last executing test programs: 11.305561305s ago: executing program 3 (id=814): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x80, {{0x2, 0x4e20, @private=0xa010102}}}, 0x88) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000180)=""/126, &(0x7f0000000200)=""/158, &(0x7f00000002c0)=""/145, 0x6000}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x1, 0x4, @status={[0x6, 0x81, 0x3, 0x5, 0x66, 0x4]}, [0x2, 0x2, 0xfffffffffffffffb, 0x6, 0x1, 0x1, 0x9, 0x8, 0x80000001, 0x4, 0x9c8, 0x1ff, 0x0, 0x4, 0xe, 0x10001, 0xffffffff, 0x1, 0x0, 0x4, 0x5, 0x9, 0x6, 0x1, 0x7fff, 0x6, 0x9, 0x400, 0x5c24fbf, 0x2, 0x6, 0x1, 0x8, 0x9, 0xfffffffffffffff2, 0x2, 0x2, 0x10, 0xfff, 0x2, 0x8, 0x1dd, 0x8, 0x9, 0x80, 0x3, 0x5, 0x2, 0x7, 0x3f, 0xc3b, 0x2, 0x6, 0x1, 0x1, 0x0, 0x7, 0x1, 0x117, 0xfcee, 0x6, 0x1f, 0xfc86, 0x100000001]}) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r4, {0x800}}, './file0\x00'}) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000e40)={0x251}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000e80)={0x0, 'virt_wifi0\x00', {0x1}, 0x2}) r6 = signalfd(r4, &(0x7f0000000ec0)={[0x10000]}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={r6, &(0x7f0000000f00)="eaf692bfbb270a6c099eda00440d5eab4933f3147df2ec4293417de25bdcb7e24e3def399c9e94acbe8b3bbbdb242e89e10949dbde464ee653a063bedb1b3ca3d366109760163bc0113c4c9c72b86a3eb3262b8cc87bd09fc0e3f4031251c4a0df2f3885e2779b9aaadc988a9e448e5ee07e7b2507fcf224dac4e585a3185d3fd2f98f7acaaef03d782024f9eed5f678e6bf2be97c9c5bbb3e", &(0x7f0000000fc0)=""/86}, 0x20) r7 = pidfd_getfd(r6, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs2/custom1\x00', 0x1000, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000010c0), 0x5, 0x400000) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000001100)=[0x6e]) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001140)=0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000001180)={r9}) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f00000011c0)) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000001200)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) linkat(r5, &(0x7f0000001240)='./file0\x00', r5, &(0x7f0000001280)='./file0\x00', 0x1000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x480, 0x191) vmsplice(r10, &(0x7f0000001800)=[{&(0x7f0000001300)="8c82a246386527c85638d0c2c18085fc391a778c8d0aa4cc1ff6440eb1afc667323dfd8b1ccdb050899caad5af7df6e808cbece5cd708893b8fcde6bdb26eb95159faebbb5ec21bdc506464a040dd76aa581b76a5cda1724b5c7f52959f890dd2fc9f841d15b5824e0d0af45dbc60eadff1d4aa7b52353dc32609792cced1119a21467492f5b338edc36e2607af8bb179c668c770cf6aa373c01717f205fcb5015a374c24d5a7e33655fed66345cdfffa9c9051e5103cdf5982e850707a1e0ddf91c87dd8a7b2915c13b8f0b3851b407e51c52390818d4587da79e80948306f9fed5e6797987d589d6736e", 0xeb}, {&(0x7f0000001400)="8db20cdb99477b33d2570214ffe0e94344ce298aa1c10e567c2da5f61715f205a2f6cedbc09280d504bb7515c40b7e9ca4b4861a24c0686b51f2b27296a8cd8ccb030a05a40d237ce3ec119ad8f77221356126bcf2187196eb583378e0d36eee78b035f5cfe6409764bd576fe3ded4a35266c98600329064d60948908cdaaefc10ed1c02c388bc9b0a486258f0d43eca9c0425e6dd769132c0ae977083ebe9c1681036e527ec24eff9f35b9d86292cc15ce7", 0xb2}, {&(0x7f00000014c0)="0dfd3a03642cbfac1072c8735a356d975047a099adbfd2611d554a0e5e82c57974f3e2608ac3257aaba3723d1bcc2bfb37daac19ef81784617b41ace1cd41c5764e21ee97e17071b00807691ff81facc9e5ddbc421e88467f49deecf14ab2fad99d3a08272c0853922323004e9160ee50d05aa780a8859d165ccbc5c56500fd822d5d4b9817653cedaf02c2da0cda2894cac39deb4046040c12e30ffbca6c0c21cb97011ee4d1782d72ee29e76cff5b6caa2", 0xb2}, {&(0x7f0000001580)="2ecb888998adda0533d83c084c6860baf52832a45e5aa08b8140128d3d3430f5ff8d9e3d8a7563422b1a8de0556cec93e40d2e9f5135b3a4d012cbabe619c678ab76db5f12d5567eb0e4a1dcd946ac", 0x4f}, {&(0x7f0000001600)="e78a37032c016886de0fe7145eb82b22e9050802a5a3242eae69ab9fc57a7d6e183de363f70e7ccd6c2f9847be92eb5bb84699b58bdf2f33742a920d3af62664d8c01070326a826194645a8c56257f89863b5f4cc7a7a3f5bd1af9dc0e2a80d5eb9c517ded79ddb04dff9da0961ba1468c40c4130dfd069eeb6f882ebf394618650ab780c34273a248e03aaa2c372914d4635df7252b76b41c02d481c2b42872d5f0", 0xa2}, {&(0x7f00000016c0)="0b9840073d4f8cc814024cf86c1a73b0c70170b7c4201edf9f4545e17b8f3ba3a8e0f46bbcdd5123d5d0b934b041030e26a5a5007af98e26e36896356cc955786e48d028b05c3958fd2dbd04a0c18796da60c22a3c41d272f9f08b494a4d8a868c737fcbe2743e03042edd80bc2e896af58869b96e74be1ea748b7fc980218f0c2a5e8b66a04b5e827d36e42570780681df55943fd6258f656036e46a10701c5c2c5562099198c019593ac8e04816c5701dd356e919e5df183e52c99f903d3a6fc143b4505bb928acefde2f340e65fdc703e572541e1fd2a5a411bf130b3012eda2901", 0xe3}, {&(0x7f00000017c0)="a21e41b18c2f1a25859c985ecb072bff2428443e441454d9eff7a626", 0x1c}], 0x7, 0xe) openat$ppp(0xffffffffffffff9c, &(0x7f0000001880), 0x200, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x48040) 11.241007186s ago: executing program 2 (id=815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000804) 11.135601467s ago: executing program 3 (id=817): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5592) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r4, 0x0, 0x9}, 0x18) 10.272809215s ago: executing program 2 (id=818): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4021}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4953238376712f6942034e6a74df80438ddda16db0814e5e52da2f5d696d498d4b1f19d62221ca2adfc4c44e845c41a467dbec7617ad235c3a18a398f8da08267953cc6ea461c4d7097859eef691b4a74c44011c0da2f057a8d32e91e4ed8c188a1a870a5969c6be633fa4309c363fb5ef4620ef55a72059dab937401e7db6cae5418e6bc102", @ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) keyctl$session_to_parent(0x12) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) 10.03185139s ago: executing program 3 (id=820): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5592) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r5, 0x0, 0x9}, 0x18) 9.157281689s ago: executing program 2 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xd7e}, {0x6}]}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="445a7dcdd12c408becdab0db42d57e47", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0xc812) recvmsg(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 8.598859034s ago: executing program 1 (id=824): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000000000"], 0x24, 0x0) creat(0x0, 0x248) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000600)={0x0, 0x6, 0x3, 0x1, 0x40}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000090000000300", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) 8.042031361s ago: executing program 2 (id=825): openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2f8, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2ac, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x20c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x9e4a6c3a91d6c99d, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000\x00\x0000001,\x00']) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = eventfd2(0x7e, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r8, 0x7dc0284f, 0x0, r8}) r9 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r8, 0x5, 0x2, r9}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x15, 0x8, 0x70bd28, 0x25dfdbfe, {0x20}, [@nested={0x75, 0xb9, 0x0, 0x1, [@nested={0x4, 0xfc}, @generic="2e62b7b34b4ac49c3578f99294201c7f7336e16de9d41f9db267c1145af6716009d8b53627240b5d07540dfdf6d3fd20a6096447d2f5c85a05849a57d981c053862c5c825c7901fadc258f76f4cd11c594", @nested={0x4, 0x104}, @typed={0xf, 0x14f, 0x0, 0x0, @binary="7acef377fb60ba7c698e7b"}, @nested={0x4, 0xe5}, @nested={0x4, 0xa8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x40004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007a165b404f11a268b77f00000001095d817f00"/45], 0x0) 7.084047384s ago: executing program 0 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x13c, 0x14, 0xa, 0x707, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x8b, 0x8, "fde2a31ab89a37f787f7543eb3feaa22049daa74f87d1aa771791523e083e3350aaac451b77986b523ca10ce0bf84b864f13a8a0df0a2403db07ab513e7a04af8422c13d1b1115dfa0590050e5110db7219675fdef34d9eb389cebf0293df77c4124763426ecfa00625b0c052c3fed490d11cb697ced2671e0bb95d87e80a24a88651a4d303cb6"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "af825967bb421a92bb5649254365ae754fb3e033a3147708ae6e9a7c9980482fbbb957e5ef6f833d56fd2a07b7174f68cd740345410fb4f333fd22997b0e7e1bd0a95a36dc13e492"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 6.963445283s ago: executing program 3 (id=827): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9", 0xf}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18002914e8ffffff000000000000000004000000bb7f1a00c600feff0000000a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.694597512s ago: executing program 1 (id=828): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5592) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r4, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 6.103220984s ago: executing program 1 (id=829): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800003, 0x80010, r0, 0xe1c05000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) 6.087997596s ago: executing program 0 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.648159405s ago: executing program 0 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x148, 0x14, 0xa, 0x707, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x97, 0x8, "fde2a31ab89a37f787f7543eb3feaa22049daa74f87d1aa771791523e083e3350aaac451b77986b523ca10ce0bf84b864f13a8a0df0a2403db07ab513e7a04af8422c13d1b1115dfa0590050e5110db7219675fdef34d9eb389cebf0293df77c4124763426ecfa00625b0c052c3fed490d11cb697ced2671e0bb95d87e80a24a88651a4d303cb667cb2e77771cee4b3dc2d5d3"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "af825967bb421a92bb5649254365ae754fb3e033a3147708ae6e9a7c9980482fbbb957e5ef6f833d56fd2a07b7174f68cd740345410fb4f333fd22997b0e7e1bd0a95a36dc13e492"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 5.527964829s ago: executing program 4 (id=832): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4021}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4953238376712f6942034e6a74df80438ddda16db0814e5e52da2f5d696d498d4b1f19d62221ca2adfc4c44e845c41a467dbec7617ad235c3a18a398f8da08267953cc6ea461c4d7097859eef691b4a74c44011c0da2f057a8d32e91e4ed8c188a1a870a5969c6be633fa4309c363fb5ef4620ef55a72059dab937401e7db6cae5418e6bc102", @ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) keyctl$session_to_parent(0x12) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) 5.135114993s ago: executing program 1 (id=833): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x350f96aef3271010, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0) 5.128825453s ago: executing program 0 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="445a7dcdd12c408becdab0db", 0xc}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0xc812) recvmsg(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 4.608731361s ago: executing program 4 (id=835): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800003, 0x80010, r0, 0xe1c05000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9, 0x70bd27, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3, 0x0, 0x6c05}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r4, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) 3.620126828s ago: executing program 0 (id=836): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000) r0 = socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000000)) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$netlink(r0, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x804) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 3.287984843s ago: executing program 1 (id=837): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}, 0x1, 0x0, 0xff7f}, 0x0) 2.974619048s ago: executing program 4 (id=838): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000000000"], 0x24, 0x0) creat(0x0, 0x248) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000600)={0x0, 0x6, 0x3, 0x1, 0x40}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000090000000300", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) 2.851329061s ago: executing program 2 (id=839): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8aaf00) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400000000"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kvm_halt_poll_ns\x00', r5, 0x0, 0x50000000000006}, 0xfffffffffffffeba) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000001480)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) statfs(&(0x7f0000000440)='./cgroup\x00', &(0x7f0000000480)=""/21) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x9, 0x52e42) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000380)="aefdda9d240103005a904bba00003aef26072a000000d217508cb6cec9813cb7cd3b907b9226ca0aa81b000000000000396400000000", 0x36}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) read(r10, 0x0, 0x70) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet6_buf(r9, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r6, 0x0, 0x7}, 0x18) 2.751942915s ago: executing program 3 (id=840): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5592) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r4, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.787826333s ago: executing program 4 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.376142482s ago: executing program 2 (id=842): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0xb}, [@tail_call, @alu={0x7, 0x1, 0x3, 0xb, 0x5, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x2, 0x7, 0x5, 0x80, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008ec22fbb972b23f25000000000200"/27], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(0x0, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r7, 0x58, &(0x7f0000001500)}, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(r8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x0, 0x0, 0x34343459, 0x0, 0x5, [{}, {0x9}, {0x7}, {}, {0x7fff, 0x10}, {0x0, 0x4}, {0x2000000}, {0x80000005}], 0x2}}) 1.353083738s ago: executing program 0 (id=843): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADDR_RESOLV_ENABLE={{0x5}, 0xf}}}, 0x7) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [0xfff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffff38}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@xino_on}, {@uuid_auto}, {@verity_require}, {@xino_off}, {@verity_on}, {@redirect_dir_nofollow}], [{@dont_hash}]}) 1.292259562s ago: executing program 3 (id=844): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800003, 0x80010, r0, 0xe1c05000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) 1.254156962s ago: executing program 4 (id=845): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4021}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4953238376712f6942034e6a74df80438ddda16db0814e5e52da2f5d696d498d4b1f19d62221ca2adfc4c44e845c41a467dbec7617ad235c3a18a398f8da08267953cc6ea461c4d7097859eef691b4a74c44011c0da2f057a8d32e91e4ed8c188a1a870a5969c6be633fa4309c363fb5ef4620ef55a72059dab937401e7db6cae5418e6bc102", @ANYRES16=r0, @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) keyctl$session_to_parent(0x12) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) 289.424208ms ago: executing program 4 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="445a7dcdd12c408becdab0db", 0xc}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0xc812) recvmsg(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/4122, 0x101a}], 0x1}, 0x2000) 0s ago: executing program 1 (id=847): syz_open_dev$loop(&(0x7f00000012c0), 0x5, 0xa8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfeda", 0xb}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x84580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000004010001808000190000000060000d70000000000000000", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) r8 = syz_open_dev$video(&(0x7f0000001280), 0x9, 0x8100) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000001300)={0x8, 0xa, 0x1, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0xa0080, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') kernel