last executing test programs: 11.962737863s ago: executing program 1 (id=615): mount(0x0, 0x0, 0x0, 0x10000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x4e24, 0x40008, @empty, 0x1000}}, {{0xa, 0x4e22, 0xfffffff6, @dev={0xfe, 0x80, '\x00', 0x25}}}}, 0x108) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = dup3(r5, r6, 0x80000) pread64(r7, 0x0, 0x0, 0x10001) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000db2f9f77b1a24219b4efed72f95e59740b4c42b2e9992097efe36035a6e68c97b68f3f31ae006153339a4fb6aeab2be7133c17a1d524e938d05f4e26006702ba5bbcb8ae18bed5e9e0c61bae91d79cf4c48ab3a3ae46181711be", @ANYRES16=r3, @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044041) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="d135060000000000cf9a4645dc5a0ca3df357a78dfcce3bfecb57a7827bcf7df05bd63"], &(0x7f0000000140)='GPL\x00', 0x80000001, 0xbf, &(0x7f0000000380)=""/191, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x5, 0x8, 0x4}], 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000080)={0x51, 0xfffc, 0x92, {0x8, 0x5d7}, {0x8, 0x2}, @ramp={0xd, 0x1, {0x8d, 0x7, 0x3ff, 0xb8}}}) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x337, 0x1, 0x3, 0x3, 0x4a, @multicast}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r11, 0x0, 0xe, 0x0, &(0x7f00000007c0)="5fd63ef1fd8a4a6077fd87686f9a", 0x0, 0x7bfffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xd}, 0x50) close(0xffffffffffffffff) 9.456933034s ago: executing program 2 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x60002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) 9.204936625s ago: executing program 4 (id=621): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.101277189s ago: executing program 2 (id=622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0xc, 0x0, 0x0, 0x0, 0x6cae, 0x7ff}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r6, 0x11, 0x0, r8}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r9, 0x32}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x8) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000001340)) 7.010059183s ago: executing program 2 (id=625): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2563, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2120, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x10600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='user\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r2}) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "3db5adc3dae6cd4dccfdb3f43bde16f7aa0a578627f351750a0c6978141718c4e22eb7dda06196d1cfb307cd7d6379bd1fa3264b98df4912fa1de6fec05c6f39", 0x31}, 0x48, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc005765a10f94b0aad2134779b11316870000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000ac14141400000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000028bd7000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) 6.882077687s ago: executing program 3 (id=626): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x1188, 0x1188, 0xffffffff, 0xffffffff, 0x1220, 0x1220, 0x1220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff00, 0xff000000, 'geneve1\x00', 'gre0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port0\x00', 0xa2, 0x11cfa, 0xff, 0xf2, 0x1, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 6.830431336s ago: executing program 1 (id=628): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x800) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x40000000000, 0x1ff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000140)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.675533279s ago: executing program 2 (id=629): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 6.521156452s ago: executing program 3 (id=631): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$getflags(r0, 0xb) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r3, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x7f, 0x4, 0x1e7, 0x2}, 0x3, 0x81, 0x0, 0x7, 0x0, 0x10}}) 5.620768157s ago: executing program 0 (id=632): syz_clone(0x3a00511, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0xa, 0x3, 0x87) ioctl$int_in(r2, 0x5452, 0x0) sendto(r2, 0x0, 0x0, 0x800, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x100, 0x0, 0x1}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) close(r5) close(r4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x800, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0xfffffffe}, {0xffffffff, 0xffff0000}, {0x1000000}, 0xc207186618c3f6dd, 0x3f0, 0x0, 0xd619, 0x0, 0x2, 0x1, 0x6, 0x4c11b0c5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x1, r7) 5.620374799s ago: executing program 4 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(0x0, 0x4000) stat(0x0, &(0x7f0000000200)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = getpgid(r4) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000040)={0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_open_dev$hiddev(&(0x7f0000000180), 0xec79, 0x800) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x24000) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r2) 5.441709742s ago: executing program 2 (id=634): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRESHEX], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x1b, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}, @alu={0x7, 0x0, 0x0, 0x8, 0x8, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000100)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc7d661639dcdf19b}, 0x4040) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x4, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 5.047933314s ago: executing program 3 (id=635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0xc, 0x0, 0x0, 0x0, 0x6cae, 0x7ff}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r6, 0x11, 0x0, r8}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r9, 0x32}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x8) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000001340)) 4.62315322s ago: executing program 1 (id=636): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x138, 0x210, 0x138, 0x210, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xfa}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x84, @local, 0x4e22, 0x3, 'fo\x00', 0x22, 0xaa, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffe000}) 2.464954261s ago: executing program 4 (id=637): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x2, 0xfffffff7}, {0xde7, 0x1000}]}, 0x14, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.370798049s ago: executing program 3 (id=638): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xe491, 0x3}, 0x18, 0x3) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030427bd7000fe"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fgetxattr(r4, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4801, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) 2.264626457s ago: executing program 2 (id=639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.237626739s ago: executing program 1 (id=640): rt_sigsuspend(&(0x7f0000000000)={[0x1000]}, 0x8) (async) r0 = inotify_init() r1 = signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) (async) rt_sigpending(&(0x7f0000000080), 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x0, 0x100000001, 0x8be7, 0x0, 0x8}) (async) write$midi(r1, &(0x7f0000000100)="10bfaa07e3eb80a8067348a2b56e3e20c3a5dd8ddd841f910abe78ac96c2ceacb508132051bd9a1c2e414f7cfec25cec6a2cfd60dc920dddb42b34e476746b8d2da218f610dad966657c6fd735b53000b5eee50c2be396a5eb3ecc86bbedf50cfe776ce33f57433ec837d15456c7eac7cf314a79b5f0132ba02adf70deb3f3c3f138a6437c8af7be27ba48fc633c07f54419661fd6c4a3969b6d683263f7b7fd46a5e7fe10aca859042641af89e6c289c12ed3fa33fb1c484b998551eb1357118be9243cf5b8feadd4111c1daa50d3d1a7259340002ff26e879477a745f00567c1fa157264f8766772d861e923", 0xed) r2 = getpid() tkill(r2, 0x34) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt(r3, 0x101, 0x7, &(0x7f0000000200)="a33ec94e3018b881cae3d627472cdbab2f06236d05b5ecb80b7558b15c142b5b1967cdfbe8e2900a2da1d63b9a1a5ab9a23f8d8b4bf7d0796f99", 0x3a) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, &(0x7f0000000300)={0xa, &(0x7f0000000280)=[{0x47e, 0x9, 0x7, 0x1}, {0x658c, 0x7, 0x4, 0x2}, {0x2, 0x0, 0x1, 0x4}, {0x1, 0x4, 0x1, 0x4}, {0x7, 0x0, 0xff, 0x5}, {0x6, 0xfb, 0xff, 0x2}, {0xfff, 0x3, 0x9, 0x7}, {0x6, 0x3, 0x7, 0xb826}, {0xf9, 0x1a, 0xae, 0x401}, {0x1ff, 0xc4, 0x0, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0xe697}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r5, 0xbb, "7d85e2fd26e9bacc2bd19bf2451f87fbc56b612090f3a5ca3fb39afd2ec395548b7e8c9df669b4488962cb2996af4ca601f81121234a0ac46152274bab86acfc51e4fac80710fb47de79995b59c89211eb876b06a71e7f8af7bf439458fec9814e3d44f6f68498f48f9fb45bf32608d496ae0bb9db2dc5e37be45e594e12e354d8f3d8a02b1d0ea1a8791fee8a1f9dafc1dfd1510de85fd39c2ec5b4929b331de72b19a066d9272e9c64cd6fbd043543de5620629c9e64072888b7"}, &(0x7f0000000540)=0xc3) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000580)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000005c0)={r6}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000600)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000056c0)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000005800)=[{&(0x7f0000000640)={0x27, r7, 0x1, 0x5, 0x0, 0x4, "320dae82e0becec3f561b927b85022568816ee16216629bc40143f59a615acac73add9d825d926aebfbd00250a28a50a152409b0cf343b40d8f0e91d5cf55e", 0x39}, 0x60, &(0x7f0000000740)=[{&(0x7f00000006c0)="5b9785532b08c18fa417260d516cd853c95962dac6dbf71f3e38e4b8fb0faacfec409a45f7d36f14b8cccdd789beb8ff4289572d69b792329a35804eb3817359ea8a13ee3367bbd14f1e5957da0a93df83b70c5f8c91af82324cc0c0f168f76ea5d5e0246394b04690d4f4c3d322de312db891cf32aa", 0x76}], 0x1, &(0x7f0000000780)={0x28, 0x0, 0x2, "d648774a6afe48c2f9b0f613d5859ad91382ef48ae"}, 0x28, 0x4004050}, {&(0x7f0000000800)={0x27, r8, 0x1, 0x1, 0x9, 0xfb, "8dbef2b97532a014228eab65f1918b21c33e86175ad08b1473a9c3bd5f19252edd94a434a2ba260fc4f5d1dbb1174fcf573000ac39117a1001bf9d236205b2", 0x1d}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000880)="20e81f559f70dc4a181e1f7390225d8ebbb40211867dcc3b8ac9b3c417baca331e14df522c38a6cab854438f66d67ecd801670fd1091fb1b83be92aa78f7f1de1ab2a38e5ae2d923b4086293e6c1a46633f1bee5e0c1668625b3999293157c467d5943511fd0e33f95d4942530c7900154c094e63d28d07b6657244034d74186b23a16e7086f348ba150d158b074eaa2029c39f445f85c71308ac625889022ffefa4d58c", 0xa4}, {&(0x7f0000000940)="465612455ef4205bd8eec9644e3e427cbbeb2cfc3161c166830fbf6f230ec7281cff3e01b2e3fbefc04a9defbd2aea29ec40271d36fddb09e37ca51d7d9e28056033f8e1cce428a4adc8201a52bf82a6e9a21ecaf6463660c0f2abd1e5e5716c84969aecb564c60f812c37d635760599998a2d5d7819a6cf0a01688eda3760a47afb47c9d9ce3f5fd54942", 0x8b}, {&(0x7f0000000a00)="6173e7a2a83e60eb5b35ef95889a4b295d3fb01c923d1520d38e773245bb641efff9", 0x22}, {&(0x7f0000000a40)="743be6af1a07", 0x6}], 0x4, &(0x7f0000000ac0)={0x90, 0x117, 0x9b, "55178c742cb366d89cb0171f934d247350e72ebe772719d75d51ca1ad897991e625575e6a1d2b9578d8de37b5a6538332bf7028e2ee97777441c3222f3be942e650224533986d36f7e7f092a35238f22d8eca72174f1ea9cc1a9c58af9fb4ab9d73dcc860ada21568a22ccf651d7387ed403423ae59d870f32db6b9d781dfa"}, 0x90}, {&(0x7f0000000bc0)={0x27, r9, 0x0, 0x2, 0x91, 0x4, "61573a4420b0e4fde98d8d4f93c76182b30915f448ae9d01f0e8923431b1fa596d5e79917494dbb9b871ed1bd312f88e4ce9ebfe78e3a93fb3024b77af5f51", 0x2b}, 0x60, &(0x7f0000003040)=[{&(0x7f0000000c40)="d6bc430b5333d15a8414f2e4dafd2cb3732b6bc759eb0da255055aaef924a340d1fe9fbb87b815f2e10f5cc4508e8afd7c081874fcb4927a4295450f40", 0x3d}, {&(0x7f0000000c80)="5ee9c0740eaadefe69d0cbb486d41174e35c68a55856b6af14549e4f65eb20232dac3b08b119bb182800eaca2dd28c408977e26e124955e22b729e4f024b2220d79f7c2f2b96e381626631c300ad1c3f480259048350d191fa11cedcd87c3ac9fd5d562964d44f2a124c258c66e83d7a3bc74e4b8887da8f2f9c40bfb089b947a058d6dbf34c81268547cd1bfac59670cc38e5de21dc0f762841", 0x9a}, {&(0x7f0000000d40)="188c3ffd51cb4c19f0056334935ed200efd2ae0e7ee4dd74be56709513cf5ea47a11cda4e7368711606f94d4407cca93ab2e4e3f3e4b1e42b3d84c55cbdecbb3195d01fcb649fbe9ba5ff545fd43bb9a555992d65a98eae5e4f8c60e744c72e5241d012fc2c37d93fbae93ac490a81f6f041e4db58b676792da4293c8a930f150629280158881b0b30f367c633e7eb73d83b0852eb24622288770ce242d981644c34e1b66f19b42769d7e2c5a7cd03873676192365cd65a6a3da00b38459f0572e131f649b3bdfd7f3ce519a2446f26cfa5526701ed247140095f8f09c4620d720c07a46c1", 0xe5}, {&(0x7f0000000e40)="df11fd5b25ee17f72e5dbc8ada3d7463027f5d9122bfeb153a1df4f444dc8a246c800effa624ec49d6282031d7765d1f8816268b8f9886a9f71bd98d36f8a38fe7edb4aea1e05c282bd0ccb4c2b098de4ca48f45b93d665720fac116a0c1ff2757a820faf2cdceb3454e8eb2", 0x6c}, {&(0x7f0000000ec0)="5a634cd48921b7fc2d87712da4cee8e5d4d0e370a9b8b30074309ccd61815d1d528e45c1b2fdc30fe03a2e17a01e630aaa4b87293e2e6f6e0d41b99d546d1fe20718d3486d21e2e01017190c06f1a7ac1b377b591b3f062a10ee49b1eacee41669bae41a780bb60e2964d0d503e4d9db1085a144d07e38e0c468a3f67bcc4094368ea3e3a53974acdd8c1e83d3ac268361cf19bef9da6774f3646149f22830e372c1c23d70f974f1631a4e355c060a690a4783e2c3c3e5", 0xb7}, {&(0x7f0000000f80)="7a65f74d4860daf6fd7b1fcd83fd69839f257e8701da316fb32973b11cff6fe67156a1dc82802a69761c51ef6190e5e17370", 0x32}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="8cd1ada9c1b74b70ceb64f99c7e50babc13f8d0ef3a73b8cb0fa3aaa3e47713de51443de6f9b4cdbc908ea740281368892f9e3c9319a312b6c", 0x39}, {&(0x7f0000003000)="5795ac24cbf252909df112d9ad8e1ee7c78259b51f056c66", 0x18}], 0xa, &(0x7f0000003100)={0x80, 0x10f, 0x3, "aff44fe6dc944289b19faea1ea456876f42c21515bedc3420b4621c6553b17aa71c17a78d1f61da065e49edf4ff162f5cd75dae31c91086e7497c1c2ea726f352c60b2e2c88573fac51e2c0ac46a65945b30c615876dc0f49e16e90834061d144438e56213f54d5cc8d769"}, 0x80, 0x200440c0}, {&(0x7f0000003180)={0x27, 0x0, 0x0, 0x4, 0x6, 0x81, "d25837fc1e5b0cb3120deac57c414f725d9ec7508ea111608f4428adec4e12650ba7c969f73801cc31f9c6e9ebbac2663d1b3d2ff87c0d0854340f9b453082", 0x3}, 0x60, &(0x7f00000052c0)=[{&(0x7f0000003200)="0297026353e9ea53ce5a4c6d25271c0ea9975dcc4a91985286cdaa2b079ab589a761bd3724889a0f1c3fe93313fff472fb8d2a7632c7e18a7bf9cbd0aec1bf7efa7ed87cd140ac7ec2572c04a2ad3b40fcde3ca4e5df1cccc266660c8ffc", 0x5e}, {&(0x7f0000003280)='=', 0x1}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f00000042c0)="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", 0x1000}], 0x4, &(0x7f0000005300)={0x108, 0x29, 0x1, "a0bcaf1e10cdb63dc2f4bc26dd147af61ca350365a68d27cecc06bd88fcd32c68a129c4507cb1b4c0a22915fa34dd89160f65bdb9f00eca8963d0a281b42cb80a9eff85dc09960bcc86526bfaa7f262305912ed9199fb65ef639837cd25a38cab9b34cffd0802ddb180dc1cd189470d7bb24608f3946391aab69aa134dbb992c0e872fdbfbf8f4ea6a2b92e242159e1a816f8d1fad3b3437e192167b39dce84d665f2fc17f5025c9c307f322d7bdc39fc430191f8e977a71736dc26e361f3d395808f7ea7affad95c60553a4ffeb36e8c1fd7e60b84d49bde02a86dd990939e8a7d95a0b1ef4fa1748d202929dc570dd983284"}, 0x108, 0x40000c0}, {&(0x7f0000005440)={0x27, 0x0, 0x1, 0x6, 0xa, 0x7, "f7a8c35376efae0de4fff416829a8fa78f89c4c99d01c52a6e2e95eec7b15ec76b1735ea99a5443977ce614eb8fc3e95a6bca023a3a4714b78634381389281", 0xc}, 0x60, &(0x7f00000055c0)=[{&(0x7f00000054c0)="4fabdc84a4c41cee017b8dbf754512a4d251aecbcd19c781f7885b33912419a786cf0db090e41318268fc7f3a933f24a15640852855a40297f6eefe15e05690e", 0x40}, {&(0x7f0000005500)="8e28dcdc9233c08ba9bfc2ab7788dbac18c5f778e3fc7e74f3afc5f5278ceede957fe8c8a754e03f69e74df8220903bff58cceaaa0d56dbc0029b7322a3749aae4e7237ca893d3dd4301420be789423df575523143", 0x55}, {&(0x7f0000005580)="17ef91294899554a3cef092555ad1f27333761a6046cb06984e5d40ddb1f0192d867d9559c1d20a17e3e4762bbfe62bbdcf35788e3997d8d567265517909", 0x3e}], 0x3, &(0x7f0000005600)={0x98, 0x11, 0x6, "8f0cf20af5eb38d9337e7f5e86b37b579a78c600b81f67671bb379dba064fedffd6bfc4dffc3ff2f1b5520471ac7298fc7557b914f531e206ca0ee43d33d57620b23f09d3a53dbdd801c77671f2fca78f60ad2c2a5b5eaf83a62cc63b51a6648beddbcfbdaa6b99b115268df1ab130a6369daaaac8306364e3223ab0cf15c7c42ea1"}, 0x98, 0x48890}, {&(0x7f0000005700)={0x27, r10, 0x1, 0x7, 0x2, 0x0, "55985610f535df07bcb9f926650f5aea74283a7b7f413460bb121bb8c61049f458c4d3997426db3b0f0524113a1a7efa23351faaf0d2b8fbf70eef7dff0590", 0x2d}, 0x60, &(0x7f0000005780), 0x0, &(0x7f00000057c0)={0x30, 0x110, 0x9, "e88916c50b625ca6a351e1ebfb0ca8ff2432d7bbd7c256b25391f37d5779c24d"}, 0x30, 0x81}], 0x6, 0x200080c4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005980), 0x101000) getpeername$llc(r1, &(0x7f00000059c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000005a00)=0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000005a40)=[@in6={0xa, 0x4e20, 0xd, @mcast2, 0x5}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0xfffffffc, @mcast1, 0x3}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x1}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff8}, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}], 0xe8) cachestat(r1, &(0x7f0000005b40)={0x8}, &(0x7f0000005b80), 0x0) (async) sendmsg$tipc(r1, &(0x7f0000005d40)={&(0x7f0000005bc0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3}}, 