last executing test programs: 15.051869878s ago: executing program 2 (id=315): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$kcm(0x21, 0x2, 0x2) 13.397419954s ago: executing program 2 (id=316): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0xf65, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) getxattr(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x4b75) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000200)={0x4000, 0x8f, 0x29}, 0x18) utimensat(r4, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000a11d2ff29947cb12acb5ceead700000801030000244e7800000000000000000006050003000100000006000240040000000000000073797a300000000004"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008094) 12.25808955s ago: executing program 4 (id=320): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5"], 0x40}}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x10003, 0x7, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) 9.312794525s ago: executing program 2 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_cmd={0x4f, 0x4aaa, 0x8, 0x5, 0x4, 0x3e, 0x0, 0xc, 0xfd, 0x4, 0x0, 0x4, 0xffff, 0x10, 0x0, 0x200, [0xffffffff, 0x3]}}) syz_usb_connect(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x4c, 0x43, 0x1d, 0x20, 0x424, 0x7850, 0xabed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x87, 0x90, 0x7, "", [{{0x9, 0x4, 0x43, 0x81, 0x3, 0xff, 0x6, 0x19, 0x7, [], [{{0x9, 0x5, 0x1, 0x1, 0x10, 0x1, 0xfa, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x6d, 0x3, 0x8}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x7, 0x2, 0xb}}]}}]}}]}}, 0x0) 7.740830349s ago: executing program 3 (id=332): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$kcm(0x21, 0x2, 0x2) 6.90099748s ago: executing program 1 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2}}, 0x20) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfdab}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x4, 0x8, 0x9}) (fail_nth: 2) 6.896363017s ago: executing program 0 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 6.484022218s ago: executing program 3 (id=336): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x79, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x6b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x57, 0x0, @opaque="41a9e724407e39aa13e29095b5d0f56cf568696f32435c6e21bbf0be0b3e85d3310b28028356b529fa84e5302fba8518df74e70ac80bd01ab3b5fa8c5ccda7270f7f2197bcb33b483c5470ceb021c3"}}}}}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4000, 0x59, 0xf644, 0x7, 0x4, 0xffffffffffffffff}) prlimit64(r3, 0xa, &(0x7f0000000240)={0x5baf24d, 0x3}, &(0x7f0000000280)) recvmmsg(r2, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/162, 0xa2}, 0x80200000}], 0x2, 0x10103, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$setpipe(r0, 0x407, 0x9602) 6.172716662s ago: executing program 0 (id=337): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x400002}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x16, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x2, 0x3, 0x9, 0x1, 0x6}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x8, 0x3, 0x2, 0xfffffffffffffffc}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query]}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0xefa1ee8d6b520445, &(0x7f0000000000)=0x6, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x10d, 0x32}], 0x10}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) 6.164336187s ago: executing program 2 (id=338): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea3d985f74500004e23e3f58e76110165f450e71b0075e30025002d8d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e7109980d6d6f23a9b00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc81e, 0x80, 0x4, 0x840000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) ioperm(0x0, 0x2, 0x7e) 6.032586652s ago: executing program 1 (id=339): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read$ublk_bdev(0xffffffffffffffff, &(0x7f0000000800)=""/82, 0x52) capget(&(0x7f0000000440)={0x20080522}, &(0x7f00000007c0)={0x9888, 0x2, 0xf17d, 0x7, 0x7, 0x4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010200100021040000000000000000fe88000000000000000000000000000000000000000000000000000000007b8db49e700a0000000000a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}}, 0x0) r3 = msgget$private(0x0, 0x31) msgsnd(r3, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r4, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) keyctl$update(0x2, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000001300)="300880db7d651c2a83a5124f12ac338a7a0c61eb4f7c37ec1e05125475989777381289a1aaf49cbb53fc51bfe082b71c65e5a5358681d3a8b4289ffca729354581a09bf0f1cb5eae6ab448f2c217ea2c08b7e2c1e1f09d6ebf4a634d3e7a3bd634dfff81d0521788910a667dfa01c8e16c360f98fbdad10305bd53b86cc239335e75edbcbf981225c5f256f8498113759508f011bea04e9ec7249d6f0307367915e35a21fd70545e814c31f877fe6bdadd76179fbf80a4ea5302bac5b75ae9c4c7eef452b69a90c7921686e78c081a32441cfdda67c40161a880b84820e55dc74891c41573fa64076dd1ee2f167674478e1ace2c3ca4e47113cbec0582a1aa2a1bc484ad367292edf483d5dbe6b725674595cad44a29d5c3385687c0ae67a618faed029a5d31bda4735b9b5faf78ef5f1c508a1a06acdaa4cb2672b112b5ef212111ed8fe7f333f83682260f507b846ea30971de692730149146feb0c206aa67c6b994cb63f39540baa4212c758c6896eed5207f4236270f603ee14fb11ce128b7b3083fb2a0b7fca8d6d0355e9aa604fcb504d424d29e36c101b71489b6f3a2e514bff63a35b987f994a3392a6ce2e0530af8480189991e6e5cc57cdcf593a7d572d6cd077242b04566cb08176559f1f3559113a3b46a17589f7d53b1d7563c93bd123ed4b56e1c0862e5b7bcd2ceba82e66d8f6f9966289e8238d7a964707c0ae7e3d4750638714e9aab39895c16c0a8772a9523bbc3e12b7e278c2c02701269d1cc46f3af172094c7082bde379925da7502344f583a517138ebdc835a35805dcf8cdbf72349f873e257df5ebdc6f0cf9c8a1c959890797f710bf7f93c0db47623e4ee438551b3baa396115df590257427a5e4479ae0b446cdf896c50d03a1a97776ca73dff27a0bb2fdc2d26839460d5de98fc086486b2548d2785f94df27a597a5f5a0828009eb09f47a2c73e2fc59c7d6a1e6d8a379d15ce1e1b3654317c0528bc89a18112a28d5d9bf7ea4d700dde50ad2a7d975476e981f37cb5199b867e11250acb5da2f09af98c7d4c44dec4584cfd1de22533540a5d2e9bef34be49edc076a00c4f8e775d07ab0d5143e4ef22186a2541af18c74085f62937221ddaf9dc9e12fb38255f8b165b3954734b42f66ab340af511c0a04c0f29103bffe2b69e8b752eb35fa8235f670152f8a1c39a2cfbc87fdb955cc35fe7d98108e7e2b55349c08f278684fd554df1af1ea4524940f72f1819498a0a41644478040d8a1276c10315043e5310e12ca80fb56c20f133927d774d83bda17e631077c28a5a58faecd082f37f7fed4c5722f3e302823117750e1dd096124fe9b9b680d7dba8b6ed9239957c195e1df289576d1cfc31ece1d2ceffc12772690a248bdc5fcd8eb4e524bd725ed51d1d3fce7dd27156956d6bb536224aeb9b31c1c4217dc8673200057b090798a94dc9e4defd56a1d39fee962508f49ae267443a4c57a569bc14c1c9ee8e1496ca36f33f1177c8ed64153340b16c9599cbdaf57605168beb84c87242a480ea791119238603cbfbdff681c8242efa0f95dcfe2a5c361165c374acab7d0071cfb84de3f66f99703697c99059e0e86d7b5209b10324e279f41f310d231687eade3039dd51136d427c1229e70014aa105b5056af8bfbbeaf024435caef7e0f89a1c046f7a0f85ec2cd3db359f7e2178269126dfef0f944505f009779a61506b9946f8350b6e6fa17ac10fc4fcf5cd2dad375305f2b15894f6471bda6a963ac46adf13b332566ccf7f315a6daec9d75e543bbcafb65f0b72d12b198fb2d136155b9a353d7a4263bf09560c5c0fad6a762e2aa117aa9abc5926399b894f27a5ebf2106c40a3c1efacafc7c6999f9cc9b96678ade39cf1277dcc862a5cbf746915d216fc9d4898d3dd9dbd8d8c94c411483a23eaf52bef56fc2be47c4945ecf8f2ebf077d51cfa50c0c26a41167ce3120558bc145c1ec56d22ce35875792d22c11720fea8016369d877c128d36174cf4b92e0eff0da29613c7e7e7bf4e0868b8ad9c4bbf87a0ff2fc11a7a408cff6eb478f65361c0a5787d2dfcbb41f68ac40a3a7aaef976a543debf36f0453e1b99d441ed2ddf98e921a2a731bb99b0ec6915fe8de12c8404158bd9804d092afd93be1239431afdcb2887744b97d70fed5d96ef7d8c23ab847bc13ab101534ca12a3217f254fb5a3c05eddbcc771087bae8c0f3cdefc082e6d330233ae5fcba576c5495e8148792d1561a9d62ac90b1d7f1e890df53da7fb789d90494d1ef81237ac7cb4a80d0bfb964dafbba2420bd8cfc74b1b1b4c8b79379cf3c56492e7b22a83d883c8a16ec18c1cfcb275e2b8d230bdc034ec56f73800fdce9a1a476ea9bade8f57b1ebd89d776880636346f045a31850350cf20813602d2d385e74fdbc04b486996ea1ba23d7460462d41c51b34df65c1748b21a1379f0f808769444794895ad1ff9b3a19b8f37b7df12a01177f74188234e0cbb4ba1ff5da78544a19b2371a2bb3835c2543c0007c0dd399a812de9c582e4da294fd5104b44826dd767e1ec5bd70a46c12bb18b0c73aca88edadf185cb6eea9a06b89bb7589ccc4c0d8d88066e3b20f5c3444f68266a56b067409220bf64fbd7c9e94e1589cebd1a3f7bbf403cdc8c0380dec2fcaa2fbe61a252599023558fbe4af21d13e441b670305af76292dc52cc63524fc2f565e1d27d92d8943f98a8dacabdf87e7f82fde7bb29ecb5427beca8fc64a78d997fdbf1365ef4b3cb0c77bc0622bb5415c3c3c0f3d86b79bf273bb45c609cfefec7f22095b8c93e345a0ebf389c9e4522a06e6831fe56e4ce8d88d73076a4b1ddc61ec0d729b0aadce1da2b5040467af7908e502854743d368133ee6e4adde7ddc237a242727ae4a677731b0d1473811af65e509906d75782ab901e580d7a7ef16f9a1d584a7849406c7a1b016689d7e7c77ff89487824362f94e8373286b42e904367d3876a376845f57a4f9e8c018e8637371adfafea469f28ff992e270c25121a5bd078d029ecdc8f037880c900dadbb730b02dc8471828850d9fa50eff8d06b524e3b291bfb2082ace5b33682730ddb629c29d9e76e7c44203bbc10c895d11c23bfcfbd028d94a6566c60764dbc127b6f5d24a126b00e4bed27656b0da70e49f4714de05d1d3b73efe347c63fc95537f66d534df6417ace70fac7fa5c597c70cbfb9b3dda5a2383ed0c5740539e63724cf95c8512b615ebaf6402d6c84cb12bff82ba59e9778e05b1b524612db16db51203728dbad47b808315587174b9be6ccb6995787c98cc0dcd4155e71d0b066ab3e1b1e1955a38dba683c404d207c901d897681890048853b4f34d931e45bb4d5e403f7f90cf3a17bb7ce8c9e94c26cbfd1b948c9756d2a7a514e6f3f7250a77ff2c3b1652c01f622512e2a0cd6738783460b904525fd06d12579286083885aca76fdbb32f8a2641786039f2aea8dd549bc9ecbc0a96d3781bea250a3652649e36532b7efd3f5a20a9d73b2372f7ebd0dd01bf8e314a158e0a3819828ee1e8c4ba24cc3542fff99e4053359799252f370a64002be225da13a93ba8c068cbec6a68871587f31cd6103cd9710ecdfd0e3f7373484138ddc28d97b596be3aee0084fcf36b25d3a89eb9ba0e25b1601c795fe5a7cc3bcbff3e8a3fbbb1e6c6a75a1cc4fd67ec5d4b2644d4fdb80aa8eac1152b9b0b628c624c1306f6d41a8fc9a84761f0ebdc45d695bc42234e1b7afc07e2ef90b2aa543746ad22b8916c4b0442752c96226bd429f262c5fd226162e884a4955766a36fa33c898d36796c78b53ea860d8e83b47c5491ef095700dc8f14ccc29efe67f39b3e98df672490a1b971c40c649c4eb6064995371bedc95cc97840a5b3de03e1dbaf85a5831e3db3120b35edbefde33ffc3c27667f489097b6f5d4b12f54de82073729683f399c80aa70091d3344de79a6e79fa5f555c715649e8001a3834180587b32c8c9d5fbebae0686d9c98247f013719afa50d1094653927f4f63ae3b8330f1c8ead01d4658ab5546fcd38e5c28d36bdaf8507b61e3033282618503b323680cf03413c3e0b991c6d0e1e78102e18925deb7709dd9c6730f597da2c4ad553c3dc477166846bccd8b119f6522e7d7ecfc7c9c27b3a161609610deeb20eaf04a037bfa41be43f6c7953488647390c0da87ed31d513b5b7441b7073fd8e1883fd0290e123e389e43843e9b0c595f774e73cb950aef3c32563253196c6ad65c32331c3e7868b2c3cad70f83368654430e2d2d1d6d3ad2a1426998e7cf94e43093d020e4cdfa7a9131f10bf4aaeea87d7256c4eaf6bde63870e7fbac5bcff0488e6dd695e4746f82c3cae82e6345a731576fa86d03b7c0c2a696b1457f4c1665b916b513d7ce8faf865e0de229c27026a83c9d5ce1e2a96d9ab9fc6ed3cd64c7e8675a56eb2dc82eea2c9d90ad2dd82e4f0c910becb23b0c08974bd08166b948fbeb2ff5910dc8088a77c5e29b45422e7df28d9655a727f488463896c1b29dfa6cad5a07858451f0bd6016260b469e5bea2ae51cbd6c168d2a3d9e7ed391b9c56e49bb85c9e16bbb251c9928f82ba5275ed58c6b315049a38a5b672e3bcf03a3ae9510fe5d9c4b873698b77faf9ec6aa762495d22b9aca25bc5f7ba4da9d39c3e63aa6aa43e6a75b567111f9c0a7c03c05ecff218a4e0843828ecd25e4916de2215be4bb6d4fc7f1cf8d38c1e610ab50ad17c15844c11a2c1a47c5336c4383c4fc4fb9f09ee792f1e369f59d255d8016298b9d2d0860c7fb0ed39910e777baa0aa2ac321407baaa4049b4bdf9311b4ff266261b9bc379f2e68d22cb7c8e145eda602291d993c70e5ec6104d878a5d5ca80058ad4f2b1a22d41b27cbc2d7efd753d9a712a982a0ca2a9dca5f5cfa7852b212a5cdf0f3b929223e5863e863688d4ecb92e3648fb77af99874bacf6e3bfd267cc25329fa77dd2fc2ab4734542f108fb3b1cfdc1c5cc168c4b756d706a4c8273665ee36987b2518097a69631be3ddb5abde449ee0fca369f0f9801fc1399376c650dc3fb8f421bad1d7841c2a230000c2efb015fb2ec5bc7c129c98f3408bc55fce0efaa99721e341296952cbc7ced83b94639b10784d50329cb0bc9c09681e2196d273b7188e56b7c41b532099e13e65a705b1782f209fc0ad843ff8fe52d076f15c9df36a41b9c0037979f835a335d0cf8562e1bca62e940f08ffd70129d4d5e6f3cd569ff277cadb684248f1b8ee1452962938251288b4f94968eada5a5b1daf7530d3197975c964b79c3247f6d828b7137fcd75a8cbec176335c6e54d7e17db51af874077046e567cd03b03cbbbd87b1c63057aff84ab21d4fb897617efb78c16294e9ba445cb4d237201e54a93fcd7de467cb886fc1a6bda1ecd01a27f63fcaa1a6049ce4742d8e6b93a5d9078127ead7a5674a77383646607d77d98ed5888a2c61a95676a73eef659882e7a74176eb3e7be620a8b6eb924623f366f302299b61c48b2d41247edea598f3848ccc98c3b11dd2dcef567d76126cf235a3f0e57bfaa92fd68488b930bcd56d721678ec2a7319973873a8c4d22db83ae4075b1e654d174847e4babe846cd371350eed075f0e14786be281624adbd1a495351a7e6231c36b7d500c14607c1e394e4fd084fc47deb7e5ac32a865de9b7813a5cfe4353d7f9c05c35eeb794f14a24c0ada1a9b5e476959e3e15bcde072d97accb1485ca477e284f1bab77e3aceb60c9f196ca3699ca19c542102ba91eea53985c38c9c7d100a5dbc5557d543e865a4f", 0x1000, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x17c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {}, {0x10, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14c, 0x2, [@TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x5}, {0x8, 0x10001, 0x5, 0x0, 0x4, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x200, 0x3, 0x1}, {0x8001, 0xfffffffc, 0x8000, 0x7ff}}}, @TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x8001}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4}, {0x8, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="0b68e935b3", @TCF_META_TYPE_VAR="9f530af75818", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3e5c0959b525b8eb6f", @TCF_META_TYPE_VAR="3e4a6c10ed0e9e5d64"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5, 0x2}, {0x1000, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0xc, 0x2}, {0x6, 0xa, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x70, 0x1}, {0x4, 0x9f}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xf140, 0x1, 0x1}, {0x6, 0x6, 0x3, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x523}, {0x9, 0x8000, 0xc, 0x7, 0x2, 0x2}}}, @TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x473}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0x1, 0xb, 0x5d, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x66a6}, {0x5, 0x2, 0x1, "9cc0"}}}]}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 5.122343829s ago: executing program 0 (id=340): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 4.610890055s ago: executing program 2 (id=341): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r4 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r5, &(0x7f00000000c0)=@FILEID_NILFS_WITH_PARENT={0x20, 0xf8, {0xfffffffffffffffa, 0x8, 0x1ff, 0x2, 0x5}}, 0x402800) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbff, "7c4f3355c868869af7fc2371415cf7924f2ad329db284fae30fbadca763620682a550143ea4f3f3e80e43e7bd56ac3ed60c3bdf9703943d3c0789b6782c51f3a22b067b92d8780b2426997d7494f09f29a0e8b83f7439922535d88f8c38dda89bfc90b386d4a00f0e49192562443cc2385e3ad41870cbaaf9bb5ed5629c77776e56fbe073ab518d1e47a1756f9f65dd6fb94702729c135dfa6276bf5", ["", "", ""]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x1) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) 4.309726999s ago: executing program 3 (id=342): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xd, 0x7, 0x2, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x8b, 0xd2d, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x3, 0x880, 0x4, 0x6, 0x100, 0x2, 0x6, 0x7}]}, 0x78) close(r4) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000500), &(0x7f0000001200)=@tcp, 0x1}, 0x20) 4.292789481s ago: executing program 4 (id=343): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xa, r2}) 3.749827567s ago: executing program 1 (id=344): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x400002}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x16, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x2, 0x3, 0x9, 0x1, 0x6}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x8, 0x3, 0x2, 0xfffffffffffffffc}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query]}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xefa1ee8d6b520445, &(0x7f0000000000)=0x6, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x10d, 0x32}], 0x10}}], 0x1, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800010000000000010000001d0100001500f0ff010000a004020000505bfc802cc24988010000000800050003fd080257c80eaa5df6b98360c1d633f5f07bf7570c0105806aa6bad3c4465a1b4cc537ea6d446b92b984c3dd8544cc33ecbd41da909a323faefa4716cfb6b4b587264cf554227503eef4f065780a601a92d480cac95d4d6ed3eaeffcacee936019bd64037f3ba192039b383c7df89a9d0c6f42addf9b31a907ee728fceeb5023a5ba644d70c00d6ae9789c8613f885df929c9a786e58d0e358b18b3606015c7ec33f45f6527aa3b05e9425a9bc8c90fe340f852693ad3513662208845d0f1852be5244"], 0x34}}, 0x20008030) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x44000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001500)=@filter={'filter\x00', 0x42, 0x4, 0x12b8, 0xffffffff, 0x98, 0x1188, 0x1188, 0xffffffff, 0xffffffff, 0x1220, 0x1220, 0x1220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}}, 0x287, 0x10c8, 0x10f0, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x8, 0x1, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@ttl={{0x28}, {0x2, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff00, 0xff000000, 'geneve1\x00', 'gre0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1318) 3.715255955s ago: executing program 4 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/233, 0xe9}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x17) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x10000) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0) 3.473213171s ago: executing program 2 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181203, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000840)={0x40, 0x0, 0x6, "8c61d243d697"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x1, 0x2, @loopback, 0xc}, 0x1c) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226d270000100000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000400)={0x40, 0x5, 0x3, "c735d6"}, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x8000000, 0x1, r6, 0x11}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x27800000000, 0x0, 0x4, r6, 0x5}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @time={0x8323, 0x344}, {0x0, 0x3}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfa, 0x94, 0xfe, @time={0x4, 0x80000007}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {}, {0x0, 