console output (not intermixed with test programs): vice=e6.fc [ 190.215163][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 190.291807][ T48] usb 2-1: Product: syz [ 190.311607][ T5960] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.345930][ T48] usb 2-1: Manufacturer: syz [ 190.355849][ T48] usb 2-1: SerialNumber: syz [ 190.373359][ T48] usb 2-1: config 0 descriptor?? [ 190.385945][ T48] yurex 2-1:0.50: Could not find endpoints [ 190.463546][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 190.470313][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.492994][ T5960] usb 1-1: config 0 has no interfaces? [ 190.515370][ T5960] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 190.566843][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.579200][ T7374] vivid-004: ================= START STATUS ================= [ 190.586900][ T7374] vivid-004: Radio HW Seek Mode: Bounded [ 190.592542][ T7374] vivid-004: Radio Programmable HW Seek: false [ 190.598788][ T7374] vivid-004: RDS Rx I/O Mode: Block I/O [ 190.604395][ T7374] vivid-004: Generate RBDS Instead of RDS: false [ 190.610732][ T7374] vivid-004: RDS Reception: true [ 190.615714][ T7374] vivid-004: RDS Program Type: 0 inactive [ 190.621454][ T7374] vivid-004: RDS PS Name: inactive [ 190.626680][ T7374] vivid-004: RDS Radio Text: inactive [ 190.632141][ T7374] vivid-004: RDS Traffic Announcement: false inactive [ 190.638946][ T7374] vivid-004: RDS Traffic Program: false inactive [ 190.645316][ T7374] vivid-004: RDS Music: false inactive [ 190.650768][ T7374] vivid-004: ================== END STATUS ================== [ 190.660194][ T5960] usb 1-1: Product: syz [ 190.664754][ T5960] usb 1-1: Manufacturer: syz [ 190.669393][ T5960] usb 1-1: SerialNumber: syz [ 190.701306][ T5960] usb 1-1: config 0 descriptor?? [ 190.965474][ T7381] netlink: 180 bytes leftover after parsing attributes in process `syz.3.377'. [ 191.659681][ T5812] usb 2-1: USB disconnect, device number 18 [ 191.728505][ T48] usb 3-1: USB disconnect, device number 12 [ 191.878941][ T7387] 9pnet_virtio: no channels available for device syz [ 192.181059][ T30] audit: type=1400 audit(1762507311.960:499): avc: denied { ioctl } for pid=7359 comm="syz.0.370" path="socket:[14001]" dev="sockfs" ino=14001 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.223704][ T7390] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 192.279327][ T7390] batman_adv: batadv0: Adding interface: team0 [ 192.288034][ T7390] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 192.493351][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.768996][ T48] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 192.801650][ T48] usb 3-1: config 0 has no interface number 0 [ 192.826619][ T48] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 192.849011][ T48] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.870073][ T48] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 192.884449][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.893984][ T48] usb 3-1: Product: syz [ 192.898197][ T48] usb 3-1: Manufacturer: syz [ 192.903635][ T48] usb 3-1: SerialNumber: syz [ 192.914472][ T48] usb 3-1: config 0 descriptor?? [ 192.924906][ T7393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.934073][ T48] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 192.954157][ T48] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 193.266006][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 193.383522][ T5812] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 193.410967][ T30] audit: type=1400 audit(1762507313.190:500): avc: denied { ioctl } for pid=7408 comm="syz.3.386" path="socket:[14679]" dev="sockfs" ino=14679 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.435677][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.847052][ T30] audit: type=1400 audit(1762507313.250:501): avc: denied { connect } for pid=7408 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.873468][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.880810][ T5812] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.890863][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.904755][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.929734][ T48] usb 3-1: USB disconnect, device number 13 [ 193.937966][ T48] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 193.949304][ T48] cyberjack 3-1:0.69: device disconnected [ 193.976460][ T5812] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.033104][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.086023][ T5812] usb 2-1: Product: syz [ 194.090214][ T5812] usb 2-1: Manufacturer: syz [ 194.120305][ T5886] usb 1-1: USB disconnect, device number 5 [ 194.137779][ T5812] usb 2-1: SerialNumber: syz [ 194.151399][ T5812] usb 2-1: config 0 descriptor?? [ 194.167916][ T5812] usb 2-1: selecting invalid altsetting 0 [ 195.513237][ T7438] netlink: 180 bytes leftover after parsing attributes in process `syz.3.389'. [ 195.996462][ T30] audit: type=1400 audit(1762507315.780:502): avc: denied { ioctl } for pid=7440 comm="syz.2.392" path="socket:[14079]" dev="sockfs" ino=14079 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.022045][ T30] audit: type=1400 audit(1762507315.780:503): avc: denied { bind } for pid=7440 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.193417][ T5812] usb 2-1: USB disconnect, device number 19 [ 197.013926][ T5894] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 197.202043][ T7464] tipc: Started in network mode [ 197.209911][ T5894] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 197.222088][ T7464] tipc: Node identity 4e268b464e09, cluster identity 4711 [ 197.229527][ T5894] usb 3-1: config 0 has no interface number 0 [ 197.236776][ T5894] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 197.248078][ T7464] tipc: Enabled bearer , priority 0 [ 197.263113][ T5894] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.296397][ T5894] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 197.317885][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.345815][ T7464] syzkaller0: entered promiscuous mode [ 197.351320][ T7464] syzkaller0: entered allmulticast mode [ 197.363583][ T7464] tipc: Resetting bearer [ 197.372550][ T5894] usb 3-1: Product: syz [ 197.398243][ T5894] usb 3-1: Manufacturer: syz [ 197.403751][ T5894] usb 3-1: SerialNumber: syz [ 197.421867][ T5894] usb 3-1: config 0 descriptor?? [ 197.434121][ T7452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.442952][ T5894] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 197.465037][ T5894] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 197.533376][ T5886] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 197.764637][ T5886] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.774725][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.783269][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.792428][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.800677][ T5886] usb 1-1: Product: syz [ 198.193218][ T5886] usb 1-1: Manufacturer: syz [ 198.197852][ T5886] usb 1-1: SerialNumber: syz [ 198.207044][ T5886] usb 1-1: config 0 descriptor?? [ 198.220399][ T5886] usb 1-1: selecting invalid altsetting 0 [ 198.267498][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 198.294668][ T7463] tipc: Resetting bearer [ 198.434546][ T5894] tipc: Node number set to 3115846 [ 199.524416][ T7484] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 199.533474][ T7484] netlink: 244 bytes leftover after parsing attributes in process `syz.3.408'. [ 200.062859][ T5886] usb 3-1: USB disconnect, device number 14 [ 200.187733][ T7484] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.205251][ T5886] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 200.220620][ T5886] cyberjack 3-1:0.69: device disconnected [ 200.344755][ T5960] usb 1-1: USB disconnect, device number 6 [ 201.194010][ T5960] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.357722][ T5960] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 201.366279][ T5960] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 201.380788][ T5960] usb 1-1: config 220 has no interface number 2 [ 201.395648][ T5960] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 201.408852][ T5960] usb 1-1: config 220 interface 0 has no altsetting 0 [ 201.415794][ T5960] usb 1-1: config 220 interface 76 has no altsetting 0 [ 201.433442][ T5960] usb 1-1: config 220 interface 1 has no altsetting 0 [ 201.445770][ T5960] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 201.459014][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.467139][ T5960] usb 1-1: Product: syz [ 201.471939][ T5960] usb 1-1: Manufacturer: syz [ 201.483885][ T5960] usb 1-1: SerialNumber: syz [ 202.052648][ T30] audit: type=1400 audit(1762507321.820:504): avc: granted { setsecparam } for pid=7491 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 202.129920][ T5960] usb 1-1: selecting invalid altsetting 0 [ 202.148591][ T5960] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 202.158643][ T5960] uvcvideo 1-1:220.0: No valid video chain found. [ 202.179561][ T5960] usb 1-1: selecting invalid altsetting 0 [ 202.185449][ T5960] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 202.209647][ T5960] usb 1-1: USB disconnect, device number 7 [ 202.228917][ T7463] tipc: Disabling bearer [ 202.241424][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.249012][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.257583][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.266428][ T7495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.292828][ T7503] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.363490][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.526620][ T5865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.540787][ T5865] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.873320][ T5865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.887419][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.896135][ T5865] usb 4-1: Product: syz [ 202.901321][ T5865] usb 4-1: Manufacturer: syz [ 202.906226][ T5865] usb 4-1: SerialNumber: syz [ 202.972590][ T7517] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 202.997074][ T7512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.007464][ T7512] block device autoloading is deprecated and will be removed. [ 203.019806][ T7517] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.034067][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.122817][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.132813][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.143443][ T5865] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 203.156427][ T5865] usb 4-1: USB disconnect, device number 11 [ 203.562184][ T30] audit: type=1400 audit(1762507323.340:505): avc: denied { listen } for pid=7520 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.586590][ T7522] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 203.593474][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.602635][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 203.779298][ T7522] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 203.785928][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.859254][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 204.026737][ T5933] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 204.163289][ T5886] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 204.184834][ T5933] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 204.193097][ T5933] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 204.204163][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.213926][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 204.225036][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.236183][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.763740][ T30] audit: type=1400 audit(1762507324.100:506): avc: denied { mount } for pid=7530 comm="syz.0.421" name="/" dev="pstore" ino=4128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 204.765191][ T5933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.795365][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.813761][ T5865] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 204.829885][ T7535] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.422'. [ 205.003944][ T30] audit: type=1400 audit(1762507324.780:507): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 205.032059][ T5933] usb 4-1: usb_control_msg returned -71 [ 205.039706][ T5933] usbtmc 4-1:16.0: can't read capabilities [ 205.047063][ T5933] usbtmc 4-1:16.0: Failed to submit iin_urb [ 205.053022][ T5933] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 205.068717][ T5933] usb 4-1: USB disconnect, device number 12 [ 205.073517][ T30] audit: type=1400 audit(1762507324.780:508): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.112302][ T7540] lo speed is unknown, defaulting to 1000 [ 206.095081][ T5865] usb 2-1: not running at top speed; connect to a high speed hub [ 206.114501][ T5865] usb 2-1: config 1 interface 0 has no altsetting 0 [ 206.124447][ T5865] usb 2-1: language id specifier not provided by device, defaulting to English [ 206.245330][ T5865] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 206.259037][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.269285][ T5865] usb 2-1: Product: syz [ 206.276678][ T5865] usb 2-1: SerialNumber: syz [ 206.488988][ T7548] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 206.488988][ T7548] program syz.2.425 not setting count and/or reply_len properly [ 206.753024][ T7527] vhci_hcd: connection closed [ 206.754401][ T7524] vhci_hcd: connection reset by peer [ 206.775066][ T3511] vhci_hcd: stop threads [ 206.813873][ T3511] vhci_hcd: release socket [ 206.827878][ T3511] vhci_hcd: disconnect device [ 206.897082][ T5865] usb 2-1: USB disconnect, device number 20 [ 206.933877][ T3511] vhci_hcd: stop threads [ 207.004673][ T3511] vhci_hcd: release socket [ 207.009455][ T3511] vhci_hcd: disconnect device [ 207.293243][ T7571] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.925390][ T7593] x_tables: duplicate underflow at hook 1 [ 209.433258][ T5886] vhci_hcd: vhci_device speed not set [ 210.889154][ T7619] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 210.976023][ T7620] trusted_key: encrypted_key: hex blob is missing [ 211.293646][ T5812] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.453617][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 211.460502][ T5812] usb 2-1: config 0 has no interfaces? [ 211.469026][ T5812] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 211.478640][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.488931][ T5812] usb 2-1: Product: syz [ 211.493687][ T5812] usb 2-1: Manufacturer: syz [ 211.498649][ T5812] usb 2-1: SerialNumber: syz [ 211.512862][ T5812] usb 2-1: config 0 descriptor?? [ 211.736724][ T5812] usb 2-1: USB disconnect, device number 21 [ 211.911285][ T30] audit: type=1400 audit(1762507331.690:509): avc: denied { associate } for pid=7632 comm="syz.0.445" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 212.916171][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 212.922614][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 213.350550][ T7649] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.450'. [ 214.400851][ T1204] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 214.673432][ T1204] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 214.753218][ T1204] usb 5-1: USB disconnect, device number 12 [ 215.419526][ T7675] gfs2: gfs2 mount does not exist [ 216.297972][ T30] audit: type=1400 audit(1762507336.060:510): avc: denied { bind } for pid=7678 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.451139][ T30] audit: type=1400 audit(1762507336.070:511): avc: denied { listen } for pid=7678 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.743421][ T30] audit: type=1400 audit(1762507336.070:512): avc: denied { ioctl } for pid=7678 comm="syz.0.458" path="socket:[15550]" dev="sockfs" ino=15550 