last executing test programs: 10.214539985s ago: executing program 3 (id=63): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000200)) sendmmsg$inet(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}], 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) getdents64(r6, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) connect$packet(r0, 0x0, 0x0) socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x1d, 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r7 = socket$inet6(0xa, 0x4, 0x20000) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) 7.155345997s ago: executing program 3 (id=76): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x453, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x4) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x40, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x26, 0x6, {0x8, 0x25, 0x1, 0x82, 0x30, 0x0, 0x28}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe8, 0x8, 0x5, {0x8, 0x25, 0x1, 0x0, 0x0, 0x6, 0xf29}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4.85929603s ago: executing program 0 (id=94): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xe85f1217a7113653, 0x40, 0x0) gettid() (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) (async) r4 = socket(0x22, 0xa, 0x1) (async) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0xa, {0x2, 0x4e20, @rand_addr=0x64010100}, 'veth1_macvtap\x00'}) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', r3, 0x8000, 0x700, 0x8, 0x5, {{0x10, 0x4, 0x3, 0x15, 0x40, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x84, [@private=0xa010102, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x14, 0x2, [{0x7, 0x5, "ed801d"}, {0x6, 0x9, "ec6d6db23ab66d"}]}]}}}}}) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000000)=0x4, 0x2) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000003c0)={0x7, {0x3, 0x5, 0x3, 0xfffffc00, 0x3, 0xfffffff7}}) 4.820781332s ago: executing program 0 (id=95): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0xf, 0x3e, {0x3e, 0x5, "52ac1594dca06722bd373d74b65ba0c782d2699bff2ec33bba9c286a36cac67a07d5e0eccf6b7186744ccf4d0248c1d0429193fd77f6c9f1e4810587"}}, &(0x7f00000000c0)={0x0, 0x3, 0xba, @string={0xba, 0x3, "5d2054a46bf7924c4de50ed2fc51b5cc083a1473dacd22b6d3af1023764c4d87f29edbd19ebdede6928894b9b0c642f79f3836775fea446bca14a3db4ccaef27dbe6c6a90ef3a4a8594c13e59d2e057e2aa71c6b9dbc458ade82407279e993f1662533fa9e975e0e17b33e4fcac2ec53621ad20cd91cce79f44f966c84247274332737299697380a993d058c0f0e729283918d5d92e1886ba5c4a0388351005814fe54e26d54cd4b25944d5c71df4d8851cbe73be22e62c8"}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x20, 0xc, 0x4d, "c0c116eb242a7bc5175cce7aa7cfa85d3de00c1ad5f0c9f887a7ee7fe4b393d34e89ca79e4363160ef2f13b542bc28b145e8d8f36abd50fa1238d571e0e51a066807ebba7116bd769e5ab13e6f"}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 4.710617607s ago: executing program 2 (id=97): r0 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$midi(0x1, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000108c0d03014000016200434be137b106c68ff50203010902440001019e000709040000030103300009590d0eff03ca0e00052501019409050f2f20007f0800052541"], 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x7ffb, 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 4.179497044s ago: executing program 3 (id=98): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001020000402505a1a4400000020101090244000101000000090400001202060000052406000005240000000d240f0100000000030000000009058103000203030fb4550905820200020000000905a46beb4b0302000200"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x370) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x127e03, 0x81) statx(r3, &(0x7f00000001c0)='./file0\x00', 0x400, 0x211, &(0x7f0000000200)) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) r6 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) tkill(r6, 0x12) ptrace(0x4208, r6) ptrace$getsig(0x4202, r6, 0x16, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) flock(0xffffffffffffffff, 0x1780f9c373410dea) chdir(&(0x7f00000001c0)='./file0\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x103002, 0x107) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000002c80)={0x30}, 0x30) creat(&(0x7f0000000200)='./file0\x00', 0x102) 2.807493161s ago: executing program 0 (id=99): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) unshare(0x22020600) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x9, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.805931391s ago: executing program 0 (id=100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x8801) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000140)='/dev/input/event#\x00', &(0x7f0000000180)='/dev/input/event#\x00', 0x1}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/95) 1.881356197s ago: executing program 1 (id=106): r0 = socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x186}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x14f}, 0x1c, 0x0}, 0x2606c0c0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c, 0x800) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)="86d9", 0x2}], 0x1}}], 0x4000198, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="7fd2", 0x2, 0x801, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/197, 0xc5, 0x0, 0x0}, &(0x7f0000000100)=0x40) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4000004) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x500, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{0x0}, {0x0, 0xfffffffffffffed4}], 0x2, 0x10000fd, 0xa) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2046) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) wait4(0x0, 0x0, 0x8100000e, &(0x7f0000000180)) 1.860608118s ago: executing program 1 (id=107): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="d134135ff4", 0x5, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="f0", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001cafd04600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xfdef) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) wait4(r4, 0x0, 0x40000000, 0x0) ptrace$setregs(0xd, r4, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="a6745b7b3641a35a69c931bcabae892be6678dceb8ce9c9b5d95f72dd1ff79b98bad8feaed6bed2fcccb4b580a27bc2f6b46684b205911ce7e166ce869a47f"], 0x0) 1.646675839s ago: executing program 2 (id=108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000bd7000fbdbdf251000000005001100030000000c00060002"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80a0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x3f, 0x0, 0x101}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x44010) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) syz_usb_connect$uac2(0x5, 0x93, &(0x7f0000000140)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x80, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xb, 0x21, 0x2}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x404, 0xb, 0x2, 0x2, 0x186, 0x4}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x404, 0x2, 0x3, 0x53, 0x7, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x182, 0x3f, 0x2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1, 0xf, {0x8, 0x25, 0x1, 0x0, 0xf, 0x3, 0x9}}}}}}}}]}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000001100)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x1c00, 0x0, 0x0, 0x0, 0x3, 0x1fb, 0x0, 0x80000044, 0x2, 0xf, 0x28c8, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88201, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xede}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000200)={{0xeeee0000, 0x70000, 0xe, 0x6, 0x1a, 0x7, 0x9, 0x0, 0x0, 0x0, 0xe8, 0x9b}, {0x6000, 0x4000, 0x0, 0x10, 0x0, 0xd, 0x3, 0x5, 0x81, 0x8, 0xc, 0x7}, {0xdddd1000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0xfd, 0x80, 0x9, 0x2, 0x3}, {0x80a0000, 0xdddd1000, 0xf, 0xd7, 0x6e, 0x80, 0x2, 0xc, 0xbe, 0x3, 0x6, 0x4}, {0xa000, 0xffffffff, 0xd, 0xc, 0x6, 0x2, 0x10, 0x7, 0x5, 0x0, 0x6, 0x5}, {0x8080000, 0xb000, 0xf, 0x5, 0xff, 0x8, 0x4, 0x5, 0x6, 0x75, 0xa, 0xf7}, {0xeeee8000, 0x2000, 0x4, 0x7, 0x8, 0x7, 0x4, 0x52, 0x1, 0x0, 0x0, 0x9}, {0x4000, 0xeeee0000, 0xa, 0x2, 0xf7, 0x4, 0x6, 0x8, 0xb2, 0x1, 0xc4, 0x9}, {0x100000, 