0x6}, @time}], 0x70) 1.975863439s ago: executing program 4 (id=347): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea3d985f74500004e23e3f58e76110165f450e71b0075e30025002d8d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e7109980d6d6f23a9b00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc81e, 0x80, 0x4, 0x840000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) ioperm(0x0, 0x2, 0x7e) 1.751946405s ago: executing program 3 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 1.682161707s ago: executing program 0 (id=349): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x1, &(0x7f0000000180)) 1.680613409s ago: executing program 3 (id=350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c141b2126fd1b493c385a7a", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.366479569s ago: executing program 0 (id=351): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f000003c000/0x4000)=nil, 0x4000}, 0x7}) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 1.337474039s ago: executing program 3 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newchain={0x540, 0x64, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe0}, {0x10, 0xd}, {0xe, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf}}, @filter_kind_options=@f_basic={{0xa}, {0x4b8, 0x2, [@TCA_BASIC_POLICE={0x4b4, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0xa, 0x4, 0xb, {0x5a, 0x2, 0xcc, 0x2, 0x3, 0x8278}, {0x7, 0x0, 0x7, 0xde, 0x9, 0x7}, 0x6f, 0x4, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x4, 0x9, 0x10, 0x8, 0x0, 0xffffffff, 0x3, 0x7, 0x200400, 0xffffffbe, 0x8, 0x7, 0x1a, 0x5, 0x3, 0xe, 0x5, 0x976b, 0x1, 0x81, 0x3, 0x9, 0x456, 0x9, 0xfffffff0, 0x8001, 0x3, 0x5, 0x3034, 0xff, 0x5, 0x5, 0x5, 0x3, 0xfffeffff, 0x7ff, 0x4, 0xfffff000, 0x7a5, 0x3, 0x81, 0x2, 0xd6a, 0x0, 0x1, 0xfffffffa, 0x8, 0x100, 0x6, 0x1, 0x3, 0xfffffff8, 0x7ff, 0xb5, 0x3ff2, 0xfff, 0x2, 0x1000000, 0xff, 0x8, 0x5, 0x6, 0x5, 0xfffffff9, 0x3, 0x4, 0xf7, 0x44e7, 0xfffffffd, 0x0, 0x8, 0xa, 0x6d, 0x5, 0x4a7, 0xffffff01, 0x9, 0x6, 0x7, 0x8, 0x1, 0x7, 0x8, 0xfffffffa, 0x7ff, 0x517, 0x5, 0x0, 0x7ff, 0x7fffffff, 0x2, 0x4e64, 0xea7, 0xfffffffd, 0x9, 0x9, 0x1800, 0x5da, 0x1, 0x9, 0xc8, 0x0, 0x4, 0xffff, 0x9, 0x8, 0x5, 0x100, 0x70, 0x0, 0x4, 0x6e, 0x5, 0x0, 0x4, 0x9, 0x4, 0x7a5, 0x3ff, 0x9, 0x0, 0x8a46, 0x40, 0x6c52, 0xc1a7, 0x4, 0x7f, 0x80, 0x0, 0x7ff, 0x8, 0x9, 0x5, 0x5, 0x130, 0x2, 0xd32a, 0x2469d16a, 0x7, 0x80000, 0x7, 0x7fffffff, 0xb617, 0xfffffff9, 0x400, 0xc2, 0x7ea8, 0x80000000, 0x8, 0x9, 0xfffffff8, 0xf2, 0x4, 0x951, 0xffffd580, 0xfffffffb, 0x7fff, 0x3, 0x80000001, 0x4, 0xff800000, 0x6c3c4dae, 0xe17, 0xa12, 0x8, 0x9, 0x6, 0x0, 0x4, 0x0, 0x1, 0x3, 0x40e, 0x800, 0x30ac, 0x8, 0x4e0a, 0x1, 0x3, 0x7ff, 0x7, 0x1b2, 0x5, 0x314, 0x0, 0xfffffe00, 0x4, 0x2, 0xffffffff, 0x7ff, 0x5, 0x8000, 0xe7a, 0x6, 0x6, 0x5, 0x8, 0x8, 0x7, 0x400, 0xffffffff, 0x9, 0x1, 0x2, 0x50, 0x1, 0x800, 0x3, 0x8, 0x0, 0x7, 0xfffffe75, 0x8, 0x7, 0x3, 0x80, 0x5, 0x482, 0x64d, 0x4, 0x2, 0xfffffff7, 0x7f, 0x6, 0x5, 0x0, 0x0, 0x4, 0x1, 0x101, 0x5, 0xd, 0x7, 0x0, 0x0, 0x10, 0x0, 0x9, 0xed, 0x5, 0x8, 0x5, 0xfff, 0x9, 0xc, 0x6, 0x40, 0x0, 0x7f, 0x3, 0x1ff, 0x174, 0x2, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14}, @TCA_POLICE_TBF={0x3c, 0x1, {0x16ac, 0x8, 0x1000, 0x894e, 0x2002, {0x10, 0x1, 0x4, 0x9, 0x6, 0x9}, {0x3, 0x2, 0x3, 0x7, 0x1, 0x2}, 0xd0000000, 0xb, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf43}]}]}}, @TCA_CHAIN={0x4, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0xd}}]}, 0x540}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x9100}, @void, @eth={@broadcast, @broadcast, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "aed50ed9628cc7a6def5ed685950a379fd673fc8f4b93c6e3e0f57225a860d48aee267414fe8ff4a3767fa985c7b8566c59a146e89d0cd3b62379df8510c6dbe"}}}}}, 0x5e) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000003740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x58, 0xe, {0x8, 0xb, 0x0, 0x1, 0x1, 0x23, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x6, 0x7, {0xa, 0x25, 0x25, 0x6, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x7, 0x6, {0xa, 0x25, 0x25, 0x0, 0x6, 0xff}}}}}}}}]}}, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0}) 1.267952341s ago: executing program 1 (id=353): pipe(&(0x7f0000000040)={0xffffffffffffffff}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x79, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x6b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x57, 0x0, @opaque="41a9e724407e39aa13e29095b5d0f56cf568696f32435c6e21bbf0be0b3e85d3310b28028356b529fa84e5302fba8518df74e70ac80bd01ab3b5fa8c5ccda7270f7f2197bcb33b483c5470ceb021c3"}}}}}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4000, 0x59, 0xf644, 0x7, 0x4, 0xffffffffffffffff}) prlimit64(r2, 0xa, &(0x7f0000000240)={0x5baf24d, 0x3}, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/162, 0xa2}, 0x80200000}], 0x2, 0x10103, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.204733711s ago: executing program 1 (id=354): ioprio_get$uid(0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x03\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x0, 0x1200001, 0xffffffff, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) socket(0x23, 0x5, 0x0) 1.201783747s ago: executing program 0 (id=355): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0xffffd000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="496f88c1d91a61ce0ed9a2d8be301235e32911dc476980f934b6f17887e12455d844287eb22fa48a55512d34d9a098d38b8e2355c810580a2e302cc364d0845e48f3df799f6a8173487b95e3eadeffa40a7c87cd6b3b97c3a29b12ac82f3afcf3eb87acc71bb6024ae82f55074a42b0148a46f4600d5879e2448ec66b5601820223919b1f43b0bd92af6733264f601f6f0a2ba46683b9ecde77e05c1cc311f77aeaf86176078c0d265c04125e761ebb27af8a9d8c04bb11e9c0d3c00c44b27", 0xbf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) 1.032864797s ago: executing program 4 (id=356): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 191.517078ms ago: executing program 1 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/233, 0xe9}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x17) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x10000) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0) 0s ago: executing program 4 (id=358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xd, 0x7, 0x2, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x8b, 0xd2d, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x3, 0x880, 0x4, 0x6, 0x100, 0x2, 0x6, 0x7}]}, 0x78) close(r4) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000500), &(0x7f0000001200)=@tcp, 0x1}, 0x20) kernel console output (not intermixed with test programs): .086903][ T6071] RAX: ffffffffffffffda RBX: 00007f4cdde15fa0 RCX: 00007f4cddb9ce59 [ 96.086917][ T6071] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 96.086931][ T6071] RBP: 00007f4cdea2d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.086943][ T6071] R10: 00000000000001f4 R11: 0000000000000246 R12: 0000000000000001 [ 96.086956][ T6071] R13: 00007f4cdde16038 R14: 00007f4cdde15fa0 R15: 00007ffe47130938 [ 96.086985][ T6071] [ 96.291246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.514459][ T6072] comedi comedi0: Minor 3 could not be opened [ 97.013768][ T6096] IPVS: sh: FWM 3 0x00000003 - no destination available [ 97.020968][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 97.030627][ T6096] IPVS: sh: FWM 3 0x00000003 - no destination available [ 97.037800][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 97.058316][ T991] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.066383][ T5742] IPVS: starting estimator thread 0... [ 97.129725][ T5620] usb 5-1: USB disconnect, device number 9 [ 97.201176][ T6097] IPVS: using max 34 ests per chain, 81600 per kthread [ 97.271391][ T991] usb 3-1: device descriptor read/64, error -71 [ 97.286136][ T48] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 97.332582][ T48] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 97.347042][ T48] sd 1:0:0:0: [sdb] Sense not available. [ 97.354350][ T48] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 97.364084][ T48] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 97.374309][ T48] sd 1:0:0:0: [sdb] Write Protect is off [ 97.394402][ T48] sd 1:0:0:0: [sdb] Asking for cache data failed [ 97.402833][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 97.402846][ T30] audit: type=1400 audit(1781029776.264:285): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 97.436331][ T48] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 97.462142][ T804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.463330][ T30] audit: type=1400 audit(1781029776.324:286): avc: denied { write } for pid=6098 comm="syz.1.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.526020][ T48] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 97.560974][ T991] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 97.719676][ T804] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 97.777246][ T804] usb 1-1: config 0 has no interface number 0 [ 97.862180][ T804] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.052174][ T804] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 98.133783][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.156954][ T804] usb 1-1: Product: syz [ 98.170379][ T804] usb 1-1: Manufacturer: syz [ 98.182154][ T804] usb 1-1: SerialNumber: syz [ 98.192414][ T804] usb 1-1: config 0 descriptor?? [ 98.209938][ T804] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 98.252444][ T5820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.259963][ T991] usb 3-1: device descriptor read/64, error -71 [ 98.300770][ T5882] udevd[5882]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 98.381002][ T991] usb usb3-port1: attempt power cycle [ 98.409674][ T30] audit: type=1400 audit(1781029777.264:287): avc: denied { create } for pid=6108 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.429783][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.445646][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.463603][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 98.473492][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 98.489570][ T5820] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 98.498843][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.507095][ T5820] usb 2-1: Product: syz [ 98.511983][ T5820] usb 2-1: Manufacturer: syz [ 98.516598][ T5820] usb 2-1: SerialNumber: syz [ 98.524576][ T5820] usb 2-1: config 0 descriptor?? [ 98.530400][ T6099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.538257][ T6099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.572426][ T5620] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 98.668166][ T6090] bridge1: entered promiscuous mode [ 98.685161][ T5732] usb 1-1: USB disconnect, device number 7 [ 98.699136][ T5732] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 98.720705][ T30] audit: type=1400 audit(1781029777.574:288): avc: denied { read } for pid=6108 comm="syz.3.86" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.748119][ T30] audit: type=1400 audit(1781029777.604:289): avc: denied { open } for pid=6108 comm="syz.3.86" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.750820][ T991] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.774044][ T30] audit: type=1400 audit(1781029777.604:290): avc: denied { ioctl } for pid=6108 comm="syz.3.86" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.807422][ T6099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.816393][ T6099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.825814][ T5620] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.825989][ T30] audit: type=1400 audit(1781029777.604:291): avc: denied { ioctl } for pid=6108 comm="syz.3.86" path="socket:[10278]" dev="sockfs" ino=10278 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.838396][ T991] usb 3-1: device descriptor read/8, error -71 [ 98.871010][ T5620] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.884309][ T5620] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.893543][ T5620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.109192][ T5620] usb 5-1: GET_CAPABILITIES returned 0 [ 99.114940][ T5620] usbtmc 5-1:16.0: can't read capabilities [ 99.161077][ T991] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.181629][ T991] usb 3-1: device descriptor read/8, error -71 [ 99.301825][ T991] usb usb3-port1: unable to enumerate USB device [ 99.322707][ T30] audit: type=1400 audit(1781029778.184:292): avc: denied { create } for pid=6114 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.351948][ T30] audit: type=1400 audit(1781029778.204:293): avc: denied { bind } for pid=6114 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.438352][ T30] audit: type=1400 audit(1781029778.294:294): avc: denied { name_connect } for pid=6114 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 99.764590][ T991] usb 5-1: USB disconnect, device number 10 [ 100.050322][ T5820] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 100.074828][ T6127] comedi comedi0: Minor 3 could not be opened [ 100.098189][ T5820] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 8c:61:d2:43:d6:97 [ 100.113628][ T5820] usb 2-1: USB disconnect, device number 4 [ 100.124117][ T5820] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 100.181015][ T5742] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.353641][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.482652][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.493616][ T5742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.504367][ T5742] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 100.514051][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.522273][ T5742] usb 4-1: Product: syz [ 100.526614][ T5742] usb 4-1: Manufacturer: syz [ 100.533496][ T5742] usb 4-1: SerialNumber: syz [ 100.617414][ T6140] netlink: 798 bytes leftover after parsing attributes in process `syz.0.95'. [ 100.648224][ T6140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6140 comm=syz.0.95 [ 101.139888][ T6145] trusted_key: encrypted_key: insufficient parameters specified [ 101.210816][ T5732] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.392752][ T5732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 101.441637][ T5732] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 101.465801][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.478060][ T5732] usb 5-1: Product: syz [ 101.483841][ T5732] usb 5-1: Manufacturer: syz [ 101.489336][ T5732] usb 5-1: SerialNumber: syz [ 101.518502][ T6141] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 101.630900][ T5820] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.780877][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 101.793639][ T5820] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 101.815786][ T5820] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 101.833555][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.851279][ T5733] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 101.852998][ T5820] usb 1-1: Product: syz [ 101.879630][ T5820] usb 1-1: Manufacturer: syz [ 101.889466][ T5820] usb 1-1: SerialNumber: syz [ 101.904123][ T5820] usb 1-1: config 0 descriptor?? [ 101.926170][ T5820] gspca_main: sq930x-2.14.0 probing 2770:930c [ 101.949197][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.962836][ T5732] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 101.968045][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.002225][ T5733] usb 3-1: device descriptor read/64, error -71 [ 102.022795][ T10] usb 5-1: USB disconnect, device number 11 [ 102.045838][ T10] usblp0: removed [ 102.260839][ T5733] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 102.412031][ T5733] usb 3-1: device descriptor read/64, error -71 [ 102.542445][ T5733] usb usb3-port1: attempt power cycle [ 102.587566][ T5820] gspca_sq930x: ucbus_write failed -71 [ 102.608829][ T5820] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 102.663154][ T5820] usb 1-1: USB disconnect, device number 8 [ 102.693817][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 102.693832][ T30] audit: type=1400 audit(1781029781.554:313): avc: denied { ioctl } for pid=6163 comm="syz.4.103" path="socket:[10498]" dev="sockfs" ino=10498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.880830][ T5732] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.900855][ T5733] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 102.921208][ T5733] usb 3-1: device descriptor read/8, error -71 [ 103.028346][ T6168] IPVS: sh: FWM 3 0x00000003 - no destination available [ 103.036480][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 103.047465][ T6168] IPVS: sh: FWM 3 0x00000003 - no destination available [ 103.055594][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 103.361496][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 103.383550][ T5732] usb 2-1: config index 0 descriptor too short (expected 26, got 18) [ 103.393746][ T5732] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 103.410611][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.420276][ T5732] usb 2-1: Product: syz [ 103.429826][ T5732] usb 2-1: Manufacturer: syz [ 103.438354][ T5732] usb 2-1: SerialNumber: syz [ 103.447113][ T5732] usb 2-1: config 0 descriptor?? [ 103.455026][ T5732] gspca_main: sq930x-2.14.0 probing 2770:930c [ 103.480856][ T5733] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 103.501486][ T5733] usb 3-1: device descriptor read/8, error -71 [ 103.611771][ T5733] usb usb3-port1: unable to enumerate USB device [ 103.756647][ T30] audit: type=1400 audit(1781029782.614:314): avc: denied { mounton } for pid=6178 comm="syz.4.106" path="/19/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.779786][ T30] audit: type=1400 audit(1781029782.614:315): avc: denied { name_bind 0x1000000 } for pid=6178 comm="syz.4.106" path="socket:[10216]" dev="sockfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.963971][ T5742] usb 4-1: cannot find UAC_HEADER [ 104.047151][ T5732] gspca_sq930x: ucbus_write failed -71 [ 104.061137][ T5732] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 104.071977][ T5732] usb 2-1: USB disconnect, device number 5 [ 104.137082][ T5742] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 104.149798][ T5742] usb 4-1: USB disconnect, device