last executing test programs: 10.007709734s ago: executing program 4 (id=479): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x12181, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000fcfff7ff00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0412"], 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 9.720007642s ago: executing program 4 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x2013a000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0x0, 0x16000, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xa}, &(0x7f00000000c0)=0x9, &(0x7f0000000180)=0x2, 0x7, 0x7, 0x0, 0x3, 0x4a, 0x7d7f}}], 0x58}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r6, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0x12) 8.307843214s ago: executing program 2 (id=484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1672d7a6, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21}, 0x50) 8.263399502s ago: executing program 3 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x48) 8.180773996s ago: executing program 2 (id=486): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f0000000040), 0x4) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x0, 0x306, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0xa, 0x0, r1, 0x0, &(0x7f00000005c0)="4b67aeb09587d21bab2b367e66e15c934f3ffa1c0b8e557d6269ae1de494784353817cb686df95eb0936b88fb438bf5a64b1515b853a9da418503fdf22b3d225aaad446b4dc69722ea2cd13344612a9d400d451ee663e5e16e9177e483b24e5dc2cb6d437f0dd2306fdf48f8d7352a211db27562271e5d2dae5e3c2ac6a8e4b5776307e28dba85c1ce5dae8fc4f849011eb0461c452328057e6ca6639142a5a5c3166e40cb20cb9dce4682a921d72d4e383abad3fb51f5df3b1747b1af5a2f58d0111ea5054e5d849ea4f935419bae22b8cb7caf2b7ac2b5f176246c2ebec486ee0208112793f03f2261344896ba51ea51b1f0f5a7ba82", 0xf7, 0x20044000}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 8.006481813s ago: executing program 1 (id=487): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$l2tp(0x2, 0x2, 0x73) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x8100, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.004825847s ago: executing program 2 (id=488): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000300009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) 7.895836921s ago: executing program 3 (id=489): socket$igmp(0x2, 0x3, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x48041}, 0x4008014) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='\x00', 0x0, r4) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.760670099s ago: executing program 1 (id=490): r0 = socket$kcm(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x30, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 7.691953323s ago: executing program 4 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4ca541, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r2 = gettid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r3, 0x5607, 0xb) tkill(r2, 0x11) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x57, 0x8, 0x2, "3258c5c00e7f94ae1e008faa001b0000ba2800", 0x34324142}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x3, @private1, 0x5, 0x2}, 0x20) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r3, &(0x7f0000002080)=0x3a, 0x23b) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="b8750000000f23c00f21f83500000d000f23f866baf80cb894c90585ef66bafc0c65660f3a0be2000f22404df30f068fc990014a74d5840d03000000b9c1040000e200000066d90f38817a04e25d8c920a000000676726650fc71e9eed", 0x5d}], 0x1, 0x58, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 6.762195204s ago: executing program 0 (id=492): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x3, 0x35, 0xfd5f, 0x67, 0x3, 0x4, 0x4, 0xfe00, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0xb, 0x6, [@remote, @multicast1]}]}}}}}}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080)) r3 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(r3, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x2, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000093000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800000010073796e70726f787900000000080003400000012014000000100095578d4eb5c424e04502d52a9c25"], 0xd0}}, 0x20050800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xe, 0x0, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) 6.759003952s ago: executing program 2 (id=493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0x3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r2, 0xb, &(0x7f0000000080)={0xb6d, 0x6}, &(0x7f00000000c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r1, &(0x7f0000000000)={0x1f, 0x8, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) shutdown(r1, 0x1) 6.455955738s ago: executing program 3 (id=494): socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x0, 0x400, 0xffffffff, 0x138}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3c, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'aio_aio12_8\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d6, 0xfffffffe, 0x20000004, 0x6, 0xffd, 0x9, 0xc, 0x1001, 0xd, 0x1, 0x2, 0x5, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x802, 0xe2db, 0x9, 0x4000d, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 6.083500058s ago: executing program 1 (id=495): socket(0xf, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setopts(0x4206, r0, 0x100000000, 0x100020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x88, 0x1, &(0x7f0000000080), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000017000000ff0100000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000840)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x900}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0x0, 0x11000000}, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x28) 3.815094569s ago: executing program 2 (id=496): syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129fddd00090500000000000000e20e00006333ef"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000000)=0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x2, [0x1, 0x3]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r7 = msgget$private(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x12800180, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) msgctl$IPC_SET(r7, 0x1, 0x0) 3.671753735s ago: executing program 0 (id=497): r0 = userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) sched_setscheduler(0x0, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='\xe9d:cb2e') pselect6(0x40, &(0x7f0000000440)={0x3, 0x7, 0x9, 0x7b32, 0x8ac, 0x3c, 0xb1, 0x3}, &(0x7f0000000480)={0x6, 0x9, 0x5, 0x8, 0x81, 0x8, 0x5, 0x1}, &(0x7f0000000500)={0x8, 0x7fffffffffffffff, 0xb661, 0x7, 0x2846, 0x2, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x8]}, 0x8}) 3.651659889s ago: executing program 3 (id=498): r0 = socket(0x18, 0x4, 0x1) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc82) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@delpolicy={0xfc, 0x14, 0x8, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast2, @in=@private=0xa010102, 0x4e20, 0xff80, 0x4e23, 0x881, 0x2, 0x20, 0x20, 0x3b, 0x0, 0xee01}, 0x6e6bb1, 0x1}, [@policy={0xac, 0x7, {{@in=@private=0xa010101, @in6=@empty, 0x4e20, 0x1, 0x4e24, 0x3, 0xa, 0x20, 0x0, 0x3b}, {0x0, 0x88, 0x9, 0x5, 0xa2c, 0x100000001, 0xfffffffffffffff9, 0xf}, {0x5, 0x9, 0x9, 0x5}, 0x6, 0x0, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet(r2, 0x0, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw32={[0xb]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x70) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="00525af96ea7e3b01a285232823045660c19f7718d407fad3e8c322a419693141b796e340fada90c9640404eca2eb44c2625428f845d5dcb4e6855646d3d2abbbc0ab59e934d399bd49ec501198bfa56000000000000001348bbd31e00000000b49c709ff5919366e1fec186679a3c5586a8a1913ceba9cce16d08f1f95cd7b2aea6104e530100008000000000ad122c40f2dd3cd0299a36000000000000000100"/170, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0xd76}, 0x18) 3.589263243s ago: executing program 1 (id=499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac4824362864", 0x1f}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xd, "e80ee304ecb784ec4655260cec"}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x44, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac435"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x298}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000500)="c59b1e237cd43b7f8c0ba6c57b0bd30d77e1f0e8ec557c88cc1df7c47c0297dc79b795291520f1324edfaae5569535b51588397e4bc231fa94eec9215a741838558de4a3e7681788d92dcf50d60e30e59afa7449b7c22f39", 0x58}, {&(0x7f0000000600)="69258062b1e9a8b1621ae4005948c0f808b390ce4bf8e1d8cb9df64e0915c31ba664978d93b280d97258c5cedcf9454ab364d18a9237ca87286fa84f63a41d72ffabac9fc30381069409b33da0747caad8f359fa39ec833d93cec69fed7916229e65b9f3da06641ba2168ac6a18520ad8b05c4b163b3add93b817f3d4cbe1bc7b5d2e01ce78098ed156aa4c0c0a3c40b3f40bcb3adb48aa4f540ee7255e67b60fadcc665a5a707132f19afed1c96daac6c43663eacc63a74e87a7da4a2d994afe2c0621750f2faa8289fea3745a12979d2316fd1b0e4f453db7ac7", 0xdb}], 0x5, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18, 0x117, 0x3, 0x1}], 0x48}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000002840)={0x1634, 0x40, 0x8, 0x70bd29, 0x25dfdbfd, {0x18}, [@nested={0x15e, 0x148, 0x0, 0x1, [@generic="064ea962694382bf1f35a7a33f2258ce96950acaa5b24a2cf1fa833861da3897518a07ad3b124a7f378f14d304cd23f19e75b937670b53b52a4dfdfacbcdc98ec908601ec427ae1419c14816738aa409c853c7b9bee738e04cefc3e6211033e080957f7bb5181042edf8a4c96ed1051bb765801c7499e14928db323004e4d0fb82e45aceb90b6d1642da272843e8d4915c367ee49234f692eec0", @generic="42bd9c68fa237dc22df00b35158b7a8c3f8b99195f478e19e56b937bb4dc36cfa6904ca46500a44f8ea2a0985c91a28164d5e1be01f62c1e42cb9bd28d0ad171d941527007bd37fea7108a1d5444e245b5a425bef726a52f6c0242e6709d29bff195fd5ac51e5ac5ef3182a146d9a82ab5c67a8286e79778d4e74280c2f9b3e27fdf0b7b4a20afc0e6a1bd82d775e4333ea09e3cf9911bdc54c2389cce6ac13f4734619e64b02d20e189f75804e1addc8b2fe1dfbb0308476412e65a", @typed={0x4, 0xe1}]}, @nested={0xfb, 0x63, 0x0, 0x1, [@typed={0x6, 0x10d, 0x0, 0x0, @str='@\x00'}, @generic="45a23b7ce183eebfa0617ab0c09527509b6241608935cab5d4ada180cb50fb804e97772afbc7be660e3e94aa31f0cbd32054c23563030b8fbe9b8c5130f9074c846c98dc68eaf89a43daacfed4534f3697930ce43654f6b00f22b7f030103fb0d743e7f9409aff40f6439415ff4d31bbd310527c3a1fd6513b51ec749eb34bf50bbdd9d28cdfe88102c33378ec3d541623e9f6d1c892d16cb0c4efa91120aed60500d0a75bdf9b3ab6fa4575b5f9f9aa167cea427ec5cf65229260c687e7935899acb5170156928b3f47d220ee1edf663611b63879c4933a263630891e6d4cc924311b015e29e44173900ac477edcd"]}, @nested={0x104c, 0xd1, 0x0, 0x1, [@generic="833e78bee065fbc8b52bf208101beda470ef3977ac50b84e696adacf85bdd664b5238976fcc06fbf9c016839893734609a873a111dd8f1478ed41325e608db160e4c66ffd2d410ab75000d6da593e996ad47cb0d6ccec995c5be06cd8d5ebd4cd96d330c793cca426b5935d4c3443643c503f51afddcbcdd5f3db793c17b22c70926def6c75e62ea54b03403b898b6898671b6085b8678cda728341d3cccf6b7bb4588744af7a64d6ec5e6d630627a71d88ddb79cdb8dc8c270203acb3a00a3434d12e24c37a748ae189876cb754959a801d5341c14727899a0df17bb40d11e9d8588fe0a3795ab4a9bd18209641340ca4f415b441a8c34cefdb2a7437d36f9ce777105ccd80358d863cef1cd2360ce44552a83afd27995c671adc1f28f1a4e5fc74d1e6533880992e256de316e9cfbcbe700d4b5fa1bbe479484882cec2e5d455fc68f5c8cec9c541d77b4a860f538a7af828fed7a9ecc5e446a91d0794d88bd129294efb2c6f2b0f767e9bf5defa208e39f769d62f1078e4ec2586d04393cdbaefffbcd964eafa710a6ea75e959c76893f89e101571cfd77a6e02e0b041d232163daa101f5c95379a5fd876d72648ac49f7cdc6afb06c9045ff6f615e039bd59d1ce75780daf1f203d0151dd6e741b86b00c4dfa14b5c57755283ab8ac5f527452a93229424aebbc12f92fcfcb31fadfa92122b20f2a1fa352ce38cf6d4735dc4c4ff44f7b5fbe926490246ee1eaec8629f5d52c33a2c7ee4cc3d6b02bd0b99a5d54fecc8967e02f8709fbff8e28b59b35ed957a8d5fb7c9b743da2fe00d00d8c0ce372fa0144cef3ec03650ad26856fcd96aa8ab7180c2443cd5d9432b8d7c8f3b60864d271a1f1d64eba38f538497b0ba0d69fb37ad895ea450358cb43b04317b0f32a45eead7a4c25aebd05a42d54f5011c94caab79ce843055af3aabaac3ef3e5bb5110292fe841385c1f59aca6bec704770cb8b8f117f738be62bbf3df7f8abf519353e72223a33b93b4b24fec14eeccb5135ea0f5dd7d0c3cdff357e4165a6d3ac5dfe0a75ab58e0d26f35e6c42a5b05b8a20ff113f02f36fbc682ec40681e6b19585d99e48928fe9a49de1fc2b7c61dad2c0787c1961144c578161ebeb54db84fa0bd835175b97a2b45c551d6ed9e1546f41201ee2102bd081078000e2b16910fd5410874e1d7da1c64ecb2f4ed740fe0f3ed03271ab3f70ac0490dfc802a642ac0459e491360a094a117fd29702eb430fe2fd9bccdf677abddda35be4cf1f40f1f4da8fd03cd5ced2787022051630f94e52a68f5c3cff370a3dafa29bceac9eb5e90ed5149cfb76403c426a3ebee1504a2d7e6d8a7a21b199a806cf4943b6c73dff69a05901a6869e14b4e77ee6282252aae225e47c004fdce19dfeec00ac5303c2f5c19cc7e2f586976bebecb46a82bc85b76b056d964e4ef9256499fcc5dfb82f6899710789da95f50478cbc458967202161f8db803edfd30638f1912c3f2a5c4c27c4c3e7efb239939ccfca0348cd056534d979af71268b9839a38020c85790dfcf13e750d2893a0a57aa2f4dc8a13af4e55b4319a6476399c8ff44e1c48a3fb18068b83e21d9f4acd036f2555797cd8834ea0cea10cb655ab15a7e6efa3d97df5e60c6c8f506d493766bace16c816ed7175f41ddfd3cfa2760c2ef8993b0a9311aa6b6f91fa1972849c8c0677481036bb4301ea764ea1cdb8c1a5af453e87643c9bd2761db1052e3fc77946ada20edb88b854a947333ad918f6528e28cc814d7286e84f67e09a2fc6ed4efdc9f90dbb5fee04a212e69041439aefc27fcb92d5a59fac3dc9b597ebafe43bae63c28861107090a9b5fc8699d483f38b25ebfa592449c2c94bc8904d2c786de5d7e74156ca9ff9587b5efe8b8d502759eafa5cc10dbe0325982e15b715d64ff85d96a6782f2c0431e4c990b264bbfc89b6721fed3d96f8442b4f026835c80c5618ff092c7731679fc039aef136a8584aaa5f85551d9aaa487155690b6309ff893b5ee5099cd7f6383d1057ed5a1a1823df141c3774cf8371bfa6128ac1c4d37ff69869dac593459ad03dfeaa525c9f3249134c7a1b4c891be3b05011905fd480f2451174f0096b39f0db8eb88a248688979fa6d96b68e52a7819abbafb2e0c8387771f37ccdeb3d776721e39c262abeb9c7fe21c90648af0185322e2bb8259d122c9e911433019ddff636daebae927f27591b1e2117982373054113b71537a1bad7886dc8f08c5d31928aa3e3c18891a48dbaa47285767ec4df1e65a776a1481dc9770042c031ba963e7273b2bbfc305c815b60f01a0339e1c7abe953b207045202874360ccb4f0c22288f65e75edad058cec3db98b36fe68ae3d2d8ce23589cc78ab5e892a535916ada0eeca5ab1bfc0ea46ce20adb5d0350d0b10d680d1ef4bde2b36a9d28f12de625dfbf1ab612ffc8aa9381e1511737b87f88cbadc171f4abc5fbdfb8cc1b2a189a05fb373836c434dbc3076b0c65fa8a5e24c62f44e2ad50be8d184f5f76c4fe37cc21c72a2695be820a30d2383e55d19ff492d64e792323acb69d6fa25ef14eba10dba451319f0faa2e25ad15a6378ef481ad66243fd5a4846d4aaa6612d97a7b2d3a21d3d192e83eb6096377483db3a348711b7b06531346970a352cf97ac2ee4339f5573c844d7f7d25a3d840d55efbc2c71f676e26c84076d68f9249e99a931493292ebb96311a81a88fcf949ac4c275abee4534a2b7aa258e6b821bdb35797f6038e57d3387245bb39695cacdcf709124b2f5937992b51c8c1e0f1d31cce18325b96486c576cddff0f1956d2c7ce88e1577271c2bfed1c70ab358e0d7615770bf64061c2c44211b096a53048c8f71a5790526c1621329d55fdf6144a31ad24b7ee03768b1b17cf601d7d2d1266b10c29de69aaa2d3e286ccfc427d31e83d03a46ff6570b2367016c1d9e8be32b19edbb12b78d223e4212f2e2f185f97131dbd1bc1ecbcc7654b5dc8a38f909af3163628683e57591a077682d8275ecebfc1ed0ae3c76692d2f563277ec02d11dde5c0febc5f385f4e3690b055bdb63038ccaa7da04759d3b88a22984011d98a4dabde85e6934a690ec7e700b15592bdb37ef0a1c4776f7d8e61f14de5c36e59dd2bd3e6ca4d7759db073887b6b24f3ea4e6bbbce475fb5b8f58c42e3c41ad29bc8b86ce5629b9b6fdfb03dccc40919f54fc5e656441f774fab2ad6fbe234f6bcb44303ed2bc92e3a70a09adae9ff47f568e6e5b141122d006700bd03b2c649573dbdfa37bff3c26a474d7832ad900c75c4acfed43f99a72c7c1aa4e10db5f8b8e1c9be818616a2c88224fcf8df512d6dcc78a02f9523d16ffb7289a3a9512d9f537d3dc60a49a0d75f263ad282a548ec2bf37fd528ed415eb143848cb067d205ea464b3595cea9a4f8982c2c9cdc16bcbfeb1755fedfe38097c5c4dd5fbe53534ca6a00a1d01cfe5825d4ccfe62eb43f56ad60059c8363297c4c15a87f9835660fbe00c2cdaca72c4156c267adf4e31482065c93e06c1c4d9482cdc500787ae2a77bddb1442acc3ac063f53b0863b37bcc11eaffd01bfeac17f9383ac50db5651caa84cba98f4bf1f203118e1c9fe74e53aa469245ff02a07f2bda043796db3eff7b31140a78ac595230c19ef486e31870701991802b4b2f48475c92898057dbfda503704602589448ecc6da701b2c0e2fecc0ffe248dbe5d933bba229271924882309f39cac45030d51707fb7f483dbc40b6c413d9664b7a6bf44b800950bfaf854d2e97fcac024e47e40c609e15010098fb5428ca1f110a564b6cab77f0730aa7afecfe3201d25938aa8b662592f852f1e63bfd5ea78249b5fe785c8efdee6a2b933e3eb111403a1e579971d6c833284e06d3c3837d9d68273cdaf697f11c27191f122876661ffb7a08829a0637c06ad4f55e127e26555dde9e7f659a0078e39b470543376aceb2a88044d94f0e8ec5426c6cb41a167321106e16dc5023dba0b9217ea69ba9db31407a745282a812aa9ba497973c031a1e5941385b9c621abd1dc557b2c1b9a2adf8613209ba375a7a0e4fc4890bd5203bf1ee8a80e67d8e05133d9ecc910834b86740da5a1701d810b6dd54a06c9acac03ca542346014bc099be432b35ff01ac041ff2f2480c0acfa7f629128327f73c3e89604e7b029a31dac8113c582f697435a25d951be5edd4a94baa94f3b49019981c2d520790f983036de46e0876c1d84bd6326a2a11dc0ada228e5cd02d6fc54725712afff0726e79d015020ae1dbd16eaea06a8b803bd0ae88e6f0016ae6f9c57b7ee8e7f4b7c9ad4d5973e3f7c8e8b229b9ce250ddf5d3b99ba0cd896a02937403084e6c956f8ab55e99478e9cda889d46d8f62a917bfc06826f75786083235e2cda7bea20d28a5866c8da340faf104dad01be86c42edbdbcdb26972bc7b22418c0d92e5108915225b0a6d7dcaf4407d0ad0548f6b52c8b97c51eeccbb102766078443b7daf1cfd3c81dfc3b323ffddc46948a9291abc30b250c356802e49f361b17c72a0e70875ab677015dbbb3f280563d069a810c91d9ac7f384331442a8f04486bd350a75f8b23f464038b79d6a099ce5468a6cbd8e6fae21046d2d6897908e3200360cd55fac0b0e279151544387ec7b0c4f007cfe2f12a2a4fcf28036257958e992b1e64bac58ca111e907a836e31e141177ae6e7100d2f5d5c1b64479aaf82be03f382166f7da51eed9a410eb1d74ef16afbdbd8189121cb51bf4f1c5783d70e736b8851b28aad5db985c0d2bd0b6e0b3ba9ba78fb6893700995d7daecd129bbeffa7ba22e110f9d4316f23a296554ca173d5db818f1f2473f0ec04ae83e730886b0c1bea2822fd9897ec60a1ea6a16ebca858d746b5f59ff4540894f04a220ecbd5eb99862e7cdff1ab0ecf07824d1fe84888ed72f3f72d67df7b5e11ae7237428861fcf6879004077e9ab6b595e6f7dab715e2cdfc4510ede5ba68be2de3e6914b057cd19ae421061a32878982d73f0b06b3cc89bf8e351ecd90dea4d5687da681da440f6b6bd10d71272293ba953dd6675a31f5404b7ea1382997b1c039723a9b7d53cc7f15a51f34673a7a04da939a0dcda4a5cc4ed28eb3e16780dcd63e63d874abee1b9c02a6232efebcc10e584a44191138a28b1744b24b3b51a6f363c3045608d26f4c8a38f1470193bbf6369b4d36155c3be9a63e6d4e336bae4c1e210fe9b2a1ad69db15e79894b878a01c1f45712ae49ad9b5e2bbb4a8d8c564447ce44ddf43d4593599e559e3640c338f50b893a875adc5a8a7a3cf2690e0b09e28799aae9e18cbd4ddabe74b0c16f668ed6e13f9c215735cb60af5fa2ffad163a6f6b45163acbff933ecc27fd107d70c004e7bb8cc95f1644f500e943906f47827147b5e33f9d46af15ef69542743f108e709e750b03ef9ee6501918671a78ca474c5f0c703b8083353ea233339706c4def729ec02ee8483d287ccf7c9ac0410a0706d7aafb4f4df23e3f76854fbe8263ee0d6a3be90c098f4275a537715aba1093090c66902b4aaa8be36b96d33e70bddaaec671501cda8a69d39e1b01679fa2a1d64a6920159d640807b000bb99fb61afde80244c378bb9b6504ef1790871488a89723b491f7933ba28e72b347d1a0ed365d4948d74462ca71c045b48dc82389cc5bc1b9844a09bf9adef98ce5abc7db8532b39f90600ae29df6d08a7f1e7d19af2db67cf2eefcdb7c1513a1d1698d0bffcdfa07594cb44d3b80b3caf416a2e2ece702e64974e2105d2015168625dcc0b001ed522b273c", @nested={0x4, 