last executing test programs: 1m54.312483452s ago: executing program 1 (id=173): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x1}, 0x18) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r3}, 0x18) sendmmsg(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002680)="b87543", 0x3}], 0x1}}], 0x1, 0x0) mlockall(0x2) r4 = fanotify_init(0x200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, 0x0) r5 = syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0xfa, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0xb, 0x1}, @as_header={0x7, 0x24, 0x1, 0x81, 0x40, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x1, 0xa, {0x7, 0x25, 0x1, 0x80, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0x19, "d4d1"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x2, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x3, 0x8, {0x7, 0x25, 0x1, 0x80, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x5, 0x3, 0x8b, 0x8}, 0x1d, &(0x7f00000007c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9a, 0x3, 0x9, 0x7, 0x6, [0xffff0f, 0xff0000, 0x30]}]}, 0x3, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x41a}}, {0xd6, &(0x7f0000000bc0)=@string={0xd6, 0x3, "04f317eade34c2eb68b0d2f96613f4140bf4e3fcb0712388c3bea6775fa707dd24fb45fc96663ae7fa05c2b8c59cbc00356ee3ab34f94f11190e47de48778a6ab28e861631507344727d3bd729350d09897168341ace321131d32c8f7fb587cae7d91b1cc8b6c818724a498c73ea49a6287fe815a9b13ade04cb8a4485a479af00e046b09372436544d306716add760f2431a565f38323041f2f30e086716c3f72bb44aa05b6ba2be9a0e895540ecc59b0c746bf1d70d182b58cce5254b47c102367e1bad6ad4f6c1e671a5bb5ddd74cf116fba5"}}]}) syz_usb_control_io(r5, 0x0, 0x0) mlockall(0x0) r6 = syz_usb_connect(0x2, 0x3c7, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0xad, 0x82, 0x5a, 0x20, 0x582, 0x29, 0x1d18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b5, 0x2, 0x7, 0x8, 0x20, 0x2, [{{0x9, 0x4, 0xc2, 0x2, 0x5, 0x6e, 0x24, 0xef, 0xfa, [@hid_hid={0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x391}}], [{{0x9, 0x5, 0xe, 0x2, 0x20, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0xe3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6d, 0x9}, @generic={0xfb, 0x77, "4a12b4b79588aaf908b08baf54c0f5d9bbccc94317c6473af61e1925c3d4dbf642097fb3ea4f27da3265341020acad0e1d59e136687e36c2245cdf0d1991d2cf8a5350b4a85e7a36b652eb0543af5c5bce64e1c14254b9731573ba6dac42b4dfb545b151c4272e7c0b83f6615a1695e3912f66ac13150e415d95f89ce2a6d21f540a6c67b5f805186d4f84e7eb7011aacf7d7b9d12b51eaea12b2989ffd98e02ead80d504588b3c737f444955239f9ed4d947701a3f95995a1193adfba3052de9c744773f461bc04198289be9a788c48224c4293e78a89d10b4e0117f48b833c86f50fc9c9d3037a54d54f77d2fbb892adb7e7d2681290a4f2"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0x41, 0x6, [@generic={0x14, 0x10, "da682bd94de35d87e8b68494908e9dcc3843"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0x4, 0x4, 0xe, [@generic={0x52, 0x3, "1f58a1e13b48a65293e92ff90825c859cb8674d68606b3d3699a0478ca0f9d7a8f9adde5bd5a489d6f03feb07f9f85930b6e1dc1466d9d28aef7347ff81d7ec1b1f498a2fc8b3fe47dd7f8925e7bf2af"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x9, 0xe, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}, @generic={0xef, 0x22, "7d293507b27eabc794dd1f1294f82115aee222471ccdbdbe47cc44d21886295a3518df4431751b29ef2538e6eafb9c03d70ccf8c5e342cbf404bde82445225f1ecb2a3512ac1d5e94928f5443021d7daae0f02cfda45dcc4bc0d26dcd3c49da12d7edeaed2869db40496da4d0c2a3167d80560bc7aa6fdd620d0d0a6a840dae6d7c70293ab5c619b1a777ca3451b76bd318bafd247d37f21e3572d8ddba6208394240db5a00382ae8c34f9599cb46eb78de49ced23ac5c2ab555d87f10b2cc1ea13c0109703988386b33f17b1ea1da56db418595ce9b1fc1da8675a5e7f151d28ad10c7f94a5754f737f1180fb"}]}}]}}, {{0x9, 0x4, 0x8, 0x4, 0x3, 0xfd, 0x8, 0x68, 0x5, [@hid_hid={0x9, 0x21, 0xa, 0x1, 0x1, {0x22, 0xf9b}}, @uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0x0, "e8e57e", '{8'}]}], [{{0x9, 0x5, 0x3, 0x8, 0x400, 0x1, 0x5, 0x80, [@generic={0xe, 0x30, "9efd45bc031c8f6c5bc7eaa1"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x4, 0x2, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xd, 0x8, 0x0, [@generic={0xb9, 0xe, "95a7ad624fd3244ad14ec49901b0d8546ba447a3c41a0997f652491d00dc23fc2ed46ec5c8a445893451fc1abe7857855e3ba7840d6f85ecee0eac5ee1c968293fec4c50d7254ef13c8b9c7a781884be24881d76c53880230a3c9d6b0e500edc6fe5d93bea5681513e51699ee48f72f71be30af98af2e992dc480ee7c055e0ba1e907dde1eb7e8b606d78e67b4d67ed012a285bfa6e1a8333a2fee88a9c05bd263795b30c6bb29b683b0923ddd18cb728fa2e3b75f009f"}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xd8, 0x1, 0xe8, 0x10, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3400}}, {0x37, &(0x7f0000000100)=@string={0x37, 0x3, "6594be0eaeac0038414563d5e00ab97422e813dcaa0702dba4c9bc9f4e4796bac000"/53}}, {0x9, &(0x7f0000000d00)=ANY=[@ANYBLOB="096f1fb2638c13aa3e000059bd"]}, {0x8e, &(0x7f0000000180)=@string={0x8e, 0x3, "4f6205b3755bab3107c7e4395befb71944039b78af6fd96568a45d441af5a2f65e0270b7238d8b6068e3648d607ed5d358f655e9c5224b2a33dc0d9b420a464ac2d4a7d15337254bf588e8587a70f81ac7e928eba37e7654881f2c342d25a02894a5aab67befd53670c4fb951691b54613aa8c56eae6c244324287247b13f6b63c0116ad11338fdda20fbfd1"}}, {0x11, &(0x7f0000000280)=@string={0x11, 0x3, "c319e3e62f63ae4594a53690f42f4b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x458}}, {0xb6, &(0x7f0000000a00)=@string={0xb6, 0x3, "67dbc13e6e804d77f52327f3d124a3914ffbcfad8e1548099779645db6dd45156092406ea1d5b3e21fc0687dae9ff56d47f7c1d28bfd721b1486319dc188af7e9a1952ce49ac1b6da762e2f7d251a019bc858c071e4a2dca550c8609cbfe54b5383214cde624d13c83c391b362d80466ff0e13a71eaab049e3caea742107c2022534040e1feddaa77533494392aedee25454e3a496667a640822dd0228cac5cb4d346ba148904562af06179c5e6e2cc2ae76bab9"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x408}}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xb6, &(0x7f0000000940)=@generic={0x7, 0x2, 0xae, "abf32275", "31d02e13f582065a46252288d532d88b3d4752634aed0f8658b62f4bfccc8ef67e613010ce3b6ec81ab65c4774cd5d466153a1fdaf481a0da965fc9b453003e8f21600a5b5e3f2642148d9c662fba308ea8ebbabcd7d7d09d6821a803ccae06596853536ed14ad730b59b1cf955762ff5f1baa57da188629aec7ae7ea50f4efe5fd68635bc83947e7a64d1906084cd77b94fc2fef8a9cb27053d16c7f186bfc66824e993ca8487c04124b3abd61e"}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r9, 0x1, 0x3, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0xf4, 0x100002e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m50.582377297s ago: executing program 1 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x6}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="1400040073797a6b616c6c6572300000000000000500530043000000080005000200000013d4e8c385543bd8490c92cee6772c3917cf52953c548900d11a6adeb0bb8f48a8169d797d6536201dcb4a8fca6e9bada12b9efee02276731bb5ddf895add9c2c33c4d6c80c5010bcd232ec864b3a35b1954301f41acabd3595885d82edb2d515e94f7d7bd6cf66e503f747f156be1ea74bc6321a8d830eb0077f098963cc1c996f5170c152d24054eab4f8da5431edb272a79516442df4d8d0d3fa9131089b2802cba0e24cb"], 0x40}, 0x1, 0x0, 0x0, 0x4008095}, 0x24044080) 1m49.544429745s ago: executing program 1 (id=192): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb2M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xfa\xce\x0e#F(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$E\xba\xdcqU\x1f\x8d\x16\x05\x8b\x00\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\x1c\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f\x00\xa97\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaaW\xb7K\x12\x11F\x9aa\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\xd7mk\xd4r,\x13\x06\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) (fail_nth: 6) 1m46.888828685s ago: executing program 1 (id=199): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x44040) 1m45.337872404s ago: executing program 1 (id=205): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c0900002c0051802800008009000100db7a744a621bf0ac5d040001000100000005ac0f00000000000000000000000067b3e121a622ecc51932464ca459861e13a2480238ee366ae2a25db8cee1157f73f3e81c0387c247162ca50886854fc03a6ed9f2edda85a9ecfce44e559148bbe28266a3e485a7df1396ec04ad2ccf463083e335991147f540e75a242a3147d0503558fd77216b8641c44396d596ba79294fb422ad37e12e1070d56dfd40c7b688374323aff3b215c2116c9595d8d38a1a90d5f16fbc814de66ea84d63ee6f792aac7b51ca9f40"], 0x5c}}, 0x800) 1m44.304329115s ago: executing program 1 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404f04d5b6000000000001090224000100000000090400000103000000092100200001220500090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0022050000000300000000029f9c4614251d8987163883b223b4fdae2f05c3f7b14814fc777578ba50f5b92038017887ae4be076ebb1a690e8eafbf273a607bf833ad43b4f24af6e42c4e1ce0bee176501e1895f6bd89357c04e2fdbec83e46928ef44f731509ec6c0778a9c393f8b16a1a162bec55fe6a973effe9819877d6524a279e460ca55b1a602cf1395394cf107a78a5f110eafc37df3f12a93"], 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0) 1m28.966217939s ago: executing program 32 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404f04d5b6000000000001090224000100000000090400000103000000092100200001220500090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0022050000000300000000029f9c4614251d8987163883b223b4fdae2f05c3f7b14814fc777578ba50f5b92038017887ae4be076ebb1a690e8eafbf273a607bf833ad43b4f24af6e42c4e1ce0bee176501e1895f6bd89357c04e2fdbec83e46928ef44f731509ec6c0778a9c393f8b16a1a162bec55fe6a973effe9819877d6524a279e460ca55b1a602cf1395394cf107a78a5f110eafc37df3f12a93"], 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0) 8.860932312s ago: executing program 0 (id=633): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0x0, [0x8004, 0x8000, 0xa3, 0xd, 0x0, 0xfa, 0x5, 0x5, 0x4, 0x4, 0x40, 0x8, 0x7, 0x800, 0x5, 0x401, 0x8, 0x9, 0x3000, 0xdc2, 0x3c24, 0x800, 0xf7b4, 0x2, 0x3, 0x6, 0x4, 0x7, 0x5, 0x0, 0x4, 0x1, 0xfffe, 0x400, 0x38b4, 0x4, 0x37b, 0x47, 0xd1a, 0x0, 0xb593, 0x1, 0x6, 0x9, 0xf, 0x7, 0x1], 0x7}}) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x17, 0x7, 0x9, 0x0, 0x20, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) write$tun(r7, &(0x7f00000008c0)={@val={0x0, 0x6733}, @void, @ipv6=@tcp={0x1, 0x6, ',$b', 0x92, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x3c00, {[@generic={0x2, 0x5, "7f6450"}]}}, {"aa7f9a76a6e1cae800739cbca53cda839fc418da7faf1c692f29a5aee4b556e0591d67d4d3612aaa7c43366b5cf1347b183b5085a909af063870ee834af407295eb589d7d8b0ced3cc9291de71094325b2d20020af1308605806232bed06e80d36f7d2ea59562a62cc5cb0cd23e30c9b137893919d41"}}}}}, 0xbe) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 8.730408856s ago: executing program 0 (id=636): close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000001340), 0x4008000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1b, 0x1, 0x1, "61b5271802d1c8a88dacc3000000000000d84a5000e200000000000000824a00", 0x32435750}) socketpair(0x3, 0x1, 0x4, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002e40)=ANY=[@ANYBLOB="dc010000160001000000000000000000ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff", @ANYRES32=0x0], 0x1dc}}, 0x0) getcwd(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.247285685s ago: executing program 4 (id=639): syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_setup(0xd06, &(0x7f0000000600)={0x0, 0x1f04, 0x10, 0x0, 0xb6}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x40, 0x0, {0x0, r2}}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000fe"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x40, 0xf, 0xa2, {0xa2, 0x10, "c1f23bce2164aa5be1710b4d4339eeeeac91cc535f43903fb1973cd51905120b81cc50ededb29e05e7f249f4d339f67a9b557e89e7393266f8bffd1dc514f250ab76cff40552ac1121286062f04a02921bb43ea99a539bd4caa1ad1d801c550f38ab8ca581e7fc0cd0e2fe96197b6d01b808c7eaba02981234d1407b1fc06b7469db3f085c636e5348ba68aa63289a4196d1038afcda33a2d2d95e95c289ac49"}}, &(0x7f0000000180)={0x0, 0x3, 0x25, @string={0x25, 0x3, "51bbdb8c12162cad6572eeeabb2d1c39e37b201246e70b54e9df171ab528d85e7cd380"}}, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x7, "c01aed0f"}, @main=@item_012={0x2, 0x0, 0xb, "a80f"}, @local=@item_4={0x3, 0x2, 0x4, "d45adb5b"}, @main=@item_012={0x1, 0x0, 0xc, 'J'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xc46}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x16, 0x97, "3a7d17255c212ef4c55f0ca314037106dd3d971d767304374e372fd2fed9a25ed5eae9a09d9d57030b85fca208c97f9a7dab0556268f393617b2ee25db1032df4e741f4390c01bde7ec9100b7e86e97d5fd02abf36faf08819d05e88355f40863172694203ccee1f0cfb5857f1d9ee056cc25efe04927bdfcf64d342b6577e4fb012e067202bf895384dc1e63cccd98eb1aa2e1d181882"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x1, 0xbd, "78270c4d21042e261dbc3af5f89af7777a3d754ec5bb157df1cf7613debf0ecff55bb37e69f9fa96241184c3774165b54f0911cb823e745e2840b5dfc06ce910651e26adf0635c9c07e5bbb36f0a3c3edb9974d5e9ad26256ef17b987c1d6508ab709081834706c269d2399cb1f312b8b1dfde21067669a0ae5dc09dc0742586dd1bf8385f032134be97b4f9427f25dcba34be9ebcf2b17fdd86ccabe013fb43e781750538169880bd813d2c91ad0e323c52e832dd0ca14b2f1d255278"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) 7.063018018s ago: executing program 4 (id=643): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 7.006588435s ago: executing program 3 (id=644): r0 = syz_open_dev$loop(&(0x7f0000002e00), 0x7, 0x20102) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000002e40)=0x3) r1 = syz_io_uring_setup(0x4774, &(0x7f0000000000)={0x0, 0xd6e6, 0x1000, 0x3, 0x2f7}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000007240)=[{0x8, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/179, 0xb3}], &(0x7f00000008c0)=[0xfff, 0x0, 0x4, 0x769, 0x2, 0x2fc07482, 0x0, 0x9]}, {0x5, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/201, 0xc9}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/161, 0xa1}, {&(0x7f0000001ac0)=""/71, 0x47}, {&(0x7f0000001b40)=""/14, 0xe}], &(0x7f0000001c00)=[0x100000000]}, {0x1, 0x1, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/33, 0x21}], &(0x7f0000001cc0)=[0x5, 0x3, 0x7, 0x6, 0x5, 0xffff, 0x8, 0xdef8, 0x1c]}, {0x8, 0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/198, 0xc6}, {&(0x7f0000001e40)=""/142, 0x8e}, {&(0x7f0000001f00)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/28, 0x1c}, {&(0x7f0000002000)=""/45, 0x2d}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/14, 0xe}, {&(0x7f0000002100)=""/89, 0x59}], &(0x7f0000002200)=[0x4, 0x23c]}, {0x2, 0x1, 0x0, &(0x7f0000002380)=[{&(0x7f0000002240)=""/205, 0xcd}, {&(0x7f0000002340)=""/48, 0x30}], &(0x7f00000023c0)=[0x4fc, 0xfff, 0x4, 0x6, 0x3, 0x5, 0x1, 0x1]}, {0x5, 0x1, 0x0, &(0x7f00000036c0)=[{&(0x7f0000002400)=""/148, 0x94}, {&(0x7f00000024c0)=""/150, 0x96}, {&(0x7f0000002580)=""/202, 0xca}, {&(0x7f0000002680)=""/49, 0x31}, {&(0x7f00000026c0)=""/4096, 0x1000}], &(0x7f0000003740)=[0x9, 0x8000000000000000, 0x5, 0xfffffffffffffffd, 0x80000000, 0x3, 0xd6]}, {0x8, 0x1, 0x0, &(0x7f0000005b80)=[{&(0x7f0000003780)=""/173, 0xad}, {&(0x7f0000003840)=""/231, 0xe7}, {&(0x7f0000003940)=""/106, 0x6a}, {&(0x7f00000039c0)=""/188, 0xbc}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/102, 0x66}, {&(0x7f0000005b00)=""/82, 0x52}], &(0x7f0000005c00)=[0xd, 0xfff, 0xfffffffffffffffa, 0xf9, 0xffffffffffff0001, 0x8, 0x2, 0x350]}, {0x1, 0x1, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005c40)=""/65, 0x41}], &(0x7f0000005d00)=[0x3]}, {0x5, 0x1, 0x0, &(0x7f0000006080)=[{&(0x7f0000005d40)=""/128, 0x80}, {&(0x7f0000005dc0)=""/228, 0xe4}, {&(0x7f0000005ec0)=""/40, 0x28}, {&(0x7f0000005f00)=""/103, 0x67}, {&(0x7f0000005f80)=""/250, 0xfa}], &(0x7f0000006100)=[0x2, 0x45e3, 0x4]}, {0x3, 0x0, 0x0, &(0x7f00000071c0)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/33, 0x21}, {&(0x7f0000007180)=""/33, 0x21}], &(0x7f0000007200)=[0x3]}], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0x0, 0x20133, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) 6.381425298s ago: executing program 0 (id=647): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) write$selinux_create(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeff", 0x3d}], 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000100000008004a00000000000800"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x79a, 0x0, 0x0, 0x7fff0006}]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r3, r3}, 0x0, 0xffffffffffffffc4, &(0x7f0000000280)={&(0x7f0000000340)={'sha1-ni\x00'}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@broadcast, 0x4e20, 0x3, 0x4e24, 0xf542, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee00}, {0xe887, 0xf0, 0x200, 0x3, 0x8, 0x5, 0x5, 0x3}, {0x693f20fb, 0xa, 0x8, 0x45d}, 0x6d8, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in6=@private2, 0x4d2, 0xfe}, 0xa, @in=@multicast2, 0x34ff, 0x5, 0x2, 0x39, 0x9, 0x9, 0x101}}, 0xe8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.323583322s ago: executing program 0 (id=648): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x21, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001500), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d120100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket(0x1e, 0x1, 0x365) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000040)={0x2, 0x1, 0xc}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}, 0x1, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000800000000008000020001000000150000000000000008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) 