number 8 [ 104.188217][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.251080][ T804] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.401486][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 104.423661][ T804] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.433037][ T6195] FAULT_INJECTION: forcing a failure. [ 104.433037][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 104.445787][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) [ 104.445813][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.445825][ T6195] Call Trace: [ 104.445832][ T6195] [ 104.445840][ T6195] dump_stack_lvl+0x100/0x190 [ 104.445870][ T6195] should_fail_ex.cold+0x5/0xa [ 104.445899][ T6195] ? bpf_test_init.isra.0+0x88/0x100 [ 104.445919][ T6195] should_failslab+0xc2/0x120 [ 104.445943][ T6195] __kmalloc_noprof+0xe0/0x850 [ 104.445981][ T6195] bpf_test_init.isra.0+0x88/0x100 [ 104.446006][ T6195] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 104.446040][ T6195] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 104.446069][ T6195] ? find_held_lock+0x2b/0x80 [ 104.446089][ T6195] ? __fget_files+0x215/0x3d0 [ 104.446127][ T6195] ? __fget_files+0x21f/0x3d0 [ 104.446159][ T6195] ? fput+0x79/0x100 [ 104.446187][ T6195] ? __bpf_prog_get+0x97/0x2a0 [ 104.446213][ T6195] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 104.446241][ T6195] __sys_bpf+0x1725/0x4b90 [ 104.446277][ T6195] ? __pfx___sys_bpf+0x10/0x10 [ 104.446306][ T6195] ? proc_fail_nth_write+0x9f/0x220 [ 104.446330][ T6195] ? find_held_lock+0x2b/0x80 [ 104.446354][ T6195] ? find_held_lock+0x2b/0x80 [ 104.446373][ T6195] ? ksys_write+0x190/0x250 [ 104.446395][ T6195] ? ksys_write+0x190/0x250 [ 104.446423][ T6195] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 104.446451][ T6195] ? kernel_write+0x633/0x6c0 [ 104.446473][ T6195] ? __fget_files+0x215/0x3d0 [ 104.446514][ T6195] ? fput+0x79/0x100 [ 104.446541][ T6195] ? ksys_write+0x1ac/0x250 [ 104.446564][ T6195] ? __pfx_ksys_write+0x10/0x10 [ 104.446592][ T6195] __x64_sys_bpf+0x7b/0xc0 [ 104.446611][ T6195] ? lockdep_hardirqs_on+0x78/0x100 [ 104.446638][ T6195] do_syscall_64+0x115/0x870 [ 104.446664][ T6195] ? clear_bhb_loop+0x40/0x90 [ 104.446690][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.446712][ T6195] RIP: 0033:0x7f889239ce59 [ 104.446729][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.446749][ T6195] RSP: 002b:00007f88932d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.446769][ T6195] RAX: ffffffffffffffda RBX: 00007f8892616090 RCX: 00007f889239ce59 [ 104.446783][ T6195] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 104.446796][ T6195] RBP: 00007f88932d2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.446808][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.446821][ T6195] R13: 00007f8892616128 R14: 00007f8892616090 R15: 00007ffdaf863928 [ 104.446850][ T6195] [ 104.450414][ T804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.822220][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.956837][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.047984][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.079473][ T804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.197342][ T804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.268109][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.400846][ T5742] usb 4-1: Using ep0 maxpacket: 8 [ 105.410480][ T5742] usb 4-1: config 39 has an invalid interface number: 145 but max is 1 [ 105.419281][ T5742] usb 4-1: config 39 has an invalid interface number: 94 but max is 1 [ 105.428673][ T5742] usb 4-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 105.439027][ T5742] usb 4-1: config 39 has no interface number 0 [ 105.445255][ T5742] usb 4-1: config 39 has no interface number 1 [ 105.451619][ T5742] usb 4-1: config 39 interface 94 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.464777][ T5742] usb 4-1: config 39 interface 145 has no altsetting 0 [ 105.469061][ T30] audit: type=1400 audit(1781029784.324:316): avc: denied { ioctl } for pid=6201 comm="syz.2.114" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.471787][ T5742] usb 4-1: config 39 interface 94 has no altsetting 0 [ 105.510584][ T5742] usb 4-1: New USB device found, idVendor=054c, idProduct=0169, bcdDevice=c7.b0 [ 105.510614][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.510637][ T5742] usb 4-1: Product: syz [ 105.510654][ T5742] usb 4-1: Manufacturer: syz [ 105.510672][ T5742] usb 4-1: SerialNumber: syz [ 105.527435][ T804] usb 5-1: usb_control_msg returned -32 [ 105.527476][ T804] usbtmc 5-1:16.0: can't read capabilities [ 105.630910][ T5820] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 105.747162][ T6190] netlink: 'syz.3.110': attribute type 11 has an invalid length. [ 105.855432][ T6207] IPVS: sh: FWM 3 0x00000003 - no destination available [ 105.863039][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 106.203193][ T30] audit: type=1400 audit(1781029785.064:317): avc: denied { write } for pid=6189 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.283548][ T804] usb 5-1: USB disconnect, device number 12 [ 106.329211][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.346600][ T5820] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 106.357087][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.373197][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.632968][ T5742] usb 4-1: active config #39 != 1 ?? [ 106.635915][ T30] audit: type=1400 audit(1781029785.484:318): avc: denied { bind } for pid=6189 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.642315][ T5742] cdc_mbim 4-1:39.94: probe with driver cdc_mbim failed with error -71 [ 106.833111][ T6222] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 107.123376][ T5742] usb 4-1: active config #39 != 1 ?? [ 107.138918][ T5742] usb 4-1: USB disconnect, device number 9 [ 108.187840][ T6224] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'. [ 108.253546][ T6232] warning: `syz.2.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.261822][ T6225] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 108.275635][ T6225] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 108.286372][ T6225] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 108.333667][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.120'. [ 108.380842][ T991] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 108.552896][ T991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.561427][ T991] usb 5-1: not running at top speed; connect to a high speed hub [ 108.571345][ T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.585448][ T991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.604843][ T991] usb 5-1: string descriptor 0 read error: -22 [ 108.614592][ T991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.628491][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.652133][ T991] usb 5-1: 0:2 : does not exist [ 109.091125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.120761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.130757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.527298][ T991] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 110.536947][ T991] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 110.546753][ T991] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 110.568165][ T991] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 110.588762][ T991] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 110.632952][ T5742] usb 1-1: USB disconnect, device number 9 [ 110.700081][ T991] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 110.758098][ T991] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 110.858134][ T991] usb 5-1: USB disconnect, device number 13 [ 110.946112][ T30] audit: type=1326 audit(1781029789.784:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6251 comm="syz.2.127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88f79ce59 code=0x0 [ 111.086302][ T6255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6255 comm=syz.3.126 [ 111.181971][ T5742] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 111.439723][ T5742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.539330][ T5742] usb 1-1: not running at top speed; connect to a high speed hub [ 112.285163][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057fc1c00: rx timeout, send abort [ 112.377496][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.498970][ T30] audit: type=1400 audit(1781029789.884:320): avc: denied { bind } for pid=6251 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.729728][ T30] audit: type=1400 audit(1781029789.884:321): avc: denied { write } for pid=6251 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.795261][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057fc1c00: abort rx timeout. Force session deactivation [ 112.907353][ T30] audit: type=1400 audit(1781029789.904:322): avc: denied { read } for pid=6251 comm="syz.2.127" dev="sockfs" ino=11517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.175418][ T5742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.189262][ T5742] usb 1-1: string descriptor 0 read error: -22 [ 113.194075][ T30] audit: type=1400 audit(1781029789.974:323): avc: denied { connect } for pid=6253 comm="syz.3.126" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.195690][ T5742] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.225175][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.239855][ T5742] usb 1-1: 0:2 : does not exist [ 113.359518][ T30] audit: type=1400 audit(1781029790.424:324): avc: denied { create } for pid=6257 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.401066][ T30] audit: type=1400 audit(1781029790.574:325): avc: denied { search } for pid=5282 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.491029][ T5732] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.568590][ T6267] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 113.755096][ T5732] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 114.040769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.620779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.067628][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 115.086205][ T30] audit: type=1400 audit(1781029790.694:326): avc: denied { search } for pid=5282 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.108779][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.129944][ T5732] usb 4-1: config 0 descriptor?? [ 115.177906][ T30] audit: type=1400 audit(1781029790.694:327): avc: denied { search } for pid=5282 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.184745][ T5732] pwc: Creative Labs Webcam Pro Ex detected. [ 115.246573][ T5732] pwc: Warning: more than 1 configuration available. [ 115.252025][ T5742] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.271298][ T30] audit: type=1400 audit(1781029790.694:328): avc: denied { read } for pid=5282 comm="dhcpcd" name="n31" dev="tmpfs" ino=2476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.306448][ T5742] usb 1-1: Warning! Unlikely big volume step count (=6079), linear volume or wrong cval->res? [ 115.331544][ T5742] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 5894/11973/1 [ 115.353130][ T5742] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.389288][ T5742] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 115.484618][ T5742] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.500755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.644266][ T5742] usb 1-1: USB disconnect, device number 10 [ 115.722102][ T6269] syz.0.125 (6269) used greatest stack depth: 20120 bytes left [ 116.065495][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 116.065512][ T30] audit: type=1400 audit(1781029794.924:347): avc: denied { write } for pid=6297 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.126399][ T5732] pwc: recv_control_msg error -71 req 02 val 2700 [ 116.141720][ T30] audit: type=1400 audit(1781029794.924:348): avc: denied { remove_name } for pid=6297 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.183236][ T5732] pwc: recv_control_msg error -71 req 04 val 1600 [ 116.191412][ T991] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.208904][ T5732] pwc: recv_control_msg error -71 req 02 val 2c00 [ 116.247079][ T5732] pwc: recv_control_msg error -71 req 04 val 1000 [ 116.248379][ T30] audit: type=1400 audit(1781029794.954:349): avc: denied { unlink } for pid=6297 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 116.328656][ T5732] pwc: recv_control_msg error -71 req 04 val 1300 [ 116.350903][ T991] usb 5-1: device descriptor read/64, error -71 [ 116.365372][ T5732] pwc: recv_control_msg error -71 req 04 val 1400 [ 116.401646][ T5732] pwc: recv_control_msg error -71 req 02 val 2000 [ 116.429991][ T5732] pwc: recv_control_msg error -71 req 02 val 2100 [ 116.466440][ T5732] pwc: recv_control_msg error -71 req 06 val 0600 [ 116.488341][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 116.574773][ T6305] ======================================================= [ 116.574773][ T6305] WARNING: The mand mount option has been deprecated and [ 116.574773][ T6305] and is ignored by this kernel. Remove the mand [ 116.574773][ T6305] option from the mount to silence this warning. [ 116.574773][ T6305] ======================================================= [ 116.590843][ T991] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.619278][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 116.641625][ T6305] overlayfs: failed to resolve './file1': -2 [ 116.687917][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 116.735635][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 116.800199][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 116.862231][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.953870][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 117.118949][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 117.941654][ T5732] pwc: Registered as video103. [ 117.968059][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 118.041574][ T991] usb 5-1: device descriptor read/64, error -71 [ 118.077276][ T5732] usb 4-1: USB disconnect, device number 10 [ 118.116519][ T30] audit: type=1400 audit(1781029796.964:350): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.154016][ T991] usb usb5-port1: attempt power cycle [ 118.402868][ T30] audit: type=1400 audit(1781029797.264:351): avc: denied { write } for pid=6299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.456462][ T30] audit: type=1400 audit(1781029797.314:352): avc: denied { write } for pid=6315 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.507546][ T991] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 118.605020][ T991] usb 5-1: device descriptor read/8, error -71 [ 119.003104][ T991] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 119.570672][ T991] usb 5-1: device descriptor read/8, error -71 [ 119.654507][ T30] audit: type=1400 audit(1781029798.394:353): avc: denied { write } for pid=6322 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.736503][ T6332] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 119.743928][ T6332] VFS: Can't find a romfs filesystem on dev nullb0. [ 119.743928][ T6332] [ 119.768458][ T30] audit: type=1400 audit(1781029798.614:354): avc: denied { create } for pid=6329 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.793258][ T991] usb usb5-port1: unable to enumerate USB device [ 119.857689][ T30] audit: type=1400 audit(1781029798.614:355): avc: denied { getopt } for pid=6329 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.967921][ T6338] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 119.986032][ T6338] netlink: 17 bytes leftover after parsing attributes in process `syz.4.140'. [ 120.027643][ T30] audit: type=1400 audit(1781029798.884:356): avc: denied { bind } for pid=6337 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.326511][ T6343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.141'. [ 120.411435][ T6343] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 120.420093][ T6343] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 120.428797][ T6343] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 121.371346][ T5733] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.534661][ T6349] orangefs_mount: mount request failed with -4 [ 121.637196][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 121.644582][ T5733] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 121.661219][ T5733] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 121.673470][ T5733] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.684855][ T5733] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 121.749409][ T6367] FAULT_INJECTION: forcing a failure. [ 121.749409][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 121.848222][ T30] audit: type=1400 audit(1781029800.604:357): avc: denied { create } for pid=6366 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.883019][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT(full) [ 121.883051][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.883064][ T6367] Call Trace: [ 121.883071][ T6367] [ 121.883080][ T6367] dump_stack_lvl+0x100/0x190 [ 121.883123][ T6367] should_fail_ex.cold+0x5/0xa [ 121.883153][ T6367] should_failslab+0xc2/0x120 [ 121.883178][ T6367] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 121.883211][ T6367] ? __alloc_skb+0x140/0x710 [ 121.883241][ T6367] ? __alloc_skb+0x5b7/0x710 [ 121.883275][ T6367] __alloc_skb+0x140/0x710 [ 121.883304][ T6367] ? __alloc_skb+0x5b7/0x710 [ 121.883333][ T6367] ? __pfx___alloc_skb+0x10/0x10 [ 121.883371][ T6367] netlink_ack+0x117/0xb80 [ 121.883412][ T6367] netlink_rcv_skb+0x333/0x420 [ 121.883439][ T6367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.883462][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.883499][ T6367] ? netlink_deliver_tap+0x1ae/0xcc0 [ 121.883529][ T6367] netlink_unicast+0x585/0x850 [ 121.883560][ T6367] ? __pfx_netlink_unicast+0x10/0x10 [ 121.883594][ T6367] netlink_sendmsg+0x8b0/0xda0 [ 121.883625][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.883650][ T6367] ? __might_fault+0xc0/0x140 [ 121.883692][ T6367] ____sys_sendmsg+0x9e1/0xb70 [ 