0x77}, @nested={0x4, 0xd6}, @generic="09b64c6d69f0a76160167d980fe473fb87e60f8a9d050f5679a1ec0f16543cf63a3ee912adb4c19b3dbc798f", @typed={0x12, 0x137, 0x0, 0x0, @str='wp256-generic\x00'}]}, @generic="b48055e2d255", @generic="a522a65afeb9e62ba6ecdd0dd8b3e58aa91408f8c20a72e1d4e88a21e7fbdde2f8038f8fa8d61ee0c61edec963c1b125e9d158a1b9cfc640a93c4586dedf18a7aa94a5443e2fb994627d5311725400aac46471c0e1b7fca32b89760ecd4aa7d804ccd7c537d460086b75f27b31af482a9c3ec28bd9115056a8d0b89024eed90615e57259de11cf618ee699a61fe5c0fd83675b75955cafabf11c86e083b0f6c7244d565a5e9f06", @nested={0x20, 0xf4, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0xf1, 0x0, 0x0, @pid}, @generic="4517fee53e400e74b957edb693b26cd4eedced76012b6088a27ec9472fe808427c7b159fc79ce24911f045032446f1664f00dddf47afc71e8f4995d695da45626571aad5f407580d5e0d7c469ace0cd1c5a8087122d8534658ec7c6fee99e5e78ee7664de6f2f0fd93892a71c2c6f7d104a3a0df27da96257850990797ad641279f56d723f7e56a069e15c1717d487520b80013e6090e50e05f9b1e3cb0e322e026edb7d1f4e81758c9aa95baa5b4b45c5f521256dd28b0cf71d7f5a3103545c202502106f5313bc630228384011d6de5c8b", @nested={0x1cf, 0x4, 0x0, 0x1, [@typed={0x14, 0x86, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x800}, @typed={0xb1, 0xb1, 0x0, 0x0, @binary="184bd8940af9f76dd19805d37734c038005f2cdee9a635b645d1d15cbb80098f2141c312658b2558bcda484142fda9a0cfe4c590e5f528d87a5465709f2e1a9758b72b73f439b5641ed76d12b1921a3af23955d067825a9648df39059063172bc5d8f9e88db385bac645e54e627207aec2b6a0dab129219ce07582435dfaeaf325f420a14c209e65661a20b0b87baa065b376b29e36d2197479e942373c7431f86022935e4e2acdf1d0cb9942a"}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x5}, @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@empty}, @generic, @generic="5d5f9cceae8ee00bb1c30ca64a12733c778fabe8212fa884972640be8d616daf53496e29c5a0b8066c4b3f73253183ec0dfb97dca8e9a2bd5c2bbfc5d2c321ed73d84880bdc8d210d145d40b3efde1ac6176bfe4b7512f0a3bea02a7b665465d95ea186c661b821a9daaccecb70aa8e3da661888c81ec88ce4ad49c48c1950e2b0b7907e5f0f907ad94a22fb7bd14b7c2222322b284bf5d6673b71b73e48e86a92cd698e637498f8499d890818054b5bff15a43882e151d94185c231c5e64a5492c03db960799c34ea98a0411ff910"]}]}, 0x1634}, 0x1, 0x0, 0x0, 0x20}, 0x40804) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904", @ANYBLOB='~'], 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x1, 0x3}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @fwd={0xd}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000900)=""/170, 0x50, 0xaa, 0x1, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r7, 0x4, 0x4, 0x5}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r8 = gettid() tkill(r8, 0x16) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.142583464s ago: executing program 0 (id=500): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x8100, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.017583723s ago: executing program 3 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x3000000) 2.904368865s ago: executing program 0 (id=502): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x12181, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000fcfff7ff00000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0412"], 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) r4 = io_uring_setup(0x25f5, &(0x7f0000000380)={0x0, 0xc63e, 0x800, 0x40000000, 0x1}) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r4, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) 2.655541115s ago: executing program 0 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc45", 0xcb}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80000) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c, 0x70000000}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 2.244428516s ago: executing program 4 (id=504): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x2b, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x95db, 0x800, 0x2, 0x32c}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x4, 0x1}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x7}}, 0x9, 0xb, 0xc, 0x0, 0x2, 0x9, 0x5}, &(0x7f00000000c0)=0x9c) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) (async, rerun: 32) openat$incfs(0xffffffffffffff9c, 0x0, 0x4242, 0x11a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async, rerun: 32) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x5, 0x4a, 0x37, 0x7a}]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x2}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 64) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) (rerun: 64) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000300)=0xc) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x11c, &(0x7f0000000080)=0x1, 0x0, 0x4) (rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) (async, rerun: 32) io_uring_enter(r1, 0x72f3, 0x80fbff, 0x0, 0x0, 0x0) (rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.11189319s ago: executing program 0 (id=505): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x9d, 0xbb, 0x8b, 0x8, 0x112a, 0x5, 0xa2ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x23, 0x45, 0x6, 0x0, [], [{{0x9, 0x5, 0x84, 0xe, 0x8, 0x3, 0x4, 0x4}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSCTTY(r1, 0x540e, 0xfffffffffffffffa) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)={0x8dc, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8ad, 0x48, 0x0, 0x1, [@nested={0x23a, 0x83, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @pid=r3}, @generic="acccf5a4325515a801158c226dcdd3a59eb264f160f9b6a462eaa0b75feb855de1f274e5937d1fe5768cac206e5947b56924c73d622ffd89a690", @nested={0x1eb, 0x8a, 0x0, 0x1, [@nested={0x4, 0xf6}, @nested={0x4, 0x6a}, @nested={0x4, 0xf2}, @generic="28efd07da5f215d190bdeb5c35b49aaaef0fee23ede421587e8fea7ff54b976b26b1871aa82f57939981675feb903262be7f53bfd901bf9e7bcbff77fb2f8ef8f9b6eecf10bddd7f182011214b1d7075221afd48acffd400386fa036fd9eea8ea4cb6475f2f0a9af2ebfb24fef0dc0a4a9b791260f680b465ce2a7b872ebc22c6b00d6c400dea5b4f15961264f6342f4cebe283436ec7f9bc4bee9b20c345468e1e89ad8cd6a7cb226c238e431045c03d04695c80d3e588e2ec45fd081a0e470c2b9b966e32263499d0ce999e38feb0315deb282095ddec32aa7b8900d48b1d3d908451b05e867f0f9a304", @generic="28ec0c", @generic="bbbb4c43d45d32f8afedca9f3b46b525df42f749dc75cbe7bd14e7aebbb83a3611a3", @generic="6d4281a51b3522bc17b283fbe4c384dfec74f9d492e48f7ab3b2c2c058b644e5cbca788e0022febb3fd583ce31b10c57a4a3a6cebd79a2305fac026df02e2b0d666dc0c09b745c2f615f9d8244fcc591187c26b0978e93b853035e425494bcb23be331ef4ccab27444d291145a437759ccfee41f42ecef17c8c0ef07b6699a36f8a00e2d963f61985b31fcf7f5b5246901c578757ecfeac0f2a7d20053b3438fd245ea7d34be7b74a1637052fc50d8e6e0331ccd23e172299d83ba", @typed={0x4, 0x2d}, @typed={0x8, 0x2b, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x10a}]}, @nested={0x8, 0x58, 0x0, 0x1, [@nested={0x4, 0x14c}]}]}, @generic="2448645ba46aeb0cdadf3480e3d418bec84d9099ad7f1d3f5aaffeba1a21ddd581bf8ab74a06e62333a374803da9f693a734292823274625db0d908fa5c0a8a29200dd51f583c2bee8f9c3a2745a45646c1d854d81a39d7a557c9872724702b4453f6dac8e99e82e3e199bcfc222ae8831c803ac92d3f8be435844fa14ad3ae5a60697d0ace53682bb481aeb2b9e0b627c96a3defccbf6ee940a38c217600d73b625689ac3aa02e103412134f73ed9683306c872d95e43adba8e98a6088f4f4d720062839952dfd0de56a6ee", @generic="1333dae3f20932438d8e8cbdd8176cbc9478b597c5e05d0b1e64d5aacaadaf20e91783eac5d9e716bdb6405744c53d196628bb8cc98e", @typed={0x5, 0xbd, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x61, 0x0, 0x0, @u32=0x9}, @generic="c5be420de900fae145739749ba81669b236d084932d95c5a096a1a71229ba7f54ea48d6e645bcd37eef54cf37d2b2b7a68bda97c017c1ea1813145287d67ca766c0556d77c68f8012d0445ddcdfa09922acfe5206ac8074cd2dd44df5062e6ff12b88e506a45520805c1db1044e92808da86a0fa3bc3db332622f99188071130e85aa6f4c5c7b984aaef5866b51de7731181c1f04dac0598dccd1dd69d79b972b8e8f47f671532ef6a3a03ed15c87e64d484cc33cf6f65d7dbe8bf56ad8e53053257e6577c872088981893a19af0aabf", @nested={0x3f4, 0xf4, 0x0, 0x1, [@nested={0x8, 0x57, 0x0, 0x1, [@nested={0x4, 0x24}]}, @generic="148153d120807588967b25c3b1bf834aef79b60cdc7d0723e2d713fc0ab89571cd02892b41438bf3cc11774b58c0c9dfd4326f9bf185587089d85993adbf28db59e058cd5d60ac5d3dd668454f0db74e004e84822c6584908ee22b583cf2af4c34ea6811706e89d0d3c678c89ff22f6ffa2469bb5df376a5d36030e36b22", @typed={0x8, 0xd5, 0x0, 0x0, @pid=r3}, @nested={0x2d7, 0x34, 0x0, 0x1, [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}, @generic="b12bafc5dc19f6beb3876623da256dad039c4f7086a85de26a9072902faf651343d4a6deadeab7c6161c93645a0da2efba4b421b75a5dc12dfb765d8d45e9b53eece9a06d67a8c368f65b3b7f32243672f0f8cd43c4b5f8ceecbc7469910cadc5afeb0580fe25ddd598cf552109d78498464a8fa971be18647b5d202c12b7ff57d6e59e4c0406b98875031e678a007e58957c7e897d0af595299d7c721056a782de05e87f60c60cda274f2e5c83053b8", @generic="6f6668e1fc2b43d39bcb2b531d3822e47ea5e9770b92f7d81cf85224f9fb9a8a6b46056353421b3241c58bb0a311984a7c01c625b8158826b2ce8185faca5afaf33ddbb17b0c89f807d9c33107626a5721a481ad60e3851c549a122962838f6f8e163f", @generic="6c15b78d1f7876b2c47760b470d066bdf1316dcbf38b993a66cd3867b4fbe7ae70c2872a21c7269aaaa4a8d0928c5023617856268163332fbbeb70a35033ffef785a331f095432d1691379e905cac4607398fb150875a1b743be06059d366310b0734dcf98be01e19cf74a9488c5a0ae4721fd974ca67431409819e25e29c8bceef7e0297d4b7d1e7ec434f27cd0ed4f621eb3b71a6d5ff64262b258168dd55639f017a979efd60392b2197b43e5e91f0e1be797d6e3e88f06246ea9e62c02ff5e0950685012eed8cfccf907388abbc3cb", @typed={0x4, 0x55}, @generic="8ff71d8e3c48caa97f766a41360b9a6b246015b5e1539655c03215f03731b74b941c3a0459d27db3d9497433779aa4cc459af9421b743b48125af11c9be2f2bd36d4243cb44e0426411f6c547f89decd1dc12f562d39dd812b4d9e4b438657", @generic="3c31155fde81c78a990fe786569b35588db658cf21da992147e73454d303c7ab7b1cb9755e216bf1bc644c7fa414cd5a7288784d23b76def719aa558131ff65c32a09542cc466f936e95b92e70a6eb036ce47b8daa5201805108bfb917a8b7c382f6c85da79a7194b6f4e6614b8b01b522c2743bab8c4a34"]}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x7fffffff}, @generic="f070359c46a0b863cab791dd549b9314913fea78b9ddf170afaa2bc946083827c04ad63276ab3a0fe758666d79de36374fb333ee043815faa9a921832f09d444e74133fff35de9fadeacc77592cce591d14b9c53b4beb749d87fa9322409a48bb7591e060f48f8641cd0e7600882e6a6e0f336b89791fe26acfbff2fc9a2ab2cd5a2"]}, @generic="078b8ee0539b0d2954d004691c46818e09f1ada4268540cfba3614561f43968920eca313bc422b3eef21982222f1cc87ff7cc1be06d16a4677bf66cf502d3de9c0c66d843289a4c6f4579fb5e5a1243c064a1569325112bec03923ae0b1bae9f0fca190596d4995b997323a31132f621d3fafe7874c0f0a729b98bfda1f001cd42d8dd3ca24a126eff3cee541a0ad4abe09ba4e13f734f"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @u32=0x5}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4000000000}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0xffff, 0x0, 'sh\x00', 0x24, 0x0, 0x7f}, 0x2c) 1.091720709s ago: executing program 3 (id=506): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000008050000000f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r5, &(0x7f0000000000)=""/90, 0x5a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents64(r5, &(0x7f00000001c0)=""/122, 0x7a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r2, r3, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000019380)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021200010000000a09041d"], 0x0) 651.627168ms ago: executing program 4 (id=507): ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0xe000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x8b}, {0x0, 0xdddd0000, 0xb, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xc, 0x6, 0x5, 0x42, 0xb, 0x7f, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0xa, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x8}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x4, 0x40, 0x70}, {0x8080000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x1000, 0xbf4}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 399.640206ms ago: executing program 4 (id=508): socket(0x400000000010, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 335.613862ms ago: executing program 2 (id=509): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @remote, [], "1e520b4c951ee12e"}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x80, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x7, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xfffffffb, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffdf, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) poll(&(0x7f0000000480)=[{r0, 0x4042}, {r0, 0x1009}], 0x2, 0x100) 119.767927ms ago: executing program 1 (id=510): r0 = userfaultfd(0x80801) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) sched_setscheduler(0x0, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='\xe9d:cb2e') pselect6(0x40, &(0x7f0000000440)={0x3, 0x7, 0x9, 0x7b32, 0x8ac, 0x3c, 0xb1, 0x3}, &(0x7f0000000480)={0x6, 0x9, 0x5, 0x8, 0x81, 0x8, 0x5, 0x1}, &(0x7f0000000500)={0x8, 0x7fffffffffffffff, 0xb661, 0x7, 0x2846, 0x2, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x8]}, 0x8}) 0s ago: executing program 1 (id=511): r0 = socket(0x18, 0x4, 0x1) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc82) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@delpolicy={0xfc, 0x14, 0x8, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast2, @in=@private=0xa010102, 0x4e20, 0xff80, 0x4e23, 0x881, 0x2, 0x20, 0x20, 0x3b, 0x0, 0xee01}, 0x6e6bb1, 0x1}, [@policy={0xac, 0x7, {{@in=@private=0xa010101, @in6=@empty, 0x4e20, 0x1, 0x4e24, 0x3, 0xa, 0x20, 0x0, 0x3b}, {0x0, 0x88, 0x9, 0x5, 0xa2c, 0x100000001, 0xfffffffffffffff9, 0xf}, {0x5, 0x9, 0x9, 0x5}, 0x6, 0x0, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$inet(r2, 0x0, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw32={[0xb]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x70) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r4, 0x4b49, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="00525af96ea7e3b01a285232823045660c19f7718d407fad3e8c322a419693141b796e340fada90c9640404eca2eb44c2625428f845d5dcb4e6855646d3d2abbbc0ab59e934d399bd49ec501198bfa56000000000000001348bbd31e00000000b49c709ff5919366e1fec186679a3c5586a8a1913ceba9cce16d08f1f95cd7b2aea6104e530100008000000000ad122c40f2dd3cd0299a36000000000000000100"/170, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0xd76}, 0x18) kernel console output (not intermixed with test programs): b error = -90 [ 102.923399][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.042190][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.052875][ T5962] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 103.102776][ T30] audit: type=1400 audit(1766833687.345:348): avc: denied { execute } for pid=6285 comm="syz.1.98" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.193195][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.202201][ T5962] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 103.252881][ T5962] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 103.338652][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.347726][ T5962] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 103.377236][ T30] audit: type=1400 audit(1766833687.355:349): avc: denied { rename } for pid=6285 comm="syz.1.98" name="file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.393811][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.416814][ T5962] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 103.513180][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.522221][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.544187][ T5962] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 103.557115][ T30] audit: type=1400 audit(1766833688.345:350): avc: denied { write } for pid=6307 comm="syz.3.100" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.563908][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.581681][ T5962] usb 5-1: USB disconnect, device number 4 [ 103.614896][ T30] audit: type=1400 audit(1766833688.535:351): avc: denied { unlink } for pid=5806 comm="syz-executor" name="file7" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.664066][ T5809] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.673240][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.713725][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.736929][ T6310] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 104.012117][ T6326] program syz.4.