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.295717][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.305987][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.316598][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.334320][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.352652][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.368456][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.379614][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.400881][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.497890][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.514391][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 217.515992][ T7680] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 217.719274][ T5894] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.728847][ T5894] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.767248][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.830357][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 218.015145][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 218.176058][ T5894] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.186524][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.199443][ T5894] usb 4-1: Product: syz [ 218.205082][ T5894] usb 4-1: Manufacturer: syz [ 218.298591][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 218.312544][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 218.358468][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 218.364841][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 220.083210][ T7723] netlink: 180 bytes leftover after parsing attributes in process `syz.1.469'. [ 220.249636][ T7723] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 221.062069][ T5894] usb 4-1: USB disconnect, device number 13 [ 221.433667][ T5933] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 221.614773][ T5933] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.615670][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 221.755892][ T5812] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 221.789556][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.854220][ T5894] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 221.872721][ T5894] usb 4-1: config 0 has no interface number 0 [ 221.880592][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.880591][ T5894] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 221.880619][ T5894] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.889805][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.026421][ T5894] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 222.037138][ T5933] usb 2-1: Product: syz [ 222.041314][ T5933] usb 2-1: Manufacturer: syz [ 222.044634][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.065831][ T5894] usb 4-1: Product: syz [ 222.070013][ T5894] usb 4-1: Manufacturer: syz [ 222.082011][ T5933] usb 2-1: SerialNumber: syz [ 222.084702][ T5894] usb 4-1: SerialNumber: syz [ 222.086896][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.098805][ T5894] usb 4-1: config 0 descriptor?? [ 222.109571][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.119509][ T7729] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.120430][ T5933] usb 2-1: config 0 descriptor?? [ 222.128568][ T5894] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 222.145145][ T5812] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 222.150043][ T5894] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 222.196122][ T5933] usb 2-1: selecting invalid altsetting 0 [ 222.209048][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.236109][ T5812] usb 3-1: config 0 descriptor?? [ 224.006826][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 224.013011][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 224.040655][ T5812] usb 3-1: USB disconnect, device number 15 [ 224.179324][ T7746] sp0: Synchronizing with TNC [ 224.194733][ T7746] sp0: Found TNC [ 224.309372][ T1204] usb 4-1: USB disconnect, device number 14 [ 224.317410][ T1204] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 224.356942][ T1204] cyberjack 4-1:0.69: device disconnected [ 224.565847][ T5933] usb 2-1: USB disconnect, device number 22 [ 224.718838][ T7692] Set syz1 is full, maxelem 65536 reached [ 225.391006][ T7759] syz_tun: left allmulticast mode [ 225.400091][ T30] audit: type=1400 audit(1762507345.180:513): avc: denied { create } for pid=7756 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 226.750224][ T7771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7771 comm=syz.1.480 [ 227.232576][ T30] audit: type=1400 audit(1762507347.010:514): avc: denied { ioctl } for pid=7786 comm="syz.1.483" path="socket:[16496]" dev="sockfs" ino=16496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.503694][ T30] audit: type=1400 audit(1762507347.240:515): avc: denied { read } for pid=7786 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.963156][ T30] audit: type=1400 audit(1762507347.310:516): avc: denied { write } for pid=7786 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.982288][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.162560][ T30] audit: type=1400 audit(1762507348.900:517): avc: denied { mount } for pid=7805 comm="syz.3.487" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.264265][ T30] audit: type=1400 audit(1762507348.980:518): avc: denied { create } for pid=7820 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 229.383443][ T30] audit: type=1400 audit(1762507348.980:519): avc: denied { bind } for pid=7820 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 229.807314][ T30] audit: type=1400 audit(1762507348.980:520): avc: denied { bind } for pid=7820 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.193415][ T5894] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 230.448475][ T7841] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 230.514683][ T30] audit: type=1400 audit(1762507350.210:521): avc: denied { append } for pid=7835 comm="syz.2.494" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 230.754091][ T30] audit: type=1400 audit(1762507350.220:522): avc: denied { read append } for pid=7835 comm="syz.2.494" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 230.779175][ T30] audit: type=1400 audit(1762507350.220:523): avc: denied { open } for pid=7835 comm="syz.2.494" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 230.944189][ T5894] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 230.965963][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.063156][ T5894] usb 2-1: Product: syz [ 231.081133][ T5894] usb 2-1: Manufacturer: syz [ 231.945429][ T5894] usb 2-1: SerialNumber: syz [ 231.953406][ T5894] usb 2-1: config 0 descriptor?? [ 231.959667][ T5894] hub 2-1:0.0: bad descriptor, ignoring hub [ 231.969826][ T5894] hub 2-1:0.0: probe with driver hub failed with error -5 [ 232.160032][ T5894] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 232.181829][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.192470][ T5894] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 232.224048][ T5894] usb 2-1: media controller created [ 232.262082][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.337787][ T5894] DVB: Unable to find symbol dib7000p_attach() [ 232.354312][ T5894] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 232.788951][ T7870] overlayfs: conflicting options: userxattr,metacopy=on [ 232.883529][ T5894] rc_core: IR keymap rc-dib0700-rc5 not found [ 232.889768][ T5894] Registered IR keymap rc-empty [ 232.903357][ T7874] fuse: Unknown parameter 'fd01777777777777777777777' [ 232.912171][ T5894] dvb-usb: could not initialize remote control. [ 232.925666][ T5894] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 233.642806][ T5894] usb 2-1: USB disconnect, device number 23 [ 234.439762][ T5894] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 234.581546][ T30] audit: type=1400 audit(1762507354.350:524): avc: denied { mount } for pid=7887 comm="syz.2.504" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 234.929775][ T7893] geneve2: entered promiscuous mode [ 234.956643][ T7893] geneve2: entered allmulticast mode [ 235.953331][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.938528][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 237.039822][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 237.073317][ T10] usb 1-1: config 0 has no interface number 0 [ 237.095139][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 237.124637][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.132652][ T10] usb 1-1: Product: syz [ 237.149759][ T10] usb 1-1: Manufacturer: syz [ 237.158973][ T10] usb 1-1: SerialNumber: syz [ 237.159753][ T30] audit: type=1400 audit(1762507356.920:525): avc: denied { getopt } for pid=7915 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.170622][ T7914] syzkaller0: entered promiscuous mode [ 237.189495][ T7914] syzkaller0: entered allmulticast mode [ 237.209974][ T10] usb 1-1: config 0 descriptor?? [ 237.242677][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 237.428531][ T7929] netlink: 72 bytes leftover after parsing attributes in process `syz.2.516'. [ 237.459718][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 237.549601][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 238.024721][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 238.027108][ T5894] usb 1-1: USB disconnect, device number 8 [ 238.065288][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 238.099964][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 238.119209][ T5894] quatech2 1-1:0.51: device disconnected [ 238.486596][ T7811] Set syz1 is full, maxelem 65536 reached [ 238.833890][ T5894] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 239.049184][ T5894] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 239.084637][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.126129][ T5894] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.161265][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.173763][ T5894] usb 5-1: Product: syz [ 239.177943][ T5894] usb 5-1: Manufacturer: syz [ 239.182574][ T5894] usb 5-1: SerialNumber: syz [ 239.197726][ T5894] usb 5-1: config 0 descriptor?? [ 239.207980][ T5894] usb 5-1: selecting invalid altsetting 0 [ 240.135470][ T5894] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 240.313702][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 240.321068][ T5894] usb 1-1: config 7 has an invalid interface number: 159 but max is 0 [ 240.333825][ T5894] usb 1-1: config 7 has no interface number 0 [ 240.340123][ T5894] usb 1-1: config 7 interface 159 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 240.358949][ T5894] usb 1-1: config 7 interface 159 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 240.370732][ T5894] usb 1-1: config 7 interface 159 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 240.382195][ T5894] usb 1-1: config 7 interface 159 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 240.395244][ T5894] usb 1-1: config 7 interface 159 has no altsetting 0 [ 240.404909][ T5894] usb 1-1: New USB device found, idVendor=12d1, idProduct=1001, bcdDevice= 0.00 [ 240.414565][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.446214][ T7956] tipc: Started in network mode [ 240.451184][ T7956] tipc: Node identity cadddc88164e, cluster identity 4711 [ 240.458613][ T7956] tipc: Enabled bearer , priority 0 [ 240.468544][ T7956] syzkaller0: entered promiscuous mode [ 240.474087][ T7956] syzkaller0: entered allmulticast mode [ 240.503487][ T1204] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.520813][ T5894] usb 1-1: Product: Е [ 240.531665][ T5894] usb 1-1: Manufacturer: Ѝ [ 240.540379][ T5894] usb 1-1: SerialNumber: syz [ 240.665375][ T1204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.677258][ T1204] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 240.690661][ T1204] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.700491][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.708964][ T1204] usb 2-1: Product: syz [ 240.713392][ T1204] usb 2-1: Manufacturer: syz [ 240.718585][ T1204] usb 2-1: SerialNumber: syz [ 240.731403][ T1204] cdc_mbim 2-1:1.0: skipping garbage [ 240.803212][ T5812] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.810691][ T5894] usb-storage 1-1:7.159: USB Mass Storage device detected [ 240.936898][ T1204] cdc_mbim 2-1:1.0: bind() failure [ 240.948079][ T1204] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 240.964491][ T5894] usb 1-1: USB disconnect, device number 9 [ 240.965043][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.972952][ T1204] cdc_ncm 2-1:1.1: bind() failure [ 240.997946][ T5812] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 241.014133][ T5812] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.026222][ T1204] usb 2-1: USB disconnect, device number 24 [ 241.026824][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.049604][ T5812] usb 3-1: Product: syz [ 241.054471][ T5812] usb 3-1: Manufacturer: syz [ 241.059292][ T5812] usb 3-1: SerialNumber: syz [ 241.082977][ T5812] cdc_mbim 3-1:1.0: skipping garbage [ 241.187044][ T7950] tipc: Resetting bearer [ 241.201419][ T7950] tipc: Disabling bearer [ 241.313358][ T5812] cdc_mbim 3-1:1.0: bind() failure [ 241.321498][ T5812] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 241.328592][ T5812] cdc_ncm 3-1:1.1: bind() failure [ 241.337674][ T5812] usb 3-1: USB disconnect, device number 16 [ 241.558708][ T5886] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 241.850588][ T5812] usb 5-1: USB disconnect, device number 13 [ 241.864396][ T5886] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.941990][ T5886] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.048626][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.117452][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 242.186195][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.596657][ T5886] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.616657][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.625057][ T5886] usb 4-1: Product: syz [ 242.629254][ T5886] usb 4-1: Manufacturer: syz [ 243.116566][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 243.121812][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 243.161846][ T5886] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 243.184747][ T5886] cdc_wdm 4-1:1.0: Unknown control protocol [ 243.929025][ T7981] syzkaller0: entered promiscuous mode [ 243.937789][ T7981] syzkaller0: entered allmulticast mode [ 244.035373][ T7989] netlink: 180 bytes leftover after parsing attributes in process `syz.4.534'. [ 244.753388][ T5886] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 244.919527][ T5886] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 244.935457][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 244.963807][ T5886] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.972978][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.997828][ T5886] usb 5-1: Product: syz [ 245.006942][ T5886] usb 5-1: Manufacturer: syz [ 245.016972][ T5886] usb 5-1: SerialNumber: syz [ 245.029511][ T5886] usb 5-1: config 0 descriptor?? [ 245.053455][ T5886] usb 5-1: selecting invalid altsetting 0 [ 245.965008][ T1204] usb 4-1: USB disconnect, device number 15 [ 247.355521][ T8017] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[8017] [ 247.378740][ T5886] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 247.563959][ T5812] usb 5-1: USB disconnect, device number 14 [ 247.588965][ T30] audit: type=1400 audit(1762507367.290:526): avc: denied { ioctl } for pid=8018 comm="syz.3.543" path="socket:[16118]" dev="sockfs" ino=16118 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 247.653299][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 247.659982][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 247.697927][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.721765][ T30] audit: type=1400 audit(1762507367.470:527): avc: denied { shutdown } for pid=8014 