5.332258365s ago: executing program 0 (id=653): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r6 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0xc}) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) close(0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r9}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 5.297363133s ago: executing program 4 (id=655): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x24000844) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f044}) (async) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) (async) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r3, &(0x7f0000000180)='./file0\x00', 0x224) (async) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0x2000001b}) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 5.244106199s ago: executing program 3 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x70) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002", @ANYBLOB, @ANYBLOB], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYBLOB="a2fc26eab2474e3da306a564acde445b8f6460f2f95f5583e67cf4e2a6fe3670c7577aa2b537defe645b2437a7f4da7a6497efb806c927f12aa41ddbea2b72e4fbcd31d51c04587a8ad16f446ec26a26d66d4a3d147af71d8b5ae2d5bd798119d678251ec31b0a566da605181ea10585ee5055ff88bed1f5c84d0f4c8fa949b7c31e2cb3e53126db7d5aa979920231693ce54eac826ffaee05e1bfce37f3110826f2abb58ea99863b9e4c1969dbc1cb140e95b2de0cb18d79ac9940963ac86558ed1f0", @ANYRES64=0x0], 0x84}, 0x1, 0x0, 0x0, 0x4000070}, 0x2008840) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x400100, 0x1) fcntl$setlease(r6, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r2) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x4, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000300)=""/121, 0x79}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getflags(r6, 0x401) io_setup(0x3, &(0x7f0000000140)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) 4.35997978s ago: executing program 2 (id=659): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) fsopen(0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x34) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={r5, @in={{0x2, 0x4e20, @multicast1}}, 0x4, 0x2}, 0x90) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x16c, 0x1e, 0x10, 0x70bd29, 0x25dfdbfe, {0xe}, [@generic="b42cefe2c1f20fb995f670ff1c82db7511c9ce14fb5fa73ea549f7e356781887aa8839dec2cf40e6b94894b212f8b6c2ff5f838ba04ad8f08a2627c6c96d82fcc2e9608298b2cbdbfdd5044690efc08565e4980c75b3f6dbe0cf1adddf5dd1038fa730739217adcf97fa3e1145076b34723368a933fefba84b62e2f8f64724edb28ca90635f1de95734ce93301286eb0abe82efbff473aad581f4bb3758fa889865257eccdf58386acf0088b149f38c4e84f707c4b934f0a185f9929aa0699d17d293163e9f3dbe9f3b1e6ca8cceeab4e290974354af954513089c3a", @nested={0x52, 0x2d, 0x0, 0x1, [@generic, @generic="f4a45d7e201b7baec064a3ea193906e630ae0d788e463d9d3fbec2546fbba85eabe695ab6ba8ab360446fe3a00f75e68b67e58c079bd374dec00ff7f94b47ed85487788362a819f2079d", @nested={0x4, 0x12b}]}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x2}, @generic="0c09c14d571f56", @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@remote}]}, 0x16c}}, 0x0) 4.285816573s ago: executing program 4 (id=660): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0x0, [0x8004, 0x8000, 0xa3, 0xd, 0x0, 0xfa, 0x5, 0x5, 0x4, 0x4, 0x40, 0x8, 0x7, 0x800, 0x5, 0x401, 0x8, 0x9, 0x3000, 0xdc2, 0x3c24, 0x800, 0xf7b4, 0x2, 0x3, 0x6, 0x4, 0x7, 0x5, 0x0, 0x4, 0x1, 0xfffe, 0x400, 0x38b4, 0x4, 0x37b, 0x47, 0xd1a, 0x0, 0xb593, 0x1, 0x6, 0x9, 0xf, 0x7, 0x1], 0x7}}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x17, 0x7, 0x9, 0x0, 0x20, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) write$tun(r6, &(0x7f00000008c0)={@val={0x0, 0x6733}, @void, @ipv6=@tcp={0x1, 0x6, ',$b', 0x92, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x3c00, {[@generic={0x2, 0x5, "7f6450"}]}}, {"aa7f9a76a6e1cae800739cbca53cda839fc418da7faf1c692f29a5aee4b556e0591d67d4d3612aaa7c43366b5cf1347b183b5085a909af063870ee834af407295eb589d7d8b0ced3cc9291de71094325b2d20020af1308605806232bed06e80d36f7d2ea59562a62cc5cb0cd23e30c9b137893919d41"}}}}}, 0xbe) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 4.123852679s ago: executing program 3 (id=662): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x3f000000) 3.597207501s ago: executing program 4 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x140, 0x30, 0x2, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_ctinfo={0xe0, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x713}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1000, 0x1000, 0x3, 0x1, 0x7}}]}, {0x6c, 0x6, "3417551fa9a7f638822e1f4345a0a799aa428c07f16fa6b6fed96dbe5b2a858b73a552133639f9cfd182e4c941f8ea68498c853fe02152077b6132cf6e00af956347f80396adf825e8e11eba9aa53e98f77d710bad3687a3689e9305d43a943e6834628fe8091617"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) bind$bt_l2cap(r8, &(0x7f0000000080), 0xe) 3.581775194s ago: executing program 3 (id=664): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x180, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r7 = socket$inet6(0xa, 0x1, 0x0) syz_fuse_handle_req(r6, &(0x7f0000001480)="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", 0x2000, &(0x7f0000003f40)={&(0x7f0000001180)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x2b, 0x101, 0x44080, 0xfffd, 0x88, 0xc17, 0x5, 0x0, 0x0, 0x1, 0x200}}, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0x80000001}}, &(0x7f0000001200)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f0000001240)={0x18, 0x0, 0x0, {0x7f}}, &(0x7f0000001280)={0x18, 0x0, 0x2, {0x3}}, &(0x7f00000012c0)={0x28, 0xffffffffffffffd1, 0x3, {{0x4, 0x6, 0x1, r1}}}, &(0x7f0000001300)={0x60, 0xfffffffffffffffe, 0x30, {{0xcb, 0x1, 0x3, 0xc3, 0x3, 0x1, 0x5, 0x6}}}, &(0x7f0000001380)={0x18, 0xfffffffffffffff5, 0x4, {0x7fff}}, &(0x7f00000013c0)={0x2b, 0x0, 0x7, {'connect aa:aa:aa:aa:aa:11 0'}}, &(0x7f0000001400)={0x20, 0x0, 0x2e0a, {0x0, 0x15}}, &(0x7f0000003600)={0x78, 0x0, 0x72, {0xb2, 0x4, 0x0, {0x1, 0x0, 0x0, 0x80, 0x9b, 0x7fffffff, 0x4, 0xfff, 0x8, 0xa000, 0x1, 0x0, 0x0, 0x7f, 0x7fff}}}, &(0x7f0000003680)={0x90, 0x0, 0xf, {0x1, 0x0, 0x5, 0x4, 0x3, 0x4, {0x4, 0x1, 0x2, 0xc, 0x80, 0x2, 0xfffffffa, 0x178, 0x7, 0x2000, 0x80, 0x0, 0x0, 0x0, 0x31a6}}}, &(0x7f0000003740)={0x158, 0x0, 0x4, [{0x6, 0x100000001, 0x1b, 0x2, 'connect aa:aa:aa:aa:aa:11 0'}, {0x2, 0x8bb, 0x7, 0x7, '{(\',[,,'}, {0x1, 0x1, 0x8, 0x10, 'bridge0\x00'}, {0x3, 0x2, 0x4, 0x5, '\',f@'}, {0x2, 0x9, 0xd, 0x5, 'sched_switch\x00'}, {0x6, 0x3, 0x2, 0x5, '\'!'}, {0x2, 0xfffffffffffffff7, 0x1, 0x9, '-'}, {0x6, 0x80000000, 0xa, 0x2, '+/(+}/@%.\''}, {0x2, 0x1, 0x3, 0x5, '\xe3^['}]}, &(0x7f0000003ac0)={0xa8, 0x0, 0x7, [{{0x5, 0x1, 0x9, 0x5, 0xffffffff, 0xe57f, {0x0, 0xff, 0x68a, 0x9, 0x9, 0x8, 0x4, 0xb, 0x400, 0xc000, 0x1a5b, 0x0, 0x0, 0x871f, 0xd}}, {0x2, 0xfffffffffffffffa, 0x0, 0x4}}]}, &(0x7f0000003c00)={0xa0, 0x0, 0xfff, {{0x5, 0x0, 0x7ff, 0x38b, 0x0, 0x8, {0x3, 0x4, 0x7fffffffffffffff, 0x80000001, 0x0, 0x8, 0xfffff801, 0x6, 0x1, 0xa000, 0x4, 0x0, 0x0, 0xffff485c, 0x9787}}, {0x0, 0x2}}}, &(0x7f0000003cc0)={0x20, 0xfffffffffffffffe, 0x0, {0x7, 0x4, 0x80, 0x4}}, &(0x7f0000003e00)={0x130, 0xfffffffffffffffe, 0xfffffffffffffff9, {0x2, 0x5, 0x0, '\x00', {0x1000, 0x1ff, 0x6, 0xe, 0x0, 0x0, 0x2000, '\x00', 0x79, 0x8, 0xbcd, 0x92f9, {0x9, 0xfffff843}, {0xffff, 0x2}, {0x1000, 0x2}, {0x34, 0x2}, 0x4a, 0x0, 0x7, 0x7}}}}) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb}}) 3.304321367s ago: executing program 2 (id=665): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000003c0)={"790697cf71b6477003db9467068114bea22e7fcea7f3dc2d7b9ca6612a2bd36a", 0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000180), 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000ffff00000b00000000000000", @ANYRES32, @ANYBLOB="ffffff7f0000000000010bda9cad428dd7420000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) 2.35192782s ago: executing program 2 (id=667): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) socket$can_raw(0x1d, 0x3, 0x1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x146) creat(&(0x7f0000000280)='./file0\x00', 0x72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140800000020900010073797a30000000000900020073797a"], 0x78}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.283370025s ago: executing program 3 (id=668): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2.225024134s ago: executing program 0 (id=669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x20000841) prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014041, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') setns(r4, 0x80) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = dup3(r1, r2, 0x0) sendto$unix(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0xfffffff2, 0x340, 0x330, 0xd0, 0xffffffff, 0x330, 0xd0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xff000000, 'lo\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x62, 0x0, 0x36}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @icmp_id=0x67, @port=0x4e22}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'veth0\x00', 'pim6reg\x00', {}, {}, 0x29, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @gre_key=0x401, @icmp_id=0x67}}}, {{@ip={@multicast2, @remote, 0xffffff00, 0xff, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x2, 0x2}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x0, 0x1}, {0xffffffffffffffff, 0x5, 0x3}, 0x5, 0x80000001}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010102, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100024, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x1d0, &(0x7f0000000100)=0x8f19, 0x0, 0x4) unshare(0x68040200) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) 1.763875538s ago: executing program 3 (id=670): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x3, 0x2040) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000440)=""/105) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d6566120c4108a817a7d0102030109021b00010000c005090423000103000000090585030003"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x0, 0x18, 0x3, "4fcdeb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x41100, 0x10, '\x00', 0x0, @fallback=0x4, r1, 0x14, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 1.578392073s ago: executing program 5 (id=671): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) write$selinux_create(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeff", 0x3d}], 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000100000008004a00000000000800"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x79a, 0x0, 0x0, 0x7fff0006}]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000200)=0x10, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r3, r3}, 0x0, 0xffffffffffffffc4, &(0x7f0000000280)={&(0x7f0000000340)={'sha1-ni\x00'}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@broadcast, 0x4e20, 0x3, 0x4e24, 0xf542, 0xa, 0x20, 0x0, 0x1d, 0x0, 0xee00}, {0xe887, 0xf0, 0x200, 0x3, 0x8, 0x5, 0x5, 0x3}, {0x693f20fb, 0xa, 0x8, 0x45d}, 0x6d8, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in6=@private2, 0x4d2, 0xfe}, 0xa, @in=@multicast2, 0x34ff, 0x5, 0x2, 0x39, 0x9, 0x9, 0x101}}, 0xe8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.490453513s ago: executing program 5 (id=672): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, &(0x7f0000000e00)={0x1d, 0x0, 0x0, {0x1, 0xf1}, 0xff}, 0x17) connect$packet(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r2) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="c7442400cb000000c74424029b000000ff1c2446d36206b805000000b9001000000f01d9450f01193e360f01c3c4023508fec4e298f7fd66440f38828c2e1eee0000660f3880420e430f01d1", 0x4c}], 0x1, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0xf4) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef0a565ef1e833236500", "a1163939c787a16cc89ae81339f3d3289737f0374c72a900000000000000000000000000000000040000001b00", "24431a1e77a68e174f000000000000000010e200"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) 1.309867384s ago: executing program 2 (id=673): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x44) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x6, @sliced={0x0, [0x8004, 0x8000, 0xa3, 0xd, 0x0, 0xfa, 0x5, 0x5, 0x4, 0x4, 0x40, 0x8, 0x7, 0x800, 0x5, 0x401, 0x8, 0x9, 0x3000, 0xdc2, 0x3c24, 0x800, 0xf7b4, 0x2, 0x3, 0x6, 0x4, 0x7, 0x5, 0x0, 0x4, 0x1, 0xfffe, 0x400, 0x38b4, 0x4, 0x37b, 0x47, 0xd1a, 0x0, 0xb593, 0x1, 0x6, 0x9, 0xf, 0x7, 0x1], 0x7}}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x17, 0x7, 0x9, 0x0, 0x20, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x80000, 0x0) write$tun(r6, &(0x7f00000008c0)={@val={0x0, 0x6733}, @void, @ipv6=@tcp={0x1, 0x6, ',$b', 0x92, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x3c00, {[@generic={0x2, 0x5, "7f6450"}]}}, {"aa7f9a76a6e1cae800739cbca53cda839fc418da7faf1c692f29a5aee4b556e0591d67d4d3612aaa7c43366b5cf1347b183b5085a909af063870ee834af407295eb589d7d8b0ced3cc9291de71094325b2d20020af1308605806232bed06e80d36f7d2ea59562a62cc5cb0cd23e30c9b137893919d41"}}}}}, 0xbe) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.232530152s ago: executing program 5 (id=674): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x80000) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r2 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff27"], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="b5470000000000004001000000000000010000000000000060643ca42faacef37e09009bc30de844ec8cdb5d9cf737a083ef7c76c6d8a18a69610d15e0c418a0c27eea8be0588c9c"]) 1.033899605s ago: executing program 2 (id=675): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) fsopen(0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x34) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={r5, @in={{0x2, 0x4e20, @multicast1}}, 0x4, 0x2}, 0x90) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x16c, 0x1e, 0x10, 0x70bd29, 0x25dfdbfe, {0xe}, [@generic="b42cefe2c1f20fb995f670ff1c82db7511c9ce14fb5fa73ea549f7e356781887aa8839dec2cf40e6b94894b212f8b6c2ff5f838ba04ad8f08a2627c6c96d82fcc2e9608298b2cbdbfdd5044690efc08565e4980c75b3f6dbe0cf1adddf5dd1038fa730739217adcf97fa3e1145076b34723368a933fefba84b62e2f8f64724edb28ca90635f1de95734ce93301286eb0abe82efbff473aad581f4bb3758fa889865257eccdf58386acf0088b149f38c4e84f707c4b934f0a185f9929aa0699d17d293163e9f3dbe9f3b1e6ca8cceeab4e290974354af954513089c3a", @nested={0x52, 0x2d, 0x0, 0x1, [@generic, @generic="f4a45d7e201b7baec064a3ea193906e630ae0d788e463d9d3fbec2546fbba85eabe695ab6ba8ab360446fe3a00f75e68b67e58c079bd374dec00ff7f94b47ed85487788362a819f2079d", @nested={0x4, 0x12b}]}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x2}, @generic="0c09c14d571f56", @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@remote}]}, 0x16c}}, 0x0) 375.146387ms ago: executing program 5 (id=676): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3d520, 0xffffffff, 0x2d, 0xfffffffa, 0xc, "0012412d08d500201e200021077b0a0080edff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 239.606606ms ago: executing program 4 (id=677): landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (fail_nth: 5) 184.380531ms ago: executing program 5 (id=678): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x4, 0x3, 0x1, 0x2}}, 0x80, 0x0}, 0xae190e3b2c74ec0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000300)=""/156, &(0x7f0000000040)=0x9c) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000007640)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRESHEX=r1, @ANYRES8=r3], 0x4}, 0x1, 0x0, 0x0, 0x2400c051}, 0xc001) sendfile(r8, r7, 0x0, 0x100000002) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x11) r10 = fcntl$dupfd(r9, 0x406, r9) ioctl$TCFLSH(r10, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r10, 0x800455c9, 0x32) 49.459447ms ago: executing program 2 (id=679): landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x700) 0s ago: executing program 5 (id=680): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) kernel console output (not intermixed with test programs): ce=b4.a2 [ 99.493843][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.502678][ T5934] usb 1-1: Product: syz [ 99.507007][ T5934] usb 1-1: Manufacturer: syz [ 99.511667][ T5934] usb 1-1: SerialNumber: syz [ 99.680070][ T5934] ipheth 1-1:5.148: Unable to find endpoints [ 99.713865][ T5934] usb 1-1: USB disconnect, device number 4 [ 99.970939][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'. [ 100.026315][ T30] audit: type=1400 audit(1744520791.184:290): avc: denied { mount } for pid=6394 comm="syz.1.117" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 100.048321][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.343792][ T30] audit: type=1400 audit(1744520791.194:291): avc: denied { connect } for pid=6394 comm="syz.1.117" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.389735][ T30] audit: type=1400 audit(1744520791.194:292): avc: denied { setopt } for pid=6394 comm="syz.1.117" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.416642][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.449303][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.501598][ T30] audit: type=1400 audit(1744520791.684:293): avc: denied { setopt } for pid=6412 