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.401444][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 104.419747][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.451153][ T5809] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 104.468266][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.483046][ T5809] usb 4-1: config 0 descriptor?? [ 104.497871][ T5809] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 104.694249][ T5886] usb 4-1: USB disconnect, device number 7 [ 104.926581][ T5809] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 104.935050][ T6332] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.036119][ T5962] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.052651][ T5962] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.065172][ T5962] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.083002][ T5962] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.301756][ T5962] rtc rtc0: __rtc_set_alarm: err=-22 [ 105.309581][ T6335] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.318135][ T5809] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 105.327705][ T5809] usb 3-1: config 0 has no interface number 0 [ 105.373760][ T5809] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 105.382939][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.390916][ T5809] usb 3-1: Product: syz [ 105.452914][ T5809] usb 3-1: Manufacturer: syz [ 105.473742][ T5809] usb 3-1: SerialNumber: syz [ 105.477597][ T6340] FAULT_INJECTION: forcing a failure. [ 105.477597][ T6340] name failslab, interval 1, probability 0, space 0, times 1 [ 105.491068][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(full) [ 105.491089][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.491099][ T6340] Call Trace: [ 105.491105][ T6340] [ 105.491112][ T6340] dump_stack_lvl+0x16c/0x1f0 [ 105.491139][ T6340] should_fail_ex+0x512/0x640 [ 105.491164][ T6340] ? kmem_cache_alloc_noprof+0x62/0x770 [ 105.491186][ T6340] should_failslab+0xc2/0x120 [ 105.491209][ T6340] kmem_cache_alloc_noprof+0x83/0x770 [ 105.491227][ T6340] ? __asan_memcpy+0x3c/0x60 [ 105.491242][ T6340] ? __kernfs_new_node+0xd2/0x990 [ 105.491266][ T6340] ? __kernfs_new_node+0xd2/0x990 [ 105.491284][ T6340] __kernfs_new_node+0xd2/0x990 [ 105.491303][ T6340] ? __pfx___kernfs_new_node+0x10/0x10 [ 105.491320][ T6340] ? find_held_lock+0x2b/0x80 [ 105.491337][ T6340] ? kernfs_root+0xee/0x2a0 [ 105.491353][ T6340] kernfs_new_node+0x13c/0x1e0 [ 105.491371][ T6340] __kernfs_create_file+0x53/0x350 [ 105.491383][ T6340] cgroup_addrm_files+0x546/0xc20 [ 105.491400][ T6340] ? __lock_acquire+0x436/0x2890 [ 105.491412][ T6340] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 105.491429][ T6340] ? css_next_child+0xcf/0x2d0 [ 105.491447][ T6340] ? css_next_descendant_pre+0x58/0x1a0 [ 105.491465][ T6340] css_populate_dir+0x343/0x570 [ 105.491484][ T6340] cgroup_mkdir+0x5c4/0x12e0 [ 105.491498][ T6340] ? __pfx_cgroup_mkdir+0x10/0x10 [ 105.491510][ T6340] kernfs_iop_mkdir+0x111/0x190 [ 105.491524][ T6340] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 105.491542][ T6340] vfs_mkdir+0x731/0xb60 [ 105.491557][ T6340] do_mkdirat+0x442/0x5e0 [ 105.491574][ T6340] ? __pfx_do_mkdirat+0x10/0x10 [ 105.491592][ T6340] ? getname_flags.part.0+0x1c5/0x550 [ 105.491608][ T6340] __x64_sys_mkdirat+0x83/0xb0 [ 105.491624][ T6340] do_syscall_64+0xcd/0xf80 [ 105.491640][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.491652][ T6340] RIP: 0033:0x7f8d1e58f749 [ 105.491661][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.491671][ T6340] RSP: 002b:00007f8d1f4e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 105.491681][ T6340] RAX: ffffffffffffffda RBX: 00007f8d1e7e5fa0 RCX: 00007f8d1e58f749 [ 105.491688][ T6340] RDX: 00000000000001c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 105.491695][ T6340] RBP: 00007f8d1f4e0090 R08: 0000000000000000 R09: 0000000000000000 [ 105.491701][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.491707][ T6340] R13: 00007f8d1e7e6038 R14: 00007f8d1e7e5fa0 R15: 00007ffdf7d88cc8 [ 105.491721][ T6340] [ 105.491733][ T6340] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 105.543621][ T5809] usb 3-1: config 0 descriptor?? [ 106.143049][ T30] audit: type=1400 audit(1766833691.115:352): avc: denied { open } for pid=6341 comm="syz.1.110" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 106.363228][ T30] audit: type=1400 audit(1766833691.335:353): avc: denied { create } for pid=6350 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.438395][ T5809] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 106.449407][ T5809] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 106.459709][ T5809] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 106.467589][ T5809] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 106.478152][ T5809] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 106.552847][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.820863][ T30] audit: type=1400 audit(1766833691.705:354): avc: denied { mounton } for pid=6350 comm="syz.0.112" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.953333][ T30] audit: type=1400 audit(1766833691.705:355): avc: denied { mount } for pid=6350 comm="syz.0.112" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.013158][ T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.034824][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.064275][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 107.076080][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 107.085253][ T24] usb 4-1: Manufacturer: syz [ 107.096542][ T24] usb 4-1: config 0 descriptor?? [ 107.140392][ T5809] usb 3-1: USB disconnect, device number 4 [ 107.174787][ T5809] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 107.210986][ T5809] keyspan 3-1:0.133: device disconnected [ 107.388116][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.405517][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.441894][ T24] rc_core: IR keymap rc-hauppauge not found [ 107.451996][ T24] Registered IR keymap rc-empty [ 107.482783][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 107.927097][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'. [ 107.946878][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 108.208488][ C1] igorplugusb 4-1:0.0: receive overflow, at least 27 lost [ 108.586629][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 108.586644][ T30] audit: type=1400 audit(1766833693.565:357): avc: denied { write } for pid=6354 comm="syz.1.113" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.736797][ T5919] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.060276][ T6381] SELinux: Context Ü is not valid (left unmapped). [ 109.067798][ T6381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.270842][ T5919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.321489][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.352788][ T5919] usb 5-1: Product: syz [ 109.365711][ T5919] usb 5-1: Manufacturer: syz [ 109.396418][ T5919] usb 5-1: SerialNumber: syz [ 109.429577][ T5919] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.443228][ T30] audit: type=1400 audit(1766833694.415:358): avc: denied { firmware_load } for pid=5809 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 109.523048][ T5919] usb 4-1: USB disconnect, device number 8 [ 109.575157][ T5809] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.811933][ T6384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.858242][ T6378] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.875951][ T6295] IPVS: starting estimator thread 0... [ 109.893804][ T30] audit: type=1400 audit(1766833694.875:359): avc: denied { bind } for pid=6385 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.972985][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.014245][ T6386] IPVS: using max 46 ests per chain, 110400 per kthread [ 110.015200][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.050284][ T6389] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 110.057054][ T30] audit: type=1400 audit(1766833694.895:360): avc: denied { connect } for pid=6385 comm="syz.3.121" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.078921][ T6389] VFS: Can't find a romfs filesystem on dev nullb0. [ 110.078921][ T6389] [ 110.250751][ T6295] usb 5-1: USB disconnect, device number 5 [ 110.256893][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.272331][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.280411][ T30] audit: type=1400 audit(1766833694.895:361): avc: denied { setopt } for pid=6385 comm="syz.3.121" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.306292][ T5919] rtc rtc0: __rtc_set_alarm: err=-22 [ 110.345302][ T30] audit: type=1400 audit(1766833694.905:362): avc: denied { write } for pid=6385 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.400533][ T30] audit: type=1400 audit(1766833695.325:363): avc: denied { read } for pid=6388 comm="syz.2.122" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.555464][ T30] audit: type=1400 audit(1766833695.375:364): avc: denied { create } for pid=6388 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.583231][ T30] audit: type=1400 audit(1766833695.375:365): avc: denied { write } for pid=6388 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.602877][ T5809] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 110.613110][ T5809] ath9k_htc: Failed to initialize the device [ 110.978673][ T6295] usb 5-1: ath9k_htc: USB layer deinitialized [ 112.277449][ T30] audit: type=1804 audit(1766833697.255:366): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.129" name="/newroot/33/file0" dev="tmpfs" ino=193 res=1 errno=0 [ 112.366936][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.535632][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.723252][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.737026][ T5809] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 112.746108][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.763763][ T5809] usb 2-1: config 0 descriptor?? [ 113.279360][ T5809] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 113.303836][ T5809] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 113.592249][ T2223] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.646934][ T6427] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.053717][ T6434] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.087028][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.110615][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.336627][ T2223] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.341923][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.362808][ T2223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.370524][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 114.393525][ T2223] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.412255][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 114.422790][ T2223] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.456975][ T2223] usb 3-1: Manufacturer: syz [ 114.485332][ T2223] usb 3-1: config 0 descriptor?? [ 114.566913][ T2223] rc_core: IR keymap rc-hauppauge not found [ 114.582750][ T2223] Registered IR keymap rc-empty [ 114.588800][ T2223] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 114.637877][ T2223] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 114.696197][ T9] usb 2-1: USB disconnect, device number 4 [ 114.704607][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.713547][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.134831][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.487928][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.524306][ T30] audit: type=1400 audit(1766833700.505:367): avc: denied { mount } for pid=6423 comm="syz.2.133" name="/" dev="ramfs" ino=12292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.529445][ T6424] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 115.555288][ T30] audit: type=1400 audit(1766833700.505:368): avc: denied { mounton } for pid=6423 comm="syz.2.133" path="/bus" dev="ramfs" ino=12294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 115.677920][ T6424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.693157][ T6424] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 115.761516][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 116.092532][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 116.103264][ T30] audit: type=1400 audit(1766833701.075:369): avc: denied { mount } for pid=6423 comm="syz.2.133" name="/" dev="overlay" ino=12295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.279864][ T6295] usb 3-1: USB disconnect, device number 5 [ 116.724936][ T30] audit: type=1400 audit(1766833701.675:370): avc: denied { bind } for pid=6470 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.823584][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.915207][ T30] audit: type=1400 audit(1766833701.895:371): avc: denied { bind } for pid=6472 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.032800][ T9] usb 4-1: device descriptor read/64, error -71 [ 117.359166][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.522780][ T9] usb 4-1: device descriptor read/64, error -71 [ 117.926439][ T9] usb usb4-port1: attempt power cycle [ 118.312844][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 118.474702][ T6490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.520907][ T9] usb 4-1: device descriptor read/8, error -71 [ 118.852471][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.874660][ T9] usb 4-1: device descriptor read/8, error -71 [ 118.935559][ T6508] Bluetooth: MGMT ver 1.23 [ 118.940682][ T30] audit: type=1400 audit(1766833703.915:372): avc: denied { write } for pid=6503 comm="syz.2.154" path="socket:[11837]" dev="sockfs" ino=11837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.948864][ T6507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.973260][ T5809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.980767][ T5809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.988418][ T5809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.003369][ T9] usb usb4-port1: unable to enumerate USB device [ 119.009996][ T5809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.017770][ T5809] rtc rtc0: __rtc_set_alarm: err=-22 [ 119.055244][ T30] audit: type=1400 audit(1766833703.945:373): avc: denied { setopt } for pid=6503 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.119857][ T6507] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.128991][ T6507] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 119.142362][ T30] audit: type=1400 audit(1766833703.945:374): avc: denied { read } for pid=6503 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.179476][ T6507] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3cde:bbff:fe65:81c3 error=-28 [ 119.204224][ T30] audit: type=1400 audit(1766833703.945:375): avc: denied { bind } for pid=6503 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.265796][ T30] audit: type=1400 audit(1766833703.955:376): avc: denied { read } for pid=6503 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.168811][ T6520] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.664458][ T6521] trusted_key: syz.2.157 sent an empty control message without MSG_MORE. [ 121.034619][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.323063][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.324367][ T6525] Invalid logical block size (-625016833) [ 121.330558][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.400556][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.410081][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 121.422061][ T6507] infiniband syz0: set down [ 121.442849][ T6507] infiniband syz0: added bond0 [ 121.462634][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 121.462646][ T30] audit: type=1400 audit(1766833706.435:382): avc: denied { setopt } for pid=6528 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.497964][ T6530] overlayfs: conflicting lowerdir path [ 121.579582][ T6507] RDS/IB: syz0: added [ 121.613051][ T6507] smc: adding ib device syz0 with port count 1 [ 121.619289][ T6507] smc: ib device syz0 port 1 has no pnetid [ 122.160160][ T30] audit: type=1400 audit(1766833707.115:383): avc: denied { setopt } for pid=6535 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.817714][ T6554] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.868935][ T6554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.923835][ T30] audit: type=1400 audit(1766833707.905:384): avc: denied { watch } for pid=6553 comm="syz.4.167" path="/34" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.702397][ T6568] netlink: 'syz.1.169': attribute type 7 has an invalid length. [ 123.710294][ T6568] netlink: 'syz.1.169': attribute type 8 has an invalid length. [ 123.828376][ T30] audit: type=1400 audit(1766833708.655:385): avc: denied { create } for pid=6556 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.892160][ T6571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.907614][ T30] audit: type=1400 audit(1766833708.665:386): avc: denied { connect } for pid=6556 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.049147][ T30] audit: type=1400 audit(1766833708.665:387): avc: denied { create } for pid=6556 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.133069][ T6576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.172'. [ 125.146184][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 126.902806][ T5859] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 127.081230][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.177053][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.263750][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.278984][ T30] audit: type=1400 audit(1766833712.215:388): avc: denied { bind } for pid=6605 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.298321][ T5859] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 127.452773][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.494208][ T5859] usb 4-1: config 0 descriptor?? [ 127.686470][ T30] audit: type=1400 audit(1766833712.665:389): avc: denied { write } for pid=6610 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.859957][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 127.881669][ T5859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.944688][ T5859] usb 4-1: USB disconnect, device number 13 [ 128.520322][ T6618] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 129.416217][ T6640] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.707488][ T6643] vlan2: entered allmulticast mode [ 129.712677][ T6643] veth0_to_bond: entered allmulticast mode [ 130.561278][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.568885][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.574279][ T6111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.576819][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.591131][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.598470][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 130.610201][ T6643] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.019917][ T30] audit: type=1400 audit(1766833715.935:390): avc: denied { ioctl } for pid=6646 comm="syz.1.192" path="socket:[13328]" dev="sockfs" ino=13328 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.094310][ T6111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.166458][ T6659] IPVS: set_ctl: invalid protocol: 38 10.1.1.2:8188 [ 131.248007][ T6111] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 131.261921][ T6111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.494893][ T6111] usb 3-1: config 0 descriptor?? [ 131.908319][ T6666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.948655][ T6111] steelseries 0003:1038:12B6.0004: item fetching failed at offset 6/7 [ 131.973689][ T6111] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22 [ 132.142594][ T30] audit: type=1400 audit(1766833717.115:391): avc: denied { read } for pid=6669 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.296328][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.308540][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.719059][ T6111] usb 3-1: USB disconnect, device number 6 [ 132.798791][ T30] audit: type=1400 audit(1766833717.775:392): avc: denied { getopt } for pid=6677 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.830971][ T30] audit: type=1400 audit(1766833717.805:393): avc: denied { relabelfrom } for pid=6680 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.073053][ T30] audit: type=1400 audit(1766833717.805:394): avc: denied { relabelto } for pid=6680 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.586800][ T6695] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 134.813506][ T5809] IPVS: starting estimator thread 0... [ 134.903150][ T6697] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.932966][ T6700] IPVS: using max 77 ests per chain, 184800 per kthread [ 134.933678][ T6697] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.001733][ T6701] syz.1.205 (6701): /proc/6701/oom_adj is deprecated, please use /proc/6701/oom_score_adj instead. [ 135.053134][ T6697] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 135.117583][ T6697] lo: entered allmulticast mode [ 135.133731][ T6697] tunl0: entered allmulticast mode [ 135.144547][ T6697] gre0: entered allmulticast mode [ 135.313097][ T6697] gretap0: entered allmulticast mode [ 135.362958][ T6697] erspan0: entered allmulticast mode [ 135.372303][ T6697] ip_vti0: entered allmulticast mode [ 135.379885][ T6697] ip6_vti0: entered allmulticast mode [ 135.388357][ T6697] sit0: entered allmulticast mode [ 135.405823][ T6697] ip6tnl0: entered allmulticast mode [ 135.456323][ T6697] ip6gre0: entered allmulticast mode [ 135.493689][ T6697] syz_tun: entered allmulticast mode [ 135.513619][ T6697] ip6gretap0: entered allmulticast mode [ 135.525523][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.533102][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.545380][ T6697] bridge0: entered allmulticast mode [ 135.563828][ T6697] vcan0: entered allmulticast mode [ 135.571457][ T6697] bond0: entered allmulticast mode [ 135.576925][ T6697] bond_slave_0: entered allmulticast mode [ 135.582702][ T6697] bond_slave_1: entered allmulticast mode [ 135.601613][ T6697] dummy0: entered allmulticast mode [ 135.620109][ T6697] nlmon0: entered allmulticast mode [ 135.646062][ T6697] caif0: entered allmulticast mode [ 135.673987][ T6697] batadv0: entered allmulticast mode [ 135.694442][ T6697] vxcan0: entered allmulticast mode [ 135.700527][ T6697] vxcan1: entered allmulticast mode [ 135.706606][ T6697] veth0: entered allmulticast mode [ 135.713265][ T6697] veth1: entered allmulticast mode [ 135.720812][ T6697] wg0: entered allmulticast mode [ 135.729143][ T6697] wg1: entered allmulticast mode [ 135.737761][ T6697] wg2: entered allmulticast mode [ 135.747297][ T6697] veth0_to_bridge: entered allmulticast mode [ 135.758985][ T6697] veth1_to_bridge: entered allmulticast mode [ 135.770509][ T6697] veth0_to_bond: entered allmulticast mode [ 135.776873][ T30] audit: type=1400 audit(1766833720.745:395): avc: denied { create } for pid=6728 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.799803][ T6697] veth1_to_bond: entered allmulticast mode [ 135.817841][ T6697] veth0_to_team: entered allmulticast mode [ 135.829677][ T6697] team_slave_0: entered allmulticast mode [ 135.841046][ T6697] veth1_to_team: entered allmulticast mode [ 135.855816][ T6697] team_slave_1: entered allmulticast mode [ 135.861819][ T6697] veth0_to_batadv: entered allmulticast mode [ 135.888169][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.900385][ T6697] batadv_slave_0: entered allmulticast mode [ 135.909090][ T6697] veth1_to_batadv: entered allmulticast mode [ 135.917104][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.925011][ T6697] batadv_slave_1: entered allmulticast mode [ 135.940752][ T6697] xfrm0: entered allmulticast mode [ 135.951814][ T6697] veth0_to_hsr: entered allmulticast mode [ 135.960506][ T6697] hsr_slave_0: entered allmulticast mode [ 135.968396][ T6697] veth1_to_hsr: entered allmulticast mode [ 135.976366][ T6697] hsr_slave_1: entered allmulticast mode [ 135.984902][ T6697] hsr0: entered allmulticast mode [ 135.991385][ T6697] veth1_virt_wifi: entered allmulticast mode [ 136.009143][ T6697] veth0_virt_wifi: entered allmulticast mode [ 136.017812][ T6697] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 136.026218][ T6697] veth1_vlan: entered allmulticast mode [ 136.035314][ T6697] veth0_vlan: entered allmulticast mode [ 136.051404][ T6697] vlan0: entered allmulticast mode [ 136.056864][ T6697] vlan1: entered allmulticast mode [ 136.063872][ T6697] macvlan0: entered allmulticast mode [ 136.080164][ T6697] macvlan1: entered allmulticast mode [ 136.098583][ T6697] ipvlan0: entered allmulticast mode [ 136.104839][ T6697] ipvlan1: entered allmulticast mode [ 136.110493][ T6697] veth1_macvtap: entered allmulticast mode [ 136.118531][ T6697] veth0_macvtap: entered allmulticast mode [ 136.127451][ T6697] macvtap0: entered allmulticast mode [ 136.135070][ T6697] macsec0: entered allmulticast mode [ 136.142124][ T6697] geneve0: entered allmulticast mode [ 136.150353][ T6697] geneve1: entered allmulticast mode [ 136.158887][ T6697] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 136.168291][ T6697] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 136.176836][ T6697] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 136.190539][ T6697] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 136.201833][ T6697] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 136.210187][ T6697] virt_wifi0.0: entered allmulticast mode [ 136.216180][ T6697] rose0: entered allmulticast mode [ 136.222337][ T6707] tipc: Started in network mode [ 136.227416][ T6707] tipc: Node identity 726dc0477ffa, cluster identity 4711 [ 136.234731][ T6707] tipc: Enabled bearer , priority 0 [ 136.329685][ T6721] syzkaller0: entered promiscuous mode [ 136.338876][ T5859] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 136.434337][ T6721] syzkaller0: entered allmulticast mode [ 136.443511][ T6721] tipc: Resetting bearer [ 136.452153][ T6705] tipc: Resetting bearer [ 137.089862][ T5859] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 137.098190][ T5859] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 137.240098][ T5859] usb 4-1: config 0 has no interface number 0 [ 137.254342][ T5859] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 137.395886][ T5859] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 137.413643][ T5859] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 137.442754][ T5859] usb 4-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.466786][ T30] audit: type=1400 audit(1766833722.445:396): avc: denied { create } for pid=6748 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.494284][ T5859] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 137.503727][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.511702][ T5859] usb 4-1: Product: syz [ 137.518991][ T30] audit: type=1400 audit(1766833722.475:397): avc: denied { getopt } for pid=6748 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.519888][ T5859] usb 4-1: Manufacturer: syz [ 137.597040][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 137.613854][ T5859] usb 4-1: SerialNumber: syz [ 138.368661][ T30] audit: type=1400 audit(1766833722.595:398): avc: denied { write } for pid=6748 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.444141][ T5859] usb 4-1: config 0 descriptor?? [ 138.449829][ T6735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.385886][ T24] usb 4-1: USB disconnect, device number 14 [ 140.519415][ T6705] tipc: Disabling bearer [ 140.544674][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.557812][ T6781] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.575517][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.905144][ T89] tipc: Node number set to 228048967 [ 140.933822][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.964420][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.972630][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.993770][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.033662][ T6790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=6790 comm=syz.2.228 [ 141.237031][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.283799][ T30] audit: type=1326 audit(1766833726.255:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.2.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x0 [ 141.303012][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.326517][ T89] rtc rtc0: __rtc_set_alarm: err=-22 [ 141.393001][ T6795] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.682835][ T89] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.862855][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 141.882306][ T89] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.916965][ T30] audit: type=1400 audit(1766833726.895:400): avc: denied { create } for pid=6803 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.938965][ T89] usb 4-1: config 1 has no interface number 1 [ 141.963640][ T89] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.996662][ T30] audit: type=1400 audit(1766833726.955:401): avc: denied { bind } for pid=6803 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.002624][ T89] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.103399][ T30] audit: type=1400 audit(1766833726.955:402): avc: denied { ioctl } for pid=6803 comm="syz.0.233" path="socket:[13302]" dev="sockfs" ino=13302 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.181569][ T89] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.201171][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.222411][ T30] audit: type=1400 audit(1766833727.065:403): avc: denied { search } for pid=6806 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.244607][ T89] usb 4-1: Product: syz [ 142.244626][ T89] usb 4-1: Manufacturer: syz [ 142.244640][ T89] usb 4-1: SerialNumber: syz [ 143.045365][ T30] audit: type=1400 audit(1766833727.065:404): avc: denied { search } for pid=6806 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.163456][ T5919] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.181166][ T30] audit: type=1400 audit(1766833727.065:405): avc: denied { search } for pid=6806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.216155][ T30] audit: type=1400 audit(1766833727.065:406): avc: denied { search } for pid=6806 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.332802][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 143.373644][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.406527][ T5919] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 143.434213][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.458797][ T5919] usb 1-1: Product: syz [ 143.469190][ T30] audit: type=1400 audit(1766833727.125:407): avc: denied { read open } for pid=6807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.645648][ T6830] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 143.660821][ T30] audit: type=1400 audit(1766833727.125:408): avc: denied { getattr } for pid=6807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.660839][ T5919] usb 1-1: Manufacturer: syz [ 144.112798][ T30] audit: type=1400 audit(1766833727.125:409): avc: denied { getattr } for pid=6807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.149392][ T5919] usb 1-1: SerialNumber: syz [ 144.197954][ T5919] usb 1-1: config 0 descriptor?? [ 144.198433][ T30] audit: type=1400 audit(1766833727.195:410): avc: denied { getattr } for pid=6810 comm="syz.0.235" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.245053][ T30] audit: type=1400 audit(1766833728.115:411): avc: denied { read } for pid=6812 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.277119][ T5919] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 144.382156][ T5919] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 144.428410][ T30] audit: type=1400 audit(1766833728.115:412): avc: denied { open } for pid=6812 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.461394][ T6841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6841 comm=syz.2.241 [ 144.486937][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 144.502803][ T30] audit: type=1400 audit(1766833728.345:413): avc: denied { setopt } for pid=6824 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.582084][ T30] audit: type=1400 audit(1766833728.845:414): avc: denied { read } for pid=6796 comm="syz.3.231" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 144.594360][ T6845] netlink: 80 bytes leftover after parsing attributes in process `syz.4.242'. [ 144.826902][ T6841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6841 comm=syz.2.241 [ 144.877603][ T30] audit: type=1400 audit(1766833728.845:415): avc: denied { open } for pid=6796 comm="syz.3.231" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 144.910848][ T30] audit: type=1400 audit(1766833729.265:416): avc: denied { add_name } for pid=6806 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.942494][ T5919] usb 1-1: USB disconnect, device number 5 [ 144.943213][ T6841] netlink: 'syz.2.241': attribute type 27 has an invalid length. [ 145.022506][ T6841] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 145.037289][ T89] usb 4-1: USB disconnect, device number 15 [ 145.102188][ T6841] netlink: 144 bytes leftover after parsing attributes in process `syz.2.241'. [ 147.066409][ T6881] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 147.073044][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 147.182671][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 147.371234][ T6885] vhci_hcd: connection closed [ 147.375089][ T774] vhci_hcd vhci_hcd.2: stop threads [ 147.391447][ T774] vhci_hcd vhci_hcd.2: release socket [ 147.397531][ T774] vhci_hcd vhci_hcd.2: disconnect device [ 147.432879][ T89] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 147.440558][ T89] usb 37-1: enqueue for inactive port 0 [ 147.512925][ T89] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 149.114445][ T6917] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 149.228743][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 149.961113][ T6924] netlink: 80 bytes leftover after parsing attributes in process `syz.2.253'. [ 150.316493][ T6932] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 10 [ 150.444824][ T6938] comedi: valid board names for 8255 driver are: [ 150.461498][ T6938] 8255 [ 150.492902][ T6938] comedi: valid board names for vmk80xx driver are: [ 150.499642][ T6938] vmk80xx [ 150.502666][ T6938] comedi: valid board names for usbduxsigma driver are: [ 150.522946][ T5919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.550611][ T6938] usbduxsigma [ 150.554358][ T6938] comedi: valid board names for usbduxfast driver are: [ 150.561273][ T6938] usbduxfast [ 150.571268][ T6938] comedi: valid board names for usbdux driver are: [ 150.591812][ T6938] usbdux [ 150.612906][ T6938] comedi: valid board names for ni6501 driver are: [ 150.629588][ T6938] ni6501 [ 150.639680][ T6938] comedi: valid board names for dt9812 driver are: [ 150.659883][ T6938] dt9812 [ 150.665173][ T6938] comedi: valid board names for ni_labpc_cs driver are: [ 151.213259][ T6938] ni_labpc_cs [ 151.277595][ T5919] usb 4-1: config 0 has no interfaces? [ 151.489981][ T6938] comedi: valid board names for ni_daq_700 driver are: [ 151.513669][ T5919] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 151.545281][ T6938] ni_daq_700 [ 151.548558][ T6938] comedi: valid board names for labpc_pci driver are: [ 151.558501][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.582818][ T5919] usb 4-1: Product: syz [ 151.598844][ T5919] usb 4-1: Manufacturer: syz [ 151.608718][ T5919] usb 4-1: SerialNumber: syz [ 151.634270][ T5919] usb 4-1: config 0 descriptor?? [ 151.672822][ T6938] labpc_pci [ 151.676008][ T6938] comedi: valid board names for adl_pci9118 driver are: [ 151.739444][ T6938] pci9118dg [ 151.747399][ T6938] pci9118hg [ 151.753196][ T6938] pci9118hr [ 151.756393][ T6938] comedi: valid board names for 8255_pci driver are: [ 151.781861][ T6938] 8255_pci [ 151.806413][ T6938] comedi: valid board names for s526 driver are: [ 151.826661][ T6938] s526 [ 151.829430][ T6938] comedi: valid board names for multiq3 driver are: [ 151.843188][ T6938] multiq3 [ 151.846216][ T6938] comedi: valid board names for pcmuio driver are: [ 151.863125][ T6938] pcmuio48 [ 151.877472][ T6938] pcmuio96 [ 151.880574][ T6938] comedi: valid board names for pcmmio driver are: [ 151.893087][ T6938] pcmmio [ 151.896024][ T6938] comedi: valid board names for pcmda12 driver are: [ 151.906704][ T6938] pcmda12 [ 151.909937][ T6938] comedi: valid board names for pcmad driver are: [ 151.919327][ T6938] pcmad12 [ 151.922356][ T6938] pcmad16 [ 151.925674][ T6938] comedi: valid board names for ni_labpc driver are: [ 151.932463][ T6938] lab-pc-1200 [ 151.939893][ T6938] lab-pc-1200ai [ 151.952852][ T6938] lab-pc+ [ 151.955992][ T6938] comedi: valid board names for atmio16 driver are: [ 151.962581][ T6938] atmio16 [ 