last executing test programs: 9.239390495s ago: executing program 1 (id=466): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000500)="dfa1434f7c88d9058558875d3c5b2d8bfcb162669be95907caaefae569dbdfd596ee5166c13ffbf8cf6ed8fdc62bdadeb4a4c7a4178136107341cdb989e91c482deee66260b9b301880c08445aeb9c3c5c1d0f60b8df6ccba1780293af8f34f15c56d1610f28aebbba8c57a5eca437309fce6ed67366d3edaaf4a62ec44ec8feb49df5c73f25a55b01c41665757a33fe732cabcff1319d6d3b92403898a277d1677670c01bc8f9fe1bae44c57caba0eb495cc2b96957f1a4335d212d30cfdf342c7fbd8355dc15b29207790bb82af66f05e4a72570c9891567ca6ea26ba6dd98ff880f6e1cd9d7", 0xe7}, {&(0x7f0000000680)="1fef362428895a754caecb8211ca3a50eb6d41bb1ed7a8424c07c3677c76f553d01ea40dc315d955801597c80de9d3f722e32bccc636548d68fc13cd44be7a5ee8f2a4a4ba76999b3d1ec899a148ee0edcc8162d395583af5500d2c3fb7cc7e6306122b94419597a6689d058b51a874ccf9d1cd99a2c64911761e181c32aadc9a8116382ded27778aa0d3339101feef0daf309bb284918e98e163360e3dc9bb48f7b6356e69dae0549c7505cf5b4b6654255ce0ab5ca95adb2f883217e9e007354aef098c66bb15bd235777887a29570c875026716686a700eaf27c4189b4ca9d9eb13056553c1", 0xe7}, {&(0x7f0000000780)="5510e0cfd9f4177a2a4ac222f9a7fc721e6d66b49238273a03c25dd9b3343f2909f3bc2b8e4058067ef8fe2f481121fe418be6c46cb48a192c6b51f5540c8935c6175a2faaaf1a401d1363ceae43dfa28a7ee4e59be78bb06ddc441abdfb28e71a93bfcfe0356034f8a8484f5dca9a83d42d42871b28acaa7d2f7f8ead18631b0016005d26dd72ba0c73a023ba9dcae211a95e3b720faa0bf8496497dec7f7b24b3b898dd9a8af12ed425874c1c8de6b4d2e31df8dc6ed", 0xb7}], 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x9, 0x2006e}, 0x2c) 8.945006672s ago: executing program 3 (id=467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x20000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 8.201538038s ago: executing program 1 (id=469): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x4, 0x2, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 7.83928671s ago: executing program 3 (id=470): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="67ed7aa412c6509d878e25"], 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x1, {0x2}}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 7.429091412s ago: executing program 4 (id=472): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x281) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)="dfa1434f7c88d9058558875d3c5b2d8bfcb162669be95907caaefae569dbdfd596ee5166c13ffbf8cf6ed8fdc62bdadeb4a4c7a4178136107341cdb989e91c482deee66260b9b301880c08445aeb9c3c5c1d0f60b8df6ccba1780293af8f34f15c56d1610f28aebbba8c57a5eca437309fce6ed67366d3edaaf4a62ec44ec8feb49df5c73f25a55b01c41665757a33fe732cabcff1319d6d3b92403898a277d1677670c01bc8f9fe1bae44c57caba0eb495cc2b96957f1a4335d212d30cfdf342c7fbd8355dc15b29207790bb82af66f05e4a72570c9891567ca6ea26ba6dd98ff880f6e1cd9d7", 0xe7}, {&(0x7f0000000680)="1fef362428895a754caecb8211ca3a50eb6d41bb1ed7a8424c07c3677c76f553d01ea40dc315d955801597c80de9d3f722e32bccc636548d68fc13cd44be7a5ee8f2a4a4ba76999b3d1ec899a148ee0edcc8162d395583af5500d2c3fb7cc7e6306122b94419597a6689d058b51a874ccf9d1cd99a2c64911761e181c32aadc9a8116382ded27778aa0d3339101feef0daf309bb284918e98e163360e3dc9bb48f7b6356e69dae0549c7505cf5b4b6654255ce0ab5ca95adb2f883217e9e007354aef098c66bb15bd235777887a29570c875026716686a700eaf27c4189b4ca9d9eb13056553c1", 0xe7}, {&(0x7f0000000780)="5510e0cfd9f4177a2a4ac222f9a7fc721e6d66b49238273a03c25dd9b3343f2909f3bc2b8e4058067ef8fe2f481121fe418be6c46cb48a192c6b51f5540c8935c6175a2faaaf1a401d1363ceae43dfa28a7ee4e59be78bb06ddc441abdfb28e71a93bfcfe0356034f8a8484f5dca9a83d42d42871b28acaa7d2f7f8ead18631b0016005d26dd72ba0c73a023ba9dcae211a95e3b720faa0bf8496497dec7f7b24b3b898dd9a8af12ed425874c1c8de6b4d2e31df8dc6ed", 0xb7}], 0x3) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x9, 0x2006e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) 6.672867078s ago: executing program 2 (id=474): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0xf0ffff, 0x0) 6.452032014s ago: executing program 4 (id=475): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) (fail_nth: 3) 6.353139889s ago: executing program 2 (id=476): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0x6, 0x2, 0xfffffffffffffffd, 0x2004c8, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2000, 0x4], 0x0, 0x200306}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.178707212s ago: executing program 1 (id=477): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0xfffffffd, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x5, 0xfffffffffffffffe, 0x80000000, 0xffff3b3e}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000003400), 0x200000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003480)={&(0x7f0000003440)='devlink_hwmsg\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003500)={0x2, &(0x7f00000034c0)=[{0x0, 0x41, 0x3}, {0x81, 0x10, 0x0, 0x2}]}) r4 = syz_io_uring_setup(0x232a, &(0x7f0000003540)={0x0, 0x9cbd, 0x1, 0x0, 0x1f5}, &(0x7f00000035c0), &(0x7f0000003600)) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) mmap(&(0x7f0000827000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r5, 0x53356000) read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000005680)='./file0\x00', &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000005740)='.log\x00', 0x400000, 0x64) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000005780)={0x0, 0x71}) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000057c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r13 = syz_open_dev$rtc(&(0x7f0000005800), 0x7f, 0x1) r14 = socket$packet(0x11, 0x3, 0x300) dup(r14) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="021a000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r15}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r15}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005840)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) r18 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000005880), 0x244100, 0x0) r19 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000059c0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)="4e68ea9d04cf765dc1874724b5150b2b55f5ebf7ca8ec98955e09d837ead70e4c1279a9b1bf211708115ab7828f2f7f0f169b7480d3507862aaef33cae61cc76bf0cca1ee1e8666b45822005d3e78f56f66fdadca7dcfb14be36e4e69ad5cf0920faf6fb44a1ad9de1077cbc9cb204daa977e68ace783ae776d79f6f36af2ffc226d16bee98b62d9d7915ec00545fef859bf47f7174fe06fb3dec87d7b9d27edcc9c23650c6979c9b9ebbec61c8f33734f", 0xb1}, {&(0x7f0000000180)="cddb6a048dbd795f671878f06ff7d0c9497a43f7db9dccb218ad30f8bdb6793658e65f1f48a9fc5e9b1e11f7bbc2fdf6a9b5b5f4d8f01931878f56870d687a7c0f6e3cce070de8429b3563cc50cc008b9880ecc98830c108012590b0dcb2b34aca3f7d7abb95f3ab5e1652366efeeab0ff34aa89e82209259bb2127763faf1c41d0406b876fa57e9fd41cfec6b163cff0e6d62bae27ee27952ae4beaa9ba01b2690aee9720ebe5017ca8cd81ed5666a759832e0b", 0xb4}, {&(0x7f0000000240)="b8de177158cb2ee6ee182d9c131073a14147ac2a00858e78646acc23e4d0b43261a4d835520c120850d5dec65811b8b8a0cdaf1f59e1572f7007358686f13e00dc4feccacb07ebea0954fe480ed9309b16a632624c6427a59b93b462f94201c9dbbac026ed", 0x65}, {&(0x7f00000002c0)="2eb098de491d9feb17f1ca35109d3f67fddcafdaccb72bcf32d04e7a8c24cd93df92f22528da18995373996f56aa44f8bdb005884d6380b0b4b28d6949e2495743d2df76e535ab955d9f41f8f8a421ff0eed5f0a28fee4c6b69b5fbb25f9593c806c63a4d0a7e372736d71322e158b1640109344dc020064ea4c0938bd8962a6e45f717d61c2ee5ec0eeed609a5294570582df68b01f680f9b1687d42377d94e3135230d84ec1f7de3664efc338066c902e02a9e1e29bcebca333f9d1b693dd6859972534d93c4f1e1c2704ef45fd631e9383c4a0bda32bd8b", 0xd9}], 0x4, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0, 0x4000000}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000c80)="c42022060c0fa302f2bea76621e9bed4d09d7e825f3c01a0748a48765ca09331397655ac45c32141acae4da3b5df735ae67bc16a6c7f985472be26cd580f2c9e9f01e5f7c7b11844fa0d55118eccbd16f350d0d094dbf2d1aba83039452ebfb7646ca1580a0414388057f398b5ca64", 0x6f}, {&(0x7f0000000d00)="615a2d6d1a38eb73efaabec867e733f064d060a282f28ef18c139e396f3a859e5c61", 0x22}, {&(0x7f0000000d40)="8292cc416e9366d6c05ba6eabe", 0xd}, {&(0x7f0000000d80)="7540383ec3a08720eec00729818914811a7101b08948ee615fc331dec1e3730d3c8e6262915af63718d1c96a90d040f55d844b1f18550e03b99e58b02aec80fbcf25271706e71b78caed665a81ea5d07dc19544d87f55bc18a91d79887c2fb0c1898e08f06dc3fdbb5f00f41cafa7182f5f33a22fae6abccb51d8a132e776bf8b5a72a68ae89a7082785ecfbd91fdbd736a1210abbd36798cef6f1f99179f7c7b16226", 0xa3}, {&(0x7f0000000e40)="66d2a2bb1e1e739900b9434221c630efed14cf380d6795b5fec0b50ce18d9baa32ed39166d726d3e94e526572b6d59d68973e271641c09cf2e7b83f2e3b63d23c319aa097a393a3fbaa926994a26f680308a0c7b9ae1e0607f7661344431a34c94caf85bcbd9d2298dbacc692a01d3faef92fd3fee4ddb96a4eb904fd9de606b309ab88c426317e71742a03c8806b2cee7adafd9466d668f4833f01f8d5f301694bc3e6a68cf235608c54112d91cd0c39b073442a80f63957ad03884abfdf2e53907e6c4", 0xc4}], 0x5, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001080)="97ab90a3c01a4642d67596e42608e9610330f189e964461b0fdc21a4568f41ced6b76374c0d96ad760d50acd901ae2198cd482780ed9357456d9a4bf459a9d59b2ccb989cd2fbe4d963a688f616a89554bfd33d3973ea089e3b3a3b079b3b518e0a3a7194c01f7bbdc66887565880974139ca80214d5f73c3668e4ce1071532b30a18ae838f3e3b1a30f09b8ad01b927db09152b5b8efc6e31388ea7cfec86e1d21c2f9cb8958b597f67b0035e7c44026be9f7a0a737898dc062488c07b999e978b3d37428f0da72cd4035216ec48d5f136ce7383d5ed920625bdae8a6f4392a2ea1d6f6e9cd32f42c", 0xe9}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="700a642f79ae7ea3e2661c6c8584919fe012e1c4f6f0ffe9ae5ee3f761969b9c5348f4ec27094490c20fd41282e6d04a02882dee11a351b138dcc92e8bc61aa7f3c557ee4caaf61aa61e49bac2b3fd3479c1408794d90b55d21dec30adba2c315bf33a2625ba62ca9209d53eebda04aa3e47771aaaa989caf2f6225444e1e1ecc7b3da33bb023df0b6d1ea0c55c97256a2f1800db03c2278968e548ebbea09bd07508ff1dd4913b19015d3ffeb972b99f82048246012bfa1063435761c12de4e0832114895df9fd92f7ae1f4ad16d19b8e63a2f48c62346d10bd0060e2981224add4fa480955f3ab4ac3aaa42bb2b38344e9531007295da89e5195c30cc646c906cfaee1a573f010ab243b2314a04f3011ef6bbf540c72c30f44f0be3b3994c5de7e6500b50cb10f0475a9839029b6548440c9b25d7279a16deb0716889e329db0d85b515f9350ebed181cca39a100ff3d63a3d0adf2f6b0853cb85e36957060f011d0a0afb424c99a7a9dd5808a3ad989b031fc9c21a2c9280adb6c7461eb37110d73ed753678ee3261ba3406ce7fa93aef6b68284235fcc4a8361b1ebe75e4c447d901a9db5f4c9179a31976c18a7ccc5624fb39473291df1fe48838549feeacfd31843c3ad3f928ec0d5300b4f8d637b89c305cc2c8a6ce301a74d9a89140c2d341af076cce9eb4bb30e3b6757b19d7e775d943176f0384b6e9f4dd7bb8baa1e6e91dc5134e354e5832676477802a640264d0f6e8ca493d27d3f353f8c4932a7698349d8e856788de8e11b1db70a926de593089e67fb07f362fee104229f7e78784eea9a0c8acee0427299c5abb4b53c25fa0f93400d3a119b15a13654e710aa2931c7f2c95d816a2a83ee2c7345072d2d5c691ae9ed2277e72fe6b1c268e227e9c5805e1b165d9fc1c5d5244abedbf3ffc8590c7e7b1cbfb9045fb2176736f92deb7121e5ddc1b0e63f8cf1bf3efa504cf6ddbb530316a7ea951d4a3f2e570067d49b59c12c49ab45dcf633cffde362317dc2ec505c5f04a415134e2a0bf8912eb57339ab27f78b93c6f3e4cff343243e1f2eb29e4642d094aebcebf32826a67d8522256c9001957b6d58b0915b1daea0b493085b5546984ce4f7a43c5895c764bfab096c2fac41f1b8009259453f6cd6b2596d1fb9624883e71aac3ff1e7d202763857d92ca732ada5ba0c3c66ee03b978c18064967fd84c733efe224c11a02a30513ea45abf8dd3dc5fb62955f607562e729f2f0a41c0760e477778c13ced8d28bd343bea247d00203272270abceec30faca7f821f50e013a4fb84e15cc51b915c18e0b2d5c9e7c6cae6fb21b3d613638ba908cfe318d36d998e3f7be30076a57e22ff7ecbac07532adc0f7c7c95a1021a6b57653acf7520d1314e7411ecaa108d12a7b43726aa7f4820b48cdaaff57a149a69967728afd55a2eb430c47c0b458acd4b7676ded122c0ad583bfed98f62119a55e8a81ffde0ee292bf8c1ae0b6f4783037ede4176d7cf047219fd42f9a6a8bc793d912ade94f5299b665727387c72926570af52546cf5e725ddd705f3fa6a7af48116805d1fb8d6597d6854ca585da0663b97bf30eb2bab700d89c37ed39aeedd3482d2cbd191bebff6bfd6f9aaff76af5a7883ab1812bfe720b3f228085c7153f33dd977be13465119583352dbda9a932b71237709b0ffb6d0351e25bc8a9019b454ee7a42d92f346d2b566a2fe2b73fe0e685c1124f61c38feeb6d53d372dc0d1a54a1e05bf46039d9ffa32f908fb1cbc3e37ebd37316dc3c3450e82fa155fa587f33b7f07b6a9627fc6d8dac8c32f845b2868ba8a47521a3d6c94b792040fe7ce0f48822f664a03dab0556d818aead19825d7ccd432b28092ee4c6e89d0d89c86f2983c80bb2a432a30f2e51da426ff8b54a664ed24228d0989a082b689c77ca9eb99c403ab419a8483edd461cc144f49a6d3632abc1ec0a58525f1389e256bba51b8e80656f71f96aff0f788330b1d7f8a1ee4cdab65213ec8c411e40d171457e01c11dc3d5bf069ed3198b8dda031d6768b3d25fd70cbffa93cadff3e0e3fa29f5eaabf9932377ea37c22bd075d5c4ac322c403d3cc494cda1b85259d5a7e3fdede6a68ac7eed75dc68860107aeb6319764c212de1b6ae6b8b2b2cc4877e3c0d1e4b90cff8f8390250e144488208cf2266f981d7778b4afe0fd019559502db5d86f32436e3f105a34c6fc99b20bec929e848b2ff06e11cd34c0871437013e8e8f87e4efe91a039f5d9f553fb44c1c0ef19a9cbe9bf3f7fe1988942ec43d9e6216420c17c8673ed4ca4e093f8b312eda86fdb5dee93f01882d7a1efe171a9ec13984e255bd6b9adb964c1a7978d6134fc1cf35e84d7886e3c63a6b735fc6e4202d736e476761ca93b2509b3b1a6422197d36eb604e9b3960b92ce8306825c1a9dc4876ca9b9557513c4ec287f591c7bba5ae1165669a0ad3b690a5d19aeaa58977803bdfefd32846bc74bb8c8082f2066a806f86672e7a1c985cfe5d2636d293c91355f677efb0fe2be6705c757b2f05f8428fb9085c82e57280c6cd461365dbe9da8d3b00ce4b6a0683fb2d19475e8611f984385f972dfbb7889a6f75bf2641347ee07f802a380160546106d602d521fd4ccf165dbced48add0896a9f59d41f3a70a24357fe63bec6e441674e4888b6dac0cc4379d2949b6971d01d3f730f3e13092d2c18ed09c1dd9b0b99d8e8b2c4a9065915184dfe8927f4c5fb52055d05d80e5fe10290a2c7d6ab480faa4f5238d682508279f46b5444350724f2870e0da3414a96b1d91fcd5e8d8ea454a77f688d4f7322d95c4adc773d7750ad515c29749db4685c8630aac4be28e8ecb86a2fa86c5de7450111f11ace68c8a3a4dae2228c5c9ce25788675e2105cc0d680d491f0639536743df6a2ad9d5ae5ab52dce64a30218eb4fdb3661a53dde2aa26e38feadde61074a0b25759bb9888797873d547c5220a73d1d0a644d99a20e2bf0bdb5f691ce8afb10e0c41320a97ec9d3a716b659be95e14d1246b225118b1c5c0a8ed28e19bc0cae54bbc889aab76c0e61160d043a728a3cd962561b92192c059db29e291d8a2aaa4e9254af42ab1767424c8df6423f1bdd5c187d248a477e145ea064ccebe50a9ebc507aca0c3d48b1688ad29a18f9a8c935a25d7492662151850b691023c5b3514d377d8b95cee378b8ed6fa5209e7437d11891b6f026c0a11de8aa7601e0e369f6e5203178afc0e8879306b3b5591fa4c451a609732cd5ce58291dfc9b282bc8318436617df1cf01e99195c0d4e8be951ba8fd51db402260d37c761868a2f61391c71776d8b8c03be5c93a8dbe343f90b79a31184a1b79adf1bdb3f2b94f2159a56752aacfd8e0bfb9d10bfd19ae4be93cc7346f9624adcfdbf9966f521b18c6cf931d8f7b24f0e835d51c0d8ed7f776a4e8b6f592f215e2105aaa4563d1a085e4520cc581513f7d4a1ca31db937c23c1a92f35b75457039649f0b9453ff1c647b3ca1e7c3e42b8d4ecf42a814ea58c965a0a1e20854b60f8c29572613fb9e3432b7826aa405655f749e38953910df853ed83317648e81a811cf4674bd7e9d0d5fc5de8d08f583c6792c389b889283bb40922d3fdbc7f209bf09f3992da9c473f8f968db0bfa3ad3719973a4be7447e926cf12eac61561378f3904c8aa21338b0c59204e0f3c9c4bd56120ee64fee390d84ffff0538112efd4421721d2cf4630ab860309cbfee66bc08e1a50e510c798a7d67d2ea827e639dec00a5f545d8da61406ace2ca4b527c347efbaf5a91e64f3874c0ebaa1d8339e6d3a37d14d8e32cfc30924f7d2a8943469cbcdaeca0eebaea21fbbec3bd41fd2340ae61a8a448a3003dc3acda4f2917401ae8ca3a354c2ebb3d51b362d030260c214d5c542188ad752e2a5c9974632725993d91989e2867a688d31483d01b031212c7462f63cb1e17938775b27bf5c3f49fb598a3c94be925ccfa68d48709e266ede924709331400bcb5c396d24796a8491a40c82c662fa16467e0b312d5bcfeedab9977a71d58510945ab8a9a98e2a24eede35572e590493ae001074cfddba348fe722df5858ea76087178a024699a82eb05dc7ae2640a82518f763691bd4e84de8ab57900d9092cee47eb107739dfcb7490df4802e2a95f01588822fcbc25e8aa87645240a588164feba9a46a496903216161b14469aab73d58dc5af6c88b010a8f762a1dfa94224cccbb97b47d0bce3f3db80fe48d757a34ad59c1880ef510d68a3ad5430c1bb1c8ccccd863c865fb283edc345ba82d863c23cd4ebf667371cfde916349241cc9b34e6475b34d651fb520708de1afe5b10aff0ccb22b55a5300240987c02dc725c7a4be4cf00458b1b9860e0ed95c96f0adad649e2323f583ebb7b808210a95b198b11210a68cc05e176fe2b849f7046d53abbf372b51afe97b638ba3e42ba8da723b1916089656d66d1b7fc56303a97ca3385d30922e28a4768423764f566d03fb2c8b7061752ed7f8833939c0e9ffc83fc90e0081beb918d03d4b007b8dff027f5f67b4bf3881970998fc5335e18dc806304f3ab75a2dbb2a433420f7751520ca3714db415299192b5b7496f1a6a26a9f6b74d37dee4bcbd89e82059d8aa18c271777a513f443640c85e4cccb92348082b476ea6badbf49ae9543a51778a46e287ba0e7d802bd003eaacb4252041e3eb5621211b7b070b5ce16c914d684a01374a7c94be449f5753bca6e4ed3eed904778b179e7d16107a0f15ea3f9776d1c51afa46e8f14a498eb17d50563088a12e84ad34f23bb99ed3156d8f5673580e97e4c96e3b2cff563f9f040754ffdd4175c4db0f901ffb0d34bf919c02f6b30f64d8ec9571aa0cb2ca488306f9e9396ca371f66db8cc315409819ffdbb0f560a9412e862b78eabe3a7e71584695970219d029fd43792796d118e3c7854bc206786498ee0739441ed18b0f6ce1695020766b0307da6888fe76793d0d4756ffac380a28a8bfc1d5db9b06cb7d694f846e9a2e4af4a645149dcfdfb60d8257243b8747c3c58d133d4b0d0bb1046981eb23fd1b704d6a7b06303b79fb4c4d93ce6265b0b60f9c68ec37ebfe37626ada25c0ed4c0de79515ae95adc0f769fa14aefa0a1d144638b56e31138a8db4a35d7c50d0df8d848f64f74cc196d52d0a98a4d52647ce922e84f90c943f395eb70f659091986e19480e087525663a89bd782c6f3192a8327ffa468acb6cabda0656f9da3bd124d7ac8959f809e72009b37f48efaf564940704358c9f7b79744837a213b35e4fd22f9e192e855f1b72c97895025a93d82ba5dccde94fda2d0e01db68559d1abe96bf7291cce6639ce47d0d7cf21602934ba0ef1bb767dffadd0a956f6fc30349a08b1daad66689fda7b85222e74958f24c63f9ace2e0e686f7c41e16f01bceb4cb67103b618fdb23ef414e0d33e2fa18cbd0280a497c3f03144bb68fef40b5c6704477b4da9f574e758bc43843d835fc38739d459e4d6761e4436b437f603366482ecf39163ccfddfc8061be7c23258999c020f90c850ab4289532ad988c07c69efadaa8c046976abcbab205967c8dc1502d88dae60c8e20c1f76fc65bdb7a944211a515c4e2abdca4fd37dc3152bea759267c02ef2e421bd266cbc0a5bd7fa2999642bdd46fa4d908cacb9fb0ab9827ae0d4c9d6f6e245322c7b945e6881f7ed7cbc5c7db2e0f7bc911088e77ca75f75418598f54873ee6a3de6636e9a587f8f0f47d107fb0f97fe88819eb6a03d5fbbc6819b98e7e5daf821111d244845bf", 0x1000}, {&(0x7f0000003180)="66319f46f22ff4c703e8e86554d953efb52287a40d1e205d64014aa933a867258b7e1b1101fd799bbb1536ff340426c51c56e9afc0f251a740b11f6bcd546a", 0x3f}], 0x4, &(0x7f0000003200)=[@rights={{0x10}}], 0x10, 0x40}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)="293e9e6e7d01484af13ee5dea2a503170840cb414bf7901d218c3e38778b06589ae17703a1d816a6d0e047b3d5c4aa1786225c20c04c073325f670dacbf07cd7898270d9b8716eac4fce93f4b96e05f75e0cef88ba4fc7be119130a3a58c581d5d38728634ac479c114a8da3289bc2efdc3efc5c1dcfefa4a80490fb2a2a6d7703e7491e8cd1c2e70963224dcb3722cbde90ff3094f8", 0x96}, {&(0x7f0000003300)="521df1a2c00052a09affb2a7db8203a2d9ec843b81b5a71484eed99c068faa6242ce85c87aea341efb2f4216d24d", 0x2e}, {&(0x7f0000003340)="b9944fbfd17d0c8488c17254eef72d856173ddedb659e101fc1abfd2a6cf92b7456b9a3db6017283bf88893c7773d6b547af909493049b7b81913308c6830b5cacaa8a7c6cf54c423b51ac7116291d2f6d866b5fa884bba003bb7390b3", 0x5d}], 0x3, &(0x7f00000058c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x38, 0x1, 0x1, [r9, r10, r11, r12, r13, r14, r15, r16, r17, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r18, r19]}}], 0xd0, 0x400008c}}], 0x4, 0x84) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r20 = socket(0x11, 0x80a, 0x0) bind$rxrpc(r20, 0x0, 0x0) accept4$llc(r20, 0x0, 0x0, 0x81000) 5.946828062s ago: executing program 4 (id=478): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080005806b563d1b"], 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) (async) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xbf, [0xd075, 0x4, 0x0, 0x80, 0x9, 0x9], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/191}, &(0x7f0000000300)=0x78) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30}, 0x30) 5.705214115s ago: executing program 1 (id=479): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x400000b4, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x301002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0xa0080, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0x7) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0x99, 0x55, &(0x7f0000000540)="a06ad876d56a0064d082778c393848e47aafb93e825bc86755a2eacec33fc952dd561507bc6b135f56dbf06a9d9ceee56670596ed92308d08c59eca23dcc6b6ba358116f41e4d9ab66a8203331c0763188fac61ebb4303d19d417546d16adca03aa17717ad74a5ef4f998c04575bb63a549646e527acde027974c3cd1cfd4b6b0f8e2d00"/153, &(0x7f0000000380)=""/85, 0x400000, 0x4000000, 0x32, 0x0, &(0x7f0000000180)="63f48972dae3f4a86c0349357f1a22fe48450f85daf04828cd1a18ffb8ab4359ecbcfb78ef46d047d95d8091652b56000000", &(0x7f0000000280), 0x0, 0x0, 0x1}, 0x50) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000380)={{0x2, 0x3, 0x8, 0x0, '\x00', 0x8}, 0x0, [0x1, 0x5, 0xdb, 0x5, 0x3, 0xfffffffffffffffa, 0x7, 0x3, 0x80000000, 0x8, 0xa3, 0xffffffffffffffff, 0x400, 0x0, 0x8, 0xfffffffffffffffd, 0x6, 0x7, 0x8, 0x100, 0x7, 0x2, 0x7, 0x0, 0x8, 0x0, 0x8, 0x1, 0x4, 0x7, 0x3, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x400, 0x80000000, 0x6, 0xffffffffffffffff, 0xd4a1, 0x5, 0xb, 0x7, 0x4, 0x800, 0x4, 0xd, 0x5, 0x0, 0x0, 0x7, 0x2, 0x400, 0x3f52c2cd, 0x1, 0x6, 0x5, 0x5, 0x58, 0x6, 0x9, 0x1, 0x3, 0x5, 0x2, 0x400, 0x5, 0x59, 0x8000000000000001, 0x9, 0x3, 0x6, 0xfffffffffffffff9, 0x9, 0x90, 0x6, 0x1, 0x1, 0x5, 0x2, 0xffffffff80000000, 0x800, 0x7, 0x36a969dd, 0x16d8000, 0x2, 0x5d, 0x7, 0x7, 0x81, 0x4b8, 0x3, 0x7f, 0x21c, 0x9, 0x4, 0x10001, 0x6, 0x0, 0x4, 0xfffffffffffffffc, 0x1, 0x7, 0xb, 0x0, 0x5, 0x100, 0x8b, 0x4, 0x8, 0x0, 0x0, 0x1, 0x23, 0x3, 0x0, 0x2, 0xffffffffffffffff, 0xa, 0x7, 0xfffffffffffffffa, 0x2, 0xcb5, 0x0, 0x1000, 0x1, 0x2000000000000000, 0x7]}) 5.632784966s ago: executing program 2 (id=481): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000140)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0}}], 0x1, 0x4) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x60, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {}, {0x0, 0xfffffffc}, 0x0, 0x40, 0x1, 0x207, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x5}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, 0x63, 0xffffffffffffff62, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 5.527705349s ago: executing program 0 (id=482): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0xfffe, 0x0, 0x3}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000040)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r0, 0x0) 5.460287343s ago: executing program 3 (id=483): syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x20000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001809eb9f8d6f31400018008000100e00000010800020000010000000000240002800c000280"], 0x80}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a240)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 4.892641395s ago: executing program 0 (id=484): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[], 0x104}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) linkat(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000080)='./bus\x00', 0x1400) 4.880806385s ago: executing program 4 (id=485): socket$netlink(0x10, 0x3, 0x0) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 4.637539716s ago: executing program 3 (id=486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000009340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x20, 0x44100}}], 0x1, 0xd880) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r8 = syz_open_dev$hidraw(&(0x7f0000000500), 0x7, 0x44000) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000640)=0x13) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000540)={0x9, r1, 'id0\x00'}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x300) statx(r11, &(0x7f0000001980)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f000001d600)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="98a6cda7d8565b4a445c52306970747b3a9e3a9f8786e20489824ca4a4ac304379fdce780d4a09b5c91000576146b70677d4caea80ae49722e9a62c2201b6119b17d61e9bfc875cad03e8b67113c44998f90a780f6b67da1d8762c9dd93a34ef135b8cc5208483cbda6f27b54bd241a2cd9823e8c7232f34d608cf3bce5de33db627367bc6268c1f7cc179231d7d7c9c870ef08c48a2746946faff84d16bd6d953bfb6", 0xa3}, {&(0x7f0000000480)="f9f30d6d1aba5f930dac3d049b5648aeb03159305eade568ec76aa3d516b58c05ed44c183d64ef5017a740d7", 0x2c}], 0x2, &(0x7f0000000640)=[@rights={{0x30, 0x1, 0x1, [r1, r8, r2, r9, r6, r2, r10, r4]}}, @rights={{0x24, 0x1, 0x1, [r1, r11, r7, r6, 0xffffffffffffffff]}}], 0x58, 0x40000}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000006c0)="97543259c9fc0da745ef42f92b7bdd5973119feb3d3bbc41f9542ce106f6ef12c07bd746544eaa721aedb5709e23e0b41f6d5a9016ade65c43dad9974e71deb44ab602f2030508f97ec946747fc1fd1b613f3f2766ea6e0a9ce061560635f2f4cc06636b52158ab7c739adb6f702b4db770961fde5a3e49914fbfba163377cb1dce74a83d753d40c1b3c30f4501cae8863b3d9eef3f17a31c7f2248520ef15a6951bd3d05ddb8afb9f9e88ad39bc94a0f0d2ec0c2b51e2692ce7940e6ed64c4c537a17f9c99001c87536dc1ed3e3e717b6b4cbc97ab559cf709df6818e656884a977d5e2b0446eafd38dd3dde9e515f87c8ea81e2abe1793324e0421789429ca50324077853c1aa84edd786f9a880ab0c3dda90cd80a47f5939e518ad1b8b639d3fbd2def659e6601bf2e04b781eefb5e9d511969371eafc3de35d84c0fc50a72474eb73d1f9a93345f5af25789129b4728f24a688df26fc359e1893f78906ff2575f0f27c007acfb9035463958f5272a0237f841c8e84e497482010e5b3d9b8ed211376ce2b5bc3c5fe0019224b7c8245bb34d1173fc17904b2a7b005338cb1792c0940bc8e72b4db5c9e2a7754cf2eb3c5d27971121deddd5d5da29e4498dd327aed4ecf2b050945e38019ae9ecb8bbf9c836a896ab19ef546400c548ca149a6444c2d006c9f6c90a3c1ea923c9e22ed451172a0c3ae93e5e14fadf7c73ccc8e8fa8a5e67a05780ae3a74d9812380861db9b67f6cd95f5b90534011142fbf7f7c065d3191cb7ec88dcd97dfb3b1b219096e68e066f850c0ba34e6d9a6700a9517b7e102bd6f750c4433de826861ab63ba8c234f68136074db743d77cacb5c008a5e9eea295876bec7898440fd5e27a10c5612d2e39427423e5e55b5985a113ee786ad4d2c6019fd24db8be33c567f92547b12924b5879e9e9f954e8a0000c73948ad38d7203840434a262772024feef1b853702b2b990f943db2a46069499c341730258efccae5278b1455a5532010e79377d3f2b4c419054184e4512b50a8720a205bbd5e77ccda263b9128021504fd7f323f1f7a9d675eb528e2daa8e2343dc0166e4d2bbe4d326d8f89698b672c9e7b9cd3f7c9e332609ef11623e55f8b8278d464f7f8950b2c962308e4f859b1acc28ae08873ec288a7e5d68e263bfc498657897d3751f5899de813853b05f7d38fa9aa8cf43692a9fc965b67c50506be97b1f4871112984e5c626dd5f875d799eb1b2c1f8e98b1b0a3e0369fdc60fb576e3a3578715995e6704315d79493a8ae8ff0ffd45bdc33e832fd178ba846d8c6d11ba8323cde9cc944ec40edfb4b572575dee3518fd1c6ede5cde1eb179027464e1abd071a5fa5212e9a14734b3dce9c0b39c4cb313e0612e479bf9087f0b0d32fa0a46fe4e778a17055aa630ceae9563a7db389a7ed87c7f82d640c4b5b48e3006c0efcd912e79c3fde0a036a9d696f9103a88816b189caa8f102dcd026999a78cca6bfefcd32915e0b8a0b5ef701e2805e35dcfa9978b516da27795864200f6f8f08b4c27df7dcb4b69f0a58086ac0aa9d8195b8209043ae98c78ff8f7ced0de0a08023d4bb730d4616fdc8b558b24685e316160707e38a1ac8371f5b7e543a0384cbdeafd613f7e3bbfea518e79f4c5d72aac70c21a501b672cbc47af38c0667103bd33c0d8882c018f7ffd53ba8343046b10459d53684d72541ba9574bd18404b91cba06908e677a0edf393f31239c60fda09b31a1e37f744facdd5c7ca612a876e13b5b3b2afe705cfbf70783055e3242efb86ec162aad54e5a73095e7de11e0b358d3be1bc6a5a9494314a3a5478477eb1a66a0c3b775a1410980460aae2935c9844b514027bfe5b680ee12512d1e5fbc1fc316d86a9ac50acb0597e3284960a0bc477671b18cfecb7aaa8a3f8029371005ea8e3d33f42e439887b4c36d2118264419cf3c72c972f50467bc1b68a9b3974a07061c12ff5d3ae32840da2b1ae9db0fab123379ad22ac30790d2b16c5e30d3ecbd76092554c9d6264dd8004c4f44620e765bb8483eec67b23f72b86a010df7e3c66ad51e7769547504024245378b7c22edebafdaab585c8180f136fca02437b56bb7447e9e19db4024969f6dd1e96efa21181226855bd440760afca7128cd2cd7f336e28160c0532cfce642106748fbe4538164eebb34995ca3ec44cd46f9b174419d77a5c45ac245890887f354e89115b9b3ac58bdd5f4e66906be4a76e9dc65ad7f87c3b8ee368cfb444c38645e0a974e2edec540f6d8799bfa8b0481fb1f94c3f5f388cdc3802e39bb46401805a13463513b139464ed6e1eaed4a7aa99915db67acc83f740f86e0063a73215b2941d301cfccb9f1229544669e00e78b985a63764a01c25b8327279042307502f341e48a3acfb45f11ee811e829dcdd4fc82aec9fa510fced55f811050b262133b43ab074f467e53f4aa00286a9076a8ebfc91168d5c5e1d5e0476c4916f496e0f35169b35802e786b69ba295c66887e6a3104813389534193737946716dbacfb0a395f76f7fa785f958ed5301688c16ba2d01bd7588a3076ca0e1abb2d905e129a1b7d27151793b8eeb557c3ce96cd5e9bac33f0aaf0538aabbbb1cb3146b88a9e90175c668d92785eafbc5128706660e4f7ad78db33aae7276d60790b6cb8d9cedeaf8a9b9dd110d724d48140bd2c336c42f71ac7dc549ee53379ccd809702ee5e39dde39b139782e0bbf2e8206ef3475abf59bb6c2d56b18c0376fb241af3401fc17e8f19ee79f63bdb2fa2d5b175519c35c7b97da3fdd79d2ac7f094202226998665e6817060054121379aebfbe6b3aba56c27351a2c9678b7a2da193e3793ad1fc8b16f872124eee72830efa01d5accbb2fb08a49f49eb931ba65abbaea7cd08cccc96265bb03d2f631a0827ba2a3871e7b05d6e90c0afd5b2f9848e40839a808b19810d0ff98ed92189862fd3da68558fc411f6b547bb381f4da0ec2cbc00ad2d565900ae97920c6b7b3c5913e56191c6f9ddc64ee5a55a95ff6190b862443779126797674344ca5aa5465266694e107c272f60f89355602d5b7495a5bd4925f6a47385b249844f3a37164ef24d93926224a1f29f70042a500b67e664faccc4d9d460f7b8ade4b3bbc374333ccfc9c4f10b70be6268ce9c79f83a4661b9897d14978f2c3f2d4b97808027b3dc947f201332e26058fe6f5575baacc37153886ad7538e1264cb1daef45b3c1a4d681f71369ca73bb0a484c8f2968a5f2a35f3f46e5ff74d96be32fd7b4583380a77d1b9a871dc9214b0a84e346e41295a6e65e9e5db1843adda60b25c5c01ef1dff4dabe960de63e2f040fa23387e1c0fc72cd109e7c7f97d6be25dcde5b627d3d0cd48c166eb8e19e6cf27738256e9551e1ec007bdf45626e3747a8bab8723fb5a335f0ed19c970d31515e868735a5640085cc38913fc218e649ad23fbf242f3416a7c15a194c6105e05351a6b7ecfd991ddabefc9b2346bfe1fc17b787ccd4749f27a3db5070adfe01b452dc72f2c0d0bad784e8da941ce398da21eb9b5677acdfc8198dc73e4ca2461c563598998e2c1781cfe4de31bd8860a2e84f7c19cf8e7fe7e058d16637d7c8c541ea79ceb4f4e64375a273b8fda136236c220f2a2b444f84f700639372b0f91de7c8588865a740f37181189e29369c3bcc8e32eff959429bbac582cbb0c1566dbe0fef0e46858d149370058517531deb37e31327ff2bc92decd118c674368fffe0428a064cfa0d89915578d473e571532417ba911148d8f0571652b8417d6b92774103ac8a795dbbf7990dfab909c0a73e70cb6097fcd5614914988f40ad31f68fbc4e81efef4ef97d36fa1435da36a70b157c491b43b23a4a5cd90001a1058b5c0dd0834308b806b8ca44c6e4e23aa75eb731a95955b1b2aa07eeda1d5249abafe924e5b25c3f2f2250b62262d4e739bfc7aa77ce57654db41a03f838cdcb05a39ebde2597c4abd8526684cf11622f471792dbd8ba18135643cae69df7a9b0db2efd66535b3ec20de60032796476a7125ea338641bd994226afa71e1e102bf387675a79f521dff000f3a6b908629c45b361c183e4c88ca07e6df3b09f5f9fad14908905db5e5b0003ec45f222575657a438860abdba159800bf1eaa1f8e7a54aa183a50380797774e08aa9d95f7888158376ff58c7f441c51f57f3c29bd1962dab6529c6d0ab9e5ffc58420560ec31ec4db1ecbbeecc3db0febffdba292dcadef2084119afd3fb2b629923b7e48e8be4614801048f64eb8f3d283c5aa09f8131fd20197f951b2754bcdf4106881ed2beb6f0d4429c8f400893bad2728432848e077a49810dc32243a4f3d5aa81ac9d2cd2b6b9256f893fe88d597063af2da85d0e47bee8e4689162e3ec0cb4d7854cce94e465e02057bf5aea5ae4fc9dc53c0b6be83c1b2593f5936f4d164967eb31443037119f87519c058e259ee90c127ee202d307678db1bf242e226e161d5730bdf13bab45a1ae35210777fb8a32b653e2ffcb0eba1febd9719194d47e0bbba36e2ecf823a98aa3523cd0d45b5eec5546814745a67b0993e79c578a868f47a84145fdee51b82628a6b7188bf866e5feb3514ee16bb5cc76652088b063c113e5f0b5a9b1955a73fd96d908e1d3a8d9db500f49c10a89a6b23641f1cd4cdf6ab13693eb329984ceb2fb89d44d44bdaa786cd829f0fd3368b27137834fd3015efa235e6cc0cfebc3068c71035f4efbbda615d0adbeaeab1eff4cb8ddac8be8759a293d028dc5444ff9231e0d18de2d971404b61e33f8aa4134ae5664c80114b1161398513652191796e3634afd1a22518456b2f0f5da8643329ef6c13f4af4c3c5a9674deabc27fa00702ef14bf66bfcd335fba588f078463bc1b2139f16001d9c8b28638302a93b40d436c0375b680caf319e3d56fd55898ab455d399dccdfb3218b842cb3a7ef7ba0255800829e62ee4cce1df03c9a013363c830d0abe4fbd4da2fbd749af25cb6487144f32dfe23b789008e009f9acf1eb3baf839687cb315b33976f3f5d89ddc3042bc13df6f9e8dd9bfcf677afa44ea4b2c11e04a34380b94d47f6e5bfea0733c25d276ef265ddfce953d27e6bcd1b85bcb6034ecd87e46bfc3a60bdf7a4e9d7f31f3c934695e088b9fb3eaa7726f6c534e1122d81600ab30f63b3626dc19e41bdd9f38bf0544cfa069b3ce9472e5b4bd132a095a524ec2451821e934cc32a31cb649dc77a4dcf49969dd33c68f2b1102ebeefcc997eb0b9cc7432039af5e43bea67605358e263de4339ac25355be88487d91824cdda2b10e2451f575f626f59e3a6afb22aadf5d95245e8c944058af9fcf47c6179ff693ab3e09c936dd4837556a402c5bdd9b4fb6d9fbcc2fb9dd3628da05187138b9c625b7d0113a3845044281c73def5742077dc7aed05ba671db55f5bb657bd3ea22a2399db483fc5dcf56bcb5d067b9942341a9c2962ab7c606c644b0d8b20164bceb2831577d8efbaa26ec597e6f7a763346b35fb6b47ae571019e4ec7962b147272c953dd83f45e9f24f193e56eb2be8779b2964b0a5c6740f794119c68d4f4e6058635c0cc50a34e7bcd491ff9152db0204ff30cd3e6bc266fa991119bfefe7f876a92ba880a8fbe42e3bd7cdea3092c56feab83aaddc3a92825f3f71781a087766947ffe4e5cf2cbf7c2c622471f5e81d3e33af9dd92a4fe40a4d5fab6fe739f30a020a4f14e060b28ee4072dd66d29f2669798d0ba41055276a4318c5cb763013d122bf7c26eeb7994dd7bcff103ade0088c3f", 0x1000}, {&(0x7f00000016c0)="f04a9fbb650ace0a649202f461784a211201adf63d03dec237f0c029d94f8530c198868d60b4628d6e53ff1e5c88866e0e770a37ded7d5b8eebd7a28d0f24cadaf641e26c1fb228f296cbda6548f515616b4beb22e3735b8ed314131cdd8c7dea9cb36d2de1aa6bd525bf821f149aad0a466ca0a01c2c5b4c37c42ae1b7d9e08ff19dc0136f8775cec73c65bd38622833b586273c57afa07891f3b543a2df776e30d53059593df4f39239234d15fc3c2de86c75db3fc5b5040f12a38db72ca998c40e98687b572343a003e28687ccf7d", 0xd0}, {&(0x7f00000005c0)="e6c404886381a2d13dc89a7a25e24ca18bad9e19e20af13686d0482ffe00acc97cd9c0b29a9b979bff6681b54b", 0x2d}, {&(0x7f00000017c0)="16295871a312d132fd01", 0xa}], 0x4, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [r7, r7, r12, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r5, r13}}}, @rights={{0x24, 0x1, 0x1, [r6, r10, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x30, 0x1, 0x1, [r9, r4, r7, r10, r2, r10, r0, r6]}}], 0xc0, 0x1}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002880)=[{&(0x7f00000029c0)="5a7fff7ca016e44d543f56201e293b34d6c4bc4227fc64a287070fa6f16d1a94dc6393c4fe13e07e2fde75d06a79c8529d2a695a03444bc5a5a7b00687bd6a52767760e27b01103667be", 0x4a}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000002a40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002ac0)="3f5d95097212a93510c3c935c1288f551aa360e08f1b085627732ead95fa6e73de877541b965fa95dee89807730794342c4d32d1f376fb6cdcc754b30a3b8ca5dbea3e8e25633481d3b6a83a3cc0102403a3b2cee950cdd6f92f2a21673d30e4845fd1ad01dc85834471f9b08cdae30e0e", 0x71}, {&(0x7f0000002b40)="bc50e4d9167f5bb489ad1e75c462d496ab5c0ab38fa4dede6109384c4fb6bd771c98490affe48d3fc9974f7b6b4fc8beca2ac641ae9556396a7665c83fb54c987decd5606a5024071484e6eb598c0566e27bb8310b94e019c91621a98e7560a7807c5f4713222b95a6b078d819363388190d85d5d3407b182e33811fa0456b48695fb84eaea72dd29677d4b7d1685d1bf7b76cf082ef6ddd91e80342e8eb9e51ccd6adb09c7c89635f25a6aafe847f15c075337782a53da203d85857705d5359f670b2b907b6e1e90f4c465cef6ad114932c3aa6e3d8e946da8b22b1c6a090a212104f84a0ae8c652d626f958c358c572ae0f730b2eba362e8", 0xf9}, {&(0x7f0000002c40)="313696533fbdb6822b83610b284a6357499fe0aeb94f8aecf771a851137ec691e8b8c768ec68e6c25169c8243132c5d3229b273bc1abeae34b994912123447f837d7b83f4cb38de4fdf27ceddeddeba6d7b08057fdef14df77a654caa00057f70f1f6e2ae1442f689aad8ede51e51ff90835a50e1cbcd2eea45adbf9650b17e7cce5fc0f03b27062501d9afa18abd39804ed9aab9f8a7de189e27df28fd89ed01b73ef642a9ea8da0a16ccd07156e71622661b7dc69c412679ee19b3ccb929ebf5c42926c6c7fdf1e1d41cb502e6545a68a7c5126068f77db680501459", 0xdd}, {&(0x7f0000002d40)="516415c31c699ed7612507d41f2ffc610e5baa03b5bc455f4769e44d8dbcb78a39ed161c7232371fa3e199385d57708f65a7774fb83a52946bc38bd413bd7f8fa57c71d324b5bc66b34c25b38ca024a17c2747edcc20eab979f9a405e54156c976d56a118b8e81e41376bbb1504218cc570985ba1cd137d256f7a309c8c2ecf9e2a3", 0x82}, {&(0x7f0000002e00)="e1c92b5fd35bdd77bf761c59e3b61a87ecf7be0d788bf0e789326fafc5adc1a666c6d1d33299a590b486823695a4c639c9f41ff7a65605717d74134e5086179875ebe732aee9927776c4f85c21dad1dfe3d0b36feb3095e793ff758c830e9bf925e35549a483bf6445924221294c42334c9cd0315dec4ae88405f4a0d3f02f7118b6a525e453e68c2eba9beaaf800d7a895921c7cf0398bc2271e44cadac76d9626ce2dbd1cc43", 0xa7}, {&(0x7f0000002ec0)="b60eb803d791a6aab9c4e1849c11b6afe1edb9006ec06af35a4a4cad9a21591a6ef9769005005e5c9f3f9d92ff3faf51ea410cca59fd1ba48a68055ed16855d7e3ff032c95f183be34d0b6d9a3af02204a02ee5cc477d2546356b703cc532c1a3698c351628c31", 0x67}, {&(0x7f0000002f40)="07246e5c3d515ed4214ca2836dae4928d69dbd22ac5c540bd7016e6c914a126b1c44acd9d8acbe5aefd5f17ac7aef112749335e25c234bc3cea78307ac54628e86788a93ce6dd417cb4bbb160f4c6a61fec9817b078c08aa31912a57cb1488af249de8cb7c2c5f281d384ff5a4aeecedcc5704f6bc1d09e23a7f8fb9effa4088a3d7e2be2bfed60fd913abac23646438939f75eea439944b672a73121a", 0x9d}], 0x7, &(0x7f0000003300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x34, 0x1, 0x1, [r1, r8, r0, 0xffffffffffffffff, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r11, r9, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x30, 0x1, 0x1, [r7, r4, r10, r12, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r6, r6, r4]}}], 0x168}}], 0x4, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r15 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_timedsend(r15, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r15, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000040)) 3.795267429s ago: executing program 1 (id=487): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000805d220bc4dc5d010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='cpuhp_enter\x00', r5}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) fallocate(r1, 0x0, 0x0, 0x1000f4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 3.717740183s ago: executing program 0 (id=488): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000805d220bc4dc5d010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='cpuhp_enter\x00', r5}, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) fallocate(r1, 0x0, 0x0, 0x1000f4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 3.541935141s ago: executing program 4 (id=489): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r5, 0x0, 0x0) 2.609234479s ago: executing program 3 (id=490): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r0) listen(0xffffffffffffffff, 0xfe000000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x88, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x9, 0x2, 0x0, "fbe237e7f30f000000df483200", 0x50424752}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x766, 0x2, 0x7}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1030) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8d, 0x800000002, 0x8, 0x0, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x1, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi5\x00', 0x606882, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r5, 0x0, 0x0) write$cgroup_pid(r5, 0x0, 0x0) 2.554511136s ago: executing program 1 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ddf34a939394348a7eb4507dc1cc014cb7a7d3143030c46e3b3286c5eb32ad6949ea4a6e24"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r1}, 0xc) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x8880) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) r8 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "5adbc66444a9f4b5e75f45911b1abe1f726a8ee34529c628b5c80d52c2f202edba0226046e61db60e2ba2b26e821f756f12f4681eb90c01157c7e7a184a3bfa7", 0x18}, 0x48, 0xfffffffffffffffb) keyctl$clear(0x7, r8) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/215, 0xd7}], 0x1}, 0xb}], 0x2, 0x0, 0x0) 2.518506973s