last executing test programs: 9.756451285s ago: executing program 2 (id=167): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x920, 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x0, r7, r8, r9], 0x4fd, 0x4, 0x1}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x920, 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r12, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x0, r13, r14, r15], 0x4fd, 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000500)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, r8, r15, r16, r17, 0x0], &(0x7f00000004c0)=[0x4], 0xa, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r2, r3, r4, r8, r18, r19], &(0x7f0000000200)=[0x1], 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='X'], 0x0) 8.848326072s ago: executing program 1 (id=171): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/241, 0xf1}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x8, &(0x7f0000002b00)=""/17, 0x11}, 0x40000000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) 7.971511943s ago: executing program 1 (id=175): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x8c9b, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) fchdir(r7) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ptrace(0x10, r6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 7.865605163s ago: executing program 2 (id=176): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf48961", 0x4a}) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) syz_open_dev$loop(0x0, 0x0, 0x187540) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x17, 0x9, 0x0, 0x6, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x30}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0xffffff7f, 0x0) 6.661081431s ago: executing program 1 (id=179): socket$nl_route(0x10, 0x3, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3df75f6f3431af685ea91b3567bed68628cfb4f7d7c1b0ea5b854b16163d05c8a039c3042736d03c59122920604c614b406c43462a960047367811f329bfad6ec7b4c36e7a12104f0afa8f984116ef82f7ad1581e4e4236ae9bd0182f1a6fa81570b1107114aabf2"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) open$dir(&(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x0, 0x40) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='hostfs\x00', 0x4000, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x24380, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) socket(0x6, 0x2, 0x1080000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f00000005c0)=@ethtool_dump={0x40, 0x6, 0xfffff800}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, 0x0, 0x0) 6.605443516s ago: executing program 2 (id=181): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa000905097f99ad"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, &(0x7f0000002540)='\r', 0x1}]) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000000004044104d7a00000000000109022400010000e80b09040010010300020009210000000122610309058103"], 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.87104727s ago: executing program 0 (id=185): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='udf\x00', 0x8000, &(0x7f0000000380)='maps\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, 0x0, 0x0, 0x14001}], 0x1, 0x4044040) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setreuid(0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0xa850) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) lseek(r0, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 5.16427512s ago: executing program 4 (id=187): syz_emit_ethernet(0x41, &(0x7f0000000600)={@empty, @broadcast, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@arp={0x806, @generic={0x323, 0x8917, 0x6, 0xa, 0x8, @remote, "d222ed950e9acc73230a", @local, "dbe3014363e7365f402dd1a66f"}}}}, &(0x7f0000000680)={0x1, 0x2, [0xaff, 0x50c, 0x7cf, 0x800]}) 4.938555645s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b765de29e7f00000000000000800000f7000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000001f0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) unshare(0x2c020400) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$MRT_PIM(r4, 0x0, 0xcf, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x180, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x4, 0x9, 0x1800}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x4000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r1, 0x4, 0x1, 0x5}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 4.773404917s ago: executing program 4 (id=189): r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x20, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7e, 0x22, 0x0, 0x403}) setsockopt(0xffffffffffffffff, 0xda, 0x9, &(0x7f0000000000)="d0a6e5d66d62cce0a84758c81d585b6e45247cd7c9b531f81a8f4a754e4b6d318ae6e3a80861faa1d7ae98ead3a7d53a5613e4a4464a19d94774ac17aef0a4e9752b88457f49196de2fe269d17056d5f356eff", 0x53) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x152) write(r2, &(0x7f0000000180)="ff00", 0x2) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000140)={0x1, 0x200, 0x7f, 0x5b70, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f00000001c0)="a0a91f26d18a2e3062af396cca0b907ac30e9acac777ffafdbb25f3d385c374abcdbd9b0f521c8421cd643902d54d0ac19d09f3b6a874fb795d6d9ff2a1afd41b3f94e0ca68202abc482abb0e5f3e7d166f82156c2b672012b05b9a56533238fedc790e8288c0ef2422530b42b2730256bc39f8fd0a0dec474c78ac454cb605bfdc8ce7059435db997a8d96ce4665c7e777f5c8d28c9be4ba753369d0696a88ff158c18fb2468e9845a125d0efc34ac2d6f778a0acab2a452a42ef0f632d357c00819ade92ef443f4d5413f40ff489d6e38063b25a19c7d0d0", 0xd9}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) 4.547829942s ago: executing program 0 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x9) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) (async) io_setup(0x1, &(0x7f0000000480)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) write(r1, &(0x7f0000000200)='1', 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) unshare(0x62040200) 4.546776487s ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x136) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x68431, &(0x7f0000000000)={[], [], 0x2f}) (fail_nth: 11) 4.471018469s ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioperm(0x7f, 0x0, 0xc) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x141040) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x200b, 0x4, 0xfffffff9, 0x6, 0x200}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f0000000100)='3', 0x1) 4.390139589s ago: executing program 1 (id=193): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x25000, 0x4, 0x10000, 0xfec02000], 0x4, 0x48, 0xd8}) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r4, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x7, 0x0, "f99209c82d3637d57adbe58ab794e13c2540d88850381d95c52f8b0cf0b4a2aad674d2791ab3b5a0eeec5786857a9c6064d8082a600c8d0015c31996fe9b67", 0x17}, 0x80) fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) close(0x5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000700, 0x200000000816, 0x200000000af2], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000ebfcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000101000000feffffff2e4187b3efc085b21d8d1595000000000000040000000000000800"/144]}, 0x108) 4.342083623s ago: executing program 3 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20048040) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) migrate_pages(0x0, 0x1, 0x0, &(0x7f0000000140)=0x9) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x108}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) 4.208889925s ago: executing program 4 (id=195): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0xffffffff}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r8 = io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x9ddd, 0x10, 0x3, 0x159, 0x0, r1}) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x1c, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) io_submit(r3, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r2, 0x0, 0x0, 0x6}]) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x40, 0x5, 0x5}}, 0x10) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000aa1006"], 0xb) 3.289004726s ago: executing program 0 (id=196): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) semop(0x0, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r2 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0xf8, @scatter={0x0, 0x1000000, 0x0}, &(0x7f0000000440)="153606ee522b", 0x0, 0x7, 0x0, 0x3, 0x0}) 3.230484852s ago: executing program 4 (id=197): r0 = userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000080)={&(0x7f0000000240)=@canfd={{0x0, 0x1, 0x1}, 0x12, 0x2, 0x0, 0x0, "881ff3a24610c2ffae1dc1088903a9e2cd32039b49dea7b70cc8c9e6e2120e4db8d2d2ee6bc77d2426a28751bf7b50038ac8377a01cb6950a2cdec5df4682a79"}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002f80)={'team0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000003040)=[{{&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000002680)=[{&(0x7f00000001c0)="1f1549110fdd77837960f888472bcbc37aeb68aa59d1c28f13c31cdb792e1976d19d9ce238d74de61c85d71320f7962232353924d57d06422253520f42fa525f4a070f6e6baf1121879d5bd456abba558f16efceeeb8925c4b3f6838ce0dfc0e9ac8ee52b628aa1483cc525653d5eef392e5fc2ffb74b720a5d9", 0x7a}, {&(0x7f00000002c0)="c5b710f36a5556f9067db3495c694c439a1c6c338a66a9694b8444ba427c880cfa8c7c7d4b6e51339b10a9e67c42c910c2069bee9f09424b60bd1e11536225edc424a353d7731e5f82d46e811ff7d13f6d4852a655bf2c0cd7ed398378176f7ea2d8477f738c9d17dcd6f4fe1f6208f48e331508dddc4d1356d71a73093e3d24ea66b481d78f183ff64c6d82caf8e747820c04c2b0dc59d1654681a90c0e2e485bb605f52226fe1f755222294d1c7cbb40e5374c6f0f4fb33b759b55fb74ec33ff6e7e186f02c35f21bf814a4f86957d688aa0c049b53a97908fc1702021ff", 0xdf}, {&(0x7f00000003c0)="aa39ec0ac34c0b697e42b58242", 0xd}, {&(0x7f0000000400)="4a5760689f73e118c2df7022af4d961e66ee58b44c9f9c1cf7af0d27232f7769b7bbe140cdde19", 0x27}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="c717ee5a2044fecf5f99f82c2f8acc42a1969937fd0666621462ebbcefbe4948fa5f104e505c279bbafaecfdf7a6a11cf1d04a454f3526d93817f20124d45af073d881b41f69f94221978de701f46ea2b2d67044ee52bd7a4df53acd582c4ada29d568df7018fc52223b5032b0407957f9af19647035a2cf5a2d6e9fd4ffd23ba6d2b8923034398c04bf27fe6b14653542c7bd65a2db032927ce8f58", 0x9c}, {&(0x7f0000001500)="50a6e5415b21c72f2aff35dab5046b0defcd7b67a7308dcabf9dc38c2d6c2bfafdef88dcc9f4fd5d6cc79d4275eb1a05b162d7b9ed4b7175025fd3bb18585520b9da5be4df5626b6fb0976c9acfea2d34b1473e04ca5a270432826d43783d23a012e3691213cf7ca505f852b9ad6343f0b1bd7cd61b2ee360e39205adc78af0ce6827a9f", 0x84}, {&(0x7f00000015c0)="756fb13000d8a72ed42de6a4588134c596965deb659b0f93a218cce0c25a03a101213b4d206a659a237845ca3b4a8e4e6c5423140d11e73fb8df2215727920cc41f39367981b568a1c0f0fe4a38949749478c639647b7516bf8d79bdde7298b6f42a57bb4198b7dbe74bb9e95890d086914a584622ff432d22a9bdb1ed2f0c6732c8fbf9989d7b0e283e41166f42777affdba37993b2", 0x96}, {&(0x7f0000001680)="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", 0x1000}], 0x9, &(0x7f00000030c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0x13, 0x16, [@private=0xa010101, @multicast2, @empty, @empty]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x10, "e6b38e5ce10ac11459b454f850df"}, {0x7, 0x12, "022a6a8659b711cbdfc035d3844a1500"}, {0x7, 0x3, 'F'}, {0x1, 0xd, "055a71b3d3c10d9a409ebd"}, {0x7, 0x4, "adc9"}, {0x1, 0xa, "b1a82c7d4c3522c5"}]}, @lsrr={0x83, 0x17, 0xc8, [@multicast2, @loopback, @multicast1, @multicast1, @multicast2]}, @ssrr={0x89, 0x3, 0x83}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @private=0xa010101}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x168}}, {{&(0x7f00000028c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002900)="b7abf9dc1067729c16110ed40b15ca1a736ff46b128709a2712bb19d7ebdd9eeeb9bc4d02bf32cb1ef6d30b05d7dfef733c01c6177a1b2d74c4e530f747bd5f7c25d6e8242b99f6219eca687c24f3494a5944c27c12fa2ef3567fdb732ec8b6ede347487f792218964cbe0f043c9c6af67ea7233f1baba3e695f86b5c107141ad5d4a47bb3226501", 0x88}, {&(0x7f00000029c0)="ded60fa43af54327ff0894ec71c9d9e6877080d45d3cb5a5c09434877eaacc21e82cb1d16c95beabc08b29931cd7d7bbece80fc2c7b0d6dcaa1e163a1cede668fd38e5c58387cd7a118cdea7a561ef06b682ef171d21d7893269e7f7421fe088b6956f1d0306df706d7938b54dbf7195a55f1e58a900c1c6255754d0e422340676cf0878be31ccf18581bfdbb2d906c95f12f8ea815184779f633c365f1e34e2e0a12dd480fbf4accf7ae8afc9e5f80b28a3d091164d86b492875529ea859e14e391be50ea49e5a64312ce559fbd6613c5d60ad36a3afe9a7e131526d3ef65bfaf0847211ee2d0540c72befab3f0", 0xee}, {&(0x7f0000002ac0)="1d0010c2ca8b00f70db90c0451e3d404cbed1811ef47d60c7b712da485e6a62e4a4307015acc78f02f11c26d0f4961bc6df5421a757396df5e01e073ff39d9ca6ff033780424f88ded439a2fc16891ee271fcdba409bd29a10bc4784020fb0774c90c3dcf639c88dfd13fb7012886d59ee5c506ddb8bff25590e8f9cba950fb51aed3c37c402418da73f54b574217ae64e30b3ba4e19d538295501c356bf4649f871b27632c38fb2800f1b123ffdb7fc368cd5", 0xb3}, {&(0x7f0000002b80)="ccf46e9a16bf3e88c799735eed100eb215b18e68c6c359da37002e626a890bce260e53e8740180f050411b9147089542c2b6aa846b6bb0cc3b1edba12447d92f69ac051cb897ffa0033d6de1360cb9a7a180009f6fe92021637e301bf84382e6ec7799bf905952a5f34880a1e4da6f5eca19c61bd446912c6e687d7fd8ad95a7f4391fd200f7d40d0093a8f964204feafb8d727f8a453fdf2a1d93369f9a637757e947a782048e481d53f53b39a28fe41786bc76be986cf0ee8686f0cab91f1e38d122ea84c549f90fded9c3ba8c23814b9459e18c3968db7d", 0xd9}, {&(0x7f0000002c80)="5ad1f66fc2cdb73a5b2b8c2f0e62f511f863912ac4f44e6371efa9bfbc7e2fbef53943add41b9028b57c0246b33aec4eaaf7d5a50b35dc66dd36a0c63e5d089062f3ef7e1f8fea44b58634ef7f971e870c6b4bd1f47d6224cc963586661f4a934f79d487c7437685374472792b4d16c52276cc50cecde83c7bd6cce181a46b4161310165761b68af6855e12c4a064fc13245ca367874ccc2aa16f767888507d18b2dc015a1dce81bba92ada4f1457351e913ab3025074f45a6ef5d94bd08daca1846f1a4f76d4b6c337bf86092471ea4f86a26636e65a254acd4e7624de9400e4d29e966f192f8e91b447f12", 0xec}, {&(0x7f0000002d80)="8ef22586970e68e2e457940eaab57dd41bdd2f00b960aa9539558b7242a6ed2c99655ef6effdb010516a1d931e1e3681c2cc38ff64c4d5b196e873ff5a37090ff29aec720c3ad22f8c98c704709fa2963cbc8583d4ca64446b0297cbaf7b594b44c826f5310bc7ce3ef92aa8afd5cec7d1415a85210a1dd264e723557ccf5f91fc09823d6339485391987642297662daecc43e4f99453d67fffbba5e937af403585170e4161705832f72c22f192c7968ba4b3d14f044cc5c41c42b0647a9a3164fda217083cb4c6053", 0xc9}, {&(0x7f0000002e80)="e8c2cde79799c34215dc2b2407dda59061d12aea11d6d1ed9224f70dbb55549d5cdfc36317e77a5012db082433adfe79daabcd8a25e9bc87b37fb7adcc30ac70ee7a9db8a23b87cc7bd12d3ae2dc2ca20f3e5e77383c2d1afb47d32a207f", 0x5e}], 0x7, &(0x7f0000002fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @empty}}}], 0x70}}], 0x2, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x2040600) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2.760787223s ago: executing program 2 (id=198): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r4, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) finit_module(r1, 0x0, 0x0) 2.544532397s ago: executing program 0 (id=199): syz_emit_ethernet(0x41, &(0x7f0000000600)={@empty, @broadcast, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x7, 0x0, 0x4}}, {@arp={0x806, @generic={0x323, 0x8917, 0x6, 0xa, 0x8, @remote, "d222ed950e9acc73230a", @local, "dbe3014363e7365f402dd1a66f"}}}}, &(0x7f0000000680)={0x1, 0x2, [0xaff, 0x50c, 0x7cf, 0x800]}) 2.433208658s ago: executing program 0 (id=200): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x3c}}, 0x4080) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4891) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x800000000004) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000950000000000000095110f825ccd399cbdb1301818cc569eb2fff81986bb69dc84717992af51267bd2a81778c63740d9667f238e515ad1b77fae44fec9745a5a13cb368404563879f24ca5dba0764da2be988a5a76129d954e601ef1d038230eea96d92d8c8d5a0b36c520d1486b49aa922b75482846749fe55ffafda9481287cbd26d95c14437f71b1afe97db10fb5195e2b66d"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbbe3e34704", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, r7, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x40) 2.368534273s ago: executing program 2 (id=201): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe800000000000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, 0x0, 0x0, 0xfc) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b840e000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x3c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 2.254380161s ago: executing program 2 (id=202): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x25000, 0x4, 0x10000, 0xfec02000], 0x4, 0x48, 0xd8}) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) close(0x5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000700, 0x200000000816, 0x200000000af2], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000ebfcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000101000000feffffff2e4187b3efc085b21d8d1595000000000000040000000000000800"/144]}, 0x108) 2.120798983s ago: executing program 3 (id=203): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002ac0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x7, 0x1, {{0x5, 0x4, 0x1, 0x7, 0x14, 0xe5, 0x4, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x31, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.740601547s ago: executing program 3 (id=204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1f, 0x12000}], 0x0) 1.435024729s ago: executing program 3 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmmsg(r3, &(0x7f00000002c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000680)='dummy_udc.0', 0xb) 1.277398275s ago: executing program 1 (id=206): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0xffffffff}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, 0x0, 0x0, 0xff00) r8 = io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x9ddd, 0x10, 0x3, 0x159, 0x0, r1}) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x1c, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) io_submit(r3, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r2, 0x0, 0x0, 0x6}]) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x40, 0x5, 0x5}}, 0x10) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000aa1006"], 0xb) 390.361387ms ago: executing program 3 (id=207): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd202009cb14c63377526aeb5abffc6eecb95642de839ede6dc0627e3e042"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x8040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r5 = userfaultfd(0x801) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000002c0)=0x4) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8400, 0x800c95a, 0xf, 0x8, 0x80, 0x0, 0xfffffffc, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0x2, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x5, 0xc, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x400008, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x8, 0x6, 0x1, 0xff, 0x7, 0x8, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x4, 0x6, 0x47, 0x8000, 0x1, 0xfe000004, 0x1, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x7fffffff, 0x2, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x6, 0x5, 0x2, 0x5, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x3000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x8, 0xffffffff, 0x200, 0x1fd, 0x3, 0x8, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x4000012b, 0x4, 0x1, 0x1, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ee, 0x2006, 0x5, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x8, 0x6, 0x0, 0xb7, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0x3, 0x5, 0x7e, 0xfffffff7, 0x9622, 0x7, 0xaf, 0x6, 0x5, 0x2, 0x2, 0x6, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000003800)=""/4106, 0x100a}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/224, 0xe0}], 0x9}, 0x7}, {{0x0, 0x0, 0x0}, 0x20000}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x4, 0x40000102, 0x0) 100.844518ms ago: executing program 4 (id=208): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, &(0x7f0000000080)="42f2", 0x2, 0x4}]) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0da, 0x5, 0x3, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r5, 0xf) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) syz_usb_disconnect(r0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) 0s ago: executing program 1 (id=209): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x8044) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 60.012942][ T31] audit: type=1400 audit(1788731654.535:129): avc: denied { mounton } for pid=5589 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.037094][ T31] audit: type=1400 audit(1788731654.565:130): avc: denied { mount } for pid=5589 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.039610][ T5589] cgroup: Unknown subsys name 'net' [ 60.044140][ T31] audit: type=1400 audit(1788731654.565:131): avc: denied { unmount } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.205813][ T5589] cgroup: Unknown subsys name 'cpuset' [ 60.213855][ T5589] cgroup: Unknown subsys name 'rlimit' [ 60.313536][ T31] audit: type=1400 audit(1788731654.845:132): avc: denied { setattr } for pid=5589 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.337205][ T31] audit: type=1400 audit(1788731654.845:133): avc: denied { create } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.337245][ T31] audit: type=1400 audit(1788731654.845:134): avc: denied { write } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.337278][ T31] audit: type=1400 audit(1788731654.845:135): avc: denied { read } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.422224][ T5591] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.424607][ T31] audit: type=1400 audit(1788731654.945:136): avc: denied { relabelto } for pid=5591 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 60.425073][ T31] audit: type=1400 audit(1788731654.955:137): avc: denied { write } for pid=5591 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.489348][ T31] audit: type=1400 audit(1788731655.015:138): avc: denied { read } for pid=5589 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.418495][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.245248][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.248763][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.256445][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.263672][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.271004][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.277833][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.278284][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.286383][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.287547][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.296455][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.305670][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.307471][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.312482][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.314164][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.315145][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.330527][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.335427][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.335453][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.344115][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.344169][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.345143][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.355621][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.356165][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.366538][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.373679][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.661295][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.661795][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.661887][ T5600] bridge_slave_0: entered allmulticast mode [ 65.663151][ T5600] bridge_slave_0: entered promiscuous mode [ 65.717280][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.723039][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.723143][ T5600] bridge_slave_1: entered allmulticast mode [ 65.724305][ T5600] bridge_slave_1: entered promiscuous mode [ 65.777584][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.778160][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.778247][ T5599] bridge_slave_0: entered allmulticast mode [ 65.779582][ T5599] bridge_slave_0: entered promiscuous mode [ 65.781706][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.781771][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.782439][ T5599] bridge_slave_1: entered allmulticast mode [ 65.783883][ T5599] bridge_slave_1: entered promiscuous mode [ 65.785418][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.785516][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.785596][ T5607] bridge_slave_0: entered allmulticast mode [ 65.786735][ T5607] bridge_slave_0: entered promiscuous mode [ 65.789172][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.789235][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.789346][ T5607] bridge_slave_1: entered allmulticast mode [ 65.790609][ T5607] bridge_slave_1: entered promiscuous mode [ 65.795413][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.799596][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.836830][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.836898][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.837191][ T5609] bridge_slave_0: entered allmulticast mode [ 65.838412][ T5609] bridge_slave_0: entered promiscuous mode [ 65.841104][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.841171][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.841414][ T5609] bridge_slave_1: entered allmulticast mode [ 65.842698][ T5609] bridge_slave_1: entered promiscuous mode [ 65.885097][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.885147][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.998247][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.000740][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.003513][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.006745][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.008800][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.011569][ T5600] team0: Port device team_slave_0 added [ 66.014371][ T5600] team0: Port device team_slave_1 added [ 66.046590][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.056060][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.056148][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.056227][ T5605] bridge_slave_0: entered allmulticast mode [ 66.057592][ T5605] bridge_slave_0: entered promiscuous mode [ 66.106218][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.106311][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.106412][ T5605] bridge_slave_1: entered allmulticast mode [ 66.107680][ T5605] bridge_slave_1: entered promiscuous mode [ 66.109950][ T5609] team0: Port device team_slave_0 added [ 66.121144][ T5599] team0: Port device team_slave_0 added [ 66.135126][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.136463][ T5607] team0: Port device team_slave_0 added [ 66.139522][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.140603][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.140614][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.140632][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.144851][ T5609] team0: Port device team_slave_1 added [ 66.146427][ T5599] team0: Port device team_slave_1 added [ 66.157596][ T5607] team0: Port device team_slave_1 added [ 66.178398][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.178412][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.178430][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.197392][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.197407][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.197424][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.240549][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.240563][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.240581][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.249096][ T5605] team0: Port device team_slave_0 added [ 66.263818][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.263832][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.263849][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.265332][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.265342][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.265359][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.267649][ T5605] team0: Port device team_slave_1 added [ 66.287761][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.287776][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.287793][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.288745][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.288754][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.288771][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.304390][ T5600] hsr_slave_0: entered promiscuous mode [ 66.305157][ T5600] hsr_slave_1: entered promiscuous mode [ 66.366791][ T5601] Bluetooth: hci2: command tx timeout [ 66.366976][ T5608] Bluetooth: hci4: command tx timeout [ 66.373768][ T5608] Bluetooth: hci1: command tx timeout [ 66.373839][ T5608] Bluetooth: hci0: command tx timeout [ 66.444015][ T5601] Bluetooth: hci3: command tx timeout [ 66.591513][ T5599] hsr_slave_0: entered promiscuous mode [ 66.592149][ T5599] hsr_slave_1: entered promiscuous mode [ 66.592580][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 66.592652][ T5599] Cannot create hsr debugfs directory [ 66.606430][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.606444][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.606479][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.633284][ T5609] hsr_slave_0: entered promiscuous mode [ 66.633986][ T5609] hsr_slave_1: entered promiscuous mode [ 66.634522][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.634545][ T5609] Cannot create hsr debugfs directory [ 66.635970][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.635981][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.635999][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.732884][ T5607] hsr_slave_0: entered promiscuous mode [ 66.734854][ T5607] hsr_slave_1: entered promiscuous mode [ 66.735350][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 66.735411][ T5607] Cannot create hsr debugfs directory [ 66.781525][ T5605] hsr_slave_0: entered promiscuous mode [ 66.782152][ T5605] hsr_slave_1: entered promiscuous mode [ 66.782661][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 66.782676][ T5605] Cannot create hsr debugfs directory [ 67.078844][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.089677][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.090670][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.100046][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.106435][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.114226][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.114879][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.120170][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.187492][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.196703][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.199928][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.208281][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.210751][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.215936][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.220524][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.228929][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.308878][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.322001][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.324194][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.338830][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.345544][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.356420][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.357341][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.366158][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.370396][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.435505][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.449486][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.459723][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.460367][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.470594][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.482153][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.491379][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.492015][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.500635][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.507335][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.507434][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.526000][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.526075][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.612666][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.621187][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.622799][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.631794][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.651638][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.666288][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.679060][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.688299][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.696084][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.768428][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.795262][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.795356][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.814414][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.815904][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.815974][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.854428][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.897915][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.922573][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.922649][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.945604][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.964093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.964385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.984749][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.002920][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.003061][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.035892][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.036056][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.122620][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.181492][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.181607][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.191457][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.242134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.242219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.443438][ T5601] Bluetooth: hci0: command tx timeout [ 68.449616][ T5601] Bluetooth: hci1: command tx timeout [ 68.449642][ T5601] Bluetooth: hci4: command tx timeout [ 68.449662][ T5601] Bluetooth: hci2: command tx timeout [ 68.460516][ T5600] veth0_vlan: entered promiscuous mode [ 68.486453][ T5600] veth1_vlan: entered promiscuous mode [ 68.535463][ T5608] Bluetooth: hci3: command tx timeout [ 68.612249][ T5600] veth0_macvtap: entered promiscuous mode [ 68.631934][ T5600] veth1_macvtap: entered promiscuous mode [ 68.678228][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.707940][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.755321][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.903092][ T100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.912320][ T256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.912375][ T256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942696][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.942732][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.966505][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.050453][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.050486][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.097134][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 69.097182][ T31] audit: type=1400 audit(1788731663.625:150): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.tgjFg4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.104602][ T31] audit: type=1400 audit(1788731663.635:151): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.110859][ T31] audit: type=1400 audit(1788731663.635:152): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.tgjFg4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.125306][ T5599] veth0_vlan: entered promiscuous mode [ 69.126196][ T31] audit: type=1400 audit(1788731663.655:153): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.135042][ T31] audit: type=1400 audit(1788731663.665:154): avc: denied { sys_module } for pid=5609 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.147523][ T31] audit: type=1400 audit(1788731663.675:155): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.tgjFg4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.158640][ T31] audit: type=1400 audit(1788731663.685:156): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.tgjFg4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.160976][ T5599] veth1_vlan: entered promiscuous mode [ 69.189962][ T31] audit: type=1400 audit(1788731663.715:157): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.218249][ T31] audit: type=1400 audit(1788731663.745:158): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.240178][ T31] audit: type=1400 audit(1788731663.765:159): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="gadgetfs" ino=6769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.327684][ T5599] veth0_macvtap: entered promiscuous mode [ 69.332709][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.360025][ T5599] veth1_macvtap: entered promiscuous mode [ 69.429856][ T5600] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.457459][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.472572][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.488749][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.536688][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.582463][ T5609] veth0_vlan: entered promiscuous mode [ 69.595440][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.596133][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.596601][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.631480][ T5609] veth1_vlan: entered promiscuous mode [ 69.679427][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741461][ T5605] veth0_vlan: entered promiscuous mode [ 69.772091][ T5796] xt_nfacct: accounting object `' does not exist [ 69.790821][ T5605] veth1_vlan: entered promiscuous mode [ 69.819887][ T5609] veth0_macvtap: entered promiscuous mode [ 69.823017][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.823034][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.849392][ T5609] veth1_macvtap: entered promiscuous mode [ 69.937266][ T5605] veth0_macvtap: entered promiscuous mode [ 69.940759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.940777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.950436][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.958228][ T5605] veth1_macvtap: entered promiscuous mode [ 69.979214][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.039791][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.061722][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.064218][ T256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.065092][ T256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.065354][ T256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.065570][ T256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168934][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.169617][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.169650][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.169679][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.409635][ T5607] veth0_vlan: entered promiscuous mode [ 70.415881][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.415901][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.435959][ T5607] veth1_vlan: entered promiscuous mode [ 70.521076][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.521116][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.529456][ T5608] Bluetooth: hci2: command tx timeout [ 70.529486][ T5608] Bluetooth: hci4: command tx timeout [ 70.529505][ T5608] Bluetooth: hci1: command tx timeout [ 70.529524][ T5608] Bluetooth: hci0: command tx timeout [ 70.602979][ T5601] Bluetooth: hci3: command tx timeout [ 70.952018][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.952051][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.011018][ T5607] veth0_macvtap: entered promiscuous mode [ 71.017314][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.017331][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.050788][ T5607] veth1_macvtap: entered promiscuous mode [ 71.100691][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.169928][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.214589][ T256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.214729][ T256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.216593][ T256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.216646][ T256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.133186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.819532][ T5819] input: syz0 as /devices/virtual/input/input5 [ 73.207015][ T5608] Bluetooth: hci1: command tx timeout [ 73.207049][ T5608] Bluetooth: hci4: command tx timeout [ 73.207068][ T5608] Bluetooth: hci2: command tx timeout [ 73.207086][ T5608] Bluetooth: hci3: command tx timeout [ 73.207136][ T5601] Bluetooth: hci0: command tx timeout [ 73.330600][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.372684][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.372712][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.450184][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.460149][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.593801][ T5704] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.718099][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.787261][ T5704] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 73.806901][ T5704] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 73.815435][ T5704] usb 2-1: config 0 has no interface number 0 [ 73.822305][ T5704] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 4 [ 73.834295][ T5704] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 8292, setting to 1023 [ 73.851738][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 73.851789][ T5704] usb 2-1: Manufacturer: syz [ 73.851807][ T5704] usb 2-1: SerialNumber: syz [ 73.888608][ T5704] usb 2-1: config 0 descriptor?? [ 73.973338][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 73.991821][ T5832] FAULT_INJECTION: forcing a failure. [ 73.991821][ T5832] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.991871][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT(full) [ 73.991890][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 73.991898][ T5832] Call Trace: [ 73.991903][ T5832] [ 73.991909][ T5832] dump_stack_lvl+0x100/0x190 [ 73.991936][ T5832] should_fail_ex.cold+0x5/0xa [ 73.991959][ T5832] get_futex_key+0x1d0/0x14f0 [ 73.991989][ T5832] ? __pfx_get_futex_key+0x10/0x10 [ 73.992009][ T5832] ? __mutex_unlock_slowpath+0x35d/0x930 [ 73.992033][ T5832] futex_wake+0xf4/0x5e0 [ 73.992059][ T5832] ? __pfx_futex_wake+0x10/0x10 [ 73.992085][ T5832] ? lock_acquire+0x1d1/0x380 [ 73.992102][ T5832] ? detach_task_ctx_data+0x83/0x490 [ 73.992127][ T5832] do_futex+0x2b2/0x440 [ 73.992148][ T5832] ? __pfx_do_futex+0x10/0x10 [ 73.992166][ T5832] ? __might_fault+0xc5/0x140 [ 73.992194][ T5832] mm_exit_exec_release+0x256/0x2f0 [ 73.992214][ T5832] do_exit+0x707/0x2ae0 [ 73.992236][ T5832] ? __pfx_do_exit+0x10/0x10 [ 73.992255][ T5832] ? do_raw_spin_lock+0x128/0x260 [ 73.992273][ T5832] ? find_held_lock+0x2b/0x80 [ 73.992294][ T5832] ? get_signal+0x7e0/0x21e0 [ 73.992313][ T5832] do_group_exit+0xd5/0x2a0 [ 73.992334][ T5832] get_signal+0x1ec7/0x21e0 [ 73.992359][ T5832] ? __pfx_get_signal+0x10/0x10 [ 73.992380][ T5832] ? do_futex+0x190/0x440 [ 73.992402][ T5832] arch_do_signal_or_restart+0x91/0x7e0 [ 73.992426][ T5832] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 