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.519617][ T6413] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.545262][ T6413] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.627948][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 100.659649][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.664012][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.684706][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.694559][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.707492][ T5873] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.716707][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.729520][ T5873] usb 4-1: config 0 descriptor?? [ 100.729617][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.789291][ T5930] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 100.970924][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.045707][ T5876] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 101.185720][ T5930] usb 5-1: config 0 descriptor?? [ 101.201360][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 101.223414][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.265754][ T5876] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 101.474035][ T5873] usb 4-1: USB disconnect, device number 4 [ 101.579001][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.649214][ T5876] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=1a.e1 [ 102.269471][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.285585][ T5876] usb 1-1: Product: syz [ 102.294950][ T5876] usb 1-1: Manufacturer: syz [ 102.299279][ T5930] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 102.305391][ T5876] usb 1-1: SerialNumber: syz [ 102.450446][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.469546][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.603159][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.620455][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.732734][ T5876] usb 1-1: USB disconnect, device number 5 [ 103.108778][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.116469][ T5930] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 163: -32 [ 103.139556][ T5930] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 firmware info: -32 [ 103.156397][ T5930] playstation 0003:054C:05C4.0002: Failed to get firmware info from DualShock4 [ 103.165716][ T5930] playstation 0003:054C:05C4.0002: HW/FW version data in sysfs will be invalid. [ 103.205895][ T5930] input: HID 054c:05c4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0002/input/input6 [ 103.283970][ T30] audit: type=1400 audit(1744520794.454:294): avc: denied { read } for pid=5182 comm="acpid" name="js0" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.308243][ T975] usb 2-1: device descriptor read/64, error -71 [ 103.329971][ T5930] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0002/input/input7 [ 103.389116][ T30] audit: type=1400 audit(1744520794.454:295): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.433592][ T5930] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0002/input/input8 [ 103.544787][ T6449] tipc: Started in network mode [ 103.551558][ T6449] tipc: Node identity 4, cluster identity 4711 [ 103.560408][ T5930] playstation 0003:054C:05C4.0002: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 103.580862][ T5930] usb 5-1: USB disconnect, device number 4 [ 103.586639][ T6449] tipc: Node number set to 4 [ 103.586826][ T975] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.725810][ T975] usb 2-1: device descriptor read/64, error -71 [ 103.855683][ T975] usb usb2-port1: attempt power cycle [ 104.014920][ T6459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.134'. [ 104.195510][ T5934] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.207117][ T975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.251270][ T975] usb 2-1: device descriptor read/8, error -71 [ 104.415535][ T5934] usb 1-1: device descriptor read/64, error -71 [ 104.497247][ T975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.546479][ T975] usb 2-1: device descriptor read/8, error -71 [ 104.655790][ T5934] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.703628][ T6475] xt_hashlimit: size too large, truncated to 1048576 [ 104.716334][ T975] usb usb2-port1: unable to enumerate USB device [ 104.756739][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 104.766783][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 104.805496][ T5934] usb 1-1: device descriptor read/64, error -71 [ 104.895692][ T5874] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 104.916834][ T5934] usb usb1-port1: attempt power cycle [ 105.047645][ T5874] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 105.056955][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.067558][ T5874] usb 4-1: config 0 descriptor?? [ 105.075420][ T975] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.083428][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 105.245036][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.245052][ T30] audit: type=1400 audit(1744520796.424:297): avc: denied { write } for pid=6478 comm="syz.2.140" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.246575][ T6480] program syz.2.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.256323][ T30] audit: type=1400 audit(1744520796.434:298): avc: denied { ioctl } for pid=6478 comm="syz.2.140" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.274677][ T5934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.295375][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 105.311490][ T6480] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 105.335092][ T5874] gp8psk: usb in 128 operation failed. [ 105.349733][ T975] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 105.356258][ T5934] usb 1-1: device descriptor read/8, error -71 [ 105.359186][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.373604][ T975] usb 5-1: Product: syz [ 105.389905][ T975] usb 5-1: Manufacturer: syz [ 105.394694][ T975] usb 5-1: SerialNumber: syz [ 105.402393][ T975] usb 5-1: config 0 descriptor?? [ 105.543031][ T5874] gp8psk: FW Version = 33.151.226 (0x2197e2) Build 2135/231/15 [ 105.566910][ T30] audit: type=1804 audit(1744520796.754:299): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.142" name="/newroot/31/file1" dev="fuse" ino=1 res=1 errno=0 [ 105.593042][ T30] audit: type=1800 audit(1744520796.754:300): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.142" name="/" dev="fuse" ino=1 res=0 errno=0 [ 105.613890][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.620292][ T5934] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.627113][ T30] audit: type=1800 audit(1744520796.754:301): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.142" name="/" dev="fuse" ino=1 res=0 errno=0 [ 105.645983][ T5934] usb 1-1: device descriptor read/8, error -71 [ 105.655035][ T975] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 005 [ 105.769352][ T5934] usb usb1-port1: unable to enumerate USB device [ 105.800080][ T6490] mmap: syz.3.137 (6490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.065152][ T5874] gp8psk: usb in 149 operation failed. [ 106.123285][ T6499] FAULT_INJECTION: forcing a failure. [ 106.123285][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.127400][ T5874] gp8psk: failed to get FPGA version [ 106.156682][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.145 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 106.156707][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.156716][ T6499] Call Trace: [ 106.156721][ T6499] [ 106.156728][ T6499] dump_stack_lvl+0x16c/0x1f0 [ 106.156755][ T6499] should_fail_ex+0x512/0x640 [ 106.156782][ T6499] _copy_to_user+0x32/0xd0 [ 106.156802][ T6499] simple_read_from_buffer+0xcb/0x170 [ 106.156828][ T6499] proc_fail_nth_read+0x197/0x270 [ 106.156854][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.156880][ T6499] ? rw_verify_area+0xcf/0x680 [ 106.156902][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.156926][ T6499] vfs_read+0x1de/0xc70 [ 106.156954][ T6499] ? __pfx___mutex_lock+0x10/0x10 [ 106.156975][ T6499] ? __pfx_vfs_read+0x10/0x10 [ 106.157005][ T6499] ? __fget_files+0x20e/0x3c0 [ 106.157028][ T6499] ksys_read+0x12a/0x240 [ 106.157041][ T6499] ? __pfx_ksys_read+0x10/0x10 [ 106.157053][ T6499] ? evdev_ioctl+0x139/0x1a0 [ 106.157083][ T6499] do_syscall_64+0xcd/0x260 [ 106.157106][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.157122][ T6499] RIP: 0033:0x7f96b5d8bb7c [ 106.157136][ T6499] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.157150][ T6499] RSP: 002b:00007f96b6b98030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.157165][ T6499] RAX: ffffffffffffffda RBX: 00007f96b5fa5fa0 RCX: 00007f96b5d8bb7c [ 106.157176][ T6499] RDX: 000000000000000f RSI: 00007f96b6b980a0 RDI: 0000000000000004 [ 106.157185][ T6499] RBP: 00007f96b6b98090 R08: 0000000000000000 R09: 0000000000000000 [ 106.157194][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.157203][ T6499] R13: 0000000000000000 R14: 00007f96b5fa5fa0 R15: 00007ffc98421218 [ 106.157225][ T6499] [ 106.161344][ T5874] gp8psk: usb in 138 operation failed. [ 106.365422][ T5874] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 106.390306][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 106.413527][ T5874] usb 4-1: USB disconnect, device number 5 [ 106.468176][ T5827] Bluetooth: hci1: link tx timeout [ 106.474024][ T5827] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.569165][ T6503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.147'. [ 106.959866][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 107.000090][ T6511] syz.3.149 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.685432][ T5934] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 108.555981][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 108.732922][ T5934] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.778292][ T6489] syz.1.144 (6489): drop_caches: 2 [ 108.791165][ T5934] usb 3-1: config 0 has no interface number 0 [ 108.875939][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.131230][ T5934] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 109.190635][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 109.251293][ T5934] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 109.277134][ T5934] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 109.297337][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.312437][ T5934] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 109.338090][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.354797][ T5934] usb 3-1: config 0 descriptor?? [ 109.363470][ T6519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.372534][ T6519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.389144][ T5934] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 109.498263][ T6542] netlink: 80 bytes leftover after parsing attributes in process `syz.1.158'. [ 109.802934][ T6519] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 109.809559][ T6519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.904689][ T6519] vhci_hcd vhci_hcd.0: Device attached [ 109.943596][ T6552] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 109.950162][ T6552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.980530][ T6552] vhci_hcd vhci_hcd.0: Device attached [ 110.000055][ T6550] vhci_hcd: connection closed [ 110.000093][ T6553] vhci_hcd: connection closed [ 110.001939][ T5934] usb 3-1: USB disconnect, device number 5 [ 110.017237][ T793] vhci_hcd: stop threads [ 110.025616][ T793] vhci_hcd: release socket [ 110.033132][ T793] vhci_hcd: disconnect device [ 110.043929][ T793] vhci_hcd: stop threads [ 110.049984][ T5934] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 110.063843][ T793] vhci_hcd: release socket [ 110.070468][ T793] vhci_hcd: disconnect device [ 110.074472][ T6559] ======================================================= [ 110.074472][ T6559] WARNING: The mand mount option has been deprecated and [ 110.074472][ T6559] and is ignored by this kernel. Remove the mand [ 110.074472][ T6559] option from the mount to silence this warning. [ 110.074472][ T6559] ======================================================= [ 110.110810][ T5873] vhci_hcd: vhci_device speed not set [ 110.146925][ T30] audit: type=1400 audit(1744520801.314:302): avc: denied { mount } for pid=6557 comm="syz.1.160" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.347456][ T30] audit: type=1400 audit(1744520801.334:303): avc: denied { create } for pid=6560 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.368537][ T30] audit: type=1400 audit(1744520801.584:304): avc: denied { write } for pid=6560 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.562182][ T30] audit: type=1400 audit(1744520802.734:305): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.616531][ T6574] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 111.652148][ T30] audit: type=1400 audit(1744520802.824:306): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.685151][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.707901][ T30] audit: type=1400 audit(1744520802.824:307): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.733085][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.753105][ T30] audit: type=1400 audit(1744520802.824:308): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.778738][ T30] audit: type=1400 audit(1744520802.864:309): avc: denied { map } for pid=6575 comm="syz.4.163" path="socket:[10062]" dev="sockfs" ino=10062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.878777][ T30] audit: type=1400 audit(1744520802.864:310): avc: denied { read } for pid=6575 comm="syz.4.163" path="socket:[10062]" dev="sockfs" ino=10062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.109040][ T5934] IPVS: starting estimator thread 0... [ 112.206771][ T6588] IPVS: using max 38 ests per chain, 91200 per kthread [ 112.410984][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.425473][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.460982][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.478656][ T30] audit: type=1400 audit(1744520803.664:311): avc: denied { ioctl } for pid=6578 comm="syz.1.164" path="socket:[10095]" dev="sockfs" ino=10095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.512519][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.656485][ T30] audit: type=1400 audit(1744520803.664:312): avc: denied { connect } for pid=6578 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.815766][ T6599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'. [ 113.601005][ T6597] netlink: 80 bytes leftover after parsing attributes in process `syz.2.171'. [ 114.255731][ T972] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 114.299741][ T5873] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 115.047778][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 115.105414][ T972] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 115.143073][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.195407][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.203555][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.234833][ T5873] usb 3-1: New USB device found, idVendor=044f, idProduct=b6d5, bcdDevice= 0.00 [ 115.249290][ T972] usb 2-1: config 0 descriptor?? [ 115.254511][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.263037][ T6612] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.849711][ T5873] usb 3-1: config 0 descriptor?? [ 115.869748][ T6612] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 115.892319][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.901268][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.910911][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.919919][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.220223][ T6638] fuse: Unknown parameter 'f3' [ 116.229675][ T6638] fuse: Bad value for 'fd' [ 116.270028][ T5873] hid-generic 0003:044F:B6D5.0003: unknown main item tag 0x0 [ 116.293208][ T5873] hid-generic 0003:044F:B6D5.0003: hidraw0: USB HID v20.00 Device [HID 044f:b6d5] on usb-dummy_hcd.2-1/input0 [ 116.360148][ T972] usbhid 2-1:0.0: can't add hid device: -71 [ 116.378473][ T972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.414567][ T972] usb 2-1: USB disconnect, device number 9 [ 116.589276][ T6647] netlink: 80 bytes leftover after parsing attributes in process `syz.3.186'. [ 116.598466][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.030212][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 117.168548][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.246369][ T5874] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 117.255737][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.265845][ T5874] usb 1-1: Product: syz [ 117.270764][ T5874] usb 1-1: Manufacturer: syz [ 117.275468][ T5874] usb 1-1: SerialNumber: syz [ 117.283089][ T5874] usb 1-1: config 0 descriptor?? [ 117.322515][ T5874] usb 1-1: selecting invalid altsetting 1 [ 117.340255][ T5874] usb 1-1: Can not set alternate setting to 1, error: -22 [ 117.362122][ T5874] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22 [ 117.524248][ T5874] usb 1-1: USB disconnect, device number 10 [ 118.040358][ T972] usb 3-1: USB disconnect, device number 6 [ 118.305518][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 118.313990][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 118.321763][ T5827] Bluetooth: hci2: hardware error 0x00 [ 118.435303][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 118.456576][ T6675] FAULT_INJECTION: forcing a failure. [ 118.456576][ T6675] name failslab, interval 1, probability 0, space 0, times 1 [ 118.480809][ T30] audit: type=1400 audit(1744520809.614:324): avc: denied { read } for pid=6673 comm="syz.1.192" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.511248][ T30] audit: type=1400 audit(1744520809.634:325): avc: denied { open } for pid=6673 comm="syz.1.192" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.515752][ T6675] CPU: 1 UID: 0 PID: 6675 Comm: syz.1.192 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 118.515774][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.515782][ T6675] Call Trace: [ 118.515787][ T6675] [ 118.515792][ T6675] dump_stack_lvl+0x16c/0x1f0 [ 118.515816][ T6675] should_fail_ex+0x512/0x640 [ 118.515832][ T6675] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 118.515849][ T6675] should_failslab+0xc2/0x120 [ 118.515866][ T6675] __kmalloc_cache_node_noprof+0x6d/0x420 [ 118.515880][ T6675] ? __get_vm_area_node+0x101/0x300 [ 118.515902][ T6675] __get_vm_area_node+0x101/0x300 [ 118.515921][ T6675] ? vb2_fop_write+0x207/0x3f0 [ 118.515938][ T6675] __vmalloc_node_range_noprof+0x277/0x1540 [ 118.515959][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.515983][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.516004][ T6675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.516030][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.516047][ T6675] vmalloc_user_noprof+0x6b/0x90 [ 118.516067][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.516082][ T6675] vb2_vmalloc_alloc+0x135/0x3f0 [ 118.516100][ T6675] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 118.516115][ T6675] __vb2_queue_alloc+0x8c6/0x1280 [ 118.516142][ T6675] vb2_core_reqbufs+0xa90/0xfe0 [ 118.516163][ T6675] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 118.516191][ T6675] __vb2_init_fileio+0x3f1/0x1100 [ 118.516206][ T6675] ? __mutex_lock+0x1ca/0xb90 [ 118.516227][ T6675] ? vb2_fop_write+0xe6/0x3f0 [ 118.516243][ T6675] __vb2_perform_fileio+0x9c2/0x1660 [ 118.516265][ T6675] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 118.516288][ T6675] vb2_fop_write+0x207/0x3f0 [ 118.516307][ T6675] v4l2_write+0x226/0x360 [ 118.516329][ T6675] vfs_write+0x25c/0x1180 [ 118.516341][ T6675] ? __pfx_v4l2_write+0x10/0x10 [ 118.516364][ T6675] ? __pfx_vfs_write+0x10/0x10 [ 118.516375][ T6675] ? find_held_lock+0x2b/0x80 [ 118.516393][ T6675] ? __fget_files+0x204/0x3c0 [ 118.516416][ T6675] ? __fget_files+0x20e/0x3c0 [ 118.516428][ T6675] ? handle_softirqs+0x570/0x8e0 [ 118.516452][ T6675] ksys_write+0x12a/0x240 [ 118.516465][ T6675] ? __pfx_ksys_write+0x10/0x10 [ 118.516484][ T6675] do_syscall_64+0xcd/0x260 [ 118.516505][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.516519][ T6675] RIP: 0033:0x7f59f938d169 [ 118.516532][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.516545][ T6675] RSP: 002b:00007f59fa230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.516559][ T6675] RAX: ffffffffffffffda RBX: 00007f59f95a5fa0 RCX: 00007f59f938d169 [ 118.516568][ T6675] RDX: 00000000fffffd9d RSI: 0000200000000100 RDI: 000000000000000e [ 118.516577][ T6675] RBP: 00007f59fa230090 R08: 0000000000000000 R09: 0000000000000000 [ 118.516585][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.516593][ T6675] R13: 0000000000000000 R14: 00007f59f95a5fa0 R15: 00007fffdcac0198 [ 118.516612][ T6675] [ 118.516780][ T6675] syz.1.192: vmalloc error: size 53248, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 118.862174][ T6675] ,cpuset=/,mems_allowed=0-1 [ 118.869612][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.1.192 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 118.869637][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.869647][ T6675] Call Trace: [ 118.869652][ T6675] [ 118.869659][ T6675] dump_stack_lvl+0x16c/0x1f0 [ 118.869688][ T6675] warn_alloc+0x248/0x3a0 [ 118.869708][ T6675] ? __pfx_warn_alloc+0x10/0x10 [ 118.869725][ T6675] ? rcu_is_watching+0x12/0xc0 [ 118.869745][ T6675] ? trace_kmalloc+0x2b/0xd0 [ 118.869764][ T6675] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 118.869783][ T6675] ? __kasan_kmalloc+0x8a/0xb0 [ 118.869800][ T6675] ? __get_vm_area_node+0x1e5/0x300 [ 118.869829][ T6675] __vmalloc_node_range_noprof+0xd31/0x1540 [ 118.869863][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.869889][ T6675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.869921][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.869941][ T6675] vmalloc_user_noprof+0x6b/0x90 [ 118.869965][ T6675] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 118.869983][ T6675] vb2_vmalloc_alloc+0x135/0x3f0 [ 118.870004][ T6675] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 118.870023][ T6675] __vb2_queue_alloc+0x8c6/0x1280 [ 118.870055][ T6675] vb2_core_reqbufs+0xa90/0xfe0 [ 118.870079][ T6675] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 118.870116][ T6675] __vb2_init_fileio+0x3f1/0x1100 [ 118.870135][ T6675] ? __mutex_lock+0x1ca/0xb90 [ 118.870160][ T6675] ? vb2_fop_write+0xe6/0x3f0 [ 118.870179][ T6675] __vb2_perform_fileio+0x9c2/0x1660 [ 118.870205][ T6675] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 118.870233][ T6675] vb2_fop_write+0x207/0x3f0 [ 118.870255][ T6675] v4l2_write+0x226/0x360 [ 118.870281][ T6675] vfs_write+0x25c/0x1180 [ 118.870294][ T6675] ? __pfx_v4l2_write+0x10/0x10 [ 118.870322][ T6675] ? __pfx_vfs_write+0x10/0x10 [ 118.870335][ T6675] ? find_held_lock+0x2b/0x80 [ 118.870356][ T6675] ? __fget_files+0x204/0x3c0 [ 118.870376][ T6675] ? __fget_files+0x20e/0x3c0 [ 118.870390][ T6675] ? handle_softirqs+0x570/0x8e0 [ 118.870434][ T6675] ksys_write+0x12a/0x240 [ 118.870450][ T6675] ? __pfx_ksys_write+0x10/0x10 [ 118.870472][ T6675] do_syscall_64+0xcd/0x260 [ 118.870495][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.870509][ T6675] RIP: 0033:0x7f59f938d169 [ 118.870524][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.870538][ T6675] RSP: 002b:00007f59fa230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.870554][ T6675] RAX: ffffffffffffffda RBX: 00007f59f95a5fa0 RCX: 00007f59f938d169 [ 118.870565][ T6675] RDX: 00000000fffffd9d RSI: 0000200000000100 RDI: 000000000000000e [ 118.870575][ T6675] RBP: 00007f59fa230090 R08: 0000000000000000 R09: 0000000000000000 [ 118.870584][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.870593][ T6675] R13: 0000000000000000 R14: 00007f59f95a5fa0 R15: 00007fffdcac0198 [ 118.870621][ T6675] [ 118.872275][ T6675] Mem-Info: [ 119.179236][ T30] audit: type=1400 audit(1744520809.984:326): avc: denied { create } for pid=6672 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.199590][ T30] audit: type=1400 audit(1744520809.984:327): avc: denied { read } for pid=6672 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.301189][ T6674] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 119.440805][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.632345][ T6684] netlink: 96 bytes leftover after parsing attributes in process `syz.0.195'. [ 119.655753][ T6675] active_anon:6537 inactive_anon:0 isolated_anon:0 [ 119.655753][ T6675] active_file:3073 inactive_file:38564 isolated_file:0 [ 119.655753][ T6675] unevictable:768 dirty:77 writeback:0 [ 119.655753][ T6675] slab_reclaimable:10729 slab_unreclaimable:98129 [ 119.655753][ T6675] mapped:30568 shmem:1718 pagetables:1069 [ 119.655753][ T6675] sec_pagetables:0 bounce:0 [ 119.655753][ T6675] kernel_misc_reclaimable:0 [ 119.655753][ T6675] free:1334380 free_pcp:617 free_cma:0 [ 119.767268][ T6675] Node 0 active_anon:27848kB inactive_anon:0kB active_file:12292kB inactive_file:154180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122872kB dirty:308kB writeback:0kB shmem:6936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11516kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.803444][ T6675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.076279][ T6690] syz.4.196: attempt to access beyond end of device [ 120.076279][ T6690] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 120.090068][ T6690] syz.4.196: attempt to access beyond end of device [ 120.090068][ T6690] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 120.102925][ T6690] Mount JFS Failure: -5 [ 120.131585][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 120.139154][ T6675] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.170201][ T6675] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 120.204858][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.265484][ T6675] Node 0 DMA32 free:1392624kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:45916kB inactive_anon:0kB active_file:12588kB inactive_file:152628kB unevictable:1536kB writepending:476kB present:3129332kB managed:2541520kB mlocked:0kB bounce:0kB free_pcp:2364kB local_pcp:1060kB free_cma:0kB [ 120.299713][ T6675] lowmem_reserve[]: 0 0 1 1 1 [ 120.304585][ T6675] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 120.385193][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 120.397393][ T6675] lowmem_reserve[]: 0 0 0 0 0 [ 120.415912][ T6675] Node 1 Normal free:3908144kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 120.448421][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.457131][ T24] usb 3-1: Product: syz [ 120.458712][ T6675] lowmem_reserve[]: 0 0 0 0 0 [ 120.461411][ T24] usb 3-1: Manufacturer: syz [ 120.467363][ T6675] Node 0 DMA: 0*4kB [ 120.477321][ T24] usb 3-1: SerialNumber: syz [ 120.495531][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 120.503098][ T6675] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.520750][ T24] usb 3-1: config 0 descriptor?? [ 120.532515][ T24] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 120.541047][ T24] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 120.548008][ T6675] Node 0 DMA32: 515*4kB (U) 257*8kB (UME) 162*16kB (U) 25*32kB (UME) 112*64kB (UME) 29*128kB (UME) 49*256kB (UM) 35*512kB (UME) 17*1024kB (UM) 8*2048kB (UM) 317*4096kB (UM) = 1381076kB [ 120.575465][ T5827] Bluetooth: hci3: command 0x0401 tx timeout [ 120.669600][ T6675] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 120.702725][ T6675] Node 1 Normal: 209*4kB (UME) 54*8kB (UME) 43*16kB (UME) 214*32kB (UME) 95*64kB (UME) 34*128kB (UME) 22*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 944*4096kB (M) = 3908388kB [ 120.728235][ T6692] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.735987][ T6675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.834601][ T6675] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 120.848220][ T6675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.858380][ T6675] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 120.868541][ T6694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.885359][ T6675] 43147 total pagecache pages [ 120.890288][ T6675] 0 pages in swap cache [ 120.895459][ T6675] Free swap = 124996kB [ 120.900248][ T6675] Total swap = 124996kB [ 120.910358][ T6675] 2097051 pages RAM [ 120.920478][ T6675] 0 pages HighMem/MovableOnly [ 120.925420][ T6675] 429629 pages reserved [ 120.929763][ T6675] 0 pages cma reserved [ 121.078333][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.102463][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.425441][ T5831] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.586300][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 121.592852][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.604903][ T5831] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 121.614434][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.623318][ T5831] usb 2-1: Product: syz [ 121.634261][ T5831] usb 2-1: Manufacturer: syz [ 121.639011][ T5831] usb 2-1: SerialNumber: syz [ 121.647483][ T5831] usb 2-1: config 0 descriptor?? [ 121.656763][ T5831] usb 2-1: no audio or video endpoints found [ 121.988036][ T5831] usb 2-1: USB disconnect, device number 10 [ 122.035902][ T975] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 122.037415][ T24] usb 3-1: USB disconnect, device number 7 [ 122.198999][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.214099][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.224256][ T975] usb 1-1: New USB device found, idVendor=044f, idProduct=b6d5, bcdDevice= 0.00 [ 122.235241][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.245641][ T975] usb 1-1: config 0 descriptor?? [ 122.355419][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.531185][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.577017][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.588954][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.611193][ T5874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.640047][ T30] audit: type=1400 audit(1744520813.814:328): avc: denied { mount } for pid=6716 comm="syz.1.205" name="/" dev="autofs" ino=10443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 122.662786][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.758471][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'. [ 122.759196][ T30] audit: type=1400 audit(1744520813.824:329): avc: denied { mounton } for pid=6716 comm="syz.1.205" path="/43/file1/file0" dev="autofs" ino=10445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 122.806717][ T975] hid-generic 0003:044F:B6D5.0004: unknown main item tag 0x0 [ 123.333416][ T5874] usb 4-1: config 0 descriptor?? [ 123.343689][ T975] hid-generic 0003:044F:B6D5.0004: hidraw0: USB HID v20.00 Device [HID 044f:b6d5] on usb-dummy_hcd.0-1/input0 [ 123.530760][ T30] audit: type=1400 audit(1744520814.714:330): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 123.810246][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 124.209632][ T5874] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 12/15 [ 124.218721][ T5874] plantronics 0003:047F:FFFF.0005: parse failed [ 124.226861][ T5874] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 124.434431][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.444426][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.469895][ T5934] usb 4-1: USB disconnect, device number 6 [ 124.662743][ T24] usb 1-1: USB disconnect, device number 11 [ 125.769923][ T30] audit: type=1400 audit(1744520816.944:331): avc: denied { setopt } for pid=6733 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.083993][ T30] audit: type=1400 audit(1744520817.264:332): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.515459][ T6755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.214'. [ 126.875467][ T30] audit: type=1400 audit(1744520818.054:333): avc: denied { setopt } for pid=6753 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.961642][ T6760] atomic_op ffff888056548998 conn xmit_atomic 0000000000000000 [ 127.347778][ T6762] syz.0.216 uses obsolete (PF_INET,SOCK_PACKET) [ 127.493477][ T30] audit: type=1400 audit(1744520818.674:334): avc: denied { setopt } for pid=6753 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 127.577168][ T5827] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 127.643302][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 128.301956][ T6765] could not allocate digest TFM handle vmac(blowfish-generic) [ 129.124722][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 129.398162][ T6783] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.509271][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.545431][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.565829][ T24] usb 1-1: New USB device found, idVendor=044f, idProduct=b6d5, bcdDevice= 0.00 [ 129.580296][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.609018][ T24] usb 1-1: config 0 descriptor?? [ 130.034893][ T24] hid-generic 0003:044F:B6D5.0006: unknown main item tag 0x0 [ 130.049741][ T24] hid-generic 0003:044F:B6D5.0006: hidraw0: USB HID v20.00 Device [HID 044f:b6d5] on usb-dummy_hcd.0-1/input0 [ 131.364306][ T6801] syzkaller1: entered promiscuous mode [ 131.377279][ T6801] syzkaller1: entered allmulticast mode [ 131.493411][ T30] audit: type=1400 audit(1744520822.644:335): avc: denied { write } for pid=6800 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.498585][ T6801] bond0: entered allmulticast mode [ 131.782495][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.817797][ T30] audit: type=1400 audit(1744520823.004:336): avc: denied { search } for pid=6806 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.856441][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.923304][ T30] audit: type=1400 audit(1744520823.014:337): avc: denied { read } for pid=6811 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.961134][ T30] audit: type=1400 audit(1744520823.014:338): avc: denied { open } for pid=6811 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.244006][ T30] audit: type=1400 audit(1744520823.014:339): avc: denied { getattr } for pid=6811 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.389532][ T5873] usb 1-1: USB disconnect, device number 12 [ 