0x7224}, {0x5000, 0x4}, 0x20, 0x0, 0x70000, 0x40, 0xc, 0xc100, 0xeeee0000, [0x4, 0x101, 0x943b, 0xffffffffffffffff]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.474110857s ago: executing program 0 (id=109): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x115000, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r0, 0x0, 0x0, 0x800, 0x0, 0x6, r0}]) syz_usb_connect(0x0, 0x50, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000ec667d40dd0432900bfd0000000109023e0001000000000904000000020a0000052406000005240000000d1d0f"], 0x0) 1.159805333s ago: executing program 3 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @local}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000240)=':]\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24080010}, 0x800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000580)={'nat\x00', 0x0, 0x3, 0x0, [0x6, 0x0, 0x80000000, 0x6da, 0xffffffffffff50d6, 0xfffffffffffffffc], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000007c0)={0xfff, {{0x2, 0x4e24, @multicast2}}}, 0x88) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x40004, 0x12) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = fcntl$dupfd(r4, 0x0, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000000780)}}], 0x2, 0x40885) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/229, 0xe5, 0x1, 0x0}, &(0x7f00000001c0)=0x40) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0x1000}) 1.103337056s ago: executing program 1 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/143, 0x8f) r2 = socket(0x21, 0x3, 0x7fd) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009c, 0x0, 0x4}]}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async, rerun: 64) r9 = userfaultfd(0x801) (rerun: 64) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4a1}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async, rerun: 32) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) pread64(r3, &(0x7f0000000240)=""/164, 0x131, 0x131) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r11, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0xfffff47b, 0xc}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async, rerun: 64) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r12, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) 931.613244ms ago: executing program 1 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0xb, 0x80000001}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x10, 0x0, [{0xc0000001, 0x2, 0x0, 0x0, 0xfffffffd, 0xf6, 0x6}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x810) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x18}, {&(0x7f0000000940)=""/114}], 0x44) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 740.580433ms ago: executing program 1 (id=113): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents(r1, &(0x7f0000000140)=""/134, 0x86) read$watch_queue(0xffffffffffffffff, &(0x7f0000000240)=""/211, 0xd3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x75, 0x4) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (rerun: 64) 687.306036ms ago: executing program 1 (id=114): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b86a50009040200022a3e740009058bff7f0000100109050b85c4b46e96cf3e615bcca96d54600795de3a790208f9b1f40f895dd6db5d6fbdcf43bc140b80498421c2c925d5d5bbc7a4471cd7c00b19a160dc90f604083e25a447e84df6d478b284db712aa8a2d817ce5191ac4dc97200ddc20e8cc854c9d8cec27b37d6a7f3aebb9d038caf0cfadb9b5b4823bb09630d145a7d41bb7e4f54d7da1a85af56a8a0456995c0a989e6fbd69aa78e3246b0173bd2da18eaa8bbf03be94f572627825ff6a1be8a30fee3cb2b74e8cbd14ae0a51bc91242da49c055926a4569121bac2c0c5e1c426541c26c674239da1b764cd59576251654b5af5d02cbeb0897c5251feb5921fe5ac5366598dfd11fd9d358bcd3abc0fe35037f9c1b83cb7885b1fa12ff174e1d32e1fa75dd52cde642a8ce174782f84f8e581f893e36b520"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x8000}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x40047705, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x80, 0x8, 0xffffffff, 0x3, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x67, 0x0, 0xd, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x14, 0x14, 0x1, 0x8, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) getsockname$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000980)={'tunl0\x00', r5, 0x80, 0x7, 0x2, 0x5, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, {[@rr={0x7, 0x1f, 0x2e, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @remote, @multicast1, @multicast2, @multicast1]}, @rr={0x7, 0xf, 0x31, [@remote, @empty, @broadcast]}, @end, @timestamp={0x44, 0x8, 0xe8, 0x0, 0x2, [0xf]}, @timestamp={0x44, 0x14, 0xa3, 0x0, 0xe, [0xfff, 0x800, 0x68, 0x9]}, @timestamp_addr={0x44, 0x2c, 0x64, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x44}, 0xa0}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x5}, {@multicast2, 0x2}, {@multicast2, 0x2}, {@local, 0x6}]}, @ssrr={0x89, 0xb, 0x52, [@loopback, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xcc, [@private=0xa010102, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @rand_addr=0x64010102]}, @generic={0x88, 0xc, "2c64721c7726e241ff6f"}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x90, r4, 0x500, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10001}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa0d}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x8000001) syz_usb_connect$cdc_ncm(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109029200020105405b0904000001020d00000b2406000175ee42a84982052400ffffa763438808000000020004000706241a21001a0524150000152412fbffa317a88b045e4f01a607c0ffcb7e392a07240a7f09fd100724140400c0ff08241c0800097a0d09058103ff030a05050904010000020d00000904010102020d000009058202ff031800fa09050302000481ff05"], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0xf, 0x9, 0x40, 0x74}, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="050f13000203100b0b1001040e800304fefff5"], 0x4, [{0x91, &(0x7f0000000640)=@string={0x91, 0x3, "2586bfee6e0ff18373c98773305b67760babef8c0e443571fe568ca228a9c29d2c080e0550d1c81e7cfdcd8167aba7c63e5e359af514dfba233c421ccb81bd929c9a9b0fc934e797cbe480fea98fa3244f317852ef4379476703711b05ec9a460387eb40fdc86a56a409e7a81ca6ac7e4d42e36d29813b0cd01af5579b292868c1e55cda373701eb4ba2ad511a64ff"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x36, &(0x7f00000003c0)=@string={0x36, 0x3, "d0b41b156c71df98bf5456e48c65e03f7aa71d4094daa7c9cbb4ad0a6777def5064b92cc810d05d5696727d47ed2a280c27d5fb3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x443}}]}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) sendmsg$802154_dgram(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x20044090) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r12, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x453, 0x4, 0x70bd29, 0x25dfdbfc, "3d2fbda344426d6b32a090964da7af3252caa8979965ecf198006b13c260880234cc1129b0021e7500df0597e0dc99ea6f87e014909f41c102c4a1e46927e4792db533f03aa86095477e0ac3c4bfbebe1dd6387e62bdfae6861358a22b1e3d312a6135e4f24ef4d678d8a6204f0522fb2720e32e7415e2fc16163d83657227bf7721a295e632a79e488d43dae72a58b4", [""]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x2000c010) 263.070547ms ago: executing program 2 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000004) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='scalable', 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000200)=0xfff, 0x4) r3 = dup2(r0, r0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000280)=0x80000000) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/4096) connect$inet6(r3, &(0x7f00000012c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000001700)={0x4, 0x9, 0x31ae43a3f318c60f, 0x3}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001780), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xa0, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0xa0}}, 0x40012) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x77, 0x4b}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001b80)={r2, &(0x7f0000001a80)='$\x00', 0x1, &(0x7f0000001ac0)={@align=0xc, {0x100, 0x7, 0x2, 0x6}}, 