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.725925][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.788491][ T8026] FAULT_INJECTION: forcing a failure. [ 247.788491][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.795721][ T30] audit: type=1400 audit(1762507367.470:528): avc: denied { create } for pid=8014 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.831557][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.894180][ T8026] CPU: 1 UID: 0 PID: 8026 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(full) [ 247.894200][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.894210][ T8026] Call Trace: [ 247.894215][ T8026] [ 247.894221][ T8026] dump_stack_lvl+0x16c/0x1f0 [ 247.894245][ T8026] should_fail_ex+0x512/0x640 [ 247.894260][ T8026] _copy_from_user+0x2e/0xd0 [ 247.894274][ T8026] copy_msghdr_from_user+0x98/0x160 [ 247.894289][ T8026] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 247.894305][ T8026] ? kfree+0x252/0x6d0 [ 247.894319][ T8026] ? __lock_acquire+0x622/0x1c90 [ 247.894339][ T8026] ___sys_recvmsg+0xdb/0x1a0 [ 247.894353][ T8026] ? __pfx____sys_recvmsg+0x10/0x10 [ 247.894374][ T8026] ? __pfx___might_resched+0x10/0x10 [ 247.894391][ T8026] do_recvmmsg+0x2fe/0x750 [ 247.894407][ T8026] ? __pfx_do_recvmmsg+0x10/0x10 [ 247.894424][ T8026] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 247.894439][ T8026] ? __fget_files+0x20e/0x3c0 [ 247.894453][ T8026] __x64_sys_recvmmsg+0x22a/0x280 [ 247.894468][ T8026] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.894498][ T8026] do_syscall_64+0xcd/0xfa0 [ 247.894509][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.894520][ T8026] RIP: 0033:0x7fdc4678f6c9 [ 247.894530][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.894540][ T8026] RSP: 002b:00007fdc476c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 247.894550][ T8026] RAX: ffffffffffffffda RBX: 00007fdc469e5fa0 RCX: 00007fdc4678f6c9 [ 247.894556][ T8026] RDX: 0000000000000f00 RSI: 0000200000000400 RDI: 0000000000000003 [ 247.894563][ T8026] RBP: 00007fdc476c3090 R08: 0000000000000000 R09: 0000000000000000 [ 247.894568][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.894574][ T8026] R13: 00007fdc469e6038 R14: 00007fdc469e5fa0 R15: 00007fffabe7d368 [ 247.894588][ T8026] [ 248.123106][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.146172][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 248.163264][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 248.163399][ T30] audit: type=1400 audit(1762507367.500:529): avc: denied { getopt } for pid=8022 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.305086][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.784178][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.795460][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.808380][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 248.817141][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.153067][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.173088][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.208265][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.268770][ T5886] usb 2-1: string descriptor 0 read error: -22 [ 249.293218][ T5886] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.307866][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.399696][ T5886] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.453508][ T5933] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 249.689967][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 249.698172][ T5933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 249.729828][ T5933] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 249.738987][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 249.747432][ T5933] usb 1-1: Product: syz [ 249.751581][ T5933] usb 1-1: Manufacturer: syz [ 249.756468][ T5933] usb 1-1: SerialNumber: syz [ 249.767892][ T5933] usb 1-1: config 0 descriptor?? [ 249.777264][ T8041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.909441][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 250.106759][ T30] audit: type=1400 audit(1762507369.890:530): avc: denied { read } for pid=8040 comm="syz.0.549" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.237554][ T5894] usb 1-1: USB disconnect, device number 10 [ 250.261176][ T30] audit: type=1400 audit(1762507369.890:531): avc: denied { open } for pid=8040 comm="syz.0.549" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.374313][ T30] audit: type=1400 audit(1762507369.890:532): avc: denied { read write } for pid=8054 comm="syz.2.553" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.456931][ T30] audit: type=1400 audit(1762507369.890:533): avc: denied { open } for pid=8054 comm="syz.2.553" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 250.509752][ T30] audit: type=1400 audit(1762507369.950:534): avc: denied { read write } for pid=8040 comm="syz.0.549" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.584239][ T30] audit: type=1400 audit(1762507369.950:535): avc: denied { open } for pid=8040 comm="syz.0.549" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.110983][ T8069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'. [ 251.123968][ T8069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'. [ 252.600334][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 252.600349][ T30] audit: type=1400 audit(1762507372.380:589): avc: denied { read write } for pid=8093 comm="syz.2.562" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.673513][ T30] audit: type=1400 audit(1762507372.380:590): avc: denied { open } for pid=8093 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.887687][ T5894] usb 2-1: USB disconnect, device number 25 [ 252.955858][ T1204] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 253.030516][ T30] audit: type=1400 audit(1762507372.410:591): avc: denied { ioctl } for pid=8093 comm="syz.2.562" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.183555][ T1204] usb 3-1: Using ep0 maxpacket: 16 [ 253.190974][ T1204] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 253.276344][ T1204] usb 3-1: config 0 has no interface number 0 [ 253.330963][ T1204] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 253.346496][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.366232][ T1204] usb 3-1: Product: syz [ 253.375127][ T1204] usb 3-1: Manufacturer: syz [ 253.442245][ T1204] usb 3-1: SerialNumber: syz [ 253.482754][ T30] audit: type=1400 audit(1762507373.260:592): avc: denied { create } for pid=8105 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 253.609710][ T1204] usb 3-1: config 0 descriptor?? [ 253.706094][ T8108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.722805][ T8108] CUSE: unknown device info "" [ 253.728165][ T8108] CUSE: zero length info key specified [ 254.139648][ T1204] hub 3-1:0.132: bad descriptor, ignoring hub [ 254.156838][ T1204] hub 3-1:0.132: probe with driver hub failed with error -5 [ 254.235994][ T1204] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input17 [ 254.272909][ T30] audit: type=1400 audit(1762507374.050:593): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=3146 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.533436][ T30] audit: type=1400 audit(1762507374.050:594): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3146 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.567878][ T8111] batadv_slave_1: entered promiscuous mode [ 254.682456][ T30] audit: type=1400 audit(1762507374.350:595): avc: denied { create } for pid=8093 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.783297][ T30] audit: type=1400 audit(1762507374.350:596): avc: denied { ioctl } for pid=8093 comm="syz.2.562" path="socket:[17108]" dev="sockfs" ino=17108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.810547][ T30] audit: type=1400 audit(1762507374.350:597): avc: denied { setopt } for pid=8093 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.830506][ T30] audit: type=1400 audit(1762507374.410:598): avc: denied { create } for pid=8112 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 254.920200][ T5933] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 255.083209][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 255.089872][ T5933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.107707][ T5933] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.117506][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.193419][ T5933] usb 4-1: Product: syz [ 255.212150][ T5933] usb 4-1: Manufacturer: syz [ 255.227075][ T5933] usb 4-1: SerialNumber: syz [ 255.296323][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.302723][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.313996][ T5933] usb 4-1: config 0 descriptor?? [ 255.333753][ T8114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 255.773422][ T5894] usb 4-1: USB disconnect, device number 16 [ 255.898731][ T8130] tipc: Enabling of bearer rejected, failed to enable media [ 256.138145][ T8095] batadv_slave_1: left promiscuous mode [ 256.263501][ T5933] usb 3-1: USB disconnect, device number 17 [ 256.344363][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 256.896116][ T5886] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.913366][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.920020][ T5886] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 256.930683][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.423063][ T5886] usb 1-1: config 0 descriptor?? [ 258.125646][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 258.125662][ T30] audit: type=1400 audit(1762507377.910:621): avc: denied { write } for pid=8162 comm="syz.4.583" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.162463][ T5886] nintendo 0003:057E:200E.0003: unknown main item tag 0x2 [ 258.228903][ T5886] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.06 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 258.281096][ T30] audit: type=1400 audit(1762507378.060:622): avc: denied { write } for pid=8165 comm="syz.1.584" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.389719][ T5886] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 258.423074][ T5886] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 258.433594][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 258.564826][ T5886] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 258.585412][ T5886] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 258.614985][ T30] audit: type=1400 audit(1762507378.400:623): avc: denied { mount } for pid=8165 comm="syz.1.584" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 258.615926][ T5886] usb 1-1: USB disconnect, device number 11 [ 258.708174][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 258.711833][ T30] audit: type=1400 audit(1762507378.460:624): avc: denied { create } for pid=8170 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.735237][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.743598][ T5812] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 258.756963][ T5812] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 258.765478][ T5812] usb 5-1: can't read configurations, error -61 [ 258.783335][ T30] audit: type=1400 audit(1762507378.460:625): avc: denied { ioctl } for pid=8170 comm="syz.3.585" path="socket:[17695]" dev="sockfs" ino=17695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.860853][ T30] audit: type=1400 audit(1762507378.460:626): avc: denied { bind } for pid=8170 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.903361][ T5812] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 258.911168][ T30] audit: type=1400 audit(1762507378.470:627): avc: denied { write } for pid=8170 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.949824][ T30] audit: type=1400 audit(1762507378.470:628): avc: denied { write } for pid=8170 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.094449][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 259.168537][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.184675][ T5812] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 259.980553][ T5812] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 260.003682][ T5812] usb 5-1: can't read configurations, error -61 [ 260.040466][ T5812] usb usb5-port1: attempt power cycle [ 260.229424][ T30] audit: type=1400 audit(1762507380.000:629): avc: denied { ioctl } for pid=8181 comm="syz.0.589" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.403333][ T5812] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 260.436420][ T30] audit: type=1400 audit(1762507380.220:630): avc: denied { shutdown } for pid=8178 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.443756][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 260.499726][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.518345][ T5812] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 260.537893][ T5812] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 260.558384][ T5812] usb 5-1: can't read configurations, error -61 [ 260.633726][ T5886] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 260.723805][ T5812] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 260.754094][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 260.772837][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.780839][ T5812] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 260.793703][ T8196] xt_connbytes: Forcing CT accounting to be enabled [ 260.803153][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 260.811332][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.828440][ T5812] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 260.839488][ T5812] usb 5-1: can't read configurations, error -61 [ 260.849280][ T5886] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.858752][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.867150][ T5812] usb usb5-port1: unable to enumerate USB device [ 260.873903][ T5886] usb 1-1: Product: syz [ 260.878043][ T5886] usb 1-1: Manufacturer: syz [ 260.882604][ T5886] usb 1-1: SerialNumber: syz [ 260.891830][ T5886] usb 1-1: config 0 descriptor?? [ 260.900627][ T8187] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.973571][ T5933] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 261.083191][ T5887] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 261.176739][ T5933] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.414095][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.425476][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 261.426714][ T5933] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.443769][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.460538][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.471775][ T5933] usb 3-1: Product: syz [ 261.476151][ T5933] usb 3-1: Manufacturer: syz [ 261.480921][ T5933] usb 3-1: SerialNumber: syz [ 261.488522][ T5887] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 261.496941][ T5933] usb 3-1: config 0 descriptor?? [ 261.509362][ T5933] usb 3-1: selecting invalid altsetting 0 [ 261.519839][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.530155][ T10] usb 1-1: USB disconnect, device number 12 [ 261.543424][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.575059][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.593288][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.609234][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.649216][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.686534][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.704216][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.741722][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.760781][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.774689][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.782969][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.792626][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.801085][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.831307][ T5887] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 261.839841][ T5887] usb 4-1: config 7 has no interface