0x10, &(0x7f0000005c80)=[{&(0x7f0000005c00)="4dd36667c92ae292469bcffbae6ab7e58646ef9c5564efaa05a6973fdf7d2ed4443e3a8230c66239779c2a30bdceed2f2c138f6f5f3a61ee5ab41aeafdb1486cf8c9378fced23237419be56a2f2d4275871a2aeeec953906282e437286a5d93589e2ae3c90ed1aa515f51ad9a0f2f3e2382e5eb2100638aa83863b", 0x7b}], 0x1, &(0x7f0000005cc0)="0cd81294dabd06c42edeec52204ed5e4efb0d51c8ca66300acb6ae0777564beaa11a5ef836fe5f9cd741ba521f4fb1edfdb61418414b26dac316d1795b684f3afdf1d076017754e535eba619a3b623c922de7ea94119448884a69ab2e2cbd786bb07c21d23bc41d3177ba29c208a29a6b554c41ab932d1fca1", 0x79, 0x4000}, 0x24048981) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005d80)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000005e00)={0x1, r11, 0x3, 0x3, 0x8001, 0x55, 0x5, 0xfffffffe, 0x2}) (async) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f0000005e40)={0xf, 0x9, 0x9}) 1.87015068s ago: executing program 0 (id=641): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x98, 0x1188, 0x1188, 0xffffffff, 0xffffffff, 0x1220, 0x1220, 0x1220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff00, 0xff000000, 'geneve1\x00', 'gre0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port0\x00', 0xa2, 0x11cfa, 0xff, 0xf2, 0x1, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.794300935s ago: executing program 1 (id=642): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.737183544s ago: executing program 0 (id=643): r0 = socket(0x10, 0x2, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000443a00fc0000000000000000000000000000fdff0200000000000000000000000000010200907800000000601800000000002dfe8000000000000000000000000a00000000000000000000fafb17c163a3040b7758ba1b00000000000000000000000000000000732ea60b8649cc3b769448b67e4cb7b457ebc6ea47811576ae57efe59d1d37daa6b2beb8f96664212e69cf1861102bf264cbd777d2672c72a7ac2fe8"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x2003fffe, 0x0, 0x4002, 0x0, 0x0, 0x100000}}) 1.687998241s ago: executing program 4 (id=644): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 1.57002726s ago: executing program 0 (id=645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x7, 0x1, 0x3, 0x2, '\x00', 0x6}, 0x3, 0x10, 0x8000, r1, 0x4, 0x20b, 'syz0\x00', &(0x7f0000000100)=['\x00', '\x00', '+\x00', 'mptcp_pm\x00'], 0xd}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cad7000000000000100000000000180060001000a0000001400040000000000000000000000ffffffffffff0800060003000000"], 0x3c}}, 0x0) 1.569649302s ago: executing program 1 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x42, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0xf61}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000440), 0x1000a) 1.545493644s ago: executing program 4 (id=647): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file1/../file0', [{}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '\\+!#@[/(@^9:&-'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647441a69f2c53e292fc6ef7e865696087d85c904e5c8d2ede01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb22972a800"/129}, 0xb5) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r1, 0xa7c, {0x2a00, 0x80010000, 0x0, 0x34c, 0x0, 0x0, 0x0, 0x0, 0x18, "fee8a2ab78fc5e3ed1e02000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000008300", [0x4, 0x3]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x9, &(0x7f0000000580)={0x0, 0x6263, 0x200, 0x3, 0x400000}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r1, r1], &(0x7f0000000880)}, 0xfe03) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r6 = socket(0x40000000015, 0x805, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r6, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) 1.445085697s ago: executing program 0 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private2, 0xc, 0x0, 0x0, 0x0, 0x6cae, 0x7ff}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r6, 0x11, 0x0, r8}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r9, 0x32}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x8) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000001340)) 966.238983ms ago: executing program 3 (id=649): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd720005100000020000000900010073797a300000000014000200"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 922.05664ms ago: executing program 4 (id=650): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000001800)}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x4b) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x4000094) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r7, 0x40026f34, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0xc) io_uring_enter(r8, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 158.221207ms ago: executing program 3 (id=651): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0300000003"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0300000003"], 0x50) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 0s ago: executing program 0 (id=652): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) kernel console output (not intermixed with test programs): v="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.942903][ T29] audit: type=1400 audit(1778662291.644:344): avc: denied { mount } for pid=6418 comm="syz.1.143" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.154261][ T5765] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.273566][ T6440] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 128.328969][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.335507][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.381044][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.392762][ T5825] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 128.395571][ T5765] usb 4-1: device descriptor read/8, error -71 [ 128.400337][ T5825] usb 2-1: can't read configurations, error -71 [ 128.533293][ T6445] netlink: 52 bytes leftover after parsing attributes in process `syz.0.150'. [ 128.570904][ T5765] usb usb4-port1: unable to enumerate USB device [ 129.138706][ T6448] syzkaller0: entered promiscuous mode [ 129.149578][ T29] audit: type=1400 audit(1778662293.844:345): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 129.163198][ T6448] syzkaller0: entered allmulticast mode [ 129.217191][ T6453] FAULT_INJECTION: forcing a failure. [ 129.217191][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.250295][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 129.250321][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.250332][ T6453] Call Trace: [ 129.250339][ T6453] [ 129.250346][ T6453] dump_stack_lvl+0x100/0x190 [ 129.250384][ T6453] should_fail_ex.cold+0x5/0xa [ 129.250410][ T6453] _copy_from_user+0x2e/0xd0 [ 129.250441][ T6453] video_usercopy+0xe74/0x1700 [ 129.250473][ T6453] ? __pfx___video_do_ioctl+0x10/0x10 [ 129.250502][ T6453] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.250533][ T6453] ? __pfx_video_usercopy+0x10/0x10 [ 129.250582][ T6453] v4l2_ioctl+0x1bd/0x250 [ 129.250608][ T6453] ? __pfx_v4l2_ioctl+0x10/0x10 [ 129.250635][ T6453] __x64_sys_ioctl+0x18e/0x210 [ 129.250658][ T6453] do_syscall_64+0x10b/0xf80 [ 129.250684][ T6453] ? clear_bhb_loop+0x40/0x90 [ 129.250710][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.250730][ T6453] RIP: 0033:0x7faeaa59ce59 [ 129.250752][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.250773][ T6453] RSP: 002b:00007faeab3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.250793][ T6453] RAX: ffffffffffffffda RBX: 00007faeaa815fa0 RCX: 00007faeaa59ce59 [ 129.250806][ T6453] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 129.250818][ T6453] RBP: 00007faeab3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 129.250830][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.250840][ T6453] R13: 00007faeaa816038 R14: 00007faeaa815fa0 R15: 00007ffeca6a2728 [ 129.250862][ T6453] [ 129.558092][ T6436] fuse: Bad value for 'fd' [ 129.564430][ T29] audit: type=1400 audit(1778662294.254:346): avc: denied { mounton } for pid=6432 comm="syz.4.147" path="/25/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.282119][ T29] audit: type=1400 audit(1778662298.954:347): avc: denied { ioctl } for pid=6480 comm="syz.0.157" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.564557][ T29] audit: type=1400 audit(1778662298.964:348): avc: denied { append } for pid=6480 comm="syz.0.157" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.594399][ T6502] ip6t_srh: unknown srh match flags FF3F [ 134.935039][ T6507] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 135.954584][ T6496] tipc: Enabling of bearer rejected, failed to enable media [ 136.249593][ T29] audit: type=1400 audit(1778662300.944:349): avc: denied { setopt } for pid=6511 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.867688][ T29] audit: type=1400 audit(1778662301.474:350): avc: denied { append } for pid=6511 comm="syz.2.162" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.274412][ T6529] Bluetooth: MGMT ver 1.23 [ 138.286282][ T29] audit: type=1400 audit(1778662302.974:351): avc: denied { bind } for pid=6521 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.346878][ T29] audit: type=1400 audit(1778662302.974:352): avc: denied { write } for pid=6521 comm="syz.3.164" path="socket:[11044]" dev="sockfs" ino=11044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.049851][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 141.073169][ T6550] Bluetooth: MGMT ver 1.23 [ 146.488204][ T29] audit: type=1400 audit(1778662311.184:353): avc: denied { setopt } for pid=6602 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.544191][ T6605] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 146.550821][ T6605] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.580665][ T6605] vhci_hcd vhci_hcd.0: Device attached [ 146.634788][ T6611] vhci_hcd vhci_hcd.0: port 0 already used [ 147.380715][ T24] usb 36-1: SetAddress Request (2) to port 0 [ 147.401290][ T24] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 147.813142][ T6607] vhci_hcd: connection reset by peer [ 147.833743][ T1323] vhci_hcd vhci_hcd.1: stop threads [ 147.844738][ T1323] vhci_hcd vhci_hcd.1: release socket [ 147.855144][ T1323] vhci_hcd vhci_hcd.1: disconnect device [ 147.987040][ T29] audit: type=1400 audit(1778662312.684:354): avc: denied { read } for pid=6630 comm="syz.2.188" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.629955][ T29] audit: type=1400 audit(1778662312.714:355): avc: denied { open } for pid=6630 comm="syz.2.188" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.701471][ T5724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.732733][ T29] audit: type=1400 audit(1778662312.714:356): avc: denied { map } for pid=6630 comm="syz.2.188" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 150.804334][ T5724] usb 1-1: device descriptor read/all, error -71 [ 152.564214][ T24] usb 36-1: device descriptor read/8, error -110 [ 152.885648][ T6655] lo speed is unknown, defaulting to 1000 [ 152.891854][ T6655] lo speed is unknown, defaulting to 1000 [ 152.899585][ T6655] lo speed is unknown, defaulting to 1000 [ 152.906347][ T6655] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 152.920803][ T6655] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 152.937740][ T6655] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 152.949513][ T6655] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.963473][ T6655] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.987619][ T6655] lo speed is unknown, defaulting to 1000 [ 152.994559][ T6655] lo speed is unknown, defaulting to 1000 [ 153.001266][ T6655] lo speed is unknown, defaulting to 1000 [ 153.007872][ T6655] lo speed is unknown, defaulting to 1000 [ 153.015388][ T6655] lo speed is unknown, defaulting to 1000 [ 153.036705][ T29] audit: type=1400 audit(1778662317.734:357): avc: denied { create } for pid=6664 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.089373][ T29] audit: type=1400 audit(1778662317.764:358): avc: denied { write } for pid=6664 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.191348][ T24] usb usb36-port1: attempt power cycle [ 153.272511][ T29] audit: type=1400 audit(1778662317.964:359): avc: denied { bind } for pid=6667 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.330212][ T6670] FAULT_INJECTION: forcing a failure. [ 153.330212][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.343403][ T29] audit: type=1400 audit(1778662318.014:360): avc: denied { listen } for pid=6667 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.343447][ T29] audit: type=1400 audit(1778662318.014:361): avc: denied { accept } for pid=6667 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.398076][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(full) [ 153.398102][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.398113][ T6670] Call Trace: [ 153.398119][ T6670] [ 153.398127][ T6670] dump_stack_lvl+0x100/0x190 [ 153.398154][ T6670] should_fail_ex.cold+0x5/0xa [ 153.398184][ T6670] _copy_from_user+0x2e/0xd0 [ 153.398215][ T6670] restore_sigcontext+0xcd/0x6a0 [ 153.398236][ T6670] ? __pfx_restore_sigcontext+0x10/0x10 [ 153.398274][ T6670] ? __pfx_restore_altstack+0x10/0x10 [ 153.398301][ T6670] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.398325][ T6670] ? lockdep_hardirqs_on+0x78/0x100 [ 153.398356][ T6670] __do_sys_rt_sigreturn+0x229/0x2c0 [ 153.398376][ T6670] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 153.398398][ T6670] ? rcu_is_watching+0x12/0xc0 [ 153.398430][ T6670] do_syscall_64+0x10b/0xf80 [ 153.398454][ T6670] ? clear_bhb_loop+0x40/0x90 [ 153.398482][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.398502][ T6670] RIP: 0033:0x7f451f13e1d9 [ 153.398519][ T6670] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 153.398537][ T6670] RSP: 002b:00007f45200e1340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 153.398554][ T6670] RAX: ffffffffffffffda RBX: 00007f451f415fa0 RCX: 00007f451f13e1d9 [ 153.398567][ T6670] RDX: 00007f45200e1340 RSI: 00007f45200e1470 RDI: 0000000000000021 [ 153.398578][ T6670] RBP: 00007f45200e2090 R08: 0000000000000001 R09: 0000000000000000 [ 153.398589][ T6670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 153.398600][ T6670] R13: 00007f451f416038 R14: 00007f451f415fa0 R15: 00007ffea7906ea8 [ 153.398623][ T6670] [ 153.761780][ T24] usb usb36-port1: unable to enumerate USB device [ 156.461838][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.675288][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 156.685083][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 156.707321][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.279761][ T9] usb 1-1: config 220 has no interface number 2 [ 157.288835][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.302383][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 157.309267][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 157.317436][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 157.328094][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.337464][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.346664][ T9] usb 1-1: Product: syz [ 157.351700][ T9] usb 1-1: Manufacturer: syz [ 157.356370][ T9] usb 1-1: SerialNumber: syz [ 157.419878][ T29] audit: type=1400 audit(1778662322.114:362): avc: denied { bind } for pid=6698 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.441572][ T6716] siw: device registration error -23 [ 157.603770][ T29] audit: type=1400 audit(1778662322.294:363): avc: denied { set_context_mgr } for pid=6717 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 157.663189][ T29] audit: type=1400 audit(1778662322.354:364): avc: denied { map } for pid=6717 comm="syz.2.208" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.717206][ T29] audit: type=1400 audit(1778662322.364:365): avc: denied { call } for pid=6717 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.764838][ T6727] tipc: Started in network mode [ 158.769836][ T6727] tipc: Node identity , cluster identity 4711 [ 158.776203][ T6727] tipc: Failed to obtain node identity [ 158.782497][ T6727] tipc: Enabling of bearer rejected, failed to enable media [ 158.813614][ T6727] ALSA: mixer_oss: invalid OSS volume '' [ 158.833926][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 158.847982][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 158.860043][ T29] audit: type=1400 audit(1778662323.554:366): avc: denied { relabelfrom } for pid=6717 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.885368][ T6725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.905006][ T9] usb 1-1: selecting invalid altsetting 0 [ 159.221429][ T29] audit: type=1400 audit(1778662323.584:367): avc: denied { relabelto } for pid=6717 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 159.254659][ T9] usb 1-1: selecting invalid altsetting 0 [ 159.303848][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 159.613593][ T9] usb 1-1: USB disconnect, device number 6 [ 