ago: executing program 2 (id=492): r0 = open(&(0x7f0000000180)='./bus\x00', 0x16327e, 0x82) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$rxrpc(0x21, 0x2, 0xa) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000280)={0x10000, 0x108000}) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9) 2.436924046s ago: executing program 0 (id=493): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x20000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001809eb9f8d6f31400018008000100e00000010800020000010000000000240002800c000280"], 0x80}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$RTC_AIE_ON(r0, 0x7001) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x4, 0xe, 0x2, 0xfffffff7, 0xfe, "308d713e07c100dcddaf5de8345badfa5395e8", 0x0, 0x2}) 979.43558ms ago: executing program 0 (id=494): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x758cee6a}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r1}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d6f61657020686173683d636d61632d6165732d6e656f6e84f53fbcf3ae39b400"/78], 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@gettaction={0xb4, 0x32, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xccf}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe93}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x31fe}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xb4}}, 0x0) 935.056399ms ago: executing program 2 (id=495): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x400000b4, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x301002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0xa0080, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0x7) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0x99, 0x55, &(0x7f0000000540)="a06ad876d56a0064d082778c393848e47aafb93e825bc86755a2eacec33fc952dd561507bc6b135f56dbf06a9d9ceee56670596ed92308d08c59eca23dcc6b6ba358116f41e4d9ab66a8203331c0763188fac61ebb4303d19d417546d16adca03aa17717ad74a5ef4f998c04575bb63a549646e527acde027974c3cd1cfd4b6b0f8e2d00"/153, &(0x7f0000000380)=""/85, 0x400000, 0x4000000, 0x32, 0x0, &(0x7f0000000180)="63f48972dae3f4a86c0349357f1a22fe48450f85daf04828cd1a18ffb8ab4359ecbcfb78ef46d047d95d8091652b56000000", &(0x7f0000000280), 0x0, 0x0, 0x1}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000380)={{0x2, 0x3, 0x8, 0x0, '\x00', 0x8}, 0x0, [0x1, 0x5, 0xdb, 0x5, 0x3, 0xfffffffffffffffa, 0x7, 0x3, 0x80000000, 0x8, 0xa3, 0xffffffffffffffff, 0x400, 0x0, 0x8, 0xfffffffffffffffd, 0x6, 0x7, 0x8, 0x100, 0x7, 0x2, 0x7, 0x0, 0x8, 0x0, 0x8, 0x1, 0x4, 0x7, 0x3, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x400, 0x80000000, 0x6, 0xffffffffffffffff, 0xd4a1, 0x5, 0xb, 0x7, 0x4, 0x800, 0x4, 0xd, 0x5, 0x0, 0x0, 0x7, 0x2, 0x400, 0x3f52c2cd, 0x1, 0x6, 0x5, 0x5, 0x58, 0x6, 0x9, 0x1, 0x3, 0x5, 0x2, 0x400, 0x5, 0x59, 0x8000000000000001, 0x9, 0x3, 0x6, 0xfffffffffffffff9, 0x9, 0x90, 0x6, 0x1, 0x1, 0x5, 0x2, 0xffffffff80000000, 0x800, 0x7, 0x36a969dd, 0x16d8000, 0x2, 0x5d, 0x7, 0x7, 0x81, 0x4b8, 0x3, 0x7f, 0x21c, 0x9, 0x4, 0x10001, 0x6, 0x0, 0x4, 0xfffffffffffffffc, 0x1, 0x7, 0xb, 0x0, 0x5, 0x100, 0x8b, 0x4, 0x8, 0x0, 0x0, 0x1, 0x23, 0x3, 0x0, 0x2, 0xffffffffffffffff, 0xa, 0x7, 0xfffffffffffffffa, 0x2, 0xcb5, 0x0, 0x1000, 0x1, 0x2000000000000000, 0x7]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 934.1373ms ago: executing program 4 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)="3ee3a198ffdf0d7614b261fa795296da35a246096f7ed9946fad86a1af28d75952512e399353e611fe969ba08ddbb824643ab487c1b90e4ed9e26d3f4756", 0x3e, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000080)={0x100060, 0x4, 0x140000}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000003c830be3000000000018010000202070250000000000203e207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff51000000bda0fff10000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x17, 0x8e, 0x22, 0x40, 0x2040, 0xb990, 0x8d40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x88, 0x90, 0x0, [{{0x9, 0x4, 0xd2, 0x7, 0x0, 0xe, 0x89, 0xa8, 0x40}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0xff}, @code={0x1, 0x63, {"b95d090000b888000000ba000000000f30470f210166ba400066ed3e470f011d0e000000640f01c566b85d008ee0450f01ca66baf80cb8b8d6bb8aef66bafc0cb80080ffffefb9960b00000f3226440faeec"}}, @cpuid={0x2, 0x18, {0x4fcc, 0x4}}, @code={0x1, 0x52, {"400f013766baf80cb842cb1f8cef66bafc0cec66ba2100edc4c179ec5c544a400f013d03000000b8010000000f01d90f01cac403e5783958420f01d10fc75cbd00"}}, @cpuid={0x2, 0x18, {0xfffffff7, 0x58}}, @code={0x1, 0x61, {"3e440f350fc72ec4e159f696d2400000b9800000c00f3235002000000f30400f71f263b9120800000f3266baf80cb81b6f568eef66bafc0cb000ee66400fe7ae00000000b96a0b00000f32c441bc14d7"}}, @cpuid={0x2, 0x18, {0x100, 0x2fcf87cd}}, @code={0x1, 0x7a, {"400f013fc744240072000000c744240200000080c7442406000000000f011c246464460f79710366ba2000b8db6a7bddef0fd929430fc7590e660f388298fd286a66c4a1677c3366b836008ec0c744240006000000c744240202000000c7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x75, {"b9800000c00f3235002000000f300f01caf3410f1efa48b800000000008000000f23c80f21f835040050000f23f8c74424007c000000c7442402ddf13ccbff2c243667f30fc73264f3476db9800000c00f3235010000000f30460f2086b9960300000f32"}}, @code={0x1, 0x58, {"c463b17a5700bc440f01c8f3f3410f07b9800000c00f3235000400000f30b9660a00000f32660f145ef3c4c2098c2766bad10466b800a066ef0f011c9f66ba200066b8800066ef"}}, @code={0x1, 0x89, {"48b800500000000000000f23d80f21f835400000900f23f8266526260fc736c44165f9b7b800000066460f21c4c401796f470666b813000f00d866baf80cb8d075be8bef66bafc0c66b80d0066ef66baf80cb8cabac18fef66bafc0cec48b800000000008000000f23d00f21f8350000000a0f23f8f30f32"}}, @code={0x1, 0x48, {"400f794cee00420f01cf0f229b66ba200066b80b0066ef470f014b00f20f30c4c10016120f20d835080000000f22d8440f35c4027d79de"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0xb60f, 0x1}}, @code={0x1, 0x5b, {"3e410fab9f0000c0fec401a96a09f4b90d020000b8f47a81c5bad58875280f3066b81f000f00d8b983010000b80e000000ba000000000f300f01cb420f01c2b9ee0b00000f320f005ab5"}}, @cpuid={0x2, 0x18, {0x6, 0x2}}], 0x461}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000340)="676536420f78b900000080c4e265b8fd362e66470fc735e30000000f01c20f792500580000c483117b01d266b863008ed8420f3067660fc7330f79ca", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x8001) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.614049ms ago: executing program 0 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000710001002dbd70000000000007000000", @ANYRES32=r2, @ANYBLOB="1c0001"], 0x34}}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r3 = timerfd_create(0x0, 0x80000) timerfd_gettime(r3, &(0x7f0000002e00)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000080)={0x500, 0x280, 0x2000, 0x20, 0x9, 0x2, 0x20, 0x1, {0x3ff, 0x4}, {0xc7, 0xe6, 0x1}, {0x6e5, 0x3}, {0x2, 0x10, 0x1}, 0x2, 0x0, 0x9, 0x8, 0x0, 0x400, 0x6, 0x2, 0x5, 0xffffffff, 0xfffffffe, 0x80, 0x4, 0x2, 0x1}) 1.545163ms ago: executing program 3 (id=498): syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x20000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001809eb9f8d6f31400018008000100e00000010800020000010000000000240002800c000280"], 0x80}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a240)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 2 (id=499): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'das16m1\x00', [0x2f, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x1, 0x5, 0xffe, 0x1, 0x7, 0xc, 0x1006, 0x4, 0xffff, 0x100, 0xffffffa7, 0x40000005, 0x832, 0x5, 0x9, 0x10000, 0x800, 0xe2df, 0x2, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]}) kernel console output (not intermixed with test programs): read write } for pid=6309 comm="syz.3.103" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.336867][ T30] audit: type=1400 audit(1751776401.354:245): avc: denied { open } for pid=6309 comm="syz.3.103" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.426967][ T30] audit: type=1400 audit(1751776401.364:246): avc: denied { ioctl } for pid=6309 comm="syz.3.103" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.429471][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.451745][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.475616][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.042251][ T5898] usb 5-1: config 0 has no interfaces? [ 102.062446][ T5898] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 102.119141][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.141011][ T5898] usb 5-1: config 0 descriptor?? [ 102.150267][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.295113][ T43] usb 3-1: device descriptor read/64, error -71 [ 102.360640][ T30] audit: type=1400 audit(1751776402.524:247): avc: denied { mount } for pid=6318 comm="syz.1.105" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.406463][ T6330] overlayfs: missing 'lowerdir' [ 102.456389][ T6325] xt_hashlimit: size too large, truncated to 1048576 [ 102.532455][ T973] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.640257][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.731773][ T973] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.743524][ T973] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.754020][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.763727][ T973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 102.776524][ T973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 102.780661][ T43] usb 3-1: device descriptor read/64, error -71 [ 102.789832][ T973] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.803322][ T973] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.811582][ T973] usb 4-1: Product: syz [ 102.815826][ T973] usb 4-1: Manufacturer: syz [ 102.820506][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.835309][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 102.840649][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 102.850050][ T973] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 102.856417][ T973] cdc_wdm 4-1:1.0: Unknown control protocol [ 102.879967][ T30] audit: type=1400 audit(1751776403.044:248): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.911683][ T43] usb usb3-port1: attempt power cycle [ 103.267440][ T5906] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 103.293276][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.310264][ T30] audit: type=1326 audit(1751776403.474:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be258e929 code=0x7ffc0000 [ 103.333628][ T5906] usb 1-1: Product: syz [ 103.337922][ T5906] usb 1-1: Manufacturer: syz [ 103.342767][ T5906] usb 1-1: SerialNumber: syz [ 103.531592][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.551602][ T43] usb 3-1: device descriptor read/8, error -71 [ 103.551932][ T5906] usb 1-1: config 0 descriptor?? [ 103.827131][ T973] usb 5-1: USB disconnect, device number 5 [ 103.828214][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.847771][ T5906] usb 1-1: selecting invalid altsetting 1 [ 103.862108][ T5906] comedi comedi5: could not switch to alternate setting 1 [ 104.176599][ T5906] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 105.151084][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 105.159554][ T5831] Bluetooth: hci0: Injecting HCI hardware error event [ 105.198436][ T51] Bluetooth: hci0: hardware error 0x00 [ 106.162108][ T5952] usb 4-1: USB disconnect, device number 6 [ 106.171404][ T6347] netlink: 'syz.1.113': attribute type 15 has an invalid length. [ 106.637809][ T6340] usb 1-1: USB disconnect, device number 6 [ 106.673853][ T43] usb 3-1: device not accepting address 10, error -71 [ 106.737793][ T43] usb usb3-port1: unable to enumerate USB device [ 107.759058][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 107.998611][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 108.022896][ T6374] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 108.268799][ T6374] tipc: Enabled bearer , priority 10 [ 108.324472][ T6367] Bluetooth: MGMT ver 1.23 [ 108.510283][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 108.510299][ T30] audit: type=1400 audit(1751776408.634:313): avc: denied { read write } for pid=6377 comm="syz.2.119" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.581759][ T30] audit: type=1400 audit(1751776408.634:314): avc: denied { open } for pid=6377 comm="syz.2.119" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.758587][ T6383] netlink: 830 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.803094][ T30] audit: type=1400 audit(1751776408.634:315): avc: denied { ioctl } for pid=6377 comm="syz.2.119" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.350538][ T24] tipc: Node number set to 3884256512 [ 109.359999][ T6393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.499229][ T30] audit: type=1400 audit(1751776409.664:316): avc: denied { write } for pid=6384 comm="syz.2.122" path="socket:[10370]" dev="sockfs" ino=10370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.595705][ T6399] syz.0.126: attempt to access beyond end of device [ 109.595705][ T6399] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 109.665762][ T30] audit: type=1400 audit(1751776409.664:317): avc: denied { read } for pid=6384 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.730762][ T30] audit: type=1400 audit(1751776409.674:318): avc: denied { ioctl } for pid=6384 comm="syz.2.122" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.950711][ T6340] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.067701][ T5952] IPVS: starting estimator thread 0... [ 110.076172][ C1] blk_print_req_error: 24 callbacks suppressed [ 110.076188][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 110.097298][ T30] audit: type=1400 audit(1751776410.234:319): avc: denied { getopt } for pid=6410 comm="syz.4.127" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.117426][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.117446][ C1] buffer_io_error: 23 callbacks suppressed [ 110.117451][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 110.117495][ C1] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.117506][ C1] Buffer I/O error on dev loop8, logical block 1, async page read [ 110.117531][ C1] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.117542][ C1] Buffer I/O error on dev loop8, logical block 2, async page read [ 110.340983][ T6413] IPVS: using max 73 ests per chain, 175200 per kthread [ 110.412123][ T6411] loop8: detected capacity change from 6 to 0 [ 110.504034][ T6340] usb 4-1: device descriptor read/64, error -71 [ 110.698418][ T6421] netlink: 288 bytes leftover after parsing attributes in process `syz.0.129'. [ 110.800325][ T6340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.986838][ T6340] usb 4-1: device descriptor read/64, error -71 [ 111.131714][ T6340] usb usb4-port1: attempt power cycle [ 111.210995][ T6430] netlink: 830 bytes leftover after parsing attributes in process `syz.4.132'. [ 111.310404][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 111.531527][ T6340] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.561894][ T6340] usb 4-1: device descriptor read/8, error -71 [ 112.371594][ T6340] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.621872][ T6340] usb 4-1: device not accepting address 10, error -71 [ 112.622103][ T6340] usb usb4-port1: unable to enumerate USB device [ 113.047586][ T6340] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 113.472645][ T6340] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 113.500540][ T6340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.508650][ T6340] usb 4-1: Product: syz [ 113.514319][ T6340] usb 4-1: Manufacturer: syz [ 113.519504][ T6340] usb 4-1: SerialNumber: syz [ 113.533963][ T6340] usb 4-1: config 0 descriptor?? [ 113.553587][ T6340] usb 4-1: selecting invalid altsetting 1 [ 113.559396][ T6340] comedi comedi5: could not switch to alternate setting 1 [ 113.566668][ T6340] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 113.704399][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 113.716108][ T30] audit: type=1400 audit(1751776413.884:320): avc: denied { mounton } for pid=6453 comm="syz.4.138" path="/30/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.716188][ T6454] fuse: Bad value for 'group_id' [ 113.744567][ T6454] fuse: Bad value for 'group_id' [ 113.757058][ T30] audit: type=1400 audit(1751776413.924:321): avc: denied { append } for pid=6453 comm="syz.4.138" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.784462][ T5906] usb 4-1: USB disconnect, device number 11 [ 113.897495][ T6456] syz.1.139: attempt to access beyond end of device [ 113.897495][ T6456] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 115.710574][ T6474] loop8: detected capacity change from 0 to 6 [ 115.752501][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.775176][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.784434][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 115.816934][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.817946][ T6480] tipc: Enabling of bearer rejected, already enabled [ 115.826111][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 115.845648][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.854773][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 115.900231][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.909420][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 115.920423][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.925310][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.937101][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 116.094161][ T6480] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 116.129967][ T6480] tipc: Enabled bearer , priority 10 [ 116.146684][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.150606][ T30] audit: type=1400 audit(1751776416.314:322): avc: denied { create } for pid=6479 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.158398][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 116.234953][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.247893][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 116.258432][ T30] audit: type=1400 audit(1751776416.314:323): avc: denied { write } for pid=6479 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.283504][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 116.283533][ T5952] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.414031][ T6489] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.425222][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 116.527391][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.542213][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 116.603710][ T24] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 116.613746][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.688830][ T24] usb 2-1: Product: syz [ 116.730645][ T24] usb 2-1: Manufacturer: syz [ 116.769683][ T5952] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.778316][ T24] usb 2-1: SerialNumber: syz [ 116.783156][ T5952] usb 5-1: config 0 has no interface number 0 [ 116.789950][ T24] usb 2-1: config 0 descriptor?? [ 116.801067][ T6477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.819496][ T24] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 116.829825][ T5952] usb 5-1: config 0 interface 184 has no altsetting 0 [ 116.848660][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.860332][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.868506][ T5952] usb 5-1: Product: syz [ 116.873066][ T5952] usb 5-1: Manufacturer: syz [ 116.877659][ T5952] usb 5-1: SerialNumber: syz [ 116.903208][ T5952] usb 5-1: config 0 descriptor?? [ 116.915077][ T5952] smsc75xx v1.0.0 [ 116.970323][ T6340] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.025875][ T24] usb 2-1: USB disconnect, device number 5 [ 117.121549][ T6340] usb 4-1: Using ep0 maxpacket: 16 [ 117.132089][ T6340] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 117.141411][ T6340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.152028][ T6340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.163150][ T6340] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.172457][ T6340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.598979][ T6340] usb 4-1: Product: syz [ 117.603336][ T6340] usb 4-1: Manufacturer: syz [ 117.607941][ T6340] usb 4-1: SerialNumber: syz [ 117.848546][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 117.862312][ T6503] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 117.870182][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 118.071699][ T30] audit: type=1400 audit(1751776418.224:324): avc: denied { getopt } for pid=6498 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.388522][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 118.653712][ T30] audit: type=1400 audit(1751776418.824:325): avc: denied { write } for pid=6482 comm="syz.4.146" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.706877][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 118.735305][ T6340] usb 4-1: 0:2 : does not exist [ 118.742287][ T30] audit: type=1400 audit(1751776418.824:326): avc: denied { open } for pid=6482 comm="syz.4.146" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.766510][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.779497][ T6340] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 118.790281][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 118.822102][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 119.140893][ T6340] usb 4-1: USB disconnect, device number 12 [ 119.295754][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 119.353799][ T5952] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 119.387081][ T5952] usb 5-1: USB disconnect, device number 6 [ 119.605112][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 119.710352][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.763515][ T6526] xt_hashlimit: size too large, truncated to 1048576 [ 120.120584][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 120.183003][ T6528] netlink: 60 bytes leftover after parsing attributes in process `syz.4.159'. [ 120.192071][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.159'. [ 120.208891][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 120.293018][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 120.456556][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 120.668757][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 120.680140][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 120.694296][ T5891] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 120.727998][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.763141][ T5891] usb 1-1: Product: syz [ 121.767339][ T5891] usb 1-1: Manufacturer: syz [ 121.772809][ T5891] usb 1-1: SerialNumber: syz [ 121.783517][ T5891] usb 1-1: config 0 descriptor?? [ 121.788756][ T6523] xt_socket: unknown flags 0x58 [ 122.300986][ T5891] input input10: Device does not respond to id packet M [ 122.313396][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 122.663755][ T6519] netlink: 80 bytes leftover after parsing attributes in process `syz.0.156'. [ 122.700662][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 122.725829][ T5906] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.769042][ T5906] usb 4-1: config 0 has no interface number 0 [ 122.810543][ T5906] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.868040][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.005776][ T5906] usb 4-1: Product: syz [ 123.009966][ T5906] usb 4-1: Manufacturer: syz [ 123.036762][ T5906] usb 4-1: SerialNumber: syz [ 123.073781][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.079821][ T5891] input input10: Device does not respond to id packet P [ 123.082776][ T5906] usb 4-1: config 0 descriptor?? [ 123.098514][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.107195][ T5891] input input10: Device does not respond to id packet B [ 123.127299][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.135412][ T5891] input input10: Device does not respond to id packet N [ 123.155134][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.163066][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.197046][ T5906] usb 4-1: can't set config #0, error -71 [ 123.224384][ T5906] usb 4-1: USB disconnect, device number 13 [ 123.238628][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 123.284480][ T5891] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 124.147824][ T5891] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 124.649644][ T5891] usb 1-1: USB disconnect, device number 7 [ 125.048971][ T6572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.057863][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.169'. [ 125.091859][ T6575] xt_hashlimit: size too large, truncated to 1048576 [ 126.310304][ T6340] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.820278][ T5906] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 126.840357][ T5884] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.992584][ T6340] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.998019][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 127.002810][ T6340] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.045166][ T6340] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.059036][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.084971][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.118220][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 127.130839][ T5884] usb 3-1: config 4 has an invalid interface number: 210 but max is 0 [ 127.324256][ T6340] usb 5-1: Product: syz [ 127.328446][ T6340] usb 5-1: Manufacturer: syz [ 127.333170][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 127.333198][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 127.333219][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 127.370244][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 127.370440][ T5884] usb 3-1: config 4 has no interface number 0 [ 127.383354][ T5906] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 127.407098][ T5884] usb 3-1: config 4 interface 210 has no altsetting 0 [ 127.411298][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.424275][ T6340] usb 5-1: SerialNumber: syz [ 127.557884][ T5906] usb 4-1: Product: syz [ 127.563434][ T5906] usb 4-1: Manufacturer: syz [ 127.565885][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 127.568026][ T5906] usb 4-1: SerialNumber: syz [ 127.580338][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 127.595487][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.595578][ T5906] usb 4-1: config 0 descriptor?? [ 127.596143][ T6340] usb 5-1: config 0 descriptor?? [ 128.573518][ T6340] usb 5-1: selecting invalid altsetting 0 [ 128.617560][ T5884] usb 3-1: can't set config #4, error -71 [ 128.775973][ T5884] usb 3-1: USB disconnect, device number 11 [ 128.821680][ T5906] input input11: Device does not respond to id packet M [ 128.864965][ T6340] usb 5-1: USB disconnect, device number 7 [ 128.986621][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.033863][ T6590] netlink: 80 bytes leftover after parsing attributes in process `syz.3.172'. [ 129.221979][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.228246][ T5906] input input11: Device does not respond to id packet P [ 129.246101][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.252200][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.271578][ T5906] input input11: Device does not respond to id packet B [ 129.292542][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.298571][ T5906] input input11: Device does not respond to id packet N [ 129.329260][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.441014][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 129.505180][ T6621] overlayfs: missing 'lowerdir' [ 129.581964][ T6622] xt_hashlimit: size too large, truncated to 1048576 [ 129.928394][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 129.984805][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 130.013933][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 130.131945][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 130.143818][ T5906] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 130.159262][ T5906] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 130.270095][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 130.316940][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 130.373834][ T5906] usb 4-1: USB disconnect, device number 14 [ 130.384253][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 130.460530][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 130.596601][ T30] audit: type=1400 audit(1751776430.754:327): avc: denied { listen } for pid=6627 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.616393][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.616418][ T9] usb 2-1: Product: syz [ 130.616433][ T9] usb 2-1: Manufacturer: syz [ 130.616447][ T9] usb 2-1: SerialNumber: syz [ 130.631882][ T9] usb 2-1: config 0 descriptor?? [ 130.756465][ T6639] CIFS: Unable to determine destination address [ 131.111532][ T30] audit: type=1400 audit(1751776431.114:328): avc: denied { listen } for pid=6636 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.050069][ T6611] netlink: 80 bytes leftover after parsing attributes in process `syz.1.178'. [ 132.069846][ T9] input input12: Device does not respond to id packet M [ 132.120009][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.127065][ T9] input input12: Device does not respond to id packet P [ 132.177707][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.186655][ T9] input input12: Device does not respond to id packet B [ 132.194453][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.200881][ T9] input input12: Device does not respond to id packet N [ 132.226757][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.303774][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.355741][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.363190][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.369837][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.427378][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 132.449750][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 132.542640][ T9] usb 2-1: USB disconnect, device number 6 [ 132.874808][ T6658] syz.1.188 uses obsolete (PF_INET,SOCK_PACKET) [ 132.936478][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.188'. [ 133.762127][ T6677] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 133.773859][ T6677] CUSE: unknown device info "3Ü•,²¥Ì˜õ" [ 133.781105][ T6677] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 133.781105][ T6677] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 133.849436][ T6677] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 133.861682][ T6677] CUSE: DEVNAME unspecified [ 134.178217][ T30] audit: type=1326 audit(1751776434.284:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.2.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5885b8e929 code=0x0 [ 134.380320][ T30] audit: type=1400 audit(1751776434.414:330): avc: denied { connect } for pid=6668 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.608708][ T30] audit: type=1400 audit(1751776434.774:331): avc: denied { create } for pid=6681 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.645073][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 135.005003][ T30] audit: type=1400 audit(1751776434.834:332): avc: denied { setopt } for pid=6681 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.041132][ T6695] vlan2: entered allmulticast mode [ 135.055696][ T6695] veth1: entered allmulticast mode [ 135.120564][ T30] audit: type=1400 audit(1751776434.834:333): avc: denied { bind } for pid=6681 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.175620][ T30] audit: type=1400 audit(1751776434.844:334): avc: denied { write } for pid=6681 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.239888][ T30] audit: type=1400 audit(1751776435.234:335): avc: denied { write } for pid=6696 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.589580][ T6711] FAULT_INJECTION: forcing a failure. [ 135.589580][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.615056][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.1.202 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 135.615081][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.615090][ T6711] Call Trace: [ 135.615095][ T6711] [ 135.615101][ T6711] dump_stack_lvl+0x16c/0x1f0 [ 135.615130][ T6711] should_fail_ex+0x512/0x640 [ 135.615156][ T6711] _copy_from_user+0x2e/0xd0 [ 135.615181][ T6711] move_addr_to_kernel+0x65/0x170 [ 135.615201][ T6711] __sys_bind+0x11b/0x260 [ 135.615219][ T6711] ? __pfx___sys_bind+0x10/0x10 [ 135.615234][ T6711] ? __fget_files+0x20e/0x3c0 [ 135.615267][ T6711] ? __pfx_ksys_write+0x10/0x10 [ 135.615293][ T6711] __x64_sys_bind+0x72/0xb0 [ 135.615309][ T6711] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.615326][ T6711] do_syscall_64+0xcd/0x4c0 [ 135.615344][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.615355][ T6711] RIP: 0033:0x7fab7bf8e929 [ 135.615364][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.615374][ T6711] RSP: 002b:00007fab79df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 135.615385][ T6711] RAX: ffffffffffffffda RBX: 00007fab7c1b5fa0 RCX: 00007fab7bf8e929 [ 135.615392][ T6711] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 135.615402][ T6711] RBP: 00007fab79df6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.615409][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.615415][ T6711] R13: 0000000000000000 R14: 00007fab7c1b5fa0 R15: 00007ffe887e0328 [ 135.615428][ T6711] [ 135.618346][ T30] audit: type=1400 audit(1751776435.784:336): avc: denied { listen } for pid=6709 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.981328][ T30] audit: type=1400 audit(1751776436.144:337): avc: denied { bind } for pid=6713 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.994516][ T6717] tipc: Started in network mode [ 136.006196][ T6717] tipc: Node identity 5, cluster identity 4711 [ 136.014093][ T6717] tipc: Node number set to 5 [ 136.147876][ T6717] loop6: detected capacity change from 0 to 524287999 [ 136.825345][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.897290][ T6723] vlan2: entered allmulticast mode [ 136.902733][ T6723] veth1: entered allmulticast mode [ 136.923869][ T6723] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 137.009048][ T6725] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.168588][ T6735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.376437][ T30] audit: type=1400 audit(1751776437.544:338): avc: denied { create } for pid=6737 comm="syz.3.210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.492937][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.558954][ T6739] lo speed is unknown, defaulting to 1000 [ 137.566409][ T6739] lo speed is unknown, defaulting to 1000 [ 137.572958][ T6739] lo speed is unknown, defaulting to 1000 [ 137.654670][ T6739] infiniband syz2: set active [ 137.659408][ T6739] infiniband syz2: added lo [ 137.667767][ T5952] lo speed is unknown, defaulting to 1000 [ 137.674088][ T30] audit: type=1400 audit(1751776437.574:339): avc: denied { write } for pid=6737 comm="syz.3.210" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.704608][ T30] audit: type=1400 audit(1751776437.574:340): avc: denied { open } for pid=6737 comm="syz.3.210" path="/39/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.735600][ T9] usb 2-1: device descriptor read/64, error -71 [ 137.754722][ T6739] RDS/IB: syz2: added [ 137.758908][ T6739] smc: adding ib device syz2 with port count 1 [ 137.765214][ T6739] smc: ib device syz2 port 1 has pnetid [ 137.772500][ T6739] lo speed is unknown, defaulting to 1000 [ 137.860052][ T6739] lo speed is unknown, defaulting to 1000 [ 137.956713][ T6739] lo speed is unknown, defaulting to 1000 [ 138.041705][ T6739] lo speed is unknown, defaulting to 1000 [ 138.127114][ T6739] lo speed is unknown, defaulting to 1000 [ 138.209528][ T5906] lo speed is unknown, defaulting to 1000 [ 138.218223][ T30] audit: type=1400 audit(1751776437.724:341): avc: denied { create } for pid=6737 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.238275][ T30] audit: type=1400 audit(1751776437.724:342): avc: denied { write } for pid=6737 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.322757][ T30] audit: type=1400 audit(1751776438.474:343): avc: denied { unlink } for pid=5838 comm="syz-executor" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.345417][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.500567][ T9] usb 2-1: device descriptor read/64, error -71 [ 138.613449][ T9] usb usb2-port1: attempt power cycle [ 138.822960][ T6752] FAULT_INJECTION: forcing a failure. [ 138.822960][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 138.862768][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.2.215 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 138.862795][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.862805][ T6752] Call Trace: [ 138.862810][ T6752] [ 138.862817][ T6752] dump_stack_lvl+0x16c/0x1f0 [ 138.862848][ T6752] should_fail_ex+0x512/0x640 [ 138.862876][ T6752] should_failslab+0xc2/0x120 [ 138.862902][ T6752] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 138.862929][ T6752] ? sidtab_sid2str_get+0x17a/0x680 [ 138.862958][ T6752] kmemdup_noprof+0x29/0x60 [ 138.862982][ T6752] sidtab_sid2str_get+0x17a/0x680 [ 138.863011][ T6752] sidtab_entry_to_string+0x33/0x110 [ 138.863037][ T6752] security_sid_to_context_core+0x35c/0x640 [ 138.863065][ T6752] avc_audit_post_callback+0x1aa/0x8f0 [ 138.863093][ T6752] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 138.863128][ T6752] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.863153][ T6752] ? skb_put+0x138/0x1b0 [ 138.863172][ T6752] ? audit_log_n_string+0x253/0x540 [ 138.863198][ T6752] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.863224][ T6752] common_lsm_audit+0x24e/0x300 [ 138.863249][ T6752] ? __pfx_common_lsm_audit+0x10/0x10 [ 138.863275][ T6752] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.863299][ T6752] ? avc_update_node.isra.0+0x4c0/0xb60 [ 138.863319][ T6752] slow_avc_audit+0x186/0x210 [ 138.863337][ T6752] ? __pfx_slow_avc_audit+0x10/0x10 [ 138.863358][ T6752] ? avc_denied+0x14a/0x190 [ 138.863376][ T6752] ? avc_has_perm_noaudit+0x306/0x3b0 [ 138.863398][ T6752] avc_has_perm+0x18b/0x1c0 [ 138.863418][ T6752] ? __pfx_avc_has_perm+0x10/0x10 [ 138.863439][ T6752] ? __lock_acquire+0x622/0x1c90 [ 138.863462][ T6752] inode_has_perm+0x168/0x1d0 [ 138.863483][ T6752] file_has_perm+0x2e4/0x350 [ 138.863504][ T6752] ? __pfx_file_has_perm+0x10/0x10 [ 138.863534][ T6752] selinux_file_fcntl+0x10f/0x170 [ 138.863555][ T6752] security_file_fcntl+0x9b/0x240 [ 138.863584][ T6752] __x64_sys_fcntl+0x108/0x200 [ 138.863605][ T6752] do_syscall_64+0xcd/0x4c0 [ 138.863632][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.863650][ T6752] RIP: 0033:0x7f5885b8e929 [ 138.863664][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.863680][ T6752] RSP: 002b:00007f58869de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 138.863697][ T6752] RAX: ffffffffffffffda RBX: 00007f5885db5fa0 RCX: 00007f5885b8e929 [ 138.863709][ T6752] RDX: 00002000000004c0 RSI: 0000000000000024 RDI: 0000000000000003 [ 138.863719][ T6752] RBP: 00007f58869de090 R08: 0000000000000000 R09: 0000000000000000 [ 138.863730][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.863740][ T6752] R13: 0000000000000000 R14: 00007f5885db5fa0 R15: 00007ffe97298738 [ 138.863764][ T6752] [ 138.863828][ T30] audit: type=1400 audit(1751776438.994:344): avc: denied { lock } for pid=6751 comm="syz.2.215" path="socket:[12566]" dev="sockfs" ino=12566 scontext=root:sysadm_r:sysadm_t tsid=148 tclass=rawip_socket permissive=1 [ 139.168040][ T5952] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.270827][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.311867][ T6757] CIFS: Unable to determine destination address [ 139.370657][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 139.420441][ T9] usb 2-1: device descriptor read/8, error -71 [ 139.501327][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.511547][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.522586][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.565843][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.581377][ T30] audit: type=1400 audit(1751776439.704:345): avc: denied { setopt } for pid=6755 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.583514][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.629515][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.640327][ T5952] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.648315][ T5952] usb 1-1: Manufacturer: syz [ 139.661081][ T5952] usb 1-1: config 0 descriptor?? [ 139.750311][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.770979][ T9] usb 2-1: device descriptor read/8, error -71 [ 139.890728][ T9] usb usb2-port1: unable to enumerate USB device [ 140.933239][ T6771] CIFS: Unable to determine destination address [ 141.014720][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.412714][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.422962][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.435570][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.449253][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.481508][ T9] usb 4-1: Product: syz [ 141.485752][ T9] usb 4-1: Manufacturer: syz [ 141.492017][ T9] usb 4-1: SerialNumber: syz [ 141.527121][ T9] usb 4-1: config 0 descriptor?? [ 141.536655][ T9] usb 4-1: selecting invalid altsetting 0 [ 141.793289][ T6770] FAULT_INJECTION: forcing a failure. [ 141.793289][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 142.130401][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.3.220 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 142.130428][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.130438][ T6770] Call Trace: [ 142.130444][ T6770] [ 142.130451][ T6770] dump_stack_lvl+0x16c/0x1f0 [ 142.130482][ T6770] should_fail_ex+0x512/0x640 [ 142.130509][ T6770] should_failslab+0xc2/0x120 [ 142.130535][ T6770] __kmalloc_cache_noprof+0x6a/0x3e0 [ 142.130556][ T6770] ? snd_ctl_get_preferred_subdevice+0x16c/0x1f0 [ 142.130577][ T6770] ? snd_pcm_attach_substream+0x441/0xd60 [ 142.130603][ T6770] snd_pcm_attach_substream+0x441/0xd60 [ 142.130631][ T6770] snd_pcm_open_substream+0x8d/0x17f0 [ 142.130653][ T6770] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 142.130675][ T6770] ? rcu_is_watching+0x12/0xc0 [ 142.130703][ T6770] snd_pcm_open+0x29e/0x730 [ 142.130727][ T6770] ? __pfx_snd_pcm_open+0x10/0x10 [ 142.130750][ T6770] ? __pfx_default_wake_function+0x10/0x10 [ 142.130781][ T6770] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 142.130801][ T6770] snd_pcm_playback_open+0x86/0xe0 [ 142.130822][ T6770] snd_open+0x1fe/0x450 [ 142.130847][ T6770] ? __pfx_snd_open+0x10/0x10 [ 142.130871][ T6770] chrdev_open+0x234/0x6a0 [ 142.130899][ T6770] ? __pfx_chrdev_open+0x10/0x10 [ 142.130932][ T6770] do_dentry_open+0x744/0x1c10 [ 142.130956][ T6770] ? __pfx_chrdev_open+0x10/0x10 [ 142.130986][ T6770] vfs_open+0x82/0x3f0 [ 142.131007][ T6770] path_openat+0x1de4/0x2cb0 [ 142.131040][ T6770] ? __pfx_path_openat+0x10/0x10 [ 142.131069][ T6770] do_filp_open+0x20b/0x470 [ 142.131092][ T6770] ? __pfx_do_filp_open+0x10/0x10 [ 142.131134][ T6770] ? alloc_fd+0x471/0x7d0 [ 142.131166][ T6770] do_sys_openat2+0x11b/0x1d0 [ 142.131183][ T6770] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.131207][ T6770] ? __pfx___schedule+0x10/0x10 [ 142.131232][ T6770] __x64_sys_openat+0x174/0x210 [ 142.131251][ T6770] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.131280][ T6770] do_syscall_64+0xcd/0x4c0 [ 142.131308][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.131327][ T6770] RIP: 0033:0x7f3be258d290 [ 142.131346][ T6770] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 142.131363][ T6770] RSP: 002b:00007f3be3390b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 142.131381][ T6770] RAX: ffffffffffffffda RBX: 0000000000183a00 RCX: 00007f3be258d290 [ 142.131393][ T6770] RDX: 0000000000183a00 RSI: 00007f3be3390c10 RDI: 00000000ffffff9c [ 142.131403][ T6770] RBP: 00007f3be3390c10 R08: 0000000000000000 R09: 0000000000000000 [ 142.131414][ T6770] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 142.131424][ T6770] R13: 0000000000000000 R14: 00007f3be27b5fa0 R15: 00007ffde40b1ec8 [ 142.131453][ T6770] [ 142.134708][ T9] usb 4-1: USB disconnect, device number 15 [ 142.490533][ T5941] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.661700][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 142.672376][ T5941] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 142.685546][ T5941] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.695642][ T5941] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.716879][ T5952] rc_core: IR keymap rc-hauppauge not found [ 142.722868][ T5952] Registered IR keymap rc-empty [ 142.728080][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.737233][ T5941] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.738300][ T6787] 9pnet_fd: Insufficient options for proto=fd [ 142.746913][ T5941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.763874][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.773235][ T5941] usb 2-1: config 0 has no interface number 0 [ 142.779671][ T5941] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 142.791593][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 142.806698][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 142.960725][ T5941] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 142.973498][ T5941] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.985007][ T5941] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.998432][ T5941] usb 2-1: config 0 interface 125 has no altsetting 0 [ 143.012648][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.019943][ T5941] usb 2-1: config 0 interface 125 has no altsetting 2 [ 143.031042][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.048486][ T5941] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 143.059684][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.075758][ T5941] usb 2-1: Product: syz [ 143.080311][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.087845][ T5941] usb 2-1: Manufacturer: syz [ 143.094217][ T5941] usb 2-1: SerialNumber: syz [ 143.101371][ T5941] usb 2-1: config 0 descriptor?? [ 143.112319][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.120607][ T6795] syz.3.227: attempt to access beyond end of device [ 143.120607][ T6795] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 143.136260][ T5941] usb 2-1: selecting invalid altsetting 2 [ 143.163387][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.191881][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 143.191903][ T30] audit: type=1400 audit(1751776443.354:350): avc: denied { search } for pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.246522][ T6787] sp0: Synchronizing with TNC [ 143.260668][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.275843][ T30] audit: type=1400 audit(1751776443.354:351): avc: denied { search } for pid=5498 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.297625][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.441016][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.602706][ T6785] [U] è [ 143.619136][ T30] audit: type=1400 audit(1751776443.354:352): avc: denied { search } for pid=5498 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.644635][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.680599][ T5952] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.690484][ T30] audit: type=1400 audit(1751776443.354:353): avc: denied { read } for pid=5498 comm="dhcpcd" name="n100" dev="tmpfs" ino=3117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.713412][ T5952] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 143.731205][ T5952] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.791653][ T5952] usb 1-1: USB disconnect, device number 8 [ 143.850019][ T30] audit: type=1400 audit(1751776443.354:354): avc: denied { open } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.896094][ T6806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.228'. [ 143.905087][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.228'. [ 144.251303][ T30] audit: type=1400 audit(1751776443.364:355): avc: denied { getattr } for pid=5498 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.431870][ T6811] syz.4.229 (6811): /proc/6808/oom_adj is deprecated, please use /proc/6808/oom_score_adj instead. [ 145.455897][ T973] usb 2-1: USB disconnect, device number 11 [ 146.362914][ T6820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.232'. [ 146.371898][ T6820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.232'. [ 148.960402][ T5941] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 149.020380][ T30] audit: type=1400 audit(1751776449.184:356): avc: denied { execute } for pid=6843 comm="syz.0.239" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.044707][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.059274][ T6842] syz.4.238: attempt to access beyond end of device [ 149.059274][ T6842] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 149.121540][ T30] audit: type=1400 audit(1751776449.194:357): avc: denied { ioctl } for pid=6843 comm="syz.0.239" path="socket:[12042]" dev="sockfs" ino=12042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.160917][ T5941] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 149.175139][ T30] audit: type=1400 audit(1751776449.224:358): avc: denied { ioctl } for pid=6833 comm="syz.1.236" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.200735][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.214682][ T5941] usb 2-1: Product: syz [ 149.218856][ T5941] usb 2-1: Manufacturer: syz [ 149.235805][ T5941] usb 2-1: SerialNumber: syz [ 149.241829][ T6853] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.342261][ T5941] usb 2-1: config 0 descriptor?? [ 149.350072][ T5941] usb 2-1: selecting invalid altsetting 1 [ 149.404858][ T5941] comedi comedi5: could not switch to alternate setting 1 [ 149.415751][ T5941] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 149.505900][ T6857] CIFS: Unable to determine destination address [ 149.749165][ T30] audit: type=1400 audit(1751776449.914:359): avc: denied { read } for pid=6833 comm="syz.1.236" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.818629][ T30] audit: type=1400 audit(1751776449.914:360): avc: denied { open } for pid=6833 comm="syz.1.236" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.841417][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.414548][ T5941] usb 2-1: USB disconnect, device number 12 [ 150.582330][ T30] audit: type=1400 audit(1751776450.744:361): avc: denied { setopt } for pid=6867 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.648114][ T30] audit: type=1400 audit(1751776450.814:362): avc: denied { write } for pid=6875 comm="syz.3.247" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.880362][ T5891] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.934642][ T6886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 150.943586][ T6886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 151.060836][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 151.075800][ T5891] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 151.085272][ T5891] usb 4-1: config 0 has no interface number 0 [ 151.094422][ T5891] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 151.161973][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.292043][ T5891] usb 4-1: config 0 descriptor?? [ 151.424289][ T5891] viperboard 4-1:0.143: version 0.00 found at bus 004 address 016 [ 151.461052][ T5891] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 151.484239][ T5891] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 151.693545][ T973] usb 4-1: USB disconnect, device number 16 [ 151.721426][ T6890] overlayfs: missing 'lowerdir' [ 151.750997][ T6890] xt_hashlimit: size too large, truncated to 1048576 [ 152.341380][ T6897] overlayfs: missing 'lowerdir' [ 152.417931][ T6898] xt_hashlimit: size too large, truncated to 1048576 [ 153.050671][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.422208][ T6907] CIFS: Unable to determine destination address [ 153.452456][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 153.606525][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 153.618134][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 153.631829][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 153.652018][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 153.680419][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 153.726740][ T5941] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 153.752679][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.776913][ T5941] usb 4-1: Product: syz [ 153.785252][ T5941] usb 4-1: Manufacturer: syz [ 153.789860][ T5941] usb 4-1: SerialNumber: syz [ 153.818751][ T5941] usb 4-1: config 0 descriptor?? [ 153.840818][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.913982][ T6918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.187595][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.212035][ T973] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.251538][ T5891] usb 5-1: config 4 has an invalid interface number: 210 but max is 0 [ 154.323674][ T5891] usb 5-1: config 4 has no interface number 0 [ 154.332815][ T5891] usb 5-1: config 4 interface 210 has no altsetting 0 [ 154.333309][ T5941] input input14: Device does not respond to id packet M [ 154.364468][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 154.393674][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 154.405258][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.488046][ T5891] smsusb:smsusb_probe: board id=8, interface number 210 [ 154.489709][ T973] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 154.511926][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.520028][ T973] usb 2-1: Product: syz [ 154.527863][ T973] usb 2-1: Manufacturer: syz [ 154.533812][ T973] usb 2-1: SerialNumber: syz [ 154.549180][ T6902] netlink: 80 bytes leftover after parsing attributes in process `syz.3.253'. [ 154.561030][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.567024][ T5941] input input14: Device does not respond to id packet P [ 154.584942][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.591148][ T5941] input input14: Device does not respond to id packet B [ 154.609724][ T973] usb 2-1: config 0 descriptor?? [ 154.616212][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.624708][ T5941] input input14: Device does not respond to id packet N [ 154.634827][ T973] usb 2-1: selecting invalid altsetting 1 [ 154.644242][ T973] comedi comedi5: could not switch to alternate setting 1 [ 154.651842][ T6926] syz.0.261: attempt to access beyond end of device [ 154.651842][ T6926] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 154.660325][ T973] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 154.673743][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.683414][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.788941][ T5952] usb 5-1: USB disconnect, device number 8 [ 154.817887][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 154.853960][ T5941] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 155.174125][ T5941] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 155.337018][ T6936] netlink: 830 bytes leftover after parsing attributes in process `syz.2.262'. [ 155.523711][ T5941] usb 4-1: USB disconnect, device number 17 [ 155.637913][ T6938] syz.3.263: attempt to access beyond end of device [ 155.637913][ T6938] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 156.847462][ T5941] usb 2-1: USB disconnect, device number 13 [ 157.808892][ T6961] CIFS: Unable to determine destination address [ 157.898886][ T6962] netlink: 60 bytes leftover after parsing attributes in process `syz.4.268'. [ 157.908595][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.268'. [ 158.751069][ T6969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 159.000675][ T6340] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.461138][ T6340] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.480296][ T6340] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.480306][ T5941] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.520035][ T6340] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.538881][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.573499][ T6984] netlink: 830 bytes leftover after parsing attributes in process `syz.2.275'. [ 159.592967][ T6340] usb 5-1: Product: syz [ 159.597311][ T6340] usb 5-1: Manufacturer: syz [ 159.617793][ T6340] usb 5-1: SerialNumber: syz [ 159.665840][ T5941] usb 2-1: device descriptor read/64, error -71 [ 159.751648][ T6340] usb 5-1: config 0 descriptor?? [ 159.901314][ T6340] usb 5-1: selecting invalid altsetting 0 [ 160.080468][ T5941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 160.251289][ T5941] usb 2-1: device descriptor read/64, error -71 [ 160.360536][ T30] audit: type=1400 audit(1751776460.484:363): avc: denied { getopt } for pid=6972 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.459969][ T5941] usb usb2-port1: attempt power cycle [ 160.494775][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 160.528575][ T6340] usb 5-1: USB disconnect, device number 9 [ 160.580001][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.702055][ T9] usb 4-1: config 106 has an invalid descriptor of length 107, skipping remainder of the config [ 160.716233][ T9] usb 4-1: config 106 has 0 interfaces, different from the descriptor's value: 1 [ 160.732543][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 160.744757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.753692][ T9] usb 4-1: Product: syz [ 