0x9f/0xe0 [ 170.176812][ T8043] ? __local_bh_enable_ip+0xa4/0x120 [ 170.176829][ T8043] ? __pfx_inet_stream_connect+0x10/0x10 [ 170.176843][ T8043] inet_stream_connect+0x57/0xa0 [ 170.176859][ T8043] __sys_connect_file+0x13e/0x1a0 [ 170.176874][ T8043] __sys_connect+0x14f/0x170 [ 170.176886][ T8043] ? __pfx___sys_connect+0x10/0x10 [ 170.176904][ T8043] ? __might_fault+0xe3/0x190 [ 170.176919][ T8043] __x64_sys_connect+0x72/0xb0 [ 170.176932][ T8043] do_syscall_64+0xcd/0x250 [ 170.176947][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.176961][ T8043] RIP: 0033:0x7f611ad8d169 [ 170.176970][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.176979][ T8043] RSP: 002b:00007f611bc1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.176989][ T8043] RAX: ffffffffffffffda RBX: 00007f611afa5fa0 RCX: 00007f611ad8d169 [ 170.176995][ T8043] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000003 [ 170.177001][ T8043] RBP: 00007f611bc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.177006][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.177012][ T8043] R13: 0000000000000000 R14: 00007f611afa5fa0 R15: 00007ffdaa8f1e68 [ 170.177024][ T8043] [ 170.925445][ T30] audit: type=1400 audit(1742232636.291:620): avc: denied { getopt } for pid=8046 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.259249][ T30] audit: type=1400 audit(1742232636.291:621): avc: denied { create } for pid=8046 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.280934][ T30] audit: type=1400 audit(1742232636.291:622): avc: denied { setopt } for pid=8046 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.484030][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 171.516742][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 171.553368][ T8063] overlayfs: missing 'lowerdir' [ 172.562928][ T8076] 9pnet_fd: p9_fd_create_tcp (8076): problem connecting socket to 127.0.0.1 [ 172.600823][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 172.635572][ T8086] x_tables: duplicate underflow at hook 1 [ 172.641801][ T8087] x_tables: duplicate underflow at hook 1 [ 172.649925][ T30] audit: type=1400 audit(1742232638.011:623): avc: denied { ioctl } for pid=8084 comm="syz.3.498" path="socket:[18637]" dev="sockfs" ino=18637 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.684498][ T8085] input: syz1 as /devices/virtual/input/input11 [ 172.777984][ T8089] openvswitch: netlink: Key type 30 is not supported [ 172.793683][ T5822] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 172.806031][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.826240][ T5822] usb 6-1: config 0 descriptor?? [ 173.301196][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.501'. [ 173.753586][ T5822] kaweth 6-1:0.0: Firmware present in device. [ 173.773395][ T5822] kaweth 6-1:0.0: Statistics collection: 0 [ 173.779432][ T5822] kaweth 6-1:0.0: Multicast filter limit: 0 [ 174.170615][ T5822] kaweth 6-1:0.0: MTU: 0 [ 174.174950][ T5822] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 174.647372][ T117] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 174.660697][ T30] audit: type=1107 audit(1742232639.691:624): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 174.694763][ T5822] kaweth 6-1:0.0: kaweth interface created at eth5 [ 174.731417][ T30] audit: type=1400 audit(1742232640.101:625): avc: denied { setopt } for pid=8110 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.756911][ T8111] sp0: Synchronizing with TNC [ 174.806153][ T8113] input: syz0 as /devices/virtual/input/input12 [ 174.861626][ T30] audit: type=1400 audit(1742232640.151:626): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 174.895995][ T117] usb 1-1: no configurations [ 174.938244][ T117] usb 1-1: can't read configurations, error -22 [ 175.004590][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.043741][ T30] audit: type=1400 audit(1742232640.261:627): avc: denied { nlmsg_write } for pid=8110 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.058485][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.096317][ T8114] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[8114] [ 175.100712][ T30] audit: type=1400 audit(1742232640.401:628): avc: denied { write } for pid=8112 comm="syz.1.507" path="socket:[18783]" dev="sockfs" ino=18783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.229194][ T117] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 175.344041][ T30] audit: type=1400 audit(1742232640.711:629): avc: denied { open } for pid=8079 comm="syz.5.497" path="/dev/ttyqe" dev="devtmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 175.402000][ T5822] usb 6-1: USB disconnect, device number 11 [ 175.491121][ T117] usb 1-1: no configurations [ 175.495877][ T117] usb 1-1: can't read configurations, error -22 [ 175.519454][ T117] usb usb1-port1: attempt power cycle [ 175.876706][ T5916] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 175.890709][ T117] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 176.014825][ T117] usb 1-1: no configurations [ 176.019546][ T117] usb 1-1: can't read configurations, error -22 [ 176.130827][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.143569][ T30] audit: type=1400 audit(1742232641.501:630): avc: denied { compute_member } for pid=8131 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.199278][ T117] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 176.238495][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.303569][ T5916] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 176.471922][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.483077][ T5916] usb 5-1: config 0 descriptor?? [ 176.571511][ T117] usb 1-1: device descriptor read/8, error -71 [ 176.768277][ T117] usb usb1-port1: unable to enumerate USB device [ 176.983634][ T8152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.406979][ T26] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 177.416558][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.420732][ T26] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 177.453574][ T5916] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 177.467134][ T5916] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 177.537821][ T5916] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 177.551093][ T5916] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 177.558545][ T5916] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 177.618092][ T5916] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 177.731287][ T5916] playstation 0003:054C:0DF2.0011: Invalid byte count transferred, expected 20 got 0 [ 177.895281][ T5916] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 177.905604][ T5916] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 178.360372][ T5916] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 178.380315][ T5916] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 178.524237][ T30] audit: type=1400 audit(1742232643.801:631): avc: denied { execute_no_trans } for pid=8169 comm="syz.1.516" path="/101/file0" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.559691][ T30] audit: type=1400 audit(1742232643.891:632): avc: denied { mount } for pid=8177 comm="syz.0.518" name="/" dev="ramfs" ino=18917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.673529][ T30] audit: type=1107 audit(1742232644.011:633): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 178.849821][ T30] audit: type=1400 audit(1742232644.211:634): avc: denied { read write } for pid=8190 comm="syz.0.521" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 178.906121][ T30] audit: type=1400 audit(1742232644.251:635): avc: denied { open } for pid=8190 comm="syz.0.521" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.011086][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 179.076432][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 179.660613][ T26] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 179.666998][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.674476][ T26] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 179.859936][ T30] audit: type=1400 audit(1742232645.221:636): avc: denied { create } for pid=8202 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.885130][ T30] audit: type=1400 audit(1742232645.251:637): avc: denied { read } for pid=8202 comm="syz.1.524" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.907990][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.915048][ T30] audit: type=1400 audit(1742232645.251:638): avc: denied { open } for pid=8202 