132.490245][ T30] audit: type=1400 audit(1744520823.014:340): avc: denied { getattr } for pid=6811 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.526535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.532974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.659846][ T30] audit: type=1400 audit(1744520823.084:341): avc: denied { checkpoint_restore } for pid=6799 comm="syz.2.228" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.682889][ T30] audit: type=1400 audit(1744520823.084:342): avc: denied { open } for pid=6799 comm="syz.2.228" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 132.719220][ T30] audit: type=1400 audit(1744520823.094:343): avc: denied { ioctl } for pid=6799 comm="syz.2.228" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 133.025087][ T30] audit: type=1400 audit(1744520823.094:344): avc: denied { name_bind } for pid=6799 comm="syz.2.228" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 133.785949][ T975] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 133.946694][ T975] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 133.966425][ T975] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 134.006286][ T975] usb 4-1: config 5 has no interface number 0 [ 134.032054][ T975] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 134.044627][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.077253][ T975] usb 4-1: Product: syz [ 134.093244][ T975] usb 4-1: Manufacturer: syz [ 134.346068][ T975] usb 4-1: SerialNumber: syz [ 134.696152][ T6863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.236'. [ 134.705218][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 134.720770][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 134.732649][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 134.808474][ T6865] xt_hashlimit: max too large, truncated to 1048576 [ 135.599578][ T5930] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 135.855637][ T5930] usb 1-1: device descriptor read/64, error -71 [ 136.111617][ T5930] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 136.309069][ T5930] usb 1-1: device descriptor read/64, error -71 [ 136.540386][ T5930] usb usb1-port1: attempt power cycle [ 136.598834][ T975] comedi comedi0: Wrong number of endpoints [ 136.618410][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.627340][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.726868][ T975] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 136.754849][ T975] usb 4-1: USB disconnect, device number 7 [ 136.773857][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 136.773872][ T30] audit: type=1400 audit(1744520827.934:360): avc: denied { create } for pid=6894 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.772197][ T30] audit: type=1400 audit(1744520827.954:361): avc: denied { bind } for pid=6894 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.004080][ T5930] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 138.027858][ T30] audit: type=1400 audit(1744520827.954:362): avc: denied { connect } for pid=6894 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.066091][ T5930] usb 1-1: device descriptor read/8, error -71 [ 138.124033][ T6905] FAULT_INJECTION: forcing a failure. [ 138.124033][ T6905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.140551][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.3.245 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 138.140577][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.140588][ T6905] Call Trace: [ 138.140594][ T6905] [ 138.140601][ T6905] dump_stack_lvl+0x16c/0x1f0 [ 138.140634][ T6905] should_fail_ex+0x512/0x640 [ 138.140656][ T6905] _copy_from_user+0x2e/0xd0 [ 138.140677][ T6905] copy_msghdr_from_user+0x98/0x160 [ 138.140700][ T6905] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.140733][ T6905] ___sys_sendmsg+0xfe/0x1d0 [ 138.140755][ T6905] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.140807][ T6905] __sys_sendmsg+0x16d/0x220 [ 138.140828][ T6905] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.140864][ T6905] do_syscall_64+0xcd/0x260 [ 138.140889][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.140906][ T6905] RIP: 0033:0x7f021238d169 [ 138.140919][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.140934][ T6905] RSP: 002b:00007f0213231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.140949][ T6905] RAX: ffffffffffffffda RBX: 00007f02125a5fa0 RCX: 00007f021238d169 [ 138.140957][ T6905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.140964][ T6905] RBP: 00007f0213231090 R08: 0000000000000000 R09: 0000000000000000 [ 138.140969][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.140975][ T6905] R13: 0000000000000000 R14: 00007f02125a5fa0 R15: 00007ffcd71548b8 [ 138.140989][ T6905] [ 138.425392][ T5930] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 138.872790][ T5930] usb 1-1: device not accepting address 16, error -71 [ 138.884224][ T5930] usb usb1-port1: unable to enumerate USB device [ 138.908731][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 139.044990][ T6911] could not allocate digest TFM handle vmac(blowfish-generic) [ 139.390517][ T6920] netlink: 68 bytes leftover after parsing attributes in process `syz.3.249'. [ 139.399752][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.249'. [ 139.431745][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.249'. [ 139.481403][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 139.518164][ T6923] netlink: 80 bytes leftover after parsing attributes in process `syz.0.250'. [ 140.332556][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.341994][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.350308][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.361059][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.370040][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.386532][ T30] audit: type=1400 audit(1744520831.574:363): avc: denied { mounton } for pid=6930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 140.602560][ T30] audit: type=1400 audit(1744520831.784:364): avc: denied { create } for pid=6933 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 140.702767][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 140.809277][ T6947] vivid-003: ================= START STATUS ================= [ 141.141837][ T6947] vivid-003: Radio HW Seek Mode: Bounded [ 141.154320][ T6947] vivid-003: Radio Programmable HW Seek: false [ 141.174643][ T6947] vivid-003: RDS Rx I/O Mode: Block I/O [ 141.201782][ T6947] vivid-003: Generate RBDS Instead of RDS: false [ 141.240955][ T6947] vivid-003: RDS Reception: true [ 141.256841][ T6947] vivid-003: RDS Program Type: 0 inactive [ 141.262810][ T6947] vivid-003: RDS PS Name: inactive [ 141.269247][ T6947] vivid-003: RDS Radio Text: inactive [ 141.275061][ T6947] vivid-003: RDS Traffic Announcement: false inactive [ 141.284592][ T6947] vivid-003: RDS Traffic Program: false inactive [ 141.291897][ T6947] vivid-003: RDS Music: false inactive [ 141.297958][ T6947] vivid-003: ================== END STATUS ================== [ 141.371834][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.390935][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.415185][ T6947] overlay: Unknown parameter 'fowner' [ 141.432262][ T6930] bridge_slave_0: entered allmulticast mode [ 141.463898][ T6930] bridge_slave_0: entered promiscuous mode [ 141.492562][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.508024][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.633002][ T6930] bridge_slave_1: entered allmulticast mode [ 141.644789][ T6930] bridge_slave_1: entered promiscuous mode [ 141.705863][ T30] audit: type=1400 audit(1744520832.884:365): avc: denied { block_suspend } for pid=6958 comm="syz.0.258" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.956404][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.009983][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.418836][ T30] audit: type=1400 audit(1744520833.604:366): avc: denied { nlmsg_write } for pid=6969 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 142.441772][ T5836] Bluetooth: hci3: command tx timeout [ 142.549056][ T6930] team0: Port device team_slave_0 added [ 142.656019][ T6930] team0: Port device team_slave_1 added [ 142.840271][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.310438][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.369231][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.438658][ T6985] tipc: Started in network mode [ 143.443782][ T6985] tipc: Node identity 4, cluster identity 4711 [ 143.453203][ T6985] tipc: Node number set to 4 [ 143.462005][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.484985][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.631360][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.847131][ T6930] hsr_slave_0: entered promiscuous mode [ 143.857420][ T6974] FAULT_INJECTION: forcing a failure. [ 143.857420][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 143.873571][ T6930] hsr_slave_1: entered promiscuous mode [ 144.230466][ T6930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.245403][ T6930] Cannot create hsr debugfs directory [ 144.252762][ T6974] CPU: 0 UID: 0 PID: 6974 Comm: syz.3.263 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 144.252789][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.252799][ T6974] Call Trace: [ 144.252805][ T6974] [ 144.252812][ T6974] dump_stack_lvl+0x16c/0x1f0 [ 144.252842][ T6974] should_fail_ex+0x512/0x640 [ 144.252860][ T6974] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 144.252881][ T6974] should_failslab+0xc2/0x120 [ 144.252901][ T6974] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 144.252919][ T6974] ? __alloc_skb+0x2b2/0x380 [ 144.252943][ T6974] __alloc_skb+0x2b2/0x380 [ 144.252963][ T6974] ? __pfx___alloc_skb+0x10/0x10 [ 144.252980][ T6974] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 144.253002][ T6974] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 144.253031][ T6974] netlink_alloc_large_skb+0x69/0x130 [ 144.253057][ T6974] netlink_sendmsg+0x6a1/0xdd0 [ 144.253083][ T6974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.253115][ T6974] ____sys_sendmsg+0xa95/0xc70 [ 144.253141][ T6974] ? copy_msghdr_from_user+0x10a/0x160 [ 144.253161][ T6974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.253197][ T6974] ___sys_sendmsg+0x134/0x1d0 [ 144.253218][ T6974] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.253268][ T6974] __sys_sendmsg+0x16d/0x220 [ 144.253289][ T6974] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.253316][ T6974] ? rcu_is_watching+0x12/0xc0 [ 144.253349][ T6974] do_syscall_64+0xcd/0x260 [ 144.253375][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.253392][ T6974] RIP: 0033:0x7f021238d169 [ 144.253406][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.253422][ T6974] RSP: 002b:00007f0213231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.253440][ T6974] RAX: ffffffffffffffda RBX: 00007f02125a5fa0 RCX: 00007f021238d169 [ 144.253450][ T6974] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 144.253460][ T6974] RBP: 00007f0213231090 R08: 0000000000000000 R09: 0000000000000000 [ 144.253470][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.253480][ T6974] R13: 0000000000000000 R14: 00007f02125a5fa0 R15: 00007ffcd71548b8 [ 144.253502][ T6974] [ 144.509039][ T30] audit: type=1400 audit(1744520835.434:367): avc: denied { append } for pid=6972 comm="syz.3.263" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 144.557682][ T5836] Bluetooth: hci3: command tx timeout [ 144.698952][ T5836] Bluetooth: hci0: link tx timeout [ 144.708065][ T5836] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.855430][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.099198][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 145.106779][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 145.123854][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.141393][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.158315][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 145.168432][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 145.188901][ T5930] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 145.198762][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.208225][ T5930] usb 4-1: config 0 descriptor?? [ 145.211907][ T7014] netlink: 288 bytes leftover after parsing attributes in process `syz.0.271'. [ 145.226721][ T5827] Bluetooth: hci5: urb ffff88806fe02300 submission failed (90) [ 145.243746][ T30] audit: type=1400 audit(1744520836.424:368): avc: denied { bind } for pid=7012 comm="syz.0.271" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.271610][ T30] audit: type=1400 audit(1744520836.454:369): avc: denied { node_bind } for pid=7012 comm="syz.0.271" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 145.284409][ T6930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.299979][ T975] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 145.324486][ T6930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.340948][ T6930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.358680][ T6930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.401934][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 145.424138][ T24] usb 4-1: USB disconnect, device number 8 [ 145.461879][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.499547][ T975] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 145.527304][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.541560][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.555820][ T975] usb 3-1: Product: syz [ 145.560029][ T975] usb 3-1: Manufacturer: syz [ 145.574508][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.577463][ T975] usb 3-1: SerialNumber: syz [ 145.581675][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.604553][ T975] usb 3-1: config 0 descriptor?? [ 145.626654][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.630587][ T975] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 145.633803][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.683972][ T975] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 145.747628][ T975] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 145.867688][ T7023] 9pnet_fd: Insufficient options for proto=fd [ 145.921326][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.274'. [ 145.936948][ T30] audit: type=1400 audit(1744520837.124:370): avc: denied { setopt } for pid=7024 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.250833][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 146.262441][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 146.293315][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.308510][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.322260][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.366273][ T975] usb 3-1: USB disconnect, device number 8 [ 146.593115][ T5827] Bluetooth: hci3: command tx timeout [ 146.731559][ T6930] veth0_vlan: entered promiscuous mode [ 146.755220][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 146.839737][ T6930] veth1_vlan: entered promiscuous mode [ 146.851771][ T7051] input: syz1 as /devices/virtual/input/input9 [ 147.049514][ T6930] veth0_macvtap: entered promiscuous mode [ 147.068315][ T6930] veth1_macvtap: entered promiscuous mode [ 147.088504][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.102594][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.113414][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.124538][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.134877][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.147198][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.157329][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.168516][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.178723][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.190330][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.202537][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.251381][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.283943][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.301454][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.313461][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.323943][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.382520][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.425488][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.440524][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.452400][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.465422][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.733478][ T30] audit: type=1400 audit(1744520838.894:371): avc: denied { create } for pid=7058 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.057851][ T30] audit: type=1400 audit(1744520838.904:372): avc: denied { connect } for pid=7058 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.135267][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.140612][ T30] audit: type=1400 audit(1744520838.904:373): avc: denied { bind } for pid=7058 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.330718][ T6930] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.341880][ T6930] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.350807][ T6930] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.359661][ T6930] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.378564][ T30] audit: type=1400 audit(1744520838.904:374): avc: denied { write } for pid=7058 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.437279][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.446059][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.462813][ T7068] netlink: 80 bytes leftover after parsing attributes in process `syz.0.281'. [ 148.655626][ T5836] Bluetooth: hci3: command tx timeout [ 149.216978][ T30] audit: type=1400 audit(1744520840.404:375): avc: denied { getopt } for pid=7074 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.359325][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.370110][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.469995][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.486459][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.521551][ T30] audit: type=1400 audit(1744520840.704:376): avc: denied { mounton } for pid=6930 comm="syz-executor" path="/root/syzkaller.StIrJu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.571422][ T30] audit: type=1400 audit(1744520840.744:377): avc: denied { mount } for pid=6930 comm="syz-executor" name="/" dev="gadgetfs" ino=6379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 150.268393][ T7106] xt_l2tp: v2 doesn't support IP mode [ 151.350528][ T7120] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 151.579558][ T7123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.296'. [ 152.266741][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.5.297'. [ 152.781323][ T30] audit: type=1400 audit(1744520843.964:378): avc: denied { unlink } for pid=7130 comm="syz.4.298" name="#1" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.804681][ T7133] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 152.852035][ T30] audit: type=1400 audit(1744520844.034:379): avc: denied { mount } for pid=7130 comm="syz.4.298" name="/" dev="overlay" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.086415][ T30] audit: type=1400 audit(1744520844.224:380): avc: denied { setopt } for pid=7139 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.141735][ T7146] netlink: 68 bytes leftover after parsing attributes in process `syz.4.304'. [ 153.150767][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 153.159742][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 153.171172][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 154.106014][ T30] audit: type=1400 audit(1744520844.644:381): avc: denied { read } for pid=7136 comm="syz.5.302" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.135867][ T7147] 9pnet_fd: Insufficient options for proto=fd [ 154.168424][ T7148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.581156][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.590655][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.632010][ T7148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.790905][ T30] audit: type=1326 audit(1744520845.974:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 154.836140][ T7148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.853144][ T30] audit: type=1326 audit(1744520845.974:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 154.931496][ T30] audit: type=1326 audit(1744520845.974:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 154.966852][ T7164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.979208][ T7164] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 155.004599][ T30] audit: type=1326 audit(1744520845.974:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 155.034306][ T7148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.056106][ T30] audit: type=1326 audit(1744520845.974:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 155.082861][ T30] audit: type=1326 audit(1744520845.984:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.0.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb23dd8d169 code=0x7ffc0000 [ 155.107972][ T975] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 155.188787][ T7148] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.206562][ T7148] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.226286][ T7148] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.242504][ T7148] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.287320][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.445377][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.479338][ T975] usb 3-1: New USB device found, idVendor=044f, idProduct=b6d5, bcdDevice= 0.00 [ 155.490798][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.308'. [ 155.500144][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.519395][ T975] usb 3-1: config 0 descriptor?? [ 155.957447][ T975] hid-generic 0003:044F:B6D5.0007: unknown main item tag 0x0 [ 155.993239][ T975] hid-generic 0003:044F:B6D5.0007: hidraw0: USB HID v20.00 Device [HID 044f:b6d5] on usb-dummy_hcd.2-1/input0 [ 156.126075][ T7176] tipc: Started in network mode [ 156.131108][ T7176] tipc: Node identity 4, cluster identity 4711 [ 156.137628][ T7176] tipc: Node number set to 4 [ 156.285550][ T7177] netlink: 80 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.686267][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 157.128017][ T7185] netlink: 80 bytes leftover after parsing attributes in process `syz.0.312'. [ 157.190596][ T7184] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 157.923324][ T975] usb 3-1: USB disconnect, device number 9 [ 159.151790][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 159.177713][ T7210] input: syz0 as /devices/virtual/input/input10 [ 159.383442][ T7216] netlink: 80 bytes leftover after parsing attributes in process `syz.4.324'. [ 160.810304][ T7229] 9pnet_fd: Insufficient options for proto=fd [ 160.930108][ T7242] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 160.978541][ T972] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 161.065789][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.100762][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.157745][ T972] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.171648][ T972] usb 4-1: config 0 has no interface number 0 [ 161.190532][ T972] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 161.200224][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 161.200239][ T30] audit: type=1400 audit(1744520852.384:493): avc: denied { bind } for pid=7253 comm="syz.5.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.209900][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.356093][ T972] usb 4-1: config 0 descriptor?? [ 161.373723][ T972] usb 4-1: selecting invalid altsetting 1 [ 161.460048][ T7260] netlink: 132 bytes leftover after parsing attributes in process `syz.2.337'. [ 161.982888][ T972] dvb_ttusb_budget: ttusb_init_controller: error [ 162.033014][ T972] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 162.084728][ T30] audit: type=1400 audit(1744520853.264:494): avc: denied { write } for pid=7238 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.230762][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.340'. [ 162.263063][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.274934][ T7270] netlink: 256 bytes leftover after parsing attributes in process `syz.2.342'. [ 162.316353][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.349438][ T972] DVB: Unable to find symbol cx22700_attach() [ 162.426386][ T972] DVB: Unable to find symbol tda10046_attach() [ 162.441390][ T972] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 162.464767][ T7276] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 162.635167][ T7282] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.711380][ T7282] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.752831][ T7282] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.811863][ T7282] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.901903][ T7282] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.948478][ T7282] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.017096][ T7282] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.060393][ T7282] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.575606][ T5836] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 163.708850][ T30] audit: type=1400 audit(1744520854.894:495): avc: denied { getopt } for pid=7297 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.737107][ T30] audit: type=1400 audit(1744520854.914:496): avc: denied { getopt } for pid=7297 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.076639][ T7239] i2c i2c-1: failure writing data [ 164.308662][ T972] usb 4-1: USB disconnect, device number 9 [ 164.412024][ T7308] autofs: Unknown parameter '}`om.' [ 164.959839][ T7321] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.982480][ T7321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.003767][ T7308] sctp: [Deprecated]: syz.3.357 (pid 7308) Use of int in max_burst socket option deprecated. [ 165.003767][ T7308] Use struct sctp_assoc_value instead [ 165.069300][ T30] audit: type=1400 audit(1744520856.254:497): avc: denied { setopt } for pid=7322 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.445618][ T7328] sp0: Synchronizing with TNC [ 166.161339][ T7325] [U] [ 167.284831][ T30] audit: type=1400 audit(1744520858.384:498): avc: denied { relabelfrom } for pid=7330 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 167.306610][ T7335] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 167.338968][ T30] audit: type=1400 audit(1744520858.394:499): avc: denied { relabelto } for pid=7330 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 167.553679][ T30] audit: type=1400 audit(1744520858.704:500): avc: denied { map } for pid=7330 comm="syz.4.362" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.727071][ T5873] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 167.934155][ T5873] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.074616][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.194627][ T5873] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 168.214176][ T7350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.366'. [ 168.321756][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.354125][ T5873] usb 3-1: config 0 descriptor?? [ 168.588641][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 168.626708][ T7356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.648910][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.368'. [ 168.650061][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.789880][ T7356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.853142][ T5873] usb 3-1: USB disconnect, device number 10 [ 168.888173][ T7356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.947184][ T30] audit: type=1400 audit(1744520860.134:501): avc: denied { watch watch_reads } for pid=7363 comm="syz.4.371" path="/81/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 169.046546][ T7356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.120600][ T30] audit: type=1400 audit(1744520860.224:502): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 169.549171][ T7379] 9pnet_fd: Insufficient options for proto=fd [ 169.706809][ T7356] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.723839][ T7356] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.742714][ T7356] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.761645][ T7356] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.866279][ T5836] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 169.963162][ T7387] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 170.044713][ T7393] fuse: Bad value for 'fd' [ 170.778156][ T30] audit: type=1326 audit(1744520861.964:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23dd8d169 code=0x7fc00000 [ 171.181490][ T7412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.555443][ T7412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.662679][ T7412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.767077][ T7412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.876718][ T7412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.890258][ T7412] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.902688][ T7412] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.915175][ T7412] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.109808][ T7422] Cannot find add_set index 0 as target [ 172.225409][ T7425] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 172.430097][ T7438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.396'. [ 172.590272][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.643402][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.840445][ T7451] tmpfs: Unknown parameter '' [ 173.095197][ T7451] 9pnet_fd: Insufficient options for proto=fd [ 173.388774][ T30] audit: type=1400 audit(1744520864.574:504): avc: denied { ioctl } for pid=7456 comm="syz.5.402" path="socket:[14295]" dev="sockfs" ino=14295 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.678536][ T7465] kAFS: unable to lookup cell '/yz1' [ 173.975694][ T30] audit: type=1400 audit(1744520865.134:505): avc: denied { getopt } for pid=7470 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.048929][ T7468] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.543662][ T30] audit: type=1400 audit(1744520865.324:506): avc: denied { ioctl } for pid=7472 comm="syz.5.408" path="socket:[14323]" dev="sockfs" ino=14323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.574396][ T7480] FAULT_INJECTION: forcing a failure. [ 174.574396][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.708751][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.3.409 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 174.708775][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.708785][ T7480] Call Trace: [ 174.708790][ T7480] [ 174.708797][ T7480] dump_stack_lvl+0x16c/0x1f0 [ 174.708824][ T7480] should_fail_ex+0x512/0x640 [ 174.708846][ T7480] _copy_from_user+0x2e/0xd0 [ 174.708866][ T7480] hci_get_auth_info+0x90/0x4d0 [ 174.708887][ T7480] ? __pfx_hci_get_auth_info+0x10/0x10 [ 174.708911][ T7480] ? __local_bh_enable_ip+0xa4/0x120 [ 174.708936][ T7480] hci_sock_ioctl+0x68c/0x7d0 [ 174.708956][ T7480] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 174.708979][ T7480] sock_do_ioctl+0x115/0x280 [ 174.709012][ T7480] ? __pfx_sock_do_ioctl+0x10/0x10 [ 174.709041][ T7480] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 174.709067][ T7480] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 174.709094][ T7480] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 174.709123][ T7480] sock_ioctl+0x227/0x6b0 [ 174.709139][ T7480] ? __pfx_sock_ioctl+0x10/0x10 [ 174.709152][ T7480] ? hook_file_ioctl_common+0x145/0x410 [ 174.709175][ T7480] ? selinux_file_ioctl+0x180/0x270 [ 174.709198][ T7480] ? selinux_file_ioctl+0xb4/0x270 [ 174.709223][ T7480] ? __pfx_sock_ioctl+0x10/0x10 [ 174.709239][ T7480] __x64_sys_ioctl+0x190/0x200 [ 174.709265][ T7480] do_syscall_64+0xcd/0x260 [ 174.709288][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.709305][ T7480] RIP: 0033:0x7f021238d169 [ 174.709319][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.709335][ T7480] RSP: 002b:00007f0213231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.709350][ T7480] RAX: ffffffffffffffda RBX: 00007f02125a5fa0 RCX: 00007f021238d169 [ 174.709361][ T7480] RDX: 00002000000001c0 RSI: 00000000800448d7 RDI: 0000000000000004 [ 174.709370][ T7480] RBP: 00007f0213231090 R08: 0000000000000000 R09: 0000000000000000 [ 174.709379][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.709389][ T7480] R13: 0000000000000000 R14: 00007f02125a5fa0 R15: 00007ffcd71548b8 [ 174.709411][ T7480] [ 175.138647][ T7486] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 175.252889][ T7490] kvm: vcpu 0: requested 228 ns lapic timer period limited to 200000 ns [ 175.802806][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.419'. [ 176.734012][ T7520] netlink: 'syz.0.423': attribute type 3 has an invalid length. [ 177.197950][ T7527] tipc: Can't bind to reserved service type 0 [ 177.210134][ T30] audit: type=1400 audit(1744520868.384:507): avc: denied { setopt } for pid=7517 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.277908][ T975] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 177.316828][ T975] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.330715][ T7529] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 177.360578][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.426'. [ 177.526846][ T5930] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 177.745511][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 177.755609][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.9c [ 177.764772][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.774639][ T5930] usb 3-1: Product: syz [ 177.780575][ T5930] usb 3-1: Manufacturer: syz [ 177.785233][ T5930] usb 3-1: SerialNumber: syz [ 178.271834][ T5930] usb 3-1: config 0 descriptor?? [ 178.279901][ T5930] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 178.456638][ T7537] delete_channel: no stack [ 178.540071][ T30] audit: type=1326 