last executing test programs: 13.660953121s ago: executing program 3 (id=872): r0 = io_uring_setup(0x6137, &(0x7f0000000000)={0x0, 0xb673, 0x200, 0x1, 0xa}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x8000, 0x7, 0x8}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000100)={r0}, 0x1) userfaultfd(0x80001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000e148b6929bd7000fbdbdf250800030009"], 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r8, &(0x7f0000000340)=""/125, 0x7d, 0x66fe) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_newroute={0x40, 0x18, 0x200, 0x70bd27, 0x25dfdbfe, {0x80, 0x30, 0x80, 0x6, 0xfc, 0x4, 0xff, 0xb, 0x3900}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x2c, 0xcd, r1}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x375fb73b7b6f557b}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44894}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x40080c0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 11.799976623s ago: executing program 0 (id=875): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x41, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd25, 0x20000000, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x4, 0x5e, 0x6c, 0x1, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x2, 0x6, 0x0, 0x0, "1a40a57bf5ece0e9"}, 0x2}}]}, 0x14c}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) write$9p(r3, &(0x7f0000000040)="9daa3de1b1c00bceab43eaba112d8410b9f4ad13ec1904c71b71f4de", 0x1c) read$FUSE(r2, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000020900020073797a"], 0x94}}, 0x4c014) 10.530244982s ago: executing program 3 (id=876): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0xca, 0xffffffffffffffff}}, 0x1c7041) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@empty, @empty, 0x0}, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000, {{}, 0x1, {0x65d2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x6}}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x25, 0xc, @val=@perf_event={0x80}}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40488d0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x521, 0x2000000, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000000)=""/28, &(0x7f0000000080)=0x1c) 9.710044656s ago: executing program 3 (id=878): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_connect$uac1(0x4, 0xd8, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000cf6b1d01014000010203010902c60003010380800904000000010100000a24010300030201020b2406060102030008004009240309040304010e0c240203060204c20d0000060904010000010200000904010101010200000f240201e704f800272d706d0a2be40724010104020008240201000101fc0924020103040d408d0c24020104030709d2cf832c0924020103040202a209050109ff03b92900072501000906000904020000010200000904020101010200000b24020240000104086fe3090582090002004fe807250180000a00e74d3a826e0989e4a0cb0328f13383677eb7d1714a72cac65e0af23539ae22fb9d483c10a0f22d721cf8dacbd65fac0b7e9c4fe12d55b01d8082ce"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x11, 0x2, 0x3, 0x5}, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf, 0x4d, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0xa, 0x7ff}]}, 0x3, [{0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "352dd99ce1e0ef89c9b5a66f0f3897eaebfb7e7824895af6bca8c66188d28601dc17985fba88b94763585f5ecbbed00e5e205974c22d3ca6de447e4fe79805bccf2e48817d98aa9605cb9f781cb1e86e809fc6f34622712985d0a0b63a77a5d1d8d729ed26ab38046592d282f26be0a804d14973b5a805d18f08b4de4e6a4fa5718f14811a7f030e0e9709054ca22cce2abecaf42d53a84c7944a8e81a0097fde1954a5ce0e8b313165542bc9fe6d0b892"}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "44d405a0eb53a9d2fb6bf3bd4890647dbb6a04ef94d763e03c32d52159d05c863ef6c1dd670102bf1944"}}, {0x17, &(0x7f0000000040)=ANY=[]}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 9.646408438s ago: executing program 2 (id=881): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="18000000010003", 0x7) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x4, 0x6, {0xffffffffffffffff}, {0xee01}, 0xffffffff, 0x8000000000000000}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x200) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) memfd_create(&(0x7f0000000cc0)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\xf9\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\x00\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000d080), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) keyctl$clear(0x5, 0xffffffffffffffff) connect$bt_l2cap(r2, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000600), 0x0, 0x0) write(r1, &(0x7f00000000c0)="510003009400", 0x6) 7.716184227s ago: executing program 0 (id=887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setpgid(0x0, r4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 6.569491371s ago: executing program 3 (id=895): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000230000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = inotify_init1(0xc0000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002c80)={0x0, "870a012d6aceb28d885168c0d84ffdb3"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={r2, 0x8, 0x0, [0xe, 0x80000000, 0x800, 0x0, 0x6], [0xe2a, 0x3ff, 0xfffffffffffffffb, 0x3, 0x2, 0xed4, 0x9, 0x7fffffff, 0x8000000000000001, 0xc7c, 0x800, 0x5, 0xd3a, 0xa81, 0x0, 0x9, 0x7a, 0x9, 0x9, 0x0, 0x2, 0x100000001, 0x7, 0x2, 0xc, 0x80, 0x7f, 0x1, 0x9, 0x9, 0xb, 0x1, 0x3, 0x0, 0x6797, 0x7043f9ee, 0x8, 0x9, 0xfffffffffffff738, 0x3, 0xfffffffffffffffb, 0x9, 0x6a8, 0xc6, 0x5155, 0x1, 0x2, 0x8, 0x100, 0xfffffffffffffffd, 0x7ff, 0xcb82, 0x1, 0x6, 0x10, 0x8, 0x800, 0x9, 0x2, 0xb233, 0x3, 0xb84e, 0x6, 0x8000000000000000, 0x2, 0x39a7, 0x5, 0x7, 0x9, 0x8, 0x4, 0x200, 0x4, 0x7, 0x5, 0x7, 0x4, 0x3, 0x6, 0x9, 0xf, 0x1, 0xb, 0x3, 0x10001, 0x4, 0x6, 0x8000000000000001, 0x0, 0x7ff, 0xfffffffffffff28a, 0x10001, 0x1, 0x8000, 0x7, 0x100, 0x2, 0x7, 0xffff, 0x1, 0xb, 0x9, 0x4, 0x8, 0x2, 0x8, 0xfde, 0x7fffffffffffffff, 0x7, 0x100000001, 0x5, 0x10000, 0x8, 0x9, 0x4197, 0x1ff, 0x8, 0x2b34, 0x5, 0x2, 0xd6]}) madvise(&(0x7f0000065000/0x4000)=nil, 0x4000, 0xb) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@loopback, 0x28, 0x0, 0x4}]}, 0x38}}, 0x0) memfd_create(0x0, 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb5"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x84}, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_aout(r5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"/5920], 0x1720) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) read(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x6}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) 4.746146347s ago: executing program 0 (id=898): socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') madvise(&(0x7f00005b8000/0x4000)=nil, 0x4000, 0xe) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4080}, 0x4040) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsopen(&(0x7f0000000240)='ext2\x00', 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="5c00000011006bec2f0702076e17aa31076b876c1d0000007ea6086416022208000c000500010004000000eab582747b951e618294ff0051f60a84c9f4d4938037e7bb44d0000300000000000200ffffc6c953000000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200400d4) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0x820000000000004, 0x8003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x9de, 0x0) 4.727103271s ago: executing program 2 (id=899): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="050000001f000000041700000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) 4.726391689s ago: executing program 4 (id=900): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 4.661286249s ago: executing program 3 (id=901): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) (async) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000240)="12070777d9c924faa939ac73d99c0ee3eba3f76444ca9abf5930c3414b275cbc9923ce41799ac8fa16721f", 0x100000, 0x44000, 0x0, 0xfffffffffffffea1) (async) faccessat(0xffffffffffffffff, 0x0, 0x1) 4.635519452s ago: executing program 2 (id=902): mkdir(&(0x7f0000000440)='./file1\x00', 0x12) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0xa7bf, 0x69, 0x1ff, 0x2, {0x2, 0x1, 0xfffffffffffffff8, 0x1, 0x3, 0x8, 0x7, 0x4, 0xad, 0x4000, 0xc, 0x0, 0x0, 0x38a, 0x1}}, {0x0, 0xc}}}, 0xa0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000380)={0x4, 0x2, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x6, 0x5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x49e74, 0x1000, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.530577728s ago: executing program 4 (id=904): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x10) r2 = socket$isdn(0x22, 0x2, 0x2) dup3(r2, r1, 0x0) 4.222875056s ago: executing program 4 (id=905): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000039000000080003", @ANYRES32=r6, @ANYBLOB="10005a800c000309"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001040)={r10, 0x4, 0x6}, &(0x7f0000001080)=0x8) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 4.214568553s ago: executing program 1 (id=906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000940)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.161746549s ago: executing program 2 (id=907): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) 3.286161357s ago: executing program 1 (id=908): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) (fail_nth: 1) 3.223019513s ago: executing program 4 (id=909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/417], &(0x7f0000000100)='GPL\x00'}, 0x94) setpgid(0x0, r4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 3.142239874s ago: executing program 2 (id=910): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c000309"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000001040)={r9, 0x4, 0x6}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={r9, 0x6, 0x8, 0xd601}, 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 2.946368346s ago: executing program 0 (id=911): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) open(0x0, 0x0, 0x1a9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x2d5b, &(0x7f0000000400)={0x0, 0x621e, 0x3180, 0x7fff, 0x4}, &(0x7f0000000180), &(0x7f00000000c0)) r4 = epoll_create1(0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x20000000}) 2.679325294s ago: executing program 1 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20048051}, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000580)={@broadcast, @random="46a84d74094a", @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc={0x8864, {@snap={0xab, 0xaa, "87", "f58c21", 0x57, "eebdd8c75715d188156032aaf815"}}}}}, 0x0) 2.517835181s ago: executing program 1 (id=913): bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="050000001f000000041700000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) 2.434147727s ago: executing program 2 (id=914): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_connect$uac1(0x4, 0xd8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x11, 0x2, 0x3, 0x5}, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf, 0x4d, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xa, 0xa, 0x7ff}]}, 0x3, [{0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "352dd99ce1e0ef89c9b5a66f0f3897eaebfb7e7824895af6bca8c66188d28601dc17985fba88b94763585f5ecbbed00e5e205974c22d3ca6de447e4fe79805bccf2e48817d98aa9605cb9f781cb1e86e809fc6f34622712985d0a0b63a77a5d1d8d729ed26ab38046592d282f26be0a804d14973b5a805d18f08b4de4e6a4fa5718f14811a7f030e0e9709054ca22cce2abecaf42d53a84c7944a8e81a0097fde1954a5ce0e8b313165542bc9fe6d0b892"}}, {0x2c, &(0x7f00000003c0)=@string={0x2c, 0x3, "44d405a0eb53a9d2fb6bf3bd4890647dbb6a04ef94d763e03c32d52159d05c863ef6c1dd670102bf1944"}}, {0x17, &(0x7f0000000040)=ANY=[]}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.303526891s ago: executing program 3 (id=915): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a7f1ac752b06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 2.299022624s ago: executing program 1 (id=916): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) faccessat(0xffffffffffffffff, &(0x7f0000000440)='./cgroup\x00', 0x20) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="34000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b0100000000000a000100bbbbbbbbbbbb000008000f001000000050b689e69078bf1a1ca609f291c0b52594ded042e9811986499663009da5356c10286ba36064d4ab9a3d9c630c0ad896681cbc068ba3c784a8a7f8df8b19376ce8b0e82d4e3b9ffbdfa4c1b5ed937059fbfa9925e5f385ceac62b64f54cd70890ddeb09c0b621fa610adbdf98333c4746ff733303daf8f800a38d85f070000007ca08b4b523024a1607be51ba16a6d8af5aa0df6689269f9736ccadaf177ca5c5bb26d65e34322c9f7093fef6351957ac92bc93f91c7ea9375f6bcd4aa58a408171f786e0d77f03d0b26e8b000d4381411a745"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="faffff82b5ade696cf8f54000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)="932a91f812f3b75aad2e06c02d8dbe8482de21077b9e90ca33e23a1c5979e234ec2a055e662dd5a6", &(0x7f00000003c0), 0xfffffffb, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08ff070002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, 0x0, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x24}}, 0x488c0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) setpgid(r7, r8) 1.716566121s ago: executing program 1 (id=917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setpgid(0x0, r4) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.368715827s ago: executing program 4 (id=918): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000940)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x481d5) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.100255271s ago: executing program 4 (id=919): syz_io_uring_setup(0x8c3, &(0x7f0000000140)={0x0, 0x92d9, 0x40, 0x2, 0xbedffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x4}, 0x18) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x40, 0x0, 0x10}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioperm(0x7, 0x449, 0x7ff) r5 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x55c6, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x0, 0xcd}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) recvmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000006c0)=""/232, 0xe8}], 0x5, &(0x7f00000007c0)=""/208, 0xd0}, 0x11) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}, {0xfff2}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=920): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) listen(r0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c000309"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000001040)={r9, 0x4, 0x6}, &(0x7f0000001080)=0x8) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) kernel console output (not intermixed with test programs): performance. Setting the MTU to 1532 would solve the problem. [ 233.205124][ T8248] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 233.466329][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 233.466344][ T30] audit: type=1400 audit(1761404793.715:660): avc: denied { ioctl } for pid=8241 