151.963538][ T5919] usb 4-1: USB disconnect, device number 16 [ 151.966143][ T6938] atmio16d [ 151.974638][ T6938] comedi: valid board names for ni_at_ao driver are: [ 151.981416][ T6938] at-ao-6 [ 151.984457][ T6938] at-ao-10 [ 151.987563][ T6938] comedi: valid board names for ni_at_a2150 driver are: [ 151.994691][ T6938] ni_at_a2150 [ 152.002873][ T6938] comedi: valid board names for adq12b driver are: [ 152.009481][ T6938] adq12b [ 152.013140][ T6938] comedi: valid board names for mpc624 driver are: [ 152.019751][ T6938] mpc624 [ 152.023126][ T6938] comedi: valid board names for c6xdigio driver are: [ 152.032844][ T6938] c6xdigio [ 152.035954][ T6938] comedi: valid board names for aio_iiro_16 driver are: [ 152.052875][ T6938] aio_iiro_16 [ 152.062975][ T6938] comedi: valid board names for aio_aio12_8 driver are: [ 152.069996][ T6938] aio_aio12_8 [ 152.075520][ T6938] aio_ai12_8 [ 152.080126][ T6938] aio_ao12_4 [ 152.085627][ T6938] comedi: valid board names for fl512 driver are: [ 152.092125][ T6938] fl512 [ 152.095037][ T6938] comedi: valid board names for dmm32at driver are: [ 152.108859][ T6938] dmm32at [ 152.111872][ T6938] comedi: valid board names for dt282x driver are: [ 152.153575][ T6938] dt2821 [ 152.156517][ T6938] dt2821-f [ 152.159621][ T6938] dt2821-g [ 152.172830][ T6938] dt2823 [ 152.176414][ T6938] dt2824-pgh [ 152.179695][ T6938] dt2824-pgl [ 152.183312][ T6938] dt2825 [ 152.187791][ T6938] dt2827 [ 152.191485][ T6938] dt2828 [ 152.197732][ T6938] dt2829 [ 152.200748][ T6938] dt21-ez [ 152.253572][ T6938] dt23-ez [ 152.257543][ T6938] dt24-ez [ 152.260794][ T6938] dt24-ez-pgl [ 152.264477][ T6938] comedi: valid board names for dt2817 driver are: [ 152.271023][ T6938] dt2817 [ 152.274167][ T6938] comedi: valid board names for dt2815 driver are: [ 152.282027][ T6938] dt2815 [ 152.285611][ T6938] comedi: valid board names for dt2814 driver are: [ 152.292266][ T6938] dt2814 [ 152.295372][ T6938] comedi: valid board names for dt2811 driver are: [ 152.301915][ T6938] dt2811-pgh [ 152.305440][ T6938] dt2811-pgl [ 152.308757][ T6938] comedi: valid board names for dt2801 driver are: [ 152.315381][ T6938] dt2801 [ 152.318464][ T6938] comedi: valid board names for das6402 driver are: [ 152.335655][ T6938] das6402-12 [ 152.339139][ T6938] das6402-16 [ 152.342499][ T6938] comedi: valid board names for das1800 driver are: [ 152.349159][ T6938] das-1701st [ 152.352443][ T6938] das-1701st-da [ 152.356041][ T6938] das-1702st [ 152.359356][ T6938] das-1702st-da [ 152.363035][ T6938] das-1702hr [ 152.366323][ T6938] das-1702hr-da [ 152.369892][ T6938] das-1701ao [ 152.373188][ T6938] das-1702ao [ 152.376461][ T6938] das-1801st [ 152.379718][ T6938] das-1801st-da [ 152.382787][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.383340][ T6938] das-1802st [ 152.394072][ T6938] das-1802st-da [ 152.397609][ T6938] das-1802hr [ 152.400883][ T6938] das-1802hr-da [ 152.404905][ T6938] das-1801hc [ 152.408223][ T6938] das-1802hc [ 152.411533][ T6938] das-1801ao [ 152.415095][ T6938] das-1802ao [ 152.418413][ T6938] comedi: valid board names for das800 driver are: [ 152.425190][ T6938] das-800 [ 152.428239][ T6938] cio-das800 [ 152.432328][ T6938] das-801 [ 152.437387][ T6938] cio-das801 [ 152.440747][ T6938] das-802 [ 152.444122][ T6938] cio-das802 [ 152.447532][ T6938] cio-das802/16 [ 152.451135][ T6938] comedi: valid board names for isa-das08 driver are: [ 152.458308][ T6938] isa-das08 [ 152.461571][ T6938] das08-pgm [ 152.465122][ T6938] das08-pgh [ 152.468456][ T6938] das08-pgl [ 152.471711][ T6938] das08-aoh [ 152.475328][ T6938] das08-aol [ 152.478648][ T6938] das08-aom [ 152.481903][ T6938] das08/jr-ao [ 152.485896][ T6938] das08jr-16-ao [ 152.489569][ T6938] pc104-das08 [ 152.493237][ T6938] das08jr/16 [ 152.496565][ T6938] comedi: valid board names for das16m1 driver are: [ 152.503573][ T6938] das16m1 [ 152.506639][ T6938] comedi: valid board names for dac02 driver are: [ 152.513356][ T6938] dac02 [ 152.516358][ T6938] comedi: valid board names for rti802 driver are: [ 152.523188][ T6938] rti802 [ 152.526169][ T6938] comedi: valid board names for rti800 driver are: [ 152.534061][ T6938] rti800 [ 152.537055][ T6938] rti815 [ 152.540049][ T6938] comedi: valid board names for pcm3724 driver are: [ 152.547080][ T6938] pcm3724 [ 152.550146][ T6938] comedi: valid board names for pcl818 driver are: [ 152.566017][ T6938] pcl818l [ 152.572369][ T6938] pcl818h [ 152.579239][ T6938] pcl818hd [ 152.589838][ T6938] pcl818hg [ 152.593431][ T6938] pcl818 [ 152.612754][ T6938] pcl718 [ 152.615693][ T6938] pcm3718 [ 152.618710][ T6938] comedi: valid board names for pcl816 driver are: [ 152.629142][ T6938] pcl816 [ 152.632279][ T6938] pcl814b [ 152.639625][ T6938] comedi: valid board names for pcl812 driver are: [ 152.646876][ T6938] pcl812 [ 152.649934][ T6938] pcl812pg [ 152.653480][ T6938] acl8112pg [ 152.656810][ T6938] acl8112dg [ 152.660200][ T6938] acl8112hg [ 152.663789][ T6938] a821pgl [ 152.667013][ T6938] a821pglnda [ 152.670430][ T6938] a821pgh [ 152.673831][ T6938] a822pgl [ 152.677235][ T6938] a822pgh [ 152.683571][ T6938] a823pgl [ 152.686681][ T6938] a823pgh [ 152.694881][ T6938] pcl813 [ 152.699546][ T6938] pcl813b [ 152.702896][ T6938] acl8113 [ 152.706603][ T6938] iso813 [ 152.709683][ T6938] acl8216 [ 152.714057][ T6938] a826pg [ 152.717050][ T6938] comedi: valid board names for pcl730 driver are: [ 152.723969][ T6938] pcl730 [ 152.726954][ T6938] iso730 [ 152.729951][ T6938] acl7130 [ 152.744668][ T6938] pcm3730 [ 152.747738][ T6938] pcl725 [ 152.750724][ T6938] p8r8dio [ 152.754255][ T6938] acl7225b [ 152.757406][ T6938] p16r16dio [ 152.760108][ T5886] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.760631][ T6938] pcl733 [ 152.773304][ T6938] pcl734 [ 152.776281][ T6938] opmm-1616-xt [ 152.779783][ T6938] pearl-mm-p [ 152.783463][ T6938] ir104-pbf [ 152.786726][ T6938] comedi: valid board names for pcl726 driver are: [ 152.787402][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.793638][ T6938] pcl726 [ 152.804773][ T6938] pcl727 [ 152.807742][ T6938] pcl728 [ 152.810703][ T6938] acl6126 [ 152.837489][ T6938] acl6128 [ 152.844379][ T5886] usb 1-1: Product: syz [ 152.849406][ T5886] usb 1-1: Manufacturer: syz [ 152.854173][ T5886] usb 1-1: SerialNumber: syz [ 152.868603][ T6938] comedi: valid board names for pcl724 driver are: [ 152.882020][ T5886] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.901302][ T6938] pcl724 [ 152.910410][ T6938] pcl722 [ 152.913828][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.914754][ T6938] pcl731 [ 152.925922][ T6938] acl7122 [ 152.929810][ T6938] acl7124 [ 152.932951][ T6938] pet48dio [ 152.936167][ T6938] pcmio48 [ 152.939492][ T6938] onyx-mm-dio [ 152.944209][ T6938] comedi: valid board names for pcl711 driver are: [ 152.950816][ T6938] pcl711 [ 152.954671][ T6938] pcl711b [ 152.958178][ T6938] acl8112hg [ 152.961679][ T6938] acl8112dg [ 152.965517][ T6938] comedi: valid board names for amplc_pc263 driver are: [ 152.972692][ T6938] pc263 [ 152.975796][ T6938] comedi: valid board names for amplc_pc236 driver are: [ 152.983312][ T6938] pc36at [ 152.986339][ T6938] comedi: valid board names for amplc_dio200 driver are: [ 152.993998][ T6938] pc212e [ 152.997081][ T6938] pc214e [ 153.000097][ T6938] pc215e [ 153.003519][ T6938] pc218e [ 153.006556][ T6938] pc272e [ 153.009563][ T6938] comedi: valid board names for comedi_parport driver are: [ 153.017190][ T6938] comedi_parport [ 153.086504][ T6938] comedi: valid board names for comedi_test driver are: [ 153.099711][ T6938] comedi_test [ 153.104100][ T6938] comedi: valid board names for comedi_bond driver are: [ 153.111395][ T6938] comedi_bond [ 154.043839][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 154.147248][ T24] ath9k_htc: Failed to initialize the device [ 154.183555][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 154.217645][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 154.217660][ T30] audit: type=1400 audit(1766833739.195:426): avc: denied { getopt } for pid=6983 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.263900][ T6295] usb 1-1: USB disconnect, device number 6 [ 154.452767][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.623304][ T5919] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.660843][ T5919] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 154.683000][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 154.717131][ T5919] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 154.749657][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.801845][ T5919] usb 2-1: Product: syz [ 155.073450][ T5919] usb 2-1: Manufacturer: syz [ 155.112799][ T5919] usb 2-1: SerialNumber: syz [ 155.202512][ T6984] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.210056][ T6984] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.557487][ T7001] rtc_cmos 00:00: Alarms can be up to one day in the future [ 156.976477][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.024969][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.032687][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.042870][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 157.053393][ T89] rtc rtc0: __rtc_set_alarm: err=-22 [ 158.220428][ T5919] rtl8150 2-1:1.0: couldn't reset the device [ 158.235776][ T5919] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 158.286205][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.278'. [ 158.296872][ T7015] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.321917][ T5919] usb 2-1: USB disconnect, device number 5 [ 158.430826][ T30] audit: type=1400 audit(1766833743.405:427): avc: denied { mount } for pid=7016 comm="syz.1.278" name="/" dev="autofs" ino=16431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 158.753339][ T7028] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.775591][ T5919] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.957274][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 158.964461][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.972839][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.980340][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.995774][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 158.995872][ T5919] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 159.011586][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.019300][ T5919] usb 2-1: config 0 has no interface number 0 [ 159.025613][ T5919] usb 2-1: config 0 interface 183 altsetting 1 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 159.036986][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 159.042430][ T5919] usb 2-1: config 0 interface 183 has no altsetting 0 [ 159.051172][ T5919] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=c6.40 [ 159.060443][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.075515][ T5919] usb 2-1: Product: syz [ 159.080072][ T5919] usb 2-1: Manufacturer: syz [ 159.084778][ T5919] usb 2-1: SerialNumber: syz [ 159.101985][ T5919] usb 2-1: config 0 descriptor?? [ 159.118525][ T5919] keyspan 2-1:0.183: Keyspan 1 port adapter converter detected [ 159.140979][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 87 [ 159.174533][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 7 [ 159.197383][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 1 [ 159.210767][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 2 [ 159.234191][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 85 [ 159.249947][ T5919] keyspan 2-1:0.183: found no endpoint descriptor for endpoint 5 [ 159.253356][ T7025] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65024 sclass=netlink_xfrm_socket pid=7025 comm=syz.3.279 [ 159.268235][ T5919] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 159.283569][ T30] audit: type=1400 audit(1766833744.265:428): avc: denied { write } for pid=7032 comm="syz.0.283" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 159.353562][ T30] audit: type=1326 audit(1766833744.325:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1073d8f749 code=0x7ffc0000 [ 159.403620][ T7038] ======================================================= [ 159.403620][ T7038] WARNING: The mand mount option has been deprecated and [ 159.403620][ T7038] and is ignored by this kernel. Remove the mand [ 159.403620][ T7038] option from the mount to silence this warning. [ 159.403620][ T7038] ======================================================= [ 159.414657][ T30] audit: type=1326 audit(1766833744.325:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1073d8f749 code=0x7ffc0000 [ 159.551297][ T30] audit: type=1326 audit(1766833744.325:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1073d8f749 code=0x7ffc0000 [ 159.630681][ T30] audit: type=1400 audit(1766833744.445:432): avc: denied { remount } for pid=7032 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 159.658711][ T30] audit: type=1326 audit(1766833744.485:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1073d8f749 code=0x7ffc0000 [ 159.668801][ T6295] usb 2-1: USB disconnect, device number 6 [ 159.703251][ T30] audit: type=1326 audit(1766833744.485:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1073d8f749 code=0x7ffc0000 [ 159.718629][ T6295] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 159.768509][ T6295] keyspan 2-1:0.183: device disconnected [ 159.853965][ T30] audit: type=1400 audit(1766833744.835:435): avc: denied { lock } for pid=7052 comm="syz.3.286" path="socket:[15090]" dev="sockfs" ino=15090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.072480][ T7065] hub 1-0:1.0: USB hub found [ 161.078954][ T7065] hub 1-0:1.0: 1 port detected [ 161.201347][ T30] audit: type=1400 audit(1766833746.175:436): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 161.469090][ T30] audit: type=1400 audit(1766833746.445:437): avc: denied { audit_write } for pid=7068 comm="syz.1.291" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.342894][ T5919] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 162.804356][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.814977][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 162.826298][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.885137][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 162.899540][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.908852][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.918458][ T5919] usb 5-1: Manufacturer: syz [ 162.944091][ T5919] usb 5-1: config 0 descriptor?? [ 162.972832][ T2223] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.139249][ T2223] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 163.154834][ T2223] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.210924][ T2223] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 163.401174][ T2223] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.427084][ T2223] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 163.454087][ T2223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.520085][ T2223] usb 2-1: config 0 descriptor?? [ 164.965523][ T2223] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 165.161919][ T9] usb 2-1: USB disconnect, device number 7 [ 165.167793][ T5919] rc_core: IR keymap rc-hauppauge not found [ 166.061201][ T5919] Registered IR keymap rc-empty [ 166.069084][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.092825][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.142438][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 166.190536][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 166.244064][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.337901][ T7123] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.546166][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.612871][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.747657][ T7128] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 166.942810][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.974933][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.150745][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.166114][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.232791][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.246109][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.273012][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.284193][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.291454][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 167.345014][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.372989][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.413617][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.437857][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 167.437870][ T30] audit: type=1400 audit(1766833752.415:443): avc: denied { setopt } for pid=7138 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.438876][ T7141] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7141 comm=syz.3.310 [ 167.459902][ T30] audit: type=1400 audit(1766833752.415:444): avc: denied { read } for pid=7138 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.500398][ T5919] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 167.529406][ T5919] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 167.549437][ T5919] usb 5-1: USB disconnect, device number 6 [ 167.923778][ T30] audit: type=1326 audit(1766833752.905:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7149 comm="syz.0.