0x9, &(0x7f0000001b00), &(0x7f0000001b40)=0x4}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0xb}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001d80)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000001dc0)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r10 = socket$inet6(0xa, 0x4, 0xfffffffd) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000001e00)='veth1_to_bridge\x00', 0x10) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x100010, r7, 0x5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0x144, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x400}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8004800}, 0x4000005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000002080)={0x7f, 0xb0000000, 0x1b, 0xd, 0x1}, 0x14) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f00000020c0), &(0x7f0000002100)=0x4) 252.696078ms ago: executing program 3 (id=116): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x286702, 0x0) dup(r0) (async) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) 195.556451ms ago: executing program 0 (id=117): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x401c2103, &(0x7f00000000c0)={r2, 0xdbca09f5bb228b78, r1, 0x10001, 0x1f6428aa257c1379}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$usbmon(&(0x7f0000000000), 0x7777, 0x44840) 195.23093ms ago: executing program 2 (id=118): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x7e}]}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x1, 0xa, 0x7, 0x4, 0xa, "0e7770e4058dd9cf"}) r5 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x50000000}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) 114.182064ms ago: executing program 2 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000100)=ANY=[@ANYBLOB="7569643df9a850"]) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000000)={0x81, 0x327f, 0xffff, 0x1000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000002c0)=0xfd5c) 76.238116ms ago: executing program 3 (id=120): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = userfaultfd(0x801) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0xc813d019fb55f80c, &(0x7f0000000000)=0x8, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r3, &(0x7f0000000040)='/selinux/policy\x00', 0x10000, &(0x7f0000000080)={@align=0x1800000, {0xfffa, 0x6, 0x7, 0x11f6}}, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x9}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000200)={0x0, 0xfffffffffffffffb, [0x0, 0x5, 0x5, 0x2, 0x400, 0x401]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 0s ago: executing program 2 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x40000084, 0x0, 0x1}, {0xba0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030129bd7000fbdbdf2501000000000000000241000000100013ae0f87e07564703a73797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x40000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='\x01 gA\x10\xd27X\xc0\xde\xd0X\xa2\xc3\xd8\xd1\x11od\x05\a\xc1\xaf\xdalC\xcaHm=\xf6M\x92\x9cX+\xbaP2\xbf\xad\xf1?\x93mz\x02\xa0z\x8b\"w\xba!\xd2\x97\xecS\xc8\x9eH\xfa\x9d}%\xea') madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 22.439307][ T36] audit: type=1400 audit(1774597597.049:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.440437][ T282] cgroup: Unknown subsys name 'net' [ 22.462149][ T36] audit: type=1400 audit(1774597597.049:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.489709][ T36] audit: type=1400 audit(1774597597.079:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.490046][ T282] cgroup: Unknown subsys name 'devices' [ 22.672791][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.678673][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.830225][ T36] audit: type=1400 audit(1774597597.439:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.853665][ T36] audit: type=1400 audit(1774597597.439:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.878481][ T36] audit: type=1400 audit(1774597597.439:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.892328][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.910441][ T36] audit: type=1400 audit(1774597597.519:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.935901][ T36] audit: type=1400 audit(1774597597.519:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.987031][ T36] audit: type=1400 audit(1774597597.609:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.013346][ T36] audit: type=1400 audit(1774597597.609:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.013658][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.809653][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.816841][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.824369][ T289] bridge_slave_0: entered allmulticast mode [ 23.830874][ T289] bridge_slave_0: entered promiscuous mode [ 23.838653][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.845799][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.853091][ T289] bridge_slave_1: entered allmulticast mode [ 23.859225][ T289] bridge_slave_1: entered promiscuous mode [ 23.903996][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911230][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.918284][ T292] bridge_slave_0: entered allmulticast mode [ 23.924659][ T292] bridge_slave_0: entered promiscuous mode [ 23.933660][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.940720][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.947807][ T292] bridge_slave_1: entered allmulticast mode [ 23.954185][ T292] bridge_slave_1: entered promiscuous mode [ 23.986837][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.993920][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.001042][ T291] bridge_slave_0: entered allmulticast mode [ 24.007397][ T291] bridge_slave_0: entered promiscuous mode [ 24.016923][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.023986][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.031101][ T291] bridge_slave_1: entered allmulticast mode [ 24.037351][ T291] bridge_slave_1: entered promiscuous mode [ 24.054526][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.061692][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.068835][ T290] bridge_slave_0: entered allmulticast mode [ 24.075140][ T290] bridge_slave_0: entered promiscuous mode [ 24.081648][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.088851][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.096221][ T290] bridge_slave_1: entered allmulticast mode [ 24.102506][ T290] bridge_slave_1: entered promiscuous mode [ 24.226495][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.233555][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.240847][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.247860][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.270302][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.277408][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.284714][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.291739][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.317869][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.325021][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.332385][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339420][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.354337][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.361664][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.368906][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.376639][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.384204][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.391629][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.416578][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423741][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.431843][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.439163][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.462816][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469873][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.477846][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.485063][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.492665][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.499693][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.507998][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.515210][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.534092][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.541220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.556881][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.563984][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.577917][ T289] veth0_vlan: entered promiscuous mode [ 24.598243][ T289] veth1_macvtap: entered promiscuous mode [ 24.614420][ T292] veth0_vlan: entered promiscuous mode [ 24.644681][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.646692][ T291] veth0_vlan: entered promiscuous mode [ 24.671623][ T292] veth1_macvtap: entered promiscuous mode [ 24.699142][ T291] veth1_macvtap: entered promiscuous mode [ 24.714719][ T290] veth0_vlan: entered promiscuous mode [ 24.736644][ T290] veth1_macvtap: entered promiscuous mode [ 24.782477][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.853053][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 24.863777][ T332] ======================================================= [ 24.863777][ T332] WARNING: The mand mount option has been deprecated and [ 24.863777][ T332] and is ignored by this kernel. Remove the mand [ 24.863777][ T332] option from the mount to silence this warning. [ 24.863777][ T332] ======================================================= [ 24.902585][ T332] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 24.911120][ T332] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 24.924306][ T332] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 24.932832][ T332] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 24.941691][ T332] overlayfs: d_ino too big (2, ino=9223372036854775831, xinobits=3) [ 24.949855][ T332] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 24.959591][ T332] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 24.969593][ T332] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 24.970636][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.978765][ T332] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 25.080916][ T66] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 25.162195][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.176993][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.182239][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.187296][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.196409][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.208554][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.225231][ T66] usb 4-1: device descriptor read/64, error -71 [ 25.231512][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.240498][ T10] usb 1-1: config 0 descriptor?? [ 25.420616][ T313] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.470694][ T66] usb 4-1: device descriptor read/64, error -71 [ 25.571996][ T313] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 25.583029][ T313] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 25.594616][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 25.604513][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.618891][ T313] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 25.628432][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.636723][ T313] usb 2-1: Product: syz [ 25.642435][ T313] usb 2-1: Manufacturer: syz [ 25.647121][ T313] usb 2-1: SerialNumber: syz [ 25.648745][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.658378][ T313] usb 2-1: config 0 descriptor?? [ 25.662505][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.672076][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.679525][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.687061][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.694523][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.702201][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.709601][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.717142][ T66] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 25.725169][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.732692][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.740236][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.747773][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.755442][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.762948][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.770432][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 25.778271][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 25.787282][ T10] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 25.867606][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.876327][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.884858][ T10] usb 2-1: USB disconnect, device number 2 [ 25.892661][ T66] usb 4-1: device descriptor read/64, error -71 [ 25.912050][ T310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.920670][ T310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.928970][ T307] usb 1-1: USB disconnect, device number 2 [ 26.140683][ T66] usb 4-1: device descriptor read/64, error -71 [ 26.250795][ T66] usb usb4-port1: attempt power cycle [ 26.414008][ T351] incfs: ino conflict with backing FS 1 [ 26.456944][ T355] Zero length message leads to an empty skb [ 26.590689][ T66] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 26.611767][ T66] usb 4-1: device descriptor read/8, error -71 [ 26.710783][ T307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.741751][ T66] usb 4-1: device descriptor read/8, error -71 [ 26.760821][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.850751][ T307] usb 2-1: device descriptor read/64, error -71 [ 26.890663][ T313] usb 1-1: device descriptor read/64, error -71 [ 26.980635][ T66] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 27.002025][ T66] usb 4-1: device descriptor read/8, error -71 [ 27.090632][ T307] usb 2-1: device descriptor read/64, error -71 [ 27.131815][ T66] usb 4-1: device descriptor read/8, error -71 [ 27.140690][ T313] usb 1-1: device descriptor read/64, error -71 [ 27.240926][ T66] usb usb4-port1: unable to enumerate USB device [ 27.330649][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.380646][ T313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.460635][ T307] usb 2-1: device descriptor read/64, error -71 [ 27.510651][ T313] usb 1-1: device descriptor read/64, error -71 [ 27.700635][ T307] usb 2-1: device descriptor read/64, error -71 [ 27.750649][ T313] usb 1-1: device descriptor read/64, error -71 [ 27.810721][ T307] usb usb2-port1: attempt power cycle [ 27.860775][ T313] usb usb1-port1: attempt power cycle [ 27.879525][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 27.879542][ T36] audit: type=1400 audit(1774597602.489:144): avc: denied { create } for pid=361 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.905765][ T36] audit: type=1400 audit(1774597602.489:145): avc: denied { setopt } for pid=361 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.925715][ T36] audit: type=1400 audit(1774597602.519:146): avc: denied { read } for pid=364 comm="syz.3.18" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.947850][ T36] audit: type=1400 audit(1774597602.519:147): avc: denied { open } for pid=364 comm="syz.3.18" path="net:[4026532499]" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.170677][ T307] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.191810][ T307] usb 2-1: device descriptor read/8, error -71 [ 28.200861][ T313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.221884][ T313] usb 1-1: device descriptor read/8, error -71 [ 28.230643][ T66] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.321846][ T307] usb 2-1: device descriptor read/8, error -71 [ 28.351704][ T313] usb 1-1: device descriptor read/8, error -71 [ 28.390629][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 28.397291][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.405824][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 28.416806][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 28.426479][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 28.437693][ T66] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 