121.883716][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.883745][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.883775][ T6367] ? __pfx__kstrtoull+0x10/0x10 [ 121.883813][ T6367] ___sys_sendmsg+0x190/0x1e0 [ 121.883841][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.883882][ T6367] ? find_held_lock+0x2b/0x80 [ 121.883920][ T6367] __sys_sendmmsg+0x205/0x430 [ 121.883958][ T6367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.884000][ T6367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.884042][ T6367] ? fput+0x79/0x100 [ 121.884071][ T6367] ? ksys_write+0x1ac/0x250 [ 121.884094][ T6367] ? __pfx_ksys_write+0x10/0x10 [ 121.884123][ T6367] __x64_sys_sendmmsg+0x9c/0x100 [ 121.884155][ T6367] ? lockdep_hardirqs_on+0x78/0x100 [ 121.884183][ T6367] do_syscall_64+0x115/0x870 [ 121.884210][ T6367] ? clear_bhb_loop+0x40/0x90 [ 121.884237][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.884259][ T6367] RIP: 0033:0x7f3e8439ce59 [ 121.884280][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.884304][ T6367] RSP: 002b:00007f3e825f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.884324][ T6367] RAX: ffffffffffffffda RBX: 00007f3e84615fa0 RCX: 00007f3e8439ce59 [ 121.884339][ T6367] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 121.884353][ T6367] RBP: 00007f3e825f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.884366][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.884379][ T6367] R13: 00007f3e84616038 R14: 00007f3e84615fa0 R15: 00007ffc7a3586c8 [ 121.884412][ T6367] [ 121.886793][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 122.196622][ T30] audit: type=1400 audit(1781029800.694:358): avc: denied { wake_alarm } for pid=6360 comm="syz.1.145" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.915834][ T5733] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 122.946990][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.969175][ T5733] usb 1-1: Product: syz [ 122.980520][ T5733] usb 1-1: Manufacturer: syz [ 122.998448][ T5733] usb 1-1: SerialNumber: syz [ 123.027492][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 123.053335][ T5733] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input15 [ 123.295288][ T5733] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 123.313097][ T5733] (id 0x00) [ 123.390967][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.651527][ T30] audit: type=1400 audit(1781029802.514:359): avc: denied { bind } for pid=6390 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.851073][ T24] usb 3-1: device descriptor read/64, error -71 [ 124.161325][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 124.856082][ T24] usb 3-1: device descriptor read/64, error -71 [ 125.025390][ T30] audit: type=1400 audit(1781029802.644:360): avc: denied { firmware_load } for pid=6390 comm="syz.3.152" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 125.027713][ T24] usb usb3-port1: attempt power cycle [ 125.050235][ T30] audit: type=1400 audit(1781029802.794:361): avc: denied { getopt } for pid=6388 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.050283][ T30] audit: type=1400 audit(1781029802.794:362): avc: denied { set_context_mgr } for pid=6388 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 125.096856][ T5733] rc_core: IR keymap rc-imon-pad not found [ 125.106981][ T5733] Registered IR keymap rc-empty [ 125.113545][ T5733] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 125.124204][ T5733] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 125.146301][ T6394] syz.3.152 (6394) used greatest stack depth: 18752 bytes left [ 125.288983][ T6409] netlink: 6 bytes leftover after parsing attributes in process `syz.4.154'. [ 125.299459][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.310402][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.349708][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.365484][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.481254][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 125.511752][ T24] usb 3-1: device descriptor read/8, error -71 [ 125.761441][ T30] audit: type=1400 audit(1781029804.544:363): avc: denied { execute } for pid=6410 comm="syz.3.155" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 125.958565][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 125.981824][ T24] usb 3-1: device descriptor read/8, error -71 [ 125.988492][ T30] audit: type=1400 audit(1781029804.834:364): avc: denied { write } for pid=6408 comm="syz.4.154" name="mouse0" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 126.014451][ T5733] imon:send_packet: packet tx failed (-71) [ 126.030896][ T5733] imon 1-1:155.0: remote input dev register failed [ 126.037594][ T5733] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 126.092903][ T24] usb usb3-port1: unable to enumerate USB device [ 126.201874][ T5733] imon 1-1:155.0: unable to initialize intf0, err 0 [ 126.231871][ T5733] imon:imon_probe: failed to initialize context! [ 126.252864][ T5733] imon 1-1:155.0: unable to register, err -19 [ 126.299140][ T5733] usb 1-1: USB disconnect, device number 11 [ 126.312209][ T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 126.472543][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.490788][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 126.516810][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 126.535429][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 126.552175][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.682846][ T10] usb 4-1: config 0 descriptor?? [ 126.698390][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.706325][ T6435] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.875078][ T6435] batman_adv: batadv0: Adding interface: gretap1 [ 126.881672][ T6435] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.907951][ T6435] batman_adv: batadv0: Interface activated: gretap1 [ 126.998192][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 127.004829][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.050977][ T10] usb 4-1: USB disconnect, device number 11 [ 127.960868][ T6465] IPVS: sh: FWM 3 0x00000003 - no destination available [ 127.968069][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 127.984382][ T6465] IPVS: sh: FWM 3 0x00000003 - no destination available [ 127.991615][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 128.426214][ T10] IPVS: starting estimator thread 0... [ 128.427683][ T30] audit: type=1400 audit(1781029807.214:365): avc: denied { write } for pid=6449 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.641281][ T6467] IPVS: using max 35 ests per chain, 84000 per kthread [ 128.880865][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 129.002408][ T30] audit: type=1400 audit(1781029807.854:366): avc: denied { create } for pid=6475 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.054212][ T24] usb 5-1: device descriptor read/64, error -71 [ 129.513955][ T30] audit: type=1400 audit(1781029807.884:367): avc: denied { write } for pid=6475 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.665504][ T6496] netlink: 'syz.1.179': attribute type 20 has an invalid length. [ 129.740963][ T5733] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 129.751985][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 129.769298][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 129.924801][ T24] usb 5-1: device descriptor read/64, error -71 [ 129.951021][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 130.088302][ T5733] usb 3-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 130.104260][ T24] usb usb5-port1: attempt power cycle [ 130.264443][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.446701][ T5733] usb 3-1: Product: Й [ 130.475126][ T5733] usb 3-1: Manufacturer: С [ 130.511935][ T5733] usb 3-1: SerialNumber: syz [ 130.564990][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 130.664143][ T24] usb 5-1: device descriptor read/8, error -71 [ 130.940878][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 130.949138][ T6508] FAULT_INJECTION: forcing a failure. [ 130.949138][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 130.974197][ T24] usb 5-1: device descriptor read/8, error -71 [ 130.991881][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT(full) [ 130.991902][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.991910][ T6508] Call Trace: [ 130.991914][ T6508] [ 130.991919][ T6508] dump_stack_lvl+0x100/0x190 [ 130.991939][ T6508] should_fail_ex.cold+0x5/0xa [ 130.991956][ T6508] should_failslab+0xc2/0x120 [ 130.991970][ T6508] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 130.991989][ T6508] ? __alloc_skb+0x140/0x710 [ 130.992005][ T6508] ? __alloc_skb+0x5b7/0x710 [ 130.992024][ T6508] __alloc_skb+0x140/0x710 [ 130.992039][ T6508] ? __alloc_skb+0x5b7/0x710 [ 130.992055][ T6508] ? __pfx___alloc_skb+0x10/0x10 [ 130.992075][ T6508] netlink_ack+0x117/0xb80 [ 130.992090][ T6508] ? avc_has_perm_noaudit+0x145/0x3b0 [ 130.992108][ T6508] netlink_rcv_skb+0x333/0x420 [ 130.992122][ T6508] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 130.992142][ T6508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.992163][ T6508] ? ns_capable+0xd2/0xf0 [ 130.992180][ T6508] nfnetlink_rcv+0x1b3/0x440 [ 130.992199][ T6508] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 130.992217][ T6508] ? netlink_deliver_tap+0x1ae/0xcc0 [ 130.992233][ T6508] netlink_unicast+0x585/0x850 [ 130.992254][ T6508] ? __pfx_netlink_unicast+0x10/0x10 [ 130.992272][ T6508] netlink_sendmsg+0x8b0/0xda0 [ 130.992297][ T6508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.992315][ T6508] ? __might_fault+0xc0/0x140 [ 130.992337][ T6508] ____sys_sendmsg+0x9e1/0xb70 [ 130.992351][ T6508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.992366][ T6508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.992386][ T6508] ___sys_sendmsg+0x190/0x1e0 [ 130.992402][ T6508] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.992433][ T6508] __sys_sendmsg+0x170/0x220 [ 130.992451][ T6508] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.992475][ T6508] ? rcu_is_watching+0x12/0xc0 [ 130.992494][ T6508] do_syscall_64+0x115/0x870 [ 130.992510][ T6508] ? clear_bhb_loop+0x40/0x90 [ 130.992527][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.992540][ T6508] RIP: 0033:0x7fb0bbf9ce59 [ 130.992550][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.992561][ T6508] RSP: 002b:00007fb0bcf2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.992573][ T6508] RAX: ffffffffffffffda RBX: 00007fb0bc215fa0 RCX: 00007fb0bbf9ce59 [ 130.992581][ T6508] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 130.992588][ T6508] RBP: 00007fb0bcf2f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.992595][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.992601][ T6508] R13: 00007fb0bc216038 R14: 00007fb0bc215fa0 R15: 00007ffea24b3b38 [ 130.992616][ T6508] [ 131.325158][ T24] usb usb5-port1: unable to enumerate USB device [ 131.410957][ T5742] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 131.779067][ T30] audit: type=1400 audit(1781029810.634:368): avc: denied { read } for pid=6519 comm="syz.4.185" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.802817][ T30] audit: type=1400 audit(1781029810.634:369): avc: denied { open } for pid=6519 comm="syz.4.185" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.827436][ T5820] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.255960][ T5733] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 132.298191][ T6523] xt_hashlimit: size too large, truncated to 1048576 [ 132.363903][ T30] audit: type=1400 audit(1781029811.224:370): avc: denied { create } for pid=6519 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.375534][ T5733] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 132.392398][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 132.408823][ T5733] usb 3-1: USB disconnect, device number 22 [ 132.430370][ T5820] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 132.456873][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.474994][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.499168][ T5820] usb 4-1: Product: syz [ 132.504493][ T6521] netlink: 'syz.4.185': attribute type 27 has an invalid length. [ 132.513134][ T5820] usb 4-1: Manufacturer: syz [ 132.519335][ T5820] usb 4-1: SerialNumber: syz [ 132.535513][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.535996][ T5820] usb 4-1: config 0 descriptor?? [ 132.542901][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.583032][ T5820] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 132.664974][ T6521] bond0: (slave bond_slave_1): Releasing backup interface [ 132.773564][ T6520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.781632][ T6520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.806964][ T6520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.819588][ T6520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.825954][ T6520] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.837113][ T6520] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.846778][ T6520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.855218][ T6520] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.865734][ T6520] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.874164][ T6520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.880225][ T6520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.888610][ T6520] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.898666][ T6520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.904921][ T6520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.915965][ T6520] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.934785][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.943661][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.973208][ T30] audit: type=1400 audit(1781029811.824:371): avc: denied { getopt } for pid=6506 comm="syz.0.181" laddr=::1 lport=52556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.489787][ T6534] capability: warning: `syz.4.188' uses deprecated v2 capabilities in a way that may be insecure [ 133.970904][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.473402][ T5742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.832206][ T6544] mmap: syz.4.188 (6544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.851659][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.857697][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.566690][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.566690][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.095873][ T5742] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 136.223968][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.528862][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 136.581212][ T5742] usb 1-1: can't read configurations, error -71 [ 136.591611][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 137.080264][ T6563] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.087456][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.102726][ T6563] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.109814][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.718602][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.724780][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.750596][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.815671][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.036385][ T991] usb 4-1: USB disconnect, device number 12 [ 138.293414][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.810792][ T804] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 139.033524][ T804] usb 3-1: device descriptor read/64, error -71 [ 139.100811][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.260815][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 139.274702][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 139.283858][ T804] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 139.308437][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.326065][ T29] usb 4-1: Product: Й [ 139.336460][ T29] usb 4-1: Manufacturer: С [ 139.358765][ T29] usb 4-1: SerialNumber: syz [ 139.374008][ T30] audit: type=1400 audit(1781029818.224:372): avc: denied { write } for pid=6548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.460990][ T804] usb 3-1: device descriptor read/64, error -71 [ 139.572993][ T804] usb usb3-port1: attempt power cycle [ 139.682823][ T30] audit: type=1400 audit(1781029818.534:373): avc: denied { write } for pid=6599 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.782982][ T30] audit: type=1400 audit(1781029818.644:374): avc: denied { write } for pid=6603 comm="syz.4.200" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.811539][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.813745][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.818289][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.851467][ T30] audit: type=1400 audit(1781029818.644:375): avc: denied { open } for pid=6603 comm="syz.4.200" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.901692][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.910998][ T804] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 139.941672][ T804] usb 3-1: device descriptor read/8, error -71 [ 140.037774][ T30] audit: type=1400 audit(1781029818.894:376): avc: denied { setopt } for pid=6603 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.191315][ T804] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 140.231537][ T804] usb 3-1: device descriptor read/8, error -71 [ 140.351337][ T804] usb usb3-port1: unable to enumerate USB device [ 140.451324][ T30] audit: type=1400 audit(1781029819.304:377): avc: denied { write } for pid=6607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.513010][ T30] audit: type=1400 audit(1781029819.364:378): avc: denied { read } for pid=6603 comm="syz.4.200" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.570703][ T30] audit: type=1400 audit(1781029819.374:379): avc: denied { ioctl } for pid=6603 comm="syz.4.200" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.664703][ T30] audit: type=1400 audit(1781029819.524:380): avc: denied { write } for pid=6626 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.791324][ T5742] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 140.991541][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.113569][ T30] audit: type=1400 audit(1781029819.974:381): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.189594][ T29] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 141.267249][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.276110][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.782149][ T991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 141.811025][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 141.821021][ T10] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 141.855806][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 141.875611][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.885877][ T10] usb 1-1: Product: syz [ 141.898021][ T10] usb 1-1: Manufacturer: syz [ 141.902938][ T10] usb 1-1: SerialNumber: syz [ 141.909105][ T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.922675][ T10] usb 1-1: config 0 descriptor?? [ 141.937745][ T29] usb 4-1: USB disconnect, device number 13 [ 141.939041][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 141.973863][ T991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.984716][ T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.985142][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.997719][ T991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.025216][ T991] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 142.036800][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.047176][ T991] usb 5-1: Product: syz [ 142.058750][ T991] usb 5-1: Manufacturer: syz [ 142.067164][ T991] usb 5-1: SerialNumber: syz [ 142.160890][ T5820] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 142.300808][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 142.460780][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 142.472293][ T29] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 142.502509][ T29] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 142.516835][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.525662][ T5820] usb 3-1: not running at top speed; connect to a high speed hub [ 142.544141][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.553474][ T29] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.556235][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.580605][ T5820] usb 3-1: string descriptor 0 read error: -22 [ 142.587651][ T29] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 142.602689][ T5820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.637767][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.645958][ T29] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 142.651988][ T10] gspca_sq930x: ucbus_write failed -110 [ 142.658238][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.670459][ T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 142.695829][ T29] usb 4-1: Product: syz [ 142.700389][ T5820] usb 3-1: 0:2 : does not exist [ 142.713673][ T29] usb 4-1: Manufacturer: syz [ 142.730240][ T29] usb 4-1: SerialNumber: syz [ 142.774129][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 142.799851][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input17 [ 142.943166][ T10] usb 1-1: USB disconnect, device number 14 [ 143.071687][ T29] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 143.084500][ T29] (id 0x00) [ 143.220756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.570800][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.606778][ T5742] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 144.610831][ T29] rc_core: IR keymap rc-imon-pad not found [ 144.620264][ T5742] usb 2-1: can't read configurations, error -71 [ 144.643287][ T29] Registered IR keymap rc-empty [ 144.661189][ T29] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 144.684919][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 144.684942][ T30] audit: type=1400 audit(1781029823.544:386): avc: denied { write } for pid=6685 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.714831][ T29] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 144.762346][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 144.948289][ T5820] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 145.008330][ T5820] usb 3-1: Warning! Unlikely big volume step count (=6079), linear volume or wrong cval->res? [ 145.113866][ T6691] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 145.392984][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input18 [ 145.420772][ T29] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized [ 145.447041][ T5820] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 5894/11973/1 [ 145.467014][ T5820] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 145.478415][ T29] usb 4-1: USB disconnect, device number 14 [ 145.489717][ T5820] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 145.702914][ T5820] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 146.080913][ T6701] dlm: no local IP address has been set [ 146.127310][ T6701] dlm: cannot start dlm midcomms -107 [ 146.165531][ T5820] usb 3-1: USB disconnect, device number 27 [ 147.099687][ T991] usb 5-1: cannot find UAC_HEADER [ 147.611984][ T30] audit: type=1400 audit(1781029826.474:387): avc: denied { write } for pid=6690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.685745][ T991] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 147.712914][ T991] usb 5-1: USB disconnect, device number 22 [ 147.854389][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.975298][ T30] audit: type=1400 audit(1781029826.834:388): avc: denied { write } for pid=6724 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.174664][ T6728] syzkaller0: entered promiscuous mode [ 148.186922][ T6728] syzkaller0: entered allmulticast mode [ 148.204995][ T6728] FAULT_INJECTION: forcing a failure. [ 148.204995][ T6728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.448158][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT(full) [ 148.448189][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.448202][ T6728] Call Trace: [ 148.448209][ T6728] [ 148.448218][ T6728] dump_stack_lvl+0x100/0x190 [ 148.448249][ T6728] should_fail_ex.cold+0x5/0xa [ 148.448286][ T6728] _copy_to_user+0x32/0xd0 [ 148.448316][ T6728] simple_read_from_buffer+0xcb/0x170 [ 148.448347][ T6728] proc_fail_nth_read+0x1af/0x230 [ 148.448372][ T6728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.448399][ T6728] ? rw_verify_area+0xce/0x6d0 [ 148.448420][ T6728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.448444][ T6728] vfs_read+0x1e4/0xb30 [ 148.448472][ T6728] ? __pfx_vfs_read+0x10/0x10 [ 148.448494][ T6728] ? __fget_files+0x215/0x3d0 [ 148.448529][ T6728] ? __fget_files+0x21f/0x3d0 [ 148.448565][ T6728] ksys_read+0x12a/0x250 [ 148.448588][ T6728] ? __pfx_ksys_read+0x10/0x10 [ 148.448615][ T6728] ? rcu_is_watching+0x12/0xc0 [ 148.448651][ T6728] do_syscall_64+0x115/0x870 [ 148.448679][ T6728] ? clear_bhb_loop+0x40/0x90 [ 148.448706][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.448729][ T6728] RIP: 0033:0x7f4cddb5d68e [ 148.448747][ T6728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.448769][ T6728] RSP: 002b:00007f4cdea2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.448790][ T6728] RAX: ffffffffffffffda RBX: 00007f4cdea2d6c0 RCX: 00007f4cddb5d68e [ 148.448805][ T6728] RDX: 000000000000000f RSI: 00007f4cdea2d0a0 RDI: 0000000000000007 [ 148.448818][ T6728] RBP: 00007f4cdea2d090 R08: 0000000000000000 R09: 0000000000000000 [ 148.448832][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.448845][ T6728] R13: 00007f4cdde16038 R14: 00007f4cdde15fa0 R15: 00007ffe47130938 [ 148.448876][ T6728] [ 148.700793][ T804] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.733607][ T30] audit: type=1400 audit(1781029827.594:389): avc: denied { mounton } for pid=6734 comm="syz.3.217" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 148.870802][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 148.883072][ T804] usb 1-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 148.900863][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.914722][ T804] usb 1-1: Product: Й [ 148.930815][ T804] usb 1-1: Manufacturer: С [ 148.935357][ T804] usb 1-1: SerialNumber: syz [ 148.941311][ T991] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 149.090960][ T5820] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 149.110051][ T6737] orangefs_mount: mount request failed with -4 [ 149.122644][ T991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.131808][ T991] usb 2-1: config 2 has an invalid interface number: 42 but max is 1 [ 149.140108][ T991] usb 2-1: config 2 has an invalid interface number: 123 but max is 1 [ 149.149408][ T991] usb 2-1: config 2 has no interface number 0 [ 149.158794][ T991] usb 2-1: config 2 has no interface number 1 [ 149.165163][ T991] usb 2-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 149.179989][ T991] usb 2-1: config 2 interface 123 has no altsetting 0 [ 149.206937][ T6752] FAULT_INJECTION: forcing a failure. [ 149.206937][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.220243][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT(full) [ 149.220272][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.220284][ T6752] Call Trace: [ 149.220291][ T6752] [ 149.220299][ T6752] dump_stack_lvl+0x100/0x190 [ 149.220331][ T6752] should_fail_ex.cold+0x5/0xa [ 149.220359][ T6752] _copy_to_user+0x32/0xd0 [ 149.220387][ T6752] simple_read_from_buffer+0xcb/0x170 [ 149.220418][ T6752] proc_fail_nth_read+0x1af/0x230 [ 149.220442][ T6752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.220467][ T6752] ? rw_verify_area+0xce/0x6d0 [ 149.220486][ T6752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.220508][ T6752] vfs_read+0x1e4/0xb30 [ 149.220534][ T6752] ? __pfx_vfs_read+0x10/0x10 [ 149.220556][ T6752] ? __fget_files+0x215/0x3d0 [ 149.220587][ T6752] ? __fget_files+0x21f/0x3d0 [ 149.220620][ T6752] ksys_read+0x12a/0x250 [ 149.220641][ T6752] ? __pfx_ksys_read+0x10/0x10 [ 149.220665][ T6752] ? rcu_is_watching+0x12/0xc0 [ 149.220700][ T6752] do_syscall_64+0x115/0x870 [ 149.220726][ T6752] ? clear_bhb_loop+0x40/0x90 [ 149.220752][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.220773][ T6752] RIP: 0033:0x7f3e8435d68e [ 149.220790][ T6752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.220810][ T6752] RSP: 002b:00007f3e825f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.220830][ T6752] RAX: ffffffffffffffda RBX: 00007f3e825f66c0 RCX: 00007f3e8435d68e [ 149.220844][ T6752] RDX: 000000000000000f RSI: 00007f3e825f60a0 RDI: 0000000000000008 [ 149.220856][ T6752] RBP: 00007f3e825f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.220869][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.220881][ T6752] R13: 00007f3e84616038 R14: 00007f3e84615fa0 R15: 00007ffc7a3586c8 [ 149.220909][ T6752] [ 149.441497][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 149.451521][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 149.465643][ T5820] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 149.476338][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.484528][ T5820] usb 5-1: Product: syz [ 149.488803][ T5820] usb 5-1: Manufacturer: syz [ 149.493811][ T5820] usb 5-1: SerialNumber: syz [ 149.501644][ T5820] usb 5-1: config 0 descriptor?? [ 149.507296][ T6743] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 149.517264][ T6743] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 149.739144][ T6743] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 149.746932][ T6743] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 150.224195][ T5620] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.402355][ T5620] usb 4-1: Using ep0 maxpacket: 8 [ 150.432719][ T5620] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 150.456655][ T5620] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 150.471094][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.479644][ T5620] usb 4-1: Product: syz [ 150.484430][ T5620] usb 4-1: Manufacturer: syz [ 150.492062][ T5620] usb 4-1: SerialNumber: syz [ 150.526980][ T5620] usb 4-1: config 0 descriptor?? [ 150.535997][ T5620] gspca_main: sq930x-2.14.0 probing 2770:930c [ 150.698544][ T5820] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 150.714859][ T5820] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 8c:61:d2:43:d6:97 [ 150.748816][ T5820] usb 5-1: USB disconnect, device number 23 [ 150.766554][ T5820] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 150.996488][ T804] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 151.120710][ T30] audit: type=1400 audit(1781029829.974:390): avc: denied { ioctl } for pid=6769 comm="syz.2.226" path="socket:[13964]" dev="sockfs" ino=13964 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.139740][ T804] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 151.215784][ T5620] gspca_sq930x: ucbus_write failed -71 [ 151.226606][ T5620] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 151.241729][ T5620] usb 4-1: USB disconnect, device number 15 [ 151.322325][ T804] usb 1-1: USB disconnect, device number 15 [ 151.395786][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.509094][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 151.611134][ T30] audit: type=1400 audit(1781029830.404:391): avc: denied { bind } for pid=6769 comm="syz.2.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.795206][ T30] audit: type=1400 audit(1781029830.424:392): avc: denied { read } for pid=6769 comm="syz.2.226" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.912669][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 151.946511][ T991] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df [ 151.993928][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.074535][ T991] usb 2-1: Interface #123 referenced by multiple IADs [ 152.094820][ T6783] dlm: no local IP address has been set [ 152.121044][ T991] usb 2-1: can't set config #2, error -71 [ 152.132147][ T6783] dlm: cannot start dlm midcomms -107 [ 152.153243][ T991] usb 2-1: USB disconnect, device number 8 [ 152.349731][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 152.378581][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 153.106197][ T6792] IPVS: sh: FWM 3 0x00000003 - no destination available [ 153.113353][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 153.122012][ T6792] IPVS: sh: FWM 3 0x00000003 - no destination available [ 153.134299][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 153.750747][ T30] audit: type=1400 audit(1781029832.594:393): avc: denied { create } for pid=6789 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.270020][ T6804] capability: warning: `syz.4.233' uses 32-bit capabilities (legacy support in use) [ 154.310929][ T804] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 154.614464][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 154.686983][ T804] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 154.768422][ T804] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 154.838172][ T804] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 154.916055][ T804] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 155.026375][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.167682][ T804] usb 3-1: config 0 has no interface number 0 [ 155.258369][ T804] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 155.442544][ T804] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 155.600647][ T804] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.775893][ T804] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.482937][ T804] usb 3-1: config 0 interface 125 has no altsetting 0 [ 156.489766][ T804] usb 3-1: config 0 interface 125 has no altsetting 2 [ 156.548024][ T804] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 156.558081][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.577909][ T5733] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 156.660924][ T804] usb 3-1: Product: syz [ 156.681207][ T804] usb 3-1: Manufacturer: syz [ 156.721134][ T804] usb 3-1: SerialNumber: syz [ 156.772423][ T804] usb 3-1: config 0 descriptor?? [ 156.803635][ T804] usb 3-1: selecting invalid altsetting 2 [ 156.819570][ T5733] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 156.850936][ T5733] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.870787][ T991] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 156.871291][ T5733] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.910788][ T5733] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.933183][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.957951][ T5733] usbtmc 2-1:16.0: bulk endpoints not found [ 157.030839][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 157.049472][ T991] usb 5-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 157.067946][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.120986][ T991] usb 5-1: Product: Й [ 157.133130][ T991] usb 5-1: Manufacturer: С [ 157.183795][ T991] usb 5-1: SerialNumber: syz [ 157.240676][ C1] usb 3-1: async_complete: urb error -71 [ 157.246430][ C1] usb 3-1: async_complete: urb error -71 [ 157.252158][ C1] usb 3-1: async_complete: urb error -71 [ 157.278804][ T804] get_1284_register: usb error -71 [ 157.304676][ T804] usb 3-1: USB disconnect, device number 28 [ 157.585844][ T6831] vivid-001: disconnect [ 157.593224][ T6831] vivid-001: reconnect [ 157.606492][ T6833] netlink: 'syz.2.240': attribute type 20 has an invalid length. [ 157.656085][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 158.729602][ T991] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 158.791857][ T991] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 158.821027][ T991] usb 5-1: USB disconnect, device number 24 [ 158.871018][ T804] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 158.883431][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.052855][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.062128][ T804] usb 1-1: config 2 has an invalid interface number: 42 but max is 1 [ 159.071440][ T804] usb 1-1: config 2 has an invalid interface number: 123 but max is 1 [ 159.092013][ T804] usb 1-1: config 2 has no interface number 0 [ 159.106840][ T804] usb 1-1: config 2 has no interface number 1 [ 159.121980][ T804] usb 1-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 159.145926][ T804] usb 1-1: config 2 interface 