comm="syz.1.494" path="socket:[17770]" dev="sockfs" ino=17770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.497098][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.527573][ T30] audit: type=1400 audit(1761404793.875:661): avc: denied { create } for pid=8263 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.547575][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.825279][ T30] audit: type=1400 audit(1761404793.885:662): avc: denied { read write } for pid=8263 comm="syz.4.501" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.849618][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.856203][ T30] audit: type=1400 audit(1761404793.885:663): avc: denied { open } for pid=8263 comm="syz.4.501" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.880434][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.324547][ T30] audit: type=1400 audit(1761404794.175:664): avc: denied { create } for pid=8263 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.845062][ T30] audit: type=1400 audit(1761404794.755:665): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 234.866010][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.187138][ T30] audit: type=1400 audit(1761404794.825:666): avc: denied { mount } for pid=8270 comm="syz.3.502" name="/" dev="ramfs" ino=17008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 235.223289][ T30] audit: type=1400 audit(1761404795.065:667): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.298621][ T30] audit: type=1400 audit(1761404795.065:668): avc: denied { search } for pid=5485 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.391238][ T30] audit: type=1400 audit(1761404795.065:669): avc: denied { search } for pid=5485 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.412824][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.884766][ T976] IPVS: starting estimator thread 0... [ 235.974565][ T8290] IPVS: using max 47 ests per chain, 112800 per kthread [ 237.191936][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.509'. [ 237.293993][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 237.311353][ T8321] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 237.418394][ T8321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 237.433107][ T8321] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.149062][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.230781][ T5879] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 238.305449][ T8330] SQUASHFS error: Failed to read block 0x0: -5 [ 238.312852][ T8330] unable to read squashfs_super_block [ 238.382448][ T8330] tc_dump_action: action bad kind [ 238.503171][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.521584][ T5879] usb 5-1: Product: syz [ 238.531690][ T5879] usb 5-1: Manufacturer: syz [ 238.582206][ T5879] usb 5-1: SerialNumber: syz [ 238.674253][ T5879] usb 5-1: config 0 descriptor?? [ 238.714247][ T5879] usb 5-1: ucan: probing device on interface #0 [ 238.733197][ T8328] tipc: Started in network mode [ 238.738081][ T8328] tipc: Node identity da9c6b6b52f3, cluster identity 4711 [ 238.745719][ T8328] tipc: Enabled bearer , priority 0 [ 238.754323][ T8328] syzkaller0: entered promiscuous mode [ 238.759811][ T8328] syzkaller0: entered allmulticast mode [ 238.775303][ T5879] usb 5-1: ucan: invalid EP count (0) [ 238.781186][ T8327] tipc: Resetting bearer [ 238.794475][ T5879] usb 5-1: ucan: probe failed; try to update the device firmware [ 238.863819][ T8341] SQUASHFS error: Failed to read block 0x0: -5 [ 238.870893][ T8341] unable to read squashfs_super_block [ 238.881480][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 238.881513][ T30] audit: type=1400 audit(1761404799.245:693): avc: denied { create } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.204510][ T30] audit: type=1400 audit(1761404799.285:694): avc: denied { connect } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.280501][ T8327] tipc: Disabling bearer [ 239.306939][ T8341] tc_dump_action: action bad kind [ 239.313430][ T30] audit: type=1400 audit(1761404799.295:695): avc: denied { create } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.333523][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 239.374157][ T5879] usb 5-1: USB disconnect, device number 9 [ 239.438661][ T30] audit: type=1400 audit(1761404799.295:696): avc: denied { bind } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.721992][ T30] audit: type=1400 audit(1761404799.305:697): avc: denied { listen } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.745201][ T8337] tipc: Started in network mode [ 239.750059][ T8337] tipc: Node identity 4e21c56ccac1, cluster identity 4711 [ 239.757253][ T8337] tipc: Enabled bearer , priority 0 [ 239.765742][ T8337] syzkaller0: entered promiscuous mode [ 239.771205][ T8337] syzkaller0: entered allmulticast mode [ 239.778349][ T30] audit: type=1400 audit(1761404799.305:698): avc: denied { connect } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.799067][ T30] audit: type=1400 audit(1761404799.315:699): avc: denied { accept } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.819547][ T8336] tipc: Resetting bearer [ 239.910330][ T30] audit: type=1400 audit(1761404799.325:700): avc: denied { shutdown } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.930414][ T30] audit: type=1400 audit(1761404799.485:701): avc: denied { read } for pid=8339 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.949908][ T30] audit: type=1400 audit(1761404799.635:702): avc: denied { name_bind } for pid=8309 comm="syz.4.508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 240.973826][ T5926] tipc: Node number set to 2229323116 [ 241.006203][ T8336] tipc: Disabling bearer [ 241.017437][ T8369] FAULT_INJECTION: forcing a failure. [ 241.017437][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.426237][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.4.518 Not tainted syzkaller #0 PREEMPT(full) [ 241.426263][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.426273][ T8369] Call Trace: [ 241.426279][ T8369] [ 241.426285][ T8369] dump_stack_lvl+0x16c/0x1f0 [ 241.426316][ T8369] should_fail_ex+0x512/0x640 [ 241.426340][ T8369] _copy_from_user+0x2e/0xd0 [ 241.426362][ T8369] binder_thread_write+0xa5c/0x4e70 [ 241.426400][ T8369] ? __pfx_binder_thread_write+0x10/0x10 [ 241.426426][ T8369] ? binder_debug+0xde/0x1a0 [ 241.426450][ T8369] ? binder_debug+0xde/0x1a0 [ 241.426471][ T8369] ? __pfx_binder_debug+0x10/0x10 [ 241.426493][ T8369] ? find_held_lock+0x2b/0x80 [ 241.426527][ T8369] binder_ioctl+0x26db/0x73b0 [ 241.426562][ T8369] ? tomoyo_path_number_perm+0x18d/0x580 [ 241.426596][ T8369] ? __pfx_binder_ioctl+0x10/0x10 [ 241.426623][ T8369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.426647][ T8369] ? do_vfs_ioctl+0x128/0x14f0 [ 241.426671][ T8369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 241.426694][ T8369] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 241.426723][ T8369] ? hook_file_ioctl_common+0x145/0x410 [ 241.426752][ T8369] ? selinux_file_ioctl+0x180/0x270 [ 241.426770][ T8369] ? selinux_file_ioctl+0xb4/0x270 [ 241.426790][ T8369] ? __pfx_binder_ioctl+0x10/0x10 [ 241.426815][ T8369] __x64_sys_ioctl+0x18e/0x210 [ 241.426841][ T8369] do_syscall_64+0xcd/0xfa0 [ 241.426869][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.426886][ T8369] RIP: 0033:0x7f159b58efc9 [ 241.426901][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.426917][ T8369] RSP: 002b:00007f159c40e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.426934][ T8369] RAX: ffffffffffffffda RBX: 00007f159b7e5fa0 RCX: 00007f159b58efc9 [ 241.426945][ T8369] RDX: 00002000000016c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 241.426955][ T8369] RBP: 00007f159c40e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.426965][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.426975][ T8369] R13: 00007f159b7e6038 R14: 00007f159b7e5fa0 R15: 00007ffc1a56aea8 [ 241.427006][ T8369] [ 241.427015][ T8369] binder: 8368:8369 ioctl c0306201 2000000016c0 returned -14 [ 241.657475][ T8358] tc_dump_action: action bad kind [ 243.699279][ T8405] Illegal XDP return value 4294967274 on prog (id 160) dev N/A, expect packet loss! [ 244.185200][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 244.458399][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 244.458430][ T30] audit: type=1400 audit(1761404804.825:715): avc: denied { create } for pid=8412 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.275921][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.354676][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 245.464594][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 245.485502][ T5879] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.506713][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.529089][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 245.545900][ T5926] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.557726][ T5879] usb 1-1: config 0 descriptor?? [ 245.562883][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.596407][ T5926] usb 3-1: config 0 descriptor?? [ 246.264928][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 247.047378][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.057813][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 247.066339][ T5879] usb 1-1: media controller created [ 247.141501][ T30] audit: type=1400 audit(1761404806.135:716): avc: denied { name_bind } for pid=8421 comm="syz.0.529" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 247.194781][ T30] audit: type=1400 audit(1761404806.195:717): avc: denied { create } for pid=8421 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.252931][ T30] audit: type=1400 audit(1761404806.485:718): avc: denied { ioctl } for pid=8421 comm="syz.0.529" path="socket:[17286]" dev="sockfs" ino=17286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.436069][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 248.510763][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.597217][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.647421][ T5926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 248.648682][ T5879] az6027: usb out operation failed. (-71) [ 248.654678][ T5926] usb 3-1: media controller created [ 248.666284][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.695632][ T8438] autofs: Bad value for 'fd' [ 248.707132][ T5926] az6027: usb out operation failed. (-71) [ 248.713917][ T5926] az6027: usb out operation failed. (-71) [ 248.722169][ T5926] stb0899_attach: Driver disabled by Kconfig [ 248.722382][ T5879] az6027: usb out operation failed. (-71) [ 248.737432][ T5879] stb0899_attach: Driver disabled by Kconfig [ 248.745341][ T5879] az6027: no front-end attached [ 248.745341][ T5879] [ 248.748892][ T30] audit: type=1400 audit(1761404809.115:719): avc: denied { create } for pid=8447 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.752947][ T5879] az6027: usb out operation failed. (-71) [ 248.779416][ T5879] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 248.780671][ T5926] az6027: no front-end attached [ 248.780671][ T5926] [ 248.803214][ T5926] az6027: usb out operation failed. (-71) [ 248.816677][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 248.819199][ T5926] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 248.838657][ T30] audit: type=1400 audit(1761404809.205:720): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.840248][ T5879] dvb-usb: schedule remote query interval to 400 msecs. [ 249.129790][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 249.143213][ T8451] comedi: No check for data length of config insn id 34491 is implemented [ 249.144505][ T30] audit: type=1400 audit(1761404809.205:721): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.175710][ T8451] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 249.187714][ T5879] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 249.197287][ T5926] dvb-usb: schedule remote query interval to 400 msecs. [ 249.205414][ T5926] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 249.210957][ T5879] usb 1-1: USB disconnect, device number 8 [ 249.226266][ T8451] comedi: Assuming n=30626 is correct [ 249.238681][ T5926] usb 3-1: USB disconnect, device number 6 [ 249.240482][ T30] audit: type=1400 audit(1761404809.205:722): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2933 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.936201][ T5879] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 250.075538][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 250.276541][ T8463] SQUASHFS error: Failed to read block 0x0: -5 [ 250.283286][ T8463] unable to read squashfs_super_block [ 250.359639][ T8464] tc_dump_action: action bad kind [ 250.565430][ T30] audit: type=1400 audit(1761404810.925:723): avc: denied { getopt } for pid=8465 comm="syz.0.537" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.641861][ T8460] tipc: Started in network mode [ 250.646740][ T8460] tipc: Node identity ea10c9ebd52d, cluster identity 4711 [ 250.653923][ T8460] tipc: Enabled bearer , priority 0 [ 250.667653][ T8458] tipc: Disabling bearer [ 250.721796][ T8471] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 250.799877][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'. [ 250.920928][ T8478] Mount JFS Failure: -5 [ 250.925329][ T8478] jfs_mount failed w/return code = -5 [ 251.547187][ T30] audit: type=1400 audit(1761404811.915:724): avc: denied { read write } for pid=8486 comm="syz.4.544" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.634551][ T976] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 251.682474][ T30] audit: type=1400 audit(1761404811.915:725): avc: denied { open } for pid=8486 comm="syz.4.544" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 252.245152][ T30] audit: type=1326 audit(1761404812.165:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 252.277187][ T8492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.544'. [ 252.288756][ T30] audit: type=1326 audit(1761404812.165:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 252.464511][ T30] audit: type=1326 audit(1761404812.165:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 252.504553][ T976] usb 4-1: device descriptor read/64, error -71 [ 252.971997][ T976] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 253.342196][ T30] audit: type=1326 audit(1761404812.165:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 253.633578][ T30] audit: type=1326 audit(1761404812.165:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 253.656773][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.718015][ T8506] bond0: (slave bond_slave_0): Releasing backup interface [ 253.725320][ T976] usb 4-1: device descriptor read/64, error -71 [ 253.754487][ T8506] bond0: (slave bond_slave_1): Releasing backup interface [ 253.799304][ T30] audit: type=1326 audit(1761404812.165:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 253.799319][ T8506] team0: Port device team_slave_0 removed [ 253.822502][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.854495][ T8506] team0: Port device team_slave_1 removed [ 253.860978][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.864556][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 253.884674][ T976] usb usb4-port1: attempt power cycle [ 253.894296][ T30] audit: type=1326 audit(1761404812.165:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.2.