28.448273][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 28.458204][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 28.468329][ T66] usb 4-1: language id specifier not provided by device, defaulting to English [ 28.478486][ T66] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 28.487708][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.495841][ T66] usb 4-1: Product: syz [ 28.499985][ T66] usb 4-1: Manufacturer: syz [ 28.504690][ T66] usb 4-1: SerialNumber: syz [ 28.510145][ T66] usb 4-1: config 0 descriptor?? [ 28.515577][ T367] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.534279][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.570614][ T307] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.591815][ T307] usb 2-1: device descriptor read/8, error -71 [ 28.600931][ T313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.622072][ T313] usb 1-1: device descriptor read/8, error -71 [ 28.721783][ T307] usb 2-1: device descriptor read/8, error -71 [ 28.730344][ T45] usb 4-1: USB disconnect, device number 6 [ 28.751776][ T313] usb 1-1: device descriptor read/8, error -71 [ 28.830750][ T307] usb usb2-port1: unable to enumerate USB device [ 28.860872][ T313] usb usb1-port1: unable to enumerate USB device [ 28.970022][ T36] audit: type=1400 audit(1774597603.579:148): avc: denied { write } for pid=368 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.989383][ T36] audit: type=1400 audit(1774597603.579:149): avc: denied { ioctl } for pid=368 comm="syz.2.20" path="socket:[3635]" dev="sockfs" ino=3635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.101309][ T374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.113569][ T36] audit: type=1400 audit(1774597603.739:150): avc: denied { write } for pid=373 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.247879][ T36] audit: type=1400 audit(1774597603.859:151): avc: denied { create } for pid=375 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.268366][ T36] audit: type=1400 audit(1774597603.859:152): avc: denied { write } for pid=375 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.290725][ T36] audit: type=1400 audit(1774597603.859:153): avc: denied { nlmsg_write } for pid=375 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.446809][ T383] netlink: 37 bytes leftover after parsing attributes in process `syz.1.25'. [ 29.466328][ T385] loop7: detected capacity change from 0 to 7 [ 29.530634][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.680665][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 29.687596][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.696255][ T313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.707812][ T313] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 29.717081][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.725727][ T313] usb 3-1: Product: syz [ 29.729996][ T313] usb 3-1: Manufacturer: syz [ 29.734728][ T313] usb 3-1: SerialNumber: syz [ 29.764938][ T401] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 29.853396][ T403] netlink: 'syz.3.32': attribute type 27 has an invalid length. [ 29.868772][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.876042][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.891058][ T66] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.898693][ T307] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 29.945146][ T313] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.956179][ T313] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 29.968656][ T313] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 29.979135][ T313] usb 3-1: USB disconnect, device number 2 [ 29.991965][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.052428][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.060310][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.068862][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 30.077799][ T307] usb 2-1: config 1 interface 0 has no altsetting 0 [ 30.085278][ T66] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 30.094517][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.102550][ T66] usb 1-1: Product: syz [ 30.106798][ T66] usb 1-1: Manufacturer: syz [ 30.111444][ T66] usb 1-1: SerialNumber: syz [ 30.116093][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.125633][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.133948][ T307] usb 2-1: Product: syz [ 30.138148][ T307] usb 2-1: Manufacturer: syz [ 30.143286][ T307] usb 2-1: SerialNumber: syz [ 30.347467][ T66] usb 1-1: USB disconnect, device number 7 [ 30.354628][ T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.363646][ T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.376933][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.387311][ T307] usb 2-1: USB disconnect, device number 7 [ 30.402525][ T412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 30.772369][ T437] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 30.780234][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 30.791411][ T66] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.940710][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 30.948774][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 30.959866][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.969712][ T66] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.980942][ T66] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 30.993963][ T66] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 31.003173][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.011315][ T66] usb 3-1: Product: syz [ 31.015546][ T66] usb 3-1: Manufacturer: 쒱㓀頍疜挰뎾ࣻ쩒῜聛洉鞴儘澐㋑뗏㤟︜幀졽嗺랂﹃臒ퟙ›ꤓ䰀ꅏⱸ↬荽깴랄籤扱ﯰ꯱ꇱ铉裘췕엓圐÷镳溡持哄Ⱍ䲂캇ςꋺ쿡땲䆔 [ 31.036418][ T66] usb 3-1: SerialNumber: syz [ 31.220683][ T313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.373304][ T313] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 31.382547][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.390690][ T313] usb 1-1: Product: syz [ 31.394896][ T313] usb 1-1: Manufacturer: syz [ 31.399625][ T313] usb 1-1: SerialNumber: syz [ 31.451318][ T66] usb 3-1: USB disconnect, device number 3 [ 31.464359][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.608334][ T313] usb 1-1: MIDIStreaming interface descriptor not found [ 31.617357][ T313] usb 1-1: USB disconnect, device number 8 [ 31.628644][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.971188][ T477] netlink: 37 bytes leftover after parsing attributes in process `syz.2.54'. [ 32.163116][ T490] overlayfs: conflicting options: userxattr,verity=require [ 32.171117][ T490] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 32.191477][ T492] lo: entered promiscuous mode [ 32.196962][ T491] lo: left promiscuous mode [ 32.210644][ T66] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 32.360616][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 32.360673][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.366798][ T66] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.383699][ T66] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 32.392767][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.401362][ T66] usb 2-1: config 0 descriptor?? [ 32.500673][ T359] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.520665][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 32.526899][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.537288][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.546457][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.555105][ T45] usb 1-1: config 0 descriptor?? [ 32.608534][ T478] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 32.616346][ T478] netlink: 17 bytes leftover after parsing attributes in process `syz.1.55'. [ 32.628153][ T66] usb 2-1: USB disconnect, device number 8 [ 32.650682][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 32.657108][ T359] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 32.667137][ T359] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 32.676231][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.684321][ T359] usb 3-1: Product: syz [ 32.688512][ T359] usb 3-1: Manufacturer: syz [ 32.693251][ T359] usb 3-1: SerialNumber: syz [ 