last executing test programs: 15.167507177s ago: executing program 3 (id=876): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0), 0x0, 0x4001c00) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000000b0400000005100f001c2528c7b39af4fafeacf83c4c51b580f513d0c09603a10125f1625c632b7e5bdb8383fdebb4406a51e47ff20e78d0e560609f3e9c6390e032eda87ad41a54"], 0x0) 10.337621173s ago: executing program 3 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb879"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 9.781354032s ago: executing program 3 (id=897): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000001400)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES16=r2]) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={0xc, 0x1, 0x120000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2161, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) rt_sigpending(&(0x7f0000000540), 0x8) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000008000403c00fc000000000000000000000000000000ff0200000000000000000000000000010004000000000000c910fff5"], 0x0) r8 = syz_io_uring_setup(0x17ee, &(0x7f0000000440)={0x0, 0x20, 0x2000, 0x20002, 0x5}, &(0x7f00000002c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7800000000000000170100000200000061000000d3731f716b5cf65f267480ed36a0b2894716ddd58907abb7a7657cfaf780ce48bf0523511bb2fb554fad257cdb63aac5e0ef91d424ca5b18124eb1d38616e75ba74ae2d7f229f5925574bd3a2cbd15b724e18a576812f7376fa7000bd28c0e44678355c5"], 0x78}], 0x1, 0x44811) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmmsg$sock(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.702322312s ago: executing program 1 (id=899): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) socket(0xa, 0x80805, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) ptrace$setregset(0x4205, 0x0, 0x204, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeec5000, 0x2000, &(0x7f0000ff4000/0x2000)=nil}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r5 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff30, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdd8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1c8, &(0x7f0000001980)=ANY=[@ANYBLOB="0300004e1b15c800ce00004e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e877fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16297c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231de40cb9e40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5963249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="45adf30f0626260f01cfb9ed020000b87b000000ba000000000f3066460f388243e4b9800000c00f3235000800000f30c4e16968a700380000c4827d1d548600460fc7b9c06128eac4e28d9004a505000000", 0x52}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.528362436s ago: executing program 2 (id=900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x3e80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x52040, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.44218998s ago: executing program 2 (id=905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000036c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)="2fdef02a2cc229a3475c35e4f3ab62d2f7f6c473d90b5efe9bdf4226e15d73385ed538bfa1ee75bbb33cdb2730317779ba3cc605a54b5ca6465c43f01e4cd2fe76285eea6cdfd92dfdfeb376fee95386621786d9980f2aeb12f24438495802315961cee4735bbcc5bc8c3136d944d643cf68998513d61da7b437dc4862dd1a5ecf65a60cdb6c8b3caa28bbdf9477ef7ee71c7b4d0033451ee4d2ed983b65750d8deed5d64ae9708da46bd0e4738642fc0af29e4e48b8c8452be6f54d8c642fe6a35cf9dde9443f6748a9d104455ae2d0a9c8cdb45a92", 0xd6}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000001c0)="cd6f8c0c63090766f98fea5336eb2aa1fa69a5", 0x12}, {&(0x7f0000000d00)="7e093265ba9efe5d272516f769440b60f4bab5b76bfc6629b64e7d2224d62517102fae137b1f62152a0000af61d3aa2d3a6cb4c75598de51d8711d85920ef254cddc485117a60930a0d7e08599f2b6a74d70dd7dd5490a025375cb150c8daa46ae9a418af6d36fe65e0e3b131ee47b7333689d7aa03eb98cc000000000", 0x7d}, {&(0x7f0000000280)="74c0857b5a3cc9b47de2fd97db01868a5fb11aa5ffd93a2b62a83908a1c8e5", 0x1f}, {&(0x7f0000000740)="c6d22a3f3adbe0536155b5e8ef1397535b3285767791c2a9fc66758cbcda21a566ee0a4bad7565810c37c83138c9f4904b6ad4de2e6b12057207323f6cdc17afe46b1a5e41f0c29728667d4b110786be383ef4a96fc6014975438f3529402816e219dd603be53fedc324f0d49d", 0x6d}], 0x6, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20, 0x4000}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x8}, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000023c0)="d4297807cbad0c0ed8d4a35a74733340143e7d2dbf1561c87d01e69a8a436d6c92fa8e94bfa6ff2c22aec514488d22324788d81f12baa166c211e8bf7ac8b97ed6b67009", 0x44}, {&(0x7f0000000940)="75c1584dd3e0189527ea41a95eceb31c328f1e33b882b8f7cafce33cddb5aec33a09e8407c80c243171f5b3c01450d80e73b0a03454e7591e2137a454f9f804da396e2b03e99c463764722d50d6053932f1d4734bba38930368eb318da10fa68847b462e05dc8c7043b898f528328563084c5d54d6dd17f90aaed3b440c10401de641ca1a3a802374ed6ac27b6d3e2ff3cf6b2bb81c5d65b98fe77c53fbd5e2caa39caa862dd80da207761bc6028d6abd4c3", 0xb2}, {&(0x7f0000000a00)="10f15ee96a71efd0b42aad8b693a9bf2813f6caa28b9f3bfd24584c179bef4093f9bed7e61202a9f7ec744e428e6a66f919bfa8c8e582ac95d57c8e60b3b0965796e24eea45900e9daf8bf0578f2c1f8b42938187f8f50dfceeb6366ff0d2fc9dbf2f467682a21c86e8f2cb1f1d086ae5034d2e8bef3e617fafdcadfb37021430a74dbd3447679efe2bad57f04464e23f974dcd0a7d400cde87c631b902076fb7b2fa4b970111293fb38acc2966f5d9d1c860e46d8a76ca3b6198c16dc178c186077645f3b24740ac60705e00d8a55b55fa5028efe95562290f088dc4c91faefb07fa09d6458d74a8e8bd6db3116de611d91c0", 0xf3}, {&(0x7f0000000b00)="eb22332871e17a5bffd430cd98633c4d7e7c255c9c82bba9d5a95dba5b2e096432480e2084276e08a6e5d3ad1719414fca4fbc4bba87258f86a1cf4d5d7eb63ac9a2055d3c2c47466e41eda5f5fbe646c6bc85def6a9d21f973becbfb091481ce2dde514f3a35a2e53f3bae56d0d41f8971b8cdafa3b3ba267a43c0e3209a5e658e1ddcf57a9b3d86b11", 0x8a}, {&(0x7f0000000bc0)="64e24c88a6bdfa29ec8d78856ad12ca6225b1d958ba984209891ec06c9ebb3f3b28617dd82489bf22474ddf4561311568ffa196fe046186a3be1c928e05513510b2a158522517a5396ff1c940ddaa38e84ba7726ba1747ee40ea11cfa32bf188160943e4f5a2de931fbffcd094b413f5e7bf3a66389e21baf42365d281eb4ec84ee2ed64fb1d9baced27a861dc60a01051fc3175b0018864e9e00f7fb2c056c4", 0xa0}], 0x5, &(0x7f0000002580)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="e5a910d218eabd64920ed4e7df71bd6e362222fc4015c8312081659c8b85fc", @ANYRES32=0x0, @ANYBLOB="000000004dd83a600ad4d26afee9236dd6cdabbaf70b3510aa1aaedb9f154217bb7b90288e"], 0x50, 0x801}}, {{&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000e40)="1a0338ec960793a05ddef521d532279096c635b76a61119c74f92faca73f2a8d9429d085d7a822b480905947fcadec4a2fbd0d16e5fe85e0352897defed9f51a4a7b5c067083698a998a52e5baf224cb7342d7f7ab6eab02f131a3a6cf480878beba1ce2de7073ca5b0c6878791427fb0ffe102c801f1c590707205f9e81b577d2fb34670875edc6f3873935c81707c12fea0a10cd7205f9233f35f84cc359cd65f9d2cd61704ae450", 0xa9}, {&(0x7f0000000480)="ceab8fd34ca5fec8f666a5bbee08664232ff578052a7103b0ec0692ce868df1642ba902c57370b98edeb29d6f410000e6f74e3b2cefd287685df30a1a8da9bf8da536790e55b0c5ed2d3bbae85247aa61fce6eff923f5e68c1c51d7a80e740f9913e0f9d39a3cefb7189a2a3ecebea045ab8930c0f705c71e037ae1d53f6b319df34b15ffa4a67b42833dd9a6869d3ff19377fa7f9db0179f0e359111971d134ab184bdef96f9768a07038580573e4", 0xaf}, {&(0x7f0000000f40)="f64f901a14a9b28804b4c0c153c5004b75713c3cb80669727335c4df58c3e5c39f58df34e3d5ec4b7a3eff5cce88a861459db394280997b8c718422edd385abbe6e19eadaf731381d1f7c4d9185a2c03badc1fcc4a2fb36d633d0770628979b27e3581fab78bba0f6584daf4824940d1e5908473b51c98c10380d07cf59da943cef3738a34e44ffcc7fe9b35a2a3e8317583c99bc4f52fb255bfd2cbbe89866366", 0xa1}, {&(0x7f00000020c0)="85770ce4c8de46a0a060310d6bdaf3838668e63d949948e3de7b111ea412fdc0aec71c7d33777a6a37b48cdd5c87b7e97a4908e6808c8b30cb27d8d2ef91bf118d968557df8e03217c0aba4747c88d5969642a6e01348c0c5d1ae8c77f69b3147ada86c51a8c6057015904bfb67c71e1956840b1a499c19b65e24abac39c2b5383a647548342d8f0d0e1daef07844d821277f5ac484ad2b470c470689babd651b6e2fdba1e999a2d7da6873ca84addbc485c603b2932d3257a29ab2835308c2155af19947ce3f0c8c627937a702329cd0ab674fe1e12d4c2007e37063beb2eb72f3dcdd2a314cc48a8dbf99f", 0xec}, {&(0x7f00000021c0)="74bc3c5a47ec704a5dfe680f46d51c725dcc76af97116867001667a38a9c53f4417f26d4ead9e9b379c730f6f8422344559423dce06d4041870d6c0f3bee2aeaa5e26348add77b74275682e34aeb726c006e5b7e317d5f8b6426e572532ef601437b172f10aac549f545477dfc1f3e74fb046b555c12a704d514d5", 0x7b}, {&(0x7f0000002240)="614823874436922d9205747ffd6907d0e2fd91fdda6f47d204374351dcb545ef2ba5a0404a9acf8db90bf0f79111c5f91851bf870c9b35e14097960d3d2a6a3a680d469c9a33613bf70dc02f13477d8b3965f266fbe565efeaf427eb7a752199716d4428be218cc941c3498cacea32d34f580da3f702ef3c1e6fa34ba9e07ca4ee7f57c0c7f594ebe543aa810296df815df52be8d0be2c3eb14a63b72a6bca22f5e8bd8d80e413d419d8ca898f1a22c01d4eabcd3a353a6fb4de36c20802dc89c797f9712de4df603ebd3625b6afde2f62b41f8a325f0fac72b017ca3fb459ceb50e30", 0xe3}], 0x6, &(0x7f0000003580)}}], 0x3, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000d80)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000002440)=@delqdisc={0x54, 0x25, 0xc00, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xfff1, 0x6}, {0x0, 0x7}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40800) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42, @multicast}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x10, 0x2000008c, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32], 0x0, 0x18, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)={0x30, 0x0, 0x210, 0x102, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4000af, 0x2, 0x6, 0x1e3}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007308000000000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x5, r3, 0x2, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) dup(r9) 6.1410345s ago: executing program 3 (id=906): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000500)="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", &(0x7f00000000c0)="01647e3187"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="fe", 0x1}], 0x1, 0x0, 0x0, 0x41}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24040000) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) flock(0xffffffffffffffff, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x42, 0x0, r0, 0x0, &(0x7f0000000380)="57f126ec40239a81f3e27bdd31e689dfb1bc65e2089c291bf9aa34aea091f51c13d4fcb9e00ca386e132f7e2f1ef5767b3d16c5faa7cad59f409a05b9b3015cbe3b8892f09882d0e225dc8f26fe790a5ad8a9d934030", 0x56, 0x24040040, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x47f9, 0x4, 0x0, 0x0, 0x0) 3.933349306s ago: executing program 2 (id=909): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc084}, 0x40004) 3.885676225s ago: executing program 4 (id=910): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x406}], 0x1}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000017f000/0x4000)=nil, 0x4000, 0xb, 0x10, r1, 0x2000) madvise(&(0x7f000033b000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 3.202685904s ago: executing program 1 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 2.686163135s ago: executing program 0 (id=913): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3159, 0x0, "78e114100985a798742d2a70e113343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000040), 0x4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x40045108, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0x2}, {0x2, 0x1}, {0xa, 0x4}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x800}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x88, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x3006c8c0) r9 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, &(0x7f0000000040)=ANY=[]) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000080)) 2.595415713s ago: executing program 4 (id=914): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x7cb5}}) 2.579399886s ago: executing program 1 (id=915): r0 = msgget$private(0x0, 0x10) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000380)=""/138) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002040), 0x0, &(0x7f0000002100)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000006200)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000600)="98a15faf61dcc33a88de5c748a703c7a7c3d1eaa5d1241531de63c92e4644536ebe8221537dbd7490788560090775d1fe9d8f3fd86d2fae44cddebef2622d0003489447845a5fe884ed1b4a011aa7b4a848a8866c99dac3d836d235134db705860e64f378cb1e7b9863b20b9f4738efe83a49f7d7ecfd3c496886f86", 0x7c}, {&(0x7f0000000680)="72c05eb23cda54d3c0eae2e4b97dc67eaaee1137724baaaa354de0057766fe5ce99ff7b4e4f1be7c77a02f30a7531fb31aa3094321a2e77a76557f6fc66ff46b5a123aaf12eee346aff94620219494d549217faa4822193f02c22ce1ab2afab6", 0x60}, {&(0x7f0000000740)="eee16fc83c6081975211e04f40805f68e4d30b91984e447d7c111a9baeb20e1b4111a2a02d719e9fc0a6528675361d9b5a54cf0fabfaa5433812696cabce80b641150394d2f02a0ae3910eb0f89aa5a17c52020d9516336412c4dd047c41bf14c281de1fc828288a43f0bf90e2edd15832dc9eb95af780f472a7088adca2bddcbd8d44cd6bf71a091ea8b3780bb425745ec6f88b98921f9c", 0x98}, {&(0x7f0000000880)="5c942bede4f78ab030f9dfd71c30e73317d7419d29ce44a01b68847e3e4d071b39b723ced68a89eb89bee380fcdb456f7087af5ac23e2a9f52a322b99da57e3d4be44c097e78c9ffcd6c7da38e5491e0f2e2dc40024529eaa7465dd14e4e8c56a26daaf708c9051cb2a72cdc135effa9bc4932eb8a097fe7daacb833ef", 0x7d}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x28, 0x1, 0x1, [r6, r3, r2, r1, r2, r2]}}], 0xb8, 0x8044}}], 0x1, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(r12, &(0x7f0000000940)=[{{&(0x7f00000002c0), 0x6e, 0x0}}], 0x1, 0x10052, &(0x7f0000000980)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) 2.470565149s ago: executing program 4 (id=916): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 2.389316402s ago: executing program 3 (id=917): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) 2.318484322s ago: executing program 0 (id=918): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="008c05", @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) openat(r0, &(0x7f00000003c0)='./file0/file0\x00', 0xa0842, 0x119) truncate(0x0, 0x9471) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x8a0f41) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='cachefiles_unlink\x00', r2, 0x0, 0x2}, 0x47) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000340)=0x9) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x88c1) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.258075833s ago: executing program 3 (id=919): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000a40)={[0x5]}, 0x8) ioctl(r3, 0x8b33, &(0x7f0000000040)) mmap(&(0x7f0000070000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0x22, 0xb7, {0xb7, 0x7, "655faa66f4151180fca9ce209fddf8a67d2b67b4cd649e11cc461f62ada190e2cefbacbeb659f741886861194bb037d83a2fd576e79f5a6ea9a01c1352c5f4db56f8f95c1ebb52ec30a79885386e8f88672f7b17e4a2d5b61d29ed054ba5069a3af1b6493ac401ffc6bd8d96f3696918378b213b4702d37aa3d333258af7d41bd8c0dd2ea87fcccee896fa3ef30d8a452d68f0c28bd11433aee0505fc606c2559813a90021a0774f4691956d996274b810ae454ff3"}}, &(0x7f0000000180)={0x0, 0x3, 0x35, @string={0x35, 0x3, "d2f2c6f470d712cf4fe67204895e78db5f9ab53a902b73e9f1e87c056a975f6632c6f86edb8b57b0146e1b658a9fc093ea9a50"}}, &(0x7f0000000280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x7, 0xa, "d609bbc2", "cd6eeefb"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x18, 0xfa, 0x4, 0x68, 0x400, 0x6}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x94, "43ee7309c8bdcdc01e1640f22d1d412ff0fa04de8496fc7a2ea5f8bc485e7dd8e96f0b7e8cf3a2a8b68da8c74b3960ad4dc0ef1ff529b5f705f750bfe48b410fd76e4c3df6423d7a1935ad2d77f739a9fd7d95abaacec543f6f783c5f90cd1917ded7e43bfd48fd355b8ec3ba616e358de1a231034eec957587ae61ea3d6a8a93b488dfa372ec104d87576cd721a18b666e42e0a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xdf}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xd2}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "6414"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "abd5"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x40}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x68000) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 2.256340078s ago: executing program 4 (id=920): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000002000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x406}], 0x1}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000017f000/0x4000)=nil, 0x4000, 0xb, 0x10, r1, 0x2000) madvise(&(0x7f000033b000/0x1000)=nil, 0x1000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 2.177393274s ago: executing program 0 (id=921): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.517946495s ago: executing program 0 (id=922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000040)="4ee7b335efeb3f1c90c4113f7a", &(0x7f0000000100)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x6, 0x2, 0xd, 0x20, 0xfc5, 0x1227, 0xf44a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x6f, 0x7, 0x0, 0x97, 0x1a, 0x4a, 0x8}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe00", 0x0, 0xf}) close(0xffffffffffffffff) 1.454549655s ago: executing program 1 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x9000000}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e23, 0x9, @local, 0x1}}, 0x8, 0x1, 0x1ff, 0x4, 0x82, 0x7, 0x1a}, 0x9c) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x2}, 0x2f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000000c0)={{0x6, @rose, 