audit(1744520869.714:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.568379][ T7551] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 178.603646][ T30] audit: type=1326 audit(1744520869.714:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f021238bad0 code=0x7ffc0000 [ 178.633598][ T30] audit: type=1326 audit(1744520869.714:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.676324][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.699794][ T30] audit: type=1326 audit(1744520869.754:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.734091][ T5930] gspca_sunplus: reg_w_riv err -71 [ 178.757499][ T5930] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 178.774110][ T5930] usb 3-1: USB disconnect, device number 11 [ 178.781367][ T30] audit: type=1326 audit(1744520869.754:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.810124][ T30] audit: type=1326 audit(1744520869.754:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.837866][ T30] audit: type=1326 audit(1744520869.754:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.866936][ T30] audit: type=1326 audit(1744520869.754:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.891475][ T30] audit: type=1326 audit(1744520869.754:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 178.935050][ T30] audit: type=1326 audit(1744520869.754:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021238d169 code=0x7ffc0000 [ 179.465697][ T7582] netlink: 72 bytes leftover after parsing attributes in process `syz.2.445'. [ 179.591003][ T7583] : renamed from team_slave_1 (while UP) [ 179.854339][ T7592] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 179.980841][ T7596] loop9: detected capacity change from 0 to 8 [ 179.992714][ T7596] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 180.003948][ T7596] loop9: partition table partially beyond EOD, truncated [ 180.012703][ T7596] loop9: p1 size 81768186 extends beyond EOD, truncated [ 180.253125][ T6091] udevd[6091]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 181.299465][ T7616] trusted_key: encrypted_key: insufficient parameters specified [ 181.629638][ T7612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.645192][ T7618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.692755][ T7612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.823345][ T7622] overlayfs: failed to clone upperpath [ 181.844607][ T7612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.921579][ T7612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.996429][ T7612] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.009922][ T7612] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.022463][ T7612] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.038688][ T7612] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.931283][ T7658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.963068][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 183.966015][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.471'. [ 184.007981][ T7663] netlink: 'syz.2.471': attribute type 5 has an invalid length. [ 184.021708][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 184.161661][ T7663] netlink: 84 bytes leftover after parsing attributes in process `syz.2.471'. [ 184.230934][ T7671] netlink: 87 bytes leftover after parsing attributes in process `syz.0.473'. [ 185.465420][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 185.465438][ T30] audit: type=1400 audit(1744520875.854:542): avc: denied { write } for pid=7681 comm="syz.2.475" path="socket:[14863]" dev="sockfs" ino=14863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.498184][ T7682] pim6reg: entered allmulticast mode [ 185.527342][ T7679] pim6reg: left allmulticast mode [ 185.660223][ T30] audit: type=1400 audit(1744520876.844:543): avc: denied { getopt } for pid=7674 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.776475][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 185.798899][ T7691] syz.4.479: attempt to access beyond end of device [ 185.798899][ T7691] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 185.859539][ T7691] XFS (loop4): SB validate failed with error -5. [ 186.264952][ T7709] netlink: 80 bytes leftover after parsing attributes in process `syz.5.483'. [ 186.314355][ T30] audit: type=1326 audit(1744520877.494:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.354814][ T30] audit: type=1326 audit(1744520877.494:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.385034][ T30] audit: type=1326 audit(1744520877.494:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.429318][ T30] audit: type=1326 audit(1744520877.494:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.463257][ T30] audit: type=1326 audit(1744520877.494:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.506503][ T30] audit: type=1326 audit(1744520877.494:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.567706][ T30] audit: type=1326 audit(1744520877.494:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 186.997178][ T30] audit: type=1326 audit(1744520877.494:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4bab78d169 code=0x7ffc0000 [ 187.231607][ T5827] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 187.607452][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.491'. [ 188.042822][ T7739] tmpfs: Unknown parameter '' [ 188.261662][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.720601][ T24] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 188.731030][ T7741] netlink: 80 bytes leftover after parsing attributes in process `syz.3.494'. [ 188.740984][ T24] usb 3-1: config 0 has no interface number 0 [ 188.749489][ T24] usb 3-1: too many endpoints for config 0 interface 95 altsetting 116: 111, using maximum allowed: 30 [ 189.077082][ T24] usb 3-1: config 0 interface 95 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 189.095418][ T24] usb 3-1: config 0 interface 95 has no altsetting 0 [ 189.184916][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.195614][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.219703][ T7751] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 189.229080][ T7751] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 189.237491][ T7751] overlayfs: missing 'lowerdir' [ 189.324368][ T24] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 189.353768][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.391528][ T24] usb 3-1: config 0 descriptor?? [ 189.948841][ T5930] Process accounting resumed [ 189.987838][ T24] usb 3-1: string descriptor 0 read error: -71 [ 190.038725][ T24] usb 3-1: USB disconnect, device number 12 [ 190.363604][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 190.373151][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 190.428505][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 190.438880][ T7773] capability: warning: `syz.5.501' uses deprecated v2 capabilities in a way that may be insecure [ 190.550531][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 190.550539][ T30] audit: type=1400 audit(1744520881.734:592): avc: denied { write } for pid=7778 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.579844][ T7772] overlayfs: failed to resolve './bus': -2 [ 191.374686][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 191.384032][ T30] audit: type=1400 audit(1744520882.174:593): avc: denied { name_bind } for pid=7782 comm="syz.5.505" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 191.485572][ T30] audit: type=1400 audit(1744520882.624:594): avc: denied { ioctl } for pid=7786 comm="syz.2.506" path="socket:[16258]" dev="sockfs" ino=16258 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 192.473089][ T7799] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.522967][ T7799] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.583380][ T7799] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.630601][ T7799] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.694655][ T7799] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.707380][ T7799] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.721196][ T7799] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.733843][ T7799] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.145665][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.193447][ T30] audit: type=1400 audit(1744520884.364:595): avc: denied { setopt } for pid=7816 comm="syz.4.517" lport=46977 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 193.329817][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.345919][ T7822] overlay: ./bus is not a directory [ 193.350954][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.351293][ T30] audit: type=1400 audit(1744520884.534:596): avc: denied { mounton } for pid=7821 comm="syz.4.519" path="/104/file0/bus" dev="ramfs" ino=15129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 193.374608][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 193.448892][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.466852][ T24] usb 4-1: config 0 descriptor?? [ 193.878229][ T30] audit: type=1326 audit(1744520885.064:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9978d169 code=0x7ffc0000 [ 193.927274][ T7831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7831 comm=syz.0.514 [ 193.927459][ T30] audit: type=1326 audit(1744520885.064:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9978d169 code=0x7ffc0000 [ 193.960921][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.971158][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.985039][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.997771][ T24] thrustmaster 0003:044F:B304.0009: item fetching failed at offset 8/11 [ 194.007561][ T24] thrustmaster 0003:044F:B304.0009: parse failed [ 194.009725][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.013940][ T24] thrustmaster 0003:044F:B304.0009: probe with driver thrustmaster failed with error -22 [ 194.024585][ T7831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7831 comm=syz.0.514 [ 194.032120][ T30] audit: type=1326 audit(1744520885.064:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6f9978d169 code=0x7ffc0000 [ 194.091757][ T30] audit: type=1326 audit(1744520885.064:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9978d169 code=0x7ffc0000 [ 194.126847][ T30] audit: type=1326 audit(1744520885.064:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f9978d169 code=0x7ffc0000 [ 194.227743][ T5930] usb 4-1: USB disconnect, device number 10 [ 194.255413][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.437329][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 194.446632][ T5831] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 194.455032][ T5831] usb 3-1: config 0 has no interface number 0 [ 194.476615][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 194.492265][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.510771][ T5831] usb 3-1: Product: syz [ 194.543526][ T5831] usb 3-1: Manufacturer: syz [ 194.553626][ T5831] usb 3-1: SerialNumber: syz [ 194.572950][ T5831] usb 3-1: config 0 descriptor?? [ 195.573941][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 195.573956][ T30] audit: type=1400 audit(1744520886.754:651): avc: denied { bind } for pid=7862 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.602281][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 195.621454][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.634258][ T7865] Illegal XDP return value 4294967294 on prog (id 153) dev N/A, expect packet loss! [ 195.696209][ T30] audit: type=1400 audit(1744520886.874:652): avc: denied { accept } for pid=7868 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 195.758887][ T7871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 195.776487][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 195.788707][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 195.884822][ T7877] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 195.924129][ T7877] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 195.935218][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.946040][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.955878][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 195.967580][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 195.977698][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 195.986946][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.998261][ T24] usb 4-1: config 0 descriptor?? [ 196.004516][ T7857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.702738][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 196.780803][ T7892] netlink: 288 bytes leftover after parsing attributes in process `syz.3.530'. [ 196.838490][ T7895] x_tables: ip_tables: ah match: only valid for protocol 51 [ 196.847755][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.856435][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.407978][ T5831] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 197.450071][ T5831] usb 3-1: No streaming interface found for terminal 6. [ 197.509067][ T5831] usb 3-1: USB disconnect, device number 13 [ 197.567360][ T7908] autofs: Unknown parameter '}`om.' [ 197.643585][ T7914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 197.658093][ T7914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.176845][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 198.440376][ T30] audit: type=1400 audit(1744520889.154:653): avc: denied { map } for pid=7913 comm="syz.0.547" path="socket:[15348]" dev="sockfs" ino=15348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.450415][ T24] usb 4-1: USB disconnect, device number 11 [ 198.479888][ T30] audit: type=1400 audit(1744520889.614:654): avc: denied { accept } for pid=7913 comm="syz.0.547" path="socket:[15348]" dev="sockfs" ino=15348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.719803][ T7930] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.790339][ T7934] overlayfs: failed to resolve './file0': -2 [ 198.801712][ T7933] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 198.955401][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 199.003002][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 199.557778][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.569082][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.643652][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b6d5, bcdDevice= 0.00 [ 199.661729][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.690920][ T24] usb 4-1: config 0 descriptor?? [ 200.622977][ T7952] bridge0: port 3(team0) entered blocking state [ 200.629307][ T7952] bridge0: port 3(team0) entered disabled state [ 200.635738][ T7952] team0: entered allmulticast mode [ 200.640844][ T7952] team_slave_0: entered allmulticast mode [ 200.646569][ T7952] : entered allmulticast mode [ 200.652473][ T7952] team0: entered promiscuous mode [ 200.657656][ T7952] team_slave_0: entered promiscuous mode [ 200.663426][ T7952] : entered promiscuous mode [ 200.668823][ T7952] bridge0: port 3(team0) entered blocking state [ 200.675336][ T7952] bridge0: port 3(team0) entered forwarding state [ 200.697219][ T30] audit: type=1400 audit(1744520891.804:655): avc: granted { setsecparam } for pid=7948 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 200.721908][ T24] hid-generic 0003:044F:B6D5.000A: unknown main item tag 0x0 [ 200.756936][ T24] hid-generic 0003:044F:B6D5.000A: hidraw0: USB HID v20.00 Device [HID 044f:b6d5] on usb-dummy_hcd.3-1/input0 [ 200.938007][ T5934] usb 4-1: USB disconnect, device number 12 [ 201.092214][ T7968] kvm: kvm [7967]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008e) [ 201.123199][ T7968] syzkaller1: entered promiscuous mode [ 201.131471][ T7968] syzkaller1: entered allmulticast mode [ 201.195358][ T30] audit: type=1400 audit(1744520892.374:656): avc: denied { ioctl } for pid=7967 comm="syz.2.564" path="socket:[17578]" dev="sockfs" ino=17578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.381705][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.565'. [ 201.781714][ T30] audit: type=1400 audit(1744520892.964:657): avc: denied { connect } for pid=7973 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.736283][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 205.147764][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.187392][ T8015] tipc: Started in network mode [ 205.198039][ T8015] tipc: Node identity 4, cluster identity 4711 [ 205.205658][ T8015] tipc: Node number set to 4 [ 205.315508][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 205.327287][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.397760][ T24] usb 4-1: config 16 has an invalid interface number: 168 but max is 0 [ 205.409336][ T24] usb 4-1: config 16 has no interface number 0 [ 205.415752][ T24] usb 4-1: config 16 interface 168 has no altsetting 0 [ 205.460741][ T24] usb 4-1: New USB device found, idVendor=1f4d, idProduct=c803, bcdDevice=f6.27 [ 205.501612][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.551042][ T24] usb 4-1: Product: syz [ 205.572344][ T24] usb 4-1: Manufacturer: я [ 205.595141][ T24] usb 4-1: SerialNumber: syz [ 205.883053][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.625702][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.694336][ T24] usb 4-1: USB disconnect, device number 13 [ 206.706631][ T8039] dummy0: entered promiscuous mode [ 206.753103][ T8039] macsec1: entered promiscuous mode [ 206.773358][ T8039] macsec1: entered allmulticast mode [ 206.777354][ T30] audit: type=1400 audit(1744520897.954:658): avc: denied { watch watch_reads } for pid=8030 comm="syz.5.581" path="/77" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.795656][ T8039] dummy0: entered allmulticast mode [ 206.985583][ T8039] dummy0: left allmulticast mode [ 206.991096][ T8039] dummy0: left promiscuous mode [ 207.179428][ T8050] libceph: resolve '0' (ret=-3): failed [ 210.501768][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 210.511126][ T8069] netlink: 80 bytes leftover after parsing attributes in process `syz.4.592'. [ 211.786841][ T8091] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.857338][ T8091] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.900391][ T8091] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.995084][ T8091] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.026713][ T8096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.087587][ T8091] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.100678][ T8091] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.114195][ T8091] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.126623][ T8091] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.571221][ T30] audit: type=1400 audit(1744520903.754:659): avc: denied { setopt } for pid=8107 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.180743][ T30] audit: type=1400 audit(1744520904.364:660): avc: denied { ioctl } for pid=8107 comm="syz.2.599" path="socket:[16780]" dev="sockfs" ino=16780 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 213.220034][ T8106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.285968][ T8106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.461172][ T8106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.476182][ T8114] fuse: Unknown parameter 'user00000000000000000000' [ 213.497837][ T30] audit: type=1326 audit(1744520904.684:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.4.