160.359188][ T29] audit: type=1400 audit(1778662325.004:368): avc: denied { create } for pid=6742 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.540827][ T5802] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.760844][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 160.841414][ T5802] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 162.916823][ T5802] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 162.978680][ T5802] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.379958][ T29] audit: type=1400 audit(1778662328.074:369): avc: denied { write } for pid=6750 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.406678][ T5802] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 163.432595][ T5802] usb 3-1: string descriptor 0 read error: -71 [ 163.444526][ T5802] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 163.454726][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.462962][ T29] audit: type=1400 audit(1778662328.154:370): avc: denied { read } for pid=6750 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.578165][ T5802] usb 3-1: can't set config #155, error -71 [ 163.830490][ T5802] usb 3-1: USB disconnect, device number 2 [ 163.890227][ T29] audit: type=1400 audit(1778662328.584:371): avc: denied { listen } for pid=6755 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.905081][ T4929] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 164.914962][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 164.914994][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.915017][ T4929] Workqueue: hci0 hci_rx_work [ 164.915049][ T4929] Call Trace: [ 164.915056][ T4929] [ 164.915064][ T4929] dump_stack_lvl+0x100/0x190 [ 164.915096][ T4929] sysfs_warn_dup.cold+0x1c/0x28 [ 164.915131][ T4929] sysfs_create_dir_ns+0x24b/0x2b0 [ 164.915161][ T4929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 164.915201][ T4929] kobject_add_internal+0x2c8/0x930 [ 164.915242][ T4929] kobject_add+0x16a/0x1e0 [ 164.915262][ T4929] ? __pfx_kobject_add+0x10/0x10 [ 164.915280][ T4929] ? preempt_schedule_thunk+0x16/0x30 [ 164.915307][ T4929] ? kobject_put+0xb9/0x640 [ 164.915338][ T4929] ? _raw_spin_unlock+0x3e/0x50 [ 164.915372][ T4929] device_add+0x294/0x1950 [ 164.915398][ T4929] ? __pfx_dev_set_name+0x10/0x10 [ 164.915429][ T4929] ? __pfx_device_add+0x10/0x10 [ 164.915453][ T4929] ? mgmt_send_event_skb+0x2fb/0x460 [ 164.915499][ T4929] hci_conn_add_sysfs+0x1a3/0x260 [ 164.915536][ T4929] le_conn_complete_evt+0x11eb/0x1f60 [ 164.915576][ T4929] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 164.915614][ T4929] hci_le_conn_complete_evt+0x23c/0x3a0 [ 164.915644][ T4929] ? skb_pull_data+0x15f/0x1e0 [ 164.915676][ T4929] hci_le_meta_evt+0x34a/0x5f0 [ 164.915707][ T4929] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 164.915739][ T4929] hci_event_packet+0x51c/0xcd0 [ 164.915768][ T4929] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 164.915800][ T4929] ? __pfx_hci_event_packet+0x10/0x10 [ 164.915840][ T4929] hci_rx_work+0x451/0xfc0 [ 164.915870][ T4929] process_one_work+0xa0e/0x1980 [ 164.915914][ T4929] ? __pfx_process_one_work+0x10/0x10 [ 164.915953][ T4929] ? __pfx_hci_rx_work+0x10/0x10 [ 164.915983][ T4929] worker_thread+0x5ef/0xe50 [ 164.916027][ T4929] ? kthread+0x13a/0x450 [ 164.916053][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 164.916086][ T4929] kthread+0x370/0x450 [ 164.916113][ T4929] ? __pfx_kthread+0x10/0x10 [ 164.916141][ T4929] ret_from_fork+0x72b/0xd50 [ 164.916170][ T4929] ? __pfx_ret_from_fork+0x10/0x10 [ 164.916200][ T4929] ? __switch_to+0x800/0x1100 [ 164.916235][ T4929] ? __pfx_kthread+0x10/0x10 [ 164.916263][ T4929] ret_from_fork_asm+0x1a/0x30 [ 164.916311][ T4929] [ 164.916389][ T4929] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 165.715294][ T4929] Bluetooth: hci0: failed to register connection device [ 165.727881][ T29] audit: type=1400 audit(1778662329.584:372): avc: denied { ioctl } for pid=6756 comm="syz.0.218" path="socket:[12137]" dev="sockfs" ino=12137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.128492][ T29] audit: type=1400 audit(1778662330.824:373): avc: denied { setopt } for pid=6772 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.135890][ T6773] netlink: 108 bytes leftover after parsing attributes in process `syz.1.221'. [ 166.255610][ T6781] fuse: Bad value for 'fd' [ 167.763354][ T29] audit: type=1400 audit(1778662332.464:374): avc: denied { write } for pid=6791 comm="syz.3.225" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.794080][ T29] audit: type=1400 audit(1778662332.494:375): avc: denied { create } for pid=6791 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 168.021883][ T5765] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 168.342552][ T5765] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.372185][ T5765] usb 3-1: not running at top speed; connect to a high speed hub [ 168.386833][ T5765] usb 3-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 168.830106][ T5802] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.830160][ T5765] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.918295][ T5765] usb 3-1: config 1 interface 0 has no altsetting 0 [ 168.952024][ T5765] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 168.962599][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 168.964871][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.988260][ T5765] usb 3-1: Product: Ρƒ [ 168.992246][ T5802] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 168.992646][ T5765] usb 3-1: Manufacturer: λ²šιšΏα•šνž”κ²ε–±ΰΏ³δž΅θ§·μ—«θ―Έβ΄§ε†¨ε€„δ€—ζ‡Ÿμ“‰μ šγ›αξ½•η©’ο›ΉλΎ¬μ•Ύηˆ”ιšε’•β΄Ώμ·μŸΈκ―€ΰΉͺο‘¦μšα›™θ‰’ζ‚ŒλΊ€¬κ‘˜γ™§θΉ’ᄻ頳䦁ε―μ«­η¬§μ†·θŠ€θ°±ηŸα½η¨ΆεΏ³μˆ½ζ·›θ‹¨Ϊ½λ˜žΓͺθŸ­ζ£­κŒ‰ηΌο»΄βŒηŽ¨Ϊ‰βŸ›οžˆκ–¬γ ‡δ†½μ†‹θ—½μ’β·° [ 169.009817][ T5802] usb 1-1: config 0 has no interface number 0 [ 169.025681][ T5765] usb 3-1: SerialNumber: ᐁ [ 169.199745][ T5802] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 169.653724][ T5802] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.696515][ T5802] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 169.714060][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.728949][ T5765] cdc_ether 3-1:1.0: missing cdc ether descriptor [ 169.737966][ T5802] usb 1-1: Product: syz [ 169.744787][ T5765] usb 3-1: USB disconnect, device number 3 [ 169.749223][ T5802] usb 1-1: Manufacturer: syz [ 169.767513][ T5802] usb 1-1: SerialNumber: syz [ 169.812159][ T5802] usb 1-1: config 0 descriptor?? [ 169.831097][ T6801] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 170.365516][ T5802] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 170.404465][ T5802] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 170.721879][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 171.107892][ T6823] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.885078][ T6831] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 173.107666][ T29] audit: type=1400 audit(1778662337.804:376): avc: denied { ioctl } for pid=6833 comm="syz.4.235" path="socket:[12232]" dev="sockfs" ino=12232 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.229969][ T5802] usb 1-1: USB disconnect, device number 7 [ 173.366309][ T5802] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 173.405383][ T5802] cyberjack 1-1:0.69: device disconnected [ 173.524165][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.541945][ T6849] udevd[6849]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.542118][ T5825] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 173.680815][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.889147][ T5825] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 173.915472][ T5825] usb 4-1: config 0 has no interface number 0 [ 173.922372][ T5825] usb 4-1: config 0 interface 41 has no altsetting 0 [ 173.931156][ T5825] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 173.940425][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.954870][ T5825] usb 4-1: Product: syz [ 173.964861][ T5825] usb 4-1: Manufacturer: syz [ 173.971062][ T5825] usb 4-1: SerialNumber: syz [ 173.993570][ T5825] usb 4-1: config 0 descriptor?? [ 174.074498][ T24] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 174.082967][ T24] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 174.093867][ T24] usb 3-1: config 0 has no interface number 0 [ 174.100174][ T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 240, changing to 11 [ 174.113243][ T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 8404, setting to 1024 [ 174.125124][ T24] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.143658][ T24] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 174.153968][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.167096][ T24] usb 3-1: Product: syz [ 174.173134][ T24] usb 3-1: Manufacturer: syz [ 174.177988][ T24] usb 3-1: SerialNumber: syz [ 174.185962][ T24] usb 3-1: config 0 descriptor?? [ 174.256168][ T6860] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 174.270179][ T6860] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 174.412924][ T29] audit: type=1400 audit(1778662339.104:377): avc: denied { create } for pid=6845 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 174.449491][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.472550][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.495301][ T5825] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 174.524040][ T5825] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 174.557777][ T5825] usb 4-1: USB disconnect, device number 9 [ 174.594987][ T29] audit: type=1400 audit(1778662339.214:378): avc: denied { bind } for pid=6861 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.650675][ T29] audit: type=1400 audit(1778662339.234:379): avc: denied { setopt } for pid=6861 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.671069][ T29] audit: type=1400 audit(1778662339.234:380): avc: denied { ioctl } for pid=6861 comm="syz.1.242" path="socket:[12268]" dev="sockfs" ino=12268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.698058][ T29] audit: type=1400 audit(1778662339.244:381): avc: denied { getopt } for pid=6861 comm="syz.1.242" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.790686][ T5611] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.876839][ T29] audit: type=1400 audit(1778662339.574:382): avc: denied { create } for pid=6845 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.910734][ T29] audit: type=1400 audit(1778662339.604:383): avc: denied { ioctl } for pid=6845 comm="syz.2.238" path="socket:[12721]" dev="sockfs" ino=12721 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.995544][ T6862] dlm: no local IP address has been set [ 175.009109][ T6862] dlm: cannot start dlm midcomms -107 [ 175.045295][ T5611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.070332][ T5611] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 175.093703][ T5611] usb 2-1: can't read configurations, error -71 [ 175.300649][ T5622] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.721769][ T5802] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 175.956563][ T5802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.036134][ T5802] usb 4-1: config 194 has an invalid interface number: 4 but max is 0 [ 176.124189][ T5802] usb 4-1: config 194 has no interface number 0 [ 176.238493][ T5802] usb 4-1: config 194 interface 4 has no altsetting 0 [ 176.348632][ T5802] usb 4-1: string descriptor 0 read error: -22 [ 176.443676][ T5802] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 176.570275][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.193598][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 177.604466][ T5622] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 177.613981][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.622329][ T5622] usb 1-1: Product: syz [ 177.626894][ T5622] usb 1-1: Manufacturer: syz [ 177.631796][ T5622] usb 1-1: SerialNumber: syz [ 179.286319][ T24] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -110 [ 179.347831][ T5622] usb 1-1: invalid MIDI EP [ 179.365700][ T5622] usb 1-1: snd-bcd2000: error during probing [ 179.418725][ T5622] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 179.430964][ T6870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.431662][ T6886] netlink: 'syz.4.248': attribute type 21 has an invalid length. [ 179.448711][ T5622] usb 1-1: invalid MIDI EP [ 179.448741][ T5622] usb 1-1: snd-bcd2000: error during probing [ 179.449221][ T5622] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 179.683483][ T9] usb 4-1: USB disconnect, device number 10 [ 179.689912][ T29] audit: type=1400 audit(1778662344.384:384): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 179.690579][ T24] usb 3-1: USB disconnect, device number 4 [ 179.720767][ T6886] netlink: 'syz.4.248': attribute type 6 has an invalid length. [ 179.745409][ T6886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.248'. [ 179.847187][ T5622] usb 1-1: USB disconnect, device number 8 [ 180.078085][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.125692][ T29] audit: type=1400 audit(1778662344.824:385): avc: denied { lock } for pid=6891 comm="syz.3.249" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 180.749589][ T6910] FAULT_INJECTION: forcing a failure. [ 180.749589][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.762826][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(full) [ 180.762851][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.762857][ T6910] Call Trace: [ 180.762862][ T6910] [ 180.762867][ T6910] dump_stack_lvl+0x100/0x190 [ 180.762885][ T6910] should_fail_ex.cold+0x5/0xa [ 180.762902][ T6910] _copy_from_user+0x2e/0xd0 [ 180.762919][ T6910] copy_msghdr_from_user+0x9f/0x4f0 [ 180.762935][ T6910] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 180.762948][ T6910] ? __schedule+0x12a7/0x67a0 [ 180.762964][ T6910] ? sched_clock_cpu+0x6c/0x570 [ 180.762981][ T6910] ___sys_sendmsg+0x106/0x1e0 [ 180.762996][ T6910] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.763028][ T6910] __sys_sendmsg+0x170/0x220 [ 180.763039][ T6910] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.763049][ T6910] ? irqentry_exit+0x24d/0x7e0 [ 180.763073][ T6910] do_syscall_64+0x10b/0xf80 [ 180.763087][ T6910] ? clear_bhb_loop+0x40/0x90 [ 180.763105][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.763117][ T6910] RIP: 0033:0x7f523099ce59 [ 180.763127][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.763137][ T6910] RSP: 002b:00007f5231846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.763148][ T6910] RAX: ffffffffffffffda RBX: 00007f5230c16180 RCX: 00007f523099ce59 [ 180.763156][ T6910] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000000c [ 180.763162][ T6910] RBP: 00007f5231846090 R08: 0000000000000000 R09: 0000000000000000 [ 180.763169][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.763175][ T6910] R13: 00007f5230c16218 R14: 00007f5230c16180 R15: 00007ffd2b96cb98 [ 180.763189][ T6910] [ 181.649083][ T29] audit: type=1400 audit(1778662346.344:386): avc: denied { setcurrent } for pid=6914 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.674087][ T6918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.705015][ T6916] netlink: 56 bytes leftover after parsing attributes in process `syz.2.255'. [ 181.706182][ T29] audit: type=1401 audit(1778662346.384:387): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 182.060697][ T6923] blktrace: Concurrent blktraces are not allowed on loop8 [ 182.541173][ T5802] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.643674][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.117500][ T5802] usb 1-1: device descriptor read/64, error -71 [ 183.170758][ T5611] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.193985][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.221186][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 183.248744][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.266127][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.288498][ T24] usb 4-1: config 0 descriptor?? [ 183.340804][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 183.370769][ T5802] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.413685][ T5611] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 183.444909][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.473616][ T5611] usb 3-1: Product: syz [ 183.490707][ T5611] usb 3-1: Manufacturer: syz [ 183.501773][ T5611] usb 3-1: SerialNumber: syz [ 183.546178][ T24] usb 4-1: string descriptor 0 read error: -71 [ 183.552860][ T5802] usb 1-1: device descriptor read/64, error -71 [ 183.562643][ T5611] usb 3-1: config 0 descriptor?? [ 183.577922][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 183.605255][ T24] usb 4-1: USB disconnect, device number 11 [ 183.681828][ T5802] usb usb1-port1: attempt power cycle [ 183.688401][ T5611] as10x_usb: device