123 has no altsetting 0 [ 159.352304][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 159.363256][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 159.380854][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 159.464532][ T991] usb 2-1: USB disconnect, device number 9 [ 159.792890][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 159.894768][ T30] audit: type=1400 audit(1781029838.754:394): avc: denied { read } for pid=6859 comm="syz.3.251" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.919536][ T30] audit: type=1400 audit(1781029838.754:395): avc: denied { open } for pid=6859 comm="syz.3.251" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.945045][ T30] audit: type=1400 audit(1781029838.754:396): avc: denied { setopt } for pid=6859 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.951086][ T991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.972240][ T5820] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 159.982017][ T30] audit: type=1400 audit(1781029838.754:397): avc: denied { bind } for pid=6859 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.003560][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 160.143082][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.151604][ T5820] usb 3-1: not running at top speed; connect to a high speed hub [ 160.160503][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.170923][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.180285][ T991] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 160.192489][ T5820] usb 3-1: string descriptor 0 read error: -22 [ 160.198936][ T5820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.208988][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.223221][ T991] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 160.236008][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.247100][ T5820] usb 3-1: 0:2 : does not exist [ 160.250800][ T5733] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 160.256338][ T991] usb 2-1: config 0 descriptor?? [ 160.280449][ T991] pwc: Creative Labs Webcam Pro Ex detected. [ 160.290036][ T991] pwc: Warning: more than 1 configuration available. [ 160.413453][ T5733] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 160.428981][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.439721][ T5733] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.452400][ T5733] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 160.461625][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.469659][ T5733] usb 5-1: Product: syz [ 160.474058][ T5733] usb 5-1: Manufacturer: syz [ 160.478691][ T5733] usb 5-1: SerialNumber: syz [ 160.492632][ T5733] usb 5-1: config 0 descriptor?? [ 160.499160][ T6863] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 161.410740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 161.500746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 162.117364][ T804] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df [ 162.131681][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.151391][ T804] usb 1-1: Interface #123 referenced by multiple IADs [ 162.165211][ T804] usb 1-1: can't set config #2, error -71 [ 162.182129][ T804] usb 1-1: USB disconnect, device number 16 [ 162.345347][ T5820] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 162.362143][ T5820] usb 3-1: Warning! Unlikely big volume step count (=25717), linear volume or wrong cval->res? [ 162.373636][ T5820] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -19823/5894/1 [ 162.386058][ T5820] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 162.398139][ T5820] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 162.510811][ T6874] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 162.517953][ T6874] VFS: Can't find a romfs filesystem on dev nullb0. [ 162.517953][ T6874] [ 162.538396][ T991] pwc: recv_control_msg error -71 req 02 val 2700 [ 163.015992][ T5820] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 163.030150][ T991] pwc: recv_control_msg error -71 req 04 val 1600 [ 163.049901][ T991] pwc: recv_control_msg error -71 req 02 val 2c00 [ 163.081326][ T991] pwc: recv_control_msg error -71 req 04 val 1000 [ 163.123010][ T991] pwc: recv_control_msg error -71 req 04 val 1300 [ 163.141145][ T991] pwc: recv_control_msg error -71 req 04 val 1400 [ 163.149926][ T5820] usb 3-1: USB disconnect, device number 29 [ 163.156242][ T991] pwc: recv_control_msg error -71 req 02 val 2000 [ 163.164627][ T991] pwc: recv_control_msg error -71 req 02 val 2100 [ 163.179517][ T991] pwc: recv_control_msg error -71 req 06 val 0600 [ 163.195362][ T991] pwc: recv_control_msg error -71 req 04 val 1500 [ 163.202289][ T991] pwc: recv_control_msg error -71 req 02 val 2500 [ 163.214717][ T991] pwc: recv_control_msg error -71 req 02 val 2400 [ 163.221579][ T991] pwc: recv_control_msg error -71 req 02 val 2600 [ 163.228554][ T991] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.238319][ T991] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.245421][ T991] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.248508][ T804] usb 5-1: USB disconnect, device number 25 [ 163.252133][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.252582][ T991] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.277184][ T991] pwc: Registered as video103. [ 163.303346][ T991] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 163.386642][ T991] usb 2-1: USB disconnect, device number 10 [ 163.430813][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 163.454351][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 163.485324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.509672][ T10] usb 4-1: Product: Й [ 163.523073][ T6878] process 'syz.4.255' launched './file0' with NULL argv: empty string added [ 163.525282][ T10] usb 4-1: Manufacturer: С [ 163.535511][ T30] audit: type=1400 audit(1781029842.384:398): avc: denied { execute } for pid=6877 comm="syz.4.255" name="file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.570457][ T10] usb 4-1: SerialNumber: syz [ 163.587912][ T6879] ÿ: renamed from dummy0 (while UP) [ 163.594957][ T30] audit: type=1400 audit(1781029842.434:399): avc: denied { execute_no_trans } for pid=6877 comm="syz.4.255" path="/42/file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.825035][ T30] audit: type=1400 audit(1781029842.684:400): avc: denied { write } for pid=6882 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.165824][ T6893] syzkaller0: entered promiscuous mode [ 164.171451][ T6893] syzkaller0: entered allmulticast mode [ 164.182267][ T6893] FAULT_INJECTION: forcing a failure. [ 164.182267][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.196191][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.1.259 Not tainted syzkaller #0 PREEMPT(full) [ 164.196219][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.196232][ T6893] Call Trace: [ 164.196239][ T6893] [ 164.196247][ T6893] dump_stack_lvl+0x100/0x190 [ 164.196278][ T6893] should_fail_ex.cold+0x5/0xa [ 164.196310][ T6893] _copy_to_user+0x32/0xd0 [ 164.196340][ T6893] simple_read_from_buffer+0xcb/0x170 [ 164.196372][ T6893] proc_fail_nth_read+0x1af/0x230 [ 164.196397][ T6893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.196424][ T6893] ? rw_verify_area+0xce/0x6d0 [ 164.196445][ T6893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.196470][ T6893] vfs_read+0x1e4/0xb30 [ 164.196497][ T6893] ? __pfx_vfs_read+0x10/0x10 [ 164.196519][ T6893] ? __fget_files+0x215/0x3d0 [ 164.196553][ T6893] ? __fget_files+0x21f/0x3d0 [ 164.196588][ T6893] ksys_read+0x12a/0x250 [ 164.196612][ T6893] ? __pfx_ksys_read+0x10/0x10 [ 164.196638][ T6893] ? rcu_is_watching+0x12/0xc0 [ 164.196674][ T6893] do_syscall_64+0x115/0x870 [ 164.196701][ T6893] ? clear_bhb_loop+0x40/0x90 [ 164.196728][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.196750][ T6893] RIP: 0033:0x7fb0bbf5d68e [ 164.196769][ T6893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.196790][ T6893] RSP: 002b:00007fb0bcf2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.196810][ T6893] RAX: ffffffffffffffda RBX: 00007fb0bcf2f6c0 RCX: 00007fb0bbf5d68e [ 164.196825][ T6893] RDX: 000000000000000f RSI: 00007fb0bcf2f0a0 RDI: 0000000000000009 [ 164.196839][ T6893] RBP: 00007fb0bcf2f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.196852][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.196865][ T6893] R13: 00007fb0bc216038 R14: 00007fb0bc215fa0 R15: 00007ffea24b3b38 [ 164.196897][ T6893] [ 164.388547][ T991] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 164.513915][ T6899] netlink: 6 bytes leftover after parsing attributes in process `syz.2.261'. [ 164.545034][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.553257][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.561579][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.570111][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.640849][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 164.647884][ T991] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 164.673690][ T991] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 164.685119][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.694157][ T991] usb 1-1: Product: syz [ 164.698516][ T991] usb 1-1: Manufacturer: syz [ 164.703577][ T991] usb 1-1: SerialNumber: syz [ 164.717851][ T991] usb 1-1: config 0 descriptor?? [ 164.726913][ T6904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.749097][ T991] gspca_main: sq930x-2.14.0 probing 2770:930c [ 164.881864][ T5820] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 165.063841][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.073284][ T5820] usb 2-1: config 2 has an invalid interface number: 42 but max is 1 [ 165.081904][ T5820] usb 2-1: config 2 has an invalid interface number: 123 but max is 1 [ 165.090346][ T5820] usb 2-1: config 2 has no interface number 0 [ 165.098380][ T5820] usb 2-1: config 2 has no interface number 1 [ 165.106031][ T5820] usb 2-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 165.116205][ T5820] usb 2-1: config 2 interface 123 has no altsetting 0 [ 165.208258][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6907 comm=syz.2.263 [ 165.222013][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6907 comm=syz.2.263 [ 165.310249][ T991] gspca_sq930x: ucbus_write failed -71 [ 165.319352][ T991] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 165.336945][ T991] usb 1-1: USB disconnect, device number 17 [ 165.436104][ T6913] dummy0: entered promiscuous mode [ 165.473187][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 165.477292][ T6913] veth0_to_bond: entered promiscuous mode [ 165.523174][ T6913] hsr1: entered allmulticast mode [ 165.570428][ T6913] dummy0: entered allmulticast mode [ 165.587962][ T6913] veth0_to_bond: entered allmulticast mode [ 165.595360][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 165.617696][ T10] usb 4-1: USB disconnect, device number 16 [ 165.644103][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.201223][ T5733] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 166.382312][ T5733] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 166.439354][ T5733] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 166.460108][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.473372][ T5733] usb 1-1: config 0 descriptor?? [ 166.495584][ T5733] pwc: Creative Labs Webcam Pro Ex detected. [ 166.510779][ T5733] pwc: Warning: more than 1 configuration available. [ 168.252492][ T30] audit: type=1400 audit(1781029846.254:401): avc: denied { map } for pid=6928 comm="syz.3.269" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.310447][ T30] audit: type=1400 audit(1781029846.274:402): avc: denied { execute } for pid=6928 comm="syz.3.269" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.346848][ T5820] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df [ 168.389053][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.397781][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 168.433310][ T5820] usb 2-1: Interface #123 referenced by multiple IADs [ 168.474283][ T5820] usb 2-1: can't set config #2, error -71 [ 168.506145][ T5820] usb 2-1: USB disconnect, device number 11 [ 168.755748][ T6944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6944 comm=syz.1.274 [ 168.797111][ T6944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6944 comm=syz.1.274 [ 168.819568][ T5733] pwc: recv_control_msg error -71 req 02 val 2700 [ 168.837756][ T5733] pwc: recv_control_msg error -71 req 04 val 1600 [ 168.847553][ T5733] pwc: recv_control_msg error -71 req 02 val 2c00 [ 168.854388][ T5733] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.861734][ T5733] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.869014][ T5733] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.884589][ T5733] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.902430][ T5733] pwc: recv_control_msg error -71 req 02 val 2100 [ 169.344961][ T5733] pwc: recv_control_msg error -71 req 06 val 0600 [ 169.351858][ T5733] pwc: recv_control_msg error -71 req 04 val 1500 [ 169.358651][ T5733] pwc: recv_control_msg error -71 req 02 val 2500 [ 169.365457][ T5733] pwc: recv_control_msg error -71 req 02 val 2400 [ 169.372248][ T5733] pwc: recv_control_msg error -71 req 02 val 2600 [ 169.379031][ T5733] pwc: recv_control_msg error -71 req 02 val 2900 [ 169.385912][ T5733] pwc: recv_control_msg error -71 req 02 val 2800 [ 169.392882][ T5733] pwc: recv_control_msg error -71 req 04 val 1100 [ 169.399667][ T5733] pwc: recv_control_msg error -71 req 04 val 1200 [ 169.414379][ T5733] pwc: Registered as video103. [ 169.428740][ T5733] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 169.447939][ T5733] usb 1-1: USB disconnect, device number 18 [ 170.808107][ T5820] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.050791][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 171.067825][ T5820] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 171.091940][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.105312][ T5820] usb 2-1: Product: Й [ 171.109783][ T5820] usb 2-1: Manufacturer: С [ 171.122734][ T5820] usb 2-1: SerialNumber: syz [ 171.280818][ T5620] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 171.461208][ T5620] usb 1-1: Using ep0 maxpacket: 32 [ 171.504614][ T5620] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 171.525453][ T10] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 171.633465][ T5620] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 171.746692][ T5620] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.769972][ T5620] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 171.791773][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.803002][ T5620] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 171.818998][ T10] usb 5-1: config 2 has an invalid interface number: 42 but max is 1 [ 171.827408][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.835568][ T10] usb 5-1: config 2 has an invalid interface number: 123 but max is 1 [ 171.844068][ T5620] usb 1-1: Product: syz [ 171.848321][ T5620] usb 1-1: Manufacturer: syz [ 171.853053][ T10] usb 5-1: config 2 has no interface number 0 [ 171.859277][ T5620] usb 1-1: SerialNumber: syz [ 171.864118][ T10] usb 5-1: config 2 has no interface number 1 [ 171.873879][ T10] usb 5-1: config 2 interface 42 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 171.889334][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 171.915906][ T10] usb 5-1: config 2 interface 123 has no altsetting 0 [ 171.927764][ T5620] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input21 [ 171.943464][ T10] usb 5-1: string descriptor 0 read error: -22 [ 171.952318][ T10] usb 5-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=11.df [ 171.967857][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.992261][ T10] usb 5-1: Interface #123 referenced by multiple IADs [ 172.003085][ T6975] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 172.184211][ T5620] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 172.193657][ T5620] (id 0x00) [ 172.716609][ T5820] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 173.835474][ T5820] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.844519][ T5620] rc_core: IR keymap rc-imon-pad not found [ 174.232877][ T6997] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.239975][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.248926][ T6997] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.256012][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.447604][ T5620] Registered IR keymap rc-empty [ 174.664002][ T10] qmi_wwan 5-1:2.42: probe with driver qmi_wwan failed with error -22 [ 174.676048][ T5820] usb 2-1: USB disconnect, device number 12 [ 174.683410][ T5620] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 174.700485][ T5620] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 174.714094][ T10] usb 5-1: USB disconnect, device number 26 [ 174.723922][ T5742] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 174.780626][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.803711][ T30] audit: type=1400 audit(1781029853.644:403): avc: denied { name_bind } for pid=7004 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.891700][ T5732] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.082437][ T5732] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 175.133474][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 175.154692][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.175592][ T5742] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.220540][ T5742] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.230415][ T5742] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.236288][ T5732] usb 4-1: config 0 descriptor?? [ 175.342265][ T5732] pwc: Creative Labs Webcam Pro Ex detected. [ 175.376234][ T5732] pwc: Warning: more than 1 configuration available. [ 175.391849][ T5742] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.402070][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.502811][ T5742] usbtmc 3-1:16.0: bulk endpoints not found [ 175.779479][ T5620] imon:send_packet: packet tx failed (-71) [ 175.793774][ T30] audit: type=1400 audit(1781029854.644:404): avc: denied { append } for pid=7012 comm="syz.1.292" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.800847][ T5620] imon 1-1:155.0: remote input dev register failed [ 175.824528][ T5620] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 175.854131][ T5620] imon 1-1:155.0: unable to initialize intf0, err 0 [ 175.861365][ T5620] imon:imon_probe: failed to initialize context! [ 175.868228][ T5620] imon 1-1:155.0: unable to register, err -19 [ 175.907248][ T5620] usb 1-1: USB disconnect, device number 19 [ 175.971027][ T30] audit: type=1400 audit(1781029854.834:405): avc: denied { read write } for pid=7012 comm="syz.1.292" name="sg0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 176.001704][ T7016] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 176.001704][ T7016] program syz.1.292 not setting count and/or reply_len properly [ 176.064238][ T30] audit: type=1400 audit(1781029854.924:406): avc: denied { map } for pid=7012 comm="syz.1.292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.120026][ T7019] binder_alloc: 7017: binder_alloc_buf, no vma [ 176.136799][ T30] audit: type=1400 audit(1781029854.924:407): avc: denied { read } for pid=7012 comm="syz.1.292" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.169378][ T5732] pwc: recv_control_msg error -71 req 02 val 2700 [ 176.200540][ T5732] pwc: recv_control_msg error -71 req 04 val 1600 [ 176.244993][ T5732] pwc: recv_control_msg error -71 req 02 val 2c00 [ 176.292047][ T30] audit: type=1400 audit(1781029854.954:408): avc: denied { ioctl } for pid=7012 comm="syz.1.292" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 176.319646][ T5732] pwc: recv_control_msg error -71 req 04 val 1000 [ 176.348979][ T5732] pwc: recv_control_msg error -71 req 04 val 1300 [ 176.371347][ T5732] pwc: recv_control_msg error -71 req 04 val 1400 [ 176.396960][ T5732] pwc: recv_control_msg error -71 req 02 val 2000 [ 176.407781][ T30] audit: type=1400 audit(1781029854.974:409): avc: denied { map } for pid=7017 comm="syz.0.293" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.440301][ T5732] pwc: recv_control_msg error -71 req 02 val 2100 [ 176.453266][ T5732] pwc: recv_control_msg error -71 req 06 val 0600 [ 176.544354][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 176.553015][ T30] audit: type=1400 audit(1781029854.974:410): avc: denied { call } for pid=7017 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.577911][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 176.728448][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 176.752528][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 176.770516][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 176.906228][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 177.374707][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 177.394738][ T5733] usb 3-1: USB disconnect, device number 30 [ 177.454248][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 178.343955][ T30] audit: type=1400 audit(1781029857.044:411): avc: denied { create } for pid=7029 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 178.700083][ T30] audit: type=1400 audit(1781029857.554:412): avc: denied { getopt } for pid=7029 comm="syz.3.296" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.870948][ T804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 178.945246][ T5732] pwc: Registered as video103. [ 179.980983][ T5733] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 180.091402][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 180.302235][ T5733] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 180.339558][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 180.349156][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 180.395715][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.421545][ T5733] usb 3-1: Product: syz [ 180.433302][ T5732] usb 4-1: USB disconnect, device number 17 [ 180.439373][ T5733] usb 3-1: Manufacturer: syz [ 180.458308][ T804] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 180.477544][ T5733] usb 3-1: SerialNumber: syz [ 180.487079][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.496731][ T804] usb 1-1: Product: syz [ 180.500954][ T804] usb 1-1: Manufacturer: syz [ 180.505669][ T804] usb 1-1: SerialNumber: syz [ 180.532244][ T804] usb 1-1: config 0 descriptor?? [ 180.540332][ T5733] usb 3-1: config 0 descriptor?? [ 180.551686][ T5733] ch341 3-1:0.0: ch341-uart converter detected [ 180.600161][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.607714][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.831816][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.841111][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 180.960956][ T5733] usb 3-1: failed to send control message: -71 [ 181.055309][ T5733] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 181.123908][ T5733] usb 3-1: USB disconnect, device number 31 [ 181.180412][ T5733] ch341 3-1:0.0: device disconnected [ 181.866588][ T7060] IPVS: sh: FWM 3 0x00000003 - no destination available [ 181.874905][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 181.891408][ T7060] IPVS: sh: FWM 3 0x00000003 - no destination available [ 181.898636][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 182.405356][ T7064] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 182.419559][ T804] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 182.664242][ T804] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 8c:61:d2:43:d6:97 [ 182.694766][ T804] usb 1-1: USB disconnect, device number 20 [ 182.855514][ T7069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 182.862182][ T7069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.863795][ T804] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 182.889770][ T7072] IPVS: sh: FWM 3 0x00000003 - no destination available [ 182.896822][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 182.904126][ T30] audit: type=1400 audit(1781029861.754:413): avc: denied { setopt } for pid=7067 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.923727][ T7072] IPVS: sh: FWM 3 0x00000003 - no destination available [ 182.930772][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 182.952143][ T7069] vhci_hcd vhci_hcd.0: Device attached [ 183.009720][ T7071] vhci_hcd: connection closed [ 183.012637][ T3346] vhci_hcd vhci_hcd.4: stop threads [ 183.024803][ T3346] vhci_hcd vhci_hcd.4: release socket [ 183.030241][ T3346] vhci_hcd vhci_hcd.4: disconnect device [ 183.254825][ T7088] comedi comedi0: Minor 3 could not be opened [ 183.482674][ T5742] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 183.754273][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 183.760659][ T5742] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 183.771033][ T5742] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 183.782841][ T5742] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.948235][ T5742] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 183.963134][ T7083] orangefs_mount: mount request failed with -4 [ 184.038238][ T5742] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 184.057216][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.079057][ T5742] usb 1-1: Product: syz [ 184.086128][ T5742] usb 1-1: Manufacturer: syz [ 184.090867][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 184.099282][ T5742] usb 1-1: SerialNumber: syz [ 184.117396][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 184.127350][ T5742] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input24 [ 184.264073][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.272473][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 184.281423][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.294834][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.307268][ T10] usb 2-1: string descriptor 0 read error: -22 [ 184.313803][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.324896][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.360754][ T5742] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 184.410262][ T10] usb 2-1: 0:2 : does not exist [ 184.421399][ T5742] (id 0x00) [ 184.550873][ T5742] rc_core: IR keymap rc-imon-pad not found [ 184.567221][ T5742] Registered IR keymap rc-empty [ 184.590406][ T5742] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 184.617748][ T5742] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 184.662099][ T5742] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 184.683453][ T5742] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input25 [ 184.705262][ T5742] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:21> initialized [ 184.828939][ T7117] IPVS: sh: FWM 3 0x00000003 - no destination available [ 184.836643][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 186.319169][ T5732] usb 1-1: USB disconnect, device number 21 [ 186.413774][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 186.449570][ T10] usb 2-1: Warning! Unlikely big volume step count (=25717), linear volume or wrong cval->res? [ 186.480816][ T10] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = -19823/5894/1 [ 186.620319][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 187.124253][ T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 187.249411][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 187.655421][ T10] usb 2-1: USB disconnect, device number 13 [ 188.180189][ T7132] netlink: 64 bytes leftover after parsing attributes in process `syz.0.319'. [ 190.184192][ T7142] ipip0: entered promiscuous mode [ 190.189305][ T7142] ipip0: entered allmulticast mode [ 190.310007][ T30] audit: type=1400 audit(1781029869.164:414): avc: denied { getopt } for pid=7162 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.515287][ T30] audit: type=1400 audit(1781029869.164:415): avc: denied { read write } for pid=7162 comm="syz.0.328" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 190.998526][ T30] audit: type=1400 audit(1781029869.164:416): avc: denied { open } for pid=7162 comm="syz.0.328" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 191.024515][ T30] audit: type=1400 audit(1781029869.494:417): avc: denied { kexec_image_load } for pid=7167 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 191.051038][ T804] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 191.220800][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 191.239102][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 191.268389][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 191.738764][ T804] usb 3-1: config 1 has an invalid interface number: 67 but max is 0 [ 191.764771][ T804] usb 3-1: config 1 has no interface number 0 [ 191.776576][ T804] usb 3-1: config 1 interface 67 altsetting 129 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 191.794898][ T804] usb 3-1: config 1 interface 67 has no altsetting 0 [ 191.812621][ T804] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=ab.ed [ 191.835293][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.859753][ T804] usb 3-1: Product: syz [ 191.867199][ T804] usb 3-1: Manufacturer: syz [ 191.875574][ T804] usb 3-1: SerialNumber: syz [ 192.151891][ T7187] net_ratelimit: 2 callbacks suppressed [ 192.151905][ T7187] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.164544][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.172478][ T7187] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.179483][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 192.620373][ T7173] orangefs_mount: mount request failed with -4 [ 192.872727][ T7197] FAULT_INJECTION: forcing a failure. [ 192.872727][ T7197] name failslab, interval 1, probability 0, space 0, times 0 [ 192.885585][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.1.334 Not tainted syzkaller #0 PREEMPT(full) [ 192.885613][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.885626][ T7197] Call Trace: [ 192.885633][ T7197] [ 192.885641][ T7197] dump_stack_lvl+0x100/0x190 [ 192.885671][ T7197] should_fail_ex.cold+0x5/0xa [ 192.885700][ T7197] ? tomoyo_encode2+0xfb/0x3c0 [ 192.885718][ T7197] should_failslab+0xc2/0x120 [ 192.885732][ T7197] __kmalloc_noprof+0xe0/0x850 [ 192.885750][ T7197] ? d_absolute_path+0x136/0x1b0 [ 192.885772][ T7197] tomoyo_encode2+0xfb/0x3c0 [ 192.885810][ T7197] tomoyo_encode+0x29/0x50 [ 192.885841][ T7197] tomoyo_realpath_from_path+0x18c/0x690 [ 192.885865][ T7197] tomoyo_path_number_perm+0x23c/0x580 [ 192.885881][ T7197] ? tomoyo_path_number_perm+0x22e/0x580 [ 192.885898][ T7197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.885964][ T7197] ? find_held_lock+0x2b/0x80 [ 192.885984][ T7197] ? __fget_files+0x215/0x3d0 [ 192.886002][ T7197] ? hook_file_ioctl_common+0x149/0x410 [ 192.886014][ T7197] ? __fget_files+0x215/0x3d0 [ 192.886032][ T7197] ? __fget_files+0x21f/0x3d0 [ 192.886049][ T7197] security_file_ioctl+0xd3/0x230 [ 192.886078][ T7197] __x64_sys_ioctl+0xb7/0x210 [ 192.886104][ T7197] do_syscall_64+0x115/0x870 [ 192.886132][ T7197] ? clear_bhb_loop+0x40/0x90 [ 192.886150][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.886162][ T7197] RIP: 0033:0x7fb0bbf9ce59 [ 192.886173][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.886185][ T7197] RSP: 002b:00007fb0bceed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.886196][ T7197] RAX: ffffffffffffffda RBX: 00007fb0bc216180 RCX: 00007fb0bbf9ce59 [ 192.886207][ T7197] RDX: 0000200000000000 RSI: 000000000000560a RDI: 000000000000000a [ 192.886221][ T7197] RBP: 00007fb0bceed090 R08: 0000000000000000 R09: 0000000000000000 [ 192.886234][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.886248][ T7197] R13: 00007fb0bc216218 R14: 00007fb0bc216180 R15: 00007ffea24b3b38 [ 192.886280][ T7197] [ 192.886342][ T7197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.482458][ T804] usb 3-1: USB disconnect, device number 32 [ 194.488385][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496312][ T30] audit: type=1400 audit(1781029872.524:418): avc: denied { name_bind } for pid=7200 comm="syz.3.336" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 194.517862][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.092348][ T991] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 195.334069][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 195.496492][ T7217] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 195.567182][ T991] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 195.764053][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.798406][ T7218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.818575][ T7210] comedi comedi0: Minor 3 could not be opened [ 195.828670][ T991] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.864721][ T991] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.905076][ T991] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.932498][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.578667][ T7211] FAULT_INJECTION: forcing a failure. [ 196.578667][ T7211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.826575][ T991] usb 1-1: GET_CAPABILITIES returned 0 [ 196.832153][ T991] usbtmc 1-1:16.0: can't read capabilities [ 196.840931][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(full) [ 196.840961][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.840974][ T7211] Call Trace: [ 196.840981][ T7211] [ 196.840989][ T7211] dump_stack_lvl+0x100/0x190 [ 196.841018][ T7211] should_fail_ex.cold+0x5/0xa [ 196.841048][ T7211] strncpy_from_user+0x3b/0x2d0 [ 196.841081][ T7211] do_getname+0x78/0x390 [ 196.841123][ T7211] user_path_at+0x26/0x60 [ 196.841149][ T7211] __x64_sys_mount+0x1fb/0x310 [ 196.841182][ T7211] ? __pfx___x64_sys_mount+0x10/0x10 [ 196.841217][ T7211] ? rcu_is_watching+0x12/0xc0 [ 196.841252][ T7211] do_syscall_64+0x115/0x870 [ 196.841281][ T7211] ? clear_bhb_loop+0x40/0x90 [ 196.841307][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.841330][ T7211] RIP: 0033:0x7f889239ce59 [ 196.841348][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.841369][ T7211] RSP: 002b:00007f88932f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.841390][ T7211] RAX: ffffffffffffffda RBX: 00007f8892615fa0 RCX: 00007f889239ce59 [ 196.841404][ T7211] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 196.841418][ T7211] RBP: 00007f88932f3090 R08: 0000200000000840 R09: 0000000000000000 [ 196.841432][ T7211] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 196.841445][ T7211] R13: 00007f8892616038 R14: 00007f8892615fa0 R15: 00007ffdaf863928 [ 196.841476][ T7211] [ 197.444808][ T991] usb 1-1: USB disconnect, device number 22 [ 197.791402][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 198.089568][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 198.160885][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 198.195228][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 198.217972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.231020][ T10] usb 3-1: Product: syz [ 198.235209][ T10] usb 3-1: Manufacturer: syz [ 198.239945][ T10] usb 3-1: SerialNumber: syz [ 198.257894][ T10] usb 3-1: config 0 descriptor?? [ 198.265860][ T7234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.276502][ T7234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.338269][ T7249] netlink: 'syz.3.352': attribute type 11 has an invalid length. [ 198.424529][ T30] audit: type=1400 audit(1781029877.284:419): avc: denied { read } for pid=7252 comm="syz.0.355" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.448149][ T30] audit: type=1400 audit(1781029877.284:420): avc: denied { open } for pid=7252 comm="syz.0.355" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.588995][ T7234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.608898][ T7234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.822004][ T7259] F2FS-fs: Conflicting test_dummy_encryption options [ 198.877350][ T991] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 198.887274][ T5620] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 199.014570][ T7260] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.021739][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.029663][ T7260] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.036753][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 199.131669][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 199.137027][ T5620] usb 4-1: Using ep0 maxpacket: 8 [ 199.145203][ T991] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.154104][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.162385][ T991] usb 1-1: config 179 has no interface number 0 [ 199.169186][ T991] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 199.182700][ T991] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 199.195311][ T991] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.207387][ T5620] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 199.219202][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.228201][ T991] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 199.241727][ T5620] usb 4-1: Product: syz [ 199.246214][ T5620] usb 4-1: Manufacturer: syz [ 199.251404][ T5620] usb 4-1: SerialNumber: syz [ 199.256056][ T991] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.364417][ T991] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 199.377193][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.392464][ T7254] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 199.599576][ T5620] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 199.730316][ T30] audit: type=1400 audit(1781029878.584:421): avc: denied { ioctl } for pid=7252 comm="syz.0.355" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.778019][ T24] usb 1-1: USB disconnect, device number 23 [ 199.778042][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 199.800799][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 199.809553][ C0] ================================================================== [ 199.817611][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 199.825437][ C0] Read of size 4 at addr ffff888053e0185c by task syz.1.357/7264 [ 199.833142][ C0] [ 199.835450][ C0] CPU: 0 UID: 0 PID: 7264 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 199.835476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.835489][ C0] Call Trace: [ 199.835496][ C0] [ 199.835504][ C0] dump_stack_lvl+0x100/0x190 [ 199.835530][ C0] print_report+0x13d/0x4b0 [ 199.835562][ C0] ? __virt_addr_valid+0x239/0x430 [ 199.835587][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 199.835616][ C0] kasan_report+0xdf/0x1d0 [ 199.835641][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 199.835674][ C0] do_raw_spin_lock+0x23b/0x260 [ 199.835704][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.835735][ C0] ? kcov_remote_stop+0x18d/0x540 [ 199.835761][ C0] ? kcov_remote_stop+0x18d/0x540 [ 199.835786][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 199.835812][ C0] ? __wake_up+0x1c/0x60 [ 199.835837][ C0] __wake_up+0x1c/0x60 [ 199.835859][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 199.835890][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 199.835917][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 199.835943][ C0] dummy_timer+0xda1/0x36c0 [ 199.835967][ C0] ? find_held_lock+0x2b/0x80 [ 199.835990][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 199.836016][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 199.836041][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 199.836067][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 199.836087][ C0] ? mark_held_locks+0x40/0x70 [ 199.836112][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 199.836137][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 199.836157][ C0] __hrtimer_run_queues+0x470/0xa00 [ 199.836195][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 199.836227][ C0] handle_softirqs+0x1ea/0xa00 [ 199.836260][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 199.836290][ C0] ? _raw_spin_unlock+0x28/0x50 [ 199.836313][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 199.836348][ C0] __irq_exit_rcu+0x162/0x210 [ 199.836377][ C0] irq_exit_rcu+0x9/0x30 [ 199.836405][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 199.836437][ C0] [ 199.836444][ C0] [ 199.836451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.836475][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 199.836503][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 1e 58 f6 48 89 df e8 ae 6e 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 3a 48 f6 65 8b 05 6e 1d 7d 08 85 c0 74 16 5b [ 199.836524][ C0] RSP: 0018:ffffc9000313f838 EFLAGS: 00000246 [ 199.836541][ C0] RAX: 0000000000000002 RBX: ffff8880767c3a00 RCX: 0000000000000040 [ 199.836556][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbf5 RDI: ffffffff8c1c4780 [ 199.836570][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 199.836583][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880767c3890 [ 199.836597][ C0] R13: ffff8880767c3a40 R14: ffff8880767c33e8 R15: ffff88802b696140 [ 199.836620][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 199.836655][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 199.836686][ C0] ? __lock_acquire+0x4a5/0x2630 [ 199.836716][ C0] ? iovec_from_user+0xda/0x140 [ 199.836745][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 199.836776][ C0] ____sys_recvmsg+0x5b3/0x640 [ 199.836800][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 199.836832][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 199.836861][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.836892][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 199.836916][ C0] ? kfree+0x1dd/0x6c0 [ 199.836944][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 199.836972][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 199.836998][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 199.837030][ C0] ? __pfx___might_resched+0x10/0x10 [ 199.837063][ C0] do_recvmmsg+0x301/0x760 [ 199.837091][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.837115][ C0] ? path_removexattrat+0x108/0x5f0 [ 199.837145][ C0] ? __pfx_path_removexattrat+0x10/0x10 [ 199.837176][ C0] ? do_futex+0x192/0x350 [ 199.837211][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 199.837241][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 199.837276][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.837311][ C0] ? rcu_is_watching+0x12/0xc0 [ 199.837344][ C0] do_syscall_64+0x115/0x870 [ 199.837371][ C0] ? clear_bhb_loop+0x40/0x90 [ 199.837395][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.837420][ C0] RIP: 0033:0x7fb0bbf9ce59 [ 199.837436][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.837457][ C0] RSP: 002b:00007fb0bcf0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.837476][ C0] RAX: ffffffffffffffda RBX: 00007fb0bc216090 RCX: 00007fb0bbf9ce59 [ 199.837491][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 199.837505][ C0] RBP: 00007fb0bc032d6f R08: 0000000000000000 R09: 0000000000000000 [ 199.837518][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 199.837531][ C0] R13: 00007fb0bc216128 R14: 00007fb0bc216090 R15: 00007ffea24b3b38 [ 199.837553][ C0] [ 199.837560][ C0] [ 200.327444][ C0] Allocated by task 991: [ 200.331675][ C0] kasan_save_stack+0x30/0x50 [ 200.336339][ C0] kasan_save_track+0x14/0x30 [ 200.341001][ C0] __kasan_kmalloc+0xaa/0xb0 [ 200.345574][ C0] xpad_probe+0x28e/0x1f60 [ 200.349976][ C0] usb_probe_interface+0x303/0x8f0 [ 200.355073][ C0] really_probe+0x241/0xa60 [ 200.359570][ C0] __driver_probe_device+0x22e/0x480 [ 200.364854][ C0] driver_probe_device+0x4c/0x1b0 [ 200.369877][ C0] __device_attach_driver+0x1df/0x340 [ 200.375243][ C0] bus_for_each_drv+0x159/0x1e0 [ 200.380080][ C0] __device_attach+0x1e4/0x4d0 [ 200.384839][ C0] device_initial_probe+0xaf/0xd0 [ 200.389857][ C0] bus_probe_device+0x64/0x160 [ 200.394608][ C0] device_add+0x1210/0x1950 [ 200.399106][ C0] usb_set_configuration+0xd97/0x1c60 [ 200.404478][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 200.409852][ C0] usb_probe_device+0xef/0x400 [ 200.414597][ C0] really_probe+0x241/0xa60 [ 200.419092][ C0] __driver_probe_device+0x22e/0x480 [ 200.424371][ C0] driver_probe_device+0x4c/0x1b0 [ 200.429389][ C0] __device_attach_driver+0x1df/0x340 [ 200.434756][ C0] bus_for_each_drv+0x159/0x1e0 [ 200.439592][ C0] __device_attach+0x1e4/0x4d0 [ 200.444349][ C0] device_initial_probe+0xaf/0xd0 [ 200.449366][ C0] bus_probe_device+0x64/0x160 [ 200.454119][ C0] device_add+0x1210/0x1950 [ 200.458617][ C0] usb_new_device.cold+0x685/0x115c [ 200.463808][ C0] hub_event+0x314d/0x4af0 [ 200.468211][ C0] process_one_work+0xa0e/0x1980 [ 200.473138][ C0] worker_thread+0x5ef/0xe50 [ 200.477718][ C0] kthread+0x370/0x450 [ 200.481773][ C0] ret_from_fork+0x72b/0xd50 [ 200.486351][ C0] ret_from_fork_asm+0x1a/0x30 [ 200.491109][ C0] [ 200.493412][ C0] Freed by task 24: [ 200.497195][ C0] kasan_save_stack+0x30/0x50 [ 200.501854][ C0] kasan_save_track+0x14/0x30 [ 200.506514][ C0] kasan_save_free_info+0x3b/0x70 [ 200.511531][ C0] __kasan_slab_free+0x5f/0x80 [ 200.516283][ C0] kfree+0x223/0x6c0 [ 200.520169][ C0] xpad_disconnect+0x1cf/0x530 [ 200.524921][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 200.530103][ C0] device_remove+0x12a/0x180 [ 200.534684][ C0] device_release_driver_internal+0x44e/0x620 [ 200.540745][ C0] bus_remove_device+0x2bc/0x560 [ 200.545673][ C0] device_del+0x376/0x9b0 [ 200.549992][ C0] usb_disable_device+0x367/0x810 [ 200.555011][ C0] usb_disconnect+0x2e2/0x9a0 [ 200.559684][ C0] hub_event+0x1d0c/0x4af0 [ 200.564080][ C0] process_one_work+0xa0e/0x1980 [ 200.569005][ C0] worker_thread+0x5ef/0xe50 [ 200.573583][ C0] kthread+0x370/0x450 [ 200.577640][ C0] ret_from_fork+0x72b/0xd50 [ 200.582217][ C0] ret_from_fork_asm+0x1a/0x30 [ 200.586974][ C0] [ 200.589275][ C0] The buggy address belongs to the object at ffff888053e01800 [ 200.589275][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 200.603309][ C0] The buggy address is located 92 bytes inside of [ 200.603309][ C0] freed 1024-byte region [ffff888053e01800, ffff888053e01c00) [ 200.617088][ C0] [ 200.619391][ C0] The buggy address belongs to the physical page: [ 200.625779][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888053e06000 pfn:0x53e00 [ 200.635836][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.644316][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 200.652801][ C0] page_type: f5(slab) [ 200.656771][ C0] raw: 00fff00000000240 ffff88813fe2edc0 ffffea0001fd6410 ffffea0000983e10 [ 200.665346][ C0] raw: ffff888053e06000 000000080010000f 00000000f5000000 0000000000000000 [ 200.673914][ C0] head: 00fff00000000240 ffff88813fe2edc0 ffffea0001fd6410 ffffea0000983e10 [ 200.682571][ C0] head: ffff888053e06000 000000080010000f 00000000f5000000 0000000000000000 [ 200.691227][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 200.700142][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 200.710004][ C0] page dumped because: kasan: bad access detected [ 200.716401][ C0] page_owner tracks the page as allocated [ 200.722095][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 48, tgid 48 (kworker/u8:3), ts 81322333692, free_ts 15070352696 [ 200.742489][ C0] post_alloc_hook+0xfd/0x120 [ 200.747164][ C0] get_page_from_freelist+0x11a6/0x3410 [ 200.752704][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 200.758596][ C0] new_slab+0xa6/0x6c0 [ 200.762657][ C0] refill_objects+0x277/0x420 [ 200.767326][ C0] __pcs_replace_empty_main+0x375/0x650 [ 200.772865][ C0] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 200.779279][ C0] kmalloc_reserve+0xe8/0x350 [ 200.783942][ C0] pskb_expand_head+0x249/0x10e0 [ 200.788875][ C0] batadv_skb_head_push+0xec/0x280 [ 200.793982][ C0] batadv_send_skb_packet+0xed/0x6e0 [ 200.799258][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x674/0x860 [ 200.806273][ C0] process_one_work+0xa0e/0x1980 [ 200.811201][ C0] worker_thread+0x5ef/0xe50 [ 200.815781][ C0] kthread+0x370/0x450 [ 200.819840][ C0] ret_from_fork+0x72b/0xd50 [ 200.824420][ C0] page last free pid 1 tgid 1 stack trace: [ 200.830211][ C0] __free_frozen_pages+0x794/0x10a0 [ 200.835398][ C0] free_contig_range+0xda/0x140 [ 200.840239][ C0] destroy_args+0xa8/0x7a0 [ 200.844641][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 200.849649][ C0] do_one_initcall+0x121/0x750 [ 200.854409][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 200.859590][ C0] kernel_init+0x1f/0x1e0 [ 200.863903][ C0] ret_from_fork+0x72b/0xd50 [ 200.868482][ C0] ret_from_fork_asm+0x1a/0x30 [ 200.873253][ C0] [ 200.875566][ C0] Memory state around the buggy address: [ 200.881175][ C0] ffff888053e01700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.889218][ C0] ffff888053e01780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.897262][ C0] >ffff888053e01800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.905316][ C0] ^ [ 200.912233][ C0] ffff888053e01880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.920275][ C0] ffff888053e01900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.928314][ C0] ================================================================== [ 200.936353][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.943528][ C0] CPU: 0 UID: 0 PID: 7264 Comm: syz.1.357 Not tainted syzkaller #0 PREEMPT(full) [ 200.952714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.962757][ C0] Call Trace: [ 200.966025][ C0] [ 200.968856][ C0] dump_stack_lvl+0x100/0x190 [ 200.973534][ C0] vpanic+0x552/0x970 [ 200.977505][ C0] ? __pfx_vpanic+0x10/0x10 [ 200.981996][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 200.987025][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 200.992053][ C0] panic+0xd1/0xe0 [ 200.995764][ C0] ? __pfx_panic+0x10/0x10 [ 201.000170][ C0] ? end_report.part.0+0x23/0x90 [ 201.005109][ C0] ? rcu_is_watching+0x12/0xc0 [ 201.009873][ C0] ? end_report.part.0+0x23/0x90 [ 201.014807][ C0] ? check_panic_on_warn+0x1f/0x90 [ 201.019912][ C0] check_panic_on_warn.cold+0x19/0x34 [ 201.025275][ C0] end_report.part.0+0x3a/0x90 [ 201.030038][ C0] kasan_report.cold+0xe/0x18 [ 201.034717][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 201.039741][ C0] do_raw_spin_lock+0x23b/0x260 [ 201.044599][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.049966][ C0] ? kcov_remote_stop+0x18d/0x540 [ 201.054981][ C0] ? kcov_remote_stop+0x18d/0x540 [ 201.059996][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 201.065188][ C0] ? __wake_up+0x1c/0x60 [ 201.069417][ C0] __wake_up+0x1c/0x60 [ 201.073474][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 201.078932][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 201.084296][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 201.089492][ C0] dummy_timer+0xda1/0x36c0 [ 201.093988][ C0] ? find_held_lock+0x2b/0x80 [ 201.098656][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.104456][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 201.110078][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 201.116054][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 201.120981][ C0] ? mark_held_locks+0x40/0x70 [ 201.125735][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.131534][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 201.136458][ C0] __hrtimer_run_queues+0x470/0xa00 [ 201.141659][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 201.146768][ C0] handle_softirqs+0x1ea/0xa00 [ 201.151533][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 201.156813][ C0] ? _raw_spin_unlock+0x28/0x50 [ 201.161652][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 201.167287][ C0] __irq_exit_rcu+0x162/0x210 [ 201.171985][ C0] irq_exit_rcu+0x9/0x30 [ 201.176231][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 201.181860][ C0] [ 201.184773][ C0] [ 201.187688][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.193663][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 201.200073][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 1e 58 f6 48 89 df e8 ae 6e 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 3a 48 f6 65 8b 05 6e 1d 7d 08 85 c0 74 16 5b [ 201.219668][ C0] RSP: 0018:ffffc9000313f838 EFLAGS: 00000246 [ 201.225723][ C0] RAX: 0000000000000002 RBX: ffff8880767c3a00 RCX: 0000000000000040 [ 201.233676][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbf5 RDI: ffffffff8c1c4780 [ 201.241660][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 201.249618][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880767c3890 [ 201.257580][ C0] R13: ffff8880767c3a40 R14: ffff8880767c33e8 R15: ffff88802b696140 [ 201.265551][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 201.270759][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 201.276479][ C0] ? __lock_acquire+0x4a5/0x2630 [ 201.281419][ C0] ? iovec_from_user+0xda/0x140 [ 201.286274][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 201.291229][ C0] ____sys_recvmsg+0x5b3/0x640 [ 201.295988][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 201.301532][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 201.306817][ C0] ? rcu_is_watching+0x12/0xc0 [ 201.311587][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 201.316444][ C0] ? kfree+0x1dd/0x6c0 [ 201.320530][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 201.325740][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 201.330416][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 201.335625][ C0] ? __pfx___might_resched+0x10/0x10 [ 201.340910][ C0] do_recvmmsg+0x301/0x760 [ 201.345322][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 201.350252][ C0] ? path_removexattrat+0x108/0x5f0 [ 201.355462][ C0] ? __pfx_path_removexattrat+0x10/0x10 [ 201.361008][ C0] ? do_futex+0x192/0x350 [ 201.365339][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 201.370275][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 201.375313][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 201.380861][ C0] ? rcu_is_watching+0x12/0xc0 [ 201.385626][ C0] do_syscall_64+0x115/0x870 [ 201.390213][ C0] ? clear_bhb_loop+0x40/0x90 [ 201.394884][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.400765][ C0] RIP: 0033:0x7fb0bbf9ce59 [ 201.405166][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.424759][ C0] RSP: 002b:00007fb0bcf0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.433165][ C0] RAX: ffffffffffffffda RBX: 00007fb0bc216090 RCX: 00007fb0bbf9ce59 [ 201.441121][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 201.449075][ C0] RBP: 00007fb0bc032d6f R08: 0000000000000000 R09: 0000000000000000 [ 201.457030][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 201.464984][ C0] R13: 00007fb0bc216128 R14: 00007fb0bc216090 R15: 00007ffea24b3b38 [ 201.472948][ C0] [ 201.476081][ C0] Kernel Offset: disabled [ 201.480382][ C0] Rebooting in 86400 seconds..