0x1}, [@null, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f0500010002000000050000000a0000000f00000084c0000000300000cf0000002e0000000000"], 0x0, 0x46, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x6, r8, 0x2}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r10, 0x0) futex(&(0x7f0000001040)=0x1, 0x1, 0x2, &(0x7f0000001080)={0x77359400}, &(0x7f00000010c0)=0x2, 0x0) 1.284249669s ago: executing program 4 (id=924): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28000000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) close_range(r1, 0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x142, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r6 = getpgid(0xffffffffffffffff) prlimit64(r6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r8) userfaultfd(0x80001) getpid() syz_open_dev$ttys(0xc, 0x2, 0x1) 933.565861ms ago: executing program 2 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) 782.348316ms ago: executing program 0 (id=926): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x47079, 0x0, 0x84, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x4010, r0, 0x8000000) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 571.985554ms ago: executing program 2 (id=927): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_rr_get_interval(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x0, 0x4c, 0x232, 0x258, 0x0, 0x3a8, 0x2e8, 0x2e8, 0x3a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3, 0x48}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x1}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [0xff000000], @ipv6=@private2, [0x0, 0xff000000]}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@local, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x4ea, 0xfff, 0x8, 0x3, 0x8, 0x8, 0x1, 0x5, 0x2, 0x0, 0x0, 0x6, 0x3, 0x4, 0x800, 0x3ff], 0x4}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x80204705, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) r5 = open(0x0, 0x80ff, 0x88) r6 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r6, 0x6a, 0x1, 0x0, 0x20) fcntl$setlease(r5, 0x400, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x6, 0x6, 0x7}}, 0x28) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fcntl$addseals(r7, 0x409, 0xe326e40dab69ccbe) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x70, 0x94}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x0, [0x20, 0x2]}, {r4, 0x0, 0x1, [0xc1b, 0xfffffff9]}, 0x1, [0x1]}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 466.301715ms ago: executing program 1 (id=928): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="1863000006000000000002000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000140)="fb20b8440e6cadba5db0f3f657047ee0854b8a523348e107f11f2ef9e0527321720ee52a33c107a0c095797d78367f1740bf5d0dcaaabce90a08e275c2", 0x0}, 0x20) 74.42826ms ago: executing program 0 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000040)={{r0}, r1, 0x4, @unused=[0x9, 0x4, 0x400, 0x2], @name="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"}) r2 = io_uring_setup(0x1baf, &(0x7f0000001040)={0x0, 0x2e2c, 0x9410, 0x2, 0x3be}) io_uring_enter(r2, 0x4c04, 0xe848, 0x8, &(0x7f00000010c0)={[0xf]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001100)={'wg0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001140)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000001240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001280)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0xa0, 0x62, r3, r4}, {0xf, 0x8000000000000000, 0x80000000, 0x1, 0x5, 0x870, 0x7fffffff, 0x3}, {0x81, 0x7, 0x2, 0x5}, 0x1, 0x0, 0x2, 0x0, 0x4, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in6=@remote, 0x3507, 0x3, 0x1, 0x70, 0xfff, 0x0, 0x5}}, 0xe8) write$sndseq(0xffffffffffffffff, &(0x7f00000013c0)=[{0x91, 0x3, 0x4, 0x8, @tick=0x8, {0x0, 0x9}, {0xb, 0x2}, @addr={0x8, 0x9}}, {0xb, 0x0, 0x7, 0x7, @tick, {0x0, 0x9}, {0xc, 0xc3}, @ext={0x3c, &(0x7f0000001380)="ed25db4f2dda890a36bef1954c9447a204a8102b895e4cf8071cc42661a53d8b8dc0e8558021abb116360304a26297bb82fcf302950040d547bdfa94"}}, {0x7, 0x57, 0x7, 0x6, @tick=0x6, {0x8a, 0xfc}, {0x10, 0xb5}, @addr={0x10, 0xfe}}, {0x9, 0x5, 0x8, 0x0, @time={0x8}, {0xe9, 0x80}, {0x4, 0x8}, @note={0x10, 0x2b, 0x6, 0xf, 0x4}}, {0x2, 0xf6, 0x1f, 0x8, @time={0x5, 0x2}, {0x3, 0x86}, {0x0, 0xcb}, @time=@tick=0x6}], 0x8c) syz_open_dev$MSR(&(0x7f0000001480), 0x7, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/kexec_loaded', 0x882, 0xe0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001580)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x0, 0x120, 0xffffffff, 0x0, 0x120, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, &(0x7f0000001500), {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x2, 0xa, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv4=@broadcast, @icmp_id=0x67, @port=0x4e20}}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff], 'pim6reg\x00', 'wg2\x00', {}, {}, 0x67, 0x8, 0x7, 0x40}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x7, 0x0, 0x4, 0x9, 0xad, 0x8001, 0xdd]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a4d4"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv4=@private=0xa010101, @ipv6=@mcast1, @gre_key=0x911e, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast1, @port=0x4e23, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r6 = syz_clone3(&(0x7f0000001c80)={0x200000, &(0x7f0000001ac0), &(0x7f0000001b00)=0x0, &(0x7f0000001b40), {0x32}, &(0x7f0000001b80)=""/75, 0x4b, &(0x7f0000001c00)=""/36, &(0x7f0000001c40)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9, {r5}}, 0x58) sched_setscheduler(r7, 0x6, &(0x7f0000001d00)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000001d80)={0x10, 0x5, 0x9, 0x1, 0x6}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001dc0), 0x200, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000001ec0)={'bridge0\x00', &(0x7f0000001e80)=@ethtool_ringparam={0x10, 0x12dd, 0x80000001, 0x0, 0x2, 0x1, 0x4, 0x1, 0x7f}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={r6, r11, 0x0, 0x8, &(0x7f0000001f00)='bridge0\x00'}, 0x30) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000001f80)={0x2, 0x9}, 0x2) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000001fc0)=0x81, 0x3, 0x4) mount$overlay(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040), 0x10, &(0x7f0000002080)={[{@nfs_export_off}, {@workdir={'workdir', 0x3d, './file0'}}], [{@appraise_type}]}) read$FUSE(r11, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000004100)={{0x3, r4, r12, r4, 0xee00, 0x82, 0x9}, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc}) ioctl$EVIOCGSND(r10, 0x8040451a, &(0x7f0000004180)=""/68) ioctl$KVM_PPC_ALLOCATE_HTAB(r11, 0xc004aea7, &(0x7f0000004200)=0x10) syz_open_procfs(r7, &(0x7f0000004240)='loginuid\x00') 73.732539ms ago: executing program 2 (id=930): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket(0x2b, 0x1, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x541b, 0x0) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000400)={@broadcast, @multicast2, 0xffffffffffffffff, "254b40ed328a65c3998f3238e1c5b3a98f18c11426ca3e57984c6301d6ad830d", 0xb00, 0xfffffff8, 0x7fff, 0x80000001}, 0x3c) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r1, 0xffffffff, 0x0, 0x20cf02d131bc822d}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002940)={@cgroup, 0xffffffffffffffff, 0x34, 0x0, 0x0, @void, @value}, 0x20) creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xfdfdffff, 0x4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) 24.76414ms ago: executing program 4 (id=931): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xc8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=932): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0xc0101282, r0) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.061909][ T5831] usb 1-1: Product: syz [ 147.067585][ T5831] usb 1-1: Manufacturer: syz [ 147.073728][ T5831] usb 1-1: SerialNumber: syz [ 147.089432][ T5831] usb 1-1: config 0 descriptor?? [ 147.339761][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.362229][ T5831] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 147.363348][ T5831] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 147.437061][ T4239] usb 1-1: USB disconnect, device number 7 [ 147.489662][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 147.781257][ T24] libceph: connect (1)[c::]:6789 error -101 [ 147.792380][ T5865] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 147.810462][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 147.817092][ T5865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.834501][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.846125][ T5865] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.861001][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.869997][ T5865] usb 2-1: Product: syz [ 147.874272][ T5865] usb 2-1: Manufacturer: syz [ 147.882387][ T5865] usb 2-1: SerialNumber: syz [ 148.080792][ T4239] libceph: connect (1)[c::]:6789 error -101 [ 148.086906][ T4239] libceph: mon0 (1)[c::]:6789 connect error [ 148.156832][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.168335][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.242776][ T6899] __nla_validate_parse: 46 callbacks suppressed [ 148.242806][ T6899] netlink: 11 bytes leftover after parsing attributes in process `syz.1.253'. [ 148.741402][ T4239] libceph: connect (1)[c::]:6789 error -101 [ 148.782457][ T4239] libceph: mon0 (1)[c::]:6789 connect error [ 148.833322][ T6887] ceph: No mds server is up or the cluster is laggy [ 149.035598][ T5865] usb 2-1: 0:2 : does not exist [ 149.152777][ T5865] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 149.199123][ T5865] usb 2-1: USB disconnect, device number 9 [ 149.614156][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 149.614168][ T30] audit: type=1400 audit(1744790640.193:416): avc: denied { write } for pid=6908 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.726830][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 150.859609][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.921882][ T30] audit: type=1400 audit(1744790641.893:417): avc: denied { setopt } for pid=6927 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.050154][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 152.056498][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 152.320083][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 152.894347][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 152.960810][ T6942] ceph: No mds server is up or the cluster is laggy [ 153.030746][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 154.279225][ T6967] syz_tun: entered allmulticast mode [ 154.286812][ T6966] syz_tun: left allmulticast mode [ 154.309664][ T30] audit: type=1400 audit(1744790645.243:418): avc: denied { read } for pid=6966 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.534172][ T6970] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.644878][ T6970] SELinux: ebitmap start bit (2013268097) is not a multiple of the map unit size (64) [ 154.715963][ T6970] SELinux: failed to load policy [ 154.829351][ T30] audit: type=1400 audit(1744790645.793:419): avc: denied { mount } for pid=6969 comm="syz.4.278" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.868295][ T30] audit: type=1400 audit(1744790645.823:420): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.507358][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 155.619702][ T5831] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 155.782005][ T5831] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.795817][ T5831] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.807282][ T5831] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 155.820772][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.279646][ T5914] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.122543][ T30] audit: type=1400 audit(1744790648.063:421): avc: denied { append } for pid=6977 comm="syz.1.275" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.519633][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 157.606673][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.706316][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.727364][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.742962][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.781215][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.804144][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.815864][ T30] audit: type=1400 audit(1744790648.783:422): avc: denied { bind } for pid=7000 comm="syz.0.288" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.855861][ T30] audit: type=1400 audit(1744790648.783:423): avc: denied { node_bind } for pid=7000 comm="syz.0.288" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 158.053089][ T5914] usb 3-1: GET_CAPABILITIES returned 0 [ 158.063379][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 158.296420][ T5865] usb 3-1: USB disconnect, device number 9 [ 158.453270][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.454682][ T5831] usb 2-1: string descriptor 0 read error: -71 [ 159.515892][ T5831] usb 2-1: USB disconnect, device number 10 [ 159.549666][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 159.745737][ T30] audit: type=1400 audit(1744790650.713:424): avc: denied { mount } for pid=7020 comm="syz.0.294" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 159.755288][ T5864] usb 5-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 160.203490][ T30] audit: type=1400 audit(1744790650.803:425): avc: denied { name_bind } for pid=7017 comm="syz.3.293" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 160.225156][ T30] audit: type=1400 audit(1744790650.873:426): avc: denied { read write } for pid=7017 comm="syz.3.293" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.248409][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.281947][ T5864] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.294016][ T30] audit: type=1400 audit(1744790650.873:427): avc: denied { open } for pid=7017 comm="syz.3.293" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.330305][ T5864] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 160.342463][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.396579][ T5864] usb 5-1: Product: syz [ 160.480260][ T30] audit: type=1400 audit(1744790651.363:428): avc: denied { unmount } for pid=7020 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 160.499910][ T5864] usb 5-1: Manufacturer: syz [ 160.499931][ T5864] usb 5-1: SerialNumber: syz [ 160.505873][ T5864] usb 5-1: config 0 descriptor?? [ 160.614020][ T7030] netlink: 56 bytes leftover after parsing attributes in process `syz.1.296'. [ 160.733367][ T7030] netlink: 56 bytes leftover after parsing attributes in process `syz.1.296'. [ 163.057303][ T5864] usb 5-1: can't set config #0, error -71 [ 163.171855][ T5864] usb 5-1: USB disconnect, device number 11 [ 163.430394][ T7057] FAULT_INJECTION: forcing a failure. [ 163.430394][ T7057] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.518131][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.4.305 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 163.518154][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.518160][ T7057] Call Trace: [ 163.518164][ T7057] [ 163.518168][ T7057] dump_stack_lvl+0x16c/0x1f0 [ 163.518186][ T7057] should_fail_ex+0x512/0x640 [ 163.518200][ T7057] _copy_from_user+0x2e/0xd0 [ 163.518213][ T7057] __sys_bpf+0x21d/0x4d80 [ 163.518229][ T7057] ? __pfx___sys_bpf+0x10/0x10 [ 163.518242][ T7057] ? ksys_write+0x190/0x240 [ 163.518257][ T7057] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 163.518279][ T7057] ? fput+0x70/0xf0 [ 163.518290][ T7057] ? ksys_write+0x1b9/0x240 [ 163.518299][ T7057] ? __pfx_ksys_write+0x10/0x10 [ 163.518306][ T7057] ? rcu_is_watching+0x12/0xc0 [ 163.518322][ T7057] __x64_sys_bpf+0x78/0xc0 [ 163.518336][ T7057] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.518349][ T7057] do_syscall_64+0xcd/0x260 [ 163.518364][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.518375][ T7057] RIP: 0033:0x7f934258e169 [ 163.518383][ T7057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.518394][ T7057] RSP: 002b:00007f93434cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.518404][ T7057] RAX: ffffffffffffffda RBX: 00007f93427b5fa0 RCX: 00007f934258e169 [ 163.518410][ T7057] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000009 [ 163.518416][ T7057] RBP: 00007f93434cf090 R08: 0000000000000000 R09: 0000000000000000 [ 163.518422][ T7057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.518427][ T7057] R13: 0000000000000000 R14: 00007f93427b5fa0 R15: 00007ffc343c91e8 [ 163.518440][ T7057] [ 163.693143][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.619714][ T5863] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.679629][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 164.739898][ T5864] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 165.421549][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.443608][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 165.454885][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 165.461862][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 165.465320][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.479633][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.496524][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 