number 0 [ 261.955449][ T5887] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 261.965368][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.503671][ T5887] usb 4-1: Product: syz [ 262.508330][ T5887] usb 4-1: Manufacturer: syz [ 262.514417][ T5887] usb 4-1: SerialNumber: syz [ 262.796092][ T5887] usbhid 4-1:7.67: couldn't find an input interrupt endpoint [ 262.841585][ T5887] usb 4-1: USB disconnect, device number 17 [ 263.260321][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 263.260336][ T30] audit: type=1400 audit(1762507383.040:640): avc: denied { bind } for pid=8216 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.425568][ T30] audit: type=1400 audit(1762507383.210:641): avc: denied { append } for pid=8218 comm="syz.0.600" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.468975][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 263.592020][ T8223] netlink: 197564 bytes leftover after parsing attributes in process `syz.3.602'. [ 263.838008][ T5933] usb 3-1: USB disconnect, device number 18 [ 263.915506][ T8228] gfs2: gfs2 mount does not exist [ 264.671223][ T30] audit: type=1400 audit(1762507384.450:642): avc: denied { write } for pid=8235 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 264.782829][ T30] audit: type=1400 audit(1762507384.560:643): avc: denied { ioctl } for pid=8235 comm="syz.1.607" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 264.832857][ T30] audit: type=1400 audit(1762507384.600:644): avc: denied { setopt } for pid=8238 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.885713][ T30] audit: type=1400 audit(1762507384.670:645): avc: denied { create } for pid=8244 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 264.925184][ T8245] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 264.961224][ T30] audit: type=1400 audit(1762507384.710:646): avc: denied { write } for pid=8244 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 265.058638][ T8239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8239 comm=syz.1.607 [ 265.073759][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 265.508440][ T5933] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 265.513202][ T30] audit: type=1400 audit(1762507385.090:647): avc: denied { connect } for pid=8232 comm="syz.4.605" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.544678][ T10] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 265.552786][ T10] usb 1-1: config 0 has no interface number 0 [ 265.565203][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 265.663519][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.673635][ T10] usb 1-1: Product: syz [ 265.677842][ T10] usb 1-1: Manufacturer: syz [ 265.682443][ T10] usb 1-1: SerialNumber: syz [ 265.735126][ T10] usb 1-1: config 0 descriptor?? [ 265.744727][ T5933] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.754767][ T5933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.781930][ T10] usb 1-1: disable ehci-hcd to run US-144 [ 265.789432][ T5933] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.804422][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.817719][ T5933] usb 3-1: Product: syz [ 265.824898][ T5933] usb 3-1: Manufacturer: syz [ 265.832941][ T5933] usb 3-1: SerialNumber: syz [ 265.916044][ T5933] usb 3-1: config 0 descriptor?? [ 265.939616][ T5933] usb 3-1: selecting invalid altsetting 0 [ 265.956068][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.967684][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.994950][ T5887] usb 1-1: USB disconnect, device number 13 [ 266.233178][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 266.269925][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'. [ 266.924964][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 266.967628][ T10] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 266.989526][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.338305][ T10] usb 2-1: Product: syz [ 267.346721][ T10] usb 2-1: Manufacturer: syz [ 267.353291][ T10] usb 2-1: SerialNumber: syz [ 267.387161][ T10] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 268.033147][ T30] audit: type=1400 audit(1762507387.770:648): avc: denied { create } for pid=8270 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.155270][ T10] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 268.170289][ T5933] usb 3-1: USB disconnect, device number 19 [ 268.176437][ T30] audit: type=1400 audit(1762507387.770:649): avc: denied { map } for pid=8270 comm="syz.4.616" path="/dev/radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 268.247138][ T8277] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 268.287871][ T10] usb 2-1: USB disconnect, device number 26 [ 268.402946][ T30] audit: type=1400 audit(1762507388.180:650): avc: denied { mount } for pid=8279 comm="syz.3.620" name="/" dev="ramfs" ino=18112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 268.912619][ T30] audit: type=1804 audit(1762507388.210:651): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.620" name="file0" dev="ramfs" ino=18113 res=1 errno=0 [ 268.960819][ T30] audit: type=1400 audit(1762507388.740:652): avc: denied { create } for pid=8284 comm="syz.4.621" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.999735][ T8277] bond0: (slave wlan1): Releasing backup interface [ 269.010979][ T8276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.099356][ T30] audit: type=1400 audit(1762507389.840:653): avc: denied { setopt } for pid=8294 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.122419][ T5933] IPVS: starting estimator thread 0... [ 270.223215][ T8302] IPVS: using max 73 ests per chain, 175200 per kthread [ 270.477600][ T30] audit: type=1400 audit(1762507390.260:654): avc: denied { create } for pid=8290 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.497905][ T30] audit: type=1400 audit(1762507390.260:655): avc: denied { mount } for pid=8307 comm="syz.4.628" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 270.624341][ T5933] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 270.676763][ T8311] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 270.703278][ T30] audit: type=1400 audit(1762507390.450:656): avc: denied { read write } for pid=8307 comm="syz.4.628" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 270.836932][ T30] audit: type=1400 audit(1762507390.450:657): avc: denied { open } for pid=8307 comm="syz.4.628" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 270.969403][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 270.983964][ T5933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 271.004322][ T5933] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 271.014370][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.030604][ T30] audit: type=1400 audit(1762507390.450:658): avc: denied { ioctl } for pid=8307 comm="syz.4.628" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.060441][ T5933] usb 1-1: Product: syz [ 271.069928][ T5933] usb 1-1: Manufacturer: syz [ 271.080436][ T5933] usb 1-1: SerialNumber: syz [ 271.722518][ T5933] usb 1-1: config 0 descriptor?? [ 271.729544][ T5933] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 271.781461][ T30] audit: type=1400 audit(1762507391.120:659): avc: denied { write } for pid=8314 comm="syz.3.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.218561][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'. [ 272.687906][ T8326] 9pnet: Could not find request transport: rdma(port=0x00000000 [ 272.724477][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.884755][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.893676][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.924811][ T10] usb 4-1: config 220 has no interface number 2 [ 272.938546][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.972052][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 273.067996][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 273.076375][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 273.088202][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 273.114642][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.122686][ T10] usb 4-1: Product: syz [ 273.128824][ T10] usb 4-1: Manufacturer: syz [ 273.568209][ T10] usb 4-1: SerialNumber: syz [ 273.779738][ T5933] usb 1-1: USB disconnect, device number 14 [ 273.823229][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 273.823247][ T30] audit: type=1400 audit(1762507393.600:667): avc: denied { ioctl } for pid=8320 comm="syz.3.633" path="socket:[18625]" dev="sockfs" ino=18625 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.865761][ T10] usb 4-1: selecting invalid altsetting 0 [ 273.872846][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 273.880867][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 273.892344][ T10] usb 4-1: selecting invalid altsetting 0 [ 273.902438][ T8346] tipc: Started in network mode [ 273.907888][ T8346] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 273.922058][ T8346] tipc: Enabled bearer , priority 2 [ 273.973998][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 273.985093][ T10] usb 4-1: USB disconnect, device number 18 [ 274.261582][ T30] audit: type=1400 audit(1762507394.040:668): avc: denied { execute } for pid=8356 comm="syz.0.640" path="/dev/audio" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 274.593328][ T5894] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 274.797807][ T30] audit: type=1400 audit(1762507394.570:669): avc: denied { unlink } for pid=8363 comm="syz.4.642" name="#b" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 274.823754][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 274.852335][ T30] audit: type=1400 audit(1762507394.570:670): avc: denied { mount } for pid=8363 comm="syz.4.642" name="/" dev="overlay" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 274.904732][ T5894] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 274.967050][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.983721][ T30] audit: type=1400 audit(1762507394.570:671): avc: denied { watch watch_reads } for pid=8363 comm="syz.4.642" path="/122/bus" dev="overlay" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 274.995750][ T5894] usb 1-1: Product: syz [ 275.029800][ T5894] usb 1-1: Manufacturer: syz [ 275.034596][ T5933] tipc: Node number set to 10136234 [ 275.042069][ T5894] usb 1-1: SerialNumber: syz [ 275.073010][ T5894] usb 1-1: config 0 descriptor?? [ 275.091778][ T30] audit: type=1400 audit(1762507394.580:672): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 275.198362][ T30] audit: type=1400 audit(1762507394.680:673): avc: denied { create } for pid=8365 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 275.497410][ T5894] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 275.532615][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.613649][ T5894] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 275.626826][ T5894] usb 1-1: media controller created [ 275.713302][ T5933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.785754][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.785830][ T30] audit: type=1400 audit(1762507395.490:674): avc: denied { append } for pid=8356 comm="syz.0.640" name="i2c-1" dev="devtmpfs" ino=3211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.114576][ T5894] zl10353_read_register: readreg error (reg=127, ret==0) [ 276.129205][ T5894] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 276.162396][ T5894] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 276.181183][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 276.198636][ T5933] usb 3-1: config 0 has no interfaces? [ 276.226492][ T5894] usb 1-1: USB disconnect, device number 15 [ 276.283489][ T5933] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 276.305467][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.324342][ T5894] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 276.324861][ T5933] usb 3-1: Product: syz [ 276.382164][ T5933] usb 3-1: Manufacturer: syz [ 276.415520][ T30] audit: type=1400 audit(1762507396.180:675): avc: denied { create } for pid=8389 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.451862][ T5933] usb 3-1: SerialNumber: syz [ 276.483809][ T30] audit: type=1400 audit(1762507396.180:676): avc: denied { setopt } for pid=8389 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.507477][ T5933] usb 3-1: config 0 descriptor?? [ 276.815647][ T5894] usb 3-1: USB disconnect, device number 20 [ 278.401365][ T8424] syzkaller0: entered promiscuous mode [ 278.407833][ T8424] syzkaller0: entered allmulticast mode [ 278.425484][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 278.594517][ T5894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.612795][ T5894] usb 1-1: config 0 has no interface number 0 [ 278.639677][ T5894] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.651948][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.661148][ T5894] usb 1-1: Product: syz [ 278.667244][ T5894] usb 1-1: Manufacturer: syz [ 278.672042][ T5894] usb 1-1: SerialNumber: syz [ 278.697036][ T5894] usb 1-1: config 0 descriptor?? [ 278.743110][ T5933] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 278.843576][ T1204] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 278.873976][ T5933] usb 3-1: device descriptor read/64, error -71 [ 278.909024][ T5894] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 278.942496][ T5894] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.949034][ T8446] netlink: 84 bytes leftover after parsing attributes in process `syz.4.667'. [ 278.965145][ T5894] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 278.967144][ T8446] netlink: 84 bytes leftover after parsing attributes in process `syz.4.667'. [ 278.987462][ T5894] usb 1-1: media controller created [ 279.003138][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 279.010433][ T1204] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.023145][ T1204] usb 2-1: config 0 has no interface number 0 [ 279.074467][ T1204] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.093409][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.110983][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.115088][ T5933] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.119830][ T1204] usb 2-1: Product: syz [ 279.142043][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 279.142058][ T30] audit: type=1400 audit(1762507397.923:680): avc: denied { create } for pid=8448 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.170111][ T1204] usb 2-1: Manufacturer: syz [ 279.183872][ T1204] usb 2-1: SerialNumber: syz [ 279.197358][ T1204] usb 2-1: config 0 descriptor?? [ 279.216635][ T5894] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 279.237037][ T1204] smsc95xx v2.0.0 [ 279.247136][ T30] audit: type=1400 audit(1762507397.963:681): avc: denied { write } for pid=8448 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.253120][ T5933] usb 3-1: device descriptor read/64, error -71 [ 279.343981][ T5894] usb 1-1: USB disconnect, device number 16 [ 279.511626][ T5933] usb usb3-port1: attempt power cycle [ 279.712954][ T1204] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 279.727398][ T1204] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.853104][ T5933] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 279.873548][ T5933] usb 3-1: device descriptor read/8, error -71 [ 280.026815][ T30] audit: type=1400 audit(1762507398.803:682): avc: denied { connect } for pid=8433 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.065199][ T30] audit: type=1400 audit(1762507398.853:683): avc: denied { read write } for pid=8455 comm="syz.0.671" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 280.108353][ T30] audit: type=1400 audit(1762507398.853:684): avc: denied { open } for pid=8455 comm="syz.0.671" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 280.134571][ T5933] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 280.164195][ T5933] usb 3-1: device descriptor read/8, error -71 [ 280.303230][ T5933] usb usb3-port1: unable