32.700388][ T359] r8152-cfgselector 3-1: Unknown version 0x0000 [ 32.706692][ T359] r8152-cfgselector 3-1: config 0 descriptor?? [ 32.770409][ T307] usb 1-1: USB disconnect, device number 9 [ 32.914391][ T36] kauditd_printk_skb: 139 callbacks suppressed [ 32.914406][ T36] audit: type=1400 audit(1774597607.529:293): avc: denied { mount } for pid=493 comm="syz.2.62" name="/" dev="ramfs" ino=5362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.958755][ T498] netlink: 'syz.3.63': attribute type 15 has an invalid length. [ 32.966592][ T498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 32.976439][ T36] audit: type=1400 audit(1774597607.589:294): avc: denied { write } for pid=497 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.159333][ T494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.168854][ T494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.180368][ T359] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 33.287739][ T36] audit: type=1400 audit(1774597607.899:295): avc: denied { shutdown } for pid=508 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.308116][ T36] audit: type=1400 audit(1774597607.899:296): avc: denied { nlmsg_read } for pid=508 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.333597][ T36] audit: type=1400 audit(1774597607.899:297): avc: denied { ioctl } for pid=508 comm="syz.0.67" path="socket:[6194]" dev="sockfs" ino=6194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.359561][ T36] audit: type=1400 audit(1774597607.899:298): avc: denied { create } for pid=508 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 33.379287][ T36] audit: type=1400 audit(1774597607.899:299): avc: denied { accept } for pid=508 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.450663][ T66] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.600664][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 33.607137][ T66] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 33.615464][ T66] usb 2-1: config 0 has no interface number 0 [ 33.621776][ T66] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.631809][ T66] usb 2-1: config 0 interface 196 has no altsetting 0 [ 33.639999][ T66] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.649194][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.657417][ T66] usb 2-1: Product: syz [ 33.660674][ T359] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 33.661619][ T66] usb 2-1: Manufacturer: syz [ 33.673895][ T66] usb 2-1: SerialNumber: syz [ 33.679052][ T66] usb 2-1: config 0 descriptor?? [ 33.684485][ T507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.790657][ T359] usb 1-1: device descriptor read/64, error -71 [ 33.863561][ T36] audit: type=1400 audit(1774597608.479:300): avc: denied { create } for pid=519 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.882910][ T36] audit: type=1400 audit(1774597608.479:301): avc: denied { map } for pid=519 comm="syz.2.71" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.906348][ T36] audit: type=1400 audit(1774597608.479:302): avc: denied { create } for pid=519 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.040668][ T359] usb 1-1: device descriptor read/64, error -71 [ 34.280653][ T359] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 34.410653][ T359] usb 1-1: device descriptor read/64, error -71 [ 34.650653][ T359] usb 1-1: device descriptor read/64, error -71 [ 34.760743][ T359] usb usb1-port1: attempt power cycle [ 34.800894][ T66] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 34.812079][ T66] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 34.864763][ T527] FAULT_INJECTION: forcing a failure. [ 34.864763][ T527] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.878264][ T527] CPU: 0 UID: 0 PID: 527 Comm: syz.2.73 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 34.878295][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.878311][ T527] Call Trace: [ 34.878317][ T527] [ 34.878332][ T527] __dump_stack+0x21/0x30 [ 34.878362][ T527] dump_stack_lvl+0x140/0x1c0 [ 34.878385][ T527] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.878409][ T527] ? check_stack_object+0x12b/0x150 [ 34.878434][ T527] dump_stack+0x19/0x20 [ 34.878455][ T527] should_fail_ex+0x3d7/0x530 [ 34.878479][ T527] should_fail+0xf/0x20 [ 34.878499][ T527] should_fail_usercopy+0x1e/0x30 [ 34.878522][ T527] _copy_to_user+0x24/0xa0 [ 34.878547][ T527] simple_read_from_buffer+0xed/0x160 [ 34.878568][ T527] proc_fail_nth_read+0x1aa/0x220 [ 34.878589][ T527] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.878609][ T527] ? bpf_lsm_file_permission+0xd/0x20 [ 34.878628][ T527] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.878648][ T527] vfs_read+0x289/0xcb0 [ 34.878671][ T527] ? pollwake+0x220/0x220 [ 34.878691][ T527] ? __cfi_vfs_read+0x10/0x10 [ 34.878712][ T527] ? __kasan_check_write+0x18/0x20 [ 34.878734][ T527] ? mutex_lock+0x97/0x1d0 [ 34.878750][ T527] ? __cfi_mutex_lock+0x10/0x10 [ 34.878767][ T527] ? __fget_files+0x2c5/0x340 [ 34.878784][ T527] ksys_read+0x145/0x260 [ 34.878807][ T527] ? __cfi_ksys_read+0x10/0x10 [ 34.878830][ T527] ? __kasan_check_read+0x15/0x20 [ 34.878852][ T527] __x64_sys_read+0x7f/0x90 [ 34.878874][ T527] x64_sys_call+0x2638/0x2ee0 [ 34.878899][ T527] do_syscall_64+0x57/0xf0 [ 34.878921][ T527] ? clear_bhb_loop+0x50/0xa0 [ 34.878946][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.878969][ T527] RIP: 0033:0x7f1dc615cfce [ 34.878995][ T527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.879010][ T527] RSP: 002b:00007f1dc7087fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.879032][ T527] RAX: ffffffffffffffda RBX: 00007f1dc70886c0 RCX: 00007f1dc615cfce [ 34.879046][ T527] RDX: 000000000000000f RSI: 00007f1dc70880a0 RDI: 0000000000000005 [ 34.879058][ T527] RBP: 00007f1dc7088090 R08: 0000000000000000 R09: 0000000000000000 [ 34.879071][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.879081][ T527] R13: 00007f1dc6416038 R14: 00007f1dc6415fa0 R15: 00007ffddc86c4a8 [ 34.879097][ T527] [ 35.130621][ T359] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 35.151670][ T359] usb 1-1: device descriptor read/8, error -71 [ 35.281710][ T359] usb 1-1: device descriptor read/8, error -71 [ 35.520616][ T359] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 35.541686][ T359] usb 1-1: device descriptor read/8, error -71 [ 35.671743][ T359] usb 1-1: device descriptor read/8, error -71 [ 35.780761][ T359] usb usb1-port1: unable to enumerate USB device [ 36.043991][ T555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=555 comm=syz.2.77 [ 36.222348][ T360] usb 2-1: USB disconnect, device number 9 [ 36.258945][ T360] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 36.290658][ T359] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.451907][ T359] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.465257][ T359] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.479867][ T359] usb 3-1: New USB device found, idVendor=0525, idProduct=b4a8, bcdDevice= 0.41 [ 36.489117][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 36.498108][ T359] usb 3-1: Product: syz [ 36.502369][ T359] usb 3-1: Manufacturer: syz [ 36.507012][ T359] usb 3-1: SerialNumber: syz [ 36.680659][ T360] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.714253][ T359] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xB4A8 [ 36.820668][ T313] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 36.830635][ T360] usb 2-1: Using ep0 maxpacket: 8 [ 36.837059][ T360] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 36.846084][ T360] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 36.854369][ T360] usb 2-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 36.864754][ T360] usb 2-1: config 0 has no interface number 0 [ 36.870892][ T360] usb 2-1: too many endpoints for config 0 interface 23 altsetting 167: 228, using maximum allowed: 30 [ 36.882174][ T360] usb 2-1: config 0 interface 23 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 36.895764][ T360] usb 2-1: config 0 interface 23 has no altsetting 0 [ 36.904144][ T360] usb 2-1: New USB device found, idVendor=0b57, idProduct=002a, bcdDevice=6d.01 [ 