last executing test programs: 1m50.613052653s ago: executing program 1 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffd, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01005e4bb8453400000000000000004d0000000600a829380400000e0001006e657464657673696d0000000f0002006e65746465300000c79cf2241068601a3b71337c393be0b47b909f64ca8d096565ad6d0fefbd07692e75718617f5d4dbb53334135663a05cad40109d89d8f37fcd3426fe6aec0f7496788abc7a680d583adde963d7b9034ddfa054e714f03a4b9de200627700000000c6b758610876d13bd0b57ff91261a885c640a133a2be5191c325d04ac3e2e8c5e470cb1a892491c1020daab767988013b5f31706312b2f9b75909f4b93da678c55d0ff27ec708112a138c99f66542ec1597168b9537ef5bcc92f3cd07feb7250b6d0b731ae700f7e7dd88d5c532e14dd2de827cce9952cad7a6f84cf1f40d393268aa3bfaed89539d515c757e82cf368fca8bc4ac606df1054040eea40fa3570560aea2688bc2a32aa7c37627cca54cfb5890d22ddebbccb9d0bb3265df09ba1de52a079ac7ac013e559935611386a6acee3edd2f56bdfcc0d83cc45c007c50532218391b409060dee7dd3d104dc168dc891f8a11316f1956e9dfbf8085b4bcdbd2ac5d53e763e173778f3c826a489dc48c25eaa3141deb8e0cee840"], 0x3c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1f0c5bd73ab40cc270500705d164cdc8a4034781f9f9b6c4fb041607202b0872ef4df4bbfe9e7c39295dde56142d77a47744ef719e57b552eebeb5a5eaef072617f8eb7d44bc8710863e0c5a41adf4c684b3da4aabad78b9e372da8a5234b478c93a5f2efdb6cac3e9b0a5f38b1dadb58f8f4881e6eaf8f1d364d24a1825641b7089d24c891b2abcf63325fb6e4697c6d1612c032b338edc000c9f0a64a8300cfb6adbab", @ANYRES16=r10, @ANYBLOB="0107f4000000fcdbdf2541000000"], 0x14}}, 0x4c000) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x222f10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r10, 0x100, 0x1, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1m47.287340737s ago: executing program 1 (id=221): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_setup(0x3ff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = getpid() syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0xfffffffffffffffc}, {0x8}, {0x7, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000000c0)=r5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x498401, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="940000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x94}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {r8}}, './file0\x00'}) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x24008504) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000070000000c0004400000000000000003b8010000140a0104000000000000000003000007cc000800a258ccc870bc2d0ec0671490c7feef0b0035e7bbef5ef9f8bf8c0725d9bb98a1faf46b356e41ff5b9cc185938c866d7264c0fde197d9b50c41796464394b5c7dd9ed5c75fefb39b41c5af13e739d407d57ccfb5bc0825522e7379800de475732cf4c7f329aa6e9e7e5247e7b261b7fd19d0a8a41e6ba6dbeb3df85fb91af22af23b5968cec2507c9b78fc98d6fd5285426c64c459b3d7c029fdfd93652a08152a1cc70314e43eeebf9633813e5269bc6ffd96538f274303fb04ac2dfdd0c00064000000000000000050c00064000000000000000035900080091c3c40074bdfa03e9a71f3153d10c43c2309234539b772a8d0f021d31feabdbc3e34c5a9ade733d97139a7ad7b7b0668ec5afc5f62dc2beb78347b685996b0d0e662d5d58d1cd12bc39079f08b4b9d83686cee3210000000900020073797a320000000008000340000000073c00080045a5898da98d6d85e89aeb4fd5e9d2fca4db0a8966606f74c27abafbc0612379b66df4835e0c5fafb13ff25ad97b9c332d0113767d9a1a5608000340000000070c0006400000000000000005140000001000010000000000000000000000000a"], 0x200}}, 0xc0d0) 1m44.153711474s ago: executing program 1 (id=240): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00008ec000/0x1000)=nil, 0x1000, 0x4000000, 0x50, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000fec000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/241) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x61f6, 0x0, 0x1, 0xb5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0xffff3759, 0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x25, 0x4, @tid=r6}, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[], 0xfdef) 1m43.723818501s ago: executing program 1 (id=242): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004855) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x7f00) 1m43.573691856s ago: executing program 1 (id=244): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) (async) r0 = getpid() (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') readv(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) setfsgid(0xee00) 1m43.368271985s ago: executing program 1 (id=246): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a0001000000000000000000020000000003"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x66, 0x10, 0x20, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x0, 0x5eea516e}}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1m28.296973144s ago: executing program 32 (id=246): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a0001000000000000000000020000000003"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x66, 0x10, 0x20, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x0, 0x5eea516e}}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 10.709837494s ago: executing program 3 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0x3a) io_uring_setup(0x115c, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r10, 0x5}, 0xc) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_usb_connect(0x1, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000099473089911216859980900000109023f0011000020000904030005375d000004020309050800000404fe0709050400ff0303020409050a1cff0301ac08"], 0x0) sendto$packet(r6, &(0x7f0000000180)="bad330fbc9b55400ffff00000756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 8.704982062s ago: executing program 5 (id=588): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) umount2(0x0, 0xb) 8.293421044s ago: executing program 5 (id=590): syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x1, 0x3, 0x6}]}]}, {0x0, [0x2e]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) (async) syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) (async) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x1, 0x3, 0x6}]}]}, {0x0, [0x2e]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) (async) 8.154747053s ago: executing program 4 (id=591): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xee01, r0, r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, r0, 0x0, 0x0, 0x0, 0x80, 0xfff}, 0x0, 0x0, 0x3, 0x6, 0x96d, 0x6, 0x5, 0x3, 0x5, 0x6b}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x2, 0x0, 0x0, 0x0) 7.067617362s ago: executing program 4 (id=593): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1409, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40004000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1409, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40004000) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) 6.817821607s ago: executing program 3 (id=594): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000051b87437f2fb654ff6c900000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000e0008500000086000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) 6.732816719s ago: executing program 5 (id=596): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc0242, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x180800) mkdirat(r3, 0x0, 0x1ec) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x6, 0x4000005, 0x800, 0xa, 0xfffffffe, 0x800002, 0x4003, 0x6, 0x5, 0x401, 0x7, 0x7e000000, 0x4, 0x7, 0x1000, 0x101, 0x6, 0x0, 0x2, 0x7, 0x100, 0x6, 0x20003, 0xdb, 0x1000084, 0x80000001, 0x800, 0x1, 0x8, 0x7, 0x4]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f0000001540)={0x2020}, 0x2020) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$UHID_INPUT(r5, &(0x7f0000000500)={0x8, {"0c1e6bb376f0d142778956ac776ec01c8a474d7e8cfa8e74abad472328ef353feb945c52808fa649966e6d95cfc22c887575bd780fe69fc2ba0197287e715d93c94f3914e64e9e0319804469d2445d35b5846dadf9f06689d9d70eace0c1daa904633882ae54d7ed2179251c21bdc2828228dd95464678c173db2445d83942e87c9bee04f2c8ae799769052e4e0880510e09b563844398818834e9536827da4f3c902e09d0f47505b8f8ca0797b709561e301ba2135d21973dbe33398f3b0bd90cc20e94a692c6f8dce8b4aa2b5e4c670c6720ef293e7d2d241c33d103ba24198da64d39b2e0654058225d1a4e1c1118536e693f4154430c3a835abe6f35bb133b076e833157078fb1d6068197b6ecc07b53fc5e182ef3a495597d6526593ac2d8927f8866ab3570c6b51b79d2cb7d5de3b4512907e9bb5c35341f49c6e916e11a54616959294e1423edded42332ab11b1716e073731f0019d4667ef0795dcf3c7b642e3f8331ad5279572f38ea19e47bf6978a7214a9f826a68d18bd1bc92b9d390cdc6c4dca6e5a9af594730224e6382e75bf4f11832465929b6cb2fec0635e160960aa24b3f90629a4aebc65a935de4b4f64c60b9c95dbfc4f7d39dc937bf9e81e7943166c8d2f498fceea88c42b30da10946d80fa1f6d388aebfd040b4f5cef89f80a21b460130729ccba954d02882e2f03bf26d37ea0c67c7a9743184db86d18e7359861138a1378f4219f69674fe4b94b53c567948d305502b887e553c21421cad02b584447e684463ff69e733b38fd891b2205ae166d2d8ea5d8c3389df052840333141b43465a0bbebccd904de889351d06203649d10c34bf5cc2eb82f1d24e5f80873688af3f2df5dc7b2663b1534cedd86a8c5836eb99ae2c3e08adc1cbcf837c79335f1d8fda04dfd44072f9009ddad649e61e740d7d7b98eb518b3bbfb42438f1c4bc79e9389108d22bcb94f0d90fa08d5196870462aaca00498c01d37a4a137a6ebd6e4e118915f4cbae87b172ddaaa273cad19ded428ea74bf4efba6fc0e87883960d8b7fcc85091c3fe845b24c33a9cce361ac605f283a40db9b0ecc0306872efe3d76f5e607e87a20ca274a1d07b1d4ff6d4701f7d25d0a2360ddf3b48024e553188b07c89d4e661a3413246ec7fe2a860b23a471e248274da00c88b721860b204c3ed26076fa586f748446a94763d7b378e240ff1a7e0140c4c0cc5a8d8f2b43ba4915a02e28ca90c2c7c3d13ebad09c108591939978a8af9ba9d9b7a12f76e7b9ee78b666020c33e2d45c3e2f224c96a1021c48a64df5e5b90fa6207fc78c14fc515fa0a659f678a21c333743491b9922e8d9b1fec81e972fb3205c315defcaeda63d4cc4be8c30139c558ef40ba1153a86fb2d523191f4bb542dc09818fd0ec06600ff7774ef6a6aaf0971440cde16216a4e6e9ce867323958efd6f03cbff6880068d5f85e188c2affd4c79f9c531b4daab0d28983d2624f337a608994d11e7f3c319abc0d8dd444053b84ae9f821dddf4881bc3ecab45a42c1d4613281131bfd7de49bee4d0557ca3bbbf8a9036d19cb6d62578b4b2b5885bb9ef0a6aedfb2c7d03d06871bde60a001481b2120c6ba8bcf1ad9571eaeec29da7ef298302b71066c588220cb3e1ad24c50bbd4f45d415389451799e900c9676e79f423a6582f0acc0d906368bde7efe1cbc50a6116d112100bc6381ecf84ae07bc3be79d1cad840eea63d153bcfea7c9108c6bdb616a67744698add5c5e0be32fc1f8376abe95049bdaf192a48b05493f040a8e37611c3de1a9dad9001b2a2ec3326318c957ff6a0b4740b8b3fc331258906451c336fafabb32e631ea2a6f9549e8320e49c1695f23c6d745325a13b21125030d6fa2bc5c8ec041f8026d9ea3c623fd22258fa95dc10d14e01c838b567850efe01b72de202706740fc06b5438b6c236b99e645892acde0df2d57cecd278c190ef5a5b323e64e62d72952ec3fdb494a6a76514e6b0858efbfb9c2f01e6fc7fed44090ddac4e8a7d0595a53ee25ebe681b86f9212f7990b5bd20e1490ed102ef329fdee65319bdb471787409f3b48aa3b7bf9cba636d12ed53e22afc00ec1ba8e8f15e25069d4781ee5c4d779c42442384d956ff52f3dba6b97014f3258115ef444ce0bb0b15d3218f7886d9abb69becb969323c26bee87f3c141a2376d56068b8ea1fc40c91bfa1f5f5fe3bf636e89fe441ca0ed38477fe172720dc6b5144de3e3137458647c75f86949edbe4172b93e001c2018bd4bf64521626d0c98151a30db4856f9e7cc5df58c2255ec7b3d788dafd6a38346f62f649c9beb6b38f0565e99d4dc0f09652661e05524b05732f266620dc98773c920f3ab56d933ff82533438c543196ecc596b9741305b2f3d1f97fe75c8e5b90ea79ca0aec707a9e56676b88a0c58e91d11c00e8796705acc2a89e1151a6b7912045d050d9150b3cd0abc47d7a27897d476a0c01cf53d77fdeb3d8146365915f20684d2c7620c3ecfe1818e21baa89970b7490b93a7c619f7639959c7beb8818a6378a4c6075bb767ba54dcf3b454c3285219d0c99c92a32114805d498a3d2f7f491f5b1f4a50506c3537a45ab3283191c24d4dc07de0e6871c755e91b888e44f7e18acf45f26fd458d377571385e0a6716df454c9c8bdfca78230a2337b1053f0d16a9785568351ba1ca50d6c19e3e79ec614ec6fb80b5213254a86b4e2b32c03c7b943a78d6c17c460fc614ba2616440b28f618e58cfa137f8569c86e90da7be139882adc96c3801d0fa37153e90cbf82a76d0c030fbe7c2c20052cd29ef5c72b14957b7468e91c5d19e43c5758c06f3f76f223c19f055863b2216cce630e26c0723cff2edc39e7db3f369f20fb31cdc25fdf26b597e8154199e11034a231a4cc8957203484e648ea9d87483ce0546cd17b0fe56542a451a3365ea899eb25f1fd804c8089ab646dafa3964f99f411a79e2ed422990e8492a472dd045fd255ec0d595e8cf2d5f2457b51335a5279d6265865a10a8f0a80ac1113ca9933a43c925ae810f773f9e1e65606d4f66400cd0f4e6c668d27b8d6bf09e5d701b409d5ae6b5ed34c8db0a4f30525781cb3a2a7b8c895c581f8ba597aba461be63d77621c893c8b63257d9214544acdc0b2565d38716d5bde0747d43c0dbcd646f49aef3c142f3358773c0014cab5f4e12bebf42c290b79ca3bdbabeb72cf17bdc3db11f162eacdcb57b111689cac7774763d2f578257b37d4a4e09598fd9a50f74da09d96a630ea62e6f7d5e8c0a23fd791dcf5364db10ed908f4100d2dbb2a1a3b60258b9d6789136290fbf0deb0df12131bfac92cdad31bdf1994f9b30e9dc98bfe6282c60f6463ec7ce6614329487acf9530d2518fcf6431ccd65ded528f202d3f4399efd3ba86636624af0fe077efe06cc9eac3bb1bd9a272b0666a3406f338370161e998ba0ed78251bf6ae408a29f59ba7fba92f512d7437c16863b730a597e215d1658a14a8e60fe6a22fb7444437de88ebce7927fef5481a475e6e0571c7856a4f2ae5b1463c6375f66e93a7e52314cb9d52e62ed92c5d42796321330c5ebc20a7cd45e2a0fd47e1eb38e3c1d3ea1f2d1a6903a35851d480fdf664e61550a910810a8290141dce2659234b08e881999c70c77f01a5ecdb997e9127068c6ed4ea680a56855679abae1ab70819fa741531cfac0a4a204b7173613f47cc542f58801edfbccc1df7e9748ed1c01ac7ca7db877fb87abde16dd00000542c939ee9e2f868c39318b2955b803561d65e25730d5b4aee290eb0a8805715f96915a23f8ba1ef8bc4b58fe84daaa0ce2ea53552b0e44f2cc14af620ad98ed3a2a06c8fd1a9015a2612272fb9a322abbe19ba8bce4a8b7270192f398210fa6cc8eae880ca2970fcc5fd21e0db9e112c44c2164ec6d3c6a5b80d7a2cfb6d6bdd6057a1cad1701a60af63ef8e1f6267f18fd4e5b40774c66d4f3eacfa680227f72f113945f6985995cc2920ea7638cbcbb7273c72891a7dece889e7e849dbe33f7a4fa3c7bdadbbb41ff64db5f1a65f637252e2809b0de5d1c48250f2552e7d3264dbe51c65882c9d7751fb41b40e1fd8a3cdf98376dae7d25cf71a1741694e33d134f4d193d82b86a1b61b4b65691a33f2cbd6f93202faa779c9b0cc3a2883b5f7c11be4bffaac2d4028b9fac995f08f40b7d319c09b77cc2a6a4cf24e200b93d98b9a397d577f3b38fadc6dd82f0c236b5f99cf9d06b20e40793ef48598784b9dc0fdbec56d37b72ad64f8174830ef1ebc6e1a51f765532ba50244ce74241618b88558664d56d42569585af48f20bbc578a4d4d72dd1949c1cce8174f87c61f22357cd7c9e8ea4071f814acd11a31df4b634917ced266d2cdcb1e68f4bd8739c138eec1dcd84563ae3eb64b6e403a86d76f62b8934b00a1e2f912aaf87b0970a68ea19ea132db2bc4657fa8e43067510438b604397fe12040cfb3dfc2b20474ceb91ea29407e56a626104e84daa9c993cc9b68e6e14afaa8857a2e6e4d3fa414a8f3abbd3aa1d512cc0336c7a54ef9bcff24531267f96a66760743b6e2ac5385ba4d72ba9df7b348838622666ccf1dbaea14607e1f552f6e71701a97de8245eec954e37ff2382eb3fdba294bc88ee95a170283e847a0c2a4815e0d796f5d2a59345eaea6f2e6f117e034eb927815f344bdedd8094a9d82956f6079078c7c5be6cc40a1ee674274f5bf8fca1ca62238428dcb13b12555b5a699121a6cddb870aca33e403414fdf3cdfefabfa0705d9dc0bd787a595a37dfd71186bb1a8da1d9ade893a4428bdbbb005c277321d506c99558c32b91377902a6a616fe7bb0c3786624d8eac9c9315bd5961aa2a089e7dcb9bfb2ba7cd11f4dde44a595ec430da06d8d091643c29c8bf90d60da48d34477c942d0fc5b9c98be1d38dc2988ae7874477b50ebab9431d0e0862b228497e0368f655385df681b1c82ba25fb38fb4f0d3009382e9e00d7bf4bcf2527712981c271ac38e704af9cafcb4f097dccd304ee666cd54d82920a74c430200aa6d8785235d666fab75e6ea897bbb059cd9332538bfd6184ad803e511243363dfbf74fb211df6939715a87277b89aed823a42bdb155168b86985a0c7620a922a629dcdd62c1abe8f389a682898cf42c833c48676554516dec8b02e5c482f6b7a4b3b48675252bd6ad1141f77d7cfde9b6b9e37f9ecec2540c91fdc812128f1e40f1eceb72e9bb555d8f0375d38867ca9ee79fc83ef48accf8700285930caa95c7af0eb7b1764b9924bf4ccbaba8a370f61f96b4edfb45cbb0f884f540475326a6c8e2488b8d2db9382aaa735dcdcc4274da4df2c2221507dc55ebec1439309aad5e1c5e3d9cb721f0fe8fa8044c5fe9474b0cd956a6458f622a584ae7cce85d1231acdc1ee8abfe7b57bfd71ebcb73d6ec532cfe0d83482098ae11b72c1edd16c59db0ec3e9f5edfa303b0adc2825ece1b7e3c3e7c65c3e82baa883b2435b2f9a1b28e85f317d551ff0a474448c0180c9abfc7260b8ac864821e8b7f09cdbad54148b7cb33431e20296533c4cca9a97307c7972e3493f3acd1148815376799fa418dd77a87b8ffd7651fd4821b34425dc1c78e7a5a6ddce969d5e3045b32461c1a4c16bc4168c2052abedfff6bb786c3e91bca9864aa09fc1d26afcd17e2fd59e567c300a7a3dfeef2898af5fb1b73ae1b30068aac90bda55db4057dcbf67e65b0348099ecd4dbcc4fe4ab9d06e929f5ede3823371e2e2b5e1ac74f48da49f4767b92796d83a61b392ba63a1e658f8", 0x1000}}, 0x1006) pipe2$9p(&(0x7f00000001c0), 0x80) 4.87699576s ago: executing program 5 (id=600): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpriority(0x1, 0x0, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.637107749s ago: executing program 3 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000180)='.-!