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 253.917527][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.925784][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.954552][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8508 comm=syz.0.548 [ 253.973052][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8508 comm=syz.0.548 [ 253.988899][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.057235][ T8510] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 254.234601][ T976] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 254.283187][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.361593][ T8506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.424481][ T5926] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 254.437865][ T8506] tipc: Enabled bearer , priority 0 [ 254.445654][ T8506] syzkaller0: entered promiscuous mode [ 254.451157][ T8506] syzkaller0: entered allmulticast mode [ 254.465608][ T976] usb 4-1: device descriptor read/8, error -71 [ 254.605490][ T8507] tipc: Resetting bearer [ 254.614357][ T5926] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 254.715217][ T8507] tipc: Disabling bearer [ 254.753370][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.766470][ T5926] usb 5-1: Product: syz [ 254.770700][ T5926] usb 5-1: Manufacturer: syz [ 254.775643][ T5926] usb 5-1: SerialNumber: syz [ 255.256415][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.268424][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.302471][ T8522] serio: Serial port ptm0 [ 255.504763][ T8534] Mount JFS Failure: -5 [ 255.509132][ T8534] jfs_mount failed w/return code = -5 [ 256.053556][ T8549] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 256.061497][ T8549] cramfs: wrong magic [ 256.067538][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 256.067552][ T30] audit: type=1400 audit(1761404816.415:770): avc: denied { append } for pid=8538 comm="syz.0.555" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.146129][ T30] audit: type=1400 audit(1761404816.415:771): avc: denied { ioctl } for pid=8538 comm="syz.0.555" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.170583][ T55] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 256.407239][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 256.436144][ T55] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.033403][ T55] usb 3-1: config 0 has no interface number 0 [ 257.061031][ T30] audit: type=1400 audit(1761404817.425:772): avc: denied { mount } for pid=8538 comm="syz.0.555" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 257.106264][ T55] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.131308][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.148038][ T55] usb 3-1: Product: syz [ 257.153417][ T55] usb 3-1: Manufacturer: syz [ 257.159324][ T55] usb 3-1: SerialNumber: syz [ 257.217954][ T55] usb 3-1: config 0 descriptor?? [ 257.347071][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.368078][ T55] smsc95xx v2.0.0 [ 257.423284][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.883540][ T5926] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 257.900592][ T30] audit: type=1400 audit(1761404818.265:773): avc: denied { connect } for pid=8540 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.902116][ T5926] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 257.962708][ T55] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 258.006233][ T5926] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 258.079641][ T55] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 258.095528][ T5926] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 258.125276][ T5926] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 258.159991][ T55] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 258.160579][ T5926] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 258.248751][ T8577] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 258.378044][ T55] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 258.511081][ T55] usb 3-1: USB disconnect, device number 7 [ 258.520489][ T5926] usb 5-1: USB disconnect, device number 10 [ 259.365762][ T30] audit: type=1326 audit(1761404819.735:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 259.478068][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.522624][ T30] audit: type=1326 audit(1761404819.735:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 259.695134][ T30] audit: type=1326 audit(1761404819.735:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 259.718283][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.056056][ T8606] SQUASHFS error: Failed to read block 0x0: -5 [ 260.062561][ T8606] unable to read squashfs_super_block [ 260.083529][ T5937] usb 5-1: device descriptor read/64, error -71 [ 260.090932][ T30] audit: type=1326 audit(1761404819.735:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 260.283016][ T8608] tc_dump_action: action bad kind [ 260.386696][ T30] audit: type=1326 audit(1761404819.735:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 260.414448][ T5937] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 260.446376][ T30] audit: type=1326 audit(1761404819.735:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f470e78efc9 code=0x7ffc0000 [ 260.574201][ T8606] syzkaller0: entered promiscuous mode [ 260.604528][ T5937] usb 5-1: device descriptor read/64, error -71 [ 260.732723][ T8606] syzkaller0: entered allmulticast mode [ 260.757538][ T5937] usb usb5-port1: attempt power cycle [ 261.264722][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 261.327702][ T5937] usb 5-1: device descriptor read/8, error -71 [ 261.706605][ T5937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 261.843267][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 261.843282][ T30] audit: type=1400 audit(1761404822.205:843): avc: denied { map } for pid=8628 comm="syz.4.573" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.014464][ T5937] usb 5-1: device not accepting address 14, error -71 [ 262.061353][ T5937] usb usb5-port1: unable to enumerate USB device [ 262.194603][ T976] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 262.506301][ T5871] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 262.676372][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 262.687413][ T5871] usb 4-1: config 0 has no interfaces? [ 262.705685][ T976] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.724211][ T976] usb 2-1: config 0 has no interface number 0 [ 262.724717][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 262.748366][ T976] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.762456][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.764430][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.781000][ T976] usb 2-1: Product: syz [ 262.790885][ T976] usb 2-1: Manufacturer: syz [ 262.799240][ T5871] usb 4-1: SerialNumber: syz [ 262.800965][ T976] usb 2-1: SerialNumber: syz [ 262.815545][ T976] usb 2-1: config 0 descriptor?? [ 262.815635][ T5871] usb 4-1: config 0 descriptor?? [ 262.833844][ T976] smsc95xx v2.0.0 [ 262.996708][ T8649] /dev/nullb0: Can't open blockdev [ 263.319142][ T5871] usb 4-1: USB disconnect, device number 19 [ 263.325391][ T30] audit: type=1400 audit(1761404823.675:844): avc: denied { bind } for pid=8624 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.348227][ T5936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 263.371181][ T30] audit: type=1400 audit(1761404823.675:845): avc: denied { read write } for pid=8624 comm="syz.3.560" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 263.398433][ T30] audit: type=1400 audit(1761404823.675:846): avc: denied { open } for pid=8624 comm="syz.3.560" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 263.500352][ T976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 263.513773][ T976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 263.525043][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 263.531432][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.546392][ T976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 263.559552][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 263.622134][ T8661] Mount JFS Failure: -5 [ 263.628933][ T8661] jfs_mount failed w/return code = -5 [ 263.644305][ T976] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 263.656777][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.676816][ T976] usb 2-1: USB disconnect, device number 19 [ 263.684238][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.714958][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.850323][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 263.861679][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.975134][ T5936] usb 3-1: config 0 descriptor?? [ 264.014019][ T1287] Bluetooth: hci5: Frame reassembly failed (-84) [ 264.464630][ T55] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 264.667965][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 264.684593][ T8676] bridge0: port 3(batadv0) entered disabled state [ 264.696932][ T8676] bridge_slave_1: left allmulticast mode [ 264.702793][ T8676] bridge_slave_1: left promiscuous mode [ 264.707263][ T8679] comedi: No check for data length of config insn id 34491 is implemented [ 264.709555][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.717419][ T8679] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 264.725162][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 264.742205][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.744746][ T8679] comedi: Assuming n=30622 is correct [ 264.760690][ T8676] bridge_slave_0: left allmulticast mode [ 264.766666][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.776620][ T55] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 264.785781][ T8676] bridge_slave_0: left promiscuous mode [ 264.791378][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.799670][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.811109][ T55] usb 4-1: config 0 descriptor?? [ 266.099248][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.111763][ T5936] usb 3-1: USB disconnect, device number 8 [ 266.789617][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 266.821917][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.843181][ T5879] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 266.947327][ T55] usb 4-1: USB disconnect, device number 20 [ 267.102619][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 267.399614][ T30] audit: type=1400 audit(1761404827.765:847): avc: denied { bind } for pid=8704 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 267.642200][ T30] audit: type=1400 audit(1761404827.995:848): avc: denied { ioctl } for pid=8694 comm="syz.1.586" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 267.868286][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.884763][ T30] audit: type=1400 audit(1761404828.245:849): avc: denied { setopt } for pid=8723 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.885550][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 267.945571][ T30] audit: type=1400 audit(1761404828.245:850): avc: denied { write } for pid=8723 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.024589][ T5879] usb 5-1: no configurations [ 268.029272][ T5879] usb 5-1: can't read configurations, error -22 [ 268.056742][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 268.118003][ T30] audit: type=1400 audit(1761404828.295:851): avc: denied { write } for pid=8723 comm="syz.3.593" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.326047][ T30] audit: type=1400 audit(1761404828.695:852): avc: denied { create } for pid=8722 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.985538][ T8730] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 268.993368][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.594'. [ 269.073245][ T30] audit: type=1400 audit(1761404829.435:853): avc: denied { write } for pid=8729 comm="syz.3.594" lport=42458 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 269.437648][ T30] audit: type=1400 audit(1761404829.565:854): avc: denied { write } for pid=8737 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.462301][ T30] audit: type=1400 audit(1761404829.765:855): avc: denied { ioctl } for pid=8722 comm="syz.2.592" path="socket:[19783]" dev="sockfs" ino=19783 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.364479][ T30] audit: type=1400 audit(1761404830.725:856): avc: denied { execute } for pid=8754 comm="syz.3.598" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 270.665897][ T8766] tc_dump_action: action bad kind [ 270.844430][ T5934] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 271.260732][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 271.269292][ T5934] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 271.278745][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.287126][ T5934] usb 5-1: Product: syz [ 271.291760][ T5934] usb 5-1: Manufacturer: syz [ 271.297910][ T5934] usb 5-1: SerialNumber: syz [ 271.310321][ T5934] usb 5-1: config 0 descriptor?? [ 271.376899][ T5934] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 271.386025][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 271.398269][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.482118][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 271.600512][ T5934] usb 5-1: media controller created [ 271.604305][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.599'. [ 271.625127][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.683314][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 271.768016][ T5934] DVB: Unable to find symbol mt352_attach() [ 271.784273][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 271.944501][ T5934] rc_core: IR keymap rc-dvico-portable not found [ 272.032691][ T5934] Registered IR keymap rc-empty [ 272.832801][ T5934] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 272.910428][ T5934] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 273.003948][ T5934] dvb-usb: schedule remote query interval to 100 msecs. [ 273.017402][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 273.086922][ T5934] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 273.111485][ T8797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.118986][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.142937][ T5934] usb 5-1: USB disconnect, device number 17 [ 273.337275][ T55] dvb-usb: bulk message failed: -22 (1/0) [ 273.457173][ T8797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.487197][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.611455][ T5934] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 274.072433][ T8797] bridge0: port 3(batadv0) entered disabled state [ 274.079944][ T51] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 274.088473][ T51] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 274.171642][ T8797] bridge0: port 3(batadv0) entered disabled state [ 274.882233][ T30] audit: type=1326 audit(1761404835.215:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.330408][ T30] audit: type=1326 audit(1761404835.215:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.556784][ T30] audit: type=1326 audit(1761404835.215:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.677708][ T8826] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 275.694017][ T30] audit: type=1326 audit(1761404835.215:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.724806][ T30] audit: type=1326 audit(1761404835.215:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.774517][ T30] audit: type=1326 audit(1761404835.215:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.822822][ T30] audit: type=1326 audit(1761404835.215:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.873289][ T30] audit: type=1326 audit(1761404835.215:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 275.924507][ T30] audit: type=1326 audit(1761404835.215:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 276.264016][ T30] audit: type=1326 audit(1761404835.215:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 276.596180][ T5937] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 277.095135][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 277.578240][ T5937] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 277.586681][ T5937] usb 4-1: config 254 has no interface number 0 [ 277.592967][ T5937] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 277.648568][ T5937] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.684461][ T5937] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.780959][ T5937] usb 4-1: config 254 interface 235 has no altsetting 0 [ 277.806846][ T5937] usb 4-1: string descriptor 0 read error: -71 [ 277.813057][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 277.838510][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.852282][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.868858][ T8849] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 277.907393][ T5937] usb 4-1: can't set config #254, error -71 [ 277.920117][ T5937] usb 4-1: USB disconnect, device number 21 [ 278.136951][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 278.146589][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 278.156327][ T5823] Bluetooth: hci3: hardware error 0x00 [ 278.239205][ T5936] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 278.439790][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.584075][ T5936] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 278.599051][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.628268][ T51] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 278.705402][ T5936] usb 1-1: Product: syz [ 278.834462][ T5936] usb 1-1: Manufacturer: syz [ 278.839110][ T5936] usb 1-1: SerialNumber: syz [ 278.905917][ T5936] usb 1-1: config 0 descriptor?? [ 279.037854][ T5936] usb 1-1: ucan: probing device on interface #0 [ 279.044640][ T5936] usb 1-1: ucan: invalid EP count (0) [ 279.147437][ T5936] usb 1-1: ucan: probe failed; try to update the device firmware [ 279.907657][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 280.210369][ T8866] serio: Serial port ptm0 [ 280.219098][ T5823] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 280.336357][ T5936] usb 1-1: USB disconnect, device number 9 [ 280.395328][ T976] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 280.539304][ T8876] serio: Serial port ptm1 [ 280.576230][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 280.594921][ T976] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 280.623837][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.728088][ T976] usb 5-1: config 0 descriptor?? [ 281.601379][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 282.375387][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.387063][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 282.394199][ T976] usb 5-1: media controller created [ 282.409160][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.515302][ T976] az6027: usb out operation failed. (-71) [ 282.588621][ T976] az6027: usb out operation failed. (-71) [ 282.634495][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 282.634509][ T30] audit: type=1400 audit(1761404842.995:888): avc: denied { create } for pid=8887 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 282.644498][ T976] stb0899_attach: Driver disabled by Kconfig [ 282.687412][ T8891] delete_channel: no stack [ 282.745020][ T8891] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 282.752989][ T8891] netlink: 232 bytes leftover after parsing attributes in process `syz.0.625'. [ 282.762202][ T8891] NCSI netlink: No device for ifindex 240215982 [ 282.898710][ T30] audit: type=1400 audit(1761404843.075:889): avc: denied { write } for pid=8887 comm="syz.0.625" path="socket:[20518]" dev="sockfs" ino=20518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 282.948329][ T976] az6027: no front-end attached [ 282.948329][ T976] [ 282.985460][ T976] az6027: usb out operation failed. (-71) [ 282.991276][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 283.030583][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 283.086657][ T976] dvb-usb: schedule remote query interval to 400 msecs. [ 283.093629][ T976] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 283.124603][ T976] usb 5-1: USB disconnect, device number 18 [ 283.134471][ T5936] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 283.174492][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 283.201065][ T976] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 283.284469][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 283.291106][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.324596][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 283.336409][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.351918][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.718310][ T5937] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.732907][ T5936] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 283.742882][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.758394][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.781381][ T5937] usb 3-1: config 0 descriptor?? [ 283.798338][ T5937] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 283.811183][ T5936] usb 4-1: config 0 descriptor?? [ 284.143976][ T30] audit: type=1400 audit(1761404844.495:890): avc: denied { read } for pid=8894 comm="syz.2.627" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.217538][ T8915] SQUASHFS error: Failed to read block 0x0: -5 [ 284.225206][ T8915] unable to read squashfs_super_block [ 284.348632][ T30] audit: type=1400 audit(1761404844.495:891): avc: denied { open } for pid=8894 comm="syz.2.627" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.360107][ T5936] usbhid 4-1:0.0: can't add hid device: -71 [ 284.468299][ T30] audit: type=1400 audit(1761404844.505:892): avc: denied { ioctl } for pid=8894 comm="syz.2.627" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 284.494220][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 284.504957][ T8914] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 284.522558][ T5936] usb 4-1: USB disconnect, device number 22 [ 284.535443][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.583713][ T8913] tc_dump_action: action bad kind [ 284.604673][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.843456][ T8933] tc_dump_action: action bad kind [ 286.359172][ T30] audit: type=1400 audit(1761404846.725:893): avc: denied { ioctl } for pid=8945 comm="syz.1.634" path="socket:[20155]" dev="sockfs" ino=20155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.421961][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 286.532560][ T5934] usb 3-1: USB disconnect, device number 9 [ 286.739116][ T8960] Bluetooth: MGMT ver 1.23 [ 286.776954][ T30] audit: type=1400 audit(1761404847.145:894): avc: denied { read } for pid=8959 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 287.094788][ T5934] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 287.251894][ T8969] block device autoloading is deprecated and will be removed. [ 287.547392][ T55] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.635911][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.645980][ T5934] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 287.655074][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.745804][ T55] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.755723][ T55] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 287.774986][ T5934] usb 4-1: config 0 descriptor?? [ 287.781234][ T55] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.869552][ T55] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 287.885325][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.914912][ T55] usb 3-1: config 0 descriptor?? [ 288.500391][ T8962] kernel profiling enabled (shift: 0) [ 288.622348][ T5934] nzxt-smart2 0003:1E71:2010.0005: item fetching failed at offset 2/5 [ 288.631382][ T5934] nzxt-smart2 0003:1E71:2010.0005: probe with driver nzxt-smart2 failed with error -22 [ 288.860419][ T55] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 288.874446][ T55] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 288.900515][ T55] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 288.910316][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.637'. [ 288.923836][ T55] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 288.937699][ T55] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 288.963576][ T8981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.639'. [ 288.995076][ T30] audit: type=1400 audit(1761404849.325:895): avc: denied { write } for pid=8970 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.105083][ T30] audit: type=1400 audit(1761404849.325:896): avc: denied { nlmsg_write } for pid=8970 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.347818][ T55] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -71 [ 289.381664][ T55] usb 3-1: USB disconnect, device number 10 [ 290.234729][ T8990] netlink: 'syz.4.643': attribute type 10 has an invalid length. [ 290.242612][ T8990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.643'. [ 290.642330][ T8998] sit1: entered allmulticast mode [ 290.647413][ T30] audit: type=1400 audit(1761404850.995:897): avc: denied { read } for pid=8993 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.726887][ T9000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.645'. [ 290.777851][ T30] audit: type=1400 audit(1761404851.145:898): avc: denied { create } for pid=8991 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.985246][ T30] audit: type=1400 audit(1761404851.345:899): avc: denied { mounton } for pid=9001 comm="syz.4.647" path="/130/file0" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 290.985281][ T9002] fuse: Bad value for 'fd' [ 291.007697][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.775802][ T30] audit: type=1400 audit(1761404852.085:900): avc: denied { accept } for pid=9006 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 293.493164][ T9025] FAULT_INJECTION: forcing a failure. [ 293.493164][ T9025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.506427][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.2.653 Not tainted syzkaller #0 PREEMPT(full) [ 293.506448][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.506458][ T9025] Call Trace: [ 293.506465][ T9025] [ 293.506471][ T9025] dump_stack_lvl+0x16c/0x1f0 [ 293.506494][ T9025] should_fail_ex+0x512/0x640 [ 293.506508][ T9025] _copy_from_user+0x2e/0xd0 [ 293.506522][ T9025] restore_sigcontext+0xcb/0x6a0 [ 293.506536][ T9025] ? __pfx_restore_sigcontext+0x10/0x10 [ 293.506558][ T9025] ? __pfx_restore_altstack+0x10/0x10 [ 293.506575][ T9025] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.506588][ T9025] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.506605][ T9025] __do_sys_rt_sigreturn+0x229/0x2c0 [ 293.506618][ T9025] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 293.506634][ T9025] do_syscall_64+0xcd/0xfa0 [ 293.506651][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.506662][ T9025] RIP: 0033:0x7f470e72b099 [ 293.506670][ T9025] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 293.506680][ T9025] RSP: 002b:00007f470f5c5340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 293.506690][ T9025] RAX: ffffffffffffffda RBX: 00007f470e9e6180 RCX: 00007f470e72b099 [ 293.506696][ T9025] RDX: 00007f470f5c5340 RSI: 00007f470f5c5470 RDI: 0000000000000021 [ 293.506703][ T9025] RBP: 00007f470f5c6090 R08: 0000010000008ebc R09: 0000000000000000 [ 293.506709][ T9025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 293.506714][ T9025] R13: 00007f470e9e6218 R14: 00007f470e9e6180 R15: 00007ffcdd98ba48 [ 293.506728][ T9025] [ 293.676020][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.862006][ T30] audit: type=1400 audit(1761404854.225:901): avc: denied { ioctl } for pid=9016 comm="syz.0.652" path="socket:[20232]" dev="sockfs" ino=20232 ioctlcmd=0x5419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.921789][ T30] audit: type=1400 audit(1761404854.285:902): avc: denied { ioctl } for pid=9029 comm="syz.2.655" path="socket:[20740]" dev="sockfs" ino=20740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.304992][ T30] audit: type=1400 audit(1761404854.285:903): avc: denied { bind } for pid=9029 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.388592][ T55] usb 4-1: USB disconnect, device number 23 [ 294.774738][ T5934] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 294.805668][ T30] audit: type=1400 audit(1761404855.145:904): avc: denied { create } for pid=9040 comm="syz.2.659" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.897100][ T30] audit: type=1400 audit(1761404855.155:905): avc: denied { write } for pid=9045 comm="syz.3.660" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.931003][ T30] audit: type=1400 audit(1761404855.155:906): avc: denied { open } for pid=9045 comm="syz.3.660" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 295.025745][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 295.618007][ T9056] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 295.643500][ T5934] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.661570][ T30] audit: type=1400 audit(1761404855.155:907): avc: denied { append } for pid=9045 comm="syz.3.660" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 295.692393][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.727299][ T5934] usb 5-1: config 0 descriptor?? [ 295.765861][ T30] audit: type=1400 audit(1761404855.155:908): avc: denied { read write } for pid=9045 comm="syz.3.660" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.861461][ T9062] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 295.872239][ T9062] cramfs: wrong magic [ 295.934639][ T30] audit: type=1400 audit(1761404855.155:909): avc: denied { open } for pid=9045 comm="syz.3.660" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.989027][ T30] audit: type=1400 audit(1761404855.165:910): avc: denied { write } for pid=9045 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.359092][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 297.074293][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.091911][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 297.104535][ T5934] usb 5-1: media controller created [ 297.119075][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.187750][ T30] audit: type=1400 audit(1761404855.165:911): avc: denied { read } for pid=9045 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 297.218922][ T5934] az6027: usb out operation failed. (-71) [ 297.254154][ T5934] az6027: usb out operation failed. (-71) [ 297.259846][ T30] audit: type=1400 audit(1761404855.235:912): avc: denied { write } for pid=9040 comm="syz.2.659" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.273627][ T5934] stb0899_attach: Driver disabled by Kconfig [ 297.352642][ T5934] az6027: no front-end attached [ 297.352642][ T5934] [ 297.388309][ T5934] az6027: usb out operation failed. (-71) [ 297.426937][ T5934] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 297.524566][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 297.628778][ T5934] dvb-usb: schedule remote query interval to 400 msecs. [ 297.954573][ T5934] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 298.046029][ T9076] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.194513][ T5934] usb 5-1: USB disconnect, device number 19 [ 298.953155][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 299.340701][ T5907] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 299.984456][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 299.991309][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.004047][ T5907] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 300.013516][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.021747][ T5907] usb 2-1: Product: syz [ 300.026245][ T5907] usb 2-1: Manufacturer: syz [ 300.030834][ T5907] usb 2-1: SerialNumber: syz [ 300.038152][ T5907] usb 2-1: config 0 descriptor?? [ 300.051919][ T5907] redrat3 2-1:0.0: Couldn't find all endpoints [ 300.152459][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 300.152474][ T30] audit: type=1400 audit(1761404860.515:920): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.204458][ T5871] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 300.399430][ T9121] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 300.407109][ T9121] cramfs: wrong magic [ 300.439582][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.753190][ T5871] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 300.775033][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.783125][ T5871] usb 4-1: Product: syz [ 300.791549][ T9102] nvme_fabrics: unknown parameter or missing value 'g' in ctrl creation request [ 300.804063][ T5871] usb 4-1: Manufacturer: syz [ 300.817047][ T5871] usb 4-1: SerialNumber: syz [ 300.870492][ T5871] usb 4-1: config 0 descriptor?? [ 300.886664][ T5871] usb 4-1: ucan: probing device on interface #0 [ 301.157048][ T5871] usb 4-1: ucan: invalid EP count (0) [ 301.172657][ T5871] usb 4-1: ucan: probe failed; try to update the device firmware [ 301.236536][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 301.557250][ T55] usb 4-1: USB disconnect, device number 24 [ 301.684428][ T30] audit: type=1400 audit(1761404862.045:921): avc: denied { connect } for pid=9134 comm="syz.2.675" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.714152][ T30] audit: type=1400 audit(1761404862.045:922): avc: denied { write } for pid=9134 comm="syz.2.675" laddr=fe80::f044:b5ff:fec9:b88b lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.828796][ T30] audit: type=1400 audit(1761404862.135:923): avc: denied { write } for pid=9136 comm="syz.0.676" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.848054][ T976] usb 2-1: USB disconnect, device number 20 [ 302.632100][ T9154] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 302.767436][ T30] audit: type=1400 audit(1761404863.135:924): avc: denied { create } for pid=9153 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.829854][ T9154] bond1: entered promiscuous mode [ 302.851329][ T9154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.909882][ T9163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.085143][ T9163] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 303.258282][ T9163] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 303.362933][ T9163] bond1: (slave wireguard0): making interface the new active one [ 303.371907][ T9163] wireguard0: entered promiscuous mode [ 303.385894][ T9163] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 303.405137][ T976] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 303.437048][ T9154] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 303.500336][ T9154] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 303.584642][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 303.596853][ T976] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.604801][ T30] audit: type=1400 audit(1761404863.965:925): avc: denied { write } for pid=9173 comm="syz.2.688" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 303.614509][ T976] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 304.038324][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 304.404390][ T9183] : entered promiscuous mode [ 304.519087][ T976] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 304.528459][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.539511][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.549316][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 304.560605][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 304.623340][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.624198][ T30] audit: type=1400 audit(1761404864.985:926): avc: denied { create } for pid=9190 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.659084][ T30] audit: type=1400 audit(1761404865.025:927): avc: denied { bind } for pid=9190 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.677108][ T976] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.678829][ T30] audit: type=1400 audit(1761404865.025:928): avc: denied { listen } for pid=9190 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 304.742223][ T9194] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 304.749447][ T9194] /dev/nullb0: Can't open blockdev [ 304.789324][ T5823] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 304.899096][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.956001][ T976] usb 1-1: config 0 descriptor?? [ 305.007356][ T9159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 305.233094][ T976] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 305.448307][ T30] audit: type=1400 audit(1761404865.812:929): avc: denied { read write } for pid=9157 comm="syz.0.682" name="lp0" dev="devtmpfs" ino=3005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 305.450063][ C0] usblp0: nonzero read bulk status received: -71 [ 305.482320][ T9159] usblp0: error -71 reading from printer [ 305.492813][ C0] usblp0: nonzero read bulk status received: -71 [ 305.982497][ T30] audit: type=1400 audit(1761404865.812:930): avc: denied { open } for pid=9157 comm="syz.0.682" path="/dev/usb/lp0" dev="devtmpfs" ino=3005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 306.228175][ T5937] usb 1-1: USB disconnect, device number 10 [ 306.242053][ T5937] usblp0: removed [ 306.254662][ T976] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 306.414787][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 306.460562][ T976] usb 2-1: config 228 has an invalid interface number: 80 but max is 0 [ 306.520046][ T976] usb 2-1: config 228 has no interface number 0 [ 306.530154][ T976] usb 2-1: config 228 interface 80 altsetting 16 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 306.542614][ T976] usb 2-1: config 228 interface 80 has no altsetting 0 [ 306.556350][ T976] usb 2-1: New USB device found, idVendor=2f26, idProduct=e263, bcdDevice= a.eb [ 306.575266][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.581185][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.627006][ T5871] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 306.644418][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.652979][ T5871] usb 3-1: Product: syz [ 306.708737][ T5871] usb 3-1: Manufacturer: syz [ 306.750198][ T976] usb 2-1: Product: syz [ 306.760849][ T976] usb 2-1: Manufacturer: syz [ 306.824285][ T976] usb 2-1: SerialNumber: syz [ 306.836939][ T5871] usb 3-1: SerialNumber: syz [ 306.864106][ T5871] usb 3-1: config 0 descriptor?? [ 306.913232][ T5871] usb 3-1: ucan: probing device on interface #0 [ 307.042323][ T5871] usb 3-1: ucan: invalid EP count (0) [ 307.049038][ T5871] usb 3-1: ucan: probe failed; try to update the device firmware [ 307.164241][ T9224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.567066][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 307.960367][ T5871] usb 3-1: USB disconnect, device number 11 [ 308.775837][ T976] rndis_host 2-1:228.80: invalid descriptor buffer length [ 308.803660][ T976] usb 2-1: bad CDC descriptors [ 308.854516][ T5823] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 308.863853][ T5823] Bluetooth: hci4: Injecting HCI hardware error event [ 308.871977][ T51] Bluetooth: hci4: hardware error 0x00 [ 308.915494][ T976] usb 2-1: USB disconnect, device number 21 [ 310.081112][ T9259] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.294720][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 310.565150][ T30] audit: type=1400 audit(1761404870.762:931): avc: denied { bind } for pid=9263 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.644906][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 310.651963][ T976] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 310.664395][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.695797][ T9268] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 310.706359][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.708'. [ 310.877683][ T976] usb 1-1: config 0 descriptor?? [ 310.934608][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 311.101679][ T30] audit: type=1400 audit(1761404871.462:932): avc: denied { append } for pid=9274 comm="syz.2.711" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 311.764020][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 312.270770][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.366731][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 312.372109][ T9278] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 312.373889][ T976] usb 1-1: media controller created [ 312.449242][ T30] audit: type=1400 audit(1761404872.812:933): avc: denied { cmd } for pid=9282 comm="syz.2.714" path="socket:[21823]" dev="sockfs" ino=21823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 312.467352][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.555414][ T9287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.713'. [ 312.712932][ T976] az6027: usb out operation failed. (-71) [ 312.733620][ T976] az6027: usb out operation failed. (-71) [ 312.753059][ T976] stb0899_attach: Driver disabled by Kconfig [ 312.829352][ T976] az6027: no front-end attached [ 312.829352][ T976] [ 312.876983][ T976] az6027: usb out operation failed. (-71) [ 312.895566][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 312.921359][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 313.066922][ T9295] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 313.074843][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 313.350760][ T976] dvb-usb: schedule remote query interval to 400 msecs. [ 313.398639][ T976] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 313.577045][ T976] usb 1-1: USB disconnect, device number 11 [ 313.690446][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 313.714444][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 313.815194][ T9309] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.821762][ T30] audit: type=1400 audit(1761404874.182:934): avc: denied { write } for pid=9308 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 313.822661][ T976] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 313.968732][ T30] audit: type=1400 audit(1761404874.292:935): avc: denied { bind } for pid=9305 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.035472][ T30] audit: type=1400 audit(1761404874.292:936): avc: denied { node_bind } for pid=9305 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 314.123833][ T30] audit: type=1400 audit(1761404874.482:937): avc: denied { ioctl } for pid=9316 comm="syz.2.723" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21414 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 314.501283][ T3626] Bluetooth: hci5: Frame reassembly failed (-84) [ 314.511368][ T9331] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 314.885045][ T976] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 315.158114][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 315.245170][ T976] usb 4-1: config 0 has no interfaces? [ 315.251586][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.266124][ T30] audit: type=1400 audit(1761404875.622:938): avc: denied { create } for pid=9339 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 315.284378][ T976] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.315002][ T976] usb 4-1: Manufacturer: syz [ 315.325238][ T9340] binder: 9339:9340 ioctl c00c620f 200000000080 returned -22 [ 315.339949][ T976] usb 4-1: config 0 descriptor?? [ 315.364370][ T30] audit: type=1400 audit(1761404875.692:939): avc: denied { append } for pid=9339 comm="syz.1.727" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 315.589537][ T9323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 316.207541][ T9350] serio: Serial port ptm1 [ 316.544477][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 316.699753][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.875980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.254203][ T976] usb 4-1: USB disconnect, device number 25 [ 318.320341][ T9362] SQUASHFS error: Failed to read block 0x0: -5 [ 318.327148][ T9362] unable to read squashfs_super_block [ 319.454684][ T9358] tc_dump_action: action bad kind [ 319.646576][ T9389] xt_ipcomp: unknown flags 1D [ 319.660772][ T30] audit: type=1400 audit(1761404880.022:940): avc: denied { getopt } for pid=9381 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.990740][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 320.209861][ T30] audit: type=1326 audit(1761404880.492:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.487955][ T30] audit: type=1326 audit(1761404880.502:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.545802][ T30] audit: type=1326 audit(1761404880.502:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.575829][ T30] audit: type=1326 audit(1761404880.502:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.604178][ T30] audit: type=1326 audit(1761404880.502:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.649751][ T30] audit: type=1326 audit(1761404880.502:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.773906][ T30] audit: type=1326 audit(1761404880.502:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.817394][ T30] audit: type=1326 audit(1761404880.502:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 320.938313][ T30] audit: type=1326 audit(1761404880.502:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.4.