165.502320][ T7061] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.522573][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.654290][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.668255][ T5863] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 165.698587][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.719948][ T5863] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.131434][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.167191][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.194897][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.215726][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.784239][ T5864] usb 5-1: GET_CAPABILITIES returned 0 [ 166.811392][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 166.884202][ T5863] usb 4-1: string descriptor 0 read error: -71 [ 166.902373][ T5863] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 166.926557][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.956157][ T5863] usb 4-1: config 0 descriptor?? [ 166.969848][ T5863] usb 4-1: can't set config #0, error -71 [ 166.980963][ T5863] usb 4-1: USB disconnect, device number 6 [ 167.009078][ T5864] usb 5-1: USB disconnect, device number 12 [ 167.059834][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.777759][ T5865] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 167.849567][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.857580][ T5865] usb 1-1: Product: syz [ 167.862275][ T5865] usb 1-1: Manufacturer: syz [ 167.866866][ T5865] usb 1-1: SerialNumber: syz [ 167.921712][ T971] usb 2-1: USB disconnect, device number 11 [ 167.942777][ T5865] usb 1-1: config 0 descriptor?? [ 168.504981][ T971] usb 1-1: USB disconnect, device number 9 [ 168.658223][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 168.679747][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 169.009961][ T971] libceph: connect (1)[c::]:6789 error -101 [ 169.022561][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 169.666628][ T971] libceph: connect (1)[c::]:6789 error -101 [ 169.672802][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 169.679932][ T7095] ceph: No mds server is up or the cluster is laggy [ 170.323899][ T7121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.320'. [ 170.402438][ T30] audit: type=1400 audit(1744790661.363:429): avc: denied { append } for pid=7110 comm="syz.3.320" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.908878][ T7135] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 172.329232][ T7135] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.388777][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'. [ 172.445647][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.325'. [ 172.488123][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 172.541507][ T7139] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 172.618328][ T7139] batman_adv: batadv0: Adding interface: team0 [ 172.773204][ T7141] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 172.844457][ T30] audit: type=1400 audit(1744790663.813:430): avc: denied { append } for pid=7138 comm="syz.3.325" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.882097][ T7139] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.029114][ T7141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.325'. [ 173.120887][ T7139] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 173.146034][ T7137] syz.2.324 (7137): drop_caches: 2 [ 173.228376][ T30] audit: type=1400 audit(1744790664.193:431): avc: denied { create } for pid=7138 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.294025][ T7141] team0: entered promiscuous mode [ 173.299082][ T7141] team_slave_0: entered promiscuous mode [ 173.304537][ T30] audit: type=1400 audit(1744790664.193:432): avc: denied { bind } for pid=7138 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.362827][ T7141] team_slave_1: entered promiscuous mode [ 173.378901][ T7141] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.430611][ T7141] batman_adv: batadv0: Interface activated: team0 [ 173.437092][ T7141] batman_adv: batadv0: Interface deactivated: team0 [ 173.479635][ T7141] batman_adv: batadv0: Removing interface: team0 [ 173.510534][ T7141] bridge0: port 3(team0) entered blocking state [ 173.516895][ T7141] bridge0: port 3(team0) entered disabled state [ 173.554876][ T7141] team0: entered allmulticast mode [ 173.569813][ T7141] team_slave_0: entered allmulticast mode [ 173.576709][ T7141] team_slave_1: entered allmulticast mode [ 173.777426][ T7141] bridge0: port 3(team0) entered blocking state [ 173.784215][ T7141] bridge0: port 3(team0) entered forwarding state [ 175.004277][ T7159] FAULT_INJECTION: forcing a failure. [ 175.004277][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.021085][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.0.331 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 175.021111][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.021121][ T7159] Call Trace: [ 175.021126][ T7159] [ 175.021133][ T7159] dump_stack_lvl+0x16c/0x1f0 [ 175.021167][ T7159] should_fail_ex+0x512/0x640 [ 175.021189][ T7159] _copy_from_user+0x2e/0xd0 [ 175.021210][ T7159] video_usercopy+0xedd/0x1720 [ 175.021237][ T7159] ? __pfx___video_do_ioctl+0x10/0x10 [ 175.021261][ T7159] ? selinux_bprm_creds_for_exec+0xbc0/0xc60 [ 175.021287][ T7159] ? __pfx_video_usercopy+0x10/0x10 [ 175.021329][ T7159] v4l2_ioctl+0x1ba/0x250 [ 175.021351][ T7159] ? __pfx_v4l2_ioctl+0x10/0x10 [ 175.021376][ T7159] __x64_sys_ioctl+0x190/0x200 [ 175.021402][ T7159] do_syscall_64+0xcd/0x260 [ 175.021427][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.021444][ T7159] RIP: 0033:0x7f838c58e169 [ 175.021457][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.021473][ T7159] RSP: 002b:00007f838d3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.021490][ T7159] RAX: ffffffffffffffda RBX: 00007f838c7b5fa0 RCX: 00007f838c58e169 [ 175.021501][ T7159] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 175.021511][ T7159] RBP: 00007f838d3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.021520][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.021530][ T7159] R13: 0000000000000000 R14: 00007f838c7b5fa0 R15: 00007ffc2081e668 [ 175.021552][ T7159] [ 177.181912][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.208406][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.697389][ T30] audit: type=1400 audit(1744790668.663:433): avc: denied { ioctl } for pid=7162 comm="syz.2.333" path="cgroup:[4026533259]" dev="nsfs" ino=4026533259 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.914369][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.503792][ T5914] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 178.550181][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.558331][ T5914] usb 1-1: Product: syz [ 178.563894][ T5914] usb 1-1: Manufacturer: syz [ 178.574526][ T5914] usb 1-1: SerialNumber: syz [ 178.588456][ T5914] usb 1-1: config 0 descriptor?? [ 178.648002][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.811338][ T5864] usb 1-1: USB disconnect, device number 10 [ 178.831071][ T7193] Cannot find add_set index 0 as target [ 179.399919][ T30] audit: type=1400 audit(1744790670.373:434): avc: denied { read } for pid=7205 comm="syz.3.343" path="socket:[13060]" dev="sockfs" ino=13060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.509972][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 180.516383][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 180.522545][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 180.528925][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 180.660467][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 180.672968][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 181.285024][ T30] audit: type=1400 audit(1744790672.223:435): avc: denied { mount } for pid=7221 comm="syz.2.347" name="/" dev="configfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 181.347048][ T30] audit: type=1400 audit(1744790672.223:436): avc: denied { search } for pid=7221 comm="syz.2.347" name="/" dev="configfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.488518][ T7232] FAULT_INJECTION: forcing a failure. [ 181.488518][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 181.511036][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.0.350 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 181.511060][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.511069][ T7232] Call Trace: [ 181.511076][ T7232] [ 181.511082][ T7232] dump_stack_lvl+0x16c/0x1f0 [ 181.511109][ T7232] should_fail_ex+0x512/0x640 [ 181.511131][ T7232] should_failslab+0xc2/0x120 [ 181.511150][ T7232] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 181.511169][ T7232] ? skb_clone+0x190/0x3f0 [ 181.511193][ T7232] skb_clone+0x190/0x3f0 [ 181.511215][ T7232] netlink_deliver_tap+0xabd/0xd30 [ 181.511243][ T7232] netlink_unicast+0x5df/0x7f0 [ 181.511269][ T7232] ? __pfx_netlink_unicast+0x10/0x10 [ 181.511300][ T7232] netlink_sendmsg+0x8d1/0xdd0 [ 181.511327][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.511359][ T7232] ____sys_sendmsg+0xa95/0xc70 [ 181.511385][ T7232] ? copy_msghdr_from_user+0x10a/0x160 [ 181.511406][ T7232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.511443][ T7232] ___sys_sendmsg+0x134/0x1d0 [ 181.511465][ T7232] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.511517][ T7232] __sys_sendmsg+0x16d/0x220 [ 181.511537][ T7232] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.511566][ T7232] ? rcu_is_watching+0x12/0xc0 [ 181.511593][ T7232] do_syscall_64+0xcd/0x260 [ 181.511618][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.511634][ T7232] RIP: 0033:0x7f838c58e169 [ 181.511647][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.511663][ T7232] RSP: 002b:00007f838d3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.511679][ T7232] RAX: ffffffffffffffda RBX: 00007f838c7b5fa0 RCX: 00007f838c58e169 [ 181.511690][ T7232] RDX: 0000000000048040 RSI: 0000200000007580 RDI: 0000000000000003 [ 181.511701][ T7232] RBP: 00007f838d3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.511711][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.511721][ T7232] R13: 0000000000000000 R14: 00007f838c7b5fa0 R15: 00007ffc2081e668 [ 181.511744][ T7232] [ 182.257053][ T30] audit: type=1400 audit(1744790673.223:437): avc: denied { create } for pid=7236 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.208131][ T30] audit: type=1400 audit(1744790674.173:438): avc: denied { create } for pid=7251 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.295080][ T30] audit: type=1400 audit(1744790674.213:439): avc: denied { setopt } for pid=7251 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.325721][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 185.479797][ T4239] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.709713][ T4239] usb 3-1: Using ep0 maxpacket: 8 [ 186.453252][ T4239] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.607953][ T4239] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.671247][ T4239] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.713323][ T4239] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.723526][ T30] audit: type=1400 audit(1744790677.693:440): avc: denied { write } for pid=7272 comm="syz.0.362" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 186.749770][ T4239] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.749796][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.760747][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.791549][ T7273] FAULT_INJECTION: forcing a failure. [ 186.791549][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 186.820157][ T7275] batadv_slave_0: entered promiscuous mode [ 186.826580][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.0.362 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 186.826602][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.826613][ T7273] Call Trace: [ 186.826618][ T7273] [ 186.826625][ T7273] dump_stack_lvl+0x16c/0x1f0 [ 186.826652][ T7273] should_fail_ex+0x512/0x640 [ 186.826670][ T7273] ? fs_reclaim_acquire+0xae/0x150 [ 186.826700][ T7273] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 186.826724][ T7273] should_failslab+0xc2/0x120 [ 186.826742][ T7273] __kmalloc_noprof+0xd2/0x510 [ 186.826764][ T7273] tomoyo_realpath_from_path+0xc2/0x6e0 [ 186.826791][ T7273] ? tomoyo_profile+0x47/0x60 [ 186.826809][ T7273] tomoyo_path_number_perm+0x245/0x580 [ 186.826829][ T7273] ? tomoyo_path_number_perm+0x237/0x580 [ 186.826852][ T7273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.826872][ T7273] ? find_held_lock+0x2b/0x80 [ 186.826916][ T7273] ? find_held_lock+0x2b/0x80 [ 186.826935][ T7273] ? hook_file_ioctl_common+0x145/0x410 [ 186.826957][ T7273] ? __fget_files+0x20e/0x3c0 [ 186.826977][ T7273] security_file_ioctl+0x9b/0x240 [ 186.827001][ T7273] __x64_sys_ioctl+0xb7/0x200 [ 186.827026][ T7273] do_syscall_64+0xcd/0x260 [ 186.827051][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.827067][ T7273] RIP: 0033:0x7f838c58e169 [ 186.827081][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.827096][ T7273] RSP: 002b:00007f838d3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.827113][ T7273] RAX: ffffffffffffffda RBX: 00007f838c7b5fa0 RCX: 00007f838c58e169 [ 186.827124][ T7273] RDX: 0000200000000240 RSI: 0000000000004604 RDI: 0000000000000003 [ 186.827133][ T7273] RBP: 00007f838d3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 186.827142][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.827152][ T7273] R13: 0000000000000000 R14: 00007f838c7b5fa0 R15: 00007ffc2081e668 [ 186.827174][ T7273] [ 186.827181][ T7273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.041248][ T4239] usb 3-1: GET_CAPABILITIES returned 0 [ 187.058649][ T4239] usbtmc 3-1:16.0: can't read capabilities [ 188.159348][ T24] usb 3-1: USB disconnect, device number 10 [ 190.938264][ T30] audit: type=1400 audit(1744790681.903:441): avc: denied { accept } for pid=7317 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 191.459632][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 191.793461][ T7334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.375'. [ 192.119771][ T971] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.219603][ T5863] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.705130][ T30] audit: type=1400 audit(1744790683.203:442): avc: denied { ioctl } for pid=7343 comm="syz.4.378" path="socket:[14554]" dev="sockfs" ino=14554 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.732755][ T971] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.747978][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.768483][ T971] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.778745][ T971] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.788670][ T971] usb 4-1: Product: syz [ 192.793308][ T971] usb 4-1: Manufacturer: syz [ 192.797901][ T971] usb 4-1: SerialNumber: syz [ 192.805559][ T971] usb 4-1: config 0 descriptor?? [ 193.149581][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 193.159204][ T5863] usb 1-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 193.183583][ T5863] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.656089][ T971] usb 4-1: selecting invalid altsetting 0 [ 193.683479][ T5863] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 193.701815][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.713672][ T5863] usb 1-1: Product: syz [ 193.720883][ T5863] usb 1-1: Manufacturer: syz [ 193.734517][ T5863] usb 1-1: SerialNumber: syz [ 193.786689][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.793009][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.812754][ T5863] usb 1-1: config 0 descriptor?? [ 193.830886][ T971] usb 4-1: USB disconnect, device number 7 [ 196.876522][ T7380] FAULT_INJECTION: forcing a failure. [ 196.876522][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 196.889627][ T7380] CPU: 1 UID: 0 PID: 7380 Comm: syz.4.386 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 196.889649][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.889659][ T7380] Call Trace: [ 196.889664][ T7380] [ 196.889671][ T7380] dump_stack_lvl+0x16c/0x1f0 [ 196.889698][ T7380] should_fail_ex+0x512/0x640 [ 196.889716][ T7380] ? fs_reclaim_acquire+0xae/0x150 [ 196.889740][ T7380] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 196.889762][ T7380] should_failslab+0xc2/0x120 [ 196.889785][ T7380] __kmalloc_noprof+0xd2/0x510 [ 196.889805][ T7380] tomoyo_realpath_from_path+0xc2/0x6e0 [ 196.889828][ T7380] ? tomoyo_profile+0x47/0x60 [ 196.889843][ T7380] tomoyo_path_number_perm+0x245/0x580 [ 196.889858][ T7380] ? tomoyo_path_number_perm+0x237/0x580 [ 196.889876][ T7380] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.889894][ T7380] ? find_held_lock+0x2b/0x80 [ 196.889930][ T7380] ? find_held_lock+0x2b/0x80 [ 196.889946][ T7380] ? hook_file_ioctl_common+0x145/0x410 [ 196.889965][ T7380] ? __fget_files+0x20e/0x3c0 [ 196.889982][ T7380] security_file_ioctl+0x9b/0x240 [ 196.890002][ T7380] __x64_sys_ioctl+0xb7/0x200 [ 196.890023][ T7380] do_syscall_64+0xcd/0x260 [ 196.890043][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.890057][ T7380] RIP: 0033:0x7f934258e169 [ 196.890068][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.890082][ T7380] RSP: 002b:00007f93434cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.890095][ T7380] RAX: ffffffffffffffda RBX: 00007f93427b5fa0 RCX: 00007f934258e169 [ 196.890105][ T7380] RDX: 00002000000011c0 RSI: 0000000080045626 RDI: 0000000000000003 [ 196.890114][ T7380] RBP: 00007f93434cf090 R08: 0000000000000000 R09: 0000000000000000 [ 196.890123][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.890131][ T7380] R13: 0000000000000000 R14: 00007f93427b5fa0 R15: 00007ffc343c91e8 [ 196.890152][ T7380] [ 196.890157][ T7380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.227085][ T971] usb 1-1: USB disconnect, device number 11 [ 198.119751][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 198.302789][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.323757][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.480608][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.619587][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 198.639610][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.757614][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.757906][ T971] libceph: connect (1)[c::]:6789 error -101 [ 198.856258][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.879601][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 198.968128][ T24] usb 5-1: Product: syz [ 199.072779][ T24] usb 5-1: Manufacturer: syz [ 199.087629][ T24] usb 5-1: SerialNumber: syz [ 199.537401][ T10] libceph: connect (1)[c::]:6789 error -101 [ 199.546802][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 199.559041][ T7401] ceph: No mds server is up or the cluster is laggy [ 199.655328][ T7386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.129800][ T4239] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.400288][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 200.421747][ T7393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.483180][ T4239] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.723161][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.768672][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.943862][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.031117][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.208638][ T4239] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.241095][ T10] libceph: connect (1)[c::]:6789 error -101 [ 201.335920][ T7422] ceph: No mds server is up or the cluster is laggy [ 201.384072][ T4239] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.502046][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.996889][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 202.149123][ T4239] usb 4-1: GET_CAPABILITIES returned 0 [ 202.265563][ T4239] usbtmc 4-1:16.0: can't read capabilities [ 202.409105][ T5820] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 202.409653][ T5820] Bluetooth: hci4: connection err: -111 [ 203.656041][ T10] usb 4-1: USB disconnect, device number 8 [ 203.717180][ T24] cdc_ncm 5-1:1.0: bind() failure [ 203.744630][ T30] audit: type=1400 audit(1744790694.693:443): avc: denied { write } for pid=7443 comm="syz.0.401" path="socket:[14145]" dev="sockfs" ino=14145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.889646][ T24] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 203.908504][ T24] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 204.026641][ T24] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 204.236046][ T24] usb 5-1: USB disconnect, device number 13 [ 204.279656][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.441369][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.457657][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.473350][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.482538][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.495981][ T10] usb 4-1: Product: syz [ 204.506448][ T10] usb 4-1: Manufacturer: syz [ 204.516295][ T10] usb 4-1: SerialNumber: syz [ 204.528591][ T10] usb 4-1: config 0 descriptor?? [ 204.543327][ T10] usb 4-1: selecting invalid altsetting 0 [ 204.909613][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.249655][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 205.298750][ T24] usb 1-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 205.324558][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.391401][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.421844][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.593817][ T4239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 205.618880][ T24] usb 1-1: Product: syz [ 205.656237][ T24] usb 1-1: Manufacturer: syz [ 205.677657][ T24] usb 1-1: SerialNumber: syz [ 205.745162][ T24] usb 1-1: config 0 descriptor?? [ 205.809577][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 205.822156][ T4239] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 205.843234][ T4239] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.869637][ T4239] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.885986][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.907765][ T4239] usb 2-1: Product: syz [ 205.917101][ T4239] usb 2-1: Manufacturer: syz [ 205.933242][ T4239] usb 2-1: SerialNumber: syz [ 207.225406][ T4239] usb 2-1: config 0 descriptor?? [ 207.245144][ T4239] usb 2-1: can't set config #0, error -71 [ 207.333314][ T24] usb 4-1: USB disconnect, device number 9 [ 207.679970][ T4239] usb 2-1: USB disconnect, device number 12 [ 208.867724][ T10] usb 1-1: USB disconnect, device number 12 [ 210.298106][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.504062][ T7522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.074563][ T7522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.192998][ T7538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7538 comm=syz.3.420 [ 211.247095][ T7538] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 212.598959][ T7562] FAULT_INJECTION: forcing a failure. [ 212.598959][ T7562] name failslab, interval 1, probability 0, space 0, times 0 [ 212.611673][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.1.427 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 212.611696][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.611706][ T7562] Call Trace: [ 212.611714][ T7562] [ 212.611721][ T7562] dump_stack_lvl+0x16c/0x1f0 [ 212.611748][ T7562] should_fail_ex+0x512/0x640 [ 212.611765][ T7562] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 212.611786][ T7562] should_failslab+0xc2/0x120 [ 212.611805][ T7562] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 212.611823][ T7562] ? __d_alloc+0x31/0xaa0 [ 212.611844][ T7562] __d_alloc+0x31/0xaa0 [ 212.611866][ T7562] path_from_stashed+0x500/0xb00 [ 212.611888][ T7562] ? __pfx_path_from_stashed+0x10/0x10 [ 212.611904][ T7562] ? task_sid_obj+0x122/0x2e0 [ 212.611922][ T7562] ? preempt_schedule_thunk+0x16/0x30 [ 212.611943][ T7562] open_namespace+0x8d/0x190 [ 212.611960][ T7562] ? __pfx_open_namespace+0x10/0x10 [ 212.611982][ T7562] pidfd_ioctl+0xbdb/0x2520 [ 212.612007][ T7562] ? __pfx_pidfd_ioctl+0x10/0x10 [ 212.612036][ T7562] ? selinux_file_ioctl+0x180/0x270 [ 212.612060][ T7562] ? selinux_file_ioctl+0xb4/0x270 [ 212.612085][ T7562] ? __pfx_pidfd_ioctl+0x10/0x10 [ 212.612109][ T7562] __x64_sys_ioctl+0x190/0x200 [ 212.612134][ T7562] do_syscall_64+0xcd/0x260 [ 212.612158][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.612174][ T7562] RIP: 0033:0x7fa0b038e169 [ 212.612188][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.612203][ T7562] RSP: 002b:00007fa0b11b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.612220][ T7562] RAX: ffffffffffffffda RBX: 00007fa0b05b6160 RCX: 00007fa0b038e169 [ 212.612230][ T7562] RDX: 0000000000000000 RSI: 000000000000ff04 RDI: 0000000000000005 [ 212.612240][ T7562] RBP: 00007fa0b11b4090 R08: 0000000000000000 R09: 0000000000000000 [ 212.612250][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.612259][ T7562] R13: 0000000000000000 R14: 00007fa0b05b6160 R15: 00007fffd0fd66e8 [ 212.612287][ T7562] [ 216.910887][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 216.937777][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 216.961559][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 217.549068][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 217.573775][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 217.584914][ T7607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 218.109580][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.475156][ T24] usb 5-1: config 27 has an invalid descriptor of length 103, skipping remainder of the config [ 218.787616][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 218.814469][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.921011][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.120722][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 219.135483][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 219.242088][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.250668][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.530136][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 219.669443][ T971] usb 5-1: USB disconnect, device number 14 [ 219.840651][ T7655] ceph: No mds server is up or the cluster is laggy [ 220.385710][ T10] libceph: connect (1)[c::]:6789 error -101 [ 220.393343][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 221.300385][ T7686] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 223.282925][ T7710] ip6gre1: entered allmulticast mode [ 223.604572][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 224.100643][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 224.959926][ T971] libceph: connect (1)[c::]:6789 error -101 [ 224.969757][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 225.154279][ T7742] nbd: must specify an index to disconnect [ 225.239972][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 225.247202][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 225.412644][ T7734] ceph: No mds server is up or the cluster is laggy [ 226.062523][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 226.068598][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 227.765634][ T30] audit: type=1400 audit(1744790718.733:444): avc: denied { mounton } for pid=7760 comm="syz.0.474" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 227.789305][ T7761] virtio-fs: tag not found [ 227.899588][ T4239] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 227.916557][ T30] audit: type=1400 audit(1744790718.883:445): avc: denied { connect } for pid=7764 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.680448][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 228.723743][ T4239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.807758][ T4239] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 228.911857][ T4239] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.961154][ T4239] usb 4-1: config 1 interface 0 has no altsetting 0 [ 228.980269][ T4239] usb 4-1: string descriptor 0 read error: -22 [ 229.042200][ T4239] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.086722][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.320103][ T7755] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.378765][ T30] audit: type=1326 audit(1744790720.343:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.434866][ T30] audit: type=1326 audit(1744790720.343:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.458718][ T30] audit: type=1326 audit(1744790720.343:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.483203][ T30] audit: type=1326 audit(1744790720.343:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.507246][ T30] audit: type=1326 audit(1744790720.343:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.642174][ T30] audit: type=1326 audit(1744790720.343:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.669660][ T4239] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 229.670055][ T30] audit: type=1326 audit(1744790720.343:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.844407][ T971] libceph: connect (1)[c::]:6789 error -101 [ 229.883685][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 229.906828][ T5914] usb 4-1: USB disconnect, device number 10 [ 229.919658][ T30] audit: type=1326 audit(1744790720.343:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934258e169 code=0x7ffc0000 [ 229.989580][ T4239] usb 5-1: Using ep0 maxpacket: 8 [ 230.085467][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.096949][ T4239] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.106300][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.116636][ T4239] usb 5-1: config 0 descriptor?? [ 230.348071][ T7785] batadv_slave_1: entered promiscuous mode [ 230.510527][ T971] libceph: connect (1)[c::]:6789 error -101 [ 230.516615][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 230.559924][ T7789] ceph: No mds server is up or the cluster is laggy [ 230.567051][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 230.627177][ T4239] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 230.636512][ T7799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 230.718770][ T7785] team0: Port device team_slave_1 removed [ 231.293035][ T7785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.482'. [ 231.336908][ T7785] capability: warning: `syz.4.482' uses deprecated v2 capabilities in a way that may be insecure [ 231.360435][ T7817] netlink: 'syz.1.487': attribute type 21 has an invalid length. [ 232.525406][ T7784] batadv_slave_1: left promiscuous mode [ 232.598432][ T5914] usb 5-1: USB disconnect, device number 15 [ 232.863934][ T7839] 8021q: VLANs not supported on ip_vti0 [ 233.819868][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 233.827335][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 233.836786][ T7845] ceph: No mds server is up or the cluster is laggy [ 236.876102][ T7882] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 237.427143][ T4239] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 238.980045][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 238.991545][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 239.281794][ T4239] usb 4-1: Using ep0 maxpacket: 8 [ 239.312455][ T4239] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.348130][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.460124][ T4239] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.500381][ T7898] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 239.551239][ T4239] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.618770][ T4239] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.670102][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.670437][ T971] libceph: connect (1)[c::]:6789 error -101 [ 239.748759][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 239.978668][ T4239] usb 4-1: usb_control_msg returned -71 [ 239.997011][ T4239] usbtmc 4-1:16.0: can't read capabilities [ 240.021120][ T971] libceph: connect (1)[c::]:6789 error -101 [ 240.027291][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 240.066527][ T4239] usb 4-1: USB disconnect, device number 11 [ 240.247771][ T7899] ceph: No mds server is up or the cluster is laggy [ 240.841294][ T971] libceph: connect (1)[c::]:6789 error -101 [ 240.847374][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 241.262591][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 241.401141][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 241.401157][ T30] audit: type=1400 audit(1744790732.343:521): avc: denied { map } for pid=7904 comm="syz.0.510" path="socket:[15967]" dev="sockfs" ino=15967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.405124][ T7940] x_tables: unsorted underflow at hook 3 [ 241.410526][ T30] audit: type=1400 audit(1744790732.343:522): avc: denied { accept } for pid=7904 comm="syz.0.510" path="socket:[15967]" dev="sockfs" ino=15967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.459763][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.379740][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 243.619780][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.160256][ T971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.387741][ T8023] syz.2.532 (8023) used obsolete PPPIOCDETACH ioctl [ 248.509928][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 248.713526][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.909122][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.984872][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.004460][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.239993][ T971] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.249053][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.279310][ T971] usb 4-1: config 0 descriptor?? [ 249.488640][ T8028] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 249.515694][ T8028] CIFS: Unable to determine destination address [ 249.542939][ T971] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 249.571588][ T971] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 249.632545][ T971] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 249.966436][ T971] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 249.991756][ T971] microsoft 0003:045E:07DA.0003: no inputs found [ 250.007731][ T971] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 250.042127][ T971] usb 4-1: USB disconnect, device number 12 [ 250.324196][ T8040] netlink: 