$*\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r6, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000000a00)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/65, 0x41}, {&(0x7f0000000740)=""/132, 0x84}, {&(0x7f0000000800)=""/20, 0x14}], 0x9, &(0x7f0000000900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x1, 0x102, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) 3.897099054s ago: executing program 5 (id=605): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x9, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) ioctl$SIOCGSKNS(r4, 0x894c, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="0f7983ac9a00000f07c744240006000000c7442402707c4f55c7442406000000000f011424660f38812578000000b9160200000f32c4e1e5db390f0bc4e189f83bf20f230926660f388027", 0x4b}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000001c0), 0x71, r9}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000500100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012800b0001006261746164760000040002"], 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r9, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.794730161s ago: executing program 4 (id=606): openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cpuinfo\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 3.616731133s ago: executing program 3 (id=608): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) 3.400934159s ago: executing program 4 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002"], 0x110}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x1) 1.953139367s ago: executing program 4 (id=611): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xc0f, 0x0, 0x8}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r8, &(0x7f0000000100), 0xfef0) splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 1.844978401s ago: executing program 0 (id=612): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r1}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0xfd00, &(0x7f0000000000)={[{@dyn}]}) 1.766659147s ago: executing program 2 (id=613): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x5, r0, &(0x7f00000000c0)=0x9ba4, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000100)={{&(0x7f000000e000/0x2000)=nil, 0x2000}}) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r4, 0x1, 0x100000000, 0x10000) 1.651588056s ago: executing program 0 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd700002e47c1f0200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990008000000740000000800a0009e090000080026008009000008009f"], 0x40}}, 0x20000000) fallocate(r1, 0x0, 0x0, 0x200401) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0xffe0, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x4, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048850) 1.400794161s ago: executing program 5 (id=615): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x2000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup3(r0, r3, 0x0) r5 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x1b, 0x2}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xf, 0x5, 0x7f}, {0x9, 0x5, 0xf, 0x3, 0x3ff, 0x8, 0x8, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x24, 0x67, {0x67, 0x22, "544779ac3a07b22a96b68603620bea8f6c77172d656b91dd38b0e9a207fbdba158fe0318ad587762399de05db34162938d692401b6b2eb5f246202f14f55b8f64ead6b86e533f3dd631fa3e11e98da7e59623283831ba41b2547c77e00cc469ca9de301b4a"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000240)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0xb4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xd, 0x5, 0x8, 0x5}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa2, 0x4, 0x3, 0x2, "ba82edee", 'cE?C'}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x61, 0x0, 0x3, 0x1, 0x5, 0x857, 0x1000}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x9, 0x11, "defbace0136d51bfa3f905ec74a835651c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x60, 0x4, [0xf0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "b32d"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x31bd}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f88f"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xe2d}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xb0}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x9}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYBLOB="01000200000000000000e4000000000000000066e4d0188e27ee542cc47a2eb94931370b95c84f35a216d73934dc7301cfdd687f1905137bf0fbafb202e6427e5295e738cce58c1cd1caddf3a21214e6cb0af6a53947cb4c75a28fc6021b38a05ac8c041e42a1119b20a623ceefd3fcd332bba9677f0528d8de9abd25100836ce3381671b4c9"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180800defe010000000be00c0000000000006ed24adc93f606000000da3758b7a145418d09c4afe12b4633d1fa9ecc49365edc1fcc01d1f4701979cb7006fed749814a5de64e5d980f7680fc910700b00fa843a60cff9e", @ANYRES32, @ANYBLOB="0000000000000000790000000000000018000000000000110000000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) 1.367101569s ago: executing program 2 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) close(0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000600)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000000640)=""/41, 0x29}], 0x3, &(0x7f00000005c0)=""/48, 0x30}, 0x8000009}], 0x1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x6, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x3, 0x2, 0x2, 0x4}}, 0x26) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 907.511776ms ago: executing program 3 (id=617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndpcmp(0x0, 0x0, 0x501080) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0xd9, 0x4) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r6], 0x80}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0x7, &(0x7f00000017c0)={0x1, 0xbab}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0xfffffffffffffed3}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 751.612018ms ago: executing program 0 (id=618): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1f, 0x0, 0x300) 701.756561ms ago: executing program 0 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 491.469228ms ago: executing program 0 (id=620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc28"], 0xdd12}], 0x1}, 0x20048821) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 385.285428ms ago: executing program 2 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r0, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000100)="f2"}, 0x20) process_vm_readv(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4ac401, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r3, r5) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r6, &(0x7f0000000140)="8465000000000000", 0x5ac) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, r4, &(0x7f0000000440)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x2000, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)) readv(r8, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 353.548507ms ago: executing program 0 (id=622): fspick(0xffffffffffffff9c, 0x0, 0xf) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (fail_nth: 5) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xff0ebbe2d3aab80e) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864d0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRESDEC=r7], 0x2c}}, 0x0) 293.865893ms ago: executing program 2 (id=623): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) prctl$PR_MCE_KILL_GET(0x22) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x2c41, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/crypto\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/55, 0x37, 0x2a0005c1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) 221.478397ms ago: executing program 3 (id=624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 168.157143ms ago: executing program 2 (id=625): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1f, 0x0, 0x0) 87.65387ms ago: executing program 2 (id=626): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b215f4404c05c10687be000000010902240001000000000904f900027c0d180009050802000001083b09051d5695a7037c3e3e866f0f2123bceb33b44cf25fe5c42ab7446da7e1d4769e3269fed09dc334f5d834a6333bdae8599297d848c67f28fa45d06c86be86380b06a2f879417b2a99a044a307ee17ebfe5f0473c9808b789601eafd1f39c10158d3f1cbd720ee672b52fc89f4d2e820c93977ea8e7d69a29f97c38973bbfe8a3d49ac3b42705ae452cefec132d56728c8417fa02fcd"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1f, 0x0, 0x0) 0s ago: executing program 4 (id=627): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r12, {0x6, 0xfff2}, {0xa, 0xffff}, {0xfff2, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x24008851) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) gettid() kernel console output (not intermixed with test programs): lbacks suppressed [ 145.300678][ T30] audit: type=1400 audit(1767847886.594:409): avc: denied { write } for pid=6917 comm="syz.4.276" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 145.310434][ T30] audit: type=1400 audit(1767847886.604:410): avc: denied { open } for pid=6917 comm="syz.4.276" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 146.823397][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52550 sclass=netlink_route_socket pid=6932 comm=syz.4.280 [ 147.245659][ T6933] syzkaller1: entered promiscuous mode [ 147.245686][ T6933] syzkaller1: entered allmulticast mode [ 147.756648][ T30] audit: type=1400 audit(1767847889.044:411): avc: denied { mount } for pid=6934 comm="syz.3.281" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.757111][ T6935] VFS: Mount too revealing [ 147.946300][ T30] audit: type=1400 audit(1767847889.234:412): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.946354][ T30] audit: type=1400 audit(1767847889.234:413): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.946395][ T30] audit: type=1400 audit(1767847889.234:414): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.990709][ T30] audit: type=1400 audit(1767847889.284:415): avc: denied { read write } for pid=6947 comm="syz.2.285" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.990917][ T30] audit: type=1400 audit(1767847889.284:416): avc: denied { open } for pid=6947 comm="syz.2.285" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.996749][ T30] audit: type=1400 audit(1767847889.284:417): avc: denied { ioctl } for pid=6947 comm="syz.2.285" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.048769][ T30] audit: type=1400 audit(1767847889.344:418): avc: denied { create } for pid=6949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.060942][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.062867][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.063321][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.064036][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.064883][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.248167][ T5995] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 148.464272][ T5995] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 148.464293][ T5995] usb 3-1: config 0 has no interface number 0 [ 148.472235][ T5995] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 148.472256][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.472268][ T5995] usb 3-1: Product: syz [ 148.472277][ T5995] usb 3-1: Manufacturer: syz [ 148.472287][ T5995] usb 3-1: SerialNumber: syz [ 148.474451][ T5995] usb 3-1: config 0 descriptor?? [ 148.552514][ T6954] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 148.592788][ T6954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.788317][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 148.878620][ T6954] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 148.902863][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 149.423473][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.481469][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.508654][ T6949] bridge_slave_0: entered allmulticast mode [ 149.546490][ T6949] bridge_slave_0: entered promiscuous mode [ 149.734376][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.742393][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.754337][ T6949] bridge_slave_1: entered allmulticast mode [ 149.769705][ T6949] bridge_slave_1: entered promiscuous mode [ 149.921113][ T5995] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 209 [ 150.178206][ T5138] Bluetooth: hci5: command tx timeout [ 150.241308][ T6852] usb 3-1: USB disconnect, device number 8 [ 150.291410][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.338499][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.386378][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 150.386391][ T30] audit: type=1400 audit(1767847891.674:448): avc: denied { read } for pid=6972 comm="syz.3.291" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.506131][ T30] audit: type=1400 audit(1767847891.754:449): avc: denied { open } for pid=6972 comm="syz.3.291" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.639100][ T30] audit: type=1400 audit(1767847891.764:450): avc: denied { create } for pid=6972 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 150.745886][ T6980] QAT: failed to copy from user. [ 150.784405][ T30] audit: type=1400 audit(1767847892.024:451): avc: denied { create } for pid=6977 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.993822][ T30] audit: type=1400 audit(1767847892.024:452): avc: denied { write } for pid=6977 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.176570][ T6949] team0: Port device team_slave_0 added [ 151.207314][ T6949] team0: Port device team_slave_1 added [ 151.256033][ T30] audit: type=1400 audit(1767847892.544:453): avc: denied { unmount } for pid=6985 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.303248][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.497218][ T30] audit: type=1400 audit(1767847892.604:454): avc: denied { create } for pid=6985 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.516703][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.013086][ T30] audit: type=1400 audit(1767847892.664:455): avc: denied { map } for pid=6984 comm="syz.0.287" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.037664][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.084805][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.098487][ T30] audit: type=1400 audit(1767847892.664:456): avc: denied { read write } for pid=6984 comm="syz.0.287" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.218139][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.248251][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.258870][ T5138] Bluetooth: hci5: command tx timeout [ 152.438208][ T30] audit: type=1400 audit(1767847893.634:457): avc: denied { write } for pid=6993 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.861508][ T6886] hid_parser_main: 13 callbacks suppressed [ 152.861523][ T6886] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 152.889155][ T6886] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.201450][ T6949] hsr_slave_0: entered promiscuous mode [ 153.210768][ T6949] hsr_slave_1: entered promiscuous mode [ 153.234669][ T6949] debugfs: 'hsr0' already exists in 'hsr' [ 153.267097][ T6949] Cannot create hsr debugfs directory [ 154.201200][ T7012] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 154.218300][ T7012] netlink: 244 bytes leftover after parsing attributes in process `syz.2.300'. [ 154.348790][ T5138] Bluetooth: hci5: command tx timeout [ 154.754861][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.984797][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.146322][ T7028] binder: 7027:7028 ioctl c0189378 200000000180 returned -22 [ 155.164504][ T7028] binder: 7027:7028 ioctl c01064c2 200000000200 returned -22 [ 155.268443][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 155.346594][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.684340][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 155.684358][ T30] audit: type=1400 audit(1767847896.974:494): avc: denied { create } for pid=7036 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.720151][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.734321][ T30] audit: type=1400 audit(1767847897.004:495): avc: denied { map_create } for pid=7036 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.775372][ T30] audit: type=1400 audit(1767847897.014:496): avc: denied { map_read map_write } for pid=7036 comm="syz.4.