73.992461][ T5832] exit_to_user_mode_loop+0x139/0x700 [ 73.992479][ T5832] ? rcu_is_watching+0x13/0xc0 [ 73.992500][ T5832] do_syscall_64+0x661/0x790 [ 73.992520][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.992536][ T5832] RIP: 0033:0x7f888e39e159 [ 73.992549][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.992564][ T5832] RSP: 002b:00007f888f1cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.992579][ T5832] RAX: fffffffffffffe00 RBX: 00007f888e625fa8 RCX: 00007f888e39e159 [ 73.992589][ T5832] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f888e625fa8 [ 73.992599][ T5832] RBP: 00007f888e625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 73.992608][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.992617][ T5832] R13: 00007f888e626038 R14: 00007fffa0433a70 R15: 00007fffa0433b58 [ 73.992638][ T5832] [ 74.247370][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.259010][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 74.259042][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.416795][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.416831][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.442128][ T10] usb 5-1: string descriptor 0 read error: -22 [ 74.442251][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.546727][ T5839] affs: No valid root block on device nullb0 [ 74.560016][ T31] kauditd_printk_skb: 48 callbacks suppressed [ 74.566544][ T31] audit: type=1400 audit(1788731669.045:208): avc: denied { create } for pid=5833 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.566720][ T31] audit: type=1400 audit(1788731669.055:209): avc: denied { bind } for pid=5833 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.566840][ T31] audit: type=1400 audit(1788731669.055:210): avc: denied { connect } for pid=5833 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.567274][ T31] audit: type=1400 audit(1788731669.055:211): avc: denied { write } for pid=5833 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.587050][ T31] audit: type=1400 audit(1788731669.055:212): avc: denied { allowed } for pid=5833 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.587165][ T31] audit: type=1400 audit(1788731669.055:213): avc: denied { create } for pid=5833 comm="syz.3.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.587289][ T31] audit: type=1400 audit(1788731669.065:214): avc: denied { mounton } for pid=5833 comm="syz.3.15" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.784619][ T10] usb 5-1: 0:1 : does not exist [ 74.792638][ T10] usb 5-1: 0:2 : does not exist [ 74.909586][ T31] audit: type=1400 audit(1788731669.435:215): avc: denied { create } for pid=5841 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.930939][ T5842] FAULT_INJECTION: forcing a failure. [ 74.930939][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 74.945202][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) [ 74.945232][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 74.945247][ T5842] Call Trace: [ 74.945255][ T5842] [ 74.945264][ T5842] dump_stack_lvl+0x100/0x190 [ 74.945297][ T5842] should_fail_ex.cold+0x5/0xa [ 74.945327][ T5842] should_failslab+0xc2/0x120 [ 74.945349][ T5842] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.945367][ T5842] ? sidtab_sid2str_get+0x84/0x670 [ 74.945382][ T5842] ? sidtab_sid2str_get+0x17a/0x670 [ 74.945404][ T5842] kmemdup_noprof+0x29/0x60 [ 74.945439][ T5842] sidtab_sid2str_get+0x17a/0x670 [ 74.945462][ T5842] security_sid_to_context_core+0x373/0x700 [ 74.945486][ T5842] avc_audit_post_callback+0x1aa/0x910 [ 74.945509][ T5842] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 74.945527][ T5842] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 74.945544][ T5842] ? skb_put+0x138/0x180 [ 74.945567][ T5842] ? audit_log_n_string+0x2a3/0x5a0 [ 74.945590][ T5842] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 74.945609][ T5842] common_lsm_audit+0x23f/0x2b0 [ 74.945627][ T5842] ? __pfx_common_lsm_audit+0x10/0x10 [ 74.945645][ T5842] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.945666][ T5842] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.945689][ T5842] slow_avc_audit+0x186/0x210 [ 74.945712][ T5842] ? __pfx_slow_avc_audit+0x10/0x10 [ 74.945734][ T5842] ? avc_denied+0x14a/0x190 [ 74.945754][ T5842] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 74.945775][ T5842] avc_has_perm+0x1a6/0x1e0 [ 74.945794][ T5842] ? __pfx_avc_has_perm+0x10/0x10 [ 74.945815][ T5842] ? futex_wait+0x11e/0x370 [ 74.945843][ T5842] sock_has_perm+0x253/0x2f0 [ 74.945867][ T5842] ? __pfx_sock_has_perm+0x10/0x10 [ 74.945889][ T5842] ? errseq_sample+0x51/0x70 [ 74.945917][ T5842] ? __fget_files+0x34/0x3d0 [ 74.945939][ T5842] ? find_held_lock+0x2b/0x80 [ 74.945965][ T5842] ? __fget_files+0x215/0x3d0 [ 74.945991][ T5842] selinux_socket_setsockopt+0x41/0x80 [ 74.946024][ T5842] security_socket_setsockopt+0x9b/0x230 [ 74.946056][ T5842] do_sock_setsockopt+0x53/0x1d0 [ 74.946083][ T5842] __sys_setsockopt+0x195/0x220 [ 74.946107][ T5842] __x64_sys_setsockopt+0xbd/0x160 [ 74.946125][ T5842] ? do_syscall_64+0xae/0x790 [ 74.946147][ T5842] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.946170][ T5842] do_syscall_64+0x123/0x790 [ 74.946195][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.946216][ T5842] RIP: 0033:0x7fd27b79e159 [ 74.946234][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.946252][ T5842] RSP: 002b:00007fd27c592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.946273][ T5842] RAX: ffffffffffffffda RBX: 00007fd27ba25fa0 RCX: 00007fd27b79e159 [ 74.946285][ T5842] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 74.946296][ T5842] RBP: 00007fd27b835024 R08: 0000000000000010 R09: 0000000000000000 [ 74.946307][ T5842] R10: 0000200000fbe000 R11: 0000000000000246 R12: 0000000000000000 [ 74.946319][ T5842] R13: 00007fd27ba26038 R14: 00007fd27ba25fa0 R15: 00007ffeb6e794d8 [ 74.946346][ T5842] [ 74.956112][ T31] audit: type=1400 audit(1788731669.455:216): avc: denied { setopt } for pid=5841 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tsid=147 tclass=packet_socket permissive=1 [ 75.085101][ T10] usb 5-1: 6:0: failed to get current value for ch 1 (-22) [ 75.097259][ T10] usb 5-1: 6:0: failed to get current value for ch 0 (-22) [ 75.408867][ T31] audit: type=1400 audit(1788731669.885:217): avc: denied { mmap_zero } for pid=5834 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 75.416766][ T5720] usb 2-1: USB disconnect, device number 2 [ 75.431404][ T10] usb 5-1: USB disconnect, device number 2 [ 75.530679][ T5848] FAULT_INJECTION: forcing a failure. [ 75.530679][ T5848] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.544449][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 75.544475][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 75.544485][ T5848] Call Trace: [ 75.544490][ T5848] [ 75.544497][ T5848] dump_stack_lvl+0x100/0x190 [ 75.544526][ T5848] should_fail_ex.cold+0x5/0xa [ 75.544543][ T5848] ? do_syscall_64+0x123/0x790 [ 75.544566][ T5848] get_futex_key+0x1d0/0x14f0 [ 75.544586][ T5848] ? __pfx_get_futex_key+0x10/0x10 [ 75.544609][ T5848] futex_wake+0xf4/0x5e0 [ 75.544633][ T5848] ? __pfx_futex_wake+0x10/0x10 [ 75.544657][ T5848] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 75.544676][ T5848] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.544697][ T5848] do_futex+0x2b2/0x440 [ 75.544717][ T5848] ? __pfx_do_futex+0x10/0x10 [ 75.544741][ T5848] __x64_sys_futex+0x34f/0x4d0 [ 75.544763][ T5848] ? __pfx___x64_sys_futex+0x10/0x10 [ 75.544789][ T5848] do_syscall_64+0x123/0x790 [ 75.544807][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.544822][ T5848] RIP: 0033:0x7fd27b79e159 [ 75.544835][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.544848][ T5848] RSP: 002b:00007fd27c5920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.544872][ T5848] RAX: ffffffffffffffda RBX: 00007fd27ba25fa8 RCX: 00007fd27b79e159 [ 75.544882][ T5848] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd27ba25fac [ 75.544892][ T5848] RBP: 00007fd27ba25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 75.544901][ T5848] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 75.544911][ T5848] R13: 00007fd27ba26038 R14: 00007ffeb6e793f0 R15: 00007ffeb6e794d8 [ 75.544931][ T5848] [ 75.708155][ T5846] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 75.708179][ T5846] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 76.294074][ T25] cfg80211: failed to load regulatory.db [ 77.298532][ T5866] overlay: Unknown parameter '++-[&*'₫%*})' [ 77.616414][ T5873] team0: Port device vlan2 added [ 77.743841][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.051126][ T10] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=a2.13 [ 78.053462][ T10] usb 2-1: config 8 has an invalid interface number: 50 but max is 0 [ 78.053485][ T10] usb 2-1: config 8 has no interface number 0 [ 78.053505][ T10] usb 2-1: config 8 interface 50 has no altsetting 0 [ 78.055393][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.055412][ T10] usb 2-1: Product: syz [ 78.055424][ T10] usb 2-1: Manufacturer: syz [ 78.055435][ T10] usb 2-1: SerialNumber: syz [ 78.161070][ T5882] affs: No valid root block on device nullb0 [ 78.525285][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 78.588059][ T5885] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 79.117743][ T10] option 2-1:8.50: GSM modem (1-port) converter detected [ 79.144929][ T5885] team0 (unregistering): Port device team_slave_0 removed [ 79.147939][ T10] usb 2-1: USB disconnect, device number 3 [ 79.157084][ T10] option 2-1:8.50: device disconnected [ 79.175947][ T5885] team0 (unregistering): Port device team_slave_1 removed [ 79.207773][ T5885] team0 (unregistering): Port device vlan2 removed [ 79.401462][ T5887] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.993948][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 79.993984][ T31] audit: type=1400 audit(1788731674.525:238): avc: denied { read write } for pid=5874 comm="syz.2.26" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.994024][ T31] audit: type=1400 audit(1788731674.525:239): avc: denied { open } for pid=5874 comm="syz.2.26" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.253240][ T5902] FAULT_INJECTION: forcing a failure. [ 80.253240][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.253275][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(full) [ 80.253288][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 80.253294][ T5902] Call Trace: [ 80.253298][ T5902] [ 80.253302][ T5902] dump_stack_lvl+0x100/0x190 [ 80.253322][ T5902] should_fail_ex.cold+0x5/0xa [ 80.253339][ T5902] _copy_from_iter+0x1f4/0x1690 [ 80.253358][ T5902] ? __asan_memset+0x23/0x50 [ 80.253375][ T5902] ? __pfx__copy_from_iter+0x10/0x10 [ 80.253391][ T5902] ? __pfx___alloc_skb+0x10/0x10 [ 80.253406][ T5902] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 80.253423][ T5902] ? sock_has_perm+0x25a/0x2f0 [ 80.253438][ T5902] ? __pfx_sock_has_perm+0x10/0x10 [ 80.253456][ T5902] netlink_sendmsg+0x808/0xda0 [ 80.253475][ T5902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.253493][ T5902] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.253511][ T5902] ____sys_sendmsg+0xa4d/0xbe0 [ 80.253524][ T5902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.253542][ T5902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.253559][ T5902] ? lock_acquire+0x1d1/0x380 [ 80.253570][ T5902] ? get_pid_task+0x2a/0x250 [ 80.253585][ T5902] ___sys_sendmsg+0x190/0x1e0 [ 80.253601][ T5902] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.253615][ T5902] ? get_pid_task+0x106/0x250 [ 80.253634][ T5902] ? find_held_lock+0x2b/0x80 [ 80.253657][ T5902] __sys_sendmsg+0x160/0x210 [ 80.253672][ T5902] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.253690][ T5902] do_syscall_64+0x123/0x790 [ 80.253705][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.253716][ T5902] RIP: 0033:0x7f888e39e159 [ 80.253726][ T5902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.253736][ T5902] RSP: 002b:00007f888f1cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.253747][ T5902] RAX: ffffffffffffffda RBX: 00007f888e625fa0 RCX: 00007f888e39e159 [ 80.253754][ T5902] RDX: 0000000022044804 RSI: 0000200000000400 RDI: 0000000000000003 [ 80.253760][ T5902] RBP: 00007f888f1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 80.253766][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.253772][ T5902] R13: 00007f888e626038 R14: 00007f888e625fa0 R15: 00007fffa0433b58 [ 80.253786][ T5902] [ 80.293771][ T31] audit: type=1400 audit(1788731674.815:240): avc: denied { read append } for pid=5874 comm="syz.2.26" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.293814][ T31] audit: type=1400 audit(1788731674.815:241): avc: denied { open } for pid=5874 comm="syz.2.26" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 80.419373][ T31] audit: type=1400 audit(1788731674.945:242): avc: denied { map } for pid=5874 comm="syz.2.26" path="socket:[9333]" dev="sockfs" ino=9333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 80.789596][ T31] audit: type=1400 audit(1788731675.315:243): avc: denied { ioctl } for pid=5896 comm="syz.1.32" path="socket:[9340]" dev="sockfs" ino=9340 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.883405][ T5611] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.922641][ T31] audit: type=1400 audit(1788731675.445:244): avc: denied { setattr } for pid=5896 comm="syz.1.32" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.981016][ T5910] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 80.983898][ T31] audit: type=1400 audit(1788731675.505:245): avc: denied { ioctl } for pid=5909 comm="syz.3.37" path="/13/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 81.033502][ T31] audit: type=1400 audit(1788731675.555:246): avc: denied { view } for pid=5909 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 81.052658][ T5611] usb 5-1: Using ep0 maxpacket: 8 [ 81.053329][ T5611] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.067565][ T31] audit: type=1400 audit(1788731675.595:247): avc: denied { listen } for pid=5909 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.094428][ T5611] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.102591][ T5611] usb 5-1: config 0 has no interface number 0 [ 81.102620][ T5611] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.102643][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.134724][ T5611] usb 5-1: config 0 descriptor?? [ 81.156881][ T5611] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 81.164348][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.313681][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 81.323382][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 81.327326][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 