comm="syz.1.524" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 180.702268][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 181.744723][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.820803][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 183.826902][ T26] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 183.833031][ T26] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 185.911708][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 185.917848][ T26] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 185.924109][ T26] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 186.356755][ T26] usb 5-1: USB disconnect, device number 20 [ 186.582570][ T8214] mmap: syz.5.527 (8214) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.864835][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 187.247546][ T8236] fuse: Bad value for 'fd' [ 187.680706][ T52] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 187.730861][ T30] audit: type=1107 audit(1742232653.021:639): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 187.872101][ T52] usb 1-1: no configurations [ 187.908515][ T52] usb 1-1: can't read configurations, error -22 [ 188.075471][ T52] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 188.287264][ T8247] kvm: kvm [8244]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 188.875904][ T52] usb 1-1: no configurations [ 188.899953][ T52] usb 1-1: can't read configurations, error -22 [ 188.959343][ T52] usb usb1-port1: attempt power cycle [ 188.978619][ T8247] kvm: kvm [8244]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 189.440736][ T52] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 189.499273][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'. [ 189.901494][ T52] usb 1-1: no configurations [ 189.908288][ T52] usb 1-1: can't read configurations, error -22 [ 190.177881][ T30] audit: type=1400 audit(1742232655.541:640): avc: denied { listen } for pid=8275 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.250297][ T8278] ufs: You didn't specify the type of your ufs filesystem [ 190.250297][ T8278] [ 190.250297][ T8278] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 190.250297][ T8278] [ 190.250297][ T8278] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 190.288821][ T8278] ufs: ufstype=old is supported read-only [ 190.291798][ T30] audit: type=1400 audit(1742232655.541:641): avc: denied { accept } for pid=8275 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.300724][ T8278] bio_check_eod: 3 callbacks suppressed [ 190.300744][ T8278] syz.4.547: attempt to access beyond end of device [ 190.300744][ T8278] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 190.324269][ T30] audit: type=1400 audit(1742232655.611:642): avc: denied { cmd } for pid=8271 comm="syz.5.543" path="socket:[19171]" dev="sockfs" ino=19171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.355546][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.531771][ T6999] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.725966][ T6999] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 190.787200][ T6999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.991580][ T6999] usb 2-1: config 0 descriptor?? [ 191.222377][ T30] audit: type=1107 audit(1742232656.501:643): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 191.711646][ T6999] usb 2-1: Cannot read MAC address [ 191.719679][ T6999] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 191.789938][ T6999] usb 2-1: USB disconnect, device number 16 [ 192.011597][ T52] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 192.215747][ T52] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=51.38 [ 192.260352][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.339327][ T8307] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 192.362823][ T52] usb 5-1: Product: syz [ 192.381068][ T52] usb 5-1: Manufacturer: syz [ 192.395603][ T52] usb 5-1: SerialNumber: syz [ 192.412507][ T52] usb 5-1: config 0 descriptor?? [ 192.436633][ T52] gl620a 5-1:0.0: probe with driver gl620a failed with error -22 [ 192.500754][ T30] audit: type=1400 audit(1742232657.841:644): avc: denied { read } for pid=8309 comm="syz.1.557" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.600571][ T30] audit: type=1400 audit(1742232657.841:645): avc: denied { open } for pid=8309 comm="syz.1.557" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.712151][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 192.742692][ T30] audit: type=1400 audit(1742232657.851:646): avc: denied { ioctl } for pid=8309 comm="syz.1.557" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.864092][ T30] audit: type=1400 audit(1742232658.181:647): avc: denied { write } for pid=8312 comm="syz.0.558" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.020366][ T30] audit: type=1400 audit(1742232658.381:648): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 193.418037][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.5.560'. [ 193.984571][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.991232][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461108][ T5867] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 194.590624][ T52] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 194.644697][ T5867] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.674043][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.696248][ T5867] usb 6-1: config 0 descriptor?? [ 194.717863][ T5867] cp210x 6-1:0.0: cp210x converter detected [ 194.752068][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.776107][ T5868] usb 5-1: USB disconnect, device number 21 [ 194.795495][ T52] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 195.001043][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.051018][ T8345] netdevsim netdevsim1: Direct firmware load for . [ 195.051018][ T8345] failed with error -2 [ 195.062906][ T8345] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 195.062906][ T8345] [ 195.116030][ T30] audit: type=1400 audit(1742232660.401:649): avc: denied { ioctl } for pid=8341 comm="syz.1.569" path="socket:[19363]" dev="sockfs" ino=19363 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.116208][ T5822] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 195.141215][ T52] usb 4-1: config 0 descriptor?? [ 195.405411][ T5867] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 195.441373][ T30] audit: type=1400 audit(1742232660.541:650): avc: denied { write } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.565863][ T8343] afs: Unknown parameter 'cyn' [ 195.590597][ T30] audit: type=1400 audit(1742232660.541:651): avc: denied { remove_name } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.731170][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.739781][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.779395][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.793904][ T30] audit: type=1400 audit(1742232660.541:652): avc: denied { rename } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.810534][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.897580][ T30] audit: type=1400 audit(1742232660.541:653): avc: denied { add_name } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.925232][ T5822] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.966312][ T5867] usb 6-1: cp210x converter now attached to ttyUSB0 [ 195.976525][ T52] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 195.981036][ T5822] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 196.035378][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.040591][ T30] audit: type=1400 audit(1742232660.541:654): avc: denied { unlink } for pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.066617][ T5822] hub 1-1:1.0: bad descriptor, ignoring hub [ 196.077317][ T8352] netlink: 96 bytes leftover after parsing attributes in process `syz.1.571'. [ 196.101286][ T5822] hub 1-1:1.0: probe with driver hub failed with error -5 [ 196.103964][ T30] audit: type=1400 audit(1742232660.711:655): avc: denied { create } for pid=5174 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.108747][ T5822] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 196.204610][ T8333] xt_hashlimit: size too large, truncated to 1048576 [ 196.370578][ T52] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 196.508477][ T5822] usb 4-1: USB disconnect, device number 17 [ 196.525659][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.538609][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.575975][ T52] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.589786][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.608907][ T52] usb 2-1: config 0 descriptor?? [ 196.700895][ T5867] usb 1-1: USB disconnect, device number 28 [ 197.102589][ T52] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 197.137226][ T52] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 197.268249][ T52] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 197.576553][ T6999] usb 6-1: USB disconnect, device number 12 [ 197.593272][ T6999] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.662579][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.763930][ T5916] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 197.839523][ T6999] cp210x 6-1:0.0: device disconnected [ 197.920602][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 197.942671][ T26] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 197.971331][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.008101][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.019839][ T52] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 198.038263][ T26] usb 4-1: config 0 descriptor?? [ 198.043787][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.081437][ T52] usb 2-1: USB disconnect, device number 17 [ 198.156175][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.262355][ T5916] usb 5-1: config 0 descriptor?? [ 198.446645][ T26] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 198.460445][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 198.549147][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.577028][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.767169][ T8387] usb usb8: usbfs: process 8387 (syz.0.581) did not claim interface 0 before use [ 198.807434][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 198.816048][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 198.827856][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 198.833482][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 198.833497][ T30] audit: type=1400 audit(1742232664.201:659): avc: denied { read } for pid=8388 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.848101][ T8389] bridge0: port 3(hsr_slave_1) entered blocking state [ 198.869469][ T8389] bridge0: port 3(hsr_slave_1) entered disabled state [ 198.869749][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 198.877029][ T8389] hsr_slave_1: entered allmulticast mode [ 198.882984][ T8379] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 198.893617][ T8389] hsr_slave_1: left allmulticast mode [ 198.902400][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 198.909802][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 198.917097][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.926055][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.937111][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 198.945013][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 198.952275][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 198.959227][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 198.966877][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 199.041860][ T8379] usb 6-1: no configurations [ 199.047669][ T8379] usb 6-1: can't read configurations, error -22 [ 199.217134][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 199.226813][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 199.233674][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 199.240353][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 199.248536][ T5916] pwc: Registered as video103. [ 199.254564][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 199.434619][ T8368] 9pnet: p9_errstr2errno: server reported unknown error @L O [ 199.847585][ T26] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.857799][ T8379] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 199.958411][ T26] asix 4-1:0.0: probe with driver asix failed with error -71 [ 199.982953][ T5916] usb 5-1: USB disconnect, device number 22 [ 200.134148][ T26] usb 4-1: USB disconnect, device number 18 [ 200.235303][ T8409] overlayfs: missing 'lowerdir' [ 200.731681][ T8379] usb 6-1: no configurations [ 200.754765][ T8379] usb 6-1: can't read configurations, error -22 [ 200.777010][ T8379] usb usb6-port1: attempt power cycle [ 201.150559][ T30] audit: type=1400 audit(1742232666.511:660): avc: denied { name_connect } for pid=8413 comm="syz.0.588" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 201.172473][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.244596][ T30] audit: type=1400 audit(1742232666.611:661): avc: denied { read } for pid=8413 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.480697][ T26] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.102897][ T26] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 202.117056][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.206026][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.324027][ T30] audit: type=1400 audit(1742232667.661:662): avc: denied { sqpoll } for pid=8416 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.393112][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.423954][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.480947][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.532580][ T8432] netlink: 156 bytes leftover after parsing attributes in process `syz.5.594'. [ 202.545659][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.555637][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 202.576549][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 202.721688][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.945395][ T30] audit: type=1400 audit(1742232668.161:663): avc: denied { bind } for pid=8437 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.246700][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.278305][ T30] audit: type=1400 audit(1742232668.201:664): avc: denied { write } for pid=8437 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.285612][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.399762][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.414690][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.424968][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.447847][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.605714][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.619925][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.633617][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.641307][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.650638][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.662772][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.772425][ T8454] veth0_to_team: entered promiscuous mode [ 203.778220][ T8454] veth0_to_team: entered allmulticast mode [ 203.812415][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.903395][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.966514][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.014782][ T26] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.067059][ T26] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.078687][ T26] usb 4-1: Product: syz [ 204.096248][ T26] usb 4-1: Manufacturer: syz [ 204.104795][ T26] usb 4-1: SerialNumber: syz [ 204.111274][ T26] usb 4-1: config 0 descriptor?? [ 204.123526][ T26] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 204.256113][ T5867] usb 4-1: USB disconnect, device number 19 [ 204.296220][ T5867] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 204.961806][ T8458] kvm: kvm [8456]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 204.975769][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.601'. [ 204.985712][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 205.437289][ T8474] overlayfs: missing 'lowerdir' [ 205.574189][ T8475] autofs: Unknown parameter '0000000000000000000' [ 205.880170][ T5867] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 205.986436][ T8457] veth3: entered promiscuous mode [ 205.992820][ T8457] veth3: entered allmulticast mode [ 206.062743][ T5867] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 206.081041][ T5867] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 206.099431][ T5867] usb 4-1: config 8 has no interface number 0 [ 206.111794][ T5867] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 206.122744][ T5867] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.142424][ T5867] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 206.160900][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.169361][ T5867] usb 4-1: Product: syz [ 206.209775][ T5867] usb 4-1: Manufacturer: syz [ 206.240713][ T5867] usb 4-1: SerialNumber: syz [ 206.260911][ T30] audit: type=1400 audit(1742232671.621:665): avc: denied { create } for pid=8482 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.308547][ T30] audit: type=1400 audit(1742232671.661:666): avc: denied { ioctl } for pid=8482 comm="syz.0.608" path="socket:[20305]" dev="sockfs" ino=20305 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.341075][ T30] audit: type=1400 audit(1742232671.701:667): avc: denied { ioctl } for pid=8485 comm="syz.5.609" path="socket:[20860]" dev="sockfs" ino=20860 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.349242][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8486 comm=syz.5.609 [ 206.952043][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 206.979589][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.016232][ T8496] bridge_slave_1 (unregistering): left allmulticast mode [ 207.032280][ T8496] bridge_slave_1 (unregistering): left promiscuous mode [ 207.039469][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.095824][ T8503] kvm: apic: phys broadcast and lowest prio [ 207.139924][ T30] audit: type=1400 audit(1742232672.501:668): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.171088][ T5822] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 207.204323][ T8506] FAULT_INJECTION: forcing a failure. [ 207.204323][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 207.204350][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.4.615 Not tainted 6.14.0-rc7-syzkaller #0 [ 207.204366][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.204375][ T8506] Call Trace: [ 207.204380][ T8506] [ 207.204386][ T8506] dump_stack_lvl+0x16c/0x1f0 [ 207.204411][ T8506] should_fail_ex+0x50a/0x650 [ 207.204434][ T8506] ? fs_reclaim_acquire+0xae/0x150 [ 207.204458][ T8506] should_failslab+0xc2/0x120 [ 207.204475][ T8506] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 207.204497][ T8506] ? __alloc_skb+0x2b1/0x380 [ 207.204521][ T8506] __alloc_skb+0x2b1/0x380 [ 207.204541][ T8506] ? __pfx___alloc_skb+0x10/0x10 [ 207.204563][ T8506] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 207.204589][ T8506] netlink_alloc_large_skb+0x69/0x130 [ 207.204612][ T8506] netlink_sendmsg+0x689/0xd70 [ 207.204636][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.204664][ T8506] ____sys_sendmsg+0xaaf/0xc90 [ 207.204682][ T8506] ? copy_msghdr_from_user+0x10b/0x160 [ 207.204703][ T8506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.204727][ T8506] ___sys_sendmsg+0x135/0x1e0 [ 207.204749][ T8506] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.204781][ T8506] ? __pfx_lock_release+0x10/0x10 [ 207.204809][ T8506] ? trace_lock_acquire+0x14e/0x1f0 [ 207.204835][ T8506] ? __fget_files+0x206/0x3a0 [ 207.204856][ T8506] __sys_sendmsg+0x16e/0x220 [ 207.204878][ T8506] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.204913][ T8506] do_syscall_64+0xcd/0x250 [ 207.204936][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.204957][ T8506] RIP: 0033:0x7f611ad8d169 [ 207.204971][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.204986][ T8506] RSP: 002b:00007f611bc1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.205003][ T8506] RAX: ffffffffffffffda RBX: 00007f611afa5fa0 RCX: 00007f611ad8d169 [ 207.205014][ T8506] RDX: 0000000000000004 RSI: 0000400000000240 RDI: 0000000000000003 [ 207.205023][ T8506] RBP: 00007f611bc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 207.205033][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.205042][ T8506] R13: 0000000000000000 R14: 00007f611afa5fa0 R15: 00007ffdaa8f1e68 [ 207.205064][ T8506] [ 207.321814][ T30] audit: type=1400 audit(1742232672.691:669): avc: denied { accept } for pid=8510 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 207.360346][ T5822] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 207.371132][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.371158][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.371182][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.371861][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.371882][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.371896][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.372641][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.372691][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.372714][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.373453][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.373484][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.373551][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.374466][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.374502][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.374544][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.375327][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.375377][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.375401][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.376184][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.376233][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.376255][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.377034][ T5822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.377085][ T5822] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.377109][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.378658][ T5822] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 207.378681][ T5822] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.378721][ T5822] usb 6-1: Product: syz [ 207.378735][ T5822] usb 6-1: Manufacturer: syz [ 207.378749][ T5822] usb 6-1: SerialNumber: syz [ 207.381213][ T5822] usb 6-1: config 0 descriptor?? [ 207.387219][ T5822] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 207.541857][ T5867] usb 4-1: USB disconnect, device number 20 [ 208.183515][ T30] audit: type=1400 audit(1742232673.511:670): avc: denied { getopt } for pid=8513 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 208.189790][ T30] audit: type=1400 audit(1742232673.551:671): avc: denied { mount } for pid=8513 comm="syz.3.618" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.239500][ T30] audit: type=1400 audit(1742232673.601:672): avc: denied { unmount } for pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.507084][ T8503] tty tty21: ldisc open failed (-12), clearing slot 20 [ 208.529835][ T30] audit: type=1400 audit(1742232673.891:673): avc: denied { write } for pid=8525 comm="syz.3.621" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 208.567808][ T8507] tty tty20: ldisc open failed (-12), clearing slot 19 [ 209.362167][ T30] audit: type=1400 audit(1742232674.621:674): avc: denied { write } for pid=8529 comm="syz.4.624" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.718855][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 209.741975][ T26] usb 6-1: USB disconnect, device number 16 [ 209.844718][ T26] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 210.833804][ T8565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8565 comm=syz.1.631 [ 210.900602][ T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 211.070624][ T5868] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 211.151411][ T26] usb 1-1: no configurations [ 211.156125][ T26] usb 1-1: can't read configurations, error -22 [ 211.240875][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 211.249219][ T5868] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.258071][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.271266][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.292420][ T26] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 211.312813][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.340628][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.349336][ T5868] usb 4-1: Product: syz [ 211.359509][ T5868] usb 4-1: Manufacturer: syz [ 211.367277][ T5868] usb 4-1: SerialNumber: syz [ 211.371414][ T8379] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 211.463528][ T26] usb 1-1: no configurations [ 211.477517][ T26] usb 1-1: can't read configurations, error -22 [ 211.490446][ T26] usb usb1-port1: attempt power cycle [ 211.566949][ T8379] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.579081][ T8379] usb 5-1: config 0 has no interface number 0 [ 211.589367][ T8379] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 211.600944][ T8379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.648656][ T8379] usb 5-1: config 0 descriptor?? [ 211.683585][ T8379] usb 5-1: selecting invalid altsetting 1 [ 211.695881][ T8379] dvb_ttusb_budget: ttusb_init_controller: error [ 211.704488][ T8379] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 211.787070][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.808998][ T8379] DVB: Unable to find symbol cx22700_attach() [ 211.809195][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.847635][ T26] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 211.869865][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 211.869882][ T30] audit: type=1400 audit(1742232677.231:680): avc: denied { append } for pid=8572 comm="syz.4.635" name="i2c-1" dev="devtmpfs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.899653][ T8379] DVB: Unable to find symbol tda10046_attach() [ 211.908665][ T8379] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 211.921696][ T26] usb 1-1: no configurations [ 211.926320][ T26] usb 1-1: can't read configurations, error -22 [ 211.987998][ T30] audit: type=1400 audit(1742232677.231:681): avc: denied { block_suspend } for pid=8572 comm="syz.4.635" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.026210][ T5867] usb 5-1: USB disconnect, device number 23 [ 212.059103][ T30] audit: type=1400 audit(1742232677.291:682): avc: denied { ioctl } for pid=8572 comm="syz.4.635" path="socket:[21194]" dev="sockfs" ino=21194 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 212.073369][ T5868] usb 4-1: 0:2 : does not exist [ 212.083927][ T26] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 212.104400][ T26] usb 1-1: no configurations [ 212.109721][ T26] usb 1-1: can't read configurations, error -22 [ 212.126057][ T26] usb usb1-port1: unable to enumerate USB device [ 212.132677][ T30] audit: type=1400 audit(1742232677.471:683): avc: denied { write } for pid=8580 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.891228][ T8599] overlayfs: missing 'lowerdir' [ 214.476461][ T5868] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 214.584106][ T30] audit: type=1400 audit(1742232679.911:684): avc: denied { ioctl } for pid=8604 comm="syz.5.644" path="socket:[21309]" dev="sockfs" ino=21309 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.608802][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.637287][ T5868] usb 4-1: USB disconnect, device number 21 [ 215.490596][ T30] audit: type=1400 audit(1742232680.151:685): avc: denied { read } for pid=8602 comm="syz.4.643" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.633541][ T8621] bond1: entered promiscuous mode [ 215.638725][ T8621] bond1: entered allmulticast mode [ 215.644297][ T8621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.744437][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.757240][ T8631] FAULT_INJECTION: forcing a failure. [ 215.757240][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.781215][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.5.652 Not tainted 6.14.0-rc7-syzkaller #0 [ 215.781241][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.781252][ T8631] Call Trace: [ 215.781257][ T8631] [ 215.781263][ T8631] dump_stack_lvl+0x16c/0x1f0 [ 215.781291][ T8631] should_fail_ex+0x50a/0x650 [ 215.781320][ T8631] _copy_to_user+0x32/0xd0 [ 215.781339][ T8631] simple_read_from_buffer+0xd0/0x160 [ 215.781367][ T8631] proc_fail_nth_read+0x198/0x270 [ 215.781396][ T8631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.781421][ T8631] ? rw_verify_area+0xcf/0x680 [ 215.781444][ T8631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.781467][ T8631] vfs_read+0x1df/0xbf0 [ 215.781492][ T8631] ? __fget_files+0x1fc/0x3a0 [ 215.781509][ T8631] ? __pfx___mutex_lock+0x10/0x10 [ 215.781531][ T8631] ? __pfx_vfs_read+0x10/0x10 [ 215.781573][ T8631] ? __fget_files+0x206/0x3a0 [ 215.781593][ T8631] ksys_read+0x12b/0x250 [ 215.781617][ T8631] ? __pfx_ksys_read+0x10/0x10 [ 215.781648][ T8631] do_syscall_64+0xcd/0x250 [ 215.781668][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.781690][ T8631] RIP: 0033:0x7fb26598bb7c [ 215.781703][ T8631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.781718][ T8631] RSP: 002b:00007fb2667e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.781734][ T8631] RAX: ffffffffffffffda RBX: 00007fb265ba5fa0 RCX: 00007fb26598bb7c [ 215.781744][ T8631] RDX: 000000000000000f RSI: 00007fb2667e60a0 RDI: 0000000000000003 [ 215.781754][ T8631] RBP: 00007fb2667e6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.781764][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.781773][ T8631] R13: 0000000000000000 R14: 00007fb265ba5fa0 R15: 00007ffd698be158 [ 215.781795][ T8631] [ 215.973074][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.187253][ T6999] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 216.296658][ T8637] overlayfs: missing 'lowerdir' [ 217.243414][ T6999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.390899][ T6999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.405722][ T6999] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 217.415900][ T6999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.427565][ T6999] usb 5-1: config 0 descriptor?? [ 217.534737][ T30] audit: type=1400 audit(1742232682.901:686): avc: denied { setopt } for pid=8640 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.553957][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.577936][ T8641] block device autoloading is deprecated and will be removed. [ 217.681122][ T30] audit: type=1400 audit(1742232683.041:687): avc: denied { mount } for pid=8623 comm="syz.4.651" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 217.702860][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.868479][ T30] audit: type=1400 audit(1742232683.231:688): avc: denied { setopt } for pid=8654 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.937531][ T6999] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 217.940981][ T30] audit: type=1400 audit(1742232683.301:689): avc: denied { bind } for pid=8654 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.028463][ T6999] hid-steam 0003:28DE:1142.0014: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 218.111582][ T6999] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected [ 218.144349][ T6999] hid-steam 0003:28DE:1142.0014: No HID_FEATURE_REPORT submitted - nothing to read [ 218.206754][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.220163][ T6999] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 218.228019][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.392176][ T6999] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 218.501846][ T8669] netlink: 'syz.5.665': attribute type 13 has an invalid length. [ 218.519603][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.665'. [ 219.002205][ T6999] usb 5-1: USB disconnect, device number 24 [ 219.047844][ T6999] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected [ 219.550058][ T30] audit: type=1400 audit(1742232684.911:690): avc: denied { bind } for pid=8673 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.569219][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.603922][ T30] audit: type=1400 audit(1742232684.911:691): avc: denied { name_bind } for pid=8673 comm="syz.3.667" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 219.617506][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.669'. [ 219.626132][ T30] audit: type=1400 audit(1742232684.911:692): avc: denied { node_bind } for pid=8673 comm="syz.3.667" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 219.655915][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.741042][ T971] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 219.808156][ T8687] openvswitch: netlink: Key type 30 is not supported [ 219.849955][ T30] audit: type=1400 audit(1742232685.211:693): avc: denied { ioctl } for pid=8688 comm="syz.5.672" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.875800][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.909020][ T971] usb 2-1: device descriptor read/64, error -71 [ 220.210713][ T971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 220.387749][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'. [ 220.401402][ T971] usb 2-1: device descriptor read/64, error -71 [ 220.561933][ T971] usb usb2-port1: attempt power cycle [ 221.281617][ T8707] ALSA: mixer_oss: invalid OSS volume '' [ 221.291278][ T30] audit: type=1326 audit(1742232686.651:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.4.679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f611ad8d169 