has been detected [ 183.709044][ T5611] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 183.754673][ T5611] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 183.991007][ T29] audit: type=1400 audit(1778662348.664:388): avc: denied { firmware_load } for pid=5611 comm="kworker/1:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 183.996867][ T5611] as10x_usb: error during firmware upload part1 [ 184.108193][ T5611] Registered device Sky IT Digital Key (green led) [ 184.115754][ T5802] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.184367][ T5611] usb 3-1: USB disconnect, device number 5 [ 184.258147][ T5802] usb 1-1: device descriptor read/8, error -71 [ 184.662577][ T5802] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.735620][ T5611] Unregistered device Sky IT Digital Key (green led) [ 184.742063][ T5611] as10x_usb: device has been disconnected [ 184.783569][ T5802] usb 1-1: device descriptor read/8, error -71 [ 184.942219][ T5802] usb usb1-port1: unable to enumerate USB device [ 185.365598][ T29] audit: type=1400 audit(1778662350.054:389): avc: denied { shutdown } for pid=6955 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.611281][ T29] audit: type=1400 audit(1778662350.284:390): avc: denied { map } for pid=6961 comm="syz.4.269" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 185.749270][ T29] audit: type=1400 audit(1778662350.294:391): avc: denied { execute } for pid=6961 comm="syz.4.269" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 186.058924][ T29] audit: type=1400 audit(1778662350.714:392): avc: denied { write } for pid=6961 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.380429][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 186.543383][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 187.025201][ T29] audit: type=1400 audit(1778662351.714:393): avc: denied { bind } for pid=6979 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.867838][ T29] audit: type=1400 audit(1778662353.564:394): avc: denied { mount } for pid=7001 comm="syz.2.276" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 188.897346][ T5807] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 188.923979][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.958210][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.099611][ T5807] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 189.365579][ T5807] usb 5-1: USB disconnect, device number 7 [ 189.388543][ T7008] netlink: 'syz.1.277': attribute type 2 has an invalid length. [ 189.630870][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.644706][ T29] audit: type=1400 audit(1778662354.324:395): avc: denied { listen } for pid=7007 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.988404][ T5807] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.030692][ T29] audit: type=1400 audit(1778662354.324:396): avc: denied { getopt } for pid=7007 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.052183][ T29] audit: type=1400 audit(1778662354.414:397): avc: denied { accept } for pid=7007 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.073309][ T29] audit: type=1400 audit(1778662354.424:398): avc: denied { ioctl } for pid=7007 comm="syz.1.277" path="socket:[13515]" dev="sockfs" ino=13515 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.110630][ T5825] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.136681][ T5825] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.162797][ T5825] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.181093][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.213766][ T7006] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 190.383589][ T5825] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.044465][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 191.051674][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 191.058362][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 191.065528][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 192.242192][ T5825] usb 4-1: USB disconnect, device number 12 [ 193.964051][ T29] audit: type=1400 audit(1778662358.664:399): avc: denied { getopt } for pid=7037 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.224047][ T29] audit: type=1400 audit(1778662359.924:400): avc: denied { create } for pid=7037 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 195.372850][ T7053] infiniband syz1: set active [ 195.378263][ T7053] infiniband syz1: added team_slave_0 [ 195.397814][ T7053] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 195.412941][ T7053] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 195.430202][ T7053] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 195.465701][ T7053] RDS/IB: syz1: added [ 195.470009][ T7053] smc: adding ib device syz1 with port count 1 [ 195.476327][ T7053] smc: ib device syz1 port 1 has no pnetid [ 196.159686][ T29] audit: type=1400 audit(1778662360.854:401): avc: denied { search } for pid=7059 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.271690][ T29] audit: type=1400 audit(1778662360.854:402): avc: denied { search } for pid=7059 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.320177][ T29] audit: type=1400 audit(1778662360.854:403): avc: denied { search } for pid=7059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.129760][ T29] audit: type=1400 audit(1778662360.854:404): avc: denied { search } for pid=7059 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.390502][ T29] audit: type=1400 audit(1778662360.934:405): avc: denied { read } for pid=7062 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.416200][ T29] audit: type=1400 audit(1778662360.934:406): avc: denied { read open } for pid=7062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.442413][ T29] audit: type=1400 audit(1778662360.934:407): avc: denied { getattr } for pid=7062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.468843][ T29] audit: type=1400 audit(1778662360.944:408): avc: denied { getattr } for pid=7062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 198.597021][ T7080] netlink: 76 bytes leftover after parsing attributes in process `syz.0.294'. [ 198.710706][ T5724] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.787208][ T7086] netlink: 3 bytes leftover after parsing attributes in process `syz.2.295'. [ 198.881317][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 199.011954][ T5724] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 199.021980][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.042771][ T5724] usb 4-1: Product: syz [ 199.047039][ T5724] usb 4-1: Manufacturer: syz [ 199.053004][ T5724] usb 4-1: SerialNumber: syz [ 199.057038][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 199.059948][ T5724] usb 4-1: config 0 descriptor?? [ 199.447055][ T5724] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 199.532066][ T5724] usb write operation failed. (-71) [ 199.599477][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 199.599492][ T29] audit: type=1400 audit(1778662364.294:422): avc: denied { setattr } for pid=7096 comm="syz.1.297" name="NETLINK" dev="sockfs" ino=13189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.709121][ T5724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.748833][ T5724] dvbdev: DVB: registering new adapter (Terratec H7) [ 199.809164][ T5724] usb 4-1: media controller created [ 199.939298][ T5724] usb read operation failed. (-71) [ 200.002650][ T5724] usb write operation failed. (-71) [ 200.229063][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 201.010619][ T7126] netlink: 52 bytes leftover after parsing attributes in process `syz.4.300'. [ 201.157497][ T5724] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 201.173421][ T5724] usb 4-1: USB disconnect, device number 13 [ 202.527791][ T29] audit: type=1400 audit(1778662367.214:423): avc: denied { write } for pid=7099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.178546][ T29] audit: type=1400 audit(1778662368.874:424): avc: denied { write } for pid=7145 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.369658][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 204.400535][ T7161] syzkaller0: entered promiscuous mode [ 204.402199][ T29] audit: type=1400 audit(1778662369.104:425): avc: denied { write } for pid=7156 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 204.426633][ T7161] syzkaller0: entered allmulticast mode [ 204.532505][ T5622] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 204.573721][ T7164] FAULT_INJECTION: forcing a failure. [ 204.573721][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 204.606438][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(full) [ 204.606476][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.606488][ T7164] Call Trace: [ 204.606495][ T7164] [ 204.606503][ T7164] dump_stack_lvl+0x100/0x190 [ 204.606534][ T7164] should_fail_ex.cold+0x5/0xa [ 204.606564][ T7164] ? __pfx_cgroup_show_path+0x10/0x10 [ 204.606592][ T7164] should_failslab+0xc2/0x120 [ 204.606614][ T7164] ? __pfx_cgroup_show_path+0x10/0x10 [ 204.606639][ T7164] __kmalloc_cache_noprof+0x7a/0x6f0 [ 204.606666][ T7164] ? cgroup_show_path+0xb2/0x730 [ 204.606692][ T7164] ? find_held_lock+0x2b/0x80 [ 204.606714][ T7164] ? __pfx_cgroup_show_path+0x10/0x10 [ 204.606740][ T7164] cgroup_show_path+0xb2/0x730 [ 204.606770][ T7164] ? __pfx_cgroup_show_path+0x10/0x10 [ 204.606796][ T7164] kernfs_sop_show_path+0xe9/0x160 [ 204.606821][ T7164] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 204.606855][ T7164] show_path+0x9e/0x100 [ 204.606875][ T7164] show_mountinfo+0x1d8/0x820 [ 204.606902][ T7164] ? __pfx_show_mountinfo+0x10/0x10 [ 204.606927][ T7164] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 204.606966][ T7164] traverse.part.0.constprop.0+0x107/0x650 [ 204.607002][ T7164] seq_lseek+0x2fb/0x430 [ 204.607032][ T7164] ksys_lseek+0xf3/0x1b0 [ 204.607056][ T7164] do_syscall_64+0x10b/0xf80 [ 204.607082][ T7164] ? clear_bhb_loop+0x40/0x90 [ 204.607108][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.607128][ T7164] RIP: 0033:0x7f609399ce59 [ 204.607145][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.607162][ T7164] RSP: 002b:00007f60947de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 204.607182][ T7164] RAX: ffffffffffffffda RBX: 00007f6093c15fa0 RCX: 00007f609399ce59 [ 204.607195][ T7164] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 204.607207][ T7164] RBP: 00007f60947de090 R08: 0000000000000000 R09: 0000000000000000 [ 204.607219][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.607232][ T7164] R13: 00007f6093c16038 R14: 00007f6093c15fa0 R15: 00007ffd6ba932a8 [ 204.607262][ T7164] [ 204.710634][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 204.890386][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 204.976918][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.988757][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.014937][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.053340][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.062053][ T5622] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.084868][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.171163][ T5622] usb 1-1: config 0 descriptor?? [ 205.703416][ T29] audit: type=1400 audit(1778662370.384:426): avc: denied { bind } for pid=7154 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.926525][ T5622] usbhid 1-1:0.0: can't add hid device: -71 [ 206.283742][ T5622] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 206.310516][ T5622] usb 1-1: USB disconnect, device number 13 [ 206.415069][ T29] audit: type=1400 audit(1778662370.384:427): avc: denied { setopt } for pid=7154 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.644501][ T29] audit: type=1400 audit(1778662370.384:428): avc: denied { write } for pid=7154 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.360585][ T7198] overlayfs: missing 'lowerdir' [ 207.439917][ T29] audit: type=1400 audit(1778662372.104:429): avc: denied { write } for pid=7165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.243638][ T29] audit: type=1400 audit(1778662373.944:430): avc: denied { write } for pid=7210 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.265576][ T7221] syzkaller0: entered promiscuous mode [ 209.279600][ T7221] syzkaller0: entered allmulticast mode [ 209.357929][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 211.063065][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 211.092263][ T7247] netlink: 64 bytes leftover after parsing attributes in process `syz.4.328'. [ 211.247789][ T5611] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.356817][ T29] audit: type=1400 audit(1778662376.054:431): avc: denied { write } for pid=7228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.397885][ T7257] xt_connbytes: Forcing CT accounting to be enabled [ 211.405023][ T7257] Cannot find set identified by id 0 to match [ 211.420648][ T5611] usb 2-1: Using ep0 maxpacket: 16 [ 211.434787][ T5611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.451198][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.491357][ T5611] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 211.501075][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.545345][ T5611] usb 2-1: Product: syz [ 211.561209][ T5611] usb 2-1: Manufacturer: syz [ 211.582991][ T5611] usb 2-1: SerialNumber: syz [ 211.602402][ T29] audit: type=1400 audit(1778662376.294:432): avc: denied { write } for pid=7263 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.637013][ T5611] usb 2-1: config 0 descriptor?? [ 211.651305][ T5611] appledisplay 2-1:0.0: Could not find int-in endpoint [ 211.659247][ T5611] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 211.812347][ T29] audit: type=1400 audit(1778662376.514:433): avc: denied { read } for pid=7272 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.850660][ T5622] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 211.874052][ T5611] usb 2-1: USB disconnect, device number 9 [ 212.017234][ T5622] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.042117][ T5622] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.071982][ T5622] usb 5-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 212.087383][ T5622] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 212.102147][ T5622] usb 5-1: Product: syz [ 212.108134][ T5622] usb 5-1: Manufacturer: syz [ 212.142936][ T5622] hub 5-1:4.0: bad descriptor, ignoring hub [ 212.163656][ T5622] hub 5-1:4.0: probe with driver hub failed with error -5 [ 212.197758][ T5622] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 212.258290][ T29] audit: type=1400 audit(1778662376.954:434): avc: denied { write } for pid=7274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.349762][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.369509][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.396902][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.412171][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.429233][ T29] audit: type=1400 audit(1778662377.124:435): avc: denied { write } for pid=7288 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.467048][ T5611] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.641067][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 212.706556][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.793349][ T5611] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.848697][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.905381][ T5611] usb 4-1: config 0 descriptor?? [ 213.032259][ T5622] usb 5-1: USB disconnect, device number 9 [ 214.091433][ T5611] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 214.232676][ T7311] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 214.365599][ T29] audit: type=1400 audit(1778662379.064:436): avc: denied { write } for pid=7293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.396451][ T5611] usb 4-1: USB disconnect, device number 14 [ 214.626336][ T7328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.665027][ T29] audit: type=1400 audit(1778662379.364:437): avc: denied { write } for pid=7326 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.849607][ T7328] blktrace: Concurrent blktraces are not allowed on loop0 [ 215.140746][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.342022][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.381227][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.408922][ T9] usb 5-1: Product: syz [ 215.428643][ T7342] netlink: 512 bytes leftover after parsing attributes in process `syz.1.346'. [ 215.439763][ T9] usb 5-1: Manufacturer: syz [ 215.445137][ T9] usb 5-1: SerialNumber: syz [ 215.449994][ T7342] FAULT_INJECTION: forcing a failure. [ 215.449994][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.499976][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.1.346 Not tainted syzkaller #0 PREEMPT(full) [ 215.500007][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.500018][ T7342] Call Trace: [ 215.500024][ T7342] [ 215.500032][ T7342] dump_stack_lvl+0x100/0x190 [ 215.500062][ T7342] should_fail_ex.cold+0x5/0xa [ 215.500092][ T7342] _copy_from_user+0x2e/0xd0 [ 215.500121][ T7342] kstrtouint_from_user+0xd6/0x1d0 [ 215.500144][ T7342] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 215.500165][ T7342] ? __lock_acquire+0x4a5/0x2630 [ 215.500196][ T7342] ? lock_acquire+0x1b1/0x370 [ 215.500224][ T7342] proc_fail_nth_write+0x83/0x220 [ 215.500248][ T7342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.500279][ T7342] vfs_write+0x2aa/0x1070 [ 215.500302][ T7342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.500326][ T7342] ? __pfx_vfs_write+0x10/0x10 [ 215.500346][ T7342] ? __fget_files+0x215/0x3d0 [ 215.500376][ T7342] ? __fget_files+0x21f/0x3d0 [ 215.500406][ T7342] ksys_write+0x12a/0x250 [ 215.500428][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 215.500452][ T7342] ? rcu_is_watching+0x12/0xc0 [ 215.500487][ T7342] do_syscall_64+0x10b/0xf80 [ 215.500515][ T7342] ? clear_bhb_loop+0x40/0x90 [ 215.500541][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.500563][ T7342] RIP: 0033:0x7f523095d68e [ 215.500579][ T7342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.500598][ T7342] RSP: 002b:00007f5231887fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.500618][ T7342] RAX: ffffffffffffffda RBX: 00007f52318886c0 RCX: 00007f523095d68e [ 215.500631][ T7342] RDX: 0000000000000001 RSI: 00007f52318880a0 RDI: 0000000000000003 [ 215.500643][ T7342] RBP: 00007f5231888090 R08: 0000000000000000 R09: 0000000000000000 [ 215.500662][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.500673][ T7342] R13: 00007f5230c16038 R14: 00007f5230c15fa0 R15: 00007ffd2b96cb98 [ 215.500704][ T7342] [ 215.980941][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 216.002798][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 216.754232][ T7358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.032389][ T7362] blktrace: Concurrent blktraces are not allowed on loop0 [ 217.193693][ T5825] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 217.295529][ T7373] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 217.364886][ T5825] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 217.376847][ T5825] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.407850][ T5825] usb 2-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 217.419041][ T5825] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 217.427537][ T5825] usb 2-1: Product: syz [ 217.432592][ T5825] usb 2-1: Manufacturer: syz [ 217.447095][ T5825] hub 2-1:4.0: bad descriptor, ignoring hub [ 217.453583][ T5825] hub 2-1:4.0: probe with driver hub failed with error -5 [ 217.462426][ T5825] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 217.550648][ T5611] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.608514][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 217.673379][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.748538][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.815630][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.834464][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.637299][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 218.651941][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 218.671406][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.676524][ T7383] netlink: 168 bytes leftover after parsing attributes in process `syz.0.356'. [ 218.693364][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.702523][ T5622] usb 2-1: USB disconnect, device number 10 [ 218.710608][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 218.717378][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.744724][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 218.746234][ T5611] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.786669][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.866673][ T5611] usb 4-1: config 0 descriptor?? [ 218.909935][ T9] usb 5-1: USB disconnect, device number 10 [ 219.200690][ T5825] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.397708][ T5611] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 221.530681][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 221.579952][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.619442][ T5825] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.651585][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.687400][ T5825] usb 1-1: config 0 descriptor?? [ 221.748577][ T5611] usb 4-1: USB disconnect, device number 15 [ 222.546679][ T5825] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 223.702874][ T7416] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 223.724064][ T5825] usb 1-1: USB disconnect, device number 14 [ 223.864098][ T7435] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 224.410493][ T7436] hub 1-0:1.0: USB hub found [ 224.411004][ T5611] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 224.418958][ T7436] hub 1-0:1.0: 1 port detected [ 225.028139][ T5611] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 225.038475][ T5611] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.054392][ T5611] usb 3-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 225.063806][ T5611] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 225.073748][ T5611] usb 3-1: Product: syz [ 225.092631][ T5611] usb 3-1: Manufacturer: syz [ 225.118198][ T5611] hub 3-1:4.0: bad descriptor, ignoring hub [ 225.143314][ T5611] hub 3-1:4.0: probe with driver hub failed with error -5 [ 225.196788][ T5611] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 225.356407][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.410292][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.430400][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.849098][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.270670][ T5724] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 227.389843][ T5622] usb 3-1: USB disconnect, device number 6 [ 227.421155][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 227.733903][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.968332][ T5724] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 228.132857][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.431960][ T5724] usb 4-1: config 0 descriptor?? [ 228.558459][ T29] audit: type=1400 audit(1778662393.204:438): avc: denied { connect } for pid=7476 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.800760][ T5622] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 228.993334][ T5622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.071189][ T5724] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 229.090986][ T5622] usb 2-1: not running at top speed; connect to a high speed hub [ 229.130001][ T5622] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 229.145348][ T5622] usb 2-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.175131][ T5622] usb 2-1: config 1 interface 0 has no altsetting 0 [ 229.206331][ T5622] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 229.246431][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.262326][ T5622] usb 2-1: Product: Ρƒ [ 229.266489][ T5622] usb 2-1: Manufacturer: λ²šιšΏα•šνž”κ²ε–±ΰΏ³δž΅θ§·μ—«θ―Έβ΄§ε†¨ε€„δ€—ζ‡Ÿμ“‰μ šγ›αξ½•η©’ο›ΉλΎ¬μ•Ύηˆ”ιšε’•β΄Ώμ·μŸΈκ―€ΰΉͺο‘¦μšα›™θ‰’ζ‚ŒλΊ€¬κ‘˜γ™§θΉ’ᄻ頳䦁ε―μ«­η¬§μ†·θŠ€θ°±ηŸα½η¨ΆεΏ³μˆ½ζ·›θ‹¨Ϊ½λ˜žΓͺθŸ­ζ£­κŒ‰ηΌο»΄βŒηŽ¨Ϊ‰βŸ›οžˆκ–¬γ ‡δ†½μ†‹θ—½μ’β·° [ 229.304136][ T5622] usb 2-1: SerialNumber: ᐁ [ 230.352429][ T5724] usb 4-1: USB disconnect, device number 16 [ 230.436030][ T29] audit: type=1400 audit(1778662395.134:439): avc: denied { create } for pid=7496 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.458450][ T29] audit: type=1400 audit(1778662395.154:440): avc: denied { ioctl } for pid=7496 comm="syz.2.386" path="socket:[14898]" dev="sockfs" ino=14898 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.841464][ T5622] cdc_ether 2-1:1.0: missing cdc ether descriptor [ 231.191035][ T5622] usb 2-1: USB disconnect, device number 11 [ 231.490300][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 231.528843][ T7499] nbd: socks must be embedded in a SOCK_ITEM attr [ 232.027505][ T5631] udevd[5631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.043388][ T7498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.054993][ T5638] udevd[5638]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.082784][ T7498] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 232.117368][ T7498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.123807][ T7498] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 232.134407][ T7498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.144917][ T7498] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 232.168859][ T7498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.179809][ T7498] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 232.375442][ T5611] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 232.891477][ T5611] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 232.931905][ T5611] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.970825][ T29] audit: type=1400 audit(1778662397.614:441): avc: denied { name_connect } for pid=7526 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 233.116083][ T29] audit: type=1400 audit(1778662397.804:442): avc: denied { listen } for pid=7526 comm="syz.2.393" laddr=127.0.0.1 lport=42194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.281929][ T29] audit: type=1400 audit(1778662397.934:443): avc: denied { accept } for pid=7526 comm="syz.2.393" laddr=127.0.0.1 lport=42194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.454883][ T29] audit: type=1400 audit(1778662398.014:444): avc: denied { ioctl } for pid=7526 comm="syz.2.393" path="socket:[15985]" dev="sockfs" ino=15985 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.607480][ T5611] usb 5-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 233.617039][ T5611] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.625808][ T5611] usb 5-1: Product: syz [ 233.630014][ T5611] usb 5-1: Manufacturer: syz [ 233.688585][ T5611] hub 5-1:4.0: bad descriptor, ignoring hub [ 233.695963][ T5611] hub 5-1:4.0: probe with driver hub failed with error -5 [ 233.705388][ T5611] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 233.749375][ T7535] capability: warning: `syz.0.396' uses 32-bit capabilities (legacy support in use) [ 233.855803][ T7524] uprobe: syz.3.392:7524 failed to unregister, leaking uprobe [ 233.878844][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.889316][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.899385][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.919578][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.298556][ T29] audit: type=1400 audit(1778662399.994:445): avc: denied { bind } for pid=7550 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.305924][ T7551] comedi comedi3: comedi_parport: I/O port conflict (0x8000078,3) [ 235.321367][ T9] usb 5-1: USB disconnect, device number 11 [ 235.337502][ T29] audit: type=1400 audit(1778662399.994:446): avc: denied { connect } for pid=7550 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.690359][ T7564] FAULT_INJECTION: forcing a failure. [ 235.690359][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.703680][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.2.403 Not tainted syzkaller #0 PREEMPT(full) [ 235.703697][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.703704][ T7564] Call Trace: [ 235.703708][ T7564] [ 235.703713][ T7564] dump_stack_lvl+0x100/0x190 [ 235.703732][ T7564] should_fail_ex.cold+0x5/0xa [ 235.703749][ T7564] _copy_to_user+0x32/0xd0 [ 235.703767][ T7564] simple_read_from_buffer+0xcb/0x170 [ 235.703783][ T7564] proc_fail_nth_read+0x1af/0x230 [ 235.703796][ T7564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.703809][ T7564] ? rw_verify_area+0xce/0x6d0 [ 235.703820][ T7564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.703832][ T7564] vfs_read+0x1e4/0xb30 [ 235.703847][ T7564] ? __pfx_vfs_read+0x10/0x10 [ 235.703858][ T7564] ? __fget_files+0x215/0x3d0 [ 235.703875][ T7564] ? __fget_files+0x21f/0x3d0 [ 235.703893][ T7564] ksys_read+0x12a/0x250 [ 235.703905][ T7564] ? __pfx_ksys_read+0x10/0x10 [ 235.703918][ T7564] ? rcu_is_watching+0x12/0xc0 [ 235.703938][ T7564] do_syscall_64+0x10b/0xf80 [ 235.703953][ T7564] ? clear_bhb_loop+0x40/0x90 [ 235.703967][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.703978][ T7564] RIP: 0033:0x7f451f15d68e [ 235.703989][ T7564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.704000][ T7564] RSP: 002b:00007f45200e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.704011][ T7564] RAX: ffffffffffffffda RBX: 00007f45200e26c0 RCX: 00007f451f15d68e [ 235.704019][ T7564] RDX: 000000000000000f RSI: 00007f45200e20a0 RDI: 0000000000000005 [ 235.704025][ T7564] RBP: 00007f45200e2090 R08: 0000000000000000 R09: 0000000000000000 [ 235.704032][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.704038][ T7564] R13: 00007f451f416038 R14: 00007f451f415fa0 R15: 00007ffea7906ea8 [ 235.704054][ T7564] [ 236.705110][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 237.568903][ T29] audit: type=1400 audit(1778662402.264:447): avc: denied { create } for pid=7588 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 237.662518][ T29] audit: type=1400 audit(1778662402.354:448): avc: denied { sys_admin } for pid=7588 comm="syz.1.412" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 238.150914][ T5807] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 238.440669][ T5807] usb 3-1: Invalid ep0 maxpacket: 32 [ 238.613804][ T5807] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 238.665069][ T7587] FAULT_INJECTION: forcing a failure. [ 238.665069][ T7587] name failslab, interval 1, probability 0, space 0, times 0 [ 238.701595][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 238.701625][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.701637][ T7587] Call Trace: [ 238.701645][ T7587] [ 238.701653][ T7587] dump_stack_lvl+0x100/0x190 [ 238.701685][ T7587] should_fail_ex.cold+0x5/0xa [ 238.701715][ T7587] should_failslab+0xc2/0x120 [ 238.701739][ T7587] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 238.701770][ T7587] ? do_getname+0x35/0x390 [ 238.701799][ T7587] ? css_rstat_updated+0x1ce/0x5a0 [ 238.701826][ T7587] ? __pfx___handle_mm_fault+0x10/0x10 [ 238.701860][ T7587] do_getname+0x35/0x390 [ 238.701894][ T7587] do_sys_openat2+0xc5/0x1e0 [ 238.701925][ T7587] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.701966][ T7587] __x64_sys_openat+0x12d/0x210 [ 238.701997][ T7587] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.702033][ T7587] ? rcu_is_watching+0x12/0xc0 [ 238.702069][ T7587] do_syscall_64+0x10b/0xf80 [ 238.702095][ T7587] ? clear_bhb_loop+0x40/0x90 [ 238.702120][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.702142][ T7587] RIP: 0033:0x7faeaa55d68e [ 238.702159][ T7587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.702179][ T7587] RSP: 002b:00007faeab3ccea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.702199][ T7587] RAX: ffffffffffffffda RBX: 00007faeab3cf6c0 RCX: 00007faeaa55d68e [ 238.702213][ T7587] RDX: 0000000000000002 RSI: 00007faeaa63210a RDI: ffffffffffffff9c [ 238.702226][ T7587] RBP: 00007faeab3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 238.702239][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 238.702251][ T7587] R13: 0000200000000000 R14: 0000000000000003 R15: 00007ffeca6a2728 [ 238.702280][ T7587] [ 239.140879][ T29] audit: type=1400 audit(1778662403.834:449): avc: denied { execute } for pid=7609 comm="syz.4.418" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 239.181828][ T5807] usb 3-1: Invalid ep0 maxpacket: 32 [ 239.188137][ T5807] usb usb3-port1: attempt power cycle [ 239.340661][ T5802] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 239.505239][ T5802] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 239.599130][ T5807] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 239.623744][ T5802] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.647068][ T5807] usb 3-1: Invalid ep0 maxpacket: 32 [ 240.115788][ T5802] usb 2-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 240.128175][ T5802] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 240.136601][ T5802] usb 2-1: Product: syz [ 240.140894][ T5802] usb 2-1: Manufacturer: syz [ 240.150395][ T5802] hub 2-1:4.0: bad descriptor, ignoring hub [ 240.156567][ T5802] hub 2-1:4.0: probe with driver hub failed with error -5 [ 240.166553][ T5802] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 240.251025][ T5807] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 240.282030][ T5807] usb 3-1: Invalid ep0 maxpacket: 32 [ 240.289690][ T5807] usb usb3-port1: unable to enumerate USB device [ 