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.810753][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.815398][ T6949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.820128][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.841532][ T6949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.853262][ T30] audit: type=1400 audit(1767847897.014:497): avc: denied { write } for pid=7032 comm="syz.2.307" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.887266][ T6949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.890317][ T30] audit: type=1400 audit(1767847897.184:498): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 155.929930][ T6949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.969143][ T30] audit: type=1400 audit(1767847897.264:499): avc: denied { ioctl } for pid=7042 comm="syz.2.310" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 156.001893][ T30] audit: type=1400 audit(1767847897.264:500): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 156.058241][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 156.095699][ T30] audit: type=1400 audit(1767847897.384:501): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 156.679176][ T5138] Bluetooth: hci5: command tx timeout [ 156.685958][ T30] audit: type=1400 audit(1767847897.614:502): avc: denied { execute } for pid=7042 comm="syz.2.310" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.710049][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.733776][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.748245][ T30] audit: type=1400 audit(1767847897.624:503): avc: denied { execute_no_trans } for pid=7042 comm="syz.2.310" path="/65/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.765882][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 156.792947][ T79] bridge_slave_1: left allmulticast mode [ 156.802800][ T79] bridge_slave_1: left promiscuous mode [ 156.802805][ T10] usb 5-1: config 1 interface 1 has no altsetting 1 [ 156.804509][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.844157][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.858244][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.929626][ T79] bridge_slave_0: left allmulticast mode [ 156.935741][ T79] bridge_slave_0: left promiscuous mode [ 156.944593][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.979416][ T10] usb 5-1: Product: syz [ 156.983647][ T10] usb 5-1: Manufacturer: syz [ 156.993176][ T10] usb 5-1: SerialNumber: syz [ 157.493219][ T7064] fuse: Unknown parameter '0x000000000000000c' [ 158.878193][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.922825][ T10] usb 5-1: selecting invalid altsetting 1 [ 159.018876][ T10] cdc_ncm 5-1:1.0: bind() failure [ 159.037945][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 159.055623][ T10] cdc_ncm 5-1:1.1: bind() failure [ 159.098115][ T10] usb 5-1: USB disconnect, device number 8 [ 159.215667][ T7076] random: crng reseeded on system resumption [ 159.354519][ T7076] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.860341][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.966655][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.976450][ T79] bond0 (unregistering): Released all slaves [ 159.994821][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.002673][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.010695][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.020021][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.113322][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.150316][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.158008][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.182161][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.192113][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.208270][ T7055] netlink: 'syz.3.311': attribute type 3 has an invalid length. [ 160.219795][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.246592][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.259856][ T7076] @0Ù: renamed from bond_slave_1 (while UP) [ 160.323695][ T7090] FAULT_INJECTION: forcing a failure. [ 160.323695][ T7090] name failslab, interval 1, probability 0, space 0, times 1 [ 160.373433][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.3.321 Not tainted syzkaller #0 PREEMPT(full) [ 160.373458][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.373465][ T7090] Call Trace: [ 160.373469][ T7090] [ 160.373474][ T7090] dump_stack_lvl+0x16c/0x1f0 [ 160.373494][ T7090] should_fail_ex+0x512/0x640 [ 160.373513][ T7090] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 160.373524][ T7090] should_failslab+0xc2/0x120 [ 160.373542][ T7090] kmem_cache_alloc_noprof+0x83/0x770 [ 160.373554][ T7090] ? skb_clone+0x190/0x3f0 [ 160.373569][ T7090] ? skb_clone+0x190/0x3f0 [ 160.373579][ T7090] skb_clone+0x190/0x3f0 [ 160.373590][ T7090] netlink_deliver_tap+0xabd/0xd30 [ 160.373607][ T7090] netlink_unicast+0x64c/0x870 [ 160.373622][ T7090] ? __pfx_netlink_unicast+0x10/0x10 [ 160.373641][ T7090] netlink_sendmsg+0x8c8/0xdd0 [ 160.373663][ T7090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.373682][ T7090] ____sys_sendmsg+0xa5d/0xc30 [ 160.373697][ T7090] ? copy_msghdr_from_user+0x10a/0x160 [ 160.373708][ T7090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.373728][ T7090] ___sys_sendmsg+0x134/0x1d0 [ 160.373740][ T7090] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.373767][ T7090] __sys_sendmsg+0x16d/0x220 [ 160.373778][ T7090] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.373798][ T7090] do_syscall_64+0xcd/0xf80 [ 160.373814][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.373827][ T7090] RIP: 0033:0x7f67a998f749 [ 160.373836][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.373846][ T7090] RSP: 002b:00007f67aa7e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.373858][ T7090] RAX: ffffffffffffffda RBX: 00007f67a9be5fa0 RCX: 00007f67a998f749 [ 160.373865][ T7090] RDX: 0000000000048040 RSI: 0000200000007580 RDI: 0000000000000003 [ 160.373871][ T7090] RBP: 00007f67aa7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 160.373877][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.373883][ T7090] R13: 00007f67a9be6038 R14: 00007f67a9be5fa0 R15: 00007ffd2d4aa858 [ 160.373897][ T7090] [ 160.487876][ T7094] tmpfs: Unknown parameter 'grpquota"ÈYFü)_inode_hardlimit' [ 160.699856][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 160.699873][ T30] audit: type=1400 audit(1767847901.994:528): avc: denied { create } for pid=7091 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.746249][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.842960][ T30] audit: type=1400 audit(1767847902.134:529): avc: denied { read open } for pid=7104 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.949816][ T30] audit: type=1400 audit(1767847902.164:530): avc: denied { getattr } for pid=7104 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.667756][ T79] hsr_slave_0: left promiscuous mode [ 161.728548][ T79] hsr_slave_1: left promiscuous mode [ 161.805527][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.917474][ T7117] fuse: Unknown parameter 'roo' [ 162.314545][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.373899][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.390148][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.430677][ T30] audit: type=1400 audit(1767847903.724:531): avc: denied { ioctl } for pid=7119 comm="syz.0.327" path="pid:[4026532792]" dev="nsfs" ino=4026532792 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 162.520870][ T79] veth1_macvtap: left promiscuous mode [ 162.526804][ T79] veth0_macvtap: left promiscuous mode [ 162.538509][ T30] audit: type=1400 audit(1767847903.744:532): avc: denied { write } for pid=7119 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.569592][ T79] veth1_vlan: left promiscuous mode [ 162.585426][ T79] veth0_vlan: left promiscuous mode [ 162.725313][ T30] audit: type=1400 audit(1767847904.014:533): avc: denied { add_name } for pid=7103 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.798784][ T30] audit: type=1400 audit(1767847904.014:534): avc: denied { create } for pid=7103 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.865768][ T30] audit: type=1400 audit(1767847904.014:535): avc: denied { write } for pid=7103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.933239][ T30] audit: type=1400 audit(1767847904.014:536): avc: denied { append } for pid=7103 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.969116][ T5934] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.075701][ T30] audit: type=1400 audit(1767847904.364:537): avc: denied { remove_name } for pid=7134 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.118139][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 163.131699][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.148388][ T5934] usb 4-1: config 0 has no interface number 0 [ 163.165853][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.208331][ T5934] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.227670][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.290532][ T5934] usb 4-1: config 0 descriptor?? [ 163.313007][ T5934] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 165.196687][ T79] team0 (unregistering): Port device team_slave_1 removed [ 165.261871][ T79] team0 (unregistering): Port device team_slave_0 removed [ 165.692351][ T973] usb 4-1: USB disconnect, device number 9 [ 165.702377][ T7156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.744652][ T7156] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 165.807151][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 165.807176][ T30] audit: type=1400 audit(1767847907.094:543): avc: denied { create } for pid=7160 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.875010][ T7156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.881140][ T7156] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 165.925266][ T7156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.937902][ T7156] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 165.981558][ T7156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.045673][ T7156] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 166.084492][ T7156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 166.091978][ T7156] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 166.330264][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.373274][ T30] audit: type=1400 audit(1767847907.664:544): avc: denied { relabelfrom } for pid=7165 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 166.398621][ T1923] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.405865][ T1923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.418389][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.438248][ T30] audit: type=1400 audit(1767847907.684:545): avc: denied { relabelto } for pid=7165 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 166.457928][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.458076][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.492385][ T7166] syzkaller0: entered promiscuous mode [ 166.497913][ T7166] syzkaller0: entered allmulticast mode [ 166.541765][ T7166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7166 comm=syz.0.338 [ 166.580346][ T7166] validate_nla: 43 callbacks suppressed [ 166.580364][ T7166] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 166.602502][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 166.619494][ T10] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 166.633053][ T10] usb 5-1: Product: syz [ 166.638731][ T10] usb 5-1: Manufacturer: syz [ 166.745115][ T10] usb 5-1: SerialNumber: syz [ 166.769442][ T10] usb 5-1: config 0 descriptor?? [ 166.810279][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 166.830858][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.905640][ T30] audit: type=1400 audit(1767847908.194:546): avc: denied { sys_module } for pid=6949 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.922467][ T7168] bond1: (slave bridge1): making interface the new active one [ 166.942804][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.051772][ T7168] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 167.140429][ T7176] veth0_to_team: entered promiscuous mode [ 167.182844][ T10] usb 5-1: failed to receive control message: -71 [ 167.200724][ T10] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 167.247356][ T7186] use of bytesused == 0 is deprecated and will be removed in the future, [ 167.276718][ T10] usb 5-1: USB disconnect, device number 9 [ 167.278159][ T7186] use the actual size instead. [ 167.317066][ T10] ch341 5-1:0.0: device disconnected [ 167.383122][ T30] audit: type=1400 audit(1767847908.674:547): avc: denied { write } for pid=7185 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.404290][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.815084][ T7206] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 168.091280][ T30] audit: type=1400 audit(1767847909.374:548): avc: denied { write } for pid=7205 comm="syz.4.343" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.988895][ T30] audit: type=1400 audit(1767847909.374:549): avc: denied { map } for pid=7205 comm="syz.4.343" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.656221][ T6949] veth0_vlan: entered promiscuous mode [ 169.687692][ T6949] veth1_vlan: entered promiscuous mode [ 169.748623][ T6852] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 169.778928][ T6949] veth0_macvtap: entered promiscuous mode [ 169.791852][ T6949] veth1_macvtap: entered promiscuous mode [ 169.811431][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.827486][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.841946][ T985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.853943][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.044173][ T6852] usb 4-1: device descriptor read/64, error -71 [ 170.050329][ T985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.071853][ T5875] usb 3-1: config 2 has an invalid interface number: 46 but max is 0 [ 170.080910][ T5875] usb 3-1: config 2 has no interface number 0 [ 170.105968][ T5875] usb 3-1: config 2 interface 46 altsetting 69 has an invalid descriptor for endpoint zero, skipping [ 170.117695][ T5875] usb 3-1: config 2 interface 46 altsetting 69 has a duplicate endpoint with address 0xF, skipping [ 170.129910][ T5875] usb 3-1: config 2 interface 46 altsetting 69 bulk endpoint 0xD has invalid maxpacket 16 [ 170.140079][ T5875] usb 3-1: config 2 interface 46 altsetting 69 endpoint 0x8 has invalid wMaxPacketSize 0 [ 170.144645][ T985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.150160][ T5875] usb 3-1: config 2 interface 46 has no altsetting 0 [ 170.160969][ T5875] usb 3-1: New USB device found, idVendor=04cb, idProduct=0129, bcdDevice=ae.7f [ 170.190739][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.204200][ T5875] usb 3-1: Product: syz [ 170.205024][ T985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.208912][ T5875] usb 3-1: Manufacturer: syz [ 170.222034][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.230064][ T30] audit: type=1400 audit(1767847911.504:550): avc: denied { accept } for pid=7230 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.248262][ T5875] usb 3-1: SerialNumber: syz [ 170.255690][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.282954][ T30] audit: type=1400 audit(1767847911.504:551): avc: denied { write } for pid=7230 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.288991][ T7221] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 170.309403][ T6852] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 170.318498][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.336626][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.342788][ T30] audit: type=1400 audit(1767847911.514:552): avc: denied { read } for pid=7230 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.405566][ T4028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.455482][ T4028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.463379][ T6852] usb 4-1: device descriptor read/64, error -71 [ 170.481260][ T7237] fuse: Unknown parameter 'user_id00000000000000000000' [ 170.570457][ T7240] mkiss: ax0: crc mode is auto. [ 170.599802][ T6852] usb usb4-port1: attempt power cycle [ 170.846241][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 170.846258][ T30] audit: type=1400 audit(1767847912.134:557): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/root/syzkaller.0wWkxh/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 170.892232][ T5875] gspca_main: finepix-2.14.0 probing 04cb:0129 [ 170.926294][ T30] audit: type=1400 audit(1767847912.134:558): avc: denied { mount } for pid=6949 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.967340][ T30] audit: type=1400 audit(1767847912.174:559): avc: denied { mount } for pid=6949 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 170.978310][ T6852] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 171.016044][ T5875] usb 3-1: USB disconnect, device number 9 [ 171.041554][ T30] audit: type=1400 audit(1767847912.174:560): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/root/syzkaller.0wWkxh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 171.068781][ T6852] usb 4-1: device descriptor read/8, error -71 [ 171.147785][ T30] audit: type=1400 audit(1767847912.174:561): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/root/syzkaller.0wWkxh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 171.190012][ T7247] VFS: Mount too revealing [ 171.252778][ T30] audit: type=1400 audit(1767847912.194:562): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 171.282109][ T7255] netlink: 208 bytes leftover after parsing attributes in process `syz.4.351'. [ 171.308254][ T6852] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 171.347793][ T30] audit: type=1400 audit(1767847912.194:563): avc: denied { mount } for pid=6949 comm="syz-executor" name="/" dev="gadgetfs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 171.349228][ T6852] usb 4-1: device descriptor read/8, error -71 [ 171.391579][ T30] audit: type=1400 audit(1767847912.194:564): avc: denied { mount } for pid=6949 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 171.416373][ T30] audit: type=1400 audit(1767847912.194:565): avc: denied { mounton } for pid=6949 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 171.443992][ T30] audit: type=1400 audit(1767847912.384:566): avc: denied { create } for pid=7246 comm="syz.5.