to enumerate USB device [ 280.553412][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 281.338324][ T30] audit: type=1400 audit(1762507400.093:685): avc: denied { create } for pid=8459 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.404476][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 281.540717][ T30] audit: type=1400 audit(1762507400.173:686): avc: denied { setopt } for pid=8459 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 281.563820][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.571865][ T10] usb 5-1: config 0 has no interface number 0 [ 281.578148][ T10] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 281.591501][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 281.645965][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 281.670232][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.678720][ T10] usb 5-1: Product: syz [ 281.684575][ T10] usb 5-1: Manufacturer: syz [ 281.689186][ T10] usb 5-1: SerialNumber: syz [ 281.713193][ T10] usb 5-1: config 0 descriptor?? [ 281.947521][ T10] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 281.983273][ T10] cx231xx 5-1:0.1: Failed to read PCB config [ 281.999161][ T10] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 282.181475][ T10] usb 5-1: USB disconnect, device number 19 [ 282.659857][ T1204] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 282.684450][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 282.802410][ T1204] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 282.822961][ T1204] usb 2-1: USB disconnect, device number 27 [ 283.160304][ T8486] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 283.175188][ T30] audit: type=1400 audit(1762507401.923:687): avc: denied { append } for pid=8477 comm="syz.0.677" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 283.323653][ T30] audit: type=1400 audit(1762507401.933:688): avc: denied { read append } for pid=8477 comm="syz.0.677" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 283.348719][ T30] audit: type=1400 audit(1762507401.933:689): avc: denied { open } for pid=8477 comm="syz.0.677" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 283.380362][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 283.439176][ T10] usb 5-1: device descriptor read/all, error -71 [ 284.201435][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 284.201450][ T30] audit: type=1400 audit(1762507402.983:696): avc: denied { mount } for pid=8498 comm="syz.1.680" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 284.237043][ T30] audit: type=1400 audit(1762507402.983:697): avc: denied { open } for pid=8498 comm="syz.1.680" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 284.324430][ T8496] nvme_fabrics: missing parameter 'transport=%s' [ 284.345266][ T8496] nvme_fabrics: missing parameter 'nqn=%s' [ 285.827771][ T30] audit: type=1400 audit(1762507404.613:698): avc: denied { bind } for pid=8515 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.505795][ T1204] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 287.721893][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.691'. [ 287.763266][ T1204] usb 3-1: Using ep0 maxpacket: 32 [ 287.879711][ T1204] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 287.881651][ T30] audit: type=1400 audit(1762507413.657:699): avc: denied { write } for pid=8540 comm="syz.1.690" laddr=fe80::aa lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.892695][ T1204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.786003][ T30] audit: type=1400 audit(1762507413.657:700): avc: denied { connect } for pid=8540 comm="syz.1.690" laddr=fe80::aa lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.808371][ T1204] usb 3-1: config 0 has no interface number 0 [ 288.814814][ T1204] usb 3-1: config 0 interface 38 altsetting 157 endpoint 0x6 has invalid wMaxPacketSize 0 [ 288.825730][ T1204] usb 3-1: config 0 interface 38 altsetting 157 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.840411][ T1204] usb 3-1: config 0 interface 38 has no altsetting 0 [ 289.103410][ T30] audit: type=1400 audit(1762507413.657:701): avc: denied { name_connect } for pid=8540 comm="syz.1.690" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 289.363237][ T1204] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 289.377394][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.407622][ T1204] usb 3-1: Product: syz [ 289.411824][ T1204] usb 3-1: Manufacturer: syz [ 289.428436][ T8555] 9pnet_fd: Insufficient options for proto=fd [ 289.443332][ T1204] usb 3-1: SerialNumber: syz [ 289.457363][ T1204] usb 3-1: config 0 descriptor?? [ 289.573795][ T5894] IPVS: starting estimator thread 0... [ 289.597573][ T1204] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 289.673175][ T8559] IPVS: using max 75 ests per chain, 180000 per kthread [ 290.158769][ T1204] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 290.165923][ T1204] gspca_pac7302 3-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 290.189157][ T8563] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[8563] [ 290.331802][ T30] audit: type=1400 audit(1762507416.107:702): avc: denied { connect } for pid=8554 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.335230][ T5887] usb 3-1: USB disconnect, device number 25 [ 290.847717][ T30] audit: type=1400 audit(1762507416.107:703): avc: denied { shutdown } for pid=8554 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 291.052720][ T30] audit: type=1400 audit(1762507416.597:704): avc: denied { create } for pid=8569 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.152823][ T30] audit: type=1400 audit(1762507416.617:705): avc: denied { bind } for pid=8569 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.393465][ T30] audit: type=1400 audit(1762507416.617:706): avc: denied { write } for pid=8569 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.412908][ T30] audit: type=1400 audit(1762507416.637:707): avc: denied { setopt } for pid=8569 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.610167][ T30] audit: type=1400 audit(1762507417.367:708): avc: denied { read write } for pid=8577 comm="syz.2.701" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.695983][ T30] audit: type=1400 audit(1762507417.367:709): avc: denied { open } for pid=8577 comm="syz.2.701" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.905783][ T30] audit: type=1400 audit(1762507417.687:710): avc: denied { execute_no_trans } for pid=8583 comm="syz.3.702" path="/142/file1" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.036484][ T30] audit: type=1400 audit(1762507417.707:711): avc: denied { setopt } for pid=8583 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.077429][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.704'. [ 292.873107][ T5887] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 293.288820][ T8608] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 293.354976][ T5887] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 293.380630][ T8599] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 293.380630][ T8599] program syz.2.707 not setting count and/or reply_len properly [ 293.529819][ T8618] netlink: 'syz.1.712': attribute type 15 has an invalid length. [ 293.540644][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.712'. [ 293.550128][ T5887] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 293.657083][ T5887] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.666217][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.831552][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 293.920329][ T5894] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.465529][ T5894] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 294.477769][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.490628][ T5894] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 294.499858][ T5894] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 294.508593][ T5894] usb 3-1: Manufacturer: syz [ 294.523146][ T5887] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 295.336129][ T5894] usb 3-1: config 0 descriptor?? [ 295.471813][ T5894] rc_core: IR keymap rc-hauppauge not found [ 295.487539][ T5894] Registered IR keymap rc-empty [ 295.581721][ T8637] netlink: 180 bytes leftover after parsing attributes in process `syz.0.716'. [ 295.947662][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 295.947679][ T30] audit: type=1400 audit(1762507421.357:717): avc: denied { nlmsg_read } for pid=8633 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.952497][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 296.023278][ T1204] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 296.031274][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 296.038792][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.050494][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.065161][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 296.076690][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 296.094824][ T30] audit: type=1400 audit(1762507421.877:718): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3235 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.148721][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 296.163316][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.617864][ T1204] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.630194][ T5887] usb 5-1: config 0 descriptor?? [ 296.649954][ T1204] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.678365][ T1204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.689977][ T1204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.703920][ T1204] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.722321][ T1204] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.732225][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.887284][ T1204] usb 2-1: Product: syz [ 296.915796][ T1204] usb 2-1: Manufacturer: syz [ 297.657769][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 297.664087][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.684762][ T5887] usb 5-1: USB disconnect, device number 22 [ 297.691279][ T1204] usb 2-1: can't set config #1, error -71 [ 297.721675][ T1204] usb 2-1: USB disconnect, device number 28 [ 297.736203][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 297.861918][ T5872] usb 3-1: USB disconnect, device number 26 [ 297.956232][ T5894] usb 4-1: USB disconnect, device number 19 [ 298.204450][ T8662] x_tables: ip_tables: osf match: only valid for protocol 6 [ 298.310134][ T30] audit: type=1400 audit(1762507423.967:719): avc: denied { bind } for pid=8658 comm="syz.3.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.513254][ T8665] lo speed is unknown, defaulting to 1000 [ 298.848978][ T8666] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 299.089813][ T30] audit: type=1400 audit(1762507423.997:720): avc: denied { connect } for pid=8656 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.165651][ T5887] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 299.482100][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 299.550682][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 299.609515][ T5887] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 299.675693][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.907225][ T5887] usb 5-1: Product: syz [ 299.937637][ T5887] usb 5-1: Manufacturer: syz [ 300.185402][ T5887] usb 5-1: SerialNumber: syz [ 300.231206][ T5887] usb 5-1: config 0 descriptor?? [ 300.258863][ T5887] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 300.370541][ T30] audit: type=1400 audit(1762507426.147:721): avc: denied { read } for pid=8680 comm="syz.3.726" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 300.593110][ T30] audit: type=1400 audit(1762507426.147:722): avc: denied { open } for pid=8680 comm="syz.3.726" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.490567][ T5894] usb 5-1: USB disconnect, device number 23 [ 302.022214][ T8690] netlink: 'syz.3.726': attribute type 6 has an invalid length. [ 303.316804][ T30] audit: type=1400 audit(1762507429.087:723): avc: denied { nlmsg_write } for pid=8701 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.891364][ T8714] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 305.152410][ T30] audit: type=1400 audit(1762507430.907:724): avc: denied { name_bind } for pid=8711 comm="syz.0.735" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 308.498162][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.745'. [ 309.624766][ T8753] evm: overlay not supported [ 309.635222][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 309.650900][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 309.745029][ T8762] ceph: No mds server is up or the cluster is laggy [ 309.866230][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 310.965206][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 311.183200][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 311.326418][ T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 311.513179][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 311.518886][ T10] usb usb1-port1: attempt power cycle [ 311.871530][ T30] audit: type=1400 audit(1762507437.617:725): avc: denied { setopt } for pid=8791 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 312.330640][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 312.363561][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 312.406421][ T8792] vivid-003: ================= START STATUS ================= [ 312.414320][ T8792] vivid-003: Radio HW Seek Mode: Bounded [ 312.419989][ T8792] vivid-003: Radio Programmable HW Seek: false [ 312.426200][ T8792] vivid-003: RDS Rx I/O Mode: Block I/O [ 312.431750][ T8792] vivid-003: Generate RBDS Instead of RDS: false [ 312.438109][ T8792] vivid-003: RDS Reception: true [ 312.443241][ T8792] vivid-003: RDS Program Type: 0 inactive [ 312.448951][ T8792] vivid-003: RDS PS Name: inactive [ 312.454219][ T8792] vivid-003: RDS Radio Text: inactive [ 312.459685][ T8792] vivid-003: RDS Traffic Announcement: false inactive [ 312.466475][ T8792] vivid-003: RDS Traffic Program: false inactive [ 312.472815][ T8792] vivid-003: RDS Music: false inactive [ 312.478472][ T8792] vivid-003: ================== END STATUS ================== [ 312.673134][ T10] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 312.737906][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 312.797561][ T10] usb usb1-port1: unable to enumerate USB device [ 312.913297][ T5894] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 313.073211][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 313.116490][ T5894] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 313.128446][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.224389][ T5894] usb 2-1: Product: syz [ 313.245256][ T5894] usb 2-1: Manufacturer: syz [ 313.268633][ T5894] usb 2-1: SerialNumber: syz [ 313.301053][ T5894] usb 2-1: config 0 descriptor?? [ 313.340974][ T30] audit: type=1400 audit(1762507439.107:726): avc: denied { create } for pid=8805 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 313.581278][ T5894] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 313.684847][ T5894] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 313.881163][ T8819] CUSE: unknown device info "" [ 313.886124][ T8819] CUSE: zero length info key specified [ 313.905053][ T8818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.756160][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.767'. [ 314.915072][ T5894] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 314.926319][ T5894] usb 2-1: USB disconnect, device number 29 [ 315.015765][ T30] audit: type=1400 audit(1762507440.797:727): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 315.178573][ T8830] FAULT_INJECTION: forcing a failure. [ 315.178573][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 315.422206][ T8830] CPU: 0 UID: 0 PID: 8830 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT(full) [ 315.422229][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.422239][ T8830] Call Trace: [ 