code=0x0 [ 221.293727][ T971] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 221.559261][ T30] audit: type=1400 audit(1742232686.921:695): avc: denied { read } for pid=8711 comm="syz.4.679" dev="sockfs" ino=21857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.671056][ T971] usb 2-1: device descriptor read/8, error -71 [ 221.674388][ T8718] overlayfs: failed to resolve './file0': -2 [ 221.870339][ T8718] ALSA: seq fatal error: cannot create timer (-22) [ 221.990748][ T971] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 222.021362][ T971] usb 2-1: device descriptor read/8, error -71 [ 222.152057][ T971] usb usb2-port1: unable to enumerate USB device [ 222.691065][ T971] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 223.732927][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 223.732941][ T30] audit: type=1400 audit(1742232689.101:700): avc: denied { bind } for pid=8743 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 223.744001][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 223.855903][ T971] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 223.865796][ T971] usb 1-1: config 0 has no interface number 0 [ 223.881209][ T971] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 2.cb [ 223.907550][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.925343][ T971] usb 1-1: Product: syz [ 223.935158][ T971] usb 1-1: Manufacturer: syz [ 223.949894][ T971] usb 1-1: SerialNumber: syz [ 223.965924][ T971] usb 1-1: config 0 descriptor?? [ 224.156471][ T8756] FAULT_INJECTION: forcing a failure. [ 224.156471][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.190613][ T8756] CPU: 0 UID: 0 PID: 8756 Comm: syz.5.693 Not tainted 6.14.0-rc7-syzkaller #0 [ 224.190636][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.190644][ T8756] Call Trace: [ 224.190648][ T8756] [ 224.190654][ T8756] dump_stack_lvl+0x16c/0x1f0 [ 224.190679][ T8756] should_fail_ex+0x50a/0x650 [ 224.190705][ T8756] _copy_from_user+0x2e/0xd0 [ 224.190725][ T8756] rfcomm_dev_ioctl+0x938/0x1ca0 [ 224.190748][ T8756] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 224.190765][ T8756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.190790][ T8756] rfcomm_sock_ioctl+0xaa/0xd0 [ 224.190807][ T8756] sock_do_ioctl+0x116/0x280 [ 224.190819][ T8756] ? __pfx_sock_do_ioctl+0x10/0x10 [ 224.190833][ T8756] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 224.190850][ T8756] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 224.190867][ T8756] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 224.190891][ T8756] sock_ioctl+0x228/0x6c0 [ 224.190903][ T8756] ? __pfx_sock_ioctl+0x10/0x10 [ 224.190921][ T8756] ? selinux_file_ioctl+0x180/0x270 [ 224.190939][ T8756] ? selinux_file_ioctl+0xb4/0x270 [ 224.190956][ T8756] ? __pfx_sock_ioctl+0x10/0x10 [ 224.190967][ T8756] __x64_sys_ioctl+0x190/0x200 [ 224.190983][ T8756] do_syscall_64+0xcd/0x250 [ 224.190998][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.191012][ T8756] RIP: 0033:0x7fb26598d169 [ 224.191021][ T8756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.191031][ T8756] RSP: 002b:00007fb2667e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.191041][ T8756] RAX: ffffffffffffffda RBX: 00007fb265ba5fa0 RCX: 00007fb26598d169 [ 224.191047][ T8756] RDX: 0000400000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 224.191053][ T8756] RBP: 00007fb2667e6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.191059][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.191064][ T8756] R13: 0000000000000000 R14: 00007fb265ba5fa0 R15: 00007ffd698be158 [ 224.191076][ T8756] [ 224.404273][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.513412][ T971] mdc800 1-1:0.202: probe fails -> wrong Interface [ 224.556645][ T971] usb 1-1: USB disconnect, device number 33 [ 225.632793][ T6999] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 225.790630][ T6999] usb 6-1: Using ep0 maxpacket: 8 [ 225.900352][ T6999] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 226.370914][ T8776] ALSA: mixer_oss: invalid OSS volume '' [ 226.892955][ T6999] usb 6-1: config 0 has no interface number 0 [ 226.902619][ T6999] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 2.cb [ 226.912373][ T30] audit: type=1800 audit(1742232692.161:701): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.705" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 226.940835][ T6999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.948993][ T6999] usb 6-1: Product: syz [ 227.237037][ T6999] usb 6-1: Manufacturer: syz [ 227.251413][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.1.706'. [ 227.260404][ T6999] usb 6-1: SerialNumber: syz [ 227.282855][ T6999] usb 6-1: config 0 descriptor?? [ 227.515315][ T6999] mdc800 6-1:0.202: probe fails -> wrong Interface [ 227.565098][ T6999] usb 6-1: USB disconnect, device number 17 [ 227.642243][ T30] audit: type=1400 audit(1742232693.011:702): avc: denied { getopt } for pid=8804 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.102618][ T30] audit: type=1400 audit(1742232693.471:703): avc: denied { setattr } for pid=8805 comm="syz.1.711" name="radio5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 229.238169][ T8824] ALSA: mixer_oss: invalid OSS volume '' [ 229.343930][ T8830] overlayfs: failed to verify upper (141/file0, ino=788, err=-116) [ 229.370838][ T8830] overlayfs: failed to verify index dir 'upper' xattr [ 229.391677][ T8830] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 229.420951][ T30] audit: type=1400 audit(1742232694.791:704): avc: denied { bind } for pid=8823 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.821343][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.080986][ T971] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.294784][ T8852] FAULT_INJECTION: forcing a failure. [ 230.294784][ T8852] name failslab, interval 1, probability 0, space 0, times 0 [ 230.308836][ T8852] CPU: 1 UID: 0 PID: 8852 Comm: syz.1.726 Not tainted 6.14.0-rc7-syzkaller #0 [ 230.308858][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.308868][ T8852] Call Trace: [ 230.308873][ T8852] [ 230.308879][ T8852] dump_stack_lvl+0x16c/0x1f0 [ 230.308905][ T8852] should_fail_ex+0x50a/0x650 [ 230.308930][ T8852] ? fs_reclaim_acquire+0xae/0x150 [ 230.308956][ T8852] should_failslab+0xc2/0x120 [ 230.308975][ T8852] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 230.308993][ T8852] ? __alloc_skb+0x2b1/0x380 [ 230.309019][ T8852] __alloc_skb+0x2b1/0x380 [ 230.309041][ T8852] ? __pfx___alloc_skb+0x10/0x10 [ 230.309066][ T8852] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 230.309093][ T8852] netlink_alloc_large_skb+0x69/0x130 [ 230.309117][ T8852] netlink_sendmsg+0x689/0xd70 [ 230.309143][ T8852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.309175][ T8852] ____sys_sendmsg+0xaaf/0xc90 [ 230.309193][ T8852] ? copy_msghdr_from_user+0x10b/0x160 [ 230.309216][ T8852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.309246][ T8852] ___sys_sendmsg+0x135/0x1e0 [ 230.309271][ T8852] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.309304][ T8852] ? __pfx_lock_release+0x10/0x10 [ 230.309326][ T8852] ? trace_lock_acquire+0x14e/0x1f0 [ 230.309352][ T8852] ? __fget_files+0x206/0x3a0 [ 230.309371][ T8852] __sys_sendmsg+0x16e/0x220 [ 230.309394][ T8852] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.309430][ T8852] do_syscall_64+0xcd/0x250 [ 230.309452][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.309475][ T8852] RIP: 0033:0x7f9539b8d169 [ 230.309488][ T8852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.309503][ T8852] RSP: 002b:00007f953a9c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.309519][ T8852] RAX: ffffffffffffffda RBX: 00007f9539da5fa0 RCX: 00007f9539b8d169 [ 230.309530][ T8852] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 230.309539][ T8852] RBP: 00007f953a9c3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.309547][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.309555][ T8852] R13: 0000000000000000 R14: 00007f9539da5fa0 R15: 00007fff926cb898 [ 230.309575][ T8852] [ 230.510780][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 230.572153][ T52] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 230.790573][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 230.803197][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.808171][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.822647][ T52] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 