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 171.549979][ T6852] usb usb4-port1: unable to enumerate USB device [ 171.767219][ T7273] bond1: option arp_interval: invalid value (18446744073709551615) [ 171.778334][ T5852] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.780884][ T7273] bond1: option arp_interval: allowed values 0 - 2147483647 [ 171.798548][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.812639][ T7273] bond1 (unregistering): Released all slaves [ 171.941085][ T5852] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 171.968435][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 171.975257][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.992512][ T10] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 172.023935][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.038186][ T5852] usb 6-1: config 0 descriptor?? [ 172.055612][ T5852] cp210x 6-1:0.0: cp210x converter detected [ 172.063525][ T10] usb 5-1: Product: syz [ 172.077981][ T10] usb 5-1: Manufacturer: syz [ 172.105794][ T10] usb 5-1: SerialNumber: syz [ 172.127238][ T10] usb 5-1: config 0 descriptor?? [ 172.338316][ T6852] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 172.475673][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 172.569869][ T10] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 010 [ 172.623871][ T6852] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 172.678124][ T6852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.703446][ T6852] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.729667][ T6852] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.737886][ T6852] usb 3-1: Product: syz [ 172.762696][ T6852] usb 3-1: Manufacturer: syz [ 172.767351][ T6852] usb 3-1: SerialNumber: syz [ 172.788761][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 172.805460][ T6852] usb 3-1: config 0 descriptor?? [ 172.844088][ T6852] usb 3-1: selecting invalid altsetting 0 [ 172.930031][ T5852] usb 6-1: cp210x converter now attached to ttyUSB1 [ 172.967109][ T5852] usb 6-1: USB disconnect, device number 2 [ 173.021760][ T7303] FAULT_INJECTION: forcing a failure. [ 173.021760][ T7303] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.036596][ T5852] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 173.078594][ T5852] cp210x 6-1:0.0: device disconnected [ 173.120348][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.0.360 Not tainted syzkaller #0 PREEMPT(full) [ 173.120374][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.120385][ T7303] Call Trace: [ 173.120392][ T7303] [ 173.120399][ T7303] dump_stack_lvl+0x16c/0x1f0 [ 173.120430][ T7303] should_fail_ex+0x512/0x640 [ 173.120462][ T7303] _copy_from_user+0x2e/0xd0 [ 173.120490][ T7303] copy_msghdr_from_user+0x98/0x160 [ 173.120510][ T7303] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.120542][ T7303] ___sys_sendmsg+0xfe/0x1d0 [ 173.120563][ T7303] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.120613][ T7303] __sys_sendmsg+0x16d/0x220 [ 173.120634][ T7303] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.120669][ T7303] do_syscall_64+0xcd/0xf80 [ 173.120694][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.120713][ T7303] RIP: 0033:0x7fa8d218f749 [ 173.120727][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.120744][ T7303] RSP: 002b:00007fa8d2f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.120764][ T7303] RAX: ffffffffffffffda RBX: 00007fa8d23e5fa0 RCX: 00007fa8d218f749 [ 173.120776][ T7303] RDX: 0000000020000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.120788][ T7303] RBP: 00007fa8d2f75090 R08: 0000000000000000 R09: 0000000000000000 [ 173.120799][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.120809][ T7303] R13: 00007fa8d23e6038 R14: 00007fa8d23e5fa0 R15: 00007fff91ab19b8 [ 173.120835][ T7303] [ 174.242510][ T7319] VFS: Mount too revealing [ 174.255330][ T7322] netlink: 'syz.5.363': attribute type 6 has an invalid length. [ 174.393209][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.463244][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.677011][ T5852] usb 5-1: USB disconnect, device number 10 [ 174.794520][ T7335] syzkaller1: entered promiscuous mode [ 174.818690][ T7335] syzkaller1: entered allmulticast mode [ 174.838532][ T5903] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.885515][ T7341] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 174.988190][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 174.999222][ T5903] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 175.007415][ T5903] usb 4-1: config 0 has no interface number 0 [ 175.028386][ T5903] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 175.117720][ T6852] usb 3-1: USB disconnect, device number 10 [ 175.138418][ T5903] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 175.179907][ T5903] usb 4-1: config 0 interface 126 has no altsetting 0 [ 175.249315][ T5903] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 175.275963][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.306209][ T5903] usb 4-1: Product: syz [ 175.346799][ T5903] usb 4-1: Manufacturer: syz [ 175.393673][ T5903] usb 4-1: SerialNumber: syz [ 175.489043][ T5903] usb 4-1: config 0 descriptor?? [ 175.517306][ T7337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.556151][ T7350] netlink: 156 bytes leftover after parsing attributes in process `syz.4.373'. [ 175.565812][ T7350] openvswitch: netlink: Missing key (keys=40, expected=100) [ 175.591237][ T7337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 176.017457][ T7358] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 176.096227][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 176.096243][ T30] audit: type=1400 audit(1767847917.384:599): avc: denied { bind } for pid=7343 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.204175][ T6852] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.246050][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 176.293560][ T30] audit: type=1400 audit(1767847917.414:600): avc: denied { name_bind } for pid=7343 comm="syz.5.371" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 176.359254][ T30] audit: type=1400 audit(1767847917.414:601): avc: denied { node_bind } for pid=7343 comm="syz.5.371" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 176.423544][ T7360] geneve2: entered promiscuous mode [ 176.429149][ T5903] ir_usb 4-1:0.126: IR Dongle converter detected [ 176.430362][ T6852] usb 3-1: Using ep0 maxpacket: 16 [ 176.442385][ T7360] geneve2: entered allmulticast mode [ 176.654537][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 176.662442][ T6852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.676428][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 176.684760][ T6852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.695234][ T30] audit: type=1400 audit(1767847917.734:602): avc: denied { lock } for pid=7361 comm="syz.4.377" path="socket:[15388]" dev="sockfs" ino=15388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.696709][ T6852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.729069][ T6852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 176.738798][ T6852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.758216][ T6852] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.767346][ T6852] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.808643][ T30] audit: type=1400 audit(1767847917.734:603): avc: denied { getopt } for pid=7361 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.838199][ T6852] usb 3-1: Manufacturer: syz [ 176.845965][ T6852] usb 3-1: config 0 descriptor?? [ 176.858355][ T30] audit: type=1400 audit(1767847917.744:604): avc: denied { read } for pid=7361 comm="syz.4.377" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 176.929184][ T7369] VFS: Mount too revealing [ 177.014152][ T7375] FAULT_INJECTION: forcing a failure. [ 177.014152][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.029454][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.0.380 Not tainted syzkaller #0 PREEMPT(full) [ 177.029482][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.029493][ T7375] Call Trace: [ 177.029499][ T7375] [ 177.029505][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 177.029534][ T7375] should_fail_ex+0x512/0x640 [ 177.029565][ T7375] _copy_to_user+0x32/0xd0 [ 177.029592][ T7375] simple_read_from_buffer+0xcb/0x170 [ 177.029619][ T7375] proc_fail_nth_read+0x197/0x240 [ 177.029639][ T7375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.029660][ T7375] ? rw_verify_area+0xcf/0x6c0 [ 177.029678][ T7375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.029696][ T7375] vfs_read+0x1e4/0xcf0 [ 177.029719][ T7375] ? __pfx___mutex_lock+0x10/0x10 [ 177.029746][ T7375] ? __pfx_vfs_read+0x10/0x10 [ 177.029773][ T7375] ? __fget_files+0x20e/0x3c0 [ 177.029803][ T7375] ksys_read+0x12a/0x250 [ 177.029823][ T7375] ? __pfx_ksys_read+0x10/0x10 [ 177.029851][ T7375] do_syscall_64+0xcd/0xf80 [ 177.029874][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.029892][ T7375] RIP: 0033:0x7fa8d218e15c [ 177.029908][ T7375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.029924][ T7375] RSP: 002b:00007fa8d2f54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.029941][ T7375] RAX: ffffffffffffffda RBX: 00007fa8d23e6090 RCX: 00007fa8d218e15c [ 177.029953][ T7375] RDX: 000000000000000f RSI: 00007fa8d2f540a0 RDI: 0000000000000004 [ 177.029964][ T7375] RBP: 00007fa8d2f54090 R08: 0000000000000000 R09: 0000000000000000 [ 177.029975][ T7375] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 177.029993][ T7375] R13: 00007fa8d23e6128 R14: 00007fa8d23e6090 R15: 00007fff91ab19b8 [ 177.030016][ T7375] [ 177.269110][ T5903] usb 4-1: IR Dongle converter now attached to ttyUSB1 [ 177.438175][ T6852] rc_core: IR keymap rc-hauppauge not found [ 177.455901][ T6852] Registered IR keymap rc-empty [ 177.473949][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.492201][ T5852] usb 4-1: USB disconnect, device number 14 [ 177.498205][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.506726][ T5852] ir-usb ttyUSB1: IR Dongle converter now disconnected from ttyUSB1 [ 177.515327][ T5852] ir_usb 4-1:0.126: device disconnected [ 177.520881][ T6852] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 177.522630][ T6852] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 177.564385][ T30] audit: type=1400 audit(1767847918.854:605): avc: denied { remount } for pid=7383 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.605757][ T30] audit: type=1400 audit(1767847918.854:606): avc: denied { bind } for pid=7383 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.625187][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.641566][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.668365][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.675928][ T30] audit: type=1400 audit(1767847918.854:607): avc: denied { name_bind } for pid=7383 comm="syz.4.382" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 177.708593][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.728494][ T30] audit: type=1400 audit(1767847918.854:608): avc: denied { node_bind } for pid=7383 comm="syz.4.382" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 177.728540][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.779382][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.810960][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.838217][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.859729][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.888264][ T6852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 177.911979][ T6852] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 177.923686][ T6852] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.950707][ T6852] usb 3-1: USB disconnect, device number 11 [ 178.151961][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 178.586454][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.616777][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.658342][ T5138] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 178.843387][ T7414] veth0_to_team: entered promiscuous mode [ 179.317679][ T7425] netlink: 1760 bytes leftover after parsing attributes in process `syz.5.394'. [ 179.419308][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.588125][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 179.606490][ T5875] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.638731][ T5875] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.668039][ T5875] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 179.685053][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.693514][ T5875] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 179.704731][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.802811][ T5875] usb 5-1: config 0 descriptor?? [ 179.847551][ T7437] FAULT_INJECTION: forcing a failure. [ 179.847551][ T7437] name failslab, interval 1, probability 0, space 0, times 0 [ 179.928547][ T7437] CPU: 0 UID: 0 PID: 7437 Comm: syz.0.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.928576][ T7437] Tainted: [L]=SOFTLOCKUP [ 179.928581][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.928591][ T7437] Call Trace: [ 179.928597][ T7437] [ 179.928603][ T7437] dump_stack_lvl+0x16c/0x1f0 [ 179.928629][ T7437] should_fail_ex+0x512/0x640 [ 179.928652][ T7437] ? __kmalloc_cache_noprof+0x5f/0x800 [ 179.928680][ T7437] should_failslab+0xc2/0x120 [ 179.928701][ T7437] __kmalloc_cache_noprof+0x80/0x800 [ 179.928725][ T7437] ? kvm_assign_ioeventfd_idx+0xac/0xa80 [ 179.928751][ T7437] ? kvm_assign_ioeventfd_idx+0xac/0xa80 [ 179.928773][ T7437] kvm_assign_ioeventfd_idx+0xac/0xa80 [ 179.928794][ T7437] ? find_held_lock+0x2b/0x80 [ 179.928817][ T7437] ? __might_fault+0xe3/0x190 [ 179.928832][ T7437] ? __might_fault+0x13b/0x190 [ 179.928851][ T7437] kvm_ioeventfd+0x19d/0x340 [ 179.928878][ T7437] kvm_vm_ioctl+0x17de/0x4090 [ 179.928907][ T7437] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 179.928941][ T7437] ? kasan_quarantine_put+0x10a/0x240 [ 179.928960][ T7437] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.928985][ T7437] ? find_held_lock+0x2b/0x80 [ 179.929009][ T7437] ? tomoyo_path_number_perm+0x295/0x580 [ 179.929041][ T7437] ? find_held_lock+0x2b/0x80 [ 179.929071][ T7437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.929093][ T7437] ? do_vfs_ioctl+0x128/0x14f0 [ 179.929114][ T7437] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.929135][ T7437] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.929168][ T7437] ? hook_file_ioctl_common+0x144/0x410 [ 179.929210][ T7437] ? selinux_file_ioctl+0x180/0x270 [ 179.929232][ T7437] ? selinux_file_ioctl+0xb4/0x270 [ 179.929256][ T7437] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 179.929279][ T7437] __x64_sys_ioctl+0x18e/0x210 [ 179.929301][ T7437] do_syscall_64+0xcd/0xf80 [ 179.929327][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.929346][ T7437] RIP: 0033:0x7fa8d218f749 [ 179.929362][ T7437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.929379][ T7437] RSP: 002b:00007fa8d2f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.929398][ T7437] RAX: ffffffffffffffda RBX: 00007fa8d23e5fa0 RCX: 00007fa8d218f749 [ 179.929410][ T7437] RDX: 00002000000000c0 RSI: 000000004040ae79 RDI: 0000000000000004 [ 179.929421][ T7437] RBP: 00007fa8d2f75090 R08: 0000000000000000 R09: 0000000000000000 [ 179.929432][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.929443][ T7437] R13: 00007fa8d23e6038 R14: 00007fa8d23e5fa0 R15: 00007fff91ab19b8 [ 179.929469][ T7437] [ 180.269999][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 180.837591][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.846351][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.209627][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 181.209642][ T30] audit: type=1400 audit(1767847922.504:633): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 181.254896][ T7459] syzkaller1: entered promiscuous mode [ 181.268539][ T7459] syzkaller1: entered allmulticast mode [ 181.371567][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.380820][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.392176][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.403425][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.991030][ T30] audit: type=1400 audit(1767847923.154:634): avc: denied { shutdown } for pid=7474 comm="syz.2.408" laddr=fe80::b lport=35568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.298182][ T5903] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.339764][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 182.345772][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.378709][ T5875] usb 5-1: USB disconnect, device number 11 [ 182.458167][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 182.539506][ T30] audit: type=1400 audit(1767847923.834:635): avc: denied { create } for pid=7480 comm="syz.5.