36.913252][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.921567][ T360] usb 2-1: Product: syz [ 36.925178][ T66] usb 3-1: USB disconnect, device number 5 [ 36.925738][ T360] usb 2-1: Manufacturer: syz [ 36.925754][ T360] usb 2-1: SerialNumber: syz [ 36.930873][ T360] usb 2-1: config 0 descriptor?? [ 36.933847][ T66] usblp0: removed [ 36.981945][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.992279][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.001916][ T313] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 37.011209][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.019209][ T313] usb 1-1: SerialNumber: syz [ 37.026559][ T313] usb 1-1: 0:2 : does not exist [ 37.142711][ T360] usb 2-1: USB disconnect, device number 10 [ 37.428641][ T582] GUP no longer grows the stack in syz.0.82 (582): 200000005000-200000008000 (200000004000) [ 37.439193][ T582] CPU: 1 UID: 0 PID: 582 Comm: syz.0.82 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 37.439231][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.439245][ T582] Call Trace: [ 37.439252][ T582] [ 37.439261][ T582] __dump_stack+0x21/0x30 [ 37.439295][ T582] dump_stack_lvl+0x140/0x1c0 [ 37.439321][ T582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.439347][ T582] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 37.439374][ T582] dump_stack+0x19/0x20 [ 37.439396][ T582] fixup_user_fault+0x62a/0x6b0 [ 37.439417][ T582] fault_in_user_writeable+0x75/0xe0 [ 37.439438][ T582] futex_lock_pi+0x2d7/0xa70 [ 37.439461][ T582] ? __cfi_futex_lock_pi+0x10/0x10 [ 37.439486][ T582] ? __cfi_futex_wake_mark+0x10/0x10 [ 37.439511][ T582] ? futex_setup_timer+0xb4/0xd0 [ 37.439531][ T582] ? __cfi_futex_wake_mark+0x10/0x10 [ 37.439557][ T582] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 37.439584][ T582] ? mas_find+0x358/0x5f0 [ 37.439605][ T582] do_futex+0x270/0x510 [ 37.439626][ T582] ? do_vmi_munmap+0x245/0x2e0 [ 37.439652][ T582] ? __cfi_do_futex+0x10/0x10 [ 37.439687][ T582] ? __vm_munmap+0x2de/0x390 [ 37.439717][ T582] __se_sys_futex+0x13c/0x320 [ 37.439741][ T582] ? __x64_sys_futex+0x110/0x110 [ 37.439767][ T582] ? __kasan_check_write+0x18/0x20 [ 37.439795][ T582] __x64_sys_futex+0xe9/0x110 [ 37.439816][ T582] x64_sys_call+0x227f/0x2ee0 [ 37.439838][ T582] do_syscall_64+0x57/0xf0 [ 37.439857][ T582] ? clear_bhb_loop+0x50/0xa0 [ 37.439879][ T582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.439903][ T582] RIP: 0033:0x7fa959b9c799 [ 37.439919][ T582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.439937][ T582] RSP: 002b:00007fa95aaff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.439961][ T582] RAX: ffffffffffffffda RBX: 00007fa959e15fa0 RCX: 00007fa959b9c799 [ 37.439977][ T582] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 37.439991][ T582] RBP: 00007fa959c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 37.440005][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.440018][ T582] R13: 00007fa959e16038 R14: 00007fa959e15fa0 R15: 00007ffce289bbe8 [ 37.440036][ T582] [ 37.684968][ T45] usb 1-1: USB disconnect, device number 14 [ 37.707425][ T592] netlink: 'syz.2.85': attribute type 7 has an invalid length. [ 37.715230][ T592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 37.792112][ T594] kvm: pic: level sensitive irq not supported [ 37.792218][ T594] kvm: pic: single mode not supported [ 37.798347][ T594] kvm: pic: level sensitive irq not supported [ 37.817698][ T594] kvm: pic: single mode not supported [ 37.824375][ T594] kvm: pic: single mode not supported [ 37.829796][ T594] kvm: pic: level sensitive irq not supported [ 37.835859][ T594] kvm: pic: level sensitive irq not supported [ 37.861725][ T594] kvm: pic: single mode not supported [ 37.911125][ T594] kvm: pic: single mode not supported [ 37.929570][ T594] kvm: pic: single mode not supported [ 37.946428][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 37.946446][ T36] audit: type=1400 audit(1774597612.559:345): avc: denied { unlink } for pid=589 comm="syz.1.86" name="#1" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.000603][ T607] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 38.008773][ T36] audit: type=1400 audit(1774597612.599:346): avc: denied { mount } for pid=589 comm="syz.1.86" name="/" dev="overlay" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.049551][ T610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=610 comm=syz.2.90 [ 38.068468][ T610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 38.131366][ T36] audit: type=1400 audit(1774597612.749:347): avc: denied { create } for pid=609 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 38.157080][ T36] audit: type=1400 audit(1774597612.749:348): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.180750][ T36] audit: type=1400 audit(1774597612.799:349): avc: denied { create } for pid=612 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.233588][ T620] rust_binder: Write failure EFAULT in pid:46 [ 38.233671][ T36] audit: type=1400 audit(1774597612.849:350): avc: denied { ioctl } for pid=618 comm="syz.0.93" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.323809][ T622] mmap: syz.0.94 (622) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.420693][ T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 38.550627][ T45] usb 2-1: device descriptor read/64, error -71 [ 38.600629][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 38.700658][ T66] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 38.751755][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 38.762883][ T10] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 38.772836][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 38.781992][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.790738][ T45] usb 2-1: device descriptor read/64, error -71 [ 38.860623][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 38.991037][ T66] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 38.997152][ T36] audit: type=1326 audit(1774597613.609:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=633 comm="syz.3.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32f099c799 code=0x0 [ 39.030706][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 39.140609][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 39.146146][ T66] usb usb3-port1: attempt power cycle [ 39.160661][ T45] usb 2-1: device descriptor read/64, error -71 [ 39.400691][ T45] usb 2-1: device descriptor read/64, error -71 [ 39.490674][ T66] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 39.510776][ T45] usb usb2-port1: attempt power cycle [ 39.511035][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 39.650622][ T66] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 39.670972][ T66] usb 3-1: Invalid ep0 maxpacket: 16 [ 39.676512][ T66] usb usb3-port1: unable to enumerate USB device [ 39.802134][ T10] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 39.809777][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 39.819812][ T36] audit: type=1400 audit(1774597614.429:352): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=496 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.822440][ T10] usb 1-1: USB disconnect, device number 15 [ 39.846376][ T36] audit: type=1400 audit(1774597614.429:353): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=496 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.871577][ T45] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 39.891793][ T45] usb 2-1: device descriptor read/8, error -71 [ 40.021837][ T45] usb 2-1: device descriptor read/8, error -71 [ 40.260652][ T45] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 40.281881][ T45] usb 2-1: device descriptor read/8, error -71 [ 40.411731][ T45] usb 2-1: device descriptor read/8, error -71 [ 40.520808][ T45] usb usb2-port1: unable to enumerate USB device [ 40.560629][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 40.710628][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 40.716979][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.727894][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.737653][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.750446][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.759502][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.768212][ T10] usb 1-1: config 0 descriptor?? [ 41.177385][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 41.184059][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.196092][ T10] usb 1-1: USB disconnect, device number 16 [ 41.207138][ T36] audit: type=1400 audit(1774597615.819:354): avc: denied { getopt } for pid=646 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.294976][ T655] SELinux: failed to load policy [ 41.530236][ T662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 41.890628][ T359] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.940692][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 42.040635][ T359] usb 3-1: Using ep0 maxpacket: 32 [ 42.048465][ T359] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 42.058128][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.066389][ T359] usb 3-1: Product: syz [ 42.070746][ T359] usb 3-1: Manufacturer: syz [ 42.075807][ T359] usb 3-1: SerialNumber: syz [ 42.091755][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.104113][ T45] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 42.113330][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.125361][ T45] usb 1-1: config 0 descriptor?? [ 42.134931][ T45] usb 1-1: unsupported MDLM descriptors [ 42.285538][ T662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.294408][ T662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.312909][ T662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.342488][ T10] usb 1-1: USB disconnect, device number 17 [ 42.385135][ T359] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.392203][ T359] usb 3-1: unit 2 not found! [ 42.397525][ T359] usb 3-1: unit 83 not found! [ 42.410671][ T359] usb 3-1: USB disconnect, device number 10 [ 42.680662][ T307] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 42.831643][ T307] usb 2-1: config 27 has an invalid interface number: 2 but max is 0 [ 42.839973][ T307] usb 2-1: config 27 has no interface number 0 [ 42.846420][ T307] usb 2-1: config 27 interface 2 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 42.857732][ T307] usb 2-1: config 27 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 110, changing to 7 [ 42.869185][ T307] usb 2-1: config 27 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 42180, setting to 1024 [ 42.880606][ T307] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 42.893971][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.952599][ T694] +$<: renamed from bridge0 (while UP) [ 43.043237][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 43.043256][ T36] audit: type=1400 audit(1774597617.659:360): avc: denied { read } for pid=691 comm="syz.0.117" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.064317][ T697] bpf: Bad value for 'uid' [ 43.077147][ T36] audit: type=1400 audit(1774597617.659:361): avc: denied { open } for pid=691 comm="syz.0.117" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.100726][ T36] audit: type=1400 audit(1774597617.699:362): avc: denied { getopt } for pid=696 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.126759][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.139392][ T36] audit: type=1400 audit(1774597617.759:363): avc: denied { setopt } for pid=698 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.139837][ T699] ------------[ cut here ]------------ [ 43.165580][ T699] WARNING: CPU: 0 PID: 699 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 43.175185][ T699] Modules linked in: [ 43.175482][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.179261][ T699] CPU: 0 UID: 0 PID: 699 Comm: syz.3.120 Not tainted syzkaller #0 e5e4876e63e0994bd4350cd5f958f668e2098f7e [ 43.198345][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.208611][ T699] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 43.214722][ T699] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a 7f 0b 06 00 0f 85 c2 00 00 00 c6 05 fd 7e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 43.234493][ T699] RSP: 0018:ffffc9000e62f640 EFLAGS: 00010246 [ 43.240655][ T699] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 43.248638][ T699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e62f6f8 [ 43.256680][ T699] RBP: ffffc9000e62f780 R08: ffffc9000e62f6f7 R09: 0000000000000000 [ 43.264702][ T699] R10: ffffc9000e62f6e0 R11: fffff52001cc5edf R12: ffffc9000e62f680 [ 43.272829][ T699] R13: dffffc0000000000 R14: 1ffff92001cc5ecc R15: 0000000000000000 [ 43.281018][ T699] FS: 00007f32ef3f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.290329][ T699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.297135][ T699] CR2: 0000200000002000 CR3: 000000011ca22000 CR4: 00000000003526b0 [ 43.305427][ T699] Call Trace: [ 43.308719][ T699] [ 43.311710][ T699] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 43.317455][ T699] ? __kasan_slab_alloc+0x73/0x90 [ 43.322514][ T699] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 43.328261][ T699] ? hashtab_init+0xdb/0x1f0 [ 43.329204][ T36] audit: type=1400 audit(1774597617.949:364): avc: denied { write } for pid=683 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.332947][ T699] ___kmalloc_large_node+0x81/0x210 [ 43.353769][ T36] audit: type=1107 audit(1774597617.979:365): pid=683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='=/DBmk2M2Rʨe' [ 43.357899][ T699] ? hashtab_init+0xdb/0x1f0 [ 43.377858][ T699] __kmalloc_large_node_noprof+0x1e/0xd0 [ 43.383632][ T699] ? hashtab_init+0xdb/0x1f0 [ 43.388245][ T699] __kmalloc_noprof+0x326/0x500 [ 43.393190][ T699] ? __cfi_ebitmap_read+0x10/0x10 [ 43.398244][ T699] hashtab_init+0xdb/0x1f0 [ 43.402729][ T699] ? policydb_read+0x87f/0x28b0 [ 43.407617][ T699] symtab_init+0x44/0x70 [ 43.411995][ T699] policydb_read+0x90e/0x28b0 [ 43.416711][ T699] ? __kasan_kmalloc+0x96/0xb0 [ 43.421508][ T699] ? __cfi_policydb_read+0x10/0x10 [ 43.426764][ T699] ? security_load_policy+0x130/0x12d0 [ 43.432290][ T699] security_load_policy+0x16a/0x12d0 [ 43.437892][ T699] ? irqentry_exit+0x4a/0x60 [ 43.442621][ T699] ? asm_exc_page_fault+0x2b/0x30 [ 43.447687][ T699] ? __cfi_security_load_policy+0x10/0x10 [ 43.453627][ T699] ? rep_movs_alternative+0x4a/0xa0 [ 43.458846][ T699] sel_write_load+0x2a7/0x5f0 [ 43.463564][ T699] ? __cfi_sel_write_load+0x10/0x10 [ 43.468872][ T699] ? selinux_socket_setsockopt+0x324/0x3d0 [ 43.474722][ T699] ? bpf_lsm_file_permission+0xd/0x20 [ 43.480131][ T699] ? __cfi_sel_write_load+0x10/0x10 [ 43.485418][ T699] vfs_write+0x3c5/0xf90 [ 43.489778][ T699] ? __cfi_vfs_write+0x10/0x10 [ 43.494601][ T699] ? __kasan_check_write+0x18/0x20 [ 43.499738][ T699] ? mutex_lock+0x97/0x1d0 [ 43.504200][ T699] ? __cfi_mutex_lock+0x10/0x10 [ 43.509069][ T699] ? __fget_files+0x2c5/0x340 [ 43.513787][ T699] ksys_write+0x145/0x260 [ 43.518133][ T699] ? xfd_validate_state+0x68/0x140 [ 43.523332][ T699] ? __cfi_ksys_write+0x10/0x10 [ 43.528207][ T699] ? __kasan_check_write+0x18/0x20 [ 43.533348][ T699] ? fpregs_restore_userregs+0x11c/0x260 [ 43.538998][ T699] __x64_sys_write+0x7f/0x90 [ 43.543637][ T699] x64_sys_call+0x271c/0x2ee0 [ 43.548616][ T699] do_syscall_64+0x57/0xf0 [ 43.553361][ T699] ? clear_bhb_loop+0x50/0xa0 [ 43.558378][ T699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.564344][ T699] RIP: 0033:0x7f32f099c799 [ 43.568774][ T699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.588420][ T699] RSP: 002b:00007f32ef3f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.596982][ T699] RAX: ffffffffffffffda RBX: 00007f32f0c15fa0 RCX: 00007f32f099c799 [ 43.605180][ T699] RDX: 0000000000002046 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.613205][ T699] RBP: 00007f32f0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 43.621365][ T699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.629406][ T699] R13: 00007f32f0c16038 R14: 00007f32f0c15fa0 R15: 00007fff565184f8 [ 43.637525][ T699] [ 43.640615][ T699] ---[ end trace 0000000000000000 ]--- [ 43.647583][ T699] SELinux: failed to load policy [ 43.703081][ T307] usb 2-1: string descriptor 0 read error: -71 [ 43.712438][ T307] usb 2-1: USB disconnect, device number 15