240.468574][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.497870][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.544117][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.566477][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.776591][ T5807] usb 2-1: USB disconnect, device number 12 [ 242.283587][ T29] audit: type=1400 audit(1778662406.984:450): avc: denied { watch } for pid=7643 comm="syz.2.428" path="/85" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.376151][ T29] audit: type=1400 audit(1778662406.984:451): avc: denied { watch_sb watch_reads } for pid=7643 comm="syz.2.428" path="/85" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.530314][ T29] audit: type=1400 audit(1778662409.224:452): avc: denied { accept } for pid=7674 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.552136][ T29] audit: type=1400 audit(1778662409.224:453): avc: denied { validate_trans } for pid=7673 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 244.580725][ T29] audit: type=1400 audit(1778662409.264:454): avc: denied { lock } for pid=7674 comm="syz.3.438" path="socket:[15360]" dev="sockfs" ino=15360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.605952][ T29] audit: type=1400 audit(1778662409.304:455): avc: denied { ioctl } for pid=7674 comm="syz.3.438" path="socket:[15360]" dev="sockfs" ino=15360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.744053][ T29] audit: type=1400 audit(1778662409.344:456): avc: denied { ioctl } for pid=7674 comm="syz.3.438" path="socket:[15357]" dev="sockfs" ino=15357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.478079][ T7695] overlayfs: failed to resolve '/ ': -2 [ 245.516822][ T29] audit: type=1400 audit(1778662410.214:457): avc: denied { create } for pid=7696 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.554676][ T29] audit: type=1400 audit(1778662410.244:458): avc: denied { ioctl } for pid=7696 comm="syz.3.445" path="socket:[16421]" dev="sockfs" ino=16421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.599936][ T29] audit: type=1400 audit(1778662410.244:459): avc: denied { bind } for pid=7696 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.630895][ T5724] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 245.792004][ T5724] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 245.808323][ T5724] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.824035][ T5724] usb 1-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 245.833310][ T5724] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.842511][ T5724] usb 1-1: Product: syz [ 245.847045][ T5724] usb 1-1: Manufacturer: syz [ 245.857252][ T5724] hub 1-1:4.0: bad descriptor, ignoring hub [ 245.863468][ T5724] hub 1-1:4.0: probe with driver hub failed with error -5 [ 245.871884][ T5724] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 246.020705][ T5722] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 246.060673][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.071695][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.088595][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.099145][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.173254][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 246.192636][ T5722] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 246.215814][ T5722] usb 3-1: config 0 has no interface number 0 [ 246.236182][ T5722] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 246.306893][ T5722] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.346094][ T5722] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.527916][ T7710] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 246.537407][ T5722] usb 3-1: config 0 interface 196 has no altsetting 0 [ 246.553736][ T5722] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 246.568210][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.580138][ T5722] usb 3-1: Product: syz [ 246.588449][ T5722] usb 3-1: Manufacturer: syz [ 246.593344][ T5722] usb 3-1: SerialNumber: syz [ 246.620255][ T5722] usb 3-1: config 0 descriptor?? [ 246.673166][ T5611] usb 1-1: USB disconnect, device number 15 [ 246.703045][ T7701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.818249][ T7718] SELinux: syz.3.450 (7718) wrote to checkreqprot. This is no longer supported. [ 247.002561][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 248.338121][ T5722] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 248.455608][ T5722] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 248.732519][ T5722] usb 3-1: USB disconnect, device number 11 [ 250.080969][ T5611] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.270735][ T5611] usb 5-1: Using ep0 maxpacket: 16 [ 250.281870][ T5611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.300669][ T5611] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 250.318892][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.329986][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.336523][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.358609][ T5611] usb 5-1: config 0 descriptor?? [ 250.370646][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.831221][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.838258][ T5611] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 250.850615][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.885547][ T7752] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.459'. [ 250.891668][ T9] usb 2-1: Product: syz [ 250.921015][ T9] usb 2-1: Manufacturer: syz [ 250.936286][ T9] usb 2-1: SerialNumber: syz [ 251.306892][ T7749] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 251.648894][ T5611] usb 5-1: USB disconnect, device number 12 [ 251.849927][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 251.927584][ T7766] lo speed is unknown, defaulting to 1000 [ 251.973187][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 252.340179][ T7780] netlink: 436 bytes leftover after parsing attributes in process `syz.4.466'. [ 252.372339][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.466'. [ 253.131530][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.277409][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.545824][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.587346][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.706637][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 253.706654][ T29] audit: type=1400 audit(1778662418.404:461): avc: denied { bind } for pid=7796 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 253.722008][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 253.744809][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 253.776001][ T29] audit: type=1400 audit(1778662418.434:462): avc: denied { name_bind } for pid=7796 comm="syz.4.472" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 253.796941][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 253.966067][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 253.976015][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 253.984920][ T29] audit: type=1400 audit(1778662418.434:463): avc: denied { node_bind } for pid=7796 comm="syz.4.472" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 254.007436][ T29] audit: type=1326 audit(1778662418.444:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.3.467" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ffb02f96bd7 code=0x0 [ 254.034912][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 254.054429][ T9] usb 2-1: USB disconnect, device number 13 [ 254.530269][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 255.149054][ T5802] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.290516][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.301055][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.537131][ T29] audit: type=1400 audit(1778662420.114:465): avc: denied { module_request } for pid=7815 comm="syz.1.476" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 255.775035][ T5802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.786218][ T29] audit: type=1400 audit(1778662420.344:466): avc: denied { getopt } for pid=7815 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.843406][ T5802] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 255.931266][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.439661][ T5802] usb 5-1: config 0 descriptor?? [ 256.698496][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.729166][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.914115][ T5880] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.925492][ T5880] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.977902][ T5880] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.180338][ T7831] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 258.912072][ T5880] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.922408][ T5802] usb 5-1: string descriptor 0 read error: -71 [ 258.930303][ T5802] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 258.964320][ T5802] usb 5-1: USB disconnect, device number 13 [ 262.085034][ T7848] 8-Ίρ4: renamed from vlan0 (while UP) [ 262.108300][ T29] audit: type=1400 audit(1778662426.804:467): avc: denied { remount } for pid=7847 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 262.160257][ T7849] option changes via remount are deprecated (pid=7847 comm=syz.1.486) [ 262.273275][ T29] audit: type=1400 audit(1778662426.974:468): avc: denied { map } for pid=7847 comm="syz.1.486" path="socket:[17745]" dev="sockfs" ino=17745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.324877][ T29] audit: type=1400 audit(1778662426.974:469): avc: denied { read } for pid=7847 comm="syz.1.486" path="socket:[17745]" dev="sockfs" ino=17745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.803101][ T7876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.559029][ T29] audit: type=1400 audit(1778662429.254:470): avc: denied { connect } for pid=7887 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.578642][ T5802] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 264.639117][ T29] audit: type=1400 audit(1778662429.284:471): avc: denied { write } for pid=7887 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.731777][ T29] audit: type=1800 audit(1778662429.414:472): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.500" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 264.794236][ T5802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.929510][ T5802] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 265.417783][ T5802] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 265.438931][ T5802] usb 5-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 265.449736][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.451305][ T7894] mmap: syz.1.500 (7894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 265.473838][ T5622] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.658377][ T5802] usb 5-1: Product: syz [ 265.678239][ T5802] usb 5-1: Manufacturer: syz [ 265.687454][ T7902] binder: Binderfs stats mode cannot be changed during a remount [ 265.698313][ T29] audit: type=1400 audit(1778662430.384:473): avc: denied { unmount } for pid=7901 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 265.740296][ T5802] usb 5-1: SerialNumber: syz [ 265.767254][ T5622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.789795][ T5622] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.817156][ T5622] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.837834][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.857980][ T5622] usb 4-1: SerialNumber: syz [ 266.103507][ T5802] usb 5-1: Can't get UAC3 power state for id 10 [ 266.113820][ T5802] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 266.130353][ T5802] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 266.149509][ T5802] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 266.161838][ T5802] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 266.729473][ T29] audit: type=1400 audit(1778662431.424:474): avc: denied { getopt } for pid=7918 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.085000][ T7926] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.507'. [ 267.205645][ T5802] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 267.209941][ T5622] usb 4-1: skipping empty audio interface (v1) [ 267.223824][ T7933] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.256520][ T5802] usb 5-1: USB disconnect, device number 14 [ 267.272051][ T7933] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 267.349582][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.418398][ T5622] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 267.450054][ T29] audit: type=1400 audit(1778662432.144:475): avc: denied { setopt } for pid=7932 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.456029][ T5622] usb 4-1: USB disconnect, device number 17 [ 267.478540][ T7933] lo speed is unknown, defaulting to 1000 [ 267.518829][ T29] audit: type=1400 audit(1778662432.194:476): avc: denied { append } for pid=7938 comm="syz.2.513" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.570840][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.691092][ T5610] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 268.340936][ T5610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.352209][ T5610] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 268.359869][ T5610] usb 2-1: can't read configurations, error -71 [ 268.426387][ T29] audit: type=1400 audit(1778662433.124:477): avc: denied { setopt } for pid=7949 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.500041][ T29] audit: type=1400 audit(1778662433.194:478): avc: denied { ioctl } for pid=7949 comm="syz.2.515" path="socket:[17926]" dev="sockfs" ino=17926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.539453][ T29] audit: type=1400 audit(1778662433.234:479): avc: denied { lock } for pid=7949 comm="syz.2.515" path="socket:[17927]" dev="sockfs" ino=17927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 268.625313][ T29] audit: type=1400 audit(1778662433.234:480): avc: denied { listen } for pid=7949 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.647001][ T29] audit: type=1400 audit(1778662433.234:481): avc: denied { accept } for pid=7949 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.666790][ T29] audit: type=1400 audit(1778662433.324:482): avc: denied { open } for pid=7949 comm="syz.2.515" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 268.705652][ T29] audit: type=1400 audit(1778662433.324:483): avc: denied { ioctl } for pid=7949 comm="syz.2.515" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 269.542166][ T29] audit: type=1400 audit(1778662434.244:484): avc: denied { getopt } for pid=7962 comm="syz.0.519" lport=53870 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 269.650990][ T5610] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 269.813099][ T5610] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 269.835142][ T5610] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.846102][ T5610] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.855972][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 269.864538][ T5610] usb 2-1: Product: syz [ 269.868788][ T5610] usb 2-1: Manufacturer: syz [ 269.874265][ T5610] usb 2-1: SerialNumber: syz [ 269.942796][ T5610] usb 2-1: config 0 descriptor?? [ 269.958296][ T5610] usb 2-1: selecting invalid altsetting 0 [ 270.120670][ T5722] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 270.163336][ T5622] usb 2-1: USB disconnect, device number 16 [ 270.173706][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 270.271682][ T5722] usb 1-1: Invalid ep0 maxpacket: 16 [ 270.302307][ T7984] usb usb7: usbfs: process 7984 (syz.4.527) did not claim interface 47 before use [ 270.410661][ T5722] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 270.560642][ T5722] usb 1-1: Invalid ep0 maxpacket: 16 [ 270.568939][ T5722] usb usb1-port1: attempt power cycle [ 270.910827][ T5722] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 270.948564][ T5722] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.046615][ T5802] IPVS: starting estimator thread 0... [ 271.081023][ T5722] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 271.099529][ T8004] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 271.111502][ T5722] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.118856][ T5722] usb usb1-port1: unable to enumerate USB device [ 271.151925][ T8004] hub 1-0:1.0: USB hub found [ 271.159091][ T8004] hub 1-0:1.0: 1 port detected [ 271.170903][ T8001] IPVS: using max 65 ests per chain, 156000 per kthread [ 271.193801][ T8004] bridge0: entered allmulticast mode [ 271.208597][ T8004] bridge_slave_1: left allmulticast mode [ 271.215198][ T8004] bridge_slave_1: left promiscuous mode [ 271.227545][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.254292][ T8004] bridge_slave_0: left allmulticast mode [ 271.261047][ T8004] bridge_slave_0: left promiscuous mode [ 