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.566297][ T5903] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.572158][ T7487] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 182.594026][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.622618][ T5903] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 182.623020][ T7488] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 182.641206][ T30] audit: type=1400 audit(1767847923.934:636): avc: denied { write } for pid=7489 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.692825][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.800441][ T5903] usb 4-1: config 0 descriptor?? [ 182.812460][ T30] audit: type=1400 audit(1767847923.964:637): avc: denied { name_connect } for pid=7489 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 182.838707][ T30] audit: type=1400 audit(1767847924.084:638): avc: denied { ioctl } for pid=7489 comm="syz.2.412" path="socket:[15102]" dev="sockfs" ino=15102 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.948741][ T30] audit: type=1400 audit(1767847924.104:639): avc: denied { accept } for pid=7489 comm="syz.2.412" lport=53082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.985618][ T7487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.012646][ T30] audit: type=1400 audit(1767847924.164:640): avc: denied { listen } for pid=7489 comm="syz.2.412" lport=53082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.103141][ T30] audit: type=1400 audit(1767847924.284:641): avc: denied { map } for pid=7492 comm="syz.4.413" path="socket:[15110]" dev="sockfs" ino=15110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.133434][ T30] audit: type=1400 audit(1767847924.284:642): avc: denied { read accept } for pid=7492 comm="syz.4.413" path="socket:[15110]" dev="sockfs" ino=15110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.222481][ T7510] mmap: syz.5.416 (7510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.340981][ T5903] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 184.891349][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.083316][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.095353][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.112482][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.143310][ T10] usb 5-1: Product: syz [ 185.156555][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.173136][ T10] usb 5-1: Manufacturer: syz [ 185.192128][ T10] usb 5-1: SerialNumber: syz [ 185.229697][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.307941][ T5932] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.413633][ T5903] usb 4-1: USB disconnect, device number 15 [ 186.405119][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.428414][ T5932] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 186.436671][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.452989][ T5932] ath9k_htc: Failed to initialize the device [ 186.475752][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.493088][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.648195][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 186.648232][ T30] audit: type=1400 audit(1767847927.934:650): avc: denied { mount } for pid=7553 comm="syz.0.423" name="/" dev="hugetlbfs" ino=15914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 186.775324][ T7557] syzkaller0: entered promiscuous mode [ 186.798223][ T7557] syzkaller0: entered allmulticast mode [ 186.821363][ T5932] usb 5-1: ath9k_htc: USB layer deinitialized [ 186.992549][ T7568] fuse: Bad value for 'group_id' [ 187.054880][ T7568] fuse: Bad value for 'group_id' [ 187.353748][ T30] audit: type=1400 audit(1767847928.644:651): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 187.458697][ T43] usb 5-1: USB disconnect, device number 12 [ 187.696515][ T7599] netlink: 56 bytes leftover after parsing attributes in process `syz.3.431'. [ 188.240587][ T7610] fuse: Unknown parameter 'groõp^id' [ 188.287375][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.305917][ T7610] fuse: Unknown parameter 'groõp^id' [ 188.361773][ T7610] fuse: Unknown parameter 'groõp^id' [ 188.368514][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.437037][ T30] audit: type=1400 audit(1767847929.724:652): avc: denied { create } for pid=7606 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.500473][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.436'. [ 188.675259][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.702520][ T30] audit: type=1400 audit(1767847929.994:653): avc: denied { getopt } for pid=7636 comm="syz.5.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.721878][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.793475][ T7640] syzkaller0: entered promiscuous mode [ 188.799218][ T7640] syzkaller0: entered allmulticast mode [ 188.819745][ T30] audit: type=1400 audit(1767847930.114:654): avc: denied { getopt } for pid=7639 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.381972][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 189.978267][ T5903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 189.987397][ T7659] random: crng reseeded on system resumption [ 190.068579][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 190.081435][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 190.109748][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 190.168200][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 190.209249][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.237227][ T5903] usb 4-1: config 2 has an invalid interface number: 13 but max is 0 [ 190.288513][ T43] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 190.297818][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.309795][ T5903] usb 4-1: config 2 has no interface number 0 [ 190.315992][ T5903] usb 4-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.338329][ T43] usb 6-1: Product: syz [ 190.408144][ T5852] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.609650][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 190.979878][ T10] usb 5-1: device descriptor read/64, error -71 [ 190.988672][ T43] usb 6-1: Manufacturer: syz [ 190.993957][ T43] usb 6-1: SerialNumber: syz [ 191.003757][ T5903] usb 4-1: config 2 interface 13 has no altsetting 0 [ 191.012858][ T43] usb 6-1: config 0 descriptor?? [ 191.041845][ T43] radioshark 6-1:0.0: Invalid radioSHARK device [ 191.055968][ T43] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 191.070234][ T5903] usb 4-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 191.080786][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.091447][ T43] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 191.101063][ T5903] usb 4-1: Product: syz [ 191.114112][ T5903] usb 4-1: Manufacturer: syz [ 191.126429][ T5903] usb 4-1: SerialNumber: syz [ 191.160595][ T5852] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 191.170854][ T5852] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 191.219321][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.227547][ T5852] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 191.249558][ T5852] usb 3-1: config 220 has no interface number 2 [ 191.251380][ T43] usb 6-1: USB disconnect, device number 3 [ 191.255934][ T5852] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 191.295226][ T5852] usb 3-1: config 220 interface 0 has no altsetting 0 [ 191.315415][ T5852] usb 3-1: config 220 interface 76 has no altsetting 0 [ 191.335604][ T5852] usb 3-1: config 220 interface 1 has no altsetting 0 [ 191.347811][ T5852] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 191.352970][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.379403][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.379874][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.387526][ T5852] usb 3-1: Product: syz [ 191.414274][ T5852] usb 3-1: Manufacturer: syz [ 191.419186][ T10] usb 5-1: device descriptor read/64, error -71 [ 191.425598][ T5852] usb 3-1: SerialNumber: syz [ 191.530541][ T10] usb usb5-port1: attempt power cycle [ 191.669574][ T5852] usb 3-1: selecting invalid altsetting 0 [ 191.692591][ T7676] binder: 7675:7676 ioctl 541b 0 returned -22 [ 191.694587][ T5852] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 191.706437][ T5852] uvcvideo 3-1:220.0: No valid video chain found. [ 191.715390][ T7676] sit0: entered promiscuous mode [ 191.721070][ T7676] sit0: entered allmulticast mode [ 191.723193][ T5852] usb 3-1: selecting invalid altsetting 0 [ 191.731306][ T30] audit: type=1400 audit(1767847933.014:655): avc: denied { ioctl } for pid=7675 comm="syz.0.446" path="socket:[16477]" dev="sockfs" ino=16477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.758612][ T7676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 191.791524][ T5852] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 191.856954][ T5852] usb 3-1: USB disconnect, device number 12 [ 191.888740][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 193.125685][ T30] audit: type=1400 audit(1767847933.654:656): avc: denied { connect } for pid=7677 comm="syz.5.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.602254][ T7686] FAULT_INJECTION: forcing a failure. [ 193.602254][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.615558][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.0.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.615586][ T7686] Tainted: [L]=SOFTLOCKUP [ 193.615592][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.615602][ T7686] Call Trace: [ 193.615609][ T7686] [ 193.615619][ T7686] dump_stack_lvl+0x16c/0x1f0 [ 193.615645][ T7686] should_fail_ex+0x512/0x640 [ 193.615665][ T7686] _copy_from_user+0x2e/0xd0 [ 193.615682][ T7686] copy_msghdr_from_user+0x98/0x160 [ 193.615695][ T7686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.615715][ T7686] ? __lock_acquire+0x436/0x2890 [ 193.615743][ T7686] ___sys_sendmsg+0xfe/0x1d0 [ 193.615768][ T7686] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.615783][ T7686] ? find_held_lock+0x2b/0x80 [ 193.615811][ T7686] ? __schedule+0x1090/0x6150 [ 193.615828][ T7686] __sys_sendmsg+0x16d/0x220 [ 193.615839][ T7686] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.615870][ T7686] do_syscall_64+0xcd/0xf80 [ 193.615894][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.615911][ T7686] RIP: 0033:0x7fa8d218f749 [ 193.615924][ T7686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.615935][ T7686] RSP: 002b:00007fa8d03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.615946][ T7686] RAX: ffffffffffffffda RBX: 00007fa8d23e6180 RCX: 00007fa8d218f749 [ 193.615953][ T7686] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 193.615960][ T7686] RBP: 00007fa8d03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.615966][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.615972][ T7686] R13: 00007fa8d23e6218 R14: 00007fa8d23e6180 R15: 00007fff91ab19b8 [ 193.615988][ T7686] [ 194.468470][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.657235][ T10] usb 5-1: device descriptor read/8, error -71 [ 194.994967][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.079540][ T5903] usb 4-1: USB disconnect, device number 16 [ 195.091558][ T7690] syzkaller1: entered promiscuous mode [ 195.144637][ T7690] syzkaller1: entered allmulticast mode [ 195.162641][ T6318] udevd[6318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.387245][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 195.456139][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.653278][ T30] audit: type=1400 audit(1767847937.944:657): avc: denied { connect } for pid=7711 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.684540][ T7712] vxcan1: entered promiscuous mode [ 196.752767][ T30] audit: type=1400 audit(1767847938.044:658): avc: denied { read } for pid=7709 comm="syz.2.451" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 196.821818][ T7713] nbd0: detected capacity change from 0 to 63 [ 196.834678][ T30] audit: type=1400 audit(1767847938.044:659): avc: denied { open } for pid=7709 comm="syz.2.451" path="/88/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 196.879535][ T7714] sd 0:0:1:0: PR command failed: 1026 [ 196.885149][ T7714] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 196.899773][ T7714] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 196.901811][ T7716] VFS: Mount too revealing [ 196.940662][ T30] audit: type=1400 audit(1767847938.154:660): avc: denied { ioctl } for pid=7709 comm="syz.2.451" path="/88/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 196.978365][ T7726] overlayfs: failed to clone upperpath [ 197.522649][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 197.553072][ T5138] block nbd0: Receive control failed (result -104) [ 197.553855][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 197.660175][ T7737] mmap: syz.5.464 (7737): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 198.871594][ T5903] IPVS: starting estimator thread 0... [ 198.878196][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.897606][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.978573][ T7757] IPVS: using max 39 ests per chain, 93600 per kthread [ 199.069351][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 199.980648][ T30] audit: type=1400 audit(1767847940.524:661): avc: denied { mount } for pid=7762 comm="syz.3.471" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 200.248248][ T30] audit: type=1400 audit(1767847941.404:662): avc: denied { watch } for pid=7762 comm="syz.3.471" path="/107/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.548381][ T30] audit: type=1400 audit(1767847941.414:663): avc: denied { watch_sb } for pid=7762 comm="syz.3.471" path="/107/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.425034][ T7776] FAULT_INJECTION: forcing a failure. [ 201.425034][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.655273][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.4.