160.758034][ T9] usb 4-1: Manufacturer: syz [ 160.765327][ T9] usb 4-1: SerialNumber: syz [ 160.812279][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.866719][ T6998] syz.0.278: attempt to access beyond end of device [ 160.866719][ T6998] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 160.900478][ T5941] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 160.941246][ T5941] usb 2-1: device descriptor read/8, error -71 [ 161.019453][ T5884] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 161.059454][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.070014][ T5884] usb 3-1: Product: syz [ 161.075601][ T5884] usb 3-1: Manufacturer: syz [ 161.081624][ T5884] usb 3-1: SerialNumber: syz [ 161.122652][ T5884] usb 3-1: config 0 descriptor?? [ 161.211672][ T5884] usb 3-1: selecting invalid altsetting 1 [ 161.217761][ T5884] comedi comedi5: could not switch to alternate setting 1 [ 161.228639][ T5884] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 161.271183][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 161.331238][ T5941] usb 2-1: device descriptor read/8, error -71 [ 161.444385][ T5941] usb usb2-port1: unable to enumerate USB device [ 161.643794][ T7007] Device name cannot be null; rc = [-22] [ 161.939384][ T7006] 9pnet_fd: Insufficient options for proto=fd [ 161.996062][ T7010] kvm: MWAIT instruction emulated as NOP! [ 162.132665][ T5952] usb 3-1: USB disconnect, device number 12 [ 162.651145][ T7015] CIFS: Unable to determine destination address [ 163.025253][ T9] usb 4-1: USB disconnect, device number 18 [ 163.133004][ T7018] syz.2.282: attempt to access beyond end of device [ 163.133004][ T7018] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 163.149160][ T7024] FAULT_INJECTION: forcing a failure. [ 163.149160][ T7024] name failslab, interval 1, probability 0, space 0, times 0 [ 163.165502][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.3.283 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 163.165519][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.165525][ T7024] Call Trace: [ 163.165529][ T7024] [ 163.165533][ T7024] dump_stack_lvl+0x16c/0x1f0 [ 163.165554][ T7024] should_fail_ex+0x512/0x640 [ 163.165569][ T7024] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 163.165587][ T7024] should_failslab+0xc2/0x120 [ 163.165604][ T7024] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 163.165619][ T7024] ? __alloc_skb+0x2b2/0x380 [ 163.165636][ T7024] __alloc_skb+0x2b2/0x380 [ 163.165650][ T7024] ? __pfx___alloc_skb+0x10/0x10 [ 163.165666][ T7024] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 163.165681][ T7024] netlink_alloc_large_skb+0x69/0x130 [ 163.165693][ T7024] netlink_sendmsg+0x6a1/0xdd0 [ 163.165706][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.165722][ T7024] ____sys_sendmsg+0xa98/0xc70 [ 163.165734][ T7024] ? copy_msghdr_from_user+0x10a/0x160 [ 163.165750][ T7024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.165767][ T7024] ___sys_sendmsg+0x134/0x1d0 [ 163.165783][ T7024] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.165798][ T7024] ? __lock_acquire+0x622/0x1c90 [ 163.165826][ T7024] __sys_sendmsg+0x16d/0x220 [ 163.165842][ T7024] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.165866][ T7024] do_syscall_64+0xcd/0x4c0 [ 163.165883][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.165895][ T7024] RIP: 0033:0x7f3be258e929 [ 163.165904][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.165915][ T7024] RSP: 002b:00007f3be3391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.165926][ T7024] RAX: ffffffffffffffda RBX: 00007f3be27b5fa0 RCX: 00007f3be258e929 [ 163.165933][ T7024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 163.165939][ T7024] RBP: 00007f3be3391090 R08: 0000000000000000 R09: 0000000000000000 [ 163.165945][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.165951][ T7024] R13: 0000000000000000 R14: 00007f3be27b5fa0 R15: 00007ffde40b1ec8 [ 163.165964][ T7024] [ 166.294076][ T7053] netlink: 830 bytes leftover after parsing attributes in process `syz.0.290'. [ 166.901821][ T7058] CIFS: Unable to determine destination address [ 167.355221][ T5828] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 167.904948][ T5828] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 167.937382][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.959870][ T5828] usb 3-1: Product: syz [ 168.133235][ T5828] usb 3-1: Manufacturer: syz [ 168.161955][ T5828] usb 3-1: SerialNumber: syz [ 168.181025][ T5828] usb 3-1: config 0 descriptor?? [ 168.206920][ T5828] usb 3-1: selecting invalid altsetting 1 [ 168.223381][ T5828] comedi comedi5: could not switch to alternate setting 1 [ 168.243847][ T5828] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 169.520165][ T7076] CIFS: Unable to determine destination address [ 169.719133][ T5952] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.978446][ T5952] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.997510][ T5952] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 170.025792][ T5952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.050454][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 170.072037][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 170.100984][ T5952] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.122935][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.205679][ T30] audit: type=1400 audit(1751776470.324:364): avc: denied { write } for pid=7091 comm="syz.1.301" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.207198][ T5952] usb 1-1: Product: syz [ 170.481425][ T5828] usb 3-1: USB disconnect, device number 13 [ 170.517525][ T5952] usb 1-1: Manufacturer: syz [ 170.544474][ T5952] cdc_wdm 1-1:1.0: skipping garbage [ 170.555232][ T5952] cdc_wdm 1-1:1.0: skipping garbage [ 170.573618][ T5952] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 170.579839][ T5952] cdc_wdm 1-1:1.0: Unknown control protocol [ 170.621879][ T7100] syz.1.304: attempt to access beyond end of device [ 170.621879][ T7100] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 170.762956][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.889963][ T5952] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 170.967809][ T5884] usb 1-1: USB disconnect, device number 9 [ 171.060313][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 171.077911][ T9] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 171.096575][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 171.106224][ T5952] usb 4-1: device descriptor read/64, error -71 [ 171.121033][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 171.129446][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 171.140252][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.149113][ T9] usb 5-1: config 0 has no interface number 0 [ 171.161785][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 171.177101][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.187896][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.200064][ T9] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.215745][ T9] usb 5-1: config 0 interface 125 has no altsetting 0 [ 171.223868][ T9] usb 5-1: config 0 interface 125 has no altsetting 2 [ 171.235905][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 171.245299][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.270997][ T9] usb 5-1: Product: syz [ 171.287058][ T9] usb 5-1: Manufacturer: syz [ 171.291835][ T9] usb 5-1: SerialNumber: syz [ 171.307248][ T9] usb 5-1: config 0 descriptor?? [ 171.312749][ T30] audit: type=1400 audit(1751776471.484:365): avc: denied { listen } for pid=7114 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.318243][ T9] usb 5-1: selecting invalid altsetting 2 [ 171.345417][ T7115] [U] [ 171.348206][ T7115] [U] [ 171.350907][ T7115] [U] [ 171.353598][ T7115] [U] [ 171.356288][ T7115] [U] [ 171.358976][ T7115] [U] [ 171.361667][ T7115] [U] [ 171.364359][ T7115] [U] [ 171.372178][ T7115] [U] [ 171.374883][ T7115] [U] [ 171.377574][ T7115] [U] [ 171.474423][ T30] audit: type=1400 audit(1751776471.644:366): avc: denied { getopt } for pid=7114 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.513512][ T7114] [U] [ 171.737483][ T5952] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 171.848726][ T7120] syz.0.308: attempt to access beyond end of device [ 171.848726][ T7120] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 171.881093][ T5952] usb 4-1: device descriptor read/64, error -71 [ 172.010620][ T5952] usb usb4-port1: attempt power cycle [ 172.680266][ T5952] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 173.440268][ T5952] usb 4-1: device not accepting address 21, error -71 [ 173.860111][ T7137] overlayfs: missing 'lowerdir' [ 173.935842][ T7138] xt_hashlimit: size too large, truncated to 1048576 [ 175.063634][ T5898] usb 5-1: USB disconnect, device number 10 [ 175.313341][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.463253][ T7158] lo speed is unknown, defaulting to 1000 [ 175.908938][ T30] audit: type=1400 audit(1751776475.624:367): avc: denied { create } for pid=7150 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.994699][ T7164] capability: warning: `syz.4.318' uses deprecated v2 capabilities in a way that may be insecure [ 176.050670][ T30] audit: type=1400 audit(1751776476.174:368): avc: denied { append } for pid=7162 comm="syz.4.318" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.261268][ T24] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 176.374801][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.395720][ T24] usb 3-1: Product: syz [ 176.399641][ T30] audit: type=1400 audit(1751776476.174:369): avc: denied { open } for pid=7162 comm="syz.4.318" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.410314][ T24] usb 3-1: Manufacturer: syz [ 176.460090][ T30] audit: type=1400 audit(1751776476.174:370): avc: denied { ioctl } for pid=7162 comm="syz.4.318" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.490531][ T24] usb 3-1: SerialNumber: syz [ 176.508110][ T24] usb 3-1: config 0 descriptor?? [ 176.510236][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 176.519128][ T24] usb 3-1: selecting invalid altsetting 1 [ 176.527580][ T24] comedi comedi5: could not switch to alternate setting 1 [ 176.538336][ T24] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 176.553408][ T30] audit: type=1400 audit(1751776476.564:371): avc: denied { mount } for pid=7157 comm="syz.0.317" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.604972][ T30] audit: type=1400 audit(1751776476.624:372): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.629485][ T30] audit: type=1400 audit(1751776476.714:373): avc: denied { watch watch_reads } for pid=7169 comm="syz.4.320" path="/64/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.681314][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.789508][ T7175] netlink: 830 bytes leftover after parsing attributes in process `syz.4.322'. [ 176.853747][ T5941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.017461][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.029090][ T5828] usb 2-1: config 4 has an invalid interface number: 210 but max is 0 [ 177.047513][ T5828] usb 2-1: config 4 has no interface number 0 [ 177.067103][ T5828] usb 2-1: config 4 interface 210 has no altsetting 0 [ 177.094628][ T5828] usb 2-1: string descriptor 0 read error: -22 [ 177.101226][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 177.106590][ T5828] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 177.119832][ T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 177.141035][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.150440][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.169002][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.180658][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 177.185862][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.196467][ T5941] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 177.207948][ T5828] smsusb:smsusb_probe: board id=8, interface number 210 [ 177.217420][ T5941] usb 1-1: config 0 has no interface number 0 [ 177.223645][ T5941] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 177.234541][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.243543][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.251565][ T9] usb 4-1: config 0 has no interface number 0 [ 177.257769][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 177.620916][ T5941] usb 1-1: config 0 descriptor?? [ 177.627680][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.645649][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.665094][ T9] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.680780][ T7177] CIFS: Unable to determine destination address [ 177.695854][ T9] usb 4-1: config 0 interface 125 has no altsetting 0 [ 177.815777][ T5941] viperboard 1-1:0.143: version 0.00 found at bus 001 address 010 [ 177.840285][ T5941] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 177.871652][ T5941] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 177.886113][ T9] usb 4-1: config 0 interface 125 has no altsetting 2 [ 177.901953][ T5898] usb 2-1: USB disconnect, device number 18 [ 177.945935][ T24] usb 3-1: USB disconnect, device number 14 [ 177.982283][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 178.011705][ T5941] usb 1-1: USB disconnect, device number 10 [ 178.049596][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.088740][ T9] usb 4-1: Product: syz [ 178.103215][ T9] usb 4-1: Manufacturer: syz [ 178.107829][ T9] usb 4-1: SerialNumber: syz [ 178.128853][ T9] usb 4-1: config 0 descriptor?? [ 178.197843][ T9] usb 4-1: selecting invalid altsetting 2 [ 178.297910][ T7186] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 178.306027][ T7186] audit: out of memory in audit_log_start [ 179.740368][ T30] audit: type=1400 audit(1751776479.904:374): avc: denied { setcheckreqprot } for pid=7195 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.852431][ T5898] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 180.544839][ T7204] mkiss: ax0: crc mode is auto. [ 180.580319][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 180.593552][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.614777][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.686264][ T5828] IPVS: starting estimator thread 0... [ 180.862601][ T7209] IPVS: using max 44 ests per chain, 105600 per kthread [ 181.076380][ T5898] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 181.076408][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.087378][ T5898] usb 3-1: config 0 descriptor?? [ 181.098984][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 181.098997][ T30] audit: type=1400 audit(1751776481.264:378): avc: denied { read write } for pid=7210 comm="syz.0.333" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.099150][ T30] audit: type=1400 audit(1751776481.264:379): avc: denied { open } for pid=7210 comm="syz.0.333" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 181.403924][ T5828] usb 4-1: USB disconnect, device number 23 [ 181.934454][ T30] audit: type=1400 audit(1751776482.094:380): avc: denied { read } for pid=7210 comm="syz.0.333" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.326368][ T30] audit: type=1400 audit(1751776482.094:381): avc: denied { open } for pid=7210 comm="syz.0.333" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 182.720244][ T7232] CIFS: Unable to determine destination address [ 182.985162][ T5898] usbhid 3-1:0.0: can't add hid device: -71 [ 183.026326][ T30] audit: type=1400 audit(1751776483.164:382): avc: denied { execute } for pid=7228 comm="syz.3.336" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 183.053783][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 183.118758][ T5898] usb 3-1: USB disconnect, device number 15 [ 183.300781][ T5891] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 183.474619][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.501208][ T5891] usb 4-1: no configurations [ 183.506230][ T5891] usb 4-1: can't read configurations, error -22 [ 183.652298][ T5891] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 183.822324][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.830103][ T5891] usb 4-1: no configurations [ 183.835976][ T5891] usb 4-1: can't read configurations, error -22 [ 183.842912][ T5891] usb usb4-port1: attempt power cycle [ 184.440269][ T5898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 184.448011][ T30] audit: type=1400 audit(1751776484.604:383): avc: denied { append } for pid=7244 comm="syz.4.340" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.481462][ T7245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.742479][ T30] audit: type=1401 audit(1751776484.914:384): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 184.833054][ T5828] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.087657][ T30] audit: type=1400 audit(1751776485.254:385): avc: denied { create } for pid=7254 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.100325][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 185.112591][ T30] audit: type=1400 audit(1751776485.284:386): avc: denied { map } for pid=7254 comm="syz.1.344" path="socket:[15190]" dev="sockfs" ino=15190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.114834][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 185.138339][ T30] audit: type=1400 audit(1751776485.284:387): avc: denied { read accept } for pid=7254 comm="syz.1.344" path="socket:[15190]" dev="sockfs" ino=15190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.147974][ T5891] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 185.230540][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 185.246295][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 185.260689][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 185.270637][ T5828] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 185.279228][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.289043][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.304573][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 185.314857][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 185.315896][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 185.338570][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.347883][ T5828] usb 5-1: config 0 has no interface number 0 [ 185.362287][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 185.374265][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 185.386802][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.398012][ T5828] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.422851][ T5828] usb 5-1: config 0 interface 125 has no altsetting 0 [ 185.469606][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.477719][ T5891] usb 4-1: no configurations [ 185.482573][ T5891] usb 4-1: can't read configurations, error -22 [ 185.510139][ T5898] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 185.528652][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.537892][ T5828] usb 5-1: config 0 interface 125 has no altsetting 2 [ 185.546153][ T5898] usb 3-1: Product: syz [ 185.553782][ T5898] usb 3-1: Manufacturer: syz [ 185.568141][ T5828] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 185.569065][ T5898] usb 3-1: SerialNumber: syz [ 185.616602][ T5898] usb 3-1: config 0 descriptor?? [ 