315.422246][ T8830] [ 315.422253][ T8830] dump_stack_lvl+0x16c/0x1f0 [ 315.422286][ T8830] should_fail_ex+0x512/0x640 [ 315.422308][ T8830] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 315.422336][ T8830] should_failslab+0xc2/0x120 [ 315.422356][ T8830] kmem_cache_alloc_node_noprof+0x78/0x770 [ 315.422379][ T8830] ? __alloc_skb+0x2b2/0x380 [ 315.422405][ T8830] ? __alloc_skb+0x2b2/0x380 [ 315.422423][ T8830] __alloc_skb+0x2b2/0x380 [ 315.422444][ T8830] ? __pfx___alloc_skb+0x10/0x10 [ 315.422473][ T8830] alloc_skb_with_frags+0xe0/0x860 [ 315.422496][ T8830] ? __might_fault+0xe3/0x190 [ 315.422525][ T8830] sock_alloc_send_pskb+0x7f9/0x980 [ 315.422547][ T8830] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 315.422574][ T8830] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 315.422594][ T8830] ? find_held_lock+0x2b/0x80 [ 315.422615][ T8830] ? dev_get_by_index+0x17c/0x380 [ 315.422642][ T8830] isotp_sendmsg+0x9c3/0x2050 [ 315.422666][ T8830] ? selinux_ip_forward+0x4b8/0x550 [ 315.422696][ T8830] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 315.422720][ T8830] ? __pfx_isotp_sendmsg+0x10/0x10 [ 315.422743][ T8830] ? __import_iovec+0x1dd/0x650 [ 315.422764][ T8830] ? __might_fault+0xe3/0x190 [ 315.422787][ T8830] ? __might_fault+0x13b/0x190 [ 315.422818][ T8830] ____sys_sendmsg+0xa98/0xc70 [ 315.422835][ T8830] ? copy_msghdr_from_user+0x10a/0x160 [ 315.422856][ T8830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.422876][ T8830] ? __pfx__kstrtoull+0x10/0x10 [ 315.422906][ T8830] ___sys_sendmsg+0x134/0x1d0 [ 315.422930][ T8830] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.422965][ T8830] ? find_held_lock+0x2b/0x80 [ 315.423003][ T8830] __sys_sendmmsg+0x200/0x420 [ 315.423026][ T8830] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.423064][ T8830] ? fput+0x9b/0xd0 [ 315.423084][ T8830] ? ksys_write+0x1ac/0x250 [ 315.423112][ T8830] __x64_sys_sendmmsg+0x9c/0x100 [ 315.423133][ T8830] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.423161][ T8830] do_syscall_64+0xcd/0xfa0 [ 315.423178][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.423195][ T8830] RIP: 0033:0x7fb57e98f6c9 [ 315.423210][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.423226][ T8830] RSP: 002b:00007fb57f8de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.423243][ T8830] RAX: ffffffffffffffda RBX: 00007fb57ebe5fa0 RCX: 00007fb57e98f6c9 [ 315.423254][ T8830] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 315.423264][ T8830] RBP: 00007fb57f8de090 R08: 0000000000000000 R09: 0000000000000000 [ 315.423273][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.423283][ T8830] R13: 00007fb57ebe6038 R14: 00007fb57ebe5fa0 R15: 00007ffdb21ed208 [ 315.423307][ T8830] [ 316.002572][ T8837] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 316.027747][ T30] audit: type=1400 audit(1762507441.807:728): avc: denied { read } for pid=8831 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.755023][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.755113][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.188687][ T30] audit: type=1400 audit(1762507442.967:729): avc: denied { create } for pid=8850 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 317.332632][ T30] audit: type=1400 audit(1762507442.997:730): avc: denied { ioctl } for pid=8850 comm="syz.3.777" path="socket:[21702]" dev="sockfs" ino=21702 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 317.539561][ T8867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8867 comm=syz.0.779 [ 317.552475][ T30] audit: type=1400 audit(1762507443.047:731): avc: denied { connect } for pid=8850 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 317.933128][ T5894] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 318.030900][ T8871] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 318.361160][ T5894] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 318.375534][ T5894] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 318.390780][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.416231][ T5894] usb 1-1: Product: syz [ 318.440704][ T5894] usb 1-1: Manufacturer: syz [ 318.458662][ T5894] usb 1-1: SerialNumber: syz [ 318.518738][ T5894] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 318.597841][ T8875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 318.771414][ T5894] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 319.530396][ T5894] usb 1-1: USB disconnect, device number 21 [ 319.799654][ T30] audit: type=1400 audit(1762507445.387:732): avc: denied { execute } for pid=8879 comm="syz.1.785" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.105100][ T30] audit: type=1400 audit(1762507445.877:733): avc: denied { setopt } for pid=8889 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.136831][ T5872] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.193572][ T5886] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 320.294232][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 320.339480][ T5872] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.383187][ T5872] usb 2-1: config 0 has no interface number 0 [ 320.392385][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.402401][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.426580][ T5872] usb 2-1: Product: syz [ 320.433153][ T5872] usb 2-1: Manufacturer: syz [ 320.437776][ T5872] usb 2-1: SerialNumber: syz [ 320.444354][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.452950][ T5886] usb 5-1: not running at top speed; connect to a high speed hub [ 320.458213][ T5872] usb 2-1: config 0 descriptor?? [ 320.468413][ T5886] usb 5-1: config 15 has an invalid interface number: 168 but max is 0 [ 320.472418][ T5872] smsc95xx v2.0.0 [ 320.488286][ T8895] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2073 sclass=netlink_xfrm_socket pid=8895 comm=syz.0.790 [ 320.488399][ T5886] usb 5-1: config 15 has no interface number 0 [ 320.501170][ T5872] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 320.510490][ T5886] usb 5-1: config 15 interface 168 has no altsetting 0 [ 320.523785][ T5872] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 320.545767][ T5886] usb 5-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 320.555450][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.564368][ T5886] usb 5-1: SerialNumber: ┚鯩ㇻ┛縶៕艤耻佷撍잭냐ꎠ [ 320.776539][ T8899] netlink: 180 bytes leftover after parsing attributes in process `syz.3.791'. [ 320.844695][ T8884] netlink: 'syz.1.785': attribute type 12 has an invalid length. [ 321.193120][ T5872] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 321.344855][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 321.423075][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 321.435869][ T30] audit: type=1400 audit(1762507447.207:734): avc: denied { read write } for pid=8885 comm="syz.4.786" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 321.463180][ T5872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 321.474402][ T30] audit: type=1400 audit(1762507447.207:735): avc: denied { open } for pid=8885 comm="syz.4.786" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 321.508662][ T5872] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 321.518494][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.528320][ T5872] usb 1-1: Product: syz [ 321.532592][ T5872] usb 1-1: Manufacturer: syz [ 321.537580][ T30] audit: type=1400 audit(1762507447.317:736): avc: denied { read } for pid=8885 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 321.558406][ T5872] usb 1-1: SerialNumber: syz [ 321.570837][ T5872] usb 1-1: config 0 descriptor?? [ 321.576789][ T8895] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 321.593603][ T8895] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 321.625630][ T5872] usb 1-1: ucan: probing device on interface #0 [ 322.447253][ T5933] usb 2-1: USB disconnect, device number 30 [ 322.487386][ T5872] ucan 1-1:0.0 can0: registered device [ 322.645085][ T5872] ucan 1-1:0.0 can0: firmware string: [ 322.724830][ T8915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'. [ 322.888949][ T30] audit: type=1400 audit(1762507448.667:737): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.382869][ T5886] dvb-usb: found a 'Gigabyte U8000-RH' in cold state, will try to load a firmware [ 323.789928][ T30] audit: type=1400 audit(1762507448.667:738): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.842651][ T5886] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 323.934351][ T5886] dib0700: firmware download failed at 7 with -22 [ 323.952171][ T30] audit: type=1400 audit(1762507448.667:739): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.010082][ T5886] usb 5-1: USB disconnect, device number 24 [ 324.060195][ T30] audit: type=1400 audit(1762507448.667:740): avc: denied { read } for pid=5479 comm="dhcpcd" name="n107" dev="tmpfs" ino=5509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.155300][ T30] audit: type=1400 audit(1762507448.667:741): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n107" dev="tmpfs" ino=5509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.247083][ T30] audit: type=1400 audit(1762507448.667:742): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n107" dev="tmpfs" ino=5509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.290698][ T30] audit: type=1400 audit(1762507449.127:743): avc: denied { watch } for pid=8894 comm="syz.0.790" path="/180/file1" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 324.316461][ T30] audit: type=1400 audit(1762507449.127:744): avc: denied { watch_sb watch_reads } for pid=8894 comm="syz.0.790" path="/180/file1" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.365962][ T30] audit: type=1400 audit(1762507449.617:745): avc: denied { firmware_load } for pid=5886 comm="kworker/0:5" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 324.482500][ T5886] usb 1-1: USB disconnect, device number 22 [ 324.610378][ T30] audit: type=1400 audit(1762507449.767:746): avc: denied { read open } for pid=8926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.722109][ T8945] netlink: 180 bytes leftover after parsing attributes in process `syz.1.802'. [ 325.403150][ T5933] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 325.586590][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 325.642087][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 325.703540][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 325.730337][ T8960] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 325.737316][ T8960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.749647][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 325.772423][ T8960] vhci_hcd vhci_hcd.0: Device attached [ 325.818539][ T8964] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 325.819548][ T5933] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 325.825174][ T8964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 325.833554][ T8964] vhci_hcd vhci_hcd.0: Device attached [ 325.865324][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.904522][ T5933] usb 5-1: Product: syz [ 325.913515][ T5933] usb 5-1: Manufacturer: syz [ 325.918145][ T5933] usb 5-1: SerialNumber: syz [ 325.937277][ T5933] usb 5-1: config 0 descriptor?? [ 325.973383][ T8947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.144895][ T5887] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 327.034112][ T5933] usb 5-1: ucan: probing device on interface #0 [ 327.040392][ T5933] usb 5-1: ucan: invalid endpoint configuration [ 327.092462][ T5933] usb 5-1: ucan: probe failed; try to update the device firmware [ 327.142359][ T5872] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 327.295787][ T5872] usb 2-1: not running at top speed; connect to a high speed hub [ 327.304965][ T5872] usb 2-1: config 1 interface 0 has no altsetting 0 [ 327.312043][ T5872] usb 2-1: language id specifier not provided by device, defaulting to English [ 327.324614][ T5872] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 327.334125][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.342113][ T5872] usb 2-1: Product: syz [ 327.393462][ T5872] usb 2-1: SerialNumber: syz [ 327.627658][ T8983] syzkaller0: entered promiscuous mode [ 327.633621][ T8983] syzkaller0: entered allmulticast mode [ 327.944670][ T8960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.072017][ T8964] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 328.078651][ T8964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 328.185859][ T8964] vhci_hcd vhci_hcd.0: Device attached [ 328.250912][ T8992] vhci_hcd: connection closed [ 328.287073][ T12] vhci_hcd: stop threads [ 328.356099][ T12] vhci_hcd: release socket [ 328.374650][ T12] vhci_hcd: disconnect device [ 328.382420][ T8965] vhci_hcd: connection closed [ 328.427213][ T8961] vhci_hcd: connection reset by peer [ 328.514548][ T12] vhci_hcd: stop threads [ 328.518849][ T12] vhci_hcd: release socket [ 328.536518][ T12] vhci_hcd: disconnect device [ 328.589354][ T12] vhci_hcd: stop threads [ 328.619142][ T12] vhci_hcd: release socket [ 328.684335][ T12] vhci_hcd: disconnect device [ 328.721842][ T5872] usb 2-1: USB disconnect, device number 31 [ 328.751922][ T8999] netlink: 'syz.2.812': attribute type 29 has an invalid length. [ 328.818858][ T8999] netlink: 'syz.2.812': attribute type 29 has an invalid length. [ 328.827668][ T8999] netlink: 500 bytes leftover after parsing attributes in process `syz.2.812'. [ 329.108084][ T5886] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 329.883074][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 329.890857][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 329.913600][ T5886] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.924504][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.932703][ T5886] usb 1-1: Product: syz [ 329.937380][ T5886] usb 1-1: Manufacturer: syz [ 329.942004][ T5886] usb 1-1: SerialNumber: syz [ 329.962656][ T5886] usb 1-1: config 0 descriptor?? [ 329.979193][ T9005] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 329.997983][ T5865] usb 5-1: USB disconnect, device number 25 [ 331.286780][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'. [ 331.359480][ T9037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.822'. [ 331.413490][ T5887] vhci_hcd: vhci_device speed not set [ 331.633715][ T5886] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.072119][ T5872] usb 1-1: USB disconnect, device number 23 [ 333.092838][ T5886] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 333.103125][ T5886] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 333.383332][ T5886] usb 5-1: config 220 has no interface number 2 [ 333.389661][ T5886] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 333.428843][ T5886] usb 5-1: config 220 interface 0 has no altsetting 0 [ 333.472150][ T5886] usb 5-1: config 220 interface 76 has no altsetting 0 [ 333.546121][ T5886] usb 5-1: config 220 interface 1 has no altsetting 0 [ 333.963331][ T5886] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 334.011846][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.027471][ T5886] usb 5-1: Product: syz [ 334.347289][ T5886] usb 5-1: Manufacturer: syz [ 334.351945][ T5886] usb 5-1: SerialNumber: syz [ 334.353380][ T5872] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 334.388752][ T5886] usb 5-1: can't set config #220, error -71 [ 334.401329][ T5886] usb 5-1: USB disconnect, device number 26 [ 334.828479][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.919552][ T5872] usb 3-1: can't read configurations, error -61 [ 335.583590][ T5872] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 336.160024][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 336.160426][ T30] audit: type=1326 audit(1762507461.937:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.287043][ T30] audit: type=1326 audit(1762507461.937:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.624717][ T30] audit: type=1326 audit(1762507461.947:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.650041][ T30] audit: type=1326 