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.655306][ T7776] Tainted: [L]=SOFTLOCKUP [ 201.655311][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.655322][ T7776] Call Trace: [ 201.655328][ T7776] [ 201.655335][ T7776] dump_stack_lvl+0x16c/0x1f0 [ 201.655363][ T7776] should_fail_ex+0x512/0x640 [ 201.655393][ T7776] _copy_from_user+0x2e/0xd0 [ 201.655421][ T7776] vmci_host_do_alloc_queuepair.constprop.0+0x28d/0x3d0 [ 201.655453][ T7776] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 201.655483][ T7776] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.655509][ T7776] ? find_held_lock+0x2b/0x80 [ 201.655549][ T7776] ? tomoyo_path_number_perm+0x18d/0x580 [ 201.655577][ T7776] vmci_host_unlocked_ioctl+0x562/0x2040 [ 201.655606][ T7776] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 201.655633][ T7776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.655657][ T7776] ? do_vfs_ioctl+0x128/0x14f0 [ 201.655679][ T7776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.655699][ T7776] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 201.655731][ T7776] ? hook_file_ioctl_common+0x144/0x410 [ 201.655767][ T7776] ? selinux_file_ioctl+0x180/0x270 [ 201.655788][ T7776] ? selinux_file_ioctl+0xb4/0x270 [ 201.655811][ T7776] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 201.655840][ T7776] __x64_sys_ioctl+0x18e/0x210 [ 201.655861][ T7776] do_syscall_64+0xcd/0xf80 [ 201.655885][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.655902][ T7776] RIP: 0033:0x7fc20778f749 [ 201.655917][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.655933][ T7776] RSP: 002b:00007fc2085d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.655951][ T7776] RAX: ffffffffffffffda RBX: 00007fc2079e5fa0 RCX: 00007fc20778f749 [ 201.655962][ T7776] RDX: 0000200000000080 RSI: 00000000000007a8 RDI: 0000000000000004 [ 201.655973][ T7776] RBP: 00007fc2085d1090 R08: 0000000000000000 R09: 0000000000000000 [ 201.655982][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.655993][ T7776] R13: 00007fc2079e6038 R14: 00007fc2079e5fa0 R15: 00007ffe463195b8 [ 201.656016][ T7776] [ 201.986824][ T30] audit: type=1400 audit(1767847943.274:664): avc: denied { create } for pid=7789 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.023064][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 202.311902][ T30] audit: type=1400 audit(1767847943.604:665): avc: denied { mount } for pid=7789 comm="syz.3.479" name="/" dev="rpc_pipefs" ino=17737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 202.399618][ T7792] sp0: Synchronizing with TNC [ 202.407694][ T7792] [U] è` [ 202.946896][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 202.957254][ T30] audit: type=1400 audit(1767847944.234:666): avc: denied { nlmsg_read } for pid=7795 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.054830][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 203.367548][ T5903] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 203.433507][ T7814] xt_socket: unknown flags 0x4c [ 203.528347][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 203.553747][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.569665][ T5903] usb 5-1: config 127 has an invalid interface number: 175 but max is 1 [ 203.582540][ T5903] usb 5-1: config 127 has an invalid interface number: 128 but max is 1 [ 203.594293][ T5903] usb 5-1: config 127 has no interface number 0 [ 203.600974][ T5903] usb 5-1: config 127 has no interface number 1 [ 203.607789][ T5903] usb 5-1: config 127 interface 175 has no altsetting 0 [ 203.616452][ T5903] usb 5-1: config 127 interface 128 has no altsetting 0 [ 203.627855][ T5903] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=ce.ed [ 203.641458][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.649664][ T5903] usb 5-1: Product: syz [ 203.653856][ T5903] usb 5-1: Manufacturer: syz [ 203.659945][ T5903] usb 5-1: SerialNumber: syz [ 203.718235][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.869238][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 203.912618][ T43] usb 6-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 203.939841][ T5903] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 203.947775][ T5903] usb 5-1: selecting invalid altsetting 0 [ 203.958278][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.983700][ T5903] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 203.999747][ T5903] usb 5-1: selecting invalid altsetting 0 [ 204.001476][ T2341] pvrusb2: Invalid write control endpoint [ 204.013652][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.043389][ T5903] usb 5-1: USB disconnect, device number 17 [ 204.049815][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.068852][ T43] usb 6-1: SerialNumber: syz [ 204.147432][ T30] audit: type=1400 audit(1767847945.434:667): avc: denied { read } for pid=7825 comm="syz.3.489" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.216475][ T30] audit: type=1400 audit(1767847945.484:668): avc: denied { open } for pid=7825 comm="syz.3.489" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.220101][ T2341] pvrusb2: Invalid write control endpoint [ 204.260912][ T30] audit: type=1400 audit(1767847945.554:669): avc: denied { ioctl } for pid=7825 comm="syz.3.489" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 204.268196][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.286204][ T7826] autofs4:pid:7826:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 204.311550][ T7826] autofs4:pid:7826:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 204.316059][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.332982][ T30] audit: type=1400 audit(1767847945.624:670): avc: denied { create } for pid=7816 comm="syz.5.487" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.350589][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.381705][ T2341] pvrusb2: Device being rendered inoperable [ 204.397951][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 204.408410][ T30] audit: type=1400 audit(1767847945.644:671): avc: denied { mounton } for pid=7816 comm="syz.5.487" path="/24/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.431421][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 204.445716][ T2341] pvrusb2: Attached sub-driver cx25840 [ 204.520594][ T30] audit: type=1400 audit(1767847945.744:672): avc: denied { setopt } for pid=7816 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.608291][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 204.630376][ T30] audit: type=1400 audit(1767847945.924:673): avc: denied { write } for pid=7816 comm="syz.5.487" name="file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.706355][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 204.789356][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 204.827649][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 204.846072][ T2341] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 204.900165][ T7817] team0: Port device team_slave_0 removed [ 205.242370][ T2341] TUNER: Unable to find symbol tda829x_probe() [ 205.784038][ T2341] DVB: Unable to find symbol tda9887_attach() [ 205.801623][ T2341] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 205.838520][ T2341] pvrusb2: Attached sub-driver tuner [ 205.859602][ T2341] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 205.880070][ T2341] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 206.028777][ T2341] pvrusb2: Invalid write control endpoint [ 206.059959][ T43] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 206.067834][ T43] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 206.088182][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.104564][ T43] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 206.124034][ T43] usb 6-1: USB disconnect, device number 4 [ 206.150900][ T2341] pvrusb2: Invalid write control endpoint [ 206.164176][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 206.185123][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 206.202546][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 206.228492][ T2341] pvrusb2: Device being rendered inoperable [ 206.240052][ T2341] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 206.265050][ T2341] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 206.273007][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 206.288446][ T2341] pvrusb2: Attached sub-driver cx25840 [ 206.298373][ T5934] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 206.307470][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.334436][ T5934] usb 4-1: Product: syz [ 206.349689][ T5934] usb 4-1: Manufacturer: syz [ 206.354405][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 206.365330][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 206.377283][ T5934] usb 4-1: SerialNumber: syz [ 206.389331][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 206.391327][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.397803][ T2341] pvrusb2: Attempted to execute control transfer when device not ok [ 206.415184][ T5934] usb 4-1: config 0 descriptor?? [ 206.422827][ T2341] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 206.443192][ T5934] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 206.451205][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.568148][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 206.658235][ T5934] gspca_stk1135: reg_w 0x2 err -71 [ 206.664432][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 206.758181][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 206.778019][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 206.814227][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.834285][ T43] usb 3-1: Product: syz [ 206.843311][ T43] usb 3-1: Manufacturer: syz [ 206.858185][ T43] usb 3-1: SerialNumber: syz [ 206.873571][ T43] usb 3-1: config 0 descriptor?? [ 207.043249][ T2341] TUNER: Unable to find symbol tda829x_probe() [ 207.059590][ T5934] gspca_stk1135: Sensor write failed [ 207.062482][ T5875] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 207.065172][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.081614][ T5934] gspca_stk1135: Sensor write failed [ 207.081656][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 207.081667][ T30] audit: type=1400 audit(1767847948.374:680): avc: denied { read } for pid=7861 comm="syz.4.498" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 207.086950][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.086963][ T5934] gspca_stk1135: Sensor read failed [ 207.086994][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.087003][ T5934] gspca_stk1135: Sensor read failed [ 207.087011][ T5934] gspca_stk1135: Detected sensor type unknown (0x0) [ 207.183342][ T7858] NILFS (nullb0): couldn't find nilfs on the device [ 207.208751][ T2341] DVB: Unable to find symbol tda9887_attach() [ 207.214886][ T2341] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 207.224936][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 207.237121][ T2341] pvrusb2: Attached sub-driver tuner [ 207.237153][ T2341] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 207.237163][ T2341] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 207.247039][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.344742][ T5934] gspca_stk1135: Sensor read failed [ 207.352192][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.368170][ T5934] gspca_stk1135: Sensor read failed [ 207.385167][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.503765][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 207.514875][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64 [ 207.525864][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 207.560823][ T5934] gspca_stk1135: Sensor write failed [ 207.566406][ T5934] gspca_stk1135: serial bus timeout: status=0x00 [ 207.579724][ T5934] gspca_stk1135: Sensor write failed [ 207.586304][ T5934] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 208.058356][ T43] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 208.067498][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 208.101197][ T7884] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.118285][ T7884] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 208.439191][ T5934] usb 4-1: USB disconnect, device number 17 [ 208.457941][ T5875] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 208.478454][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.486493][ T5875] usb 6-1: Product: syz [ 208.492621][ T5875] usb 6-1: Manufacturer: syz [ 208.497254][ T5875] usb 6-1: SerialNumber: syz [ 208.504463][ T5875] usb 6-1: config 0 descriptor?? [ 208.573467][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 208.684963][ T7886] FAULT_INJECTION: forcing a failure. [ 208.684963][ T7886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.710253][ T7886] CPU: 1 UID: 0 PID: 7886 Comm: syz.3.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.710281][ T7886] Tainted: [L]=SOFTLOCKUP [ 208.710285][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.710292][ T7886] Call Trace: [ 208.710296][ T7886] [ 208.710301][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 208.710321][ T7886] should_fail_ex+0x512/0x640 [ 208.710344][ T7886] _copy_from_iter+0x2a4/0x16c0 [ 208.710365][ T7886] ? __pfx__copy_from_iter+0x10/0x10 [ 208.710383][ T7886] ? skb_put+0x12e/0x1b0 [ 208.710397][ T7886] ? skb_put+0x138/0x1b0 [ 208.710411][ T7886] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 208.710427][ T7886] netlink_sendmsg+0x820/0xdd0 [ 208.710451][ T7886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.710469][ T7886] ____sys_sendmsg+0xa5d/0xc30 [ 208.710484][ T7886] ? copy_msghdr_from_user+0x10a/0x160 [ 208.710496][ T7886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.710516][ T7886] ___sys_sendmsg+0x134/0x1d0 [ 208.710528][ T7886] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.710557][ T7886] __sys_sendmsg+0x16d/0x220 [ 208.710569][ T7886] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.710588][ T7886] do_syscall_64+0xcd/0xf80 [ 208.710604][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.710616][ T7886] RIP: 0033:0x7f67a998f749 [ 208.710626][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.710637][ T7886] RSP: 002b:00007f67aa7e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.710648][ T7886] RAX: ffffffffffffffda RBX: 00007f67a9be5fa0 RCX: 00007f67a998f749 [ 208.710655][ T7886] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 208.710662][ T7886] RBP: 00007f67aa7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.710669][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.710675][ T7886] R13: 00007f67a9be6038 R14: 00007f67a9be5fa0 R15: 00007ffd2d4aa858 [ 208.710691][ T7886] [ 208.932470][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 208.939769][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 208.946183][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 208.952898][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 208.959473][ T5903] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 208.967083][ T5903] usb 5-1: can't read configurations, error -61 [ 208.976277][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 208.987096][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 208.993681][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.000157][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.006511][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.015314][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.025521][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.033735][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.042251][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.048694][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.055084][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.066775][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.074822][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.081771][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.088164][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.094537][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.100663][ T5903] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 209.119364][ T5875] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 209.125449][ T5875] input input9: Timeout waiting for response from device. [ 209.185316][ T5875] usb 6-1: USB disconnect, device number 5 [ 209.306729][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 209.764588][ T5934] usb 3-1: USB disconnect, device number 13 [ 209.853449][ T5903] usb 5-1: device descriptor read/all, error -71 [ 209.889286][ T5903] usb usb5-port1: attempt power cycle [ 209.988375][ T7893] trusted_key: syz.3.506 sent an empty control message without MSG_MORE. [ 210.110327][ T30] audit: type=1400 audit(1767847951.404:681): avc: denied { mount } for pid=7892 comm="syz.3.506" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 210.478026][ T30] audit: type=1400 audit(1767847951.764:682): avc: denied { setopt } for pid=7917 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.622903][ T30] audit: type=1400 audit(1767847951.884:683): avc: denied { ioctl } for pid=7919 comm="syz.3.512" path="socket:[18017]" dev="sockfs" ino=18017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.695345][ T30] audit: type=1400 audit(1767847951.884:684): avc: denied { map } for pid=7919 comm="syz.3.512" path="socket:[18015]" dev="sockfs" ino=18015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.894520][ T30] audit: type=1400 audit(1767847951.884:685): avc: denied { read } for pid=7919 comm="syz.3.512" path="socket:[18015]" dev="sockfs" ino=18015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.940157][ T30] audit: type=1400 audit(1767847951.884:686): avc: denied { read } for pid=7919 comm="syz.3.512" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 210.964951][ T30] audit: type=1400 audit(1767847951.884:687): avc: denied { open } for pid=7919 comm="syz.3.512" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 211.023861][ T30] audit: type=1400 audit(1767847951.884:688): avc: denied { ioctl } for pid=7919 comm="syz.3.512" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 211.057635][ T30] audit: type=1400 audit(1767847951.984:689): avc: denied { create } for pid=7917 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.527963][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 212.527980][ T30] audit: type=1400 audit(1767847953.734:692): avc: denied { setopt } for pid=7957 comm="syz.5.