185.628124][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.646194][ T5828] usb 5-1: Product: syz [ 185.650910][ T5828] usb 5-1: Manufacturer: syz [ 185.655518][ T5828] usb 5-1: SerialNumber: syz [ 185.662408][ T5828] usb 5-1: config 0 descriptor?? [ 185.684259][ T5828] usb 5-1: selecting invalid altsetting 2 [ 185.688711][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.347'. [ 185.699595][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.347'. [ 186.284969][ T5898] input input15: Device does not respond to id packet M [ 186.529598][ T7240] netlink: 80 bytes leftover after parsing attributes in process `syz.2.339'. [ 186.765435][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 186.797125][ T5898] input input15: Device does not respond to id packet P [ 186.985196][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 186.991499][ T5898] input input15: Device does not respond to id packet B [ 186.998783][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 187.005187][ T5898] input input15: Device does not respond to id packet N [ 187.013090][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 187.019438][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 187.026411][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 187.033012][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 187.325783][ T5898] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 187.544255][ T7281] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.552467][ T5898] usb 3-1: USB disconnect, device number 16 [ 187.559452][ T973] usb 5-1: USB disconnect, device number 11 [ 187.845101][ T7288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.353'. [ 187.854974][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.353'. [ 187.937826][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.354'. [ 187.946811][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 190.102975][ T5941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.300276][ T5898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.320388][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 190.326982][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.346384][ T5941] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 190.370267][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.383315][ T5941] usb 5-1: Product: syz [ 190.387581][ T5941] usb 5-1: Manufacturer: syz [ 190.393771][ T5941] usb 5-1: SerialNumber: syz [ 190.413267][ T5941] usb 5-1: config 0 descriptor?? [ 190.425551][ T5941] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 190.540262][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 190.552626][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 190.570242][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 190.585990][ T5884] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 190.622730][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 190.870398][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 190.881881][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 190.899145][ T5884] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 190.935266][ T5884] usb 3-1: config 0 has no interface number 0 [ 190.962880][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 191.005799][ T5884] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 191.026772][ T5891] usb 5-1: USB disconnect, device number 12 [ 191.079499][ T5898] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 191.101850][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.110526][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.118513][ T5898] usb 1-1: Product: syz [ 191.143282][ T7313] CIFS: Unable to determine destination address [ 191.190587][ T5884] usb 3-1: config 0 descriptor?? [ 191.201054][ T5898] usb 1-1: Manufacturer: syz [ 191.205662][ T5898] usb 1-1: SerialNumber: syz [ 191.232678][ T7318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.363'. [ 191.242149][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.363'. [ 191.291959][ T5898] usb 1-1: config 0 descriptor?? [ 191.332590][ T5884] viperboard 3-1:0.143: version 0.00 found at bus 003 address 017 [ 191.622110][ T5884] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 191.650682][ T5884] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 191.699111][ T5884] usb 3-1: USB disconnect, device number 17 [ 191.922585][ T7324] lo speed is unknown, defaulting to 1000 [ 191.962794][ T5898] input input16: Device does not respond to id packet M [ 192.169491][ T7327] CIFS: Unable to determine destination address [ 192.361204][ T7300] netlink: 80 bytes leftover after parsing attributes in process `syz.0.358'. [ 192.454443][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.478622][ T5898] input input16: Device does not respond to id packet P [ 192.511943][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.540315][ T5898] input input16: Device does not respond to id packet B [ 192.570448][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.600281][ T5898] input input16: Device does not respond to id packet N [ 192.667968][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.692813][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.708884][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.720580][ T5898] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 192.732924][ T7332] syz.1.367: attempt to access beyond end of device [ 192.732924][ T7332] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 192.754471][ T5898] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 192.951624][ T5898] usb 1-1: USB disconnect, device number 11 [ 193.091415][ T5941] IPVS: starting estimator thread 0... [ 193.690534][ T7344] IPVS: using max 41 ests per chain, 98400 per kthread [ 193.789121][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.795936][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460862][ T7352] bond0: (slave veth0_to_bond): Releasing backup interface [ 194.701465][ T7364] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.373'. [ 195.173553][ T973] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.400521][ T973] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 195.430715][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.438725][ T973] usb 5-1: Product: syz [ 195.464536][ T973] usb 5-1: Manufacturer: syz [ 195.667812][ T973] usb 5-1: SerialNumber: syz [ 195.720396][ T973] usb 5-1: config 0 descriptor?? [ 195.826098][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 195.850508][ T7376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 195.860917][ T7376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.378'. [ 196.494639][ T973] usb 5-1: selecting invalid altsetting 1 [ 196.524290][ T973] comedi comedi5: could not switch to alternate setting 1 [ 196.680575][ T973] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 197.539120][ T7388] netlink: 830 bytes leftover after parsing attributes in process `syz.0.379'. [ 198.030782][ T24] usb 5-1: USB disconnect, device number 13 [ 198.172311][ T5884] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 198.502962][ T7405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 198.512354][ T7405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.386'. [ 198.892358][ T5884] usb 2-1: device descriptor read/64, error -71 [ 199.240449][ T7414] syz.3.389: attempt to access beyond end of device [ 199.240449][ T7414] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 199.270402][ T5884] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 199.343667][ T7422] syz.4.390: attempt to access beyond end of device [ 199.343667][ T7422] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 199.410459][ T5884] usb 2-1: device descriptor read/64, error -71 [ 199.410535][ T973] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 199.790352][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 199.809972][ T5884] usb usb2-port1: attempt power cycle [ 199.853463][ T973] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 199.909346][ T973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 199.920460][ T973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 199.937466][ T973] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 199.946647][ T973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.955820][ T973] usb 3-1: config 0 has no interface number 0 [ 200.170398][ T5884] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.225723][ T973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 200.247109][ T973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 200.269760][ T5884] usb 2-1: device descriptor read/8, error -71 [ 200.298821][ T973] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.339042][ T973] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.353867][ T973] usb 3-1: config 0 interface 125 has no altsetting 0 [ 200.446223][ T973] usb 3-1: config 0 interface 125 has no altsetting 2 [ 200.455624][ T973] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 200.480436][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.490766][ T973] usb 3-1: Product: syz [ 200.495924][ T973] usb 3-1: Manufacturer: syz [ 201.023691][ T973] usb 3-1: SerialNumber: syz [ 201.039463][ T973] usb 3-1: config 0 descriptor?? [ 201.048737][ T973] usb 3-1: selecting invalid altsetting 2 [ 201.090305][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 201.329064][ T5884] usb 2-1: device not accepting address 22, error -71 [ 201.350492][ T5884] usb usb2-port1: unable to enumerate USB device [ 201.581300][ T7445] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 201.612081][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.915361][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.395'. [ 201.924417][ T7444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 201.961054][ T7446] 9p: Unknown uid 00000000004294967295 [ 202.102136][ T973] get_1284_register timeout [ 202.285382][ C0] usb 3-1: async_complete: urb error -104 [ 202.307024][ T973] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 203.922694][ T5898] usb 3-1: USB disconnect, device number 18 [ 204.072075][ T7465] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 204.371407][ T973] lo speed is unknown, defaulting to 1000 [ 204.377138][ T973] syz2: Port: 1 Link DOWN [ 204.383562][ T9] lo speed is unknown, defaulting to 1000 [ 204.728092][ T7462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.405778][ T7486] xt_hashlimit: size too large, truncated to 1048576 [ 206.142842][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.244298][ T7507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.284985][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 207.285001][ T30] audit: type=1400 audit(1751776507.454:393): avc: denied { listen } for pid=7505 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 207.357631][ T30] audit: type=1400 audit(1751776507.454:394): avc: denied { accept } for pid=7505 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.267879][ T5884] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 208.597017][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.413'. [ 208.605997][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.413'. [ 208.650624][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 208.659485][ T5884] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 208.673145][ T5884] usb 4-1: config 4 has no interface number 0 [ 208.679497][ T5884] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.727750][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.799628][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.996613][ T5884] hub 4-1:4.128: bad descriptor, ignoring hub [ 209.098431][ T5884] hub 4-1:4.128: probe with driver hub failed with error -5 [ 209.120553][ T5884] usbhid 4-1:4.128: couldn't find an input interrupt endpoint [ 209.568696][ T7530] CIFS: Unable to determine destination address [ 209.840933][ T5884] usb 4-1: USB disconnect, device number 28 [ 209.900431][ T5828] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.972507][ T7532] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 210.006348][ T30] audit: type=1400 audit(1751776510.174:395): avc: denied { mount } for pid=7535 comm="syz.1.418" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 210.063286][ T7538] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 210.075607][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.089706][ T5828] usb 1-1: config 4 has an invalid interface number: 210 but max is 0 [ 210.102607][ T5828] usb 1-1: config 4 has no interface number 0 [ 210.118819][ T5828] usb 1-1: config 4 interface 210 has no altsetting 0 [ 210.149667][ T5828] usb 1-1: string descriptor 0 read error: -22 [ 210.163298][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 210.175234][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.303660][ T5828] smsusb:smsusb_probe: board id=8, interface number 210 [ 210.490343][ T3196] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 210.831586][ T3196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.846561][ T3196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.873592][ T5884] usb 1-1: USB disconnect, device number 12 [ 210.879604][ T3196] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 211.216892][ T3196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.260747][ T3196] usb 2-1: config 0 descriptor?? [ 212.567366][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 212.578095][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 212.586793][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 212.595201][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 212.720450][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 212.760791][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.769624][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.830249][ T5884] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 213.341373][ T3196] aquacomputer_d5next 0003:0C70:F00D.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 213.503039][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.540736][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.569509][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.579343][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.695379][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'. [ 213.704400][ T7575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.427'. [ 214.071490][ T5884] usb 3-1: GET_CAPABILITIES returned 0 [ 214.071795][ T5828] usb 2-1: USB disconnect, device number 23 [ 214.108088][ T5884] usbtmc 3-1:16.0: can't read capabilities [ 214.157527][ T7581] syz.0.428: attempt to access beyond end of device [ 214.157527][ T7581] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 214.695498][ T5884] usb 3-1: USB disconnect, device number 19 [ 214.915210][ T7591] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.010488][ T5828] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.042249][ T30] audit: type=1400 audit(1751776516.194:396): avc: denied { create } for pid=7614 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.371020][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 216.399888][ T5828] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 216.428270][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 216.580321][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 216.740054][ T5828] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 216.755499][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.765754][ T5828] usb 5-1: config 0 has no interface number 0 [ 216.771937][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 216.800310][ T973] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 216.812269][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.839033][ T5828] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.855548][ T5828] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.869832][ T30] audit: type=1400 audit(1751776517.034:397): avc: denied { create } for pid=7626 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.869961][ T5828] usb 5-1: config 0 interface 125 has no altsetting 0 [ 216.897139][ T5828] usb 5-1: config 0 interface 125 has no altsetting 2 [ 216.910893][ T5828] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 216.920401][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.928628][ T5828] usb 5-1: Product: syz [ 216.933350][ T5828] usb 5-1: Manufacturer: syz [ 216.938007][ T5828] usb 5-1: SerialNumber: syz [ 216.949470][ T5828] usb 5-1: config 0 descriptor?? [ 216.963033][ T5828] usb 5-1: selecting invalid altsetting 2 [ 216.984018][ T973] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 216.998143][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.015610][ T973] usb 4-1: Product: syz [ 217.025334][ T973] usb 4-1: Manufacturer: syz [ 217.035829][ T973] usb 4-1: SerialNumber: syz [ 217.075567][ T973] usb 4-1: config 0 descriptor?? [ 217.098821][ T973] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 217.130359][ T5884] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 217.610338][ T973] gspca_sunplus: reg_r err -110 [ 217.615482][ T973] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 217.643616][ T973] usb 4-1: USB disconnect, device number 29 [ 217.816595][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.827435][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 217.840315][ T5884] usb 1-1: config 4 has an invalid interface number: 210 but max is 0 [ 217.854797][ T5884] usb 1-1: config 4 has no interface number 0 [ 217.861838][ T5884] usb 1-1: config 4 interface 210 has no altsetting 0 [ 217.877737][ T5884] usb 1-1: string descriptor 0 read error: -22 [ 217.884677][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 217.895587][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.920600][ T5884] smsusb:smsusb_probe: board id=8, interface number 210 [ 217.958500][ T30] audit: type=1400 audit(1751776518.124:398): avc: denied { ioctl } for pid=7634 comm="syz.2.441" path="socket:[18137]" dev="sockfs" ino=18137 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.030234][ T5828] get_1284_register timeout [ 218.034837][ T5828] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 218.042703][ C0] usb 5-1: async_complete: urb error -104 [ 218.042811][ C0] usb 5-1: async_complete: urb error -104 [ 218.213246][ T5828] usb 1-1: USB disconnect, device number 13 [ 218.573672][ T7644] syz.2.444: attempt to access beyond end of device [ 218.573672][ T7644] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 219.821828][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'. [ 220.058307][ T973] usb 5-1: USB disconnect, device number 14 [ 220.327353][ T5828] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 220.610329][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 220.633477][ T5828] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 220.655875][ T5828] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 220.676146][ T5828] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 220.698411][ T5828] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 220.707528][ T7684] xt_hashlimit: size too large, truncated to 1048576 [ 220.719505][ T5828] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.735188][ T5828] usb 3-1: config 0 has no interface number 0 [ 220.741744][ T5828] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 220.753315][ T5828] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 220.763538][ T5828] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.780595][ T7687] : renamed from bridge_slave_0 (while UP) [ 220.786740][ T5828] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.801489][ T5828] usb 3-1: config 0 interface 125 has no altsetting 0 [ 220.808269][ T5828] usb 3-1: config 0 interface 125 has no altsetting 2 [ 220.821866][ T5828] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 220.832266][ T7687] comedi comedi4: bad chanlist[0]=0x000000ff chan=255 range length=2 [ 220.850394][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.867268][ T5828] usb 3-1: Product: syz [ 220.894328][ T5828] usb 3-1: Manufacturer: syz [ 220.899006][ T5828] usb 3-1: SerialNumber: syz [ 220.907816][ T5828] usb 3-1: config 0 descriptor?? [ 220.916327][ T5828] usb 3-1: selecting invalid altsetting 2 [ 220.920278][ T3196] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.200555][ T3196] usb 1-1: Using ep0 maxpacket: 8 [ 221.259705][ T3196] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 221.592848][ T3196] usb 1-1: config 0 has no interface number 0 [ 221.598996][ T3196] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 221.609252][ T3196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.621484][ T3196] usb 1-1: config 0 descriptor?? [ 221.730905][ T3196] viperboard 1-1:0.143: version 0.00 found at bus 001 address 014 [ 221.867292][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 222.376529][ T3196] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 222.409042][ T3196] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 222.462199][ T3196] usb 1-1: USB disconnect, device number 14 [ 222.497751][ T5884] usb 3-1: USB disconnect, device number 20 [ 223.135796][ T7708] binder: 7706:7708 ioctl 4018620d 0 returned -22 [ 223.342439][ T30] audit: type=1400 audit(1751776523.514:399): avc: denied { node_bind } for pid=7716 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 223.362242][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.129640][ T30] audit: type=1400 audit(1751776523.514:400): avc: denied { read } for pid=7716 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.170432][ T3196] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 224.446892][ T30] audit: type=1400 audit(1751776524.484:401): avc: denied { create } for pid=7727 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.478227][ T30] audit: type=1400 audit(1751776524.494:402): avc: denied { connect } for pid=7727 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.024270][ T3196] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.055949][ T3196] usb 4-1: config 4 has an invalid interface number: 210 but max is 0 [ 225.081979][ T3196] usb 4-1: config 4 has no interface number 0 [ 225.220726][ T3196] usb 4-1: config 4 interface 210 has no altsetting 0 [ 225.243103][ T3196] usb 4-1: string descriptor 0 read error: -22 [ 225.249919][ T3196] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 225.580943][ T3196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.617629][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 225.673543][ T30] audit: type=1400 audit(1751776525.834:403): avc: denied { accept } for pid=7727 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.688253][ T3196] usb 4-1: can't set config #4, error -71 [ 225.882513][ T7740] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 225.905056][ T3196] usb 4-1: USB disconnect, device number 30 [ 226.090751][ T30] audit: type=1400 audit(1751776526.104:404): avc: denied { ioctl } for pid=7727 comm="syz.2.464" path="socket:[18421]" dev="sockfs" ino=18421 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.691693][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 226.753585][ T7748] CIFS: Unable to determine destination address [ 226.920532][ T5891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.097818][ T30] audit: type=1400 audit(1751776527.264:405): avc: denied { read write } for pid=7753 comm="syz.1.469" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.211575][ T5891] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 227.226299][ T5891] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.249327][ T5891] usb 3-1: config 2 interface 0 has no altsetting 0 [ 227.291554][ T5891] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 227.303307][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.316325][ T5891] usb 3-1: Product: syz [ 227.330214][ T5891] usb 3-1: Manufacturer: syz [ 227.366403][ T5891] usb 3-1: SerialNumber: syz [ 227.370254][ T5828] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 227.513884][ T7762] syz_tun: entered allmulticast mode [ 227.526719][ T7761] syz_tun: left allmulticast mode [ 227.674922][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 227.686872][ T5891] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 228.128620][ T5828] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 228.140329][ T5828] usb 4-1: config 0 has no interface number 0 [ 228.146447][ T5828] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 228.163190][ T5891] usb 3-1: USB disconnect, device number 21 [ 228.180549][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.208844][ T5828] usb 4-1: config 0 descriptor?? [ 228.243675][ T30] audit: type=1400 audit(1751776528.414:406): avc: denied { create } for pid=7769 comm="syz.2.474" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.284594][ T7770] ======================================================= [ 228.284594][ T7770] WARNING: The mand mount option has been deprecated and [ 228.284594][ T7770] and is ignored by this kernel. Remove the mand [ 228.284594][ T7770] option from the mount to silence this warning. [ 228.284594][ T7770] ======================================================= [ 228.339753][ T30] audit: type=1400 audit(1751776528.444:407): avc: denied { mounton } for pid=7769 comm="syz.2.474" path="/92/file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.418516][ T5828] viperboard 4-1:0.143: version 0.00 found at bus 004 address 031 [ 228.434458][ T30] audit: type=1400 audit(1751776528.454:408): avc: denied { remount } for pid=7769 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 228.454529][ T5828] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 228.464956][ T5828] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 228.531712][ T30] audit: type=1400 audit(1751776528.694:409): avc: denied { unlink } for pid=5840 comm="syz-executor" name="file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.590617][ T5828] usb 4-1: USB disconnect, device number 31 [ 228.643541][ T7776] FAULT_INJECTION: forcing a failure. [ 228.643541][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 228.686641][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.4.475 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 228.686670][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.686681][ T7776] Call Trace: [ 228.686687][ T7776] [ 228.686694][ T7776] dump_stack_lvl+0x16c/0x1f0 [ 228.686726][ T7776] should_fail_ex+0x512/0x640 [ 228.686750][ T7776] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 228.686778][ T7776] should_failslab+0xc2/0x120 [ 228.686804][ T7776] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 228.686828][ T7776] ? __d_alloc+0x31/0xaa0 [ 228.686848][ T7776] __d_alloc+0x31/0xaa0 [ 228.686863][ T7776] ? lockdep_init_map_type+0x5c/0x280 [ 228.686884][ T7776] d_alloc_pseudo+0x1c/0xc0 [ 228.686905][ T7776] alloc_file_pseudo+0xcf/0x230 [ 228.686925][ T7776] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 228.686951][ T7776] sock_alloc_file+0x50/0x210 [ 228.686989][ T7776] do_accept+0x240/0x530 [ 228.687009][ T7776] ? do_raw_spin_lock+0x12c/0x2b0 [ 228.687029][ T7776] ? __pfx_do_accept+0x10/0x10 [ 228.687065][ T7776] __sys_accept4+0x100/0x1c0 [ 228.687086][ T7776] ? __pfx___sys_accept4+0x10/0x10 [ 228.687108][ T7776] ? __pfx_ksys_write+0x10/0x10 [ 228.687136][ T7776] __x64_sys_accept4+0x96/0x100 [ 228.687156][ T7776] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.687181][ T7776] do_syscall_64+0xcd/0x4c0 [ 228.687209][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.687226][ T7776] RIP: 0033:0x7f829e98e929 [ 228.687241][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.687258][ T7776] RSP: 002b:00007f829f8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 228.687276][ T7776] RAX: ffffffffffffffda RBX: 00007f829ebb5fa0 RCX: 00007f829e98e929 [ 228.687288][ T7776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 228.687298][ T7776] RBP: 00007f829f8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.687308][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.687318][ T7776] R13: 0000000000000000 R14: 00007f829ebb5fa0 R15: 00007ffd6f4dd098 [ 228.687342][ T7776] [ 228.945362][ T7778] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.976452][ T30] audit: type=1400 audit(1751776529.144:410): avc: denied { mounton } for pid=7779 comm="syz.4.478" path="/proc/322/task" dev="proc" ino=19644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 229.035378][ T30] audit: type=1326 audit(1751776529.194:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.4.478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f829e98e929 code=0x0 [ 229.058612][ T30] audit: type=1400 audit(1751776529.204:412): avc: denied { create } for pid=7785 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 229.079237][ T30] audit: type=1400 audit(1751776529.204:413): avc: denied { map } for pid=7785 comm="syz.1.477" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.102719][ T30] audit: type=1400 audit(1751776529.204:414): avc: denied { execute } for pid=7785 comm="syz.1.477" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.126500][ T30] audit: type=1400 audit(1751776529.234:415): avc: denied { bind } for pid=7785 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.202795][ T7788] syz.1.479: attempt to access beyond end of device [ 229.202795][ T7788] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 229.315412][ T7797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.480'. [ 229.324527][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.480'. [ 229.383818][ T30] audit: type=1400 audit(1751776529.544:416): avc: denied { read } for pid=7796 comm="syz.2.481" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 229.591016][ T30] audit: type=1400 audit(1751776529.544:417): avc: denied { open } for pid=7796 comm="syz.2.481" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 229.632204][ T5891] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.810237][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 229.816400][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.483'. [ 229.825471][ T7805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.483'. [ 229.839970][ T5891] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 229.851815][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.862582][ T5891] usb 3-1: config 0 has no interface number 0 [ 229.880402][ T5891] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 229.926049][ T5891] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 229.985884][ T5891] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 230.190651][ T5891] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 230.226824][ T5891] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 230.249799][ T7811] loop6: detected capacity change from 0 to 63 [ 230.263795][ T5891] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 230.275389][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.285152][ T7811] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.294076][ T5891] usb 3-1: Product: syz [ 230.384093][ T5891] usb 3-1: Manufacturer: syz [ 230.388763][ T5891] usb 3-1: SerialNumber: syz [ 230.399271][ T5891] usb 3-1: config 0 descriptor?? [ 230.412558][ T7798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.419729][ T7811] Buffer I/O error on dev loop6, logical block 1, async page read [ 230.938350][ T7811] Buffer I/O error on dev loop6, logical block 2, async page read [ 231.058306][ T7811] Buffer I/O error on dev loop6, logical block 3, async page read [ 231.069259][ T6065] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.100403][ T6065] Buffer I/O error on dev loop6, logical block 1, async page read [ 231.121952][ T6065] Buffer I/O error on dev loop6, logical block 2, async page read [ 231.170371][ T6065] Buffer I/O error on dev loop6, logical block 3, async page read [ 231.180506][ T6065] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.190107][ T6065] Buffer I/O error on dev loop6, logical block 1, async page read [ 231.201610][ T5891] usb 3-1: NFC: intf ffff888058139000 id ffffffff8f565220 [ 231.339805][ T5891] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 231.357966][ T5891] usb 3-1: USB disconnect, device number 22 [ 231.376453][ T5891] usb 3-1: NFC: intf ffff888058139000 [ 232.670339][ T5891] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 233.815328][ T7846] /dev/nullb0: Can't open blockdev [ 233.863295][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.493'. [ 233.872189][ T7847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.493'. [ 233.962555][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 233.985993][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 234.187461][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.627686][ T7855] syz.2.495: attempt to access beyond end of device [ 234.627686][ T7855] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 234.675810][ T5891] pvrusb2: Hardware description: Terratec Grabster AV400 [ 234.750228][ T5891] pvrusb2: ********** [ 234.760276][ T5891] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 234.776987][ T5891] pvrusb2: Important functionality might not be entirely working. [ 234.786949][ T5891] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 234.808495][ T5891] pvrusb2: ********** [ 234.836738][ T2328] pvrusb2: Invalid write control endpoint [ 234.930292][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 234.959654][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.498'. [ 234.959678][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.498'. [ 235.341666][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 235.341917][ T30] audit: type=1400 audit(1751776535.514:425): avc: denied { write } for pid=7837 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 235.356093][ T7876] ------------[ cut here ]------------ [ 235.356128][ T7876] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9 [ 235.356147][ T7876] shift exponent -2147450880 is negative [ 235.356160][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.2.499 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 235.356184][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.356194][ T7876] Call Trace: [ 235.356200][ T7876] [ 235.356207][ T7876] dump_stack_lvl+0x16c/0x1f0 [ 235.356238][ T7876] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 235.356281][ T7876] das16m1_attach.cold+0x19/0x1e [ 235.356307][ T7876] comedi_device_attach+0x3b0/0x900 [ 235.356340][ T7876] do_devconfig_ioctl+0x1a7/0x580 [ 235.356358][ T7876] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 235.356393][ T7876] ? find_held_lock+0x2b/0x80 [ 235.356422][ T7876] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 235.356450][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.356472][ T7876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 235.356493][ T7876] ? do_vfs_ioctl+0x523/0x1a60 [ 235.356515][ T7876] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.356543][ T7876] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 235.356571][ T7876] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 235.356601][ T7876] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 235.356637][ T7876] ? hook_file_ioctl_common+0x145/0x410 [ 235.356663][ T7876] ? selinux_file_ioctl+0x180/0x270 [ 235.356688][ T7876] ? selinux_file_ioctl+0xb4/0x270 [ 235.356715][ T7876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 235.356738][ T7876] __x64_sys_ioctl+0x18e/0x210 [ 235.356761][ T7876] do_syscall_64+0xcd/0x4c0 [ 235.356790][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.356808][ T7876] RIP: 0033:0x7f5885b8e929 [ 235.356824][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.356842][ T7876] RSP: 002b:00007f58869de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.356860][ T7876] RAX: ffffffffffffffda RBX: 00007f5885db5fa0 RCX: 00007f5885b8e929 [ 235.356871][ T7876] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 235.356882][ T7876] RBP: 00007f5885c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.356900][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.356911][ T7876] R13: 0000000000000000 R14: 00007f5885db5fa0 R15: 00007ffe97298738 [ 235.356937][ T7876] [ 235.356944][ T7876] ---[ end trace ]--- [ 235.356954][ T7876] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 235.356966][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.2.499 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 235.356991][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.357002][ T7876] Call Trace: [ 235.357009][ T7876] [ 235.357016][ T7876] dump_stack_lvl+0x3d/0x1f0 [ 235.357045][ T7876] panic+0x71c/0x800 [ 235.357075][ T7876] ? __pfx_panic+0x10/0x10 [ 235.357105][ T7876] ? __pfx__printk+0x10/0x10 [ 235.357127][ T7876] check_panic_on_warn+0xab/0xb0 [ 235.357142][ T7876] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 235.357175][ T7876] das16m1_attach.cold+0x19/0x1e [ 235.357194][ T7876] comedi_device_attach+0x3b0/0x900 [ 235.357218][ T7876] do_devconfig_ioctl+0x1a7/0x580 [ 235.357233][ T7876] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 235.357259][ T7876] ? find_held_lock+0x2b/0x80 [ 235.357283][ T7876] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 235.357305][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.357322][ T7876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 235.357338][ T7876] ? do_vfs_ioctl+0x523/0x1a60 [ 235.357355][ T7876] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.357376][ T7876] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 235.357397][ T7876] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 235.357419][ T7876] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 235.357447][ T7876] ? hook_file_ioctl_common+0x145/0x410 [ 235.357467][ T7876] ? selinux_file_ioctl+0x180/0x270 [ 235.357486][ T7876] ? selinux_file_ioctl+0xb4/0x270 [ 235.357507][ T7876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 235.357524][ T7876] __x64_sys_ioctl+0x18e/0x210 [ 235.357543][ T7876] do_syscall_64+0xcd/0x4c0 [ 235.357565][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.357579][ T7876] RIP: 0033:0x7f5885b8e929 [ 235.357590][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.357603][ T7876] RSP: 002b:00007f58869de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.357617][ T7876] RAX: ffffffffffffffda RBX: 00007f5885db5fa0 RCX: 00007f5885b8e929 [ 235.357626][ T7876] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 235.357636][ T7876] RBP: 00007f5885c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.357645][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.357653][ T7876] R13: 0000000000000000 R14: 00007f5885db5fa0 R15: 00007ffe97298738 [ 235.357673][ T7876] [ 235.357873][ T7876] Kernel Offset: disabled