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1073d8f749 code=0x0 [ 168.020269][ T30] audit: type=1400 audit(1766833752.985:446): avc: denied { write } for pid=7149 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 168.106886][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 168.238704][ T7155] netlink: 52 bytes leftover after parsing attributes in process `syz.2.305'. [ 168.250720][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.258397][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.268917][ T7164] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.439336][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7167 comm=syz.4.316 [ 169.451751][ T7167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7167 comm=syz.4.316 [ 169.485987][ T7167] netlink: 'syz.4.316': attribute type 27 has an invalid length. [ 169.532431][ T7167] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 169.537264][ T7170] FAULT_INJECTION: forcing a failure. [ 169.537264][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 169.547258][ T7167] netlink: 144 bytes leftover after parsing attributes in process `syz.4.316'. [ 169.566465][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(full) [ 169.566486][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.566497][ T7170] Call Trace: [ 169.566502][ T7170] [ 169.566508][ T7170] dump_stack_lvl+0x16c/0x1f0 [ 169.566534][ T7170] should_fail_ex+0x512/0x640 [ 169.566560][ T7170] ? __kvmalloc_node_noprof+0x129/0xa40 [ 169.566584][ T7170] should_failslab+0xc2/0x120 [ 169.566607][ T7170] __kvmalloc_node_noprof+0x14a/0xa40 [ 169.566626][ T7170] ? __might_fault+0xe3/0x190 [ 169.566642][ T7170] ? __might_fault+0x13b/0x190 [ 169.566659][ T7170] ? xt_alloc_table_info+0x43/0xa0 [ 169.566689][ T7170] ? xt_alloc_table_info+0x43/0xa0 [ 169.566712][ T7170] xt_alloc_table_info+0x43/0xa0 [ 169.566737][ T7170] do_ipt_set_ctl+0x59b/0xc40 [ 169.566754][ T7170] ? find_held_lock+0x2b/0x80 [ 169.566780][ T7170] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 169.566807][ T7170] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 169.566827][ T7170] ? sockopt_release_sock+0x52/0x60 [ 169.566847][ T7170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.566882][ T7170] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 169.566909][ T7170] nf_setsockopt+0x8d/0xf0 [ 169.566940][ T7170] ip_setsockopt+0xcb/0xf0 [ 169.566970][ T7170] tcp_setsockopt+0xa7/0x100 [ 169.566992][ T7170] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 169.567016][ T7170] do_sock_setsockopt+0xf3/0x1d0 [ 169.567040][ T7170] __sys_setsockopt+0x1a0/0x230 [ 169.567060][ T7170] __x64_sys_setsockopt+0xbd/0x160 [ 169.567075][ T7170] ? do_syscall_64+0x91/0xf80 [ 169.567096][ T7170] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.567118][ T7170] do_syscall_64+0xcd/0xf80 [ 169.567141][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.567160][ T7170] RIP: 0033:0x7f1073d8f749 [ 169.567174][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.567190][ T7170] RSP: 002b:00007f1071fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.567207][ T7170] RAX: ffffffffffffffda RBX: 00007f1073fe5fa0 RCX: 00007f1073d8f749 [ 169.567218][ T7170] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 169.567229][ T7170] RBP: 00007f1071fee090 R08: 00000000000002e8 R09: 0000000000000000 [ 169.567239][ T7170] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 169.567250][ T7170] R13: 00007f1073fe6038 R14: 00007f1073fe5fa0 R15: 00007ffc673da788 [ 169.567274][ T7170] [ 169.622779][ T6295] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 169.872809][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.972321][ T5927] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.989982][ T5927] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.002157][ T5927] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.021098][ T5927] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.029965][ T5927] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.042922][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 170.097278][ T5919] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.132304][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.268381][ T89] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.299169][ T5919] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 170.308895][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.341160][ T5919] usb 2-1: config 0 descriptor?? [ 170.432832][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 170.440424][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.457188][ T89] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 170.467626][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.479485][ T89] usb 1-1: config 0 descriptor?? [ 170.789427][ T5919] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 170.898055][ T89] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 171.084821][ T6295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.091455][ T6295] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 171.097468][ T7177] FAULT_INJECTION: forcing a failure. [ 171.097468][ T7177] name failslab, interval 1, probability 0, space 0, times 0 [ 171.113554][ T7177] CPU: 0 UID: 0 PID: 7177 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) [ 171.113575][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.113586][ T7177] Call Trace: [ 171.113595][ T7177] [ 171.113602][ T7177] dump_stack_lvl+0x16c/0x1f0 [ 171.113628][ T7177] should_fail_ex+0x512/0x640 [ 171.113653][ T7177] ? fs_reclaim_acquire+0xae/0x150 [ 171.113679][ T7177] should_failslab+0xc2/0x120 [ 171.113702][ T7177] __kmalloc_cache_noprof+0x80/0x800 [ 171.113730][ T7177] ? usb_control_msg+0xbc/0x4a0 [ 171.113752][ T7177] ? __pfx___mutex_lock+0x10/0x10 [ 171.113777][ T7177] ? usb_control_msg+0xbc/0x4a0 [ 171.113797][ T7177] usb_control_msg+0xbc/0x4a0 [ 171.113819][ T7177] ? __pfx_usb_control_msg+0x10/0x10 [ 171.113842][ T7177] ? __kasan_check_byte+0x13/0x50 [ 171.113868][ T7177] m920x_i2c_xfer+0x414/0x8e0 [ 171.113900][ T7177] __i2c_transfer+0x6b6/0x2100 [ 171.113933][ T7177] ? __pfx___i2c_transfer+0x10/0x10 [ 171.113955][ T7177] ? stack_trace_save+0x8e/0xc0 [ 171.113977][ T7177] i2c_smbus_xfer_emulated+0x230/0x1210 [ 171.114006][ T7177] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 171.114031][ T7177] ? save_trace+0x4e/0x380 [ 171.114053][ T7177] ? ww_mutex_trylock+0x110/0xcb0 [ 171.114088][ T7177] __i2c_smbus_xfer+0x836/0xf60 [ 171.114114][ T7177] ? mark_held_locks+0x49/0x80 [ 171.114134][ T7177] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.114155][ T7177] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 171.114179][ T7177] ? rt_mutex_slowtrylock+0xc9/0x100 [ 171.114208][ T7177] i2c_smbus_xfer+0x200/0x3c0 [ 171.114237][ T7177] i2cdev_ioctl_smbus+0x441/0x990 [ 171.114259][ T7177] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 171.114277][ T7177] ? __might_fault+0xe3/0x190 [ 171.114292][ T7177] ? __might_fault+0xe3/0x190 [ 171.114318][ T7177] i2cdev_ioctl+0x361/0x840 [ 171.114337][ T7177] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 171.114358][ T7177] ? selinux_file_ioctl+0x180/0x270 [ 171.114383][ T7177] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 171.114404][ T7177] __x64_sys_ioctl+0x18e/0x210 [ 171.114426][ T7177] do_syscall_64+0xcd/0xf80 [ 171.114449][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.114465][ T7177] RIP: 0033:0x7f1073d8f749 [ 171.114479][ T7177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.114494][ T7177] RSP: 002b:00007f1071fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.114510][ T7177] RAX: ffffffffffffffda RBX: 00007f1073fe5fa0 RCX: 00007f1073d8f749 [ 171.114521][ T7177] RDX: 0000200000000980 RSI: 0000000000000720 RDI: 0000000000000007 [ 171.114531][ T7177] RBP: 00007f1071fee090 R08: 0000000000000000 R09: 0000000000000000 [ 171.114541][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.114550][ T7177] R13: 00007f1073fe6038 R14: 00007f1073fe5fa0 R15: 00007ffc673da788 [ 171.114575][ T7177] [ 171.405658][ T89] usb 1-1: USB disconnect, device number 7 [ 171.412762][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.556999][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.570091][ T6295] usb 4-1: config 0 descriptor?? [ 171.741649][ T5859] usb 2-1: USB disconnect, device number 8 [ 171.767343][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.289548][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.438466][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.513004][ T6295] video4linux radio48: keene_cmd_set failed (-110) [ 172.593153][ T6295] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 172.806506][ T30] audit: type=1400 audit(1766833757.675:447): avc: denied { read } for pid=7162 comm="syz.3.315" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.197639][ T30] audit: type=1400 audit(1766833757.675:448): avc: denied { open } for pid=7162 comm="syz.3.315" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.231606][ T30] audit: type=1400 audit(1766833757.675:449): avc: denied { ioctl } for pid=7162 comm="syz.3.315" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.236485][ T7207] Bluetooth: MGMT ver 1.23 [ 173.421617][ T7212] rtc_cmos 00:00: Alarms can be up to one day in the future [ 173.796039][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 174.003513][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 174.104713][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 174.112271][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 174.158884][ T5950] usb 4-1: USB disconnect, device number 17 [ 174.325112][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 174.332413][ T89] rtc rtc0: __rtc_set_alarm: err=-22 [ 176.000332][ T7226] rtc_cmos 00:00: Alarms can be up to one day in the future [ 176.062359][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.169452][ T30] audit: type=1400 audit(1766833761.145:450): avc: denied { create } for pid=7234 comm="syz.0.335" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.250346][ T7244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.394527][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 176.466631][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 176.489801][ T7247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7247 comm=syz.3.338 [ 176.505681][ T30] audit: type=1400 audit(1766833761.145:451): avc: denied { read } for pid=7234 comm="syz.0.335" name="file2" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.528347][ T9] usb 5-1: config 0 has no interface number 0 [ 176.551402][ T7247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7247 comm=syz.3.338 [ 176.565273][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 176.580203][ T9] usb 5-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.590379][ T7247] netlink: 'syz.3.338': attribute type 27 has an invalid length. [ 176.600388][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.611345][ T7247] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 176.621056][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 176.628681][ T7247] netlink: 144 bytes leftover after parsing attributes in process `syz.3.338'. [ 176.639296][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 176.658579][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.668669][ T9] usb 5-1: Product: syz [ 176.675278][ T30] audit: type=1400 audit(1766833761.145:452): avc: denied { open } for pid=7234 comm="syz.0.335" path="/67/file2" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.675537][ T9] usb 5-1: Manufacturer: syz [ 176.750283][ T9] usb 5-1: SerialNumber: syz [ 176.769440][ T30] audit: type=1400 audit(1766833761.155:453): avc: denied { ioctl } for pid=7234 comm="syz.0.335" path="/67/file2" dev="tmpfs" ino=371 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.774768][ T9] usb 5-1: config 0 descriptor?? [ 176.881362][ T7228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.241667][ T30] audit: type=1400 audit(1766833761.195:454): avc: denied { create } for pid=7235 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.274278][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.282752][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.291066][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.336320][ T30] audit: type=1400 audit(1766833761.525:455): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file2" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.337175][ T89] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.417105][ T89] rtc rtc0: __rtc_set_alarm: err=-22 [ 177.509536][ T9] ir_usb 5-1:0.126: IR Dongle converter detected [ 177.653236][ T9] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 177.878521][ T7227] batadv_slave_1: entered promiscuous mode [ 178.329975][ T30] audit: type=1400 audit(1766833763.305:456): avc: denied { ioctl } for pid=7264 comm="syz.3.344" path="socket:[16941]" dev="sockfs" ino=16941 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.356449][ T7265] tmpfs: Bad value for 'mpol' [ 178.382972][ T30] audit: type=1400 audit(1766833763.335:457): avc: denied { mounton } for pid=7264 comm="syz.3.344" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 178.629698][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 178.670487][ T30] audit: type=1400 audit(1766833763.625:458): avc: denied { bind } for pid=7276 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.902250][ T30] audit: type=1400 audit(1766833763.875:459): avc: denied { mount } for pid=7276 comm="syz.0.348" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 178.939369][ T7228] batadv_slave_1: left promiscuous mode [ 178.945638][ T24] usb 5-1: USB disconnect, device number 7 [ 178.956258][ T24] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 178.992671][ T24] ir_usb 5-1:0.126: device disconnected [ 179.034833][ T30] audit: type=1400 audit(1766833764.015:460): avc: denied { ioctl } for pid=7280 comm="syz.2.349" path="socket:[17945]" dev="sockfs" ino=17945 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.399697][ T89] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.462084][ T7275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7275 comm=syz.3.346 [ 179.488293][ T7275] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 179.496079][ T7275] netlink: 'syz.3.346': attribute type 2 has an invalid length. [ 179.506298][ T7275] loop7: detected capacity change from 0 to 2640 [ 179.513909][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.521769][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.529597][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.537451][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.545280][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.553103][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.560917][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.569017][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.576818][ T7275] ldm_validate_partition_table(): Disk read failed. [ 179.583416][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.591202][ T7275] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.599053][ T7275] Dev loop7: unable to read RDB block 0 [ 179.604926][ T7275] loop7: unable to read partition table [ 179.610805][ T7275] loop_reread_partitions: partition scan of loop7 (3Ÿ ¾‚³˜) failed (rc=-5) [ 179.619649][ T30] audit: type=1400 audit(1766833764.485:461): avc: denied { append } for pid=7274 comm="syz.3.346" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.652791][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 179.660440][ T89] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 179.671549][ T89] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.681865][ T89] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.691877][ T89] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 179.706587][ T89] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.843717][ T7278] Invalid logical block size (5) [ 179.867463][ T89] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.316186][ T89] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.325666][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.592255][ T89] usb 3-1: usb_control_msg returned -32 [ 180.593192][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.598016][ T89] usbtmc 3-1:16.0: can't read capabilities [ 180.724794][ T30] audit: type=1400 audit(1766833765.705:462): avc: denied { block_suspend } for pid=7285 comm="syz.1.351" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.852782][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 180.859473][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.880043][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.890994][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 180.932753][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 180.952882][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.969011][ T24] usb 5-1: config 0 descriptor?? [ 180.999542][ T7310] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 181.155705][ T7281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.349'. [ 181.187398][ T89] usb 3-1: USB disconnect, device number 7 [ 181.212849][ T5886] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.373639][ T5886] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.392105][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0008/input/input16 [ 182.404083][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.412080][ T5886] usb 1-1: Product: syz [ 182.441204][ T5886] usb 1-1: Manufacturer: syz [ 182.448194][ T5886] usb 1-1: SerialNumber: syz [ 182.465653][ T5886] usb 1-1: config 0 descriptor?? [ 182.485008][ T30] audit: type=1400 audit(1766833767.465:463): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=2988 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.511180][ T24] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 182.533240][ T30] audit: type=1400 audit(1766833767.465:464): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2988 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.562439][ T30] audit: type=1400 audit(1766833767.465:465): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2988 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.715383][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.206788][ T5886] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.326145][ T24] usb 5-1: USB disconnect, device number 8 [ 183.455259][ T7324] fido_id[7324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.972810][ T30] audit: type=1326 audit(1766833768.695:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.033545][ T30] audit: type=1326 audit(1766833768.695:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.092865][ T30] audit: type=1326 audit(1766833768.695:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.124175][ T30] audit: type=1326 audit(1766833768.695:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.147804][ T30] audit: type=1326 audit(1766833768.695:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.171218][ T30] audit: type=1326 audit(1766833768.705:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.195684][ T30] audit: type=1326 audit(1766833768.705:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.219603][ T30] audit: type=1326 audit(1766833768.705:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.245299][ T7309] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=7309 comm=syz.0.358 [ 184.260637][ T7309] warning: `syz.0.