81.327354][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.327368][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 81.329065][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.329086][ T9] usb 2-1: Product: syz [ 81.329098][ T9] usb 2-1: Manufacturer: syz [ 81.329110][ T9] usb 2-1: SerialNumber: syz [ 81.613778][ T9] usb 2-1: USB disconnect, device number 4 [ 81.683787][ T1934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.888614][ T1934] usb 3-1: Using ep0 maxpacket: 32 [ 81.898637][ T1934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.907229][ T1934] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 81.922669][ T1934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.930915][ T1934] usb 3-1: Product: ́¼åº–à´·î‡Ø¦ê²¥ëµ«æ•‡é‡†ç¼±çŒ¹á²§ăˆæ‚è‡”ï¢‹ï•·á‹¨Â¢íŒ²â›³ï¦…ï° ê·‰èŒ¥ë·”ß®å¥•ê¯¦ç¡ ă‹¾äª‚å’¦àº©ă‘ªåœí‰å¸µà³µç›…炻陣ಽ⃋⑃́§ê¨ê·²ç‚¨ë¹́ª‰çªí™©ă·•é°è†°äªá‚Ÿë©°è§¾ëâ­¥â¸êª§è‡½ă¦ ï¿®ä›°î²î£·ă²œë®˜ê¼¾âŒ¶à½·ï¬ºè³›È”뺈澫▭蘡렧效ă‘龅題䛡溠蟤࠸镹䖄ᡧ䗽猓邃ﰡ衱⦠ٌ西硼鑛æ­ă¹˜ï´†í䮯活䉓ڜ朿䢟ê˜ă…¯é ¸ [ 81.930947][ T1934] usb 3-1: Manufacturer: 텋ᬀ婕￳ï¾î€¥ç®«â­½é–‹í‘³æ˜…ï¡í‘£ïƒ‡ää‚ë‚Œă¼ªä½é°·ä²œă§•Å»äª¾ä‚¤́©ëœœî³â±©é½—扬炗먣â·è–«â“¾îº¯â¾¡å–¦ä„æ ă£ă©ƒï¬ï²‰ï…‘ă î¬¯èŒåµ«á¯»å®ŒæŸ¼́–’ [ 81.930968][ T1934] usb 3-1: SerialNumber: Đ… [ 82.251278][ T1934] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.260782][ T1934] usb 3-1: MIDIStreaming interface descriptor not found [ 82.363605][ T5611] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.379755][ T1934] usb 3-1: USB disconnect, device number 2 [ 82.461607][ T5783] usb 5-1: USB disconnect, device number 3 [ 82.513729][ T5611] usb 4-1: Using ep0 maxpacket: 32 [ 82.538476][ T5611] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.538523][ T5611] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.570640][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.570680][ T5611] usb 4-1: Product: syz [ 82.570704][ T5611] usb 4-1: Manufacturer: ́”ăºœî½®È¹ç°˜ä‚é“ă°®̃¿äœ¦ç³‡ë·«å”–ă¡—ç…æ²ä™…࠴―孈ï³ăƒ¢à­ă©ê¤ [ 82.570723][ T5611] usb 4-1: SerialNumber: syz [ 82.842619][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.007911][ T5930] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 83.188429][ T5611] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 83.362633][ T5611] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.442775][ T5611] usb 4-1: USB disconnect, device number 2 [ 83.482436][ T5948] bridge0: port 3(netdevsim0) entered blocking state [ 83.482528][ T5948] bridge0: port 3(netdevsim0) entered disabled state [ 83.488794][ T5948] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 83.556428][ T5948] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 83.563422][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.591151][ T5956] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.601190][ T5948] bridge0: port 3(netdevsim0) entered blocking state [ 83.601321][ T5948] bridge0: port 3(netdevsim0) entered forwarding state [ 83.682795][ T5951] warning: `syz.4.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.793154][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.839189][ T5971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.48'. [ 84.954136][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 84.958105][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.965463][ T10] usb 5-1: config 0 has no interfaces? [ 84.965494][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.070493][ T10] usb 5-1: config 0 descriptor?? [ 85.305914][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 85.305959][ T31] audit: type=1400 audit(1788731679.825:277): avc: denied { bind } for pid=5974 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.314906][ T5977] Bluetooth: MGMT ver 1.23 [ 85.315945][ T31] audit: type=1400 audit(1788731679.835:278): avc: denied { write } for pid=5974 comm="syz.3.50" path="socket:[10326]" dev="sockfs" ino=10326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.351392][ T31] audit: type=1326 audit(1788731679.865:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.2.51" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd27b79e159 code=0x0 [ 85.430549][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.443197][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.563801][ T31] audit: type=1400 audit(1788731680.095:280): avc: denied { read write } for pid=5994 comm="syz.1.52" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.568938][ T31] audit: type=1400 audit(1788731680.095:281): avc: denied { open } for pid=5994 comm="syz.1.52" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.687508][ T31] audit: type=1400 audit(1788731680.215:282): avc: denied { ioctl } for pid=5970 comm="syz.4.49" path="socket:[9500]" dev="sockfs" ino=9500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.717390][ T9] usb 5-1: USB disconnect, device number 4 [ 85.858966][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 85.876178][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 85.911594][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 85.924838][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 86.673225][ T31] audit: type=1400 audit(1788731681.195:283): avc: denied { create } for pid=6015 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 86.796404][ T31] audit: type=1400 audit(1788731681.315:284): avc: denied { connect } for pid=6015 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 87.294908][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.379219][ T31] audit: type=1400 audit(1788731681.905:285): avc: denied { write } for pid=6028 comm="syz.1.57" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.412802][ T31] audit: type=1400 audit(1788731681.935:286): avc: denied { getopt } for pid=6028 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.456184][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 87.458148][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.459275][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 87.459299][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.464526][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.464548][ T10] usb 1-1: Product: syz [ 87.464561][ T10] usb 1-1: Manufacturer: syz [ 87.464573][ T10] usb 1-1: SerialNumber: syz [ 87.476370][ T10] usb 1-1: config 0 descriptor?? [ 87.528685][ T10] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 87.750555][ T5611] usb 1-1: USB disconnect, device number 2 [ 87.796463][ T6029] md: personality for level is not loaded! [ 87.810063][ T6029] md: personality for level is not loaded! [ 89.501028][ T6054] xt_policy: output policy not valid in PREROUTING and INPUT [ 90.054894][ T6079] md: could not open device unknown-block(1,0). [ 90.091301][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.092849][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.116719][ T6079] md: could not open device unknown-block(1,1). [ 90.150050][ T6079] md: personality for level is not loaded! [ 90.161380][ T6079] md: personality for level is not loaded! [ 90.446541][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.498027][ T6082] Zero length message leads to an empty skb [ 90.504500][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.571014][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 90.571056][ T31] audit: type=1400 audit(1788731685.095:322): avc: denied { name_bind } for pid=6087 comm="syz.0.70" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.601198][ T31] audit: type=1400 audit(1788731685.095:323): avc: denied { listen } for pid=6087 comm="syz.0.70" laddr=::ffff:0.0.0.0 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.601246][ T31] audit: type=1400 audit(1788731685.105:324): avc: denied { getopt } for pid=6087 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.688805][ T6089] affs: No valid root block on device nullb0 [ 91.135335][ T6091] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET) [ 91.254804][ T31] audit: type=1400 audit(1788731685.785:325): avc: denied { read } for pid=6087 comm="syz.0.70" path="socket:[10573]" dev="sockfs" ino=10573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.428094][ T6099] affs: No valid root block on device nullb0 [ 91.866600][ T31] audit: type=1400 audit(1788731686.395:326): avc: denied { read write } for pid=6102 comm="syz.3.73" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.870829][ T31] audit: type=1400 audit(1788731686.395:327): avc: denied { open } for pid=6102 comm="syz.3.73" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.870868][ T31] audit: type=1400 audit(1788731686.395:328): avc: denied { ioctl } for pid=6102 comm="syz.3.73" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.883663][ T1550] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.883752][ T1550] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.883779][ T1550] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.883806][ T1550] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.141425][ T5783] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.261934][ T31] audit: type=1400 audit(1788731686.785:329): avc: denied { name_connect } for pid=6111 comm="syz.1.77" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.264073][ T31] audit: type=1400 audit(1788731686.795:330): avc: denied { name_connect } for pid=6111 comm="syz.1.77" dest=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 92.273084][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.294228][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 92.294759][ T5783] usb 4-1: New USB device found, idVendor=1e7d, idProduct=6ce2, bcdDevice=c6.11 [ 92.294798][ T5783] usb 4-1: no configurations [ 92.294808][ T5783] usb 4-1: can't read configurations, error -22 [ 92.327093][ T31] audit: type=1400 audit(1788731686.855:331): avc: denied { map_create } for pid=6110 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.403695][ T25] usb 5-1: device descriptor read/64, error -71 [ 92.424276][ T5783] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.506130][ T6118] gƯ[: renamed from veth1_vlan [ 92.507839][ T6120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.573015][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 92.573644][ T5783] usb 4-1: New USB device found, idVendor=1e7d, idProduct=6ce2, bcdDevice=c6.11 [ 92.573674][ T5783] usb 4-1: no configurations [ 92.573684][ T5783] usb 4-1: can't read configurations, error -22 [ 92.573882][ T5783] usb usb4-port1: attempt power cycle [ 92.643059][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.734570][ T6126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.773218][ T6126] md: could not open device unknown-block(1,0). [ 92.783180][ T25] usb 5-1: device descriptor read/64, error -71 [ 92.893218][ T25] usb usb5-port1: attempt power cycle [ 92.913071][ T5783] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.934266][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 92.934780][ T5783] usb 4-1: New USB device found, idVendor=1e7d, idProduct=6ce2, bcdDevice=c6.11 [ 92.934810][ T5783] usb 4-1: no configurations [ 92.934820][ T5783] usb 4-1: can't read configurations, error -22 [ 92.979304][ T6129] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 93.063864][ T5783] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.085398][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 93.086040][ T5783] usb 4-1: New USB device found, idVendor=1e7d, idProduct=6ce2, bcdDevice=c6.11 [ 93.086070][ T5783] usb 4-1: no configurations [ 93.086081][ T5783] usb 4-1: can't read configurations, error -22 [ 93.086278][ T5783] usb usb4-port1: unable to enumerate USB device [ 93.700145][ T6133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.193079][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.214445][ T25] usb 5-1: device descriptor read/8, error -71 [ 94.400358][ T6136] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49800 [ 94.412549][ T6136] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.421390][ T6136] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 94.421440][ T6136] page_type: f5(slab) [ 94.421461][ T6136] raw: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 94.421482][ T6136] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 94.421503][ T6136] head: 00fff00000000040 ffff88801c034140 dead000000000100 dead000000000122 [ 94.421523][ T6136] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 94.421541][ T6136] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 94.421557][ T6136] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 94.421568][ T6136] page dumped because: unmovable page [ 94.421579][ T6136] page_owner tracks the page as allocated [ 94.421587][ T6136] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5610, tgid 5610 (udevd), ts 80964056524 [ 94.421615][ T6136] post_alloc_hook+0xfd/0x120 [ 94.421643][ T6136] get_page_from_freelist+0x110d/0x35d0 [ 94.443351][ T6136] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 94.470975][ T6136] new_slab+0xa9/0x6e0 [ 94.471010][ T6136] refill_objects+0xe3/0x410 [ 94.471030][ T6136] __pcs_replace_empty_main+0x35e/0x650 [ 94.471051][ T6136] __kmalloc_noprof+0x67c/0x840 [ 94.471064][ T6136] tomoyo_realpath_from_path+0xb6/0x690 [ 94.484157][ T6136] tomoyo_check_open_permission+0x2af/0x3c0 [ 94.484194][ T6136] tomoyo_file_open+0x6b/0x90 [ 94.484214][ T6136] security_file_open+0xb5/0x1e0 [ 94.484234][ T6136] do_dentry_open+0x588/0x14d0 [ 94.484250][ T6136] vfs_open+0x82/0x3f0 [ 94.484267][ T6136] path_openat+0x19fa/0x2440 [ 94.484292][ T6136] do_file_open+0x20e/0x430 [ 94.484309][ T6136] do_sys_openat2+0x10f/0x1e0 [ 94.484329][ T6136] page last free pid 1 tgid 1 ts 14670322017 stack trace: [ 94.484343][ T6136] free_pages_prepare+0x586/0xe00 [ 94.484366][ T6136] __free_contig_range_common+0x14f/0x250 [ 94.484386][ T6136] destroy_args+0xa8/0x7a0 [ 94.484403][ T6136] debug_vm_pgtable+0x1d69/0x3490 [ 94.484421][ T6136] do_one_initcall+0x11c/0x6f0 [ 94.484438][ T6136] kernel_init_freeable+0x6ea/0x7b0 [ 94.484454][ T6136] kernel_init+0x21/0x1e0 [ 94.484474][ T6136] ret_from_fork+0x730/0xd60 [ 94.484491][ T6136] ret_from_fork_asm+0x1a/0x30 [ 94.489206][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.543010][ T25] usb 5-1: device descriptor read/8, error -71 [ 94.658888][ T25] usb usb5-port1: unable to enumerate USB device [ 95.521050][ T6156] netlink: set zone limit has 4 unknown bytes [ 95.660557][ T5704] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.796835][ T6169] affs: No valid root block on device nullb0 [ 96.603586][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 96.615815][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.615870][ T5704] usb 1-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 96.618282][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.618300][ T5704] usb 1-1: Product: syz [ 96.618311][ T5704] usb 1-1: Manufacturer: syz [ 96.618322][ T5704] usb 1-1: SerialNumber: syz [ 96.628783][ T5704] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 96.658897][ T5704] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.661154][ T5704] snd_usb_podhd 1-1:1.0: Line 6 POD HD500 found [ 96.661174][ T5704] usb 1-1: selecting invalid altsetting 1 [ 96.661188][ T5704] snd_usb_podhd 1-1:1.0: set_interface failed [ 96.661987][ T5704] snd_usb_podhd 1-1:1.0: Line 6 POD HD500 now disconnected [ 96.662121][ T5704] snd_usb_podhd 1-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 96.700087][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.787711][ T6178] bond0: entered promiscuous mode [ 96.795951][ T6178] bond_slave_0: entered promiscuous mode [ 96.801904][ T6178] bond_slave_1: entered promiscuous mode [ 96.810792][ T6178] batadv0: entered promiscuous mode [ 96.819571][ T6178] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 96.830526][ T6178] bond0: left promiscuous mode [ 96.830575][ T6178] bond_slave_0: left promiscuous mode [ 96.830728][ T6178] bond_slave_1: left promiscuous mode [ 96.838203][ T6150] loop8: detected capacity change from 0 to 16384 [ 96.853431][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.864069][ T6178] batadv0: left promiscuous mode [ 97.006336][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 97.015608][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 97.015642][ T10] usb 4-1: Product: syz [ 97.015655][ T10] usb 4-1: SerialNumber: syz [ 97.030458][ T10] usb 4-1: config 0 descriptor?? [ 97.234728][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 97.234765][ T31] audit: type=1400 audit(1788731691.765:355): avc: denied { ioctl } for pid=6181 comm="syz.1.99" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9887 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.246599][ T6179] loop8: detected capacity change from 16384 to 16383 [ 97.335775][ T6182] FAULT_INJECTION: forcing a failure. [ 97.335775][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 97.335848][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 97.335869][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 97.335877][ T6182] Call Trace: [ 97.335883][ T6182] [ 97.335890][ T6182] dump_stack_lvl+0x100/0x190 [ 97.335919][ T6182] should_fail_ex.cold+0x5/0xa [ 97.335942][ T6182] should_failslab+0xc2/0x120 [ 97.335967][ T6182] __kmalloc_noprof+0xfc/0x840 [ 97.335982][ T6182] ? rcu_is_watching+0x13/0xc0 [ 97.336003][ T6182] ? tomoyo_realpath_from_path+0xb6/0x690 [ 97.336028][ T6182] tomoyo_realpath_from_path+0xb6/0x690 [ 97.336053][ T6182] tomoyo_check_open_permission+0x2af/0x3c0 [ 97.336080][ T6182] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 97.336105][ T6182] ? do_syscall_64+0x123/0x790 [ 97.336132][ T6182] ? hook_file_open+0x248/0x8e0 [ 97.336168][ T6182] ? path_get+0x61/0x80 [ 97.336192][ T6182] tomoyo_file_open+0x6b/0x90 [ 97.336212][ T6182] security_file_open+0xb5/0x1e0 [ 97.336230][ T6182] do_dentry_open+0x588/0x14d0 [ 97.336254][ T6182] vfs_open+0x82/0x3f0 [ 97.336276][ T6182] path_openat+0x19fa/0x2440 [ 97.336299][ T6182] ? __pfx_path_openat+0x10/0x10 [ 97.336325][ T6182] do_file_open+0x20e/0x430 [ 97.336346][ T6182] ? __pfx_do_file_open+0x10/0x10 [ 97.336380][ T6182] ? _raw_spin_unlock+0x28/0x50 [ 97.336396][ T6182] ? alloc_fd+0x471/0x7a0 [ 97.336421][ T6182] do_sys_openat2+0x10f/0x1e0 [ 97.336442][ T6182] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.336463][ T6182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.336490][ T6182] __x64_sys_openat+0x12d/0x210 [ 97.336511][ T6182] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.336541][ T6182] do_syscall_64+0x123/0x790 [ 97.336561][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.336578][ T6182] RIP: 0033:0x7f41b8b9e159 [ 97.336592][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.336607][ T6182] RSP: 002b:00007f41b6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.336624][ T6182] RAX: ffffffffffffffda RBX: 00007f41b8e25fa0 RCX: 00007f41b8b9e159 [ 97.336634][ T6182] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 97.336644][ T6182] RBP: 00007f41b8c35024 R08: 0000000000000000 R09: 0000000000000000 [ 97.336653][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.336663][ T6182] R13: 00007f41b8e26038 R14: 00007f41b8e25fa0 R15: 00007ffcaec98c88 [ 97.336684][ T6182] [ 97.336714][ T6182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.358083][ T31] audit: type=1400 audit(1788731691.875:356): avc: denied { watch watch_reads } for pid=6181 comm="syz.1.99" path="/20" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.687572][ T31] audit: type=1400 audit(1788731692.215:357): avc: denied { write } for pid=6171 comm="syz.3.97" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 97.797161][ T6190] syzkaller0: entered promiscuous mode [ 97.797207][ T6190] syzkaller0: entered allmulticast mode [ 97.818625][ T6190] tipc: Started in network mode [ 97.818676][ T6190] tipc: Node identity 9609297255bf, cluster identity 4711 [ 97.821723][ T6190] tipc: Enabled bearer , priority 0 [ 97.992556][ T6188] tipc: Resetting bearer [ 98.000226][ T1934] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.051532][ T9] usb 1-1: USB disconnect, device number 3 [ 98.158953][ T31] audit: type=1400 audit(1788731692.665:358): avc: denied { mount } for pid=6194 comm="syz.2.103" name="/" dev="autofs" ino=9928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 98.159207][ T31] audit: type=1400 audit(1788731692.685:359): avc: denied { read append } for pid=6194 comm="syz.2.103" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.161634][ T31] audit: type=1400 audit(1788731692.685:360): avc: denied { open } for pid=6194 comm="syz.2.103" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.189510][ T31] audit: type=1400 audit(1788731692.715:361): avc: denied { ioctl } for pid=6194 comm="syz.2.103" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 98.492871][ T1934] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.526613][ T1934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.526659][ T1934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.638705][ T6188] tipc: Disabling bearer [ 98.686399][ T10] usb 4-1: USB disconnect, device number 7 [ 99.005327][ T1934] usb 2-1: config 0 descriptor?? [ 99.055535][ T31] audit: type=1400 audit(1788731693.585:362): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.095384][ T6201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.099537][ T1934] pwc: Askey VC010 type 2 USB webcam detected. [ 99.144114][ T6201] md: could not open device unknown-block(1,0). [ 99.464494][ T1934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.550103][ T31] audit: type=1400 audit(1788731694.075:363): avc: denied { setopt } for pid=6202 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.570025][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.605704][ T1934] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.608021][ T1934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.611540][ T1934] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.612015][ T1934] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.614925][ T1934] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.618264][ T1934] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.723643][ T10] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 99.737507][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.751853][ T10] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.767161][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.776015][ T10] usb 4-1: Product: syz [ 99.780921][ T10] usb 4-1: Manufacturer: syz [ 99.786033][ T10] usb 4-1: SerialNumber: syz [ 99.807482][ T10] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 99.823550][ T5788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 99.840405][ T10] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 99.857286][ T10] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 99.976203][ T5788] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.977199][ T5788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.977234][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.989721][ T5788] usb 5-1: config 0 descriptor?? [ 100.049042][ T5788] pwc: Askey VC010 type 2 USB webcam detected. [ 100.082423][ T31] audit: type=1400 audit(1788731694.605:364): avc: denied { create } for pid=6217 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.194085][ T6220] loop2: detected capacity change from 0 to 9303 [ 100.255900][ T5603] Buffer I/O error on dev loop2, logical block 1162, async page read [ 100.309614][ T1934] pwc: recv_control_msg error -71 req 02 val 2100 [ 100.310807][ T1934] pwc: recv_control_msg error -71 req 04 val 1500 [ 100.311472][ T1934] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.311828][ T1934] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.312970][ T1934] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.313727][ T1934] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.314760][ T1934] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.315519][ T1934] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.315965][ T1934] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.378101][ T1934] pwc: Registered as video103. [ 100.391619][ T1934] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 100.435395][ T5788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.436321][ T5788] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.442860][ T5788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.443943][ T5788] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.444812][ T5788] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.447640][ T5788] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.461144][ T1934] usb 2-1: USB disconnect, device number 5 [ 100.628062][ T5825] Buffer I/O error on dev loop2, logical block 2325, async page read [ 100.654515][ T6234] Bluetooth: MGMT ver 1.23 [ 101.296339][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.349424][ T6246] ip_tables: iptables: counters copy to user failed while replacing table [ 101.392964][ T6248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.493130][ T6248] md: could not open device unknown-block(1,0). [ 101.654608][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 101.655295][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 101.656230][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.656257][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.658059][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 101.658080][ T10] usb 1-1: Product: syz [ 101.658093][ T10] usb 1-1: Manufacturer: syz [ 101.658113][ T10] usb 1-1: SerialNumber: syz [ 101.670213][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 101.814742][ T6211] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 101.959928][ T1934] usb 1-1: USB disconnect, device number 4 [ 101.959986][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 102.100701][ T25] usb 4-1: USB disconnect, device number 8 [ 102.165038][ T1934] appletouch 1-1:1.0: input: appletouch disconnected [ 102.234996][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 102.290743][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 102.291716][ T25] ti_usb_3410_5052 4-1:2.0: device disconnected [ 102.331272][ T6253] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 102.436080][ T6255] netlink: 1108 bytes leftover after parsing attributes in process `syz.2.120'. [ 102.458269][ T5788] pwc: recv_control_msg error -71 req 02 val 2100 [ 102.466134][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 102.466165][ T31] audit: type=1400 audit(1788731696.965:379): avc: denied { nlmsg_read } for pid=6254 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.472724][ T5788] pwc: recv_control_msg error -71 req 04 val 1500 [ 102.508337][ T5788] pwc: recv_control_msg error -71 req 02 val 2500 [ 102.522643][ T5788] pwc: recv_control_msg error -71 req 02 val 2400 [ 102.529649][ T5788] pwc: recv_control_msg error -71 req 02 val 2600 [ 102.537183][ T5788] pwc: recv_control_msg error -71 req 02 val 2900 [ 102.547216][ T5788] pwc: recv_control_msg error -71 req 02 val 2800 [ 102.557512][ T5788] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.565157][ T5788] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.576961][ T6253] process 'syz.1.119' launched './file0' with NULL argv: empty string added [ 102.591379][ T31] audit: type=1400 audit(1788731697.115:380): avc: denied { execute_no_trans } for pid=6252 comm="syz.1.119" path="/24/file0" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.618350][ T31] audit: type=1400 audit(1788731697.145:381): avc: denied { map } for pid=6254 comm="syz.2.120" path="socket:[10958]" dev="sockfs" ino=10958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.618407][ T31] audit: type=1400 audit(1788731697.145:382): avc: denied { read write } for pid=6254 comm="syz.2.120" path="socket:[10958]" dev="sockfs" ino=10958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.685164][ T5788] pwc: Registered as video103. [ 102.698500][ T5788] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 102.752743][ T5788] usb 5-1: USB disconnect, device number 9 [ 102.807407][ T6253] Illegal XDP return value 4294967294 on prog (id 15) dev syz_tun, expect packet loss! [ 102.931332][ T6260] pim6reg: entered allmulticast mode [ 102.943910][ T6260] pim6reg: left allmulticast mode [ 103.169591][ T31] audit: type=1400 audit(1788731697.695:383): avc: denied { bind } for pid=6259 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.229101][ T31] audit: type=1400 audit(1788731697.755:384): avc: denied { listen } for pid=6259 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.920995][ T31] audit: type=1400 audit(1788731698.445:385): avc: denied { create } for pid=6265 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.986191][ T31] audit: type=1400 audit(1788731698.465:386): avc: denied { bind } for pid=6265 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.123051][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.275092][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.277865][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 104.277904][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 70, changing to 10 [ 104.277944][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42393, setting to 1024 [ 104.277966][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.279569][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.279590][ T10] usb 2-1: Product: syz [ 104.279602][ T10] usb 2-1: Manufacturer: syz [ 104.279632][ T10] usb 2-1: SerialNumber: syz [ 104.315359][ T10] usb 2-1: config 0 descriptor?? [ 104.315917][ T6269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.317644][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 104.317662][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 104.350164][ T10] usb 2-1: selecting invalid altsetting 0 [ 104.386429][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 104.387115][ T6273] mmap: syz.0.127 (6273): VmData 