'syz.2.538': attribute type 11 has an invalid length. [ 250.413585][ T30] audit: type=1400 audit(1744790741.283:523): avc: denied { connect } for pid=8035 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.669671][ T30] audit: type=1400 audit(1744790741.283:524): avc: denied { read } for pid=8035 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 252.695363][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 253.385684][ T8080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.369887][ T8088] FAULT_INJECTION: forcing a failure. [ 254.369887][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 254.382507][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.0.550 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 254.382522][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.382528][ T8088] Call Trace: [ 254.382533][ T8088] [ 254.382538][ T8088] dump_stack_lvl+0x16c/0x1f0 [ 254.382564][ T8088] should_fail_ex+0x512/0x640 [ 254.382581][ T8088] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 254.382599][ T8088] should_failslab+0xc2/0x120 [ 254.382611][ T8088] __kmalloc_cache_noprof+0x6a/0x3e0 [ 254.382627][ T8088] ? __io_uring_add_tctx_node+0x132/0x500 [ 254.382643][ T8088] __io_uring_add_tctx_node+0x132/0x500 [ 254.382656][ T8088] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 254.382671][ T8088] ? __fget_files+0x20e/0x3c0 [ 254.382682][ T8088] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 254.382697][ T8088] __do_sys_io_uring_enter+0x123a/0x1630 [ 254.382716][ T8088] ? __fget_files+0x20e/0x3c0 [ 254.382725][ T8088] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 254.382743][ T8088] ? fput+0x70/0xf0 [ 254.382755][ T8088] ? ksys_write+0x1b9/0x240 [ 254.382763][ T8088] ? __pfx_ksys_write+0x10/0x10 [ 254.382771][ T8088] ? rcu_is_watching+0x12/0xc0 [ 254.382788][ T8088] do_syscall_64+0xcd/0x260 [ 254.382803][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.382813][ T8088] RIP: 0033:0x7f838c58e169 [ 254.382821][ T8088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.382831][ T8088] RSP: 002b:00007f838d386038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 254.382842][ T8088] RAX: ffffffffffffffda RBX: 00007f838c7b6160 RCX: 00007f838c58e169 [ 254.382848][ T8088] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000005 [ 254.382853][ T8088] RBP: 00007f838d386090 R08: 0000000000000000 R09: 0000000000000000 [ 254.382859][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.382865][ T8088] R13: 0000000000000000 R14: 00007f838c7b6160 R15: 00007ffc2081e668 [ 254.382877][ T8088] [ 255.409664][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.415966][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.197181][ T8093] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 257.233012][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.475164][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.482222][ T8093] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 257.495764][ T8093] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 257.659650][ T30] audit: type=1400 audit(1744790748.603:525): avc: denied { getopt } for pid=8112 comm="syz.0.557" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.740569][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.558'. [ 258.539826][ T30] audit: type=1400 audit(1744790748.893:526): avc: denied { write } for pid=8116 comm="syz.4.558" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 263.800222][ T8173] FAULT_INJECTION: forcing a failure. [ 263.800222][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.813824][ T8173] CPU: 0 UID: 0 PID: 8173 Comm: syz.1.570 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 263.813838][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.813845][ T8173] Call Trace: [ 263.813849][ T8173] [ 263.813853][ T8173] dump_stack_lvl+0x16c/0x1f0 [ 263.813871][ T8173] should_fail_ex+0x512/0x640 [ 263.813884][ T8173] _copy_from_user+0x2e/0xd0 [ 263.813897][ T8173] do_pagemap_scan+0xc3/0xd00 [ 263.813907][ T8173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 263.813923][ T8173] ? __pfx_do_pagemap_scan+0x10/0x10 [ 263.813934][ T8173] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 263.813951][ T8173] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 263.813968][ T8173] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.813992][ T8173] ? selinux_file_ioctl+0x180/0x270 [ 263.814006][ T8173] ? selinux_file_ioctl+0xb4/0x270 [ 263.814023][ T8173] do_pagemap_cmd+0x58/0x80 [ 263.814032][ T8173] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 263.814042][ T8173] __x64_sys_ioctl+0x190/0x200 [ 263.814057][ T8173] do_syscall_64+0xcd/0x260 [ 263.814072][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.814084][ T8173] RIP: 0033:0x7fa0b038e169 [ 263.814097][ T8173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.814112][ T8173] RSP: 002b:00007fa0b11f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.814128][ T8173] RAX: ffffffffffffffda RBX: 00007fa0b05b5fa0 RCX: 00007fa0b038e169 [ 263.814138][ T8173] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000004 [ 263.814144][ T8173] RBP: 00007fa0b11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 263.814150][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.814155][ T8173] R13: 0000000000000000 R14: 00007fa0b05b5fa0 R15: 00007fffd0fd66e8 [ 263.814169][ T8173] [ 264.006018][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.171003][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 264.476461][ T10] usb 5-1: config 0 has an invalid interface number: 233 but max is 0 [ 264.486267][ T10] usb 5-1: config 0 has no interface number 0 [ 264.496379][ T10] usb 5-1: config 0 interface 233 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.511450][ T10] usb 5-1: config 0 interface 233 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.523752][ T10] usb 5-1: config 0 interface 233 has no altsetting 0 [ 264.535811][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 264.577344][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.597507][ T10] usb 5-1: config 0 descriptor?? [ 264.609873][ T8175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.092581][ T8199] tmpfs: Bad value for 'mpol' [ 265.659671][ T4239] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 265.871421][ T4239] usb 1-1: config 168 has an invalid descriptor of length 152, skipping remainder of the config [ 265.882108][ T4239] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 265.893554][ T4239] usb 1-1: config 168 has an invalid descriptor of length 152, skipping remainder of the config [ 265.907730][ T4239] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 265.921447][ T4239] usb 1-1: string descriptor 0 read error: -22 [ 265.927893][ T4239] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.937405][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=231 [ 266.326428][ T10] usbhid 5-1:0.233: can't add hid device: -71 [ 266.423761][ T10] usbhid 5-1:0.233: probe with driver usbhid failed with error -71 [ 266.578670][ T30] audit: type=1400 audit(1744790757.543:527): avc: denied { setopt } for pid=8197 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.605084][ T10] usb 5-1: USB disconnect, device number 17 [ 266.611794][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 266.806071][ T4239] usb 1-1: USB disconnect, device number 14 [ 268.509406][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 268.529647][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 268.541774][ T10] libceph: connect (1)[c::]:6789 error -101 [ 268.541831][ T4239] libceph: connect (1)[c::]:6789 error -101 [ 268.548800][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 268.573178][ T4239] libceph: mon0 (1)[c::]:6789 connect error [ 269.008288][ T10] libceph: connect (1)[c::]:6789 error -101 [ 270.222323][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 270.567880][ T8241] ceph: No mds server is up or the cluster is laggy [ 270.575260][ T8238] ceph: No mds server is up or the cluster is laggy [ 270.602830][ T4239] libceph: connect (1)[c::]:6789 error -101 [ 270.609273][ T4239] libceph: mon0 (1)[c::]:6789 connect error [ 270.729930][ T10] libceph: connect (1)[c::]:6789 error -101 [ 270.746146][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 270.939664][ T30] audit: type=1400 audit(1744790761.903:528): avc: denied { shutdown } for pid=8266 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.330642][ T8277] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 273.337094][ T30] audit: type=1400 audit(1744790763.903:529): avc: denied { bind } for pid=8294 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.441083][ T30] audit: type=1400 audit(1744790763.903:530): avc: denied { setopt } for pid=8294 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.476666][ T30] audit: type=1400 audit(1744790763.903:531): avc: denied { read } for pid=8294 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.908234][ T8322] FAULT_INJECTION: forcing a failure. [ 273.908234][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.482677][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.3.609 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 274.482703][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.482713][ T8322] Call Trace: [ 274.482718][ T8322] [ 274.482724][ T8322] dump_stack_lvl+0x16c/0x1f0 [ 274.482751][ T8322] should_fail_ex+0x512/0x640 [ 274.482771][ T8322] _copy_from_user+0x2e/0xd0 [ 274.482789][ T8322] kstrtouint_from_user+0xd6/0x1d0 [ 274.482811][ T8322] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 274.482831][ T8322] ? __lock_acquire+0xaa4/0x1ba0 [ 274.482856][ T8322] proc_fail_nth_write+0x83/0x250 [ 274.482882][ T8322] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.482909][ T8322] vfs_write+0x25c/0x1180 [ 274.482918][ T8322] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.482936][ T8322] ? __pfx___mutex_lock+0x10/0x10 [ 274.482951][ T8322] ? __pfx_vfs_write+0x10/0x10 [ 274.482963][ T8322] ? __fget_files+0x20e/0x3c0 [ 274.482977][ T8322] ksys_write+0x12a/0x240 [ 274.482986][ T8322] ? __pfx_ksys_write+0x10/0x10 [ 274.482999][ T8322] do_syscall_64+0xcd/0x260 [ 274.483015][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.483025][ T8322] RIP: 0033:0x7ffbf1f8cc1f [ 274.483034][ T8322] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 274.483044][ T8322] RSP: 002b:00007ffbf2d5a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 274.483053][ T8322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffbf1f8cc1f [ 274.483060][ T8322] RDX: 0000000000000001 RSI: 00007ffbf2d5a0a0 RDI: 0000000000000006 [ 274.483065][ T8322] RBP: 00007ffbf2d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 274.483071][ T8322] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 274.483077][ T8322] R13: 0000000000000000 R14: 00007ffbf21b6080 R15: 00007ffd75acf1c8 [ 274.483090][ T8322] [ 274.676306][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.795287][ T8332] x_tables: duplicate underflow at hook 3 [ 274.805709][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 275.019169][ T8334] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 275.026219][ T8334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.053014][ T8334] vhci_hcd vhci_hcd.0: Device attached [ 275.066882][ T30] audit: type=1400 audit(1744790766.033:532): avc: denied { map } for pid=8333 comm="syz.4.611" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.100144][ T30] audit: type=1400 audit(1744790766.033:533): avc: denied { execute } for pid=8333 comm="syz.4.611" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.234946][ T5867] vhci_hcd: vhci_device speed not set [ 275.454052][ T5867] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 275.536462][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.619'. [ 275.605973][ T8337] vhci_hcd: connection reset by peer [ 275.731259][ T7476] vhci_hcd: stop threads [ 275.770572][ T7476] vhci_hcd: release socket [ 275.774969][ T30] audit: type=1326 audit(1744790766.723:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.0.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838c58e169 code=0x0 [ 275.789921][ T7476] vhci_hcd: disconnect device [ 275.797683][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.808059][ T8359] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.574016][ T8366] CIFS: Unable to determine destination address [ 277.071990][ T8381] can: request_module (can-proto-0) failed. [ 278.916137][ T30] audit: type=1400 audit(1744790769.103:535): avc: denied { setopt } for pid=8395 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.267606][ T30] audit: type=1400 audit(1744790770.233:536): avc: denied { bind } for pid=8407 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 280.307408][ T30] audit: type=1326 audit(1744790771.273:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.1.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0b038e169 code=0x0 [ 280.330049][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.569635][ T5867] vhci_hcd: vhci_device speed not set [ 281.287459][ T8439] loop1: detected capacity change from 0 to 524287999 [ 281.348127][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.387974][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.421776][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.682733][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.731289][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.739289][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 281.940165][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.110185][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.118205][ T8439] ldm_validate_partition_table(): Disk read failed. [ 282.148478][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.159958][ T8439] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.206705][ T8439] Dev loop1: unable to read RDB block 0 [ 282.213755][ T8439] loop1: unable to read partition table [ 282.249958][ T8439] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 282.470029][ T8456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8456 comm=syz.4.648 [ 282.514175][ T30] audit: type=1400 audit(1744790773.483:538): avc: denied { ioctl } for pid=8446 comm="syz.0.644" path="socket:[18958]" dev="sockfs" ino=18958 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 282.592803][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 282.608993][ T30] audit: type=1400 audit(1744790773.563:539): avc: denied { getopt } for pid=8457 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.628537][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.993978][ T30] audit: type=1400 audit(1744790773.943:540): avc: denied { nlmsg_read } for pid=8457 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 283.068692][ T30] audit: type=1400 audit(1744790773.963:541): avc: denied { shutdown } for pid=8457 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.119614][ T30] audit: type=1400 audit(1744790773.993:542): avc: denied { ioctl } for pid=8457 comm="syz.1.647" path="socket:[18017]" dev="sockfs" ino=18017 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 283.144412][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.343391][ T5865] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 283.901912][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.411269][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.421984][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.431104][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.453184][ T5865] usb 2-1: config 0 descriptor?? [ 284.551666][ T5865] hub 2-1:0.0: USB hub found [ 284.686859][ T5865] hub 2-1:0.0: 1 port detected [ 285.260581][ T8500] capability: warning: `syz.2.659' uses 32-bit capabilities (legacy support in use) [ 285.630406][ T5865] hub 2-1:0.0: activate --> -90 [ 285.729723][ T30] audit: type=1400 audit(1744790776.703:543): avc: denied { connect } for pid=8508 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 285.924532][ T5865] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 286.026051][ T5867] usb 2-1: USB disconnect, device number 13 [ 286.551431][ T30] audit: type=1400 audit(1744790777.523:544): avc: denied { listen } for pid=8515 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 286.605853][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 286.631619][ T30] audit: type=1400 audit(1744790777.523:545): avc: denied { ioctl } for pid=8515 comm="syz.2.663" path="socket:[18067]" dev="sockfs" ino=18067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 286.840794][ T30] audit: type=1400 audit(1744790777.733:546): avc: denied { read } for pid=8521 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.440526][ T30] audit: type=1400 audit(1744790778.463:547): avc: denied { setopt } for pid=8521 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.772434][ T30] audit: type=1400 audit(1744790780.743:548): avc: denied { read } for pid=8539 comm="syz.0.671" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 289.799827][ T8542] autofs4:pid:8542:validate_dev_ioctl: invalid path supplied for cmd(0xc0189379) [ 290.332323][ T30] audit: type=1400 audit(1744790780.773:549): avc: denied { open } for pid=8539 comm="syz.0.671" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.381228][ T30] audit: type=1400 audit(1744790780.773:550): avc: denied { ioctl } for pid=8539 