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.275073][ T5886] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 184.300097][ T30] audit: type=1326 audit(1766833768.705:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.356546][ T30] audit: type=1326 audit(1766833768.715:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0885b8f749 code=0x7ffc0000 [ 184.384058][ T5886] usb 1-1: USB disconnect, device number 8 [ 184.582871][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 184.720834][ T7342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.747132][ T5927] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 184.764743][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.991095][ T5927] usb 4-1: config 0 descriptor?? [ 184.992440][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 185.033471][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 185.036334][ T7346] syz.0.368 uses obsolete (PF_INET,SOCK_PACKET) [ 185.233030][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.367'. [ 185.264411][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.379203][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.453299][ T5927] gp8psk: usb in 128 operation failed. [ 185.472427][ T5927] gp8psk: usb in 137 operation failed. [ 185.478014][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.489045][ T5927] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 185.497730][ T5927] usb 4-1: media controller created [ 185.523566][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.565213][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 185.565255][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 185.571226][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 185.577399][ T5927] gp8psk_fe: Frontend attached [ 185.585625][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 185.589209][ T5927] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 185.594042][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 185.603061][ T5927] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 185.685307][ T5927] gp8psk: usb in 138 operation failed. [ 185.690826][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 185.703414][ T5927] gp8psk: found Genpix USB device pID = 203 (hex) [ 185.714193][ T5927] usb 4-1: USB disconnect, device number 18 [ 185.780833][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 185.790858][ T89] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 185.856990][ T5818] Bluetooth: hci0: unexpected event for opcode 0x080c [ 186.954194][ T89] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.964844][ T89] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.979804][ T89] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.005377][ T89] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.022915][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.055889][ T89] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.067810][ T89] usb 3-1: invalid MIDI out EP 0 [ 187.146673][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.196601][ T89] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 187.397058][ T7367] ISOFS: Unable to identify CD-ROM format. [ 187.590103][ T7369] atomic_op ffff88807d7c5198 conn xmit_atomic 0000000000000000 [ 188.596466][ T5886] usb 3-1: USB disconnect, device number 8 [ 189.060869][ T6770] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.162756][ T7400] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 10 [ 189.222803][ T6295] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 190.195397][ T6770] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.206961][ T6770] usb 2-1: config 0 has no interface number 0 [ 190.223174][ T6770] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 190.264460][ T6770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.272468][ T6770] usb 2-1: Product: syz [ 190.302745][ T6770] usb 2-1: Manufacturer: syz [ 190.307370][ T6770] usb 2-1: SerialNumber: syz [ 190.333515][ T6770] usb 2-1: config 0 descriptor?? [ 190.366945][ T6295] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.383496][ T6295] usb 3-1: config 0 has no interface number 0 [ 190.399691][ T6295] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.423871][ T6295] usb 3-1: config 0 interface 41 has no altsetting 0 [ 190.443128][ T6295] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 190.472394][ T6295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.482915][ T6295] usb 3-1: Product: syz [ 190.492798][ T5859] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.513069][ T6295] usb 3-1: Manufacturer: syz [ 190.517646][ T6295] usb 3-1: SerialNumber: syz [ 190.544719][ T6295] usb 3-1: config 0 descriptor?? [ 190.554424][ T6770] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 190.559109][ T6295] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 190.593755][ T6770] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.634598][ T6770] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 190.662830][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 190.662997][ T6770] usb 2-1: media controller created [ 190.669304][ T5859] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 190.694619][ T5859] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 190.704113][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.710185][ T6770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.712088][ T5859] usb 1-1: Product: syz [ 190.753473][ T5859] usb 1-1: Manufacturer: syz [ 190.762865][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 190.770645][ T5859] usb 1-1: SerialNumber: syz [ 190.794020][ T5859] usb 1-1: config 0 descriptor?? [ 190.799837][ T7406] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.814030][ T5859] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 191.739252][ T7412] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.360128][ T6770] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 192.377441][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 192.377455][ T30] audit: type=1400 audit(1766833776.705:493): avc: denied { create } for pid=7407 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.377496][ T30] audit: type=1400 audit(1766833776.715:494): avc: denied { write } for pid=7407 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.612972][ T6770] usb 2-1: USB disconnect, device number 9 [ 192.634682][ T89] usb 3-1: USB disconnect, device number 9 [ 192.724937][ T30] audit: type=1400 audit(1766833777.705:495): avc: denied { read write } for pid=7405 comm="syz.0.386" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 192.762817][ T7414] netlink: 'syz.1.389': attribute type 9 has an invalid length. [ 192.770526][ T7414] netlink: 'syz.1.389': attribute type 11 has an invalid length. [ 192.810750][ T7414] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.389'. [ 192.835741][ T5927] usb 1-1: USB disconnect, device number 9 [ 192.835743][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 192.842897][ T30] audit: type=1400 audit(1766833777.705:496): avc: denied { open } for pid=7405 comm="syz.0.386" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 192.859655][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 193.458413][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 193.693176][ T5927] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 193.731770][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.898433][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.033004][ T6770] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 194.119798][ T5927] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 194.164709][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.178051][ T5927] usb 4-1: config 0 descriptor?? [ 194.194172][ T5927] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 194.230432][ T7432] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 10 [ 194.355687][ T6770] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.372248][ T6770] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.411770][ T6770] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.426346][ T6770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.764952][ T5927] gspca_cpia1: usb_control_msg 03, error -32 [ 194.791314][ T6770] usb 2-1: usb_control_msg returned -32 [ 194.813474][ T6770] usbtmc 2-1:16.0: can't read capabilities [ 195.053278][ T5927] gspca_cpia1: usb_control_msg 03, error -71 [ 195.059576][ T5927] gspca_cpia1: usb_control_msg 01, error -71 [ 195.065664][ T5927] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 195.262383][ T5927] usb 4-1: USB disconnect, device number 19 [ 195.719096][ T5859] usb 2-1: USB disconnect, device number 10 [ 196.034373][ T30] audit: type=1400 audit(1766833780.965:497): avc: denied { name_bind } for pid=7461 comm="syz.0.402" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 196.066407][ T7464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.402'. [ 196.153966][ T30] audit: type=1400 audit(1766833780.985:498): avc: denied { setopt } for pid=7459 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.354135][ T30] audit: type=1400 audit(1766833781.085:499): avc: denied { module_request } for pid=7461 comm="syz.0.402" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 196.900522][ T30] audit: type=1400 audit(1766833781.875:500): avc: denied { write } for pid=7490 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 197.512944][ T30] audit: type=1400 audit(1766833781.935:501): avc: denied { connect } for pid=7490 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.338710][ T5818] Bluetooth: hci4: unexpected event for opcode 0x080c [ 203.186709][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 203.466874][ T30] audit: type=1400 audit(1766833788.445:502): avc: denied { create } for pid=7546 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 203.789244][ T30] audit: type=1400 audit(1766833788.555:503): avc: denied { sys_admin } for pid=7546 comm="syz.0.428" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 204.305097][ T30] audit: type=1400 audit(1766833789.285:504): avc: denied { bind } for pid=7567 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.380209][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'. [ 204.528004][ T30] audit: type=1400 audit(1766833789.515:505): avc: denied { create } for pid=7575 comm="syz.2.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.585230][ T30] audit: type=1400 audit(1766833789.565:506): avc: denied { mounton } for pid=7575 comm="syz.2.434" path="/92/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.610903][ T7579] fuse: Unknown parameter 'qser_id' [ 204.625989][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.660708][ T30] audit: type=1400 audit(1766833789.615:507): avc: denied { write } for pid=7575 comm="syz.2.434" name="file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.142810][ T5950] usb 1-1: device descriptor read/64, error -71 [ 205.604736][ T7591] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.703098][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.796249][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 205.852831][ T5950] usb 1-1: device descriptor read/64, error -71 [ 205.897954][ T30] audit: type=1400 audit(1766833790.875:508): avc: denied { setopt } for pid=7597 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.013111][ T5950] usb usb1-port1: attempt power cycle [ 206.050024][ T30] audit: type=1400 audit(1766833790.905:509): avc: denied { ioctl } for pid=7597 comm="syz.4.441" path="socket:[19784]" dev="sockfs" ino=19784 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.530950][ T30] audit: type=1400 audit(1766833791.025:510): avc: denied { write } for pid=7601 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.557794][ T5886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.822927][ T5950] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.904418][ T5886] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 206.914633][ T5950] usb 1-1: device descriptor read/8, error -71 [ 206.922984][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.941470][ T5886] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 206.952950][ T5886] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 206.961020][ T5886] usb 3-1: Manufacturer: syz [ 206.968969][ T5886] usb 3-1: config 0 descriptor?? [ 207.182371][ T5950] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.215125][ T5950] usb 1-1: device descriptor read/8, error -71 [ 207.243201][ T5886] rc_core: IR keymap rc-hauppauge not found [ 207.471346][ T7623] serio: Serial port ttyS3 [ 207.784987][ T5950] usb usb1-port1: unable to enumerate USB device [ 207.805221][ T5886] Registered IR keymap rc-empty [ 207.856279][ T5886] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 207.905931][ T5886] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 208.227071][ T7628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7628 comm=syz.3.448 [ 208.239835][ T7628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7628 comm=syz.3.448 [ 208.263131][ T7628] netlink: 'syz.3.448': attribute type 27 has an invalid length. [ 208.270858][ T7628] netlink: 'syz.3.448': attribute type 4 has an invalid length. [ 208.323766][ T7628] netlink: 144 bytes leftover after parsing attributes in process `syz.3.448'. [ 208.374620][ T5886] usb 3-1: USB disconnect, device number 10 [ 208.460855][ T6010] udevd[6010]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 208.501495][ T30] audit: type=1400 audit(1766833793.475:511): avc: denied { sqpoll } for pid=7612 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.581088][ T7635] FAULT_INJECTION: forcing a failure. [ 208.581088][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.594500][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 208.594523][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.594534][ T7635] Call Trace: [ 208.594540][ T7635] [ 208.594547][ T7635] dump_stack_lvl+0x16c/0x1f0 [ 208.594574][ T7635] should_fail_ex+0x512/0x640 [ 208.594605][ T7635] _copy_to_user+0x32/0xd0 [ 208.594634][ T7635] simple_read_from_buffer+0xcb/0x170 [ 208.594661][ T7635] proc_fail_nth_read+0x197/0x240 [ 208.594681][ T7635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.594701][ T7635] ? rw_verify_area+0xcf/0x6c0 [ 208.594720][ T7635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.594739][ T7635] vfs_read+0x1e4/0xcf0 [ 208.594763][ T7635] ? __pfx___mutex_lock+0x10/0x10 [ 208.594790][ T7635] ? __pfx_vfs_read+0x10/0x10 [ 208.594820][ T7635] ? __fget_files+0x20e/0x3c0 [ 208.594852][ T7635] ksys_read+0x12a/0x250 [ 208.594874][ T7635] ? __pfx_ksys_read+0x10/0x10 [ 208.594904][ T7635] do_syscall_64+0xcd/0xf80 [ 208.594929][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.594947][ T7635] RIP: 0033:0x7f9df958e15c [ 208.594961][ T7635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.594979][ T7635] RSP: 002b:00007f9df7770030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.594996][ T7635] RAX: ffffffffffffffda RBX: 00007f9df97e6180 RCX: 00007f9df958e15c [ 208.595008][ T7635] RDX: 000000000000000f RSI: 00007f9df77700a0 RDI: 0000000000000006 [ 208.595019][ T7635] RBP: 00007f9df7770090 R08: 0000000000000000 R09: 0000000000000000 [ 208.595029][ T7635] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 208.595040][ T7635] R13: 00007f9df97e6218 R14: 00007f9df97e6180 R15: 00007ffdc8110b08 [ 208.595066][ T7635] [ 208.662807][ T30] audit: type=1326 audit(1766833793.505:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.1.445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9df958f749 code=0x0 [ 209.062047][ T7640] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.335806][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 209.364077][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 209.474134][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 209.680974][ T30] audit: type=1400 audit(1766833794.655:513): avc: denied { ioctl } for pid=7647 comm="syz.0.455" path="socket:[19913]" dev="sockfs" ino=19913 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.972058][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 210.008428][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 210.057076][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 210.146711][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 210.453119][ T6770] rtc rtc0: __rtc_set_alarm: err=-22 [ 210.665225][ T30] audit: type=1400 audit(1766833795.645:514): avc: denied { open } for pid=7659 comm="syz.2.458" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 210.774426][ T30] audit: type=1400 audit(1766833795.675:515): avc: denied { write } for pid=7659 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.832837][ T30] audit: type=1400 audit(1766833795.675:516): avc: denied { ioctl } for pid=7659 comm="syz.2.458" path="socket:[19949]" dev="sockfs" ino=19949 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.002377][ T7683] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.204889][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 212.265515][ T6770] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.278114][ T7692] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.522795][ T6770] usb 5-1: Using ep0 maxpacket: 32 [ 212.545817][ T6770] usb 5-1: config 0 has no interfaces? [ 212.561156][ T6770] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 