37597184 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 104.913078][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.920729][ T5788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.943190][ T1934] usb 2-1: USB disconnect, device number 6 [ 105.072998][ T5788] usb 1-1: device descriptor read/64, error -71 [ 105.103833][ T25] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 105.114679][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.124851][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 105.128035][ T6292] tipc: New replicast peer: 172.20.20.187 [ 105.129560][ T6292] tipc: Enabled bearer , priority 10 [ 105.134989][ T6292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.136171][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 105.169047][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.169084][ T25] usb 3-1: Product: syz [ 105.169111][ T25] usb 3-1: Manufacturer: syz [ 105.169128][ T25] usb 3-1: SerialNumber: syz [ 105.195084][ T6282] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.202452][ T6282] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.216089][ T25] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 105.227513][ T25] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 105.227558][ T25] usbserial_generic 3-1:1.0: generic converter detected [ 105.250176][ T25] usb 3-1: generic converter now attached to ttyUSB0 [ 105.304562][ T5783] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.313047][ T5788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.416468][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 105.416519][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 105.417340][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 105.434346][ T5783] usb 2-1: device descriptor read/64, error -71 [ 105.443201][ T5788] usb 1-1: device descriptor read/64, error -71 [ 105.459427][ T31] audit: type=1400 audit(1788731699.985:387): avc: denied { mount } for pid=6281 comm="syz.2.129" name="/" dev="overlay" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.554475][ T5788] usb usb1-port1: attempt power cycle [ 105.587133][ T31] audit: type=1400 audit(1788731700.115:388): avc: denied { listen } for pid=6298 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.674305][ T5783] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.793641][ T25] usb 3-1: USB disconnect, device number 3 [ 105.806731][ T5783] usb 2-1: device descriptor read/64, error -71 [ 105.812181][ T25] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 105.812672][ T25] usbserial_generic 3-1:1.0: device disconnected [ 106.717906][ T5788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.728391][ T5783] usb usb2-port1: attempt power cycle [ 106.747695][ T5704] tipc: Node number set to 3283495282 [ 106.749557][ T5788] usb 1-1: device descriptor read/8, error -71 [ 107.012984][ T5788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.034662][ T5788] usb 1-1: device descriptor read/8, error -71 [ 107.087444][ T6312] FAULT_INJECTION: forcing a failure. [ 107.087444][ T6312] name fail_futex, interval 1, probability 0, space 0, times 0 [ 107.087495][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 107.087517][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 107.087528][ T6312] Call Trace: [ 107.087533][ T6312] [ 107.087539][ T6312] dump_stack_lvl+0x100/0x190 [ 107.087568][ T6312] should_fail_ex.cold+0x5/0xa [ 107.087591][ T6312] get_futex_key+0x1d0/0x14f0 [ 107.087613][ T6312] ? __pfx_get_futex_key+0x10/0x10 [ 107.087634][ T6312] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 107.087661][ T6312] futex_wait_setup+0x91/0x540 [ 107.087692][ T6312] __futex_wait+0x19f/0x300 [ 107.087717][ T6312] ? __pfx___futex_wait+0x10/0x10 [ 107.087739][ T6312] ? __pfx_try_to_wake_up+0x10/0x10 [ 107.087761][ T6312] ? __pfx_futex_wake_mark+0x10/0x10 [ 107.087788][ T6312] ? preempt_schedule_common+0x3c/0xb0 [ 107.087814][ T6312] futex_wait+0xe6/0x370 [ 107.087838][ T6312] ? __pfx_futex_wait+0x10/0x10 [ 107.087873][ T6312] do_futex+0x265/0x440 [ 107.087895][ T6312] ? __pfx_do_futex+0x10/0x10 [ 107.087916][ T6312] ? rcu_is_watching+0x13/0xc0 [ 107.087936][ T6312] ? do_sock_setsockopt+0x101/0x1d0 [ 107.087954][ T6312] ? kfree+0x1e5/0x6d0 [ 107.087974][ T6312] ? udp_setsockopt+0x6b/0xb0 [ 107.088001][ T6312] __x64_sys_futex+0x34f/0x4d0 [ 107.088024][ T6312] ? __pfx___x64_sys_futex+0x10/0x10 [ 107.088054][ T6312] do_syscall_64+0x123/0x790 [ 107.088074][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.088092][ T6312] RIP: 0033:0x7f41b8b9e159 [ 107.088108][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.088124][ T6312] RSP: 002b:00007f41b6df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.088142][ T6312] RAX: ffffffffffffffda RBX: 00007f41b8e25fa8 RCX: 00007f41b8b9e159 [ 107.088153][ T6312] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41b8e25fa8 [ 107.088162][ T6312] RBP: 00007f41b8e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 107.088172][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.088181][ T6312] R13: 00007f41b8e26038 R14: 00007ffcaec98ba0 R15: 00007ffcaec98c88 [ 107.088203][ T6312] [ 107.093823][ T12] IPVS: starting estimator thread 0... [ 107.143846][ T5788] usb usb1-port1: unable to enumerate USB device [ 107.183457][ T6317] IPVS: using max 45 ests per chain, 108000 per kthread [ 107.826030][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 107.826065][ T31] audit: type=1400 audit(1788731702.345:397): avc: denied { setopt } for pid=6335 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.968463][ T31] audit: type=1400 audit(1788731702.495:398): avc: denied { create } for pid=6339 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.003558][ T31] audit: type=1400 audit(1788731702.525:399): avc: denied { bind } for pid=6339 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.055174][ T31] audit: type=1400 audit(1788731702.585:400): avc: denied { setopt } for pid=6339 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.055848][ T31] audit: type=1400 audit(1788731702.585:401): avc: denied { accept } for pid=6339 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.408746][ T6349] affs: No valid root block on device nullb0 [ 108.840768][ T31] audit: type=1400 audit(1788731703.365:402): avc: denied { wake_alarm } for pid=6318 comm="syz.1.140" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.310696][ T31] audit: type=1400 audit(1788731703.835:403): avc: denied { relabelfrom } for pid=6355 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.310904][ T31] audit: type=1400 audit(1788731703.835:404): avc: denied { relabelto } for pid=6355 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.654675][ T6370] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 109.863000][ T5713] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.883393][ T5704] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.013122][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 110.023388][ T5713] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 110.033398][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 110.033683][ T5713] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 110.033704][ T5713] usb 4-1: config 0 has no interface number 0 [ 110.034288][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.037121][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.037164][ T5713] usb 4-1: Product: syz [ 110.037173][ T5713] usb 4-1: Manufacturer: syz [ 110.037186][ T5713] usb 4-1: SerialNumber: syz [ 110.092336][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.092377][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.092420][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.122744][ T5704] usb 1-1: config 0 descriptor?? [ 110.128423][ T5713] usb 4-1: config 0 descriptor?? [ 110.139727][ T5704] hub 1-1:0.0: USB hub found [ 110.233585][ T31] audit: type=1400 audit(1788731704.765:405): avc: denied { read } for pid=6375 comm="syz.4.158" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 110.233918][ T31] audit: type=1400 audit(1788731704.765:406): avc: denied { open } for pid=6375 comm="syz.4.158" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 110.334855][ T5704] hub 1-1:0.0: 1 port detected [ 110.494906][ T6378] md: could not open device unknown-block(1,0). [ 110.501302][ T6384] syzkaller0: entered promiscuous mode [ 110.501338][ T6384] syzkaller0: entered allmulticast mode [ 110.554111][ T6378] md: could not open device unknown-block(1,1). [ 110.565575][ T5713] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 110.565620][ T5713] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.721083][ T6378] md: pers->run() failed ... [ 110.817956][ T6387] md: pers->run() failed ... [ 110.947269][ T5704] hub 1-1:0.0: activate --> -90 [ 111.357148][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.366154][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.386902][ T1934] usb 1-1: USB disconnect, device number 9 [ 111.553024][ T5783] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.713014][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 111.719381][ T5783] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.729755][ T5783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 111.747344][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.762372][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.770524][ T5783] usb 5-1: Product: syz [ 111.774842][ T5783] usb 5-1: Manufacturer: syz [ 111.779511][ T5783] usb 5-1: SerialNumber: syz [ 111.788707][ T5783] usb 5-1: config 0 descriptor?? [ 111.797970][ T5783] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.809090][ T5783] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 112.226522][ T6401] syzkaller0: entered promiscuous mode [ 112.226558][ T6401] syzkaller0: entered allmulticast mode [ 112.292423][ T6409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.303772][ T6409] block device autoloading is deprecated and will be removed. [ 112.399153][ T5783] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 112.405782][ T5783] em28xx 5-1:0.0: Config register raw data: 0x41 [ 112.573429][ T5788] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 112.649089][ T6412] netlink: 64 bytes leftover after parsing attributes in process `syz.0.168'. [ 112.842176][ T5783] usb 5-1: USB disconnect, device number 10 [ 112.849559][ T5783] em28xx 5-1:0.0: Disconnecting em28xx [ 112.858290][ T5788] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 112.870154][ T5788] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 112.870196][ T5788] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 112.894926][ T5788] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 112.894973][ T5788] usb 3-1: Manufacturer: syz [ 112.895002][ T5788] usb 3-1: SerialNumber: syz [ 112.926379][ T5783] em28xx: Freeing device [ 112.939638][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 112.939826][ T31] audit: type=1400 audit(1788731707.465:416): avc: denied { connect } for pid=6414 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.950304][ T31] audit: type=1400 audit(1788731707.465:417): avc: denied { load_policy } for pid=6414 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.958378][ T6415] SELinux: ebitmap: map size 721422336 does not match my size 64 (high bit was 4211110077) [ 112.958515][ T6415] SELinux: invalid class [ 112.964284][ T6415] SELinux: failed to load policy [ 113.134245][ T5788] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 113.145781][ T5788] usb 3-1: USB disconnect, device number 4 [ 113.770448][ T5713] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 113.770844][ T5713] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 113.774354][ T5713] usb 4-1: USB disconnect, device number 9 [ 113.842198][ T31] audit: type=1400 audit(1788731708.365:418): avc: denied { node_bind } for pid=6424 comm="syz.4.173" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 113.897327][ T31] audit: type=1400 audit(1788731708.425:419): avc: denied { setopt } for pid=6424 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.117759][ T31] audit: type=1400 audit(1788731708.645:420): avc: denied { read } for pid=6429 comm="syz.1.175" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.117960][ T31] audit: type=1400 audit(1788731708.645:421): avc: denied { open } for pid=6429 comm="syz.1.175" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.147262][ T31] audit: type=1400 audit(1788731708.675:422): avc: denied { ioctl } for pid=6429 comm="syz.1.175" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.289008][ T31] audit: type=1400 audit(1788731708.815:423): avc: denied { write } for pid=6433 comm="syz.2.176" name="rootcell" dev="proc" ino=4026533564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.319821][ T6435] busy [ 115.281459][ T31] audit: type=1400 audit(1788731709.805:424): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.377657][ T6441] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.788203][ T31] audit: type=1400 audit(1788731710.315:425): avc: denied { create } for pid=6449 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.863688][ T6441] md: could not open device unknown-block(1,0). [ 116.219212][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.785052][ T5783] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.785905][ T5783] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 116.785941][ T5783] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 116.785962][ T5783] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 42393, setting to 1024 [ 116.785984][ T5783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.787778][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.787796][ T5783] usb 3-1: Product: syz [ 116.787808][ T5783] usb 3-1: Manufacturer: syz [ 116.787820][ T5783] usb 3-1: SerialNumber: syz [ 116.797660][ T5783] usb 3-1: config 0 descriptor?? [ 116.799416][ T6454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.802744][ T5783] hub 3-1:0.0: bad descriptor, ignoring hub [ 116.802766][ T5783] hub 3-1:0.0: probe with driver hub failed with error -5 [ 116.821264][ T5783] usb 3-1: selecting invalid altsetting 0 [ 117.067861][ T6478] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 117.117612][ T5783] usb 3-1: USB disconnect, device number 5 [ 117.481324][ T6446] syz.1.179 (6446): drop_caches: 2 [ 117.503101][ T6489] ======================================================= [ 117.503101][ T6489] WARNING: The mand mount option has been deprecated and [ 117.503101][ T6489] and is ignored by this kernel. Remove the mand [ 117.503101][ T6489] option from the mount to silence this warning. [ 117.503101][ T6489] ======================================================= [ 117.593204][ T5783] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.723330][ T5783] usb 3-1: device descriptor read/64, error -71 [ 117.992001][ T6505] affs: No