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f159b58efc9 code=0x7ffc0000 [ 321.418656][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 322.070211][ T5934] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 322.355920][ T5934] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 322.364626][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.374076][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.385756][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.441187][ T9436] FAULT_INJECTION: forcing a failure. [ 322.441187][ T9436] name failslab, interval 1, probability 0, space 0, times 0 [ 322.453953][ T9436] CPU: 0 UID: 0 PID: 9436 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(full) [ 322.453977][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.453988][ T9436] Call Trace: [ 322.453993][ T9436] [ 322.454000][ T9436] dump_stack_lvl+0x16c/0x1f0 [ 322.454030][ T9436] should_fail_ex+0x512/0x640 [ 322.454050][ T9436] ? fs_reclaim_acquire+0xae/0x150 [ 322.454072][ T9436] should_failslab+0xc2/0x120 [ 322.454093][ T9436] __kmalloc_noprof+0xdd/0x880 [ 322.454117][ T9436] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 322.454142][ T9436] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 322.454160][ T9436] tomoyo_realpath_from_path+0xc2/0x6e0 [ 322.454183][ T9436] ? tomoyo_profile+0x47/0x60 [ 322.454208][ T9436] tomoyo_path_number_perm+0x245/0x580 [ 322.454233][ T9436] ? tomoyo_path_number_perm+0x237/0x580 [ 322.454260][ T9436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 322.454289][ T9436] ? find_held_lock+0x2b/0x80 [ 322.454337][ T9436] ? find_held_lock+0x2b/0x80 [ 322.454357][ T9436] ? hook_file_ioctl_common+0x145/0x410 [ 322.454383][ T9436] ? __fget_files+0x20e/0x3c0 [ 322.454406][ T9436] security_file_ioctl+0x9b/0x240 [ 322.454426][ T9436] __x64_sys_ioctl+0xb7/0x210 [ 322.454453][ T9436] do_syscall_64+0xcd/0xfa0 [ 322.454480][ T9436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.454497][ T9436] RIP: 0033:0x7f7861f8efc9 [ 322.454511][ T9436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.454527][ T9436] RSP: 002b:00007f7862eb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.454544][ T9436] RAX: ffffffffffffffda RBX: 00007f78621e6180 RCX: 00007f7861f8efc9 [ 322.454555][ T9436] RDX: 0000200000000000 RSI: 0000000040088a01 RDI: 0000000000000007 [ 322.454565][ T9436] RBP: 00007f7862eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 322.454575][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.454584][ T9436] R13: 00007f78621e6218 R14: 00007f78621e6180 R15: 00007ffff958c1c8 [ 322.454609][ T9436] [ 322.552266][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.557313][ T9436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 322.562231][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.893636][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.910071][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.926126][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.945504][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.962202][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.046868][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.064406][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.072158][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.081069][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.119072][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.151873][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.170557][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.181841][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.192557][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.202971][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.230037][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.332091][ T5934] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 323.355566][ T5934] usb 4-1: can't read configurations, error -71 [ 323.641053][ T9457] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 323.649068][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.752'. [ 324.839957][ T9467] 9pnet_fd: Insufficient options for proto=fd [ 324.926146][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 325.966336][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 326.641360][ T9480] SQUASHFS error: Failed to read block 0x0: -5 [ 326.647971][ T9480] unable to read squashfs_super_block [ 326.780547][ T9483] tc_dump_action: action bad kind [ 326.954731][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 326.984978][ T30] audit: type=1400 audit(1761404887.312:975): avc: denied { unlink } for pid=9479 comm="syz.0.759" name="#11" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.111362][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.761'. [ 327.416197][ T9497] delete_channel: no stack [ 327.734082][ T9500] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 327.742162][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.763'. [ 327.754268][ T9500] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 328.106879][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 328.441123][ T9506] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 328.449103][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'. [ 328.463181][ T9506] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 328.976065][ T30] audit: type=1400 audit(1761404889.332:976): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 329.115325][ T30] audit: type=1400 audit(1761404889.482:977): avc: denied { create } for pid=9515 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.216616][ T55] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 329.233750][ T30] audit: type=1400 audit(1761404889.592:978): avc: denied { write } for pid=9515 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.694535][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 329.733732][ T55] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 329.746914][ T30] audit: type=1400 audit(1761404889.772:979): avc: denied { read } for pid=9513 comm="syz.1.769" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 329.773836][ T55] usb 4-1: config 0 has no interface number 0 [ 329.773938][ T30] audit: type=1400 audit(1761404889.782:980): avc: denied { open } for pid=9513 comm="syz.1.769" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 329.806400][ T55] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 329.815823][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.823823][ T55] usb 4-1: Product: syz [ 329.828416][ T55] usb 4-1: Manufacturer: syz [ 329.833329][ T55] usb 4-1: SerialNumber: syz [ 329.853642][ T55] usb 4-1: config 0 descriptor?? [ 329.861331][ T55] smsc95xx v2.0.0 [ 329.987721][ T9521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.993747][ T9521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.999759][ T9521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.182627][ T30] audit: type=1400 audit(1761404890.542:981): avc: denied { read } for pid=9528 comm="syz.1.773" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.277742][ T30] audit: type=1400 audit(1761404890.542:982): avc: denied { open } for pid=9528 comm="syz.1.773" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.302783][ T30] audit: type=1400 audit(1761404890.582:983): avc: denied { ioctl } for pid=9528 comm="syz.1.773" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.351327][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 330.430063][ T30] audit: type=1400 audit(1761404890.792:984): avc: denied { write } for pid=9528 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.508078][ T55] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 330.532854][ T55] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 330.588223][ T55] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 330.632791][ T55] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 330.758680][ T55] usb 4-1: USB disconnect, device number 28 [ 331.029618][ T9555] tmpfs: Bad value for 'mpol' [ 331.906984][ T976] libceph: connect (1)[c::]:6789 error -101 [ 331.926062][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 332.028445][ T9562] ceph: No mds server is up or the cluster is laggy [ 332.058686][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.059968][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 332.064747][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.070774][ T976] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 332.784544][ T976] usb 4-1: device descriptor read/64, error -71 [ 333.034454][ T976] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 333.174662][ T976] usb 4-1: device descriptor read/64, error -71 [ 333.254460][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 333.294887][ T976] usb usb4-port1: attempt power cycle [ 333.415957][ T55] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 333.428921][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 333.439922][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 333.452937][ T55] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 333.464447][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.472506][ T55] usb 1-1: Product: syz [ 333.477018][ T55] usb 1-1: Manufacturer: syz [ 333.481610][ T55] usb 1-1: SerialNumber: syz [ 333.495779][ T55] usb 1-1: config 0 descriptor?? [ 333.519515][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.783'. [ 333.595315][ T5936] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 333.644444][ T976] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 333.664894][ T976] usb 4-1: device descriptor read/8, error -71 [ 333.734841][ T5936] usb 5-1: device descriptor read/64, error -71 [ 333.819613][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.834730][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.916083][ T976] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 333.984432][ T5936] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.014989][ T976] usb 4-1: device descriptor read/8, error -71 [ 334.124799][ T976] usb usb4-port1: unable to enumerate USB device [ 334.134496][ T5936] usb 5-1: device descriptor read/64, error -71 [ 334.246658][ T5936] usb usb5-port1: attempt power cycle [ 334.586416][ T30] audit: type=1326 audit(1761404894.952:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 334.629786][ T5936] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 334.630026][ T30] audit: type=1326 audit(1761404894.952:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 334.680640][ T5936] usb 5-1: device descriptor read/8, error -71 [ 334.754061][ T30] audit: type=1326 audit(1761404894.952:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 334.780492][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.953982][ T5936] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 335.034584][ T5936] usb 5-1: device descriptor read/8, error -71 [ 335.064419][ T30] audit: type=1326 audit(1761404894.952:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.116348][ T30] audit: type=1326 audit(1761404894.952:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.156466][ T5936] usb usb5-port1: unable to enumerate USB device [ 335.185895][ T9601] overlayfs: failed to resolve './file0': -2 [ 335.216750][ T30] audit: type=1326 audit(1761404894.962:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.392076][ T30] audit: type=1326 audit(1761404894.962:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.415302][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.465102][ T30] audit: type=1326 audit(1761404894.962:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.584154][ T9605] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 335.657118][ T2995] Bluetooth: hci5: Frame reassembly failed (-84) [ 335.668090][ T30] audit: type=1326 audit(1761404894.962:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.694776][ T30] audit: type=1326 audit(1761404894.962:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb544d8efc9 code=0x7ffc0000 [ 335.784464][ T5936] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 335.862006][ T9612] tc_dump_action: action bad kind [ 335.994455][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 336.001735][ T5936] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 336.009901][ T5936] usb 3-1: config 0 has no interface number 0 [ 336.023150][ T5936] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.033118][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.368864][ T5936] usb 3-1: Product: syz [ 336.373059][ T5936] usb 3-1: Manufacturer: syz [ 336.379514][ T5936] usb 3-1: SerialNumber: syz [ 336.408432][ T5936] usb 3-1: config 0 descriptor?? [ 336.479449][ T5936] smsc95xx v2.0.0 [ 337.219897][ T5936] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 337.463472][ T5936] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 337.654668][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 337.738241][ T5936] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 337.774630][ T5936] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 337.820562][ T5936] usb 3-1: USB disconnect, device number 12 [ 338.711446][ T9634] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.792440][ T5936] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 338.943653][ T5907] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 338.964464][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 338.974417][ T5936] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 338.988070][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 339.075025][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.085735][ T5936] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.111674][ T5936] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.122748][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.136260][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.190697][ T5907] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 339.274826][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.284773][ T5907] usb 5-1: Product: syz [ 339.341335][ T5907] usb 5-1: Manufacturer: syz [ 