230.831299][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.865672][ T971] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 230.884725][ T52] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.893009][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.907644][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.918307][ T971] usb 4-1: config 0 descriptor?? [ 230.939765][ T52] usb 1-1: Product: syz [ 230.959679][ T52] usb 1-1: Manufacturer: syz [ 230.977177][ T52] usb 1-1: SerialNumber: syz [ 231.408188][ T971] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 232.040686][ T971] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 232.050366][ T971] waterforce 0003:1044:7A4D.0016: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 232.108127][ T8889] 9pnet_fd: Insufficient options for proto=fd [ 232.121963][ T971] waterforce 0003:1044:7A4D.0016: fw version request failed with -38 [ 232.598135][ T971] usb 4-1: USB disconnect, device number 22 [ 232.727211][ T30] audit: type=1400 audit(1742232698.091:705): avc: denied { create } for pid=8895 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 232.765763][ T30] audit: type=1400 audit(1742232698.131:706): avc: denied { sys_admin } for pid=8895 comm="syz.1.740" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 232.819648][ T30] audit: type=1400 audit(1742232698.181:707): avc: denied { bind } for pid=8895 comm="syz.1.740" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.819914][ T30] audit: type=1400 audit(1742232698.181:708): avc: denied { name_bind } for pid=8895 comm="syz.1.740" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 232.820098][ T30] audit: type=1400 audit(1742232698.181:709): avc: denied { node_bind } for pid=8895 comm="syz.1.740" saddr=2001::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 233.112084][ T52] cdc_ncm 1-1:1.0: bind() failure [ 233.139217][ T52] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 233.139373][ T52] cdc_ncm 1-1:1.1: bind() failure [ 233.182464][ T52] usb 1-1: USB disconnect, device number 34 [ 233.452636][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 233.649352][ T30] audit: type=1400 audit(1742232699.011:710): avc: denied { create } for pid=8916 comm="syz.5.746" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.669888][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.810393][ T30] audit: type=1400 audit(1742232699.011:711): avc: denied { mounton } for pid=8916 comm="syz.5.746" path="/120/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.910617][ T30] audit: type=1400 audit(1742232699.061:712): avc: denied { write } for pid=8916 comm="syz.5.746" name="file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.957840][ T8926] sp0: Synchronizing with TNC [ 233.993629][ T30] audit: type=1400 audit(1742232699.061:713): avc: denied { open } for pid=8916 comm="syz.5.746" path="/120/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 234.081581][ T8931] netlink: 'syz.4.749': attribute type 9 has an invalid length. [ 236.383546][ T30] audit: type=1400 audit(1742232701.261:714): avc: denied { read } for pid=8951 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 236.440272][ T30] audit: type=1400 audit(1742232701.361:715): avc: denied { bind } for pid=8951 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 236.512346][ T8951] delete_channel: no stack [ 236.710613][ T30] audit: type=1400 audit(1742232702.061:716): avc: denied { unlink } for pid=5821 comm="syz-executor" name="file0" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.814445][ T8970] FAULT_INJECTION: forcing a failure. [ 236.814445][ T8970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.900915][ T5822] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 236.913386][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.0.760 Not tainted 6.14.0-rc7-syzkaller #0 [ 236.913408][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.913417][ T8970] Call Trace: [ 236.913421][ T8970] [ 236.913427][ T8970] dump_stack_lvl+0x16c/0x1f0 [ 236.913453][ T8970] should_fail_ex+0x50a/0x650 [ 236.913483][ T8970] _copy_to_user+0x32/0xd0 [ 236.913502][ T8970] simple_read_from_buffer+0xd0/0x160 [ 236.913530][ T8970] proc_fail_nth_read+0x198/0x270 [ 236.913554][ T8970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.913578][ T8970] ? rw_verify_area+0xcf/0x680 [ 236.913601][ T8970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.913625][ T8970] vfs_read+0x1df/0xbf0 [ 236.913650][ T8970] ? __fget_files+0x1fc/0x3a0 [ 236.913666][ T8970] ? __pfx___mutex_lock+0x10/0x10 [ 236.913689][ T8970] ? __pfx_vfs_read+0x10/0x10 [ 236.913721][ T8970] ? __fget_files+0x206/0x3a0 [ 236.913746][ T8970] ksys_read+0x12b/0x250 [ 236.913770][ T8970] ? __pfx_ksys_read+0x10/0x10 [ 236.913810][ T8970] do_syscall_64+0xcd/0x250 [ 236.913834][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.913857][ T8970] RIP: 0033:0x7fa08ed8bb7c [ 236.913872][ T8970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.913887][ T8970] RSP: 002b:00007fa08fcbc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.913903][ T8970] RAX: ffffffffffffffda RBX: 00007fa08efa5fa0 RCX: 00007fa08ed8bb7c [ 236.913913][ T8970] RDX: 000000000000000f RSI: 00007fa08fcbc0a0 RDI: 0000000000000004 [ 236.913923][ T8970] RBP: 00007fa08fcbc090 R08: 0000000000000000 R09: 0000000000000000 [ 236.913932][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.913941][ T8970] R13: 0000000000000000 R14: 00007fa08efa5fa0 R15: 00007ffedf7a6638 [ 236.913964][ T8970] [ 237.498935][ T5822] usb 2-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 237.520850][ T5822] usb 2-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0 [ 237.530690][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 237.537322][ T5822] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 237.560812][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.580997][ T5822] usb 2-1: config 0 descriptor?? [ 237.715980][ T26] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 237.780658][ T6999] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 237.837616][ T5822] usb 2-1: string descriptor 0 read error: -71 [ 237.862823][ T5822] usb 2-1: ucan: probing device on interface #0 [ 237.871096][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 237.877912][ T26] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 237.886515][ T5822] usb 2-1: ucan: invalid endpoint configuration [ 237.892592][ T26] usb 6-1: config 0 has no interface number 0 [ 237.896448][ T5822] usb 2-1: ucan: probe failed; try to update the device firmware [ 237.899272][ T26] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 237.920833][ T5822] usb 2-1: USB disconnect, device number 22 [ 237.946153][ T26] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 237.955414][ T6999] usb 1-1: Using ep0 maxpacket: 8 [ 237.960969][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.969013][ T26] usb 6-1: Product: syz [ 237.985000][ T6999] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 237.994122][ T6999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.002173][ T26] usb 6-1: Manufacturer: syz [ 238.006936][ T26] usb 6-1: SerialNumber: syz [ 238.013807][ T6999] usb 1-1: config 0 descriptor?? [ 238.020031][ T26] usb 6-1: config 0 descriptor?? [ 238.140553][ T5867] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 238.221388][ T6999] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 238.300962][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 238.308181][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 183, changing to 11 [ 238.320487][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25620, setting to 1024 [ 238.332470][ T5867] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.342131][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.352320][ T5867] usb 5-1: config 0 descriptor?? [ 238.357937][ T8993] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.452268][ T8975] syzkaller0: entered promiscuous mode [ 238.457845][ T8975] syzkaller0: entered allmulticast mode [ 238.470782][ T30] audit: type=1400 audit(1742232703.801:717): avc: denied { setopt } for pid=8973 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.519228][ T26] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 238.529906][ T6999] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 238.560405][ T26] usb 6-1: USB disconnect, device number 18 [ 238.570596][ T6999] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 238.590493][ T6999] asix 1-1:0.0: probe with driver asix failed with error -32 [ 238.681438][ T5867] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 