valid root block on device nullb0 [ 118.336957][ T5783] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.474539][ T5783] usb 3-1: device descriptor read/64, error -71 [ 118.583315][ T5783] usb usb3-port1: attempt power cycle [ 118.923102][ T5783] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.065103][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 119.065137][ T31] audit: type=1400 audit(1788731713.595:445): avc: denied { setopt } for pid=6512 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.092849][ T31] audit: type=1400 audit(1788731713.615:446): avc: denied { write } for pid=6512 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.119567][ T5783] usb 3-1: device descriptor read/8, error -71 [ 119.129229][ T5601] Bluetooth: hci4: link tx timeout [ 119.129313][ T5601] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.276140][ T31] audit: type=1400 audit(1788731713.805:447): avc: denied { write } for pid=6511 comm="syz.0.196" name="sg0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.299694][ T31] audit: type=1400 audit(1788731713.805:448): avc: denied { open } for pid=6511 comm="syz.0.196" path="/dev/sg0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.299756][ T31] audit: type=1400 audit(1788731713.805:449): avc: denied { ioctl } for pid=6511 comm="syz.0.196" path="/dev/sg0" dev="devtmpfs" ino=873 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.352744][ T31] audit: type=1400 audit(1788731713.875:450): avc: denied { mounton } for pid=6516 comm="syz.2.198" path="/proc/122" dev="proc" ino=12504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 119.428411][ T6517] Invalid ELF header magic: != ELF [ 119.433098][ T5713] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.446022][ T31] audit: type=1400 audit(1788731713.955:451): avc: denied { module_load } for pid=6516 comm="syz.2.198" path="/proc/122/cmdline" dev="proc" ino=4026532036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=system permissive=1 [ 119.583807][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 119.584429][ T5713] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 119.585743][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.585765][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.585783][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.585814][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.587690][ T5713] usb 5-1: config 0 descriptor?? [ 119.670599][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 119.684091][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 120.057909][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 120.081272][ T6532] netlink: 'syz.3.203': attribute type 9 has an invalid length. [ 120.081301][ T6532] netlink: 7 bytes leftover after parsing attributes in process `syz.3.203'. [ 120.393246][ T31] audit: type=1400 audit(1788731714.915:452): avc: denied { kexec_image_load } for pid=6534 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 120.963033][ T31] audit: type=1400 audit(1788731715.435:453): avc: denied { write } for pid=6537 comm="syz.3.205" name="c.1" dev="configfs" ino=11635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.203023][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 121.380900][ T5713] sony 0003:054C:042F.0001: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 121.566680][ T5713] sony 0003:054C:042F.0001: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.4-1/input0 [ 121.566737][ T5713] sony 0003:054C:042F.0001: failed to claim input [ 121.588552][ T5783] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.643310][ T6545] affs: No valid root block on device nullb0 [ 121.835237][ T5783] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 121.841767][ T5713] usb 5-1: USB disconnect, device number 11 [ 121.856374][ T5783] usb 1-1: Dual-Role OTG device on HNP port [ 121.865571][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.890961][ T5783] gspca_main: spca501-2.14.0 probing 0000:0000 [ 121.904180][ T5783] gspca_spca501: reg write: error -32 [ 121.904209][ T5783] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 121.904277][ T5783] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 121.933287][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 121.945386][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 121.953814][ C1] CPU: 1 UID: 0 PID: 5783 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 121.963194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 121.973236][ C1] Workqueue: usb_hub_wq hub_event [ 121.978259][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 121.984140][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 122.003735][ C1] RSP: 0018:ffffc90000a189d8 EFLAGS: 00010002 [ 122.009786][ C1] RAX: dffffc0000000000 RBX: ffff888055160000 RCX: 0000000000000103 [ 122.017758][ C1] RDX: 00000000000000e6 RSI: ffffffff87f565e6 RDI: ffff888055160128 [ 122.025718][ C1] RBP: ffff888055160128 R08: 0000000000000004 R09: 0000000000000020 [ 122.033680][ C1] R10: 0000000000000020 R11: 000000000000762b R12: ffff8880551600f0 [ 122.041634][ C1] R13: ffff888055160128 R14: ffff888055160740 R15: 0000000000000001 [ 122.049590][ C1] FS: 0000000000000000(0000) GS:ffff888123c5f000(0000) knlGS:0000000000000000 [ 122.058505][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.065067][ C1] CR2: 00007fa09e027dac CR3: 000000000eb96000 CR4: 00000000003526f0 [ 122.073032][ C1] Call Trace: [ 122.076291][ C1] [ 122.079117][ C1] f_midi2_set_alt+0x444/0x5f0 [ 122.083858][ C1] composite_setup+0x16f8/0x9290 [ 122.088773][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 122.093684][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 122.098592][ C1] ? __pfx_composite_setup+0x10/0x10 [ 122.103859][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.109218][ C1] ? do_raw_spin_lock+0x128/0x260 [ 122.114215][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.119568][ C1] ? configfs_composite_setup+0xfb/0x130 [ 122.125182][ C1] configfs_composite_setup+0xfb/0x130 [ 122.130649][ C1] dummy_timer+0x2039/0x3700 [ 122.135235][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 122.141021][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 122.146629][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 122.151552][ C1] ? mark_held_locks+0x40/0x70 [ 122.156291][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.162081][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 122.167003][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 122.172190][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 122.177279][ C1] handle_softirqs+0x1e6/0x9d0 [ 122.182028][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 122.187301][ C1] ? _raw_spin_unlock+0x28/0x50 [ 122.192137][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 122.197789][ C1] __irq_exit_rcu+0x194/0x210 [ 122.202456][ C1] irq_exit_rcu+0x9/0x30 [ 122.206692][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 122.212315][ C1] [ 122.215308][ C1] [ 122.218213][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.224166][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 122.230554][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 4d 14 f6 48 89 df e8 4e a3 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 aa 03 f6 65 48 83 3d e4 24 b9 08 00 74 16 5b [ 122.250147][ C1] RSP: 0018:ffffc900047de880 EFLAGS: 00000246 [ 122.256296][ C1] RAX: 0000000000000002 RBX: ffff88802ac3c000 RCX: 0000000000000040 [ 122.264264][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ebe23 RDI: ffffffff8c621080 [ 122.272209][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 122.280154][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 122.288112][ C1] R13: ffff88802ac2e478 R14: 0000000000000000 R15: ffff88802ac2e400 [ 122.296235][ C1] dummy_urb_enqueue+0x56c/0x880 [ 122.301174][ C1] ? __device_attach_driver+0xf1/0x320 [ 122.306610][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 122.311706][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 122.316709][ C1] ? __device_attach+0x1e4/0x4d0 [ 122.321618][ C1] ? device_initial_probe+0xaf/0xd0 [ 122.326788][ C1] ? bus_probe_device+0x64/0x160 [ 122.331710][ C1] ? device_add+0x121d/0x1970 [ 122.336359][ C1] ? usb_new_device.part.0+0xcc2/0x1686 [ 122.341895][ C1] ? hub_event.cold+0x1e3/0xe90 [ 122.346731][ C1] usb_submit_urb+0x827/0x19b0 [ 122.351469][ C1] ? __init_swait_queue_head+0xca/0x150 [ 122.356987][ C1] usb_start_wait_urb+0x10e/0x580 [ 122.361983][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 122.367500][ C1] ? __asan_memset+0x23/0x50 [ 122.372074][ C1] usb_control_msg+0x328/0x4b0 [ 122.376809][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 122.382078][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.387264][ C1] usb_control_msg_send+0xca/0x130 [ 122.392362][ C1] usb_set_interface+0x9b6/0xe20 [ 122.397296][ C1] snd_usb_midi_v2_create+0x629/0x4070 [ 122.402742][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 122.408357][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.414318][ C1] ? snd_info_create_entry+0x6f/0x400 [ 122.419680][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 122.425023][ C1] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 122.430893][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 122.436247][ C1] ? snd_info_create_entry+0x314/0x400 [ 122.441689][ C1] ? usb_ifnum_to_if+0x16f/0x1d0 [ 122.446601][ C1] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 122.452470][ C1] usb_audio_probe+0xf0b/0x3b10 [ 122.457309][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 122.462586][ C1] ? do_raw_spin_lock+0x128/0x260 [ 122.467595][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.473032][ C1] ? mark_held_locks+0x40/0x70 [ 122.477767][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 122.483108][ C1] ? find_held_lock+0x2b/0x80 [ 122.487763][ C1] ? mark_held_locks+0x40/0x70 [ 122.492496][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.498280][ C1] usb_probe_interface+0x386/0x9b0 [ 122.503375][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 122.508993][ C1] ? kernfs_put+0x3f/0x60 [ 122.513301][ C1] ? sysfs_create_link+0x68/0xc0 [ 122.518235][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 122.523849][ C1] really_probe+0x241/0xa60 [ 122.528328][ C1] __driver_probe_device+0x210/0x460 [ 122.533588][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.539377][ C1] driver_probe_device+0x4a/0x140 [ 122.544473][ C1] __device_attach_driver+0x1df/0x320 [ 122.549834][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 122.555708][ C1] bus_for_each_drv+0x159/0x1e0 [ 122.560548][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 122.565918][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.571185][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 122.576965][ C1] __device_attach+0x1e4/0x4d0 [ 122.581704][ C1] ? __pfx___device_attach+0x10/0x10 [ 122.586961][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.592141][ C1] device_initial_probe+0xaf/0xd0 [ 122.597139][ C1] bus_probe_device+0x64/0x160 [ 122.601879][ C1] device_add+0x121d/0x1970 [ 122.606356][ C1] ? __pfx_device_add+0x10/0x10 [ 122.611189][ C1] ? mark_held_locks+0x40/0x70 [ 122.615938][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.621721][ C1] usb_set_configuration+0xd97/0x1c60 [ 122.627072][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 122.633112][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 122.638465][ C1] usb_probe_device+0xef/0x400 [ 122.643243][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 122.648614][ C1] really_probe+0x241/0xa60 [ 122.653105][ C1] __driver_probe_device+0x210/0x460 [ 122.658364][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.664151][ C1] driver_probe_device+0x4a/0x140 [ 122.669175][ C1] __device_attach_driver+0x1df/0x320 [ 122.674532][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 122.680403][ C1] bus_for_each_drv+0x159/0x1e0 [ 122.685262][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 122.690796][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.695970][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 122.701763][ C1] __device_attach+0x1e4/0x4d0 [ 122.706620][ C1] ? __pfx___device_attach+0x10/0x10 [ 122.711884][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 122.717063][ C1] device_initial_probe+0xaf/0xd0 [ 122.722066][ C1] bus_probe_device+0x64/0x160 [ 122.726819][ C1] device_add+0x121d/0x1970 [ 122.731309][ C1] ? __pfx_device_add+0x10/0x10 [ 122.736131][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 122.741831][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 122.747361][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 122.753153][ C1] ? mark_held_locks+0x40/0x70 [ 122.757896][ C1] hub_event.cold+0x1e3/0xe90 [ 122.762551][ C1] ? __pfx_hub_event+0x10/0x10 [ 122.767292][ C1] ? print_usage_bug.part.0+0x1f0/0x340 [ 122.772821][ C1] ? lock_acquire+0x1d1/0x380 [ 122.777467][ C1] ? process_one_work+0xa2c/0x1b10 [ 122.782569][ C1] ? process_one_work+0x906/0x1b10 [ 122.787660][ C1] ? process_one_work+0x906/0x1b10 [ 122.792863][ C1] process_one_work+0xac7/0x1b10 [ 122.797793][ C1] ? __pfx_process_one_work+0x10/0x10 [ 122.803144][ C1] ? lock_acquire+0x1d1/0x380 [ 122.807792][ C1] ? __pfx_hub_event+0x10/0x10 [ 122.812537][ C1] worker_thread+0x5ef/0xe50 [ 122.817105][ C1] ? __pfx_worker_thread+0x10/0x10 [ 122.822288][ C1] ? kthread+0x13a/0x450 [ 122.826534][ C1] ? __pfx_worker_thread+0x10/0x10 [ 122.831632][ C1] kthread+0x373/0x450 [ 122.835689][ C1] ? __pfx_kthread+0x10/0x10 [ 122.840280][ C1] ret_from_fork+0x730/0xd60 [ 122.844869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 122.849968][ C1] ? __switch_to+0x800/0x10f0 [ 122.854644][ C1] ? __pfx_kthread+0x10/0x10 [ 122.859213][ C1] ret_from_fork_asm+0x1a/0x30 [ 122.863957][ C1] [ 122.866957][ C1] Modules linked in: [ 122.870825][ C1] ---[ end trace 0000000000000000 ]--- [ 122.876258][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 122.876278][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 122.876289][ C1] RSP: 0018:ffffc90000a189d8 EFLAGS: 00010002 [ 122.876298][ C1] RAX: dffffc0000000000 RBX: ffff888055160000 RCX: 0000000000000103 [ 122.876305][ C1] RDX: 00000000000000e6 RSI: ffffffff87f565e6 RDI: ffff888055160128 [ 122.876312][ C1] RBP: ffff888055160128 R08: 0000000000000004 R09: 0000000000000020 [ 122.876319][ C1] R10: 0000000000000020 R11: 000000000000762b R12: ffff8880551600f0 [ 122.876326][ C1] R13: ffff888055160128 R14: ffff888055160740 R15: 0000000000000001 [ 122.876333][ C1] FS: 0000000000000000(0000) GS:ffff888123c5f000(0000) knlGS:0000000000000000 [ 122.876343][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.876350][ C1] CR2: 00007fa09e027dac CR3: 000000000eb96000 CR4: 00000000003526f0 [ 122.876358][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 122.978377][ C1] Kernel Offset: disabled [ 122.982680][ C1] Rebooting in 86400 seconds..