339.347069][ T5907] usb 5-1: SerialNumber: syz [ 339.373421][ T5907] usb 5-1: config 0 descriptor?? [ 339.382389][ T5907] usb 5-1: ucan: probing device on interface #0 [ 339.389194][ T5907] usb 5-1: ucan: invalid EP count (0) [ 339.394649][ T5907] usb 5-1: ucan: probe failed; try to update the device firmware [ 339.408117][ T5936] usb 4-1: GET_CAPABILITIES returned 0 [ 339.414583][ T5936] usbtmc 4-1:16.0: can't read capabilities [ 339.588899][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 339.747359][ T5936] usb 5-1: USB disconnect, device number 24 [ 339.790392][ T9653] FAULT_INJECTION: forcing a failure. [ 339.790392][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.803980][ T9653] CPU: 0 UID: 0 PID: 9653 Comm: syz.2.802 Not tainted syzkaller #0 PREEMPT(full) [ 339.804003][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.804014][ T9653] Call Trace: [ 339.804020][ T9653] [ 339.804026][ T9653] dump_stack_lvl+0x16c/0x1f0 [ 339.804055][ T9653] should_fail_ex+0x512/0x640 [ 339.804079][ T9653] _copy_to_user+0x32/0xd0 [ 339.804102][ T9653] binder_ioctl+0x2694/0x73b0 [ 339.804136][ T9653] ? tomoyo_path_number_perm+0x18d/0x580 [ 339.804171][ T9653] ? __pfx_binder_ioctl+0x10/0x10 [ 339.804198][ T9653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 339.804222][ T9653] ? do_vfs_ioctl+0x128/0x14f0 [ 339.804246][ T9653] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 339.804269][ T9653] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 339.804296][ T9653] ? hook_file_ioctl_common+0x145/0x410 [ 339.804327][ T9653] ? selinux_file_ioctl+0x180/0x270 [ 339.804345][ T9653] ? selinux_file_ioctl+0xb4/0x270 [ 339.804362][ T9653] ? __pfx_binder_ioctl+0x10/0x10 [ 339.804386][ T9653] __x64_sys_ioctl+0x18e/0x210 [ 339.804411][ T9653] do_syscall_64+0xcd/0xfa0 [ 339.804439][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.804455][ T9653] RIP: 0033:0x7f470e78efc9 [ 339.804469][ T9653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.804483][ T9653] RSP: 002b:00007f470f608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.804500][ T9653] RAX: ffffffffffffffda RBX: 00007f470e9e5fa0 RCX: 00007f470e78efc9 [ 339.804511][ T9653] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 339.804520][ T9653] RBP: 00007f470f608090 R08: 0000000000000000 R09: 0000000000000000 [ 339.804530][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.804547][ T9653] R13: 00007f470e9e6038 R14: 00007f470e9e5fa0 R15: 00007ffcdd98ba48 [ 339.804573][ T9653] [ 339.992364][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.025149][ T9653] binder: 9652:9653 ioctl c0306201 2000000003c0 returned -14 [ 340.163755][ T9658] delete_channel: no stack [ 340.325320][ T5934] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 340.429365][ T9661] bridge_slave_0: default FDB implementation only supports local addresses [ 340.634761][ T5934] usb 2-1: device descriptor read/64, error -71 [ 340.973495][ T5934] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 341.124735][ T5934] usb 2-1: device descriptor read/64, error -71 [ 341.182692][ T9675] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.243681][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 341.253176][ T5934] usb usb2-port1: attempt power cycle [ 341.514482][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 341.514499][ T30] audit: type=1400 audit(1761404901.862:1033): avc: denied { write } for pid=9679 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 341.618863][ T5879] usb 4-1: USB disconnect, device number 33 [ 341.684885][ T5934] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 341.935790][ T5934] usb 2-1: device descriptor read/8, error -71 [ 342.174538][ T5934] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 342.349319][ T9691] tc_dump_action: action bad kind [ 342.476718][ T5934] usb 2-1: device descriptor read/8, error -71 [ 342.588344][ T5934] usb usb2-port1: unable to enumerate USB device [ 343.775390][ T9708] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 343.933411][ T9712] delete_channel: no stack [ 344.139693][ T9708] cramfs: wrong magic [ 344.231215][ T55] iguanair 1-1:0.0: failed to get version [ 344.247625][ T55] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 344.267564][ T55] usb 1-1: USB disconnect, device number 12 [ 344.513295][ T9720] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 345.164422][ T55] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 345.325103][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 345.331599][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 345.343365][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 345.353518][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.363541][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.376683][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.385843][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.484466][ T30] audit: type=1400 audit(1761404905.842:1034): avc: denied { write } for pid=9740 comm="syz.0.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.535337][ T5907] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 345.696707][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 345.702359][ T55] usbtmc 5-1:16.0: can't read capabilities [ 346.355836][ T5907] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 346.394849][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.415898][ T5907] usb 4-1: config 0 descriptor?? [ 346.428936][ T5907] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 346.628357][ T5936] usb 4-1: USB disconnect, device number 34 [ 346.779754][ T9756] delete_channel: no stack [ 347.190659][ T9761] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 347.950037][ T5907] usb 5-1: USB disconnect, device number 25 [ 348.134511][ T5936] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 349.234491][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 350.013414][ T30] audit: type=1400 audit(1761404910.342:1035): avc: denied { read } for pid=9776 comm="syz.4.837" dev="sockfs" ino=22523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.043731][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.053724][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.066141][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.184869][ T5936] usb 2-1: config 0 descriptor?? [ 350.245018][ T9787] netlink: 'syz.3.838': attribute type 21 has an invalid length. [ 350.252813][ T9787] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.262318][ T9787] IPv6: Can't replace route, no match found [ 350.515621][ T5936] hub 2-1:0.0: bad descriptor, ignoring hub [ 350.533582][ T5936] hub 2-1:0.0: probe with driver hub failed with error -5 [ 350.624654][ T30] audit: type=1400 audit(1761404910.962:1036): avc: denied { write } for pid=9789 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 350.732955][ T5936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 350.878670][ T9794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.840'. [ 351.175901][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 351.246582][ T5936] usb 2-1: USB disconnect, device number 26 [ 351.355773][ T9807] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 352.078409][ T9810] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 352.086925][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.845'. [ 352.483494][ T9817] netlink: 9 bytes leftover after parsing attributes in process `syz.1.844'. [ 352.529720][ T9817] gretap0: entered promiscuous mode [ 352.545280][ T9818] netlink: 5 bytes leftover after parsing attributes in process `syz.1.844'. [ 352.570456][ T9818] 0ªî{X¹¦: renamed from gretap0 [ 352.585206][ T5815] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 352.667009][ T9818] 0ªî{X¹¦: left promiscuous mode [ 352.672040][ T9818] 0ªî{X¹¦: entered allmulticast mode [ 352.689290][ T9818] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 352.894489][ T5936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 353.023349][ T9829] Mount JFS Failure: -5 [ 353.027700][ T9829] jfs_mount failed w/return code = -5 [ 353.125626][ T5936] usb 3-1: device descriptor read/64, error -71 [ 353.235390][ T9830] netlink: 'syz.0.853': attribute type 21 has an invalid length. [ 353.243458][ T9830] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.251478][ T9830] IPv6: Can't replace route, no match found [ 353.449364][ T5936] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 353.746358][ T5936] usb 3-1: device descriptor read/64, error -71 [ 353.824276][ T9838] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 353.832606][ T9838] cramfs: wrong magic [ 353.846406][ T976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 353.864726][ T5936] usb usb3-port1: attempt power cycle [ 354.093244][ T9842] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 354.112793][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 354.123210][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.200534][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.211719][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.385153][ T976] usb 1-1: config 0 descriptor?? [ 354.390427][ T5936] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 354.565074][ T976] hub 1-1:0.0: bad descriptor, ignoring hub [ 354.584249][ T976] hub 1-1:0.0: probe with driver hub failed with error -5 [ 354.604952][ T5936] usb 3-1: device descriptor read/8, error -71 [ 354.612275][ T976] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 355.162827][ T30] audit: type=1400 audit(1761404915.332:1037): avc: denied { append } for pid=9850 comm="syz.1.858" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 356.741097][ T5936] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 356.955491][ T5936] usb 3-1: device not accepting address 16, error -71 [ 356.966318][ T5936] usb usb3-port1: unable to enumerate USB device [ 357.135807][ T9862] autofs: Bad value for 'fd' [ 357.842479][ T9863] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 357.850503][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.859'. [ 358.515884][ T5936] usb 1-1: USB disconnect, device number 13 [ 359.212607][ T9886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.864'. [ 361.904183][ T9898] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 362.238698][ T9904] SQUASHFS error: Failed to read block 0x0: -5 [ 362.239412][ T9905] tc_dump_action: action bad kind [ 362.389005][ T9904] unable to read squashfs_super_block [ 363.642348][ T9922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.871'. [ 363.776974][ T9931] MINIX-fs: unable to read superblock [ 363.834381][ T55] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 363.855269][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 363.855332][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'. [ 363.993970][ T9933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.872'. [ 364.084697][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 364.983834][ T55] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 364.983853][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.990616][ T55] usb 5-1: config 0 descriptor?? [ 365.014816][ T9930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.014862][ T9930] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 365.175515][ T9930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.175536][ T9930] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 365.211323][ T9930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.211340][ T9930] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 365.978457][ T55] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 365.979753][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.316881][ T55] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 366.316909][ T55] usb 5-1: media controller created [ 366.342927][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.403853][ T55] az6027: usb out operation failed. (-71) [ 366.404082][ T55] az6027: usb out operation failed. (-71) [ 366.404090][ T55] stb0899_attach: Driver disabled by Kconfig [ 366.404096][ T55] az6027: no front-end attached [ 366.404096][ T55] [ 366.404338][ T55] az6027: usb out operation failed. (-71) [ 366.404349][ T55] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 366.446559][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 366.447923][ T55] dvb-usb: schedule remote query interval to 400 msecs. [ 366.447941][ T55] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 366.449834][ T55] usb 5-1: USB disconnect, device number 26 [ 366.652593][ T55] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 366.794407][ T5934] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 366.917654][ T9944] delete_channel: no stack [ 366.954486][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 366.968510][ T5934] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 366.977200][ T5934] usb 1-1: config 0 has no interface number 0 [ 366.983632][ T5934] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.996864][ T5934] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 367.009814][ T5934] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 367.023549][ T5934] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 367.035849][ T5934] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 367.050753][ T5934] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.075793][ T5934] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 367.084903][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.093309][ T5934] usb 1-1: Product: syz [ 367.097651][ T5934] usb 1-1: Manufacturer: syz [ 367.102327][ T5934] usb 1-1: SerialNumber: syz [ 367.137851][ T5934] usb 1-1: config 0 descriptor?? [ 367.147349][ T9939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 367.158536][ T9939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 367.254904][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 367.410323][ T5934] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 367.426240][ T5934] etas_es58x 1-1:0.219: could not retrieve the product info string [ 367.484128][ T9948] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 367.525124][ T5934] usb 1-1: USB disconnect, device number 14 [ 367.532459][ T5934] etas_es58x 1-1:0.219: Disconnecting syz syz [ 367.674556][ T976] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 367.704916][ T9956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.880'. [ 368.167097][ T5936] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 368.173543][ T30] audit: type=1400 audit(1761404928.142:1038): avc: denied { name_bind } for pid=9953 comm="syz.4.882" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 368.244585][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 368.278684][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 368.290013][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 368.302180][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.312506][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.326742][ T5936] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 