comm="syz.0.671" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.429698][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 290.497445][ T8547] dlm: non-version read from control device 0 [ 290.619681][ T5865] usb 3-1: device descriptor read/64, error -71 [ 290.636164][ T4239] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 290.799562][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 290.872634][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.230660][ T4239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.241593][ T4239] usb 4-1: config 0 has no interfaces? [ 291.247078][ T4239] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.256123][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.266210][ T4239] usb 4-1: config 0 descriptor?? [ 291.279576][ T5865] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 291.369569][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 291.409588][ T5865] usb 3-1: device descriptor read/64, error -71 [ 291.475850][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.489743][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.498861][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.508562][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.596768][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 291.605788][ T5865] usb usb3-port1: attempt power cycle [ 291.619118][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.630268][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.643784][ T24] usb 5-1: Product: syz [ 291.647938][ T24] usb 5-1: Manufacturer: syz [ 291.654826][ T24] usb 5-1: SerialNumber: syz [ 291.662817][ T24] usb 5-1: config 0 descriptor?? [ 291.679386][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.690088][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.894804][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.353780][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.390345][ T5865] usb 3-1: device descriptor read/8, error -71 [ 292.829585][ T5865] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 292.879847][ T5865] usb 3-1: device descriptor read/8, error -71 [ 292.996199][ T5865] usb usb3-port1: unable to enumerate USB device [ 293.033712][ T5867] usb 4-1: USB disconnect, device number 13 [ 294.028226][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.036894][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.299725][ T30] audit: type=1400 audit(1744790785.243:551): avc: denied { listen } for pid=8554 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.544547][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 294.570008][ T24] usb 5-1: USB disconnect, device number 18 [ 294.670068][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 295.429616][ T971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 295.479567][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 295.485855][ T5867] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 295.494247][ T5867] usb 4-1: config 0 has no interface number 0 [ 295.500575][ T5867] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=39.7d [ 295.509946][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.519260][ T5867] usb 4-1: config 0 descriptor?? [ 295.525594][ T5867] keyspan 4-1:0.193: Keyspan - (without firmware) converter detected [ 295.625110][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 295.679737][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 295.912925][ T971] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.922843][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.932904][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.944426][ T971] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.946919][ T5863] usb 4-1: USB disconnect, device number 14 [ 295.957860][ T971] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.972956][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.981442][ T5863] keyspan 4-1:0.193: device disconnected [ 296.034233][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 296.048972][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.068172][ T24] usb 2-1: config 0 descriptor?? [ 296.216076][ T971] usb 3-1: GET_CAPABILITIES returned 0 [ 296.222119][ T971] usbtmc 3-1:16.0: can't read capabilities [ 296.509923][ T24] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 296.526201][ T8592] ip6t_rpfilter: unknown options [ 296.531596][ T24] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 296.539902][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 296.969900][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 296.976737][ T24] [drm] Initialized udl on minor 2 [ 296.987750][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.998220][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 297.008248][ T5863] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 297.023624][ T24] usb 2-1: USB disconnect, device number 14 [ 297.031007][ T5863] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 297.389627][ T5863] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 297.430650][ T971] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 297.589693][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 297.597502][ T5863] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 297.605753][ T5863] usb 4-1: config 0 has no interface number 0 [ 297.612106][ T5863] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 298.079327][ T5863] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 298.094557][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 298.095460][ T5863] usb 4-1: config 0 interface 41 has no altsetting 0 [ 298.111643][ T5863] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 298.112401][ T5867] usb 3-1: USB disconnect, device number 15 [ 298.120904][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.135811][ T5863] usb 4-1: Product: syz [ 298.142148][ T5863] usb 4-1: Manufacturer: syz [ 298.146989][ T5863] usb 4-1: SerialNumber: syz [ 298.147158][ T971] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 298.166805][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.176830][ T5863] usb 4-1: config 0 descriptor?? [ 298.177878][ T971] usb 5-1: config 0 descriptor?? [ 298.187485][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.191375][ T971] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.194908][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.238339][ T30] audit: type=1400 audit(1744790789.203:552): avc: denied { accept } for pid=8614 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 299.059038][ T971] gspca_nw80x: reg_w err -110 [ 299.109801][ T971] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 299.271063][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.287544][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.403382][ T30] audit: type=1400 audit(1744790790.623:553): avc: denied { connect } for pid=8623 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.480910][ T5914] usb 5-1: USB disconnect, device number 19 [ 300.626701][ T5863] Error reading MAC address [ 300.734082][ T5863] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 301.349953][ T5863] usb 4-1: USB disconnect, device number 15 [ 302.569691][ T5863] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 302.778723][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 303.270228][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 303.291882][ T5863] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 303.456088][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.551301][ T5863] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 303.561151][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.573488][ T5863] usb 2-1: Product: syz [ 303.577663][ T5863] usb 2-1: Manufacturer: syz [ 303.649289][ T5863] usb 2-1: SerialNumber: syz [ 303.695882][ T5863] usb 2-1: config 0 descriptor?? [ 303.929562][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 304.089555][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 304.117849][ T5914] usb 5-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 304.249221][ T5914] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.300595][ T5914] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 304.333721][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.363939][ T5863] usb 2-1: can't set config #0, error -71 [ 304.397193][ T5914] usb 5-1: Product: syz [ 304.412907][ T5914] usb 5-1: Manufacturer: syz [ 304.428787][ T5914] usb 5-1: SerialNumber: syz [ 304.437927][ T5914] usb 5-1: config 0 descriptor?? [ 304.446226][ T5863] usb 2-1: USB disconnect, device number 15 [ 304.958751][ T30] audit: type=1400 audit(1744790795.923:554): avc: denied { bind } for pid=8675 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.618204][ T8691] process 'syz.0.712' launched '/dev/fd/4' with NULL argv: empty string added [ 305.652116][ T30] audit: type=1400 audit(1744790796.603:555): avc: denied { execute_no_trans } for pid=8687 comm="syz.0.712" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.707470][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 306.033199][ T30] audit: type=1400 audit(1744790797.003:556): avc: denied { getopt } for pid=8693 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.117687][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 306.130624][ T5867] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 306.303226][ T5867] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.324091][ T5867] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.374458][ T24] usb 5-1: USB disconnect, device number 20 [ 306.407593][ T5867] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.442202][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.480476][ T8696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 306.494932][ T5867] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.637218][ T8708] netlink: 168 bytes leftover after parsing attributes in process `syz.4.718'. [ 307.715187][ T5867] usb 1-1: USB disconnect, device number 15 [ 308.810315][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 308.816525][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 309.048923][ T30] audit: type=1400 audit(1744790800.013:557): avc: denied { write } for pid=8737 comm="syz.4.725" path="socket:[19745]" dev="sockfs" ino=19745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 309.214734][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 309.228170][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 309.406723][ T8731] ceph: No mds server is up or the cluster is laggy [ 309.541360][ T8745] fuse: Bad value for 'fd' [ 309.600755][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 309.640729][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'. [ 309.698921][ T8744] geneve2: entered promiscuous mode [ 309.712202][ T8744] geneve2: entered allmulticast mode [ 310.002526][ T30] audit: type=1400 audit(1744790800.973:558): avc: denied { mount } for pid=8743 comm="syz.0.727" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 310.043901][ T30] audit: type=1400 audit(1744790800.973:559): avc: denied { mount } for pid=8761 comm="syz.3.731" name="/" dev="autofs" ino=20711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 310.081635][ T5867] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 310.146532][ T8767] No control pipe specified [ 310.273159][ T30] audit: type=1400 audit(1744790801.243:560): avc: denied { setattr } for pid=8770 comm="syz.0.734" name="" dev="pipefs" ino=20721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 310.693652][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.704290][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.720978][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.731687][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.845175][ T30] audit: type=1400 audit(1744790801.813:561): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 310.994754][ T5867] usb 3-1: usb_control_msg returned -32 [ 311.012739][ T5867] usbtmc 3-1:16.0: can't read capabilities [ 311.540516][ T8788] 9pnet_fd: Insufficient options for proto=fd [ 312.450912][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 312.457090][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 312.730827][ T971] libceph: connect (1)[c::]:6789 error -101 [ 312.736917][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 312.749102][ T8805] 9pnet_fd: Insufficient options for proto=fd [ 313.003760][ T8794] ceph: No mds server is up or the cluster is laggy [ 313.832161][ T5867] usb 3-1: USB disconnect, device number 16 [ 314.221056][ T971] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 314.502438][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.542661][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.585052][ T971] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 314.615116][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.635828][ T30] audit: type=1400 audit(1744790805.603:562): avc: denied { create } for pid=8824 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.656615][ T971] usb 2-1: config 0 descriptor?? [ 314.764292][ T971] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 314.777308][ T30] audit: type=1400 audit(1744790805.703:563): avc: denied { setopt } for pid=8824 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.857537][ T30] audit: type=1400 audit(1744790805.713:564): avc: denied { bind } for pid=8824 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.876669][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.907570][ T30] audit: type=1400 audit(1744790805.713:565): avc: denied { read } for pid=8824 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.926629][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.982349][ T971] usb 2-1: USB disconnect, device number 16 [ 315.016641][ T30] audit: type=1400 audit(1744790805.773:566): avc: denied { write } for pid=8824 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.966341][ T30] audit: type=1400 audit(1744790806.933:567): avc: denied { execute } for pid=8835 comm="syz.4.751" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 316.031902][ T8839] Invalid source name [ 316.418686][ T8854] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 316.431435][ T30] audit: type=1400 audit(1744790807.383:568): avc: denied { mounton } for pid=8853 comm="syz.4.758" path="/144/bus" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 316.465322][ T8854] syz.4.758: attempt to access beyond end of device [ 316.465322][ T8854] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 316.496215][ T8854] exFAT-fs (nbd4): unable to read boot sector [ 316.502562][ T30] audit: type=1400 audit(1744790807.403:569): avc: denied { ioctl } for pid=8849 comm="syz.0.756" path="socket:[20820]" dev="sockfs" ino=20820 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.722283][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.732089][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.738451][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.756006][ T8854] exFAT-fs (nbd4): failed to read boot sector [ 316.767157][ T8854] exFAT-fs (nbd4): failed to recognize exfat type [ 316.905951][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.929022][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.956693][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.977403][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.021224][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.033304][ T24] usb 2-1: Product: syz [ 317.038419][ T24] usb 2-1: Manufacturer: syz [ 317.044876][ T24] usb 2-1: SerialNumber: syz [ 317.426174][ T24] usb 2-1: 0:2 : does not exist [ 317.438796][ T24] usb 2-1: USB disconnect, device number 17 [ 318.023215][ T971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.284914][ T971] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 318.467467][ T971] usb 5-1: config 0 has no interface number 0 [ 318.479198][ T971] usb 5-1: config 0 interface 129 has no altsetting 0 [ 318.765032][ T8881] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 318.772810][ T8881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'. [ 318.791340][ T971] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 318.804935][ T8881] team0: Port device geneve0 added [ 318.820991][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.829807][ T971] usb 5-1: Product: syz [ 318.834047][ T971] usb 5-1: Manufacturer: syz [ 318.838636][ T971] usb 5-1: SerialNumber: syz [ 318.916417][ T971] usb 5-1: config 0 descriptor?? [ 319.998932][ T971] usb 5-1: Firmware: major: 107, minor: 86, hardware type: RZUSB (3) [ 320.209093][ T971] usb 5-1: failed to fetch extended address, random address set [ 320.382095][ T971] usb 5-1: USB disconnect, device number 21 [ 320.949581][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 321.041259][ T30] audit: type=1400 audit(1744790812.013:570): avc: denied { create } for pid=8911 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.121340][ T5914] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 321.139280][ T5914] usb 2-1: config 0 has no interface number 0 [ 321.152188][ T5914] usb 2-1: too many endpoints for config 0 interface 76 altsetting 133: 31, using maximum allowed: 30 [ 321.197140][ T5914] usb 2-1: config 0 interface 76 altsetting 133 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.329104][ T5914] usb 2-1: config 0 interface 76 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 