238.696973][ T5867] usb 5-1: USB disconnect, device number 25 [ 239.845241][ T30] audit: type=1400 audit(1742232705.211:718): avc: denied { watch watch_reads } for pid=9010 comm="syz.3.776" path="/120" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.867979][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.069974][ T30] audit: type=1400 audit(1742232705.431:719): avc: denied { append } for pid=9014 comm="syz.4.777" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 240.531946][ T6999] usb 1-1: USB disconnect, device number 35 [ 240.607232][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 240.620021][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 240.628413][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc7-syzkaller #0 [ 240.636970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.647004][ C1] RIP: 0010:bpf_get_local_storage+0x17b/0x260 [ 240.653053][ C1] Code: 48 8d 7b 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bb 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 00 00 00 48 8b 1b e8 93 7e 73 09 83 f8 07 89 [ 240.672647][ C1] RSP: 0018:ffffc90000a28038 EFLAGS: 00010246 [ 240.678687][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81e40d02 [ 240.686641][ C1] RDX: 0000000000000000 RSI: ffffffff81e40db8 RDI: ffff888028248920 [ 240.694608][ C1] RBP: ffffc90000a28058 R08: 0000000000000005 R09: 0000000000000015 [ 240.702556][ C1] R10: 0000000000000015 R11: 0000000000000002 R12: ffff888034d2d3c0 [ 240.710504][ C1] R13: ffffc9000e760002 R14: 0000000000000000 R15: ffff888034d2d3f0 [ 240.718458][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 240.727361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.733931][ C1] CR2: 0000400000027000 CR3: 0000000067368000 CR4: 00000000003526f0 [ 240.741963][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000060000000 [ 240.749915][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 240.757860][ C1] Call Trace: [ 240.761114][ C1] [ 240.763936][ C1] ? die_addr+0x3b/0xa0 [ 240.768084][ C1] ? exc_general_protection+0x155/0x230 [ 240.773612][ C1] ? asm_exc_general_protection+0x26/0x30 [ 240.779307][ C1] ? bpf_get_local_storage+0x42/0x260 [ 240.784653][ C1] ? bpf_get_local_storage+0xf8/0x260 [ 240.790005][ C1] ? bpf_get_local_storage+0x17b/0x260 [ 240.795460][ C1] ? bpf_get_local_storage+0xf8/0x260 [ 240.800806][ C1] bpf_prog_3647604f6c8667e9+0x2e/0x41 [ 240.806247][ C1] __bpf_prog_run_save_cb+0x11f/0x330 [ 240.811598][ C1] ? __pfx___bpf_prog_run_save_cb+0x10/0x10 [ 240.817480][ C1] ? __cgroup_bpf_run_filter_skb+0x341/0xe60 [ 240.823441][ C1] __cgroup_bpf_run_filter_skb+0x470/0xe60 [ 240.829224][ C1] ? __pfx___cgroup_bpf_run_filter_skb+0x10/0x10 [ 240.835527][ C1] ? tcp_do_parse_auth_options+0x137/0x2e0 [ 240.841305][ C1] sk_filter_trim_cap+0x234/0xac0 [ 240.846305][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 240.851657][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 240.857180][ C1] tcp_v4_rcv+0x28fd/0x4380 [ 240.861672][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 240.866493][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 240.871934][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.876682][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 240.881501][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 240.886847][ C1] ip_local_deliver_finish+0x316/0x570 [ 240.892278][ C1] ip_local_deliver+0x18e/0x1f0 [ 240.897103][ C1] ip_sublist_rcv_finish+0x2c1/0x620 [ 240.902362][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 240.907705][ C1] ip_list_rcv_finish+0x559/0x720 [ 240.912702][ C1] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 240.918234][ C1] ip_list_rcv+0x339/0x450 [ 240.922623][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 240.927531][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 240.932703][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 240.937873][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 240.942780][ C1] __netif_receive_skb_list_core+0x755/0x950 [ 240.948735][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 240.955208][ C1] ? rcu_is_watching+0x12/0xc0 [ 240.959941][ C1] ? lock_acquire+0x2f/0xb0 [ 240.964416][ C1] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 240.970717][ C1] netif_receive_skb_list_internal+0x753/0xdb0 [ 240.976845][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 240.983492][ C1] ? vring_unmap_one_split+0x153/0x2f0 [ 240.988933][ C1] ? __pfx_receive_buf+0x10/0x10 [ 240.993845][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 240.999103][ C1] napi_complete_done+0x218/0x940 [ 241.004101][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 241.009617][ C1] ? virtqueue_get_buf_ctx+0x8f/0xb0 [ 241.014874][ C1] virtnet_poll+0x1c03/0x39f0 [ 241.019524][ C1] ? hlock_class+0x4e/0x130 [ 241.023998][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 241.029167][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 241.034161][ C1] ? mark_lock+0xb5/0xc60 [ 241.038460][ C1] ? __pfx_mark_lock+0x10/0x10 [ 241.043195][ C1] ? debug_object_activate+0x2e6/0x4a0 [ 241.048626][ C1] ? lock_acquire+0x2f/0xb0 [ 241.053103][ C1] ? debug_object_activate+0x149/0x4a0 [ 241.058531][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 241.063879][ C1] net_rx_action+0xa94/0x1010 [ 241.068531][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 241.073616][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 241.078783][ C1] ? sched_clock+0x38/0x60 [ 241.083182][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 241.088009][ C1] handle_softirqs+0x213/0x8f0 [ 241.092749][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 241.098006][ C1] __irq_exit_rcu+0x109/0x170 [ 241.102658][ C1] irq_exit_rcu+0x9/0x30 [ 241.106875][ C1] common_interrupt+0xbf/0xe0 [ 241.111527][ C1] [ 241.114432][ C1] [ 241.117342][ C1] asm_common_interrupt+0x26/0x40 [ 241.122340][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 241.127601][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 08 38 ac 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d f8 1c 87 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 241.147182][ C1] RSP: 0018:ffffc900001b7d58 EFLAGS: 00000246 [ 241.153231][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b578469 [ 241.161187][ C1] RDX: 0000000000000001 RSI: ffff88801b120000 RDI: ffff88801b120064 [ 241.169139][ C1] RBP: ffff88801b120064 R08: 0000000000000001 R09: ffffed10170e6f85 [ 241.177086][ C1] R10: ffff8880b8737c2b R11: 0000000000000000 R12: ffff888021f78000 [ 241.185026][ C1] R13: ffffffff8ee2ea60 R14: 0000000000000001 R15: 0000000000000000 [ 241.192970][ C1] ? ct_kernel_exit+0x139/0x190 [ 241.197799][ C1] acpi_idle_enter+0xc5/0x160 [ 241.202458][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 241.207459][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 241.213249][ C1] cpuidle_enter+0x4e/0xa0 [ 241.217639][ C1] do_idle+0x310/0x3f0 [ 241.221682][ C1] ? __pfx_do_idle+0x10/0x10 [ 241.226256][ C1] cpu_startup_entry+0x4f/0x60 [ 241.230994][ C1] start_secondary+0x222/0x2b0 [ 241.235730][ C1] ? __pfx_start_secondary+0x10/0x10 [ 241.240994][ C1] common_startup_64+0x13e/0x148 [ 241.245923][ C1] [ 241.248911][ C1] Modules linked in: [ 241.252822][ C1] ---[ end trace 0000000000000000 ]--- [ 241.258280][ C1] RIP: 0010:bpf_get_local_storage+0x17b/0x260 [ 241.264402][ C1] Code: 48 8d 7b 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bb 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 00 00 00 48 8b 1b e8 93 7e 73 09 83 f8 07 89 [ 241.284078][ C1] RSP: 0018:ffffc90000a28038 EFLAGS: 00010246 [ 241.290145][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81e40d02 [ 241.298154][ C1] RDX: 0000000000000000 RSI: ffffffff81e40db8 RDI: ffff888028248920 [ 241.306128][ C1] RBP: ffffc90000a28058 R08: 0000000000000005 R09: 0000000000000015 [ 241.314094][ C1] R10: 0000000000000015 R11: 0000000000000002 R12: ffff888034d2d3c0 [ 241.322081][ C1] R13: ffffc9000e760002 R14: 0000000000000000 R15: ffff888034d2d3f0 [ 241.330047][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 241.338983][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.345607][ C1] CR2: 0000400000027000 CR3: 0000000067368000 CR4: 00000000003526f0 [ 241.353617][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000060000000 [ 241.361617][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 241.369630][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 241.377026][ C1] Kernel Offset: disabled [ 241.381326][ C1] Rebooting in 86400 seconds..