368.338578][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.348050][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.358557][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.369129][ T5936] usb 3-1: config 0 descriptor?? [ 368.513243][ T5936] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 368.538230][ T9961] comedi: No check for data length of config insn id 34491 is implemented [ 368.567087][ T9961] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 368.592101][ T9961] comedi: Assuming n=30607 is correct [ 368.667831][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 368.685242][ T976] usbtmc 4-1:16.0: can't read capabilities [ 368.723539][ T9965] comedi: No check for data length of config insn id 34491 is implemented [ 368.742535][ T9965] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 368.762067][ T9965] comedi: Assuming n=30607 is correct [ 369.196672][ T30] audit: type=1400 audit(1761404929.562:1039): avc: denied { connect } for pid=9962 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.548546][ T9977] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 369.558932][ T9977] cramfs: wrong magic [ 370.022448][ T9990] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 370.311319][ T9992] delete_channel: no stack [ 370.494965][ T55] usb 4-1: USB disconnect, device number 35 [ 370.595160][ T30] audit: type=1400 audit(1761404930.962:1040): avc: denied { sqpoll } for pid=9995 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 371.265406][ T5936] gp8psk: usb in 128 operation failed. [ 371.273495][ T5936] gp8psk: usb in 137 operation failed. [ 371.280517][ T5936] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 371.285603][ T9994] nbd0: detected capacity change from 0 to 549764202496 [ 371.291399][ T30] audit: type=1400 audit(1761404931.052:1041): avc: denied { getopt } for pid=9995 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 371.317832][ T5936] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 371.664955][ T51] block nbd0: Receive control failed (result -104) [ 372.222272][T10003] delete_channel: no stack [ 372.298017][ T55] usb 3-1: USB disconnect, device number 17 [ 372.577155][T10020] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 372.797817][T10019] delete_channel: no stack [ 373.158547][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 373.800091][T10029] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 373.808086][T10029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.905'. [ 374.151223][T10043] FAULT_INJECTION: forcing a failure. [ 374.151223][T10043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.164520][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.1.908 Not tainted syzkaller #0 PREEMPT(full) [ 374.164544][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.164553][T10043] Call Trace: [ 374.164559][T10043] [ 374.164566][T10043] dump_stack_lvl+0x16c/0x1f0 [ 374.164596][T10043] should_fail_ex+0x512/0x640 [ 374.164620][T10043] _copy_to_user+0x32/0xd0 [ 374.164643][T10043] simple_read_from_buffer+0xcb/0x170 [ 374.164677][T10043] proc_fail_nth_read+0x197/0x240 [ 374.164698][T10043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.164720][T10043] ? rw_verify_area+0xcf/0x6c0 [ 374.164744][T10043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.164763][T10043] vfs_read+0x1e4/0xcf0 [ 374.164783][T10043] ? __pfx___mutex_lock+0x10/0x10 [ 374.164800][T10043] ? __pfx_vfs_read+0x10/0x10 [ 374.164822][T10043] ? __fget_files+0x20e/0x3c0 [ 374.164847][T10043] ksys_read+0x12a/0x250 [ 374.164862][T10043] ? __pfx_ksys_read+0x10/0x10 [ 374.164886][T10043] do_syscall_64+0xcd/0xfa0 [ 374.164913][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.164930][T10043] RIP: 0033:0x7fb544d8d9dc [ 374.164944][T10043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.164960][T10043] RSP: 002b:00007fb545ca0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.164976][T10043] RAX: ffffffffffffffda RBX: 00007fb544fe6180 RCX: 00007fb544d8d9dc [ 374.164987][T10043] RDX: 000000000000000f RSI: 00007fb545ca00a0 RDI: 0000000000000006 [ 374.164997][T10043] RBP: 00007fb545ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 374.165007][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.165017][T10043] R13: 00007fb544fe6218 R14: 00007fb544fe6180 R15: 00007fffc4704c98 [ 374.165042][T10043] [ 374.513363][T10042] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 374.521138][T10042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 374.944464][ T55] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 375.016584][T10066] tmpfs: Unknown parameter 'gŽ2pq“oia_inode_havdlimit' [ 375.354515][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 375.365267][ T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 375.394412][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 375.404845][ T55] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.417107][ T55] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.430716][ T55] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.439844][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.697481][ T55] usb 3-1: GET_CAPABILITIES returned 0 [ 375.747193][ T55] usbtmc 3-1:16.0: can't read capabilities [ 375.883167][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 376.011438][T10076] pim6reg: entered allmulticast mode [ 376.079301][T10078] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 376.624725][T10078] /dev/nullb0: Can't open blockdev [ 376.665928][T10067] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x300 pfn:0x32fc1 [ 376.675116][T10067] memcg:ffff888032488000 [ 376.679360][T10067] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 376.687121][T10067] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 376.695816][T10067] raw: 0000000000000300 0000000000000000 00000001ffffffff ffff888032488000 [ 376.704415][T10067] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 376.714806][T10067] page_owner tracks the page as allocated [ 376.720748][T10067] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10067, tgid 10061 (syz.3.915), ts 376665905053, free_ts 376661697591 [ 376.741439][T10067] post_alloc_hook+0x1c0/0x230 [ 376.746241][T10067] get_page_from_freelist+0x10a3/0x3a30 [ 376.751831][T10067] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 376.757747][T10067] alloc_pages_mpol+0x1fb/0x550 [ 376.762644][T10067] folio_alloc_noprof+0x20/0x2d0 [ 376.767740][T10067] filemap_alloc_folio_noprof+0x3a1/0x470 [ 376.774747][T10075] pim6reg: left allmulticast mode [ 376.779168][T10067] page_cache_ra_order+0x56f/0xf20 [ 376.810606][ T30] audit: type=1400 audit(1761404937.142:1042): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 376.834372][T10067] filemap_fault+0x1583/0x29a0 [ 376.876547][T10067] __do_fault+0x10d/0x490 [ 376.883091][T10067] do_pte_missing+0xf4a/0x3ba0 [ 376.895480][T10067] __handle_mm_fault+0x1556/0x2aa0 [ 376.900754][ T30] audit: type=1400 audit(1761404937.142:1043): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.927617][T10067] handle_mm_fault+0x589/0xd10 [ 376.954441][T10067] __get_user_pages+0x54e/0x3530 [ 376.959747][T10067] __gup_longterm_locked+0xa92/0x17e0 [ 376.960178][ T30] audit: type=1400 audit(1761404937.142:1044): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.965208][T10067] gup_fast_fallback+0xee2/0x22a0 [ 377.023277][T10067] pin_user_pages_fast+0xa7/0xf0 [ 377.048297][ T30] audit: type=1400 audit(1761404937.142:1045): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.075143][ T30] audit: type=1400 audit(1761404937.142:1046): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 377.095950][T10067] page last free pid 10071 tgid 10068 stack trace: [ 377.095969][T10067] free_unref_folios+0xa31/0x1610 [ 377.095998][T10067] folios_put_refs+0x4be/0x750 [ 377.096012][T10067] truncate_inode_pages_range+0x311/0xe50 [ 377.096029][T10067] set_blocksize+0x2b8/0x500 [ 377.103217][ T30] audit: type=1400 audit(1761404937.142:1047): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 377.148835][ T30] audit: type=1400 audit(1761404937.142:1048): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 377.237086][T10067] blkdev_bszset+0x19b/0x240 [ 377.242395][T10067] blkdev_ioctl+0x44e/0x6d0 [ 377.266632][T10085] netlink: 'syz.0.920': attribute type 10 has an invalid length. [ 377.267126][T10067] __x64_sys_ioctl+0x18e/0x210 [ 377.274745][T10085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.920'. [ 377.290763][T10067] do_syscall_64+0xcd/0xfa0 [ 377.375320][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.645171][T10067] ------------[ cut here ]------------ [ 377.650643][T10067] kernel BUG at mm/filemap.c:870! [ 377.661403][T10067] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 377.667849][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 377.677126][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.687174][T10067] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 377.693159][T10067] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48 [ 377.712763][T10067] RSP: 0018:ffffc9001b836c90 EFLAGS: 00010246 [ 377.718831][T10067] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000ea5d000 [ 377.726806][T10067] RDX: 0000000000080000 RSI: ffffffff81f5b76a RDI: ffff88803011cd84 [ 377.734779][T10067] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 377.742730][T10067] R10: ffffffff9081f5d7 R11: 0000000000000001 R12: 0000000000000002 [ 377.750676][T10067] R13: ffffea0000cbf040 R14: 0000000000000000 R15: 1ffff92003706dbc [ 377.758621][T10067] FS: 00007ff02723f6c0(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 377.767523][T10067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.774090][T10067] CR2: 0000001b302dcff8 CR3: 000000007b205000 CR4: 00000000003526f0 [ 377.782050][T10067] Call Trace: [ 377.785315][T10067] [ 377.788225][T10067] ? __pfx___filemap_add_folio+0x10/0x10 [ 377.793841][T10067] filemap_add_folio+0x19a/0x610 [ 377.798757][T10067] ? __pfx_filemap_add_folio+0x10/0x10 [ 377.804205][T10067] ? css_rstat_updated+0x1c2/0x510 [ 377.809306][T10067] page_cache_ra_order+0x635/0xf20 [ 377.814571][T10067] filemap_fault+0x1583/0x29a0 [ 377.819309][T10067] ? __pfx_filemap_fault+0x10/0x10 [ 377.824404][T10067] ? __pfx_filemap_map_pages+0x10/0x10 [ 377.829836][T10067] __do_fault+0x10d/0x490 [ 377.834141][T10067] ? __pfx_filemap_map_pages+0x10/0x10 [ 377.839573][T10067] do_pte_missing+0xf4a/0x3ba0 [ 377.844325][T10067] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 377.850202][T10067] __handle_mm_fault+0x1556/0x2aa0 [ 377.855300][T10067] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.860745][T10067] ? folio_mark_accessed+0xc1/0xc00 [ 377.865917][T10067] ? __pfx_folio_mark_accessed+0x10/0x10 [ 377.871528][T10067] ? find_held_lock+0x2b/0x80 [ 377.876180][T10067] handle_mm_fault+0x589/0xd10 [ 377.880921][T10067] __get_user_pages+0x54e/0x3530 [ 377.885844][T10067] ? down_read_killable+0x220/0x4b0 [ 377.891013][T10067] ? __lock_acquire+0x622/0x1c90 [ 377.895925][T10067] ? __pfx___get_user_pages+0x10/0x10 [ 377.901279][T10067] __gup_longterm_locked+0xa92/0x17e0 [ 377.906627][T10067] ? __pfx___gup_longterm_locked+0x10/0x10 [ 377.912410][T10067] ? try_get_folio+0x255/0x730 [ 377.917149][T10067] ? find_held_lock+0x2b/0x80 [ 377.921814][T10067] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 377.927689][T10067] gup_fast_fallback+0xee2/0x22a0 [ 377.932692][T10067] ? __pfx_gup_fast_fallback+0x10/0x10 [ 377.938127][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.944177][T10067] pin_user_pages_fast+0xa7/0xf0 [ 377.949093][T10067] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 377.954698][T10067] iov_iter_extract_pages+0x3a2/0x1ed0 [ 377.960131][T10067] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 377.966012][T10067] ? find_held_lock+0x2b/0x80 [ 377.970662][T10067] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 377.976704][T10067] bio_iov_iter_get_pages+0x395/0x1300 [ 377.982134][T10067] ? find_held_lock+0x2b/0x80 [ 377.986784][T10067] ? bio_associate_blkg+0x137/0x2a0 [ 377.991956][T10067] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 377.997817][T10067] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 378.003161][T10067] ? submit_bio_noacct+0xbbb/0x1f60 [ 378.008341][T10067] blkdev_direct_IO+0x128f/0x2100 [ 378.013343][T10067] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 378.018691][T10067] ? filemap_check_errors+0xa9/0x160 [ 378.023957][T10067] blkdev_write_iter+0x703/0xe00 [ 378.028932][T10067] vfs_write+0x7d3/0x11d0 [ 378.033262][T10067] ? __pfx_blkdev_write_iter+0x10/0x10 [ 378.038702][T10067] ? __pfx_vfs_write+0x10/0x10 [ 378.043437][T10067] ? find_held_lock+0x2b/0x80 [ 378.048092][T10067] ksys_write+0x12a/0x250 [ 378.052389][T10067] ? __pfx_ksys_write+0x10/0x10 [ 378.057214][T10067] do_syscall_64+0xcd/0xfa0 [ 378.061692][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.067557][T10067] RIP: 0033:0x7ff02638efc9 [ 378.071957][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.091547][T10067] RSP: 002b:00007ff02723f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.099931][T10067] RAX: ffffffffffffffda RBX: 00007ff0265e6090 RCX: 00007ff02638efc9 [ 378.107874][T10067] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 378.115842][T10067] RBP: 00007ff026411f91 R08: 0000000000000000 R09: 0000000000000000 [ 378.123793][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.131734][T10067] R13: 00007ff0265e6128 R14: 00007ff0265e6090 R15: 00007fff91ded288 [ 378.139679][T10067] [ 378.142669][T10067] Modules linked in: [ 378.146933][T10067] ---[ end trace 0000000000000000 ]--- [ 378.175289][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.181641][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.189450][T10067] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 378.214617][ T5907] usb 3-1: USB disconnect, device number 18 [ 378.238933][T10067] Code: 53 c7 ff 48 c7 c6 a0 6e 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 f5 52 c7 ff 48 c7 c6 00 6f 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 de 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 d0 52 c7 ff 48 [ 378.259338][T10067] RSP: 0018:ffffc9001b836c90 EFLAGS: 00010246 [ 378.270167][T10067] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000ea5d000 [ 378.278262][T10067] RDX: 0000000000080000 RSI: ffffffff81f5b76a RDI: ffff88803011cd84 [ 378.286425][T10067] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 378.294856][T10067] R10: ffffffff9081f5d7 R11: 0000000000000001 R12: 0000000000000002 [ 378.303012][T10067] R13: ffffea0000cbf040 R14: 0000000000000000 R15: 1ffff92003706dbc [ 378.311182][T10067] FS: 00007ff02723f6c0(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 378.324405][T10067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.331033][T10067] CR2: 0000200000404030 CR3: 000000007b205000 CR4: 00000000003526f0 [ 378.339078][T10067] Kernel panic - not syncing: Fatal exception [ 378.345372][T10067] Kernel Offset: disabled [ 378.349669][T10067] Rebooting in 86400 seconds..