212.600788][ T6770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.684043][ T6770] usb 5-1: config 0 descriptor?? [ 212.740804][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7700 comm=syz.2.471 [ 212.773242][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=7700 comm=syz.2.471 [ 212.795943][ T7700] netlink: 'syz.2.471': attribute type 27 has an invalid length. [ 212.819121][ T7700] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 212.836957][ T7700] netlink: 144 bytes leftover after parsing attributes in process `syz.2.471'. [ 212.893252][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.901884][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.911904][ T5962] usb 5-1: USB disconnect, device number 9 [ 212.982630][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.042941][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.050437][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.060047][ T7703] comedi comedi3: das16m1: I/O port conflict (0x4f26,16) [ 213.554822][ T6770] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.719530][ T6770] rtc rtc0: __rtc_set_alarm: err=-22 [ 214.012875][ T6770] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.182784][ T6770] usb 3-1: Using ep0 maxpacket: 8 [ 214.189358][ T6770] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 214.197666][ T6770] usb 3-1: config 2 has no interface number 0 [ 214.206785][ T6770] usb 3-1: config 2 interface 31 has no altsetting 0 [ 214.215803][ T6770] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 214.225162][ T6770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.233820][ T6770] usb 3-1: Product: syz [ 214.237989][ T6770] usb 3-1: Manufacturer: syz [ 214.242555][ T6770] usb 3-1: SerialNumber: syz [ 214.402771][ T5962] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.581334][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 214.589173][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.600595][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.821347][ T5962] usb 2-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 214.878946][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.909921][ T5962] usb 2-1: config 0 descriptor?? [ 214.968845][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 215.603621][ T6770] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 215.615628][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.641496][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.870973][ T30] audit: type=1400 audit(1766833800.845:517): avc: denied { append } for pid=7742 comm="syz.0.483" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.903332][ T6770] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.913864][ T5962] asus 0003:0B05:1807.0009: unknown main item tag 0x7 [ 215.941408][ T5962] asus 0003:0B05:1807.0009: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.1-1/input0 [ 215.961937][ T5962] asus 0003:0B05:1807.0009: Asus input not registered [ 215.974558][ T5962] asus 0003:0B05:1807.0009: probe with driver asus failed with error -12 [ 216.184013][ T6770] usb 5-1: Using ep0 maxpacket: 32 [ 216.254386][ T89] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 216.263998][ T5962] usb 2-1: USB disconnect, device number 11 [ 216.271244][ T6770] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 216.288588][ T6770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.308201][ T6770] usb 5-1: config 0 descriptor?? [ 216.320379][ T6770] gspca_main: sunplus-2.14.0 probing 041e:400b [ 216.360497][ T6295] usb 3-1: USB disconnect, device number 11 [ 216.424246][ T89] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 216.448229][ T89] usb 1-1: config 0 has no interface number 0 [ 216.461569][ T7744] fido_id[7744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 216.479545][ T89] usb 1-1: config 0 interface 41 has no altsetting 0 [ 216.505377][ T89] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 216.524017][ T30] audit: type=1400 audit(1766833801.495:518): avc: denied { ioctl } for pid=7732 comm="syz.4.481" path="socket:[20161]" dev="sockfs" ino=20161 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.554243][ T6770] gspca_sunplus: reg_w_riv err -71 [ 216.559413][ T6770] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 216.572744][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.580731][ T89] usb 1-1: Product: syz [ 216.626672][ T6770] usb 5-1: USB disconnect, device number 10 [ 216.632555][ T89] usb 1-1: Manufacturer: syz [ 216.642959][ T89] usb 1-1: SerialNumber: syz [ 216.662335][ T89] usb 1-1: config 0 descriptor?? [ 217.678020][ T89] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 218.023987][ T89] usb 1-1: USB disconnect, device number 14 [ 218.085633][ T7769] random: crng reseeded on system resumption [ 218.118140][ T30] audit: type=1400 audit(1766833803.065:519): avc: denied { read write } for pid=7767 comm="syz.0.492" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 218.155442][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 218.164395][ T7769] netlink: 3 bytes leftover after parsing attributes in process `syz.0.492'. [ 218.488637][ T30] audit: type=1400 audit(1766833803.065:520): avc: denied { ioctl open } for pid=7767 comm="syz.0.492" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.209129][ T30] audit: type=1400 audit(1766833803.185:521): avc: denied { getopt } for pid=7767 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.222761][ T6770] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 221.449539][ T6770] usb 3-1: Using ep0 maxpacket: 8 [ 221.483195][ T6111] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.607833][ T6770] usb 3-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 221.634327][ T6770] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.675935][ T6770] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 221.710518][ T6770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.736640][ T6770] usb 3-1: Product: syz [ 221.740817][ T6770] usb 3-1: Manufacturer: syz [ 221.754561][ T6111] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 221.767650][ T6770] usb 3-1: SerialNumber: syz [ 221.784427][ T6770] usb 3-1: config 0 descriptor?? [ 221.799693][ T6111] usb 2-1: config 0 has no interface number 0 [ 221.801750][ T6770] imon_raw 3-1:0.0: IR endpoint missing [ 221.825975][ T6111] usb 2-1: too many endpoints for config 0 interface 126 altsetting 103: 101, using maximum allowed: 30 [ 221.868325][ T6111] usb 2-1: config 0 interface 126 altsetting 103 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 221.896867][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 221.908692][ T6111] usb 2-1: config 0 interface 126 has no altsetting 0 [ 221.924274][ T6111] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 221.933872][ T6111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.045276][ T6111] usb 2-1: Product: syz [ 222.066406][ T6111] usb 2-1: Manufacturer: syz [ 222.072897][ T6111] usb 2-1: SerialNumber: syz [ 222.107387][ T6111] usb 2-1: config 0 descriptor?? [ 223.726633][ T30] audit: type=1400 audit(1766833808.705:522): avc: denied { setopt } for pid=7820 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.030450][ T30] audit: type=1326 audit(1766833808.865:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.3.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d1e58f749 code=0x0 [ 224.070966][ T6111] usb 2-1: USB disconnect, device number 12 [ 224.152790][ T6770] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 224.262766][ T89] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 224.317012][ T6770] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 224.328332][ T6770] usb 1-1: config 0 has no interface number 0 [ 224.343287][ T6770] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a2.ec [ 224.413000][ T6111] usb 3-1: USB disconnect, device number 12 [ 224.432911][ T6770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.476390][ T6770] usb 1-1: Product: syz [ 224.481686][ T6770] usb 1-1: Manufacturer: syz [ 224.491853][ T89] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 224.500253][ T6770] usb 1-1: SerialNumber: syz [ 224.510073][ T89] usb 4-1: config 0 has no interface number 0 [ 224.515902][ T7833] bridge_slave_0: left allmulticast mode [ 224.522291][ T7833] bridge_slave_0: left promiscuous mode [ 224.523080][ T6770] usb 1-1: config 0 descriptor?? [ 224.532606][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.547772][ T7833] bridge_slave_1: left allmulticast mode [ 224.553976][ T7833] bridge_slave_1: left promiscuous mode [ 224.559616][ T89] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 224.560329][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.602760][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.611190][ T89] usb 4-1: Product: syz [ 224.615625][ T89] usb 4-1: Manufacturer: syz [ 224.620659][ T7833] bond0: (slave bond_slave_0): Releasing backup interface [ 224.621818][ T6770] redrat3 1-1:0.50: Couldn't find all endpoints [ 224.642809][ T89] usb 4-1: SerialNumber: syz [ 224.650730][ T89] usb 4-1: config 0 descriptor?? [ 224.689542][ T7833] bond0: (slave bond_slave_1): Releasing backup interface [ 224.714378][ T7833] team0: Port device team_slave_0 removed [ 224.727071][ T7833] team0: Port device team_slave_1 removed [ 224.788217][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.795879][ T6111] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.817572][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.832654][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.839598][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7741/1:b..l [ 329.847742][ C0] rcu: (detected by 0, t=10502 jiffies, g=19685, q=980 ncpus=2) [ 329.855422][ C0] task:syz.3.482 state:R running task stack:23208 pid:7741 tgid:7741 ppid:5814 task_flags:0x40064c flags:0x00080001 [ 329.869125][ C0] Call Trace: [ 329.872377][ C0] [ 329.875280][ C0] ? __schedule+0x10b9/0x6150 [ 329.879930][ C0] __schedule+0x1139/0x6150 [ 329.884423][ C0] ? __pfx___schedule+0x10/0x10 [ 329.889260][ C0] ? lock_acquire+0x179/0x330 [ 329.893916][ C0] preempt_schedule_irq+0x51/0x90 [ 329.898915][ C0] irqentry_exit+0x1d8/0x8c0 [ 329.903477][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.909426][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 329.914595][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 329.934173][ C0] RSP: 0018:ffffc90003076e70 EFLAGS: 00000206 [ 329.940206][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000068c1bacb [ 329.948147][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 329.956086][ C0] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 329.964026][ C0] R10: 0000000000000002 R11: ffff88802ea5aff0 R12: 0000000000000000 [ 329.971964][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.979928][ C0] unwind_next_frame+0xd1/0x20b0 [ 329.984839][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 329.989923][ C0] ? __unwind_start+0x574/0x7f0 [ 329.994745][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 330.000173][ C0] __unwind_start+0x45f/0x7f0 [ 330.004822][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.010946][ C0] arch_stack_walk+0x73/0x100 [ 330.015596][ C0] ? __unwind_start+0x574/0x7f0 [ 330.020420][ C0] stack_trace_save+0x8e/0xc0 [ 330.025066][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 330.030408][ C0] ? __lock_acquire+0x436/0x2890 [ 330.035314][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.040482][ C0] save_stack+0x160/0x1f0 [ 330.044784][ C0] ? __pfx_save_stack+0x10/0x10 [ 330.049610][ C0] ? page_ext_put+0x3e/0xd0 [ 330.054084][ C0] __reset_page_owner+0x84/0x1a0 [ 330.058994][ C0] free_unref_folios+0xa22/0x1610 [ 330.063991][ C0] ? rcu_is_watching+0x12/0xc0 [ 330.068725][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.074502][ C0] folios_put_refs+0x4be/0x750 [ 330.079239][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 330.084496][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 330.090796][ C0] shmem_undo_range+0x58f/0x1140 [ 330.095721][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 330.101072][ C0] ? find_held_lock+0x2b/0x80 [ 330.105745][ C0] shmem_evict_inode+0x39e/0xbe0 [ 330.110652][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 330.116341][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 330.121768][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 330.127805][ C0] ? find_held_lock+0x2b/0x80 [ 330.132454][ C0] ? evict+0x37e/0xad0 [ 330.136491][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 330.141917][ C0] evict+0x3c2/0xad0 [ 330.145778][ C0] ? find_held_lock+0x2b/0x80 [ 330.150430][ C0] ? __pfx_evict+0x10/0x10 [ 330.154816][ C0] ? iput.part.0+0x619/0x1190 [ 330.159464][ C0] iput.part.0+0x621/0x1190 [ 330.163938][ C0] iput+0x35/0x40 [ 330.167552][ C0] dentry_unlink_inode+0x29c/0x480 [ 330.172636][ C0] __dentry_kill+0x1d0/0x600 [ 330.177205][ C0] finish_dput+0x76/0x480 [ 330.181505][ C0] dput.part.0+0x451/0x570 [ 330.185890][ C0] dput+0x1f/0x30 [ 330.189493][ C0] __fput+0x51c/0xb70 [ 330.193444][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.198614][ C0] task_work_run+0x150/0x240 [ 330.203187][ C0] ? __pfx_task_work_run+0x10/0x10 [ 330.208269][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 330.213450][ C0] do_exit+0x87f/0x2bd0 [ 330.217577][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 330.223180][ C0] ? __pfx_do_exit+0x10/0x10 [ 330.227748][ C0] do_group_exit+0xd3/0x2a0 [ 330.232223][ C0] get_signal+0x2671/0x26d0 [ 330.236704][ C0] ? __pfx_get_signal+0x10/0x10 [ 330.241532][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 330.247050][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 330.253179][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 330.258700][ C0] irqentry_exit+0x38a/0x8c0 [ 330.263266][ C0] asm_exc_page_fault+0x26/0x30 [ 330.268085][ C0] RIP: 0033:0x7f8d1e58f751 [ 330.272465][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 330.278497][ C0] RAX: 0000000000000000 RBX: 00007f8d1e7e6090 RCX: 00007f8d1e58f749 [ 330.286448][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 330.294388][ C0] RBP: 00007f8d1e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.302329][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 330.310270][ C0] R13: 00007f8d1e7e6128 R14: 00007f8d1e7e6090 R15: 00007ffdf7d88cc8 [ 330.318219][ C0] [ 330.321210][ C0] rcu: rcu_preempt kthread starved for 10545 jiffies! g19685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 330.332365][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 330.342308][ C0] rcu: RCU grace-period kthread stack dump: [ 330.348161][ C0] task:rcu_preempt state:R running task stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 330.361599][ C0] Call Trace: [ 330.364849][ C0] [ 330.367751][ C0] ? __schedule+0x10b9/0x6150 [ 330.372399][ C0] __schedule+0x1139/0x6150 [ 330.376879][ C0] ? __pfx___schedule+0x10/0x10 [ 330.381699][ C0] ? find_held_lock+0x2b/0x80 [ 330.386351][ C0] ? schedule+0x2d7/0x3a0 [ 330.390653][ C0] schedule+0xe7/0x3a0 [ 330.394690][ C0] schedule_timeout+0x123/0x290 [ 330.399507][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 330.404855][ C0] ? __pfx_process_timeout+0x10/0x10 [ 330.410124][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.415912][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 330.421345][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 330.426085][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 330.431343][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.436517][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 330.441431][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 330.446257][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.452052][ C0] rcu_gp_kthread+0x26d/0x380 [ 330.456706][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.461876][ C0] ? rcu_is_watching+0x12/0xc0 [ 330.466611][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.471793][ C0] ? __kthread_parkme+0x19e/0x250 [ 330.476787][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.481957][ C0] kthread+0x3c5/0x780 [ 330.486000][ C0] ? __pfx_kthread+0x10/0x10 [ 330.490559][ C0] ? rcu_is_watching+0x12/0xc0 [ 330.495295][ C0] ? __pfx_kthread+0x10/0x10 [ 330.499858][ C0] ret_from_fork+0x983/0xb10 [ 330.504422][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 330.509506][ C0] ? __switch_to+0x7af/0x10d0 [ 330.514152][ C0] ? __pfx_kthread+0x10/0x10 [ 330.518712][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.523459][ C0] [ 330.526457][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 330.532753][ C0] Sending NMI from CPU 0 to CPUs 1: [ 330.537934][ C1] NMI backtrace for cpu 1 [ 330.537947][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.537965][ C1] Tainted: [L]=SOFTLOCKUP [ 330.537970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.537978][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 330.538004][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 330.538018][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 330.538030][ C1] RAX: 0000000000ad640f RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 330.538039][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 330.538048][ C1] RBP: ffffed1003b57498 R08: 0000000000000001 R09: ffffed10170a673d [ 330.538057][ C1] R10: ffff8880b85339eb R11: ffff88801dabaff0 R12: 0000000000000001 [ 330.538066][ C1] R13: ffff88801daba4c0 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 330.538081][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 330.538095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.538105][ C1] CR2: 0000200000019680 CR3: 000000002ae48000 CR4: 00000000003526f0 [ 330.538114][ C1] Call Trace: [ 330.538119][ C1] [ 330.538124][ C1] default_idle+0x13/0x20 [ 330.538142][ C1] default_idle_call+0x6c/0xb0 [ 330.538161][ C1] do_idle+0x38d/0x510 [ 330.538181][ C1] ? __pfx_do_idle+0x10/0x10 [ 330.538204][ C1] cpu_startup_entry+0x4f/0x60 [ 330.538223][ C1] start_secondary+0x21d/0x2d0 [ 330.538239][ C1] ? __pfx_start_secondary+0x10/0x10 [ 330.538255][ C1] common_startup_64+0x13e/0x148 [ 330.538275][ C1]