271.267703][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.310792][ T5802] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 271.479611][ T5802] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.661191][ T5802] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 271.880680][ T5802] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.892354][ T5802] usb usb1-port1: attempt power cycle [ 272.250758][ T5802] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 272.319556][ T5802] usb 1-1: Invalid ep0 maxpacket: 16 [ 272.460648][ T5802] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 272.484093][ T5802] usb 1-1: Invalid ep0 maxpacket: 16 [ 272.491508][ T5802] usb usb1-port1: unable to enumerate USB device [ 272.603165][ T8014] FAULT_INJECTION: forcing a failure. [ 272.603165][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 272.617461][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.2.535 Not tainted syzkaller #0 PREEMPT(full) [ 272.617488][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.617499][ T8014] Call Trace: [ 272.617507][ T8014] [ 272.617516][ T8014] dump_stack_lvl+0x100/0x190 [ 272.617547][ T8014] should_fail_ex.cold+0x5/0xa [ 272.617573][ T8014] ? do_raw_write_lock+0x11e/0x260 [ 272.617610][ T8014] should_failslab+0xc2/0x120 [ 272.617634][ T8014] __kmalloc_cache_noprof+0x7a/0x6f0 [ 272.617663][ T8014] ? tls_ctx_create+0x45/0x150 [ 272.617684][ T8014] ? __pfx_do_raw_write_lock+0x10/0x10 [ 272.617722][ T8014] tls_ctx_create+0x45/0x150 [ 272.617745][ T8014] tls_init+0x119/0xb90 [ 272.617765][ T8014] ? __rcu_read_unlock+0x27f/0x5e0 [ 272.617794][ T8014] tcp_set_ulp+0x32e/0x7f0 [ 272.617825][ T8014] do_tcp_setsockopt+0x53c/0x2b40 [ 272.617853][ T8014] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 272.617875][ T8014] ? __pfx___schedule+0x10/0x10 [ 272.617907][ T8014] ? __pfx_sock_has_perm+0x10/0x10 [ 272.617930][ T8014] ? irqentry_exit+0x24d/0x7e0 [ 272.617957][ T8014] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 272.617988][ T8014] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 272.618037][ T8014] tcp_setsockopt+0xe2/0x100 [ 272.618060][ T8014] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.618088][ T8014] do_sock_setsockopt+0xf3/0x1d0 [ 272.618116][ T8014] __sys_setsockopt+0x195/0x220 [ 272.618154][ T8014] __x64_sys_setsockopt+0xbd/0x160 [ 272.618184][ T8014] ? do_syscall_64+0x90/0xf80 [ 272.618211][ T8014] ? lockdep_hardirqs_on+0x78/0x100 [ 272.618238][ T8014] do_syscall_64+0x10b/0xf80 [ 272.618264][ T8014] ? clear_bhb_loop+0x40/0x90 [ 272.618290][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.618312][ T8014] RIP: 0033:0x7f451f19ce59 [ 272.618329][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.618348][ T8014] RSP: 002b:00007f45200c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.618368][ T8014] RAX: ffffffffffffffda RBX: 00007f451f416090 RCX: 00007f451f19ce59 [ 272.618381][ T8014] RDX: 000000000000001f RSI: 0000000000000006 RDI: 000000000000000d [ 272.618392][ T8014] RBP: 00007f45200c1090 R08: 0000000000000004 R09: 0000000000000000 [ 272.618405][ T8014] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 272.618417][ T8014] R13: 00007f451f416128 R14: 00007f451f416090 R15: 00007ffea7906ea8 [ 272.618447][ T8014] [ 272.973060][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.067981][ T8024] syzkaller0: entered promiscuous mode [ 274.074095][ T8024] syzkaller0: entered allmulticast mode [ 274.290716][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 275.156323][ T8032] ubi31: attaching mtd0 [ 275.175533][ T8032] ubi31: scanning is finished [ 275.180314][ T8032] ubi31: empty MTD device detected [ 275.959673][ T8032] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 276.083809][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 276.121682][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.185759][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 276.288777][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.298107][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 276.298121][ T29] audit: type=1400 audit(1778662440.994:489): avc: denied { watch_sb watch_reads } for pid=8039 comm="syz.2.543" path="/109/file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 276.323693][ T9] usb 5-1: config 0 descriptor?? [ 276.336895][ T8043] QAT: failed to copy from user cfg_data. [ 276.367274][ T8025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.589249][ T8054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 276.595803][ T8054] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.633194][ T29] audit: type=1400 audit(1778662441.324:490): avc: denied { ioctl } for pid=8022 comm="syz.4.539" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.556399][ T29] audit: type=1400 audit(1778662441.364:491): avc: denied { connect } for pid=8047 comm="syz.3.546" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.572607][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.586707][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.595067][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.607335][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.616840][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.625295][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.633572][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.642008][ T8054] vhci_hcd vhci_hcd.0: Device attached [ 277.728464][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.824170][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 277.934327][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: unknown main item tag 0x0 [ 278.258890][ T5622] usb 40-1: SetAddress Request (2) to port 0 [ 278.312398][ T5622] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.615896][ T8056] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 279.023354][ T5878] vhci_hcd vhci_hcd.3: stop threads [ 279.035060][ T5878] vhci_hcd vhci_hcd.3: release socket [ 279.040636][ T5878] vhci_hcd vhci_hcd.3: disconnect device [ 279.200839][ T9] aquacomputer_d5next 0003:0C70:F00B.0006: hidraw0: USB HID v0.01 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 279.401941][ T9] usb 5-1: USB disconnect, device number 15 [ 279.499165][ T8080] afs: Unknown parameter 'dyn' [ 280.048634][ T8076] fido_id[8076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 280.245682][ T8087] syzkaller0: entered promiscuous mode [ 280.262396][ T8087] syzkaller0: entered allmulticast mode [ 283.785818][ T5622] usb 40-1: device descriptor read/8, error -110 [ 283.792268][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 283.838502][ T29] audit: type=1400 audit(1778662448.534:492): avc: denied { remount } for pid=8119 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 284.038282][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.048444][ T9] usb 2-1: config 0 has no interface number 0 [ 284.056007][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 284.070107][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 284.082791][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.091958][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.143225][ T9] usb 2-1: config 0 descriptor?? [ 284.235020][ T5622] usb usb40-port1: attempt power cycle [ 284.520680][ T8106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.547699][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 285.928125][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 286.389140][ T5622] usb usb40-port1: unable to enumerate USB device [ 286.482437][ T5622] usb 2-1: USB disconnect, device number 17 [ 286.625977][ T8141] iowarrior 2-1:0.1: Error -19 while submitting URB [ 287.819734][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 287.889136][ T29] audit: type=1400 audit(1778662452.584:493): avc: denied { bind } for pid=8140 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.903605][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 287.940904][ T8155] comedi comedi3: c6xdigio: I/O base address not correctly aligned [ 288.154659][ T8154] netlink: 'syz.2.570': attribute type 11 has an invalid length. [ 288.196985][ T8154] netlink: 'syz.2.570': attribute type 13 has an invalid length. [ 288.274589][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.282456][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.503650][ T8155] bridge0: entered allmulticast mode [ 288.750824][ T8170] syzkaller0: entered promiscuous mode [ 288.764941][ T8170] syzkaller0: entered allmulticast mode [ 288.782427][ T8154] bridge_slave_1: left allmulticast mode [ 288.812595][ T8154] bridge_slave_1: left promiscuous mode [ 288.848373][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.857141][ T29] audit: type=1326 audit(1778662453.544:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 289.076095][ T29] audit: type=1326 audit(1778662453.544:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 289.395971][ T29] audit: type=1326 audit(1778662453.544:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 293.347476][ T29] audit: type=1326 audit(1778662453.544:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 293.375841][ T8154] bridge_slave_0: left allmulticast mode [ 293.376136][ T29] audit: type=1326 audit(1778662453.544:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 293.408229][ T29] audit: type=1326 audit(1778662453.544:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.2.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f451f19ce59 code=0x7ffc0000 [ 293.434895][ T8154] bridge_slave_0: left promiscuous mode [ 293.457181][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.697772][ T29] audit: type=1400 audit(1778662458.394:500): avc: denied { attach_queue } for pid=8185 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 293.846102][ T8196] binder: 8195:8196 ioctl d01c4813 200000001900 returned -22 [ 293.970661][ T5724] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.021180][ T5751] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 294.056298][ T8204] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 294.145692][ T5724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.169822][ T5724] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 294.180108][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.199828][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 294.212588][ T5751] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 294.220971][ T5724] usb 4-1: Product: syz [ 294.226950][ T5724] usb 4-1: Manufacturer: syz [ 294.232045][ T5751] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.242156][ T5724] usb 4-1: SerialNumber: syz [ 294.258652][ T5724] usb 4-1: config 0 descriptor?? [ 294.266469][ T5751] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.344830][ T8210] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 294.360101][ T5751] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.418215][ T5751] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.454979][ T5751] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.500077][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.510656][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.553696][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.569994][ T5724] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 294.586665][ T5724] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 294.626342][ T5724] usb 4-1: USB disconnect, device number 18 [ 295.831560][ T8220] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 295.918932][ T8220] bond1 (unregistering): Released all slaves [ 296.583388][ T8236] syzkaller0: entered promiscuous mode [ 296.588923][ T8236] syzkaller0: entered allmulticast mode [ 298.830503][ T8252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.170691][ T5765] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.311148][ T5751] usb 1-1: USB disconnect, device number 24 [ 299.346614][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.390173][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.406647][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 299.431291][ T5765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.561113][ T5765] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.758633][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.770765][ T5765] usb 4-1: config 0 descriptor?? [ 300.059592][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 300.072395][ T29] audit: type=1400 audit(1778662464.744:501): avc: denied { bind } for pid=8273 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.506333][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 301.305915][ T8254] netlink: 140 bytes leftover after parsing attributes in process `syz.3.598'. [ 301.460855][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 301.678876][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.763925][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 301.913577][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 302.042065][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.186065][ T5765] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 302.209870][ T9] usb 3-1: Product: syz [ 302.268982][ T9] usb 3-1: Manufacturer: syz [ 302.296057][ T9] usb 3-1: SerialNumber: syz [ 302.329968][ T5765] usb 4-1: USB disconnect, device number 19 [ 302.381428][ T8285] syzkaller0: entered promiscuous mode [ 302.419234][ T8285] syzkaller0: entered allmulticast mode [ 302.932361][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.999332][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 303.520063][ T8293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.608'. [ 304.543666][ T9] usb 3-1: USB disconnect, device number 12 [ 304.880237][ T29] audit: type=1400 audit(1778662469.574:502): avc: denied { append } for pid=8305 comm="syz.0.612" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.834650][ T8322] FAULT_INJECTION: forcing a failure. [ 305.834650][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.848001][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(full) [ 305.848048][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.848076][ T8322] Call Trace: [ 305.848082][ T8322] [ 305.848090][ T8322] dump_stack_lvl+0x100/0x190 [ 305.848119][ T8322] should_fail_ex.cold+0x5/0xa [ 305.848149][ T8322] _copy_to_user+0x32/0xd0 [ 305.848182][ T8322] simple_read_from_buffer+0xcb/0x170 [ 305.848210][ T8322] proc_fail_nth_read+0x1af/0x230 [ 305.848233][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.848255][ T8322] ? rw_verify_area+0xce/0x6d0 [ 305.848272][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.848292][ T8322] vfs_read+0x1e4/0xb30 [ 305.848317][ T8322] ? __pfx_vfs_read+0x10/0x10 [ 305.848337][ T8322] ? __fget_files+0x215/0x3d0 [ 305.848368][ T8322] ? __fget_files+0x21f/0x3d0 [ 305.848398][ T8322] ksys_read+0x12a/0x250 [ 305.848418][ T8322] ? __pfx_ksys_read+0x10/0x10 [ 305.848442][ T8322] ? rcu_is_watching+0x12/0xc0 [ 305.848477][ T8322] do_syscall_64+0x10b/0xf80 [ 305.848503][ T8322] ? clear_bhb_loop+0x40/0x90 [ 305.848530][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.848551][ T8322] RIP: 0033:0x7f451f15d68e [ 305.848568][ T8322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.848588][ T8322] RSP: 002b:00007f45200e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.848607][ T8322] RAX: ffffffffffffffda RBX: 00007f45200e26c0 RCX: 00007f451f15d68e [ 305.848620][ T8322] RDX: 000000000000000f RSI: 00007f45200e20a0 RDI: 0000000000000004 [ 305.848632][ T8322] RBP: 00007f45200e2090 R08: 0000000000000000 R09: 0000000000000000 [ 305.848652][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.848663][ T8322] R13: 00007f451f416038 R14: 00007f451f415fa0 R15: 00007ffea7906ea8 [ 305.848687][ T8322] [ 305.880671][ T5765] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 306.680770][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 306.972923][ T5765] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.020329][ T5765] usb 2-1: config 179 has no interface number 0 [ 307.063455][ T5765] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.154604][ T5765] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 307.223428][ T5765] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.299820][ T5765] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 307.313258][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.619'. [ 307.324133][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 307.329668][ T5765] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.367319][ T5765] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 307.381420][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.432300][ T8314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.672576][ T8334] syzkaller0: entered promiscuous mode [ 307.678624][ T5765] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 307.682769][ T8334] syzkaller0: entered allmulticast mode [ 307.718761][ T29] audit: type=1400 audit(1778662472.414:503): avc: denied { read } for pid=4963 comm="acpid" name="js0" dev="devtmpfs" ino=3000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.895420][ T29] audit: type=1400 audit(1778662472.414:504): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.050784][ T5610] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 308.212699][ T29] audit: type=1400 audit(1778662472.414:505): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3000 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.602746][ T5765] hid_parser_main: 470 callbacks suppressed [ 308.602826][ T5765] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 308.633819][ T29] audit: type=1400 audit(1778662472.754:506): avc: denied { read write } for pid=8312 comm="syz.1.615" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 309.499612][ T29] audit: type=1400 audit(1778662472.754:507): avc: denied { open } for pid=8312 comm="syz.1.615" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 309.533563][ T5610] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 309.533617][ T5610] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 309.533644][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.542131][ T5610] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 309.573187][ T5765] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.897228][ T5825] usb 2-1: USB disconnect, device number 18 [ 309.897276][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 309.911404][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 309.958466][ T8345] fido_id[8345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 310.576125][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 310.583526][ T5610] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 310.871543][ T5610] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 311.577363][ T5610] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 311.581737][ T8367] ip6erspan0: entered allmulticast mode [ 311.585599][ T5610] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 311.600330][ T5610] usb 5-1: USB disconnect, device number 16 [ 312.336416][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.336510][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.344282][ T29] audit: type=1400 audit(1778662476.994:508): avc: denied { read } for pid=8374 comm="syz.0.632" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.344328][ T29] audit: type=1400 audit(1778662476.994:509): avc: denied { open } for pid=8374 comm="syz.0.632" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.344359][ T29] audit: type=1400 audit(1778662477.004:510): avc: denied { ioctl } for pid=8374 comm="syz.0.632" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 314.340281][ T8381] uprobe: syz.2.634:8381 failed to unregister, leaking uprobe [ 314.366089][ T8389] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 314.865353][ T29] audit: type=1400 audit(1778662479.564:511): avc: denied { write } for pid=8393 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.249161][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 315.490841][ T5825] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 315.731850][ T8426] syzkaller0: entered promiscuous mode [ 315.737474][ T8426] syzkaller0: entered allmulticast mode [ 315.744438][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 315.771999][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.809078][ T5825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 315.901883][ T5825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 316.008171][ T5825] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.155616][ T5825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.249197][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.346748][ T5825] usb 2-1: SerialNumber: syz [ 316.553936][ T8420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.710786][ T8420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.733176][ T5825] hub 2-1:1.0: bad descriptor, ignoring hub [ 316.740623][ T5825] hub 2-1:1.0: probe with driver hub failed with error -5 [ 316.759618][ T8432] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 316.872390][ T8438] ================================================================== [ 316.880487][ T8438] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0xf91/0x10c0 [ 316.888383][ T8438] Read of size 8 at addr ffff88806ae57ab0 by task syz.3.651/8438 [ 316.896095][ T8438] [ 316.898413][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(full) [ 316.898439][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.898452][ T8438] Call Trace: [ 316.898459][ T8438] [ 316.898466][ T8438] dump_stack_lvl+0x100/0x190 [ 316.898494][ T8438] print_report+0x13d/0x4b0 [ 316.898524][ T8438] ? __virt_addr_valid+0x239/0x430 [ 316.898548][ T8438] ? __sk_msg_recvmsg+0xf91/0x10c0 [ 316.898569][ T8438] kasan_report+0xdf/0x1d0 [ 316.898592][ T8438] ? __sk_msg_recvmsg+0xf91/0x10c0 [ 316.898615][ T8438] __sk_msg_recvmsg+0xf91/0x10c0 [ 316.898638][ T8438] ? __pfx_sk_psock_get+0x10/0x10 [ 316.898668][ T8438] udp_bpf_recvmsg+0x1a8/0x9d0 [ 316.898695][ T8438] ? __pfx_sock_has_perm+0x10/0x10 [ 316.898720][ T8438] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 316.898745][ T8438] ? trace_kmalloc+0xe3/0x110 [ 316.898771][ T8438] ? copy_iovec_from_user+0x102/0x140 [ 316.898802][ T8438] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 316.898827][ T8438] inet_recvmsg+0x455/0x4c0 [ 316.898856][ T8438] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 316.898884][ T8438] ? __pfx_inet_recvmsg+0x10/0x10 [ 316.898914][ T8438] sock_recvmsg+0x187/0x1f0 [ 316.898939][ T8438] ____sys_recvmsg+0x218/0x640 [ 316.898966][ T8438] ? __pfx_____sys_recvmsg+0x10/0x10 [ 316.898996][ T8438] ? __lock_acquire+0x4a5/0x2630 [ 316.899021][ T8438] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 316.899047][ T8438] ___sys_recvmsg+0x16a/0x1a0 [ 316.899071][ T8438] ? __pfx____sys_recvmsg+0x10/0x10 [ 316.899098][ T8438] ? find_held_lock+0x2b/0x80 [ 316.899127][ T8438] do_recvmmsg+0x301/0x760 [ 316.899154][ T8438] ? __pfx_do_recvmmsg+0x10/0x10 [ 316.899187][ T8438] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.899212][ T8438] ? lockdep_hardirqs_on+0x78/0x100 [ 316.899239][ T8438] ? _raw_spin_unlock_irq+0x2e/0x50 [ 316.899265][ T8438] __x64_sys_recvmmsg+0x22a/0x280 [ 316.899292][ T8438] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 316.899315][ T8438] ? rcu_is_watching+0x12/0xc0 [ 316.899347][ T8438] do_syscall_64+0x10b/0xf80 [ 316.899373][ T8438] ? clear_bhb_loop+0x40/0x90 [ 316.899397][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.899418][ T8438] RIP: 0033:0x7ffb02f9ce59 [ 316.899434][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.899455][ T8438] RSP: 002b:00007ffb03de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 316.899475][ T8438] RAX: ffffffffffffffda RBX: 00007ffb03216180 RCX: 00007ffb02f9ce59 [ 316.899489][ T8438] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003 [ 316.899501][ T8438] RBP: 00007ffb03032d6f R08: 0000000000000000 R09: 0000000000000000 [ 316.899512][ T8438] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 316.899524][ T8438] R13: 00007ffb03216218 R14: 00007ffb03216180 R15: 00007ffe57eae148 [ 316.899544][ T8438] [ 316.899551][ T8438] [ 317.180933][ T8438] Allocated by task 8434: [ 317.185239][ T8438] kasan_save_stack+0x30/0x50 [ 317.189912][ T8438] kasan_save_track+0x14/0x30 [ 317.194561][ T8438] __kasan_kmalloc+0xaa/0xb0 [ 317.199127][ T8438] alloc_sk_msg+0x40/0xb0 [ 317.203433][ T8438] sk_psock_skb_ingress_self+0x2d/0x380 [ 317.208957][ T8438] sk_psock_verdict_recv+0xa33/0xc30 [ 317.214237][ T8438] udp_read_skb+0x540/0x680 [ 317.218720][ T8438] sk_psock_verdict_data_ready+0x19a/0x7d0 [ 317.224497][ T8438] __udp_enqueue_schedule_skb+0xb11/0x12f0 [ 317.230276][ T8438] udp_queue_rcv_one_skb+0x8fd/0xf30 [ 317.235532][ T8438] udp_queue_rcv_skb+0x19c/0xcf0 [ 317.240443][ T8438] udp_rcv+0x213e/0x2c00 [ 317.244662][ T8438] ip_protocol_deliver_rcu+0x304/0x4d0 [ 317.250093][ T8438] ip_local_deliver_finish+0x3f2/0x6e0 [ 317.255528][ T8438] ip_local_deliver+0x19a/0x1f0 [ 317.260366][ T8438] ip_list_rcv_finish+0x78d/0xce0 [ 317.265388][ T8438] ip_list_rcv+0x338/0x450 [ 317.269806][ T8438] __netif_receive_skb_list_core+0x74c/0x940 [ 317.275763][ T8438] netif_receive_skb_list_internal+0x722/0xd40 [ 317.281896][ T8438] netif_receive_skb_list+0x55/0x4f0 [ 317.287172][ T8438] xdp_test_run_batch.constprop.0+0x16b6/0x1ca0 [ 317.293389][ T8438] bpf_test_run_xdp_live+0x367/0x760 [ 317.298655][ T8438] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 317.304008][ T8438] __sys_bpf+0x1725/0x4b90 [ 317.308398][ T8438] __x64_sys_bpf+0x7b/0xc0 [ 317.312789][ T8438] do_syscall_64+0x10b/0xf80 [ 317.317360][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.323253][ T8438] [ 317.325557][ T8438] Freed by task 8435: [ 317.329509][ T8438] kasan_save_stack+0x30/0x50 [ 317.334163][ T8438] kasan_save_track+0x14/0x30 [ 317.338819][ T8438] kasan_save_free_info+0x3b/0x70 [ 317.343830][ T8438] __kasan_slab_free+0x5f/0x80 [ 317.348565][ T8438] kfree+0x223/0x6c0 [ 317.352436][ T8438] __sk_msg_recvmsg+0xcef/0x10c0 [ 317.357349][ T8438] udp_bpf_recvmsg+0x1a8/0x9d0 [ 317.362091][ T8438] inet_recvmsg+0x455/0x4c0 [ 317.366575][ T8438] sock_recvmsg+0x187/0x1f0 [ 317.371058][ T8438] ____sys_recvmsg+0x218/0x640 [ 317.375800][ T8438] ___sys_recvmsg+0x16a/0x1a0 [ 317.380459][ T8438] do_recvmmsg+0x301/0x760 [ 317.384856][ T8438] __x64_sys_recvmmsg+0x22a/0x280 [ 317.389852][ T8438] do_syscall_64+0x10b/0xf80 [ 317.394418][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.400311][ T8438] [ 317.402614][ T8438] The buggy address belongs to the object at ffff88806ae57800 [ 317.402614][ T8438] which belongs to the cache kmalloc-1k of size 1024 [ 317.416658][ T8438] The buggy address is located 688 bytes inside of [ 317.416658][ T8438] freed 1024-byte region [ffff88806ae57800, ffff88806ae57c00) [ 317.430518][ T8438] [ 317.432827][ T8438] The buggy address belongs to the physical page: [ 317.439216][ T8438] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806ae52000 pfn:0x6ae50 [ 317.449259][ T8438] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.457729][ T8438] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 317.466205][ T8438] page_type: f5(slab) [ 317.470164][ T8438] raw: 00fff00000000240 ffff88813fe34dc0 ffffea0000ac3210 ffffea0000aa0e10 [ 317.478720][ T8438] raw: ffff88806ae52000 000000080010000d 00000000f5000000 0000000000000000 [ 317.487272][ T8438] head: 00fff00000000240 ffff88813fe34dc0 ffffea0000ac3210 ffffea0000aa0e10 [ 317.495913][ T8438] head: ffff88806ae52000 000000080010000d 00000000f5000000 0000000000000000 [ 317.504553][ T8438] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 317.513211][ T8438] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 317.521854][ T8438] page dumped because: kasan: bad access detected [ 317.528237][ T8438] page_owner tracks the page as allocated [ 317.533922][ T8438] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 48, tgid 48 (kworker/u8:3), ts 89481488182, free_ts 65778869629 [ 317.554293][ T8438] post_alloc_hook+0x153/0x170 [ 317.559036][ T8438] get_page_from_freelist+0x11a6/0x33b0 [ 317.564557][ T8438] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 317.570424][ T8438] new_slab+0xa6/0x6c0 [ 317.574470][ T8438] refill_objects+0x277/0x420 [ 317.579121][ T8438] __pcs_replace_empty_main+0x375/0x650 [ 317.584640][ T8438] __kmalloc_noprof+0x688/0x850 [ 317.589465][ T8438] ieee802_11_parse_elems_full+0x177/0x3720 [ 317.595327][ T8438] ieee80211_inform_bss+0x159/0x1150 [ 317.600587][ T8438] cfg80211_inform_single_bss_data+0x8a1/0x1de0 [ 317.606817][ T8438] cfg80211_inform_bss_data+0x237/0x3a00 [ 317.612424][ T8438] cfg80211_inform_bss_frame_data+0x247/0x780 [ 317.618456][ T8438] ieee80211_bss_info_update+0x310/0xab0 [ 317.624057][ T8438] ieee80211_ibss_rx_queued_mgmt+0x1922/0x2f80 [ 317.630179][ T8438] ieee80211_iface_work+0xbff/0x13e0 [ 317.635432][ T8438] cfg80211_wiphy_work+0x410/0x570 [ 317.640536][ T8438] page last free pid 5595 tgid 5595 stack trace: [ 317.646830][ T8438] free_unref_folios+0xa0d/0x16f0 [ 317.651829][ T8438] folios_put_refs+0x571/0xa90 [ 317.656568][ T8438] free_pages_and_swap_cache+0x22d/0x3b0 [ 317.662173][ T8438] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 317.668125][ T8438] tlb_finish_mmu+0x1b0/0x810 [ 317.672772][ T8438] unmap_region+0x2d9/0x3b0 [ 317.677248][ T8438] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 317.682767][ T8438] do_vmi_align_munmap+0x44f/0x5f0 [ 317.687851][ T8438] do_vmi_munmap+0x1f8/0x3e0 [ 317.692414][ T8438] __vm_munmap+0x196/0x390 [ 317.696805][ T8438] __x64_sys_munmap+0x59/0x80 [ 317.701454][ T8438] do_syscall_64+0x10b/0xf80 [ 317.706015][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.711878][ T8438] [ 317.714172][ T8438] Memory state around the buggy address: [ 317.719769][ T8438] ffff88806ae57980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.727799][ T8438] ffff88806ae57a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.735827][ T8438] >ffff88806ae57a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.743853][ T8438] ^ [ 317.749448][ T8438] ffff88806ae57b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.757479][ T8438] ffff88806ae57b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.765507][ T8438] ================================================================== [ 317.798994][ T8420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.835665][ T29] audit: type=1400 audit(1778662482.524:512): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 317.863613][ T8438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 317.870817][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT(full) [ 317.880009][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.890050][ T8438] Call Trace: [ 317.893315][ T8438] [ 317.896233][ T8438] dump_stack_lvl+0x100/0x190 [ 317.900901][ T8438] vpanic+0x552/0x970 [ 317.904872][ T8438] ? __pfx_vpanic+0x10/0x10 [ 317.909364][ T8438] ? __sk_msg_recvmsg+0xf91/0x10c0 [ 317.914461][ T8438] panic+0xd1/0xe0 [ 317.918169][ T8438] ? __pfx_panic+0x10/0x10 [ 317.922575][ T8438] ? __sk_msg_recvmsg+0xf91/0x10c0 [ 317.927677][ T8438] ? preempt_schedule_common+0x42/0xc0 [ 317.933124][ T8438] ? check_panic_on_warn+0x1f/0x90 [ 317.938226][ T8438] check_panic_on_warn.cold+0x19/0x34 [ 317.943601][ T8438] end_report.part.0+0x3a/0x90 [ 317.948361][ T8438] kasan_report.cold+0xe/0x18 [ 317.953032][ T8438] ? __sk_msg_recvmsg+0xf91/0x10c0 [ 317.958132][ T8438] __sk_msg_recvmsg+0xf91/0x10c0 [ 317.963057][ T8438] ? __pfx_sk_psock_get+0x10/0x10 [ 317.968074][ T8438] udp_bpf_recvmsg+0x1a8/0x9d0 [ 317.972824][ T8438] ? __pfx_sock_has_perm+0x10/0x10 [ 317.977921][ T8438] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 317.983197][ T8438] ? trace_kmalloc+0xe3/0x110 [ 317.987862][ T8438] ? copy_iovec_from_user+0x102/0x140 [ 317.993226][ T8438] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 317.998496][ T8438] inet_recvmsg+0x455/0x4c0 [ 318.002990][ T8438] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 318.008264][ T8438] ? __pfx_inet_recvmsg+0x10/0x10 [ 318.013280][ T8438] sock_recvmsg+0x187/0x1f0 [ 318.017770][ T8438] ____sys_recvmsg+0x218/0x640 [ 318.022524][ T8438] ? __pfx_____sys_recvmsg+0x10/0x10 [ 318.027809][ T8438] ? __lock_acquire+0x4a5/0x2630 [ 318.032738][ T8438] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 318.039071][ T8438] ___sys_recvmsg+0x16a/0x1a0 [ 318.043740][ T8438] ? __pfx____sys_recvmsg+0x10/0x10 [ 318.048945][ T8438] ? find_held_lock+0x2b/0x80 [ 318.053612][ T8438] do_recvmmsg+0x301/0x760 [ 318.058018][ T8438] ? __pfx_do_recvmmsg+0x10/0x10 [ 318.062953][ T8438] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.068136][ T8438] ? lockdep_hardirqs_on+0x78/0x100 [ 318.073328][ T8438] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.078514][ T8438] __x64_sys_recvmmsg+0x22a/0x280 [ 318.083521][ T8438] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 318.089050][ T8438] ? rcu_is_watching+0x12/0xc0 [ 318.093808][ T8438] do_syscall_64+0x10b/0xf80 [ 318.098388][ T8438] ? clear_bhb_loop+0x40/0x90 [ 318.103052][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.108927][ T8438] RIP: 0033:0x7ffb02f9ce59 [ 318.113331][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.132926][ T8438] RSP: 002b:00007ffb03de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.141326][ T8438] RAX: ffffffffffffffda RBX: 00007ffb03216180 RCX: 00007ffb02f9ce59 [ 318.149279][ T8438] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003 [ 318.157228][ T8438] RBP: 00007ffb03032d6f R08: 0000000000000000 R09: 0000000000000000 [ 318.165179][ T8438] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000 [ 318.173130][ T8438] R13: 00007ffb03216218 R14: 00007ffb03216180 R15: 00007ffe57eae148 [ 318.181101][ T8438] [ 318.184631][ T8438] Kernel Offset: disabled [ 318.188940][ T8438] Rebooting in 86400 seconds..