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f9978d169 code=0x0 [ 213.554035][ T8106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.648126][ T8106] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.660997][ T8106] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.675598][ T8106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.689569][ T8106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.865391][ T5831] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.943421][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 214.032487][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.051715][ T5831] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.067398][ T5831] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.083239][ T5831] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 214.097559][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.105972][ T5831] usb 3-1: Product: syz [ 214.110280][ T5831] usb 3-1: Manufacturer: syz [ 214.114938][ T5831] usb 3-1: SerialNumber: syz [ 214.134696][ T5831] smsusb:smsusb_probe: board id=8, interface number 0 [ 214.148921][ T5831] smsusb:smsusb_probe: Device initialized with return code -19 [ 214.328550][ T30] audit: type=1400 audit(1744520905.514:662): avc: denied { read } for pid=8133 comm="syz.3.608" name="usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.372203][ T30] audit: type=1400 audit(1744520905.514:663): avc: denied { open } for pid=8133 comm="syz.3.608" path="/dev/usbmon9" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.401747][ T30] audit: type=1400 audit(1744520905.514:664): avc: denied { ioctl } for pid=8133 comm="syz.3.608" path="/dev/usbmon9" dev="devtmpfs" ino=747 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.504677][ T8139] fuse: Bad value for 'fd' [ 214.553905][ T8138] Cannot find add_set index 0 as target [ 215.438842][ T975] usb 3-1: USB disconnect, device number 14 [ 215.572116][ T30] audit: type=1400 audit(1744520906.754:665): avc: denied { read write } for pid=8150 comm="syz.2.612" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.597000][ T30] audit: type=1400 audit(1744520906.754:666): avc: denied { open } for pid=8150 comm="syz.2.612" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.032410][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 216.193404][ T8166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.617'. [ 217.414361][ T8178] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.422655][ T8178] IPv6: Can't replace route, no match found [ 218.066002][ T30] audit: type=1400 audit(1744520909.184:667): avc: denied { module_request } for pid=8188 comm="syz.3.626" kmod="crypto-cryptd(__generic-gcm-aesni-avx)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 218.106533][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 218.198740][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.625'. [ 218.210836][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 218.280718][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 218.311178][ T8205] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 218.317665][ T8205] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 218.405603][ T975] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.906336][ T30] audit: type=1400 audit(1744520910.084:668): avc: denied { map } for pid=8206 comm="syz.5.632" path="socket:[18240]" dev="sockfs" ino=18240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.935227][ T30] audit: type=1400 audit(1744520910.084:669): avc: denied { accept } for pid=8206 comm="syz.5.632" path="socket:[18240]" dev="sockfs" ino=18240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.009700][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.033458][ T975] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 219.061585][ T975] usb 4-1: can't read configurations, error -71 [ 219.191613][ T30] audit: type=1400 audit(1744520910.374:670): avc: denied { getopt } for pid=8223 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.596638][ T8229] netlink: 228 bytes leftover after parsing attributes in process `syz.0.636'. [ 219.744086][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.766553][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.846479][ T8237] autofs: Unknown parameter '}`om.' [ 221.365563][ T975] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 221.507248][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 221.535411][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 221.545249][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 221.559213][ T975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 221.588428][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 221.615748][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 221.642476][ T975] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 221.659021][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.677679][ T975] usb 4-1: Product: syz [ 221.692904][ T975] usb 4-1: Manufacturer: syz [ 221.703970][ T975] usb 4-1: SerialNumber: syz [ 221.724630][ T975] usb 4-1: config 0 descriptor?? [ 221.751717][ T8253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.763623][ T975] radioshark 4-1:0.0: Invalid radioSHARK device [ 221.792848][ T975] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 221.866565][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'. [ 221.908071][ T5836] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 222.141705][ T975] usb 4-1: USB disconnect, device number 16 [ 222.381962][ T8278] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.390250][ T8278] IPv6: Can't replace route, no match found [ 222.637543][ T8284] autofs: Unknown parameter '}`om.' [ 222.836267][ T8290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 222.963301][ T8296] xt_nat: multiple ranges no longer supported [ 223.463074][ T30] audit: type=1400 audit(1744520914.644:671): avc: denied { mounton } for pid=8285 comm="syz.4.655" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 223.628928][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 225.308387][ T8329] bridge0: port 3(team0) entered blocking state [ 225.315633][ T8329] bridge0: port 3(team0) entered disabled state [ 225.323279][ T8329] team0: entered allmulticast mode [ 225.328524][ T8329] team_slave_0: entered allmulticast mode [ 225.334293][ T8329] : entered allmulticast mode [ 225.419205][ T8329] team0: entered promiscuous mode [ 225.424404][ T8329] team_slave_0: entered promiscuous mode [ 225.430339][ T8329] : entered promiscuous mode [ 225.435792][ T8329] bridge0: port 3(team0) entered blocking state [ 225.442077][ T8329] bridge0: port 3(team0) entered forwarding state [ 225.451380][ T30] audit: type=1400 audit(1744520916.484:672): avc: granted { setsecparam } for pid=8324 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 226.324918][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 226.415703][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 226.619233][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 226.648683][ T5924] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 226.685433][ T5924] usb 4-1: config 0 has no interface number 0 [ 226.718946][ T5924] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 226.797353][ T5924] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.7a [ 226.836092][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.875352][ T5924] usb 4-1: Product: syz [ 226.889592][ T5924] usb 4-1: Manufacturer: syz [ 227.025365][ T5924] usb 4-1: SerialNumber: syz [ 227.037705][ T5924] usb 4-1: config 0 descriptor?? [ 227.664521][ T5924] radio-si470x 4-1:0.35: this is not a si470x device. [ 227.864137][ T8375] FAULT_INJECTION: forcing a failure. [ 227.864137][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 227.883348][ T5924] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 227.905944][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.4.677 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 227.905968][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.905977][ T8375] Call Trace: [ 227.905983][ T8375] [ 227.905989][ T8375] dump_stack_lvl+0x16c/0x1f0 [ 227.906016][ T8375] should_fail_ex+0x512/0x640 [ 227.906032][ T8375] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 227.906058][ T8375] should_failslab+0xc2/0x120 [ 227.906077][ T8375] __kmalloc_cache_noprof+0x6a/0x3e0 [ 227.906100][ T8375] ? get_mm_exe_file+0x8a/0x1a0 [ 227.906123][ T8375] ? landlock_init_hierarchy_log+0xa7/0x870 [ 227.906148][ T8375] landlock_init_hierarchy_log+0xa7/0x870 [ 227.906171][ T8375] landlock_merge_ruleset+0x6e1/0x870 [ 227.906197][ T8375] ? prepare_creds+0x583/0x7d0 [ 227.906216][ T8375] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 227.906243][ T8375] do_syscall_64+0xcd/0x260 [ 227.906266][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.906282][ T8375] RIP: 0033:0x7f6f9978d169 [ 227.906295][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.906311][ T8375] RSP: 002b:00007f6f9a5f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 227.906327][ T8375] RAX: ffffffffffffffda RBX: 00007f6f999a5fa0 RCX: 00007f6f9978d169 [ 227.906337][ T8375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 227.906347][ T8375] RBP: 00007f6f9a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 227.906356][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.906365][ T8375] R13: 0000000000000000 R14: 00007f6f999a5fa0 R15: 00007ffcf78da998 [ 227.906388][ T8375] [ 227.913542][ T5924] usb 4-1: USB disconnect, device number 17 [ 228.092740][ T8375] ------------[ cut here ]------------ [ 228.098229][ T8375] WARNING: CPU: 0 PID: 8375 at security/landlock/domain.h:133 free_ruleset+0x226/0x270 [ 228.107883][ T8375] Modules linked in: [ 228.111756][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.4.677 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 228.123688][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.133893][ T8375] RIP: 0010:free_ruleset+0x226/0x270 [ 228.139193][ T8375] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 62 a8 2a fd be 03 00 00 00 4c 89 f7 e8 c5 f9 3e 00 e9 42 ff ff ff e8 4b a8 2a fd 90 <0f> 0b 90 eb af e8 c0 0b 90 fd e9 4a fe ff ff 48 89 df e8 b3 0b 90 [ 228.159301][ T8375] RSP: 0018:ffffc9000c687e38 EFLAGS: 00010293 [ 228.165720][ T8375] RAX: 0000000000000000 RBX: ffff88802d04f380 RCX: ffffffff84918c3f [ 228.173671][ T8375] RDX: ffff888066888000 RSI: ffffffff84909525 RDI: 0000000000000005 [ 228.181907][ T8375] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 228.190041][ T8375] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888036929f00 [ 228.198168][ T8375] R13: dffffc0000000000 R14: ffff88802d04f3a0 R15: fffffffffffffff4 [ 228.206279][ T8375] FS: 00007f6f9a5f86c0(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000 [ 228.215192][ T8375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.221947][ T8375] CR2: 00007ff87f03339c CR3: 000000005b080000 CR4: 00000000003526f0 [ 228.229925][ T8375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.237892][ T8375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.245861][ T8375] Call Trace: [ 228.249119][ T8375] [ 228.252043][ T8375] landlock_put_ruleset+0xa5/0xb0 [ 228.257091][ T8375] landlock_merge_ruleset+0x218/0x870 [ 228.262897][ T8375] ? prepare_creds+0x583/0x7d0 [ 228.268060][ T8375] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 228.274204][ T8375] do_syscall_64+0xcd/0x260 [ 228.278726][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.284598][ T8375] RIP: 0033:0x7f6f9978d169 [ 228.289003][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.308622][ T8375] RSP: 002b:00007f6f9a5f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 228.317026][ T8375] RAX: ffffffffffffffda RBX: 00007f6f999a5fa0 RCX: 00007f6f9978d169 [ 228.324974][ T8375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 228.332946][ T8375] RBP: 00007f6f9a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 228.340938][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.348936][ T8375] R13: 0000000000000000 R14: 00007f6f999a5fa0 R15: 00007ffcf78da998 [ 228.356907][ T8375] [ 228.359907][ T8375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.367174][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.4.677 Not tainted 6.15.0-rc1-syzkaller-00308-gecd5d67ad602 #0 PREEMPT(full) [ 228.379039][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.389078][ T8375] Call Trace: [ 228.392342][ T8375] [ 228.395252][ T8375] dump_stack_lvl+0x3d/0x1f0 [ 228.399834][ T8375] panic+0x71c/0x800 [ 228.403716][ T8375] ? __pfx_panic+0x10/0x10 [ 228.408107][ T8375] ? show_trace_log_lvl+0x29b/0x3e0 [ 228.413295][ T8375] ? check_panic_on_warn+0x1f/0xb0 [ 228.418384][ T8375] ? free_ruleset+0x226/0x270 [ 228.423041][ T8375] check_panic_on_warn+0xab/0xb0 [ 228.427959][ T8375] __warn+0xf6/0x3c0 [ 228.431829][ T8375] ? free_ruleset+0x226/0x270 [ 228.436485][ T8375] report_bug+0x3c3/0x580 [ 228.440793][ T8375] ? free_ruleset+0x226/0x270 [ 228.445449][ T8375] handle_bug+0x184/0x210 [ 228.449770][ T8375] exc_invalid_op+0x17/0x50 [ 228.454254][ T8375] asm_exc_invalid_op+0x1a/0x20 [ 228.459097][ T8375] RIP: 0010:free_ruleset+0x226/0x270 [ 228.464370][ T8375] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 62 a8 2a fd be 03 00 00 00 4c 89 f7 e8 c5 f9 3e 00 e9 42 ff ff ff e8 4b a8 2a fd 90 <0f> 0b 90 eb af e8 c0 0b 90 fd e9 4a fe ff ff 48 89 df e8 b3 0b 90 [ 228.483964][ T8375] RSP: 0018:ffffc9000c687e38 EFLAGS: 00010293 [ 228.490007][ T8375] RAX: 0000000000000000 RBX: ffff88802d04f380 RCX: ffffffff84918c3f [ 228.497957][ T8375] RDX: ffff888066888000 RSI: ffffffff84909525 RDI: 0000000000000005 [ 228.505908][ T8375] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 228.513853][ T8375] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888036929f00 [ 228.521800][ T8375] R13: dffffc0000000000 R14: ffff88802d04f3a0 R15: fffffffffffffff4 [ 228.529752][ T8375] ? landlock_log_drop_domain+0x5f/0x1e0 [ 228.535371][ T8375] ? free_ruleset+0x225/0x270 [ 228.540051][ T8375] ? free_ruleset+0x225/0x270 [ 228.544711][ T8375] landlock_put_ruleset+0xa5/0xb0 [ 228.549719][ T8375] landlock_merge_ruleset+0x218/0x870 [ 228.555085][ T8375] ? prepare_creds+0x583/0x7d0 [ 228.559836][ T8375] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 228.565971][ T8375] do_syscall_64+0xcd/0x260 [ 228.570457][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.576334][ T8375] RIP: 0033:0x7f6f9978d169 [ 228.580734][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.600333][ T8375] RSP: 002b:00007f6f9a5f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 228.608721][ T8375] RAX: ffffffffffffffda RBX: 00007f6f999a5fa0 RCX: 00007f6f9978d169 [ 228.616666][ T8375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 228.624613][ T8375] RBP: 00007f6f9a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 228.632559][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.640504][ T8375] R13: 0000000000000000 R14: 00007f6f999a5fa0 R15: 00007ffcf78da998 [ 228.648458][ T8375] [ 228.651662][ T8375] Kernel Offset: disabled [ 228.655963][ T8375] Rebooting in 86400 seconds..