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.734555][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.749034][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.928290][ T30] audit: type=1326 audit(1767847953.964:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.037104][ T30] audit: type=1326 audit(1767847953.964:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.071272][ T30] audit: type=1326 audit(1767847953.964:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.097643][ T30] audit: type=1326 audit(1767847953.964:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.131281][ T30] audit: type=1326 audit(1767847953.964:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.156638][ T30] audit: type=1326 audit(1767847953.964:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.180413][ T30] audit: type=1326 audit(1767847953.974:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.207780][ T30] audit: type=1326 audit(1767847953.974:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.217367][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.525'. [ 213.231682][ T30] audit: type=1326 audit(1767847953.974:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc4538f749 code=0x7ffc0000 [ 213.328554][ T6852] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 214.427269][ T7966] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 1260, magic 12 != 6b] [ 214.448575][ T6852] usb 5-1: config 0 has an invalid interface number: 203 but max is 2 [ 214.466937][ T6852] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 214.490617][ T6852] usb 5-1: config 0 has an invalid interface number: 180 but max is 2 [ 214.531245][ T6852] usb 5-1: config 0 has an invalid interface number: 179 but max is 2 [ 214.568141][ T6852] usb 5-1: config 0 has no interface number 0 [ 214.585767][ T6852] usb 5-1: config 0 has no interface number 1 [ 214.608359][ T6852] usb 5-1: config 0 has no interface number 2 [ 215.246183][ T7974] FAULT_INJECTION: forcing a failure. [ 215.246183][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.260037][ T7974] CPU: 0 UID: 0 PID: 7974 Comm: syz.2.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.260059][ T7974] Tainted: [L]=SOFTLOCKUP [ 215.260063][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.260070][ T7974] Call Trace: [ 215.260073][ T7974] [ 215.260078][ T7974] dump_stack_lvl+0x16c/0x1f0 [ 215.260100][ T7974] should_fail_ex+0x512/0x640 [ 215.260120][ T7974] _copy_from_user+0x2e/0xd0 [ 215.260137][ T7974] memdup_user+0x6b/0xe0 [ 215.260150][ T7974] strndup_user+0x78/0xe0 [ 215.260161][ T7974] __x64_sys_mount+0x17f/0x310 [ 215.260174][ T7974] ? __pfx___x64_sys_mount+0x10/0x10 [ 215.260188][ T7974] do_syscall_64+0xcd/0xf80 [ 215.260204][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.260215][ T7974] RIP: 0033:0x7f64f538f749 [ 215.260225][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.260236][ T7974] RSP: 002b:00007f64f62f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.260247][ T7974] RAX: ffffffffffffffda RBX: 00007f64f55e5fa0 RCX: 00007f64f538f749 [ 215.260254][ T7974] RDX: 0000200000000080 RSI: 0000200000000a00 RDI: 0000200000000000 [ 215.260261][ T7974] RBP: 00007f64f62f7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.260267][ T7974] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 215.260274][ T7974] R13: 00007f64f55e6038 R14: 00007f64f55e5fa0 R15: 00007fff547fa3f8 [ 215.260288][ T7974] [ 215.455236][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 215.540004][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 215.549817][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 215.608211][ T6852] usb 5-1: config 0 interface 203 altsetting 9 endpoint 0xF has an invalid bInterval 251, changing to 11 [ 215.642809][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 215.690879][ T6852] usb 5-1: config 0 interface 203 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32 [ 215.801982][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 215.829660][ T6852] usb 5-1: config 0 interface 203 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 215.991523][ T6852] usb 5-1: config 0 interface 203 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 216.003371][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 216.014286][ T6852] usb 5-1: config 0 interface 203 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 216.025462][ T6852] usb 5-1: config 0 interface 203 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 216.036684][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 216.545037][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 216.556913][ T6852] usb 5-1: config 0 interface 203 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 216.568235][ T6852] usb 5-1: config 0 interface 180 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 216.579397][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 216.590531][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 216.652331][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 216.671278][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 216.682404][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 216.693373][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 216.704271][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 216.715131][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 216.727967][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0x5, skipping [ 216.743089][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 216.758101][ T6852] usb 5-1: config 0 interface 179 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 216.859797][ T6852] usb 5-1: config 0 interface 203 has no altsetting 0 [ 216.884325][ T6852] usb 5-1: config 0 interface 180 has no altsetting 0 [ 216.904989][ T6852] usb 5-1: config 0 interface 179 has no altsetting 0 [ 216.912408][ T6852] usb 5-1: string descriptor 0 read error: -71 [ 216.920029][ T6852] usb 5-1: Dual-Role OTG device on HNP port [ 216.927103][ T6852] usb 5-1: can't set HNP mode: -71 [ 217.771907][ T7996] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 217.894884][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 217.894900][ T30] audit: type=1400 audit(1767847959.184:710): avc: denied { create } for pid=7990 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 218.007453][ T30] audit: type=1400 audit(1767847959.294:711): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 218.518299][ T30] audit: type=1400 audit(1767847959.804:712): avc: denied { read } for pid=7990 comm="syz.5.527" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 218.570068][ T30] audit: type=1400 audit(1767847959.814:713): avc: denied { open } for pid=7990 comm="syz.5.527" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 219.337958][ T30] audit: type=1400 audit(1767847959.814:714): avc: denied { ioctl } for pid=7990 comm="syz.5.527" path="socket:[17234]" dev="sockfs" ino=17234 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.728152][ T30] audit: type=1400 audit(1767847960.144:715): avc: denied { setcurrent } for pid=8008 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 219.802325][ T8022] program syz.0.540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.811683][ T8022] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 220.528144][ T5903] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 220.688198][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 220.711219][ T5903] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 220.714272][ T30] audit: type=1400 audit(1767847961.994:716): avc: denied { mount } for pid=8023 comm="syz.2.541" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 220.742911][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 220.761029][ T8023] Process accounting resumed [ 220.806810][ T5903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.823152][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.875578][ T5932] IPVS: starting estimator thread 0... [ 220.894516][ T5903] usb 5-1: Product: syz [ 220.904435][ T5903] usb 5-1: Manufacturer: syz [ 220.912940][ T5903] usb 5-1: SerialNumber: syz [ 220.946388][ T8031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 220.968175][ T8040] IPVS: using max 49 ests per chain, 117600 per kthread [ 220.999393][ T30] audit: type=1400 audit(1767847962.294:717): avc: denied { create } for pid=8042 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 221.040086][ T30] audit: type=1400 audit(1767847962.314:718): avc: denied { getopt } for pid=8042 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 221.083478][ T30] audit: type=1400 audit(1767847962.314:719): avc: denied { write } for pid=8042 comm="syz.2.545" path="socket:[18410]" dev="sockfs" ino=18410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 221.287225][ T5903] usb 5-1: USB disconnect, device number 23 [ 221.313218][ T8047] xt_TCPMSS: Only works on TCP SYN packets [ 222.184558][ T5932] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.278245][ T5934] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 222.349930][ T5932] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 222.366242][ T5932] usb 4-1: config 0 has no interface number 0 [ 222.388752][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 222.440228][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.448999][ T5934] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 222.463968][ T5932] usb 4-1: Product: syz [ 222.471422][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.485863][ T5932] usb 4-1: Manufacturer: syz [ 222.504130][ T5932] usb 4-1: SerialNumber: syz [ 222.521903][ T5934] usb 5-1: config 0 descriptor?? [ 222.550428][ T5932] usb 4-1: config 0 descriptor?? [ 222.557974][ T5934] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 222.734275][ T5934] gspca_sn9c2028: read1 error -32 [ 222.740593][ T5934] gspca_sn9c2028: read1 error -32 [ 222.923970][ T5932] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 222.931515][ T5932] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 222.939049][ T5932] uvcvideo 4-1:0.64: No valid video chain found. [ 222.952323][ T5932] usb 4-1: USB disconnect, device number 18 [ 223.042922][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.052001][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.061987][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.279212][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.287933][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.434021][ T5934] gspca_sn9c2028: read1 error -110 [ 223.462383][ T5934] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -110 [ 223.477722][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 223.477742][ T30] audit: type=1400 audit(1767847964.754:725): avc: denied { append } for pid=8091 comm="syz.5.561" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 223.517518][ T30] audit: type=1400 audit(1767847964.754:726): avc: denied { open } for pid=8091 comm="syz.5.561" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 223.571292][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.580568][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.589487][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.675472][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.686986][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.696766][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 223.914423][ T6852] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 223.927287][ T6852] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.943409][ T30] audit: type=1400 audit(1767847965.234:727): avc: denied { append } for pid=8099 comm="syz.0.564" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 224.011867][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 224.140138][ T8108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.554945][ T30] audit: type=1400 audit(1767847965.814:728): avc: denied { listen } for pid=8107 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.664450][ T30] audit: type=1400 audit(1767847965.824:729): avc: denied { connect } for pid=8107 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.016493][ T5903] usb 5-1: USB disconnect, device number 24 [ 225.063267][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.073698][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.076336][ T8122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.291888][ T30] audit: type=1400 audit(1767847966.584:730): avc: denied { read } for pid=8121 comm="syz.5.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.339106][ T8138] syzkaller0: entered promiscuous mode [ 225.346231][ T8138] syzkaller0: entered allmulticast mode [ 225.373998][ T8138] bridge0: entered allmulticast mode [ 225.380082][ T8138] bridge_slave_1: left allmulticast mode [ 225.385784][ T8138] bridge_slave_1: left promiscuous mode [ 225.391904][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.402905][ T8138] bridge_slave_0: left allmulticast mode [ 225.411056][ T8138] bridge_slave_0: left promiscuous mode [ 225.424919][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.574136][ T30] audit: type=1400 audit(1767847966.824:731): avc: denied { bind } for pid=8139 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.576091][ T8142] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.678410][ T5903] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 225.819809][ T8138] bridge0 (unregistering): left allmulticast mode [ 225.869306][ T30] audit: type=1400 audit(1767847966.834:732): avc: denied { write } for pid=8139 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.922582][ T5903] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 225.945465][ T5903] usb 4-1: config 0 has an invalid interface descriptor of length 5, skipping [ 225.980345][ T5903] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 226.057052][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.083300][ T5903] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 226.101117][ T5903] usb 4-1: config 0 has no interface number 0 [ 226.117504][ T5903] usb 4-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.197468][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.219625][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.139057][ T25] block nbd0: Possible stuck request ffff8880265f8000: control (read@0,1024B). Runtime 30 seconds [ 227.151646][ T25] block nbd0: Possible stuck request ffff8880265f8200: control (read@1024,1024B). Runtime 30 seconds [ 227.162646][ T25] block nbd0: Possible stuck request ffff8880265f8400: control (read@2048,1024B). Runtime 30 seconds [ 227.173858][ T25] block nbd0: Possible stuck request ffff8880265f8600: control (read@3072,1024B). Runtime 30 seconds [ 227.355956][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.388497][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.568264][ T30] audit: type=1400 audit(1767847968.854:733): avc: denied { read write } for pid=8167 comm="syz.2.587" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 228.302421][ T5903] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 228.347573][ T5903] usb 4-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 228.375548][ T5903] usb 4-1: config 0 descriptor?? [ 228.808929][ T5903] usb 4-1: can't set config #0, error -71 [ 228.858979][ T5903] usb 4-1: USB disconnect, device number 19 [ 229.167110][ T30] audit: type=1400 audit(1767847970.454:734): avc: denied { append } for pid=8197 comm="syz.2.595" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 229.199189][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 229.199482][ T8198] __nla_validate_parse: 5 callbacks suppressed [ 229.199496][ T8198] netlink: 830 bytes leftover after parsing attributes in process `syz.2.595'. [ 229.351786][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 229.400098][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 229.413445][ T5903] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 229.453657][ T43] usb 5-1: config 220 has no interface number 2 [ 229.468768][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 229.482654][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 229.489595][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 229.497156][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 229.884560][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 229.894508][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 229.907568][ T5903] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 229.924228][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.933987][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.948464][ T43] usb 5-1: Product: syz [ 229.961405][ T43] usb 5-1: Manufacturer: syz [ 229.961431][ T43] usb 5-1: SerialNumber: syz [ 229.962702][ T5903] usb 4-1: Product: syz [ 229.962720][ T5903] usb 4-1: Manufacturer: syz [ 229.962736][ T5903] usb 4-1: SerialNumber: syz [ 229.977280][ T5903] usb 4-1: config 0 descriptor?? [ 230.006397][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 230.008435][ T5903] gspca_main: sq930x-2.14.0 probing 2770:930c [ 230.058904][ T8206] netlink: 'syz.0.597': attribute type 2 has an invalid length. [ 230.116070][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.163612][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.236873][ T43] usb 5-1: selecting invalid altsetting 0 [ 230.267022][ T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 230.285197][ T43] uvcvideo 5-1:220.0: No valid video chain found. [ 230.315482][ T43] usb 5-1: selecting invalid altsetting 0 [ 230.333172][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 230.366480][ T43] usb 5-1: USB disconnect, device number 25 [ 230.628462][ T5903] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 230.778217][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.868683][ T5903] gspca_sq930x: Sensor ov9630 not yet treated [ 230.887472][ T5903] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 230.920668][ T5903] usb 4-1: USB disconnect, device number 20 [ 231.075027][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 231.100297][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 231.102077][ T30] audit: type=1400 audit(1767847972.384:735): avc: denied { connect } for pid=8213 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.112734][ T43] usb 5-1: config 220 has no interface number 2 [ 231.143803][ T8216] loop2: detected capacity change from 0 to 7 [ 231.154295][ T30] audit: type=1400 audit(1767847972.384:736): avc: denied { bind } for pid=8213 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 231.192071][ T6079] loop2: p1 [ 231.195509][ T6079] loop2: partition table partially beyond EOD, truncated [ 231.198597][ T8219] netlink: 'syz.2.601': attribute type 4 has an invalid length. [ 231.208469][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 231.235830][ T6079] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 231.245839][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 231.262539][ T8216] loop2: p1 [ 231.263933][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 231.272734][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 231.273846][ T8216] loop2: partition table partially beyond EOD, [ 231.281564][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.293361][ T8216] truncated [ 231.302036][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.310323][ T43] usb 5-1: Product: syz [ 231.319390][ T43] usb 5-1: Manufacturer: syz [ 231.325394][ T43] usb 5-1: SerialNumber: syz [ 231.351228][ T8216] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 231.396228][ T8216] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 231.417812][ T8216] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 231.438694][ T8226] VFS: Mount too revealing [ 231.557227][ T43] usb 5-1: selecting invalid altsetting 0 [ 231.590484][ T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 231.608319][ T43] uvcvideo 5-1:220.0: No valid video chain found. [ 231.630188][ T43] usb 5-1: selecting invalid altsetting 0 [ 231.639388][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 231.662717][ T43] usb 5-1: USB disconnect, device number 26 [ 232.942726][ T30] audit: type=1400 audit(1767847973.854:737): avc: denied { getopt } for pid=8241 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.828162][ T43] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 235.072260][ T43] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.089036][ T43] usb 6-1: config 179 has no interface number 0 [ 235.107890][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 235.144849][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 235.165306][ T30] audit: type=1326 audit(1767847976.454:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.3.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a998f749 code=0x0 [ 235.191452][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 235.216033][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 235.251394][ T43] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.278994][ T43] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.330721][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.363084][ T8266] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.385820][ T43] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 235.399645][ T30] audit: type=1400 audit(1767847976.684:739): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 235.430518][ T43] xpad 6-1:179.65: probe with driver xpad failed with error -90 [ 235.594053][ T5932] usb 6-1: USB disconnect, device number 6 [ 235.649212][ T8297] FAULT_INJECTION: forcing a failure. [ 235.649212][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 235.678156][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.0.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.678188][ T8297] Tainted: [L]=SOFTLOCKUP [ 235.678194][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.678204][ T8297] Call Trace: [ 235.678210][ T8297] [ 235.678217][ T8297] dump_stack_lvl+0x16c/0x1f0 [ 235.678246][ T8297] should_fail_ex+0x512/0x640 [ 235.678274][ T8297] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 235.678301][ T8297] should_failslab+0xc2/0x120 [ 235.678324][ T8297] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 235.678346][ T8297] ? device_rename+0x88/0x260 [ 235.678373][ T8297] ? kstrdup+0x53/0x100 [ 235.678388][ T8297] kstrdup+0x53/0x100 [ 235.678405][ T8297] device_rename+0x88/0x260 [ 235.678430][ T8297] cfg802154_switch_netns+0x1d0/0x470 [ 235.678461][ T8297] nl802154_wpan_phy_netns+0x132/0x480 [ 235.678491][ T8297] genl_family_rcv_msg_doit+0x209/0x2f0 [ 235.678521][ T8297] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.678556][ T8297] ? bpf_lsm_capable+0x9/0x10 [ 235.678577][ T8297] ? security_capable+0x7e/0x260 [ 235.678603][ T8297] genl_rcv_msg+0x55c/0x800 [ 235.678631][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.678656][ T8297] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 235.678675][ T8297] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 235.678703][ T8297] ? __pfx_nl802154_post_doit+0x10/0x10 [ 235.678723][ T8297] ? __lock_acquire+0x436/0x2890 [ 235.678749][ T8297] netlink_rcv_skb+0x158/0x420 [ 235.678771][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.678797][ T8297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.678831][ T8297] ? netlink_deliver_tap+0x1ae/0xd30 [ 235.678856][ T8297] genl_rcv+0x28/0x40 [ 235.678878][ T8297] netlink_unicast+0x5aa/0x870 [ 235.678931][ T8297] ? __pfx_netlink_unicast+0x10/0x10 [ 235.678964][ T8297] netlink_sendmsg+0x8c8/0xdd0 [ 235.678991][ T8297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.679024][ T8297] ____sys_sendmsg+0xa5d/0xc30 [ 235.679050][ T8297] ? copy_msghdr_from_user+0x10a/0x160 [ 235.679073][ T8297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.679110][ T8297] ___sys_sendmsg+0x134/0x1d0 [ 235.679131][ T8297] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.679183][ T8297] __sys_sendmsg+0x16d/0x220 [ 235.679202][ T8297] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.679239][ T8297] do_syscall_64+0xcd/0xf80 [ 235.679264][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.679283][ T8297] RIP: 0033:0x7fa8d218f749 [ 235.679298][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.679316][ T8297] RSP: 002b:00007fa8d2f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.679335][ T8297] RAX: ffffffffffffffda RBX: 00007fa8d23e5fa0 RCX: 00007fa8d218f749 [ 235.679347][ T8297] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 235.679358][ T8297] RBP: 00007fa8d2f75090 R08: 0000000000000000 R09: 0000000000000000 [ 235.679368][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.679379][ T8297] R13: 00007fa8d23e6038 R14: 00007fa8d23e5fa0 R15: 00007fff91ab19b8 [ 235.679405][ T8297] [ 235.680236][ T8297] ------------[ cut here ]------------ [ 235.805520][ T30] audit: type=1400 audit(1767847977.044:740): avc: denied { setopt } for pid=8300 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.808610][ T8297] WARNING: net/ieee802154/core.c:258 at cfg802154_switch_netns+0x3b1/0x470, CPU#1: syz.0.622/8297 [ 236.027864][ T8297] Modules linked in: [ 236.032166][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.0.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.043004][ T8297] Tainted: [L]=SOFTLOCKUP [ 236.047339][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.057508][ T8297] RIP: 0010:cfg802154_switch_netns+0x3b1/0x470 [ 236.064551][ T8297] Code: 56 ed 8c 48 8b 7b 20 e8 9d d9 1c fe 31 ff 89 c5 89 c6 e8 12 01 91 f6 85 ed 0f 84 0f ff ff ff e9 01 ff ff ff e8 60 06 91 f6 90 <0f> 0b 90 e9 2a fe ff ff 4c 89 ef e8 cf db fa f6 e9 ad fc ff ff e8 [ 236.084552][ T8297] RSP: 0018:ffffc9000c3cf510 EFLAGS: 00010293 [ 236.090926][ T8297] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff8b2de07b [ 236.098992][ T8297] RDX: ffff888032f28000 RSI: ffffffff8b2de250 RDI: 0000000000000005 [ 236.106969][ T8297] RBP: ffff8880288e4198 R08: 0000000000000005 R09: 0000000000000000 [ 236.115198][ T8297] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff8880288e4000 [ 236.123383][ T8297] R13: ffff88807562e8c0 R14: ffff8880288e4078 R15: ffff8880288e4000 [ 236.131406][ T8297] FS: 00007fa8d2f756c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 236.140436][ T8297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.147045][ T8297] CR2: 00007fa8d21753c0 CR3: 0000000033c66000 CR4: 00000000003526f0 [ 236.155100][ T8297] Call Trace: [ 236.158441][ T8297] [ 236.161392][ T8297] nl802154_wpan_phy_netns+0x132/0x480 [ 236.166889][ T8297] genl_family_rcv_msg_doit+0x209/0x2f0 [ 236.172547][ T8297] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.178986][ T8297] ? bpf_lsm_capable+0x9/0x10 [ 236.183734][ T8297] ? security_capable+0x7e/0x260 [ 236.188916][ T8297] genl_rcv_msg+0x55c/0x800 [ 236.193460][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.198168][ T5932] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 236.198593][ T8297] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 236.211561][ T8297] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 236.217584][ T8297] ? __pfx_nl802154_post_doit+0x10/0x10 [ 236.223225][ T8297] ? __lock_acquire+0x436/0x2890 [ 236.228215][ T8297] netlink_rcv_skb+0x158/0x420 [ 236.233015][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.238145][ T8297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.243462][ T8297] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.248830][ T8297] genl_rcv+0x28/0x40 [ 236.252838][ T8297] netlink_unicast+0x5aa/0x870 [ 236.257697][ T8297] ? __pfx_netlink_unicast+0x10/0x10 [ 236.263418][ T8297] netlink_sendmsg+0x8c8/0xdd0 [ 236.268246][ T8297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.273563][ T8297] ____sys_sendmsg+0xa5d/0xc30 [ 236.278680][ T8297] ? copy_msghdr_from_user+0x10a/0x160 [ 236.284178][ T8297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.289721][ T8297] ___sys_sendmsg+0x134/0x1d0 [ 236.294433][ T8297] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.299737][ T8297] __sys_sendmsg+0x16d/0x220 [ 236.304344][ T8297] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.309548][ T8297] do_syscall_64+0xcd/0xf80 [ 236.314074][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.320081][ T8297] RIP: 0033:0x7fa8d218f749 [ 236.324518][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.344245][ T8297] RSP: 002b:00007fa8d2f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.352889][ T8297] RAX: ffffffffffffffda RBX: 00007fa8d23e5fa0 RCX: 00007fa8d218f749 [ 236.354524][ T5932] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 236.360941][ T8297] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 236.360964][ T8297] RBP: 00007fa8d2f75090 R08: 0000000000000000 R09: 0000000000000000 [ 236.360976][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.360988][ T8297] R13: 00007fa8d23e6038 R14: 00007fa8d23e5fa0 R15: 00007fff91ab19b8 [ 236.361017][ T8297] [ 236.361029][ T8297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.361046][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.0.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.361070][ T8297] Tainted: [L]=SOFTLOCKUP [ 236.361077][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.361089][ T8297] Call Trace: [ 236.361098][ T8297] [ 236.361105][ T8297] dump_stack_lvl+0x3d/0x1f0 [ 236.361141][ T8297] vpanic+0x640/0x6f0 [ 236.361163][ T8297] ? cfg802154_switch_netns+0x3b1/0x470 [ 236.361192][ T8297] panic+0xca/0xd0 [ 236.361211][ T8297] ? __pfx_panic+0x10/0x10 [ 236.361238][ T8297] ? check_panic_on_warn+0x1f/0xb0 [ 236.361260][ T8297] check_panic_on_warn+0xab/0xb0 [ 236.361281][ T8297] __warn+0x108/0x3c0 [ 236.361303][ T8297] __report_bug+0x2a0/0x520 [ 236.361322][ T8297] ? cfg802154_switch_netns+0x3b1/0x470 [ 236.361348][ T8297] ? __pfx___report_bug+0x10/0x10 [ 236.361374][ T8297] ? dump_stack_lvl+0x185/0x1f0 [ 236.361394][ T8297] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.361418][ T8297] ? dump_stack_lvl+0x1a1/0x1f0 [ 236.361440][ T8297] ? cfg802154_switch_netns+0x3b1/0x470 [ 236.361465][ T8297] report_bug+0xb2/0x220 [ 236.361484][ T8297] ? cfg802154_switch_netns+0x3b1/0x470 [ 236.361509][ T8297] handle_bug+0x127/0x260 [ 236.361535][ T8297] exc_invalid_op+0x17/0x50 [ 236.361560][ T8297] asm_exc_invalid_op+0x1a/0x20 [ 236.361578][ T8297] RIP: 0010:cfg802154_switch_netns+0x3b1/0x470 [ 236.361603][ T8297] Code: 56 ed 8c 48 8b 7b 20 e8 9d d9 1c fe 31 ff 89 c5 89 c6 e8 12 01 91 f6 85 ed 0f 84 0f ff ff ff e9 01 ff ff ff e8 60 06 91 f6 90 <0f> 0b 90 e9 2a fe ff ff 4c 89 ef e8 cf db fa f6 e9 ad fc ff ff e8 [ 236.361621][ T8297] RSP: 0018:ffffc9000c3cf510 EFLAGS: 00010293 [ 236.361637][ T8297] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: ffffffff8b2de07b [ 236.361648][ T8297] RDX: ffff888032f28000 RSI: ffffffff8b2de250 RDI: 0000000000000005 [ 236.361660][ T8297] RBP: ffff8880288e4198 R08: 0000000000000005 R09: 0000000000000000 [ 236.361671][ T8297] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff8880288e4000 [ 236.361682][ T8297] R13: ffff88807562e8c0 R14: ffff8880288e4078 R15: ffff8880288e4000 [ 236.361701][ T8297] ? cfg802154_switch_netns+0x1db/0x470 [ 236.361725][ T8297] ? cfg802154_switch_netns+0x3b0/0x470 [ 236.361756][ T8297] nl802154_wpan_phy_netns+0x132/0x480 [ 236.361785][ T8297] genl_family_rcv_msg_doit+0x209/0x2f0 [ 236.361814][ T8297] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.361848][ T8297] ? bpf_lsm_capable+0x9/0x10 [ 236.361869][ T8297] ? security_capable+0x7e/0x260 [ 236.361894][ T8297] genl_rcv_msg+0x55c/0x800 [ 236.361921][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.361945][ T8297] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 236.361964][ T8297] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 236.361991][ T8297] ? __pfx_nl802154_post_doit+0x10/0x10 [ 236.362010][ T8297] ? __lock_acquire+0x436/0x2890 [ 236.362037][ T8297] netlink_rcv_skb+0x158/0x420 [ 236.362059][ T8297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.362085][ T8297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.362114][ T8297] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.362141][ T8297] genl_rcv+0x28/0x40 [ 236.362161][ T8297] netlink_unicast+0x5aa/0x870 [ 236.362184][ T8297] ? __pfx_netlink_unicast+0x10/0x10 [ 236.362212][ T8297] netlink_sendmsg+0x8c8/0xdd0 [ 236.362235][ T8297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.362263][ T8297] ____sys_sendmsg+0xa5d/0xc30 [ 236.362286][ T8297] ? copy_msghdr_from_user+0x10a/0x160 [ 236.362304][ T8297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.362335][ T8297] ___sys_sendmsg+0x134/0x1d0 [ 236.362353][ T8297] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.362397][ T8297] __sys_sendmsg+0x16d/0x220 [ 236.362414][ T8297] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.362445][ T8297] do_syscall_64+0xcd/0xf80 [ 236.362467][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.362483][ T8297] RIP: 0033:0x7fa8d218f749 [ 236.362498][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.362513][ T8297] RSP: 002b:00007fa8d2f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.362529][ T8297] RAX: ffffffffffffffda RBX: 00007fa8d23e5fa0 RCX: 00007fa8d218f749 [ 236.362540][ T8297] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 236.362550][ T8297] RBP: 00007fa8d2f75090 R08: 0000000000000000 R09: 0000000000000000 [ 236.362561][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.362571][ T8297] R13: 00007fa8d23e6038 R14: 00007fa8d23e5fa0 R15: 00007fff91ab19b8 [ 236.362594][ T8297] [ 236.369502][ T8297] Kernel Offset: disabled