321.344917][ T5914] usb 2-1: config 0 interface 76 has no altsetting 0 [ 321.353788][ T5914] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 321.490584][ T971] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 321.537064][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=244, SerialNumber=0 [ 321.692220][ T5914] usb 2-1: Product: syz [ 321.935777][ T5914] usb 2-1: config 0 descriptor?? [ 321.951209][ T971] usb 5-1: config 7 has an invalid interface number: 192 but max is 0 [ 321.979022][ T971] usb 5-1: config 7 has no interface number 0 [ 321.996049][ T5914] usbtouchscreen 2-1:0.76: probe with driver usbtouchscreen failed with error -12 [ 322.025970][ T971] usb 5-1: config 7 interface 192 has no altsetting 0 [ 322.168822][ T971] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 322.185093][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.199989][ T8923] CIFS mount error: No usable UNC path provided in device string! [ 322.199989][ T8923] [ 322.209513][ T971] usb 5-1: Product: syz [ 322.225378][ T971] usb 5-1: Manufacturer: syz [ 322.231456][ T971] usb 5-1: SerialNumber: syz [ 322.242853][ T5914] usb 2-1: USB disconnect, device number 18 [ 322.249527][ T8923] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 322.428546][ T5867] Process accounting resumed [ 322.560410][ T4239] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 322.644603][ T971] usb 5-1: USB disconnect, device number 22 [ 322.721752][ T4239] usb 4-1: config 2 has no interfaces? [ 322.732160][ T4239] usb 4-1: New USB device found, idVendor=146b, idProduct=d19f, bcdDevice=63.50 [ 322.743829][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.752961][ T4239] usb 4-1: Product: syz [ 322.757129][ T4239] usb 4-1: Manufacturer: syz [ 322.764647][ T4239] usb 4-1: SerialNumber: syz [ 322.865064][ T5914] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 323.383956][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 323.827459][ T8952] fuse: Bad value for 'fd' [ 324.709552][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 324.859661][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 324.942255][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 325.301565][ T5914] usb 4-1: USB disconnect, device number 16 [ 325.518068][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.568760][ T30] audit: type=1400 audit(1744790816.523:571): avc: denied { read write } for pid=8969 comm="syz.3.791" name="mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 325.636326][ T24] usb 2-1: no configurations [ 325.650864][ T24] usb 2-1: can't read configurations, error -22 [ 325.661890][ T30] audit: type=1400 audit(1744790816.523:572): avc: denied { open } for pid=8969 comm="syz.3.791" path="/dev/input/mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 325.811792][ T5828] Bluetooth: hci1: unexpected event 0x04 length: 17 > 10 [ 325.811856][ T5828] Bluetooth: hci1: connection err: -111 [ 329.918063][ T30] audit: type=1400 audit(1744790820.883:573): avc: denied { getopt } for pid=8998 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 329.926474][ T8999] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.801'. [ 330.162572][ T30] audit: type=1400 audit(1744790821.133:574): avc: denied { map } for pid=9003 comm="syz.4.802" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.401628][ T9020] pimreg3: entered allmulticast mode [ 331.688258][ T30] audit: type=1400 audit(1744790822.393:575): avc: denied { connect } for pid=9015 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.210985][ T9034] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9034 comm=syz.4.808 [ 332.629440][ T9034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.699423][ T30] audit: type=1400 audit(1744790823.663:576): avc: denied { write } for pid=9032 comm="syz.2.809" path="socket:[21248]" dev="sockfs" ino=21248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.738261][ T30] audit: type=1400 audit(1744790823.703:577): avc: denied { read } for pid=9032 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.740893][ T9034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.896411][ T9034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.001239][ T9034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.083802][ T9034] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.096655][ T9034] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.108842][ T9034] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.121707][ T9034] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.315170][ T9043] raw_sendmsg: syz.4.812 forgot to set AF_INET. Fix it! [ 334.141636][ T30] audit: type=1400 audit(1744790825.113:578): avc: denied { getopt } for pid=9049 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.273361][ T9056] syz_tun: entered allmulticast mode [ 334.291599][ T9055] syz_tun: left allmulticast mode [ 334.579746][ T9063] tmpfs: Unknown parameter 'huge½always' [ 335.490860][ T9058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.043770][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 337.269733][ T24] usb 3-1: device descriptor read/64, error -71 [ 337.369556][ T5863] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 337.530588][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.949714][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 337.963449][ T5863] usb 2-1: device descriptor read/all, error -71 [ 338.019693][ T24] usb 3-1: device descriptor read/64, error -71 [ 338.141660][ T24] usb usb3-port1: attempt power cycle [ 338.162830][ T30] audit: type=1326 audit(1744790829.133:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.1.826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b038e169 code=0x0 [ 338.349918][ T30] audit: type=1400 audit(1744790829.313:580): avc: denied { ioctl } for pid=9087 comm="syz.2.828" path="socket:[21325]" dev="sockfs" ino=21325 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.402899][ T9098] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 339.442935][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 339.457320][ T9103] vlan0: entered promiscuous mode [ 339.462713][ T9103] bridge0: entered promiscuous mode [ 340.407612][ T9110] vlan2: entered promiscuous mode [ 340.412910][ T9110] bridge0: entered promiscuous mode [ 340.418237][ T9110] vlan2: entered allmulticast mode [ 340.423626][ T9110] bridge0: entered allmulticast mode [ 341.261639][ T9115] mmap: syz.1.834 (9115): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 342.409537][ T5863] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 343.513850][ T5863] usb 3-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29 [ 343.670846][ T9155] No such timeout policy "syz0" [ 344.001319][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.013211][ T30] audit: type=1400 audit(1744790834.983:581): avc: denied { connect } for pid=9148 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.027112][ T5863] usb 3-1: Product: syz [ 344.135250][ T5863] usb 3-1: Manufacturer: syz [ 344.148828][ T5863] usb 3-1: SerialNumber: syz [ 344.169187][ T5863] usb 3-1: config 0 descriptor?? [ 344.459202][ T9161] FAULT_INJECTION: forcing a failure. [ 344.459202][ T9161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.472429][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.2.839 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 344.472452][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.472460][ T9161] Call Trace: [ 344.472464][ T9161] [ 344.472468][ T9161] dump_stack_lvl+0x16c/0x1f0 [ 344.472488][ T9161] should_fail_ex+0x512/0x640 [ 344.472502][ T9161] _copy_from_user+0x2e/0xd0 [ 344.472514][ T9161] copy_mount_options+0x76/0x190 [ 344.472530][ T9161] __x64_sys_mount+0x1ac/0x310 [ 344.472542][ T9161] ? __pfx___x64_sys_mount+0x10/0x10 [ 344.472558][ T9161] do_syscall_64+0xcd/0x260 [ 344.472574][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.472584][ T9161] RIP: 0033:0x7f17dfd8e169 [ 344.472593][ T9161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.472603][ T9161] RSP: 002b:00007f17e0b27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.472613][ T9161] RAX: ffffffffffffffda RBX: 00007f17dffb6080 RCX: 00007f17dfd8e169 [ 344.472619][ T9161] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 344.472625][ T9161] RBP: 00007f17e0b27090 R08: 0000200000000340 R09: 0000000000000000 [ 344.472631][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.472637][ T9161] R13: 0000000000000000 R14: 00007f17dffb6080 R15: 00007ffdbbb2c908 [ 344.472650][ T9161] [ 344.816596][ T10] usb 3-1: USB disconnect, device number 20 [ 344.999564][ T971] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 345.541776][ T971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.566642][ T971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.591751][ T971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.618221][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.868075][ T971] usb 5-1: usb_control_msg returned -32 [ 345.907528][ T971] usbtmc 5-1:16.0: can't read capabilities [ 346.589583][ T30] audit: type=1400 audit(1744790837.543:582): avc: denied { write } for pid=9177 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 346.611651][ T10] libceph: connect (1)[c::]:6789 error -101 [ 346.617628][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 346.639285][ T9181] ceph: No mds server is up or the cluster is laggy [ 346.683625][ T9190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16153 sclass=netlink_route_socket pid=9190 comm=syz.1.851 [ 346.699863][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 346.723294][ T9189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 346.982802][ T9196] overlayfs: missing 'lowerdir' [ 347.065948][ T9197] lo speed is unknown, defaulting to 1000 [ 347.078231][ T9197] lo speed is unknown, defaulting to 1000 [ 347.090148][ T9197] lo speed is unknown, defaulting to 1000 [ 347.478303][ T9197] infiniband sz1: set down [ 347.483182][ T9197] infiniband sz1: added lo [ 347.494673][ T5863] lo speed is unknown, defaulting to 1000 [ 347.557981][ T9197] RDS/IB: sz1: added [ 347.562519][ T9197] smc: adding ib device sz1 with port count 1 [ 347.568814][ T9197] smc: ib device sz1 port 1 has pnetid [ 347.689788][ T30] audit: type=1400 audit(1744790838.613:583): avc: denied { write } for pid=9198 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.059776][ T9197] lo speed is unknown, defaulting to 1000 [ 348.147884][ T5863] lo speed is unknown, defaulting to 1000 [ 348.197468][ T9197] lo speed is unknown, defaulting to 1000 [ 348.332458][ T9197] lo speed is unknown, defaulting to 1000 [ 348.413065][ T9197] lo speed is unknown, defaulting to 1000 [ 348.493691][ T9197] lo speed is unknown, defaulting to 1000 [ 349.630242][ T4239] usb 5-1: USB disconnect, device number 23 [ 349.721798][ T9231] FAULT_INJECTION: forcing a failure. [ 349.721798][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 349.734848][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.2.863 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 349.734870][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.734878][ T9231] Call Trace: [ 349.734883][ T9231] [ 349.734888][ T9231] dump_stack_lvl+0x16c/0x1f0 [ 349.734906][ T9231] should_fail_ex+0x512/0x640 [ 349.734918][ T9231] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 349.734930][ T9231] should_failslab+0xc2/0x120 [ 349.734943][ T9231] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 349.734953][ T9231] ? __alloc_skb+0x2b2/0x380 [ 349.734967][ T9231] __alloc_skb+0x2b2/0x380 [ 349.734979][ T9231] ? __pfx___alloc_skb+0x10/0x10 [ 349.734993][ T9231] ? __asan_memset+0x23/0x50 [ 349.735009][ T9231] tipc_buf_acquire+0x26/0xe0 [ 349.735021][ T9231] tipc_msg_build+0x853/0x1150 [ 349.735034][ T9231] ? __pfx_tipc_msg_build+0x10/0x10 [ 349.735052][ T9231] tipc_send_group_bcast+0x7cc/0xa50 [ 349.735072][ T9231] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 349.735087][ T9231] ? __lock_acquire+0x5ca/0x1ba0 [ 349.735098][ T9231] ? __pfx_woken_wake_function+0x10/0x10 [ 349.735111][ T9231] ? ___sys_sendmsg+0xfe/0x1d0 [ 349.735122][ T9231] ? __sys_sendmmsg+0x200/0x420 [ 349.735134][ T9231] ? __x64_sys_sendmmsg+0x9c/0x100 [ 349.735145][ T9231] ? do_syscall_64+0xcd/0x260 [ 349.735163][ T9231] ? find_held_lock+0x2b/0x80 [ 349.735176][ T9231] ? avc_has_perm_noaudit+0x117/0x3b0 [ 349.735189][ T9231] __tipc_sendmsg+0x4ab/0x19a0 [ 349.735200][ T9231] ? avc_set_cache_threshold+0x4/0x20 [ 349.735212][ T9231] ? __pfx___tipc_sendmsg+0x10/0x10 [ 349.735221][ T9231] ? __lock_acquire+0xaa4/0x1ba0 [ 349.735241][ T9231] ? __local_bh_enable_ip+0xa4/0x120 [ 349.735257][ T9231] tipc_sendmsg+0x4f/0x70 [ 349.735267][ T9231] ____sys_sendmsg+0xa95/0xc70 [ 349.735283][ T9231] ? copy_msghdr_from_user+0x10a/0x160 [ 349.735295][ T9231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.735313][ T9231] ? __pfx__kstrtoull+0x10/0x10 [ 349.735336][ T9231] ___sys_sendmsg+0x134/0x1d0 [ 349.735349][ T9231] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.735368][ T9231] ? find_held_lock+0x2b/0x80 [ 349.735389][ T9231] __sys_sendmmsg+0x200/0x420 [ 349.735403][ T9231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 349.735420][ T9231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.735440][ T9231] ? fput+0x70/0xf0 [ 349.735452][ T9231] ? ksys_write+0x1b9/0x240 [ 349.735461][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 349.735472][ T9231] __x64_sys_sendmmsg+0x9c/0x100 [ 349.735484][ T9231] ? lockdep_hardirqs_on+0x7c/0x110 [ 349.735497][ T9231] do_syscall_64+0xcd/0x260 [ 349.735512][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.735523][ T9231] RIP: 0033:0x7f17dfd8e169 [ 349.735531][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.735541][ T9231] RSP: 002b:00007f17e0b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.735552][ T9231] RAX: ffffffffffffffda RBX: 00007f17dffb6080 RCX: 00007f17dfd8e169 [ 349.735558][ T9231] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 349.735564][ T9231] RBP: 00007f17e0b27090 R08: 0000000000000000 R09: 0000000000000000 [ 349.735570][ T9231] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.735576][ T9231] R13: 0000000000000001 R14: 00007f17dffb6080 R15: 00007ffdbbb2c908 [ 349.735588][ T9231] [ 350.077039][ T30] audit: type=1400 audit(1744790841.043:584): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.116305][ T5863] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 350.124763][ T30] audit: type=1400 audit(1744790841.043:585): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.179545][ T5864] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 350.183137][ T30] audit: type=1400 audit(1744790841.043:586): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.269521][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 350.276013][ T5863] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 350.284157][ T5863] usb 2-1: config 0 has no interface number 0 [ 350.290270][ T5863] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 350.300110][ T5863] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 350.310006][ T5863] usb 2-1: config 0 interface 41 has no altsetting 0 [ 350.328741][ T5863] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 350.337808][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.346206][ T5863] usb 2-1: Product: syz [ 350.350370][ T5863] usb 2-1: Manufacturer: syz [ 350.354933][ T5863] usb 2-1: SerialNumber: syz [ 350.364635][ T5863] usb 2-1: config 0 descriptor?? [ 350.370160][ T9224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.370332][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.385381][ T5864] usb 4-1: not running at top speed; connect to a high speed hub [ 350.394064][ T5864] usb 4-1: config 6 has an invalid interface number: 171 but max is 1 [ 350.402289][ T5864] usb 4-1: config 6 has an invalid interface number: 25 but max is 1 [ 350.410362][ T5864] usb 4-1: config 6 has no interface number 0 [ 350.416413][ T5864] usb 4-1: config 6 has no interface number 1 [ 350.422559][ T5864] usb 4-1: config 6 interface 171 altsetting 1 endpoint 0xF has an invalid bInterval 64, changing to 4 [ 350.433610][ T5864] usb 4-1: config 6 interface 171 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 350.448373][ T5864] usb 4-1: config 6 interface 25 altsetting 249 endpoint 0xE has invalid maxpacket 983, setting to 64 [ 350.459403][ T5864] usb 4-1: config 6 interface 25 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.473098][ T9224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.499565][ T5864] usb 4-1: config 6 interface 171 has no altsetting 0 [ 350.506421][ T5864] usb 4-1: config 6 interface 25 has no altsetting 0 [ 350.516398][ T5864] usb 4-1: string descriptor 0 read error: -22 [ 350.523762][ T5864] usb 4-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=45.c8 [ 350.533143][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.551944][ T5864] usb 4-1: Interface #171 referenced by multiple IADs [ 350.559428][ T5864] usb 4-1: Interface #25 referenced by multiple IADs [ 350.693604][ T9224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.701042][ T9224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.908898][ T9241] fuse: Unknown parameter 'user_i00000000000000000000' [ 351.075026][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.099067][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.137504][ T10] usb 4-1: USB disconnect, device number 17 [ 351.330088][ T5863] Error reading MAC address [ 351.795262][ T5863] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 351.805473][ T5863] usb 2-1: USB disconnect, device number 23 [ 352.586807][ T9258] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 352.622149][ T9258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.906341][ T30] audit: type=1400 audit(1744790843.873:587): avc: denied { append } for pid=9265 comm="syz.4.873" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.089640][ T10] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 354.400526][ T10] usb 2-1: device descriptor read/64, error -71 [ 354.534119][ T30] audit: type=1400 audit(1744790845.493:588): avc: denied { ioctl } for pid=9286 comm="syz.4.879" path="socket:[22540]" dev="sockfs" ino=22540 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.626307][ T9289] CIFS mount error: No usable UNC path provided in device string! [ 354.626307][ T9289] [ 354.636469][ T9289] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 354.650713][ T10] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 355.079859][ T5864] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 355.253148][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 355.303828][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.315704][ T5864] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 355.330009][ T10] usb 2-1: device descriptor read/64, error -71 [ 355.341966][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 355.402022][ T5864] usb 5-1: SerialNumber: syz [ 355.411016][ T5864] usb 5-1: config 0 descriptor?? [ 355.447381][ T10] usb usb2-port1: attempt power cycle [ 355.599730][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 355.679774][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 355.702262][ T971] usb 5-1: USB disconnect, device number 24 [ 355.749628][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 355.755973][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.766748][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.778142][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.787385][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.795967][ T5867] usb 3-1: Product: syz [ 355.800227][ T10] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 355.807783][ T5867] usb 3-1: Manufacturer: syz [ 355.812538][ T5867] usb 3-1: SerialNumber: syz [ 355.831293][ T10] usb 2-1: device descriptor read/8, error -71 [ 355.839781][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 355.846051][ T24] usb 4-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 355.858605][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.869599][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 355.878631][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.888587][ T24] usb 4-1: Product: syz [ 355.893280][ T24] usb 4-1: Manufacturer: syz [ 355.897882][ T24] usb 4-1: SerialNumber: syz [ 355.904125][ T24] usb 4-1: config 0 descriptor?? [ 356.063078][ T30] audit: type=1400 audit(1744790847.033:589): avc: denied { append } for pid=9292 comm="syz.2.880" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 356.069774][ T10] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 356.085662][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.101886][ T5867] usb 3-1: cannot find UAC_HEADER [ 356.120919][ T10] usb 2-1: device descriptor read/8, error -71 [ 356.127949][ T5867] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 356.141772][ T5867] usb 3-1: USB disconnect, device number 21 [ 356.249912][ T10] usb usb2-port1: unable to enumerate USB device [ 357.153770][ T9312] 9pnet_fd: Insufficient options for proto=fd [ 357.192118][ T30] audit: type=1400 audit(1744790848.163:590): avc: denied { write } for pid=9314 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 357.765733][ T10] libceph: connect (1)[c::]:6789 error -101 [ 357.771837][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 357.973689][ T24] usb 4-1: USB disconnect, device number 18 [ 358.029924][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 358.035992][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 358.220695][ T9322] ceph: No mds server is up or the cluster is laggy [ 358.656433][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 358.779710][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 359.096642][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 359.175784][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.625913][ T10] usb 5-1: Product: syz [ 359.633074][ T10] usb 5-1: Manufacturer: syz [ 359.639544][ T10] usb 5-1: SerialNumber: syz [ 359.641737][ T9350] fuse: Unknown parameter '000000000000000000000050x0000000000000004' [ 359.652539][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 359.662620][ T24] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 359.693486][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.909175][ T24] usb 2-1: string descriptor 0 read error: -71 [ 359.923088][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 359.936400][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.954332][ T24] usb 2-1: config 0 descriptor?? [ 360.469577][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 360.537943][ T24] usb 2-1: can't set config #0, error -71 [ 360.549871][ T24] usb 2-1: USB disconnect, device number 28 [ 361.071428][ T9352] nvme_fabrics: missing parameter 'transport=%s' [ 361.077811][ T9352] nvme_fabrics: missing parameter 'nqn=%s' [ 361.590027][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 362.166219][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 362.182968][ T24] usb 2-1: can't read configurations, error -22 [ 362.263367][ T10] gspca_main: pac207-2.14.0 probing 093a:2476 [ 362.271507][ T10] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 362.283292][ T10] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 362.291701][ T10] usb 5-1: No valid video chain found. [ 362.311217][ T10] usb 5-1: USB disconnect, device number 25 [ 362.334459][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 363.481289][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 363.509637][ T24] usb 2-1: can't read configurations, error -22 [ 363.645878][ T9384] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 363.661132][ T9384] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 363.743757][ T24] usb usb2-port1: attempt power cycle [ 364.779857][ T30] audit: type=1400 audit(1744790855.733:591): avc: denied { read } for pid=9391 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 366.316932][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.913'. [ 366.338577][ T9422] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 366.642346][ T30] audit: type=1400 audit(1744790857.603:592): avc: denied { map } for pid=9429 comm="syz.3.919" path="socket:[22467]" dev="sockfs" ino=22467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 366.691371][ T30] audit: type=1400 audit(1744790857.603:593): avc: denied { accept } for pid=9429 comm="syz.3.919" path="socket:[22467]" dev="sockfs" ino=22467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 367.292505][ T971] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 367.467763][ T971] usb 4-1: device descriptor read/64, error -71 [ 367.681555][ T30] audit: type=1400 audit(1744790858.653:594): avc: denied { mount } for pid=9449 comm="syz.4.924" name="/" dev="ramfs" ino=23014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 367.740485][ T971] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 367.889663][ T971] usb 4-1: device descriptor read/64, error -71 [ 368.034282][ T971] usb usb4-port1: attempt power cycle [ 368.419593][ T9461] xt_policy: too many policy elements [ 368.539747][ T30] audit: type=1400 audit(1744790859.503:595): avc: denied { setopt } for pid=9459 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.588031][ T30] audit: type=1400 audit(1744790859.513:596): avc: denied { getopt } for pid=9459 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.699721][ T971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 368.766446][ T971] usb 4-1: device descriptor read/8, error -71 [ 368.862486][ T9468] [ 368.864836][ T9468] ====================================================== [ 368.871844][ T9468] WARNING: possible circular locking dependency detected [ 368.878844][ T9468] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 Not tainted [ 368.885927][ T9468] ------------------------------------------------------ [ 368.892918][ T9468] syz.2.930/9468 is trying to acquire lock: [ 368.898784][ T9468] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x115/0x1040 [ 368.908076][ T9468] [ 368.908076][ T9468] but task is already holding lock: [ 368.915415][ T9468] ffff888075810aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 368.925482][ T9468] [ 368.925482][ T9468] which lock already depends on the new lock. [ 368.925482][ T9468] [ 368.935859][ T9468] [ 368.935859][ T9468] the existing dependency chain (in reverse order) is: [ 368.944846][ T9468] [ 368.944846][ T9468] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 368.953424][ T9468] __mutex_lock+0x199/0xb90 [ 368.958433][ T9468] smc_switch_to_fallback+0x2d/0x9f0 [ 368.964217][ T9468] smc_sendmsg+0x13d/0x520 [ 368.969131][ T9468] __sys_sendto+0x495/0x510 [ 368.974135][ T9468] __x64_sys_sendto+0xe0/0x1c0 [ 368.979397][ T9468] do_syscall_64+0xcd/0x260 [ 368.984403][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.990794][ T9468] [ 368.990794][ T9468] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 368.998415][ T9468] lock_sock_nested+0x41/0xf0 [ 369.003598][ T9468] sockopt_lock_sock+0x54/0x70 [ 369.008861][ T9468] do_ip_setsockopt+0xfe/0x3240 [ 369.014208][ T9468] ip_setsockopt+0x59/0xf0 [ 369.019121][ T9468] tcp_setsockopt+0xa4/0x100 [ 369.024210][ T9468] do_sock_setsockopt+0x221/0x470 [ 369.029738][ T9468] __sys_setsockopt+0x1a0/0x230 [ 369.035088][ T9468] __x64_sys_setsockopt+0xbd/0x160 [ 369.040698][ T9468] do_syscall_64+0xcd/0x260 [ 369.045703][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.052094][ T9468] [ 369.052094][ T9468] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 369.059283][ T9468] __lock_acquire+0x1173/0x1ba0 [ 369.064637][ T9468] lock_acquire+0x179/0x350 [ 369.069637][ T9468] __mutex_lock+0x199/0xb90 [ 369.074643][ T9468] ip_mroute_setsockopt+0x115/0x1040 [ 369.080431][ T9468] do_ip_setsockopt+0x2ae/0x3240 [ 369.085863][ T9468] ip_setsockopt+0x59/0xf0 [ 369.090775][ T9468] ipv6_setsockopt+0x155/0x170 [ 369.096042][ T9468] tcp_setsockopt+0xa4/0x100 [ 369.101134][ T9468] smc_setsockopt+0x1b3/0xa00 [ 369.106311][ T9468] do_sock_setsockopt+0x221/0x470 [ 369.111841][ T9468] __sys_setsockopt+0x1a0/0x230 [ 369.117192][ T9468] __x64_sys_setsockopt+0xbd/0x160 [ 369.122802][ T9468] do_syscall_64+0xcd/0x260 [ 369.127811][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.134202][ T9468] [ 369.134202][ T9468] other info that might help us debug this: [ 369.134202][ T9468] [ 369.144407][ T9468] Chain exists of: [ 369.144407][ T9468] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 369.144407][ T9468] [ 369.157937][ T9468] Possible unsafe locking scenario: [ 369.157937][ T9468] [ 369.165362][ T9468] CPU0 CPU1 [ 369.170700][ T9468] ---- ---- [ 369.176038][ T9468] lock(&smc->clcsock_release_lock); [ 369.181389][ T9468] lock(sk_lock-AF_INET); [ 369.188303][ T9468] lock(&smc->clcsock_release_lock); [ 369.196171][ T9468] lock(rtnl_mutex); [ 369.200129][ T9468] [ 369.200129][ T9468] *** DEADLOCK *** [ 369.200129][ T9468] [ 369.208246][ T9468] 1 lock held by syz.2.930/9468: [ 369.213158][ T9468] #0: ffff888075810aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 369.223660][ T9468] [ 369.223660][ T9468] stack backtrace: [ 369.229524][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.2.930 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 369.229543][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.229551][ T9468] Call Trace: [ 369.229555][ T9468] [ 369.229560][ T9468] dump_stack_lvl+0x116/0x1f0 [ 369.229580][ T9468] print_circular_bug+0x275/0x350 [ 369.229602][ T9468] check_noncircular+0x14c/0x170 [ 369.229624][ T9468] __lock_acquire+0x1173/0x1ba0 [ 369.229639][ T9468] lock_acquire+0x179/0x350 [ 369.229650][ T9468] ? ip_mroute_setsockopt+0x115/0x1040 [ 369.229668][ T9468] ? __pfx___might_resched+0x10/0x10 [ 369.229687][ T9468] ? find_held_lock+0x2b/0x80 [ 369.229704][ T9468] __mutex_lock+0x199/0xb90 [ 369.229722][ T9468] ? ip_mroute_setsockopt+0x115/0x1040 [ 369.229739][ T9468] ? lock_acquire+0x179/0x350 [ 369.229750][ T9468] ? ip_mroute_setsockopt+0x115/0x1040 [ 369.229767][ T9468] ? __pfx___mutex_lock+0x10/0x10 [ 369.229786][ T9468] ? finish_task_switch.isra.0+0x221/0xc10 [ 369.229805][ T9468] ? rcu_is_watching+0x12/0xc0 [ 369.229821][ T9468] ? trace_sched_exit_tp+0xde/0x130 [ 369.229841][ T9468] ? ip_mroute_setsockopt+0x115/0x1040 [ 369.229858][ T9468] ? rtnl_lock+0x9/0x20 [ 369.229869][ T9468] ip_mroute_setsockopt+0x115/0x1040 [ 369.229886][ T9468] ? look_up_lock_class+0x59/0x150 [ 369.229904][ T9468] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 369.229922][ T9468] ? __lock_acquire+0x5ca/0x1ba0 [ 369.229934][ T9468] ? __lock_acquire+0xaa4/0x1ba0 [ 369.229949][ T9468] do_ip_setsockopt+0x2ae/0x3240 [ 369.229960][ T9468] ? __pfx___mutex_trylock_common+0x10/0x10 [ 369.229974][ T9468] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 369.229986][ T9468] ? rcu_is_watching+0x12/0xc0 [ 369.230001][ T9468] ? trace_contention_end+0xdd/0x130 [ 369.230013][ T9468] ? __mutex_lock+0x1ca/0xb90 [ 369.230030][ T9468] ? avc_has_perm+0x11a/0x1c0 [ 369.230043][ T9468] ? __pfx_avc_has_perm+0x10/0x10 [ 369.230055][ T9468] ? smc_setsockopt+0x100/0xa00 [ 369.230069][ T9468] ip_setsockopt+0x59/0xf0 [ 369.230081][ T9468] ipv6_setsockopt+0x155/0x170 [ 369.230099][ T9468] tcp_setsockopt+0xa4/0x100 [ 369.230114][ T9468] smc_setsockopt+0x1b3/0xa00 [ 369.230126][ T9468] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 369.230147][ T9468] ? __pfx_smc_setsockopt+0x10/0x10 [ 369.230161][ T9468] ? selinux_socket_setsockopt+0x6a/0x80 [ 369.230177][ T9468] ? __pfx_smc_setsockopt+0x10/0x10 [ 369.230190][ T9468] do_sock_setsockopt+0x221/0x470 [ 369.230208][ T9468] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 369.230231][ T9468] __sys_setsockopt+0x1a0/0x230 [ 369.230247][ T9468] __x64_sys_setsockopt+0xbd/0x160 [ 369.230261][ T9468] ? do_syscall_64+0x91/0x260 [ 369.230280][ T9468] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.230296][ T9468] do_syscall_64+0xcd/0x260 [ 369.230319][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.230332][ T9468] RIP: 0033:0x7f17dfd8e169 [ 369.230344][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.230357][ T9468] RSP: 002b:00007f17e0b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.230370][ T9468] RAX: ffffffffffffffda RBX: 00007f17dffb5fa0 RCX: 00007f17dfd8e169 [ 369.230379][ T9468] RDX: 00000000000000cd RSI: 0000000000000000 RDI: 0000000000000005 [ 369.230387][ T9468] RBP: 00007f17dfe10a68 R08: 000000000000003c R09: 0000000000000000 [ 369.230395][ T9468] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 369.230403][ T9468] R13: 0000000000000000 R14: 00007f17dffb5fa0 R15: 00007ffdbbb2c908 [ 369.230415][ T9468] [ 369.574244][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.604132][ T9471] loop6: detected capacity change from 0 to 524287999 [ 369.608463][ T30] audit: type=1400 audit(1744790860.573:597): avc: denied { append } for pid=9469 comm="syz.1.932" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.623718][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.634335][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.649444][ C0] buffer_io_error: 6 callbacks suppressed [ 369.655172][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.666549][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.675713][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.683815][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.692952][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.705602][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.714776][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.741410][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.750568][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.758969][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.768120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.776948][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.786102][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.794099][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 369.803243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.811084][ T9471] ldm_validate_partition_table(): Disk read failed. [ 370.107573][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.116741][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 370.124831][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.133961][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 370.142507][ T9471] Dev loop6: unable to read RDB block 0 [ 370.148585][ T9471] loop6: unable to read partition table [ 370.154462][ T9471] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 378.100628][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.106932][ T1294] ieee802154 phy1 wpan1: encryption failed: -22