audit(1762507461.947:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.674736][ T30] audit: type=1326 audit(1762507461.977:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.699978][ T30] audit: type=1326 audit(1762507462.067:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.736024][ T30] audit: type=1326 audit(1762507462.087:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.783341][ T30] audit: type=1326 audit(1762507462.087:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.808822][ T30] audit: type=1326 audit(1762507462.087:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 336.838645][ T30] audit: type=1326 audit(1762507462.087:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad71d8f6c9 code=0x7ffc0000 [ 337.215974][ T5887] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 337.405181][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 338.199139][ T5887] usb 2-1: config 0 has no interfaces? [ 338.210338][ T5887] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 338.623558][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.631575][ T5887] usb 2-1: Product: syz [ 338.655246][ T5887] usb 2-1: Manufacturer: syz [ 338.669048][ T5887] usb 2-1: SerialNumber: syz [ 338.683502][ T5887] usb 2-1: config 0 descriptor?? [ 339.056674][ T5886] usb 2-1: USB disconnect, device number 32 [ 339.710861][ T9118] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.991304][ T9118] /dev/nullb0: Can't open blockdev [ 340.187167][ T9126] IPv4: Oversized IP packet from 127.202.26.0 [ 340.659240][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'. [ 340.701717][ T9107] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802b36c080 pfn:0x308ee [ 340.703475][ T9112] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x3e7ffff pfn:0x58e44 [ 340.721695][ T9112] memcg:ffff888061928d00 [ 340.721711][ T9107] memcg:ffff888061928d00 [ 340.726075][ T9112] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 340.726111][ T9112] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 340.726131][ T9112] raw: 0000000003e7ffff 0000000000000000 00000001ffffffff ffff888061928d00 [ 340.726145][ T9112] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 340.726159][ T9112] page_owner tracks the page as allocated [ 340.726199][ T9112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9112, tgid 9105 (syz.3.844), ts 340703434806, free_ts 340700198904 [ 340.726232][ T9112] post_alloc_hook+0x1c0/0x230 [ 340.726262][ T9112] get_page_from_freelist+0x10a3/0x3a30 [ 340.726294][ T9112] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 340.726321][ T9112] alloc_pages_mpol+0x1fb/0x550 [ 340.726342][ T9112] folio_alloc_noprof+0x20/0x2d0 [ 340.726365][ T9112] filemap_alloc_folio_noprof+0x3a1/0x470 [ 340.726386][ T9112] page_cache_ra_order+0x56f/0xf20 [ 340.726413][ T9112] filemap_fault+0x1583/0x29a0 [ 340.726428][ T9112] __do_fault+0x10d/0x490 [ 340.726453][ T9112] do_pte_missing+0xf4a/0x3ba0 [ 340.726473][ T9112] __handle_mm_fault+0x1556/0x2aa0 [ 340.730721][ T9107] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 340.730757][ T9107] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 340.730774][ T9107] raw: ffff88802b36c080 0000000000000000 00000001ffffffff ffff888061928d00 [ 340.730782][ T9107] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 340.739450][ T9112] handle_mm_fault+0x589/0xd10 [ 340.938856][ T9105] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x3e7fffd pfn:0x7f9e4 [ 340.938897][ T9107] page_owner tracks the page as allocated [ 340.948555][ T9105] memcg:ffff888061928d00 [ 340.953959][ T9107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9107, tgid 9105 (syz.3.844), ts 340701695539, free_ts 340693898795 [ 340.953999][ T9107] post_alloc_hook+0x1c0/0x230 [ 340.954027][ T9107] get_page_from_freelist+0x10a3/0x3a30 [ 340.958262][ T9105] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 340.978999][ T9107] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 340.979028][ T9107] alloc_pages_mpol+0x1fb/0x550 [ 340.983809][ T9105] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 340.989752][ T9107] folio_alloc_noprof+0x20/0x2d0 [ 340.997479][ T9105] raw: 0000000003e7fffd 0000000000000000 00000001ffffffff ffff888061928d00 [ 341.003693][ T9107] filemap_alloc_folio_noprof+0x3a1/0x470 [ 341.003716][ T9107] page_cache_ra_order+0x56f/0xf20 [ 341.003741][ T9107] filemap_fault+0x1583/0x29a0 [ 341.003756][ T9107] __do_fault+0x10d/0x490 [ 341.003781][ T9107] do_pte_missing+0x1a6/0x3ba0 [ 341.003804][ T9107] __handle_mm_fault+0x1556/0x2aa0 [ 341.003822][ T9107] handle_mm_fault+0x589/0xd10 [ 341.003843][ T9107] do_user_addr_fault+0x7a6/0x1370 [ 341.008676][ T9105] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 341.017279][ T9107] exc_page_fault+0x64/0xc0 [ 341.017313][ T9107] asm_exc_page_fault+0x26/0x30 [ 341.022253][ T9105] page_owner tracks the page as allocated [ 341.030824][ T9107] page last free pid 9124 tgid 9124 stack trace: [ 341.036880][ T9105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9105, tgid 9105 (syz.3.844), ts 340938831256, free_ts 340700176661 [ 341.041925][ T9107] __free_frozen_pages+0x7df/0x1160 [ 341.046687][ T9105] post_alloc_hook+0x1c0/0x230 [ 341.050986][ T9107] __mmdrop+0xd5/0x580 [ 341.055867][ T9105] get_page_from_freelist+0x10a3/0x3a30 [ 341.060921][ T9107] __mmput+0x374/0x410 [ 341.066028][ T9105] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 341.071116][ T9107] mmput+0x62/0x70 [ 341.081418][ T9105] alloc_pages_mpol+0x1fb/0x550 [ 341.085926][ T9107] do_exit+0x7c7/0x2bf0 [ 341.090760][ T9105] folio_alloc_noprof+0x20/0x2d0 [ 341.096810][ T9107] __x64_sys_exit+0x42/0x50 [ 341.096833][ T9107] x64_sys_call+0x1506/0x1730 [ 341.096853][ T9107] do_syscall_64+0xcd/0xfa0 [ 341.103209][ T9105] filemap_alloc_folio_noprof+0x3a1/0x470 [ 341.123973][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.124090][ T9107] ------------[ cut here ]------------ [ 341.129231][ T9105] page_cache_ra_order+0x56f/0xf20 [ 341.134080][ T9107] kernel BUG at mm/filemap.c:870! [ 341.138064][ T9105] filemap_fault+0x1583/0x29a0 [ 341.143608][ T9107] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 341.147678][ T9105] __do_fault+0x10d/0x490 [ 341.153538][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.3.844 Not tainted syzkaller #0 PREEMPT(full) [ 341.153560][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.153571][ T9107] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 341.153602][ T9107] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48 [ 341.153620][ T9107] RSP: 0018:ffffc900031a7418 EFLAGS: 00010246 [ 341.153635][ T9107] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d4cb000 [ 341.153647][ T9107] RDX: 0000000000080000 RSI: ffffffff81f5baca RDI: ffff888032b80484 [ 341.153659][ T9107] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 341.153670][ T9107] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 341.153681][ T9107] R13: ffffea0000c23b80 R14: 0000000000000000 R15: 1ffff92000634ead [ 341.153692][ T9107] FS: 00007fb57f8de6c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 341.153711][ T9107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.153723][ T9107] CR2: 000020000019f030 CR3: 000000003070d000 CR4: 00000000003526f0 [ 341.153742][ T9107] Call Trace: [ 341.153749][ T9107] [ 341.153760][ T9107] ? __pfx___filemap_add_folio+0x10/0x10 [ 341.153793][ T9107] filemap_add_folio+0x19a/0x610 [ 341.153820][ T9107] ? __pfx_filemap_add_folio+0x10/0x10 [ 341.153850][ T9107] page_cache_ra_order+0x635/0xf20 [ 341.157548][ T9105] do_pte_missing+0x1a6/0x3ba0 [ 341.162368][ T9107] filemap_fault+0x1583/0x29a0 [ 341.166547][ T9105] __handle_mm_fault+0x1556/0x2aa0 [ 341.171417][ T9107] ? __pfx_filemap_fault+0x10/0x10 [ 341.175908][ T9105] handle_mm_fault+0x589/0xd10 [ 341.180710][ T9107] ? __pfx_filemap_map_pages+0x10/0x10 [ 341.185512][ T9105] do_user_addr_fault+0x60c/0x1370 [ 341.190900][ T9107] __do_fault+0x10d/0x490 [ 341.196858][ T9105] exc_page_fault+0x64/0xc0 [ 341.202257][ T9107] ? __pfx_filemap_map_pages+0x10/0x10 [ 341.207398][ T9105] asm_exc_page_fault+0x26/0x30 [ 341.212352][ T9107] do_pte_missing+0x1a6/0x3ba0 [ 341.217377][ T9105] page last free pid 9111 tgid 9102 stack trace: [ 341.223503][ T9107] ? find_held_lock+0x2b/0x80 [ 341.223534][ T9107] ? __handle_mm_fault+0x1529/0x2aa0 [ 341.223557][ T9107] __handle_mm_fault+0x1556/0x2aa0 [ 341.227891][ T9105] free_unref_folios+0xa31/0x1610 [ 341.237051][ T9107] ? mt_find+0x3e2/0xa20 [ 341.237071][ T9107] ? __pfx___handle_mm_fault+0x10/0x10 [ 341.237091][ T9107] ? __pfx_mt_find+0x10/0x10 [ 341.237111][ T9107] ? find_vma+0xbf/0x140 [ 341.237127][ T9107] ? __pfx_find_vma+0x10/0x10 [ 341.247426][ T9105] folios_put_refs+0x4be/0x750 [ 341.253143][ T9107] handle_mm_fault+0x589/0xd10 [ 341.253176][ T9107] ? __pkru_allows_pkey+0x11/0xb0 [ 341.272859][ T9105] truncate_inode_pages_range+0x311/0xe50 [ 341.278839][ T9107] do_user_addr_fault+0x7a6/0x1370 [ 341.278863][ T9107] ? rcu_is_watching+0x12/0xc0 [ 341.278888][ T9107] exc_page_fault+0x64/0xc0 [ 341.278917][ T9107] asm_exc_page_fault+0x26/0x30 [ 341.278935][ T9107] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 341.278963][ T9107] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 341.278980][ T9107] RSP: 0018:ffffc900031a7c28 EFLAGS: 00050246 [ 341.278995][ T9107] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 341.279006][ T9107] RDX: fffff52000634f95 RSI: ffffc900031a7ca0 RDI: 000020000001f000 [ 341.279018][ T9107] RBP: 000020000001f000 R08: 0000000000000000 R09: fffff52000634f94 [ 341.279029][ T9107] R10: ffffc900031a7ca7 R11: 0000000000000001 R12: ffffc900031a7ca0 [ 341.279040][ T9107] R13: 000020000001f008 R14: 00007ffffffff000 R15: 0000000000000000 [ 341.279058][ T9107] _copy_to_user+0xbb/0xd0 [ 341.279081][ T9107] msr_read+0x14e/0x250 [ 341.279103][ T9107] ? __pfx_msr_read+0x10/0x10 [ 341.279124][ T9107] ? bpf_lsm_file_permission+0x9/0x10 [ 341.279142][ T9107] ? security_file_permission+0x71/0x210 [ 341.287167][ T9105] set_blocksize+0x2b8/0x500 [ 341.295063][ T9107] ? rw_verify_area+0xcf/0x6c0 [ 341.295088][ T9107] ? __pfx_msr_read+0x10/0x10 [ 341.295109][ T9107] vfs_read+0x1e4/0xcf0 [ 341.303307][ T9105] blkdev_bszset+0x19b/0x240 [ 341.310997][ T9107] ? __pfx_vfs_read+0x10/0x10 [ 341.318969][ T9105] blkdev_ioctl+0x44e/0x6d0 [ 341.327838][ T9107] ? find_held_lock+0x2b/0x80 [ 341.327861][ T9107] ? __fget_files+0x204/0x3c0 [ 341.334665][ T9105] __x64_sys_ioctl+0x18e/0x210 [ 341.342360][ T9107] ? __fget_files+0x20e/0x3c0 [ 341.345635][ T9105] do_syscall_64+0xcd/0xfa0 [ 341.348527][ T9107] ksys_read+0x12a/0x250 [ 341.354142][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.359028][ T9107] ? __pfx_ksys_read+0x10/0x10 [ 341.364836][ T9105] ------------[ cut here ]------------ [ 341.369542][ T9107] do_syscall_64+0xcd/0xfa0 [ 341.374297][ T9105] kernel BUG at mm/filemap.c:870! [ 341.379006][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.702119][ T9107] RIP: 0033:0x7fb57e98f6c9 [ 341.706508][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.726105][ T9107] RSP: 002b:00007fb57f8de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.734503][ T9107] RAX: ffffffffffffffda RBX: 00007fb57ebe5fa0 RCX: 00007fb57e98f6c9 [ 341.742454][ T9107] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000009 [ 341.750576][ T9107] RBP: 00007fb57ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.758514][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.766451][ T9107] R13: 00007fb57ebe6038 R14: 00007fb57ebe5fa0 R15: 00007ffdb21ed208 [ 341.774416][ T9107] [ 341.777410][ T9107] Modules linked in: [ 341.781324][ T9105] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 341.781815][ T9107] ---[ end trace 0000000000000000 ]--- [ 341.787780][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.3.844 Tainted: G D syzkaller #0 PREEMPT(full) [ 341.787802][ T9105] Tainted: [D]=DIE [ 341.787808][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.787817][ T9105] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 341.787848][ T9105] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48 [ 341.787863][ T9105] RSP: 0018:ffffc9000488f7e8 EFLAGS: 00010293 [ 341.787879][ T9105] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 341.787889][ T9105] RDX: ffff8880271ac900 RSI: ffffffff81f5baca RDI: ffff8880271acd84 [ 341.787900][ T9105] RBP: 0000000000112c00 R08: 0000000000000000 R09: 0000000000000000 [ 341.787910][ T9105] R10: ffffffff90820cd7 R11: 1ffffffff1c79ec9 R12: 0000000000000002 [ 341.787920][ T9105] R13: ffffea0001fe7900 R14: 0000000000000000 R15: 1ffff92000911f27 [ 341.787930][ T9105] FS: 0000555581d82500(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 341.787946][ T9105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.787963][ T9105] CR2: 000000110c44c0dd CR3: 000000003070d000 CR4: 00000000003526f0 [ 341.787973][ T9105] Call Trace: [ 341.787978][ T9105] [ 341.787988][ T9105] ? __pfx___filemap_add_folio+0x10/0x10 [ 341.788019][ T9105] filemap_add_folio+0x19a/0x610 [ 341.788043][ T9105] ? __pfx_filemap_add_folio+0x10/0x10 [ 341.788067][ T9105] ? css_rstat_updated+0x1c2/0x510 [ 341.788092][ T9105] page_cache_ra_order+0x635/0xf20 [ 341.788118][ T9105] filemap_fault+0x1583/0x29a0 [ 341.788133][ T9105] ? __pfx_filemap_fault+0x10/0x10 [ 341.788150][ T9105] ? rcu_is_watching+0x12/0xc0 [ 341.788171][ T9105] ? __free_object+0x286/0x410 [ 341.788195][ T9105] ? __pfx_filemap_map_pages+0x10/0x10 [ 341.788217][ T9105] __do_fault+0x10d/0x490 [ 341.788244][ T9105] ? __pfx_filemap_map_pages+0x10/0x10 [ 341.788267][ T9105] do_pte_missing+0x1a6/0x3ba0 [ 341.788289][ T9105] ? find_held_lock+0x2b/0x80 [ 341.788310][ T9105] ? __handle_mm_fault+0x1529/0x2aa0 [ 341.788334][ T9105] __handle_mm_fault+0x1556/0x2aa0 [ 341.794070][ T9107] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 341.804583][ T9105] ? __pfx___handle_mm_fault+0x10/0x10 [ 341.804609][ T9105] ? lock_vma_under_rcu+0x176/0x530 [ 341.808554][ T9107] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48 [ 341.818592][ T9105] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 341.818614][ T9105] ? lockdep_hardirqs_on+0x7c/0x110 [ 341.925339][ T9107] RSP: 0018:ffffc900031a7418 EFLAGS: 00010246 [ 341.930131][ T9105] handle_mm_fault+0x589/0xd10 [ 341.935601][ T9107] [ 341.940665][ T9105] ? __pkru_allows_pkey+0x11/0xb0 [ 341.945776][ T9107] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000d4cb000 [ 341.950488][ T9105] do_user_addr_fault+0x60c/0x1370 [ 341.955609][ T9107] RDX: 0000000000080000 RSI: ffffffff81f5baca RDI: ffff888032b80484 [ 341.960332][ T9105] ? rcu_is_watching+0x12/0xc0 [ 341.965116][ T9107] RBP: 0000000000112c00 R08: 0000000000000001 R09: 0000000000000000 [ 341.970507][ T9105] exc_page_fault+0x64/0xc0 [ 341.975158][ T9107] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 341.980268][ T9105] asm_exc_page_fault+0x26/0x30 [ 341.985014][ T9107] R13: ffffea0000c23b80 R14: 0000000000000000 R15: 1ffff92000634ead [ 341.989684][ T9105] RIP: 0033:0x7fb57e958a88 [ 341.994957][ T9107] FS: 00007fb57f8de6c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 342.000014][ T9105] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f [ 342.005995][ T9107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.011414][ T9105] RSP: 002b:00007ffdb21ed368 EFLAGS: 00010246 [ 342.016625][ T9107] CR2: 000020000019f030 CR3: 000000003070d000 CR4: 00000000003526f0 [ 342.036253][ T9105] [ 342.036259][ T9105] RAX: 0000200000000000 RBX: 0000000000000004 RCX: 0030656c69662f2e [ 342.036270][ T9105] RDX: 0000000000000008 RSI: 0030656c69662f2e RDI: 0000200000000000 [ 342.036280][ T9105] RBP: 00007fb57ebe7da0 R08: 0000001b2ed20000 R09: 0000000000000001 [ 342.036289][ T9105] R10: 0000000000000001 R11: 0000000000000009 R12: 00007fb57ebe627c [ 342.036299][ T9105] R13: 00007fb57ebe6270 R14: fffffffffffffffe R15: 00007ffdb21ed480 [ 342.036318][ T9105] [ 342.036324][ T9105] Modules linked in: [ 342.037017][ T9105] ---[ end trace 0000000000000000 ]--- [ 342.042224][ T9107] Kernel panic - not syncing: Fatal exception [ 342.047712][ T9107] Kernel Offset: disabled