last executing test programs: 1m25.931934701s ago: executing program 1 (id=882): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x17, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x143902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$I2C(0x0, 0x1, 0x402) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1m24.965573438s ago: executing program 1 (id=884): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fd5432f"], 0xdd12}], 0x11}, 0x20040051) 1m24.148989978s ago: executing program 1 (id=887): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="08009757c0200000140003006e657464657673696d3000000000000034001680300001802c000c801400010000000080"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1m23.853412834s ago: executing program 1 (id=890): eventfd2(0xff, 0x80801) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1m23.798548792s ago: executing program 1 (id=891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe33, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x800000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x8000000e, 0x40087ffd, 0x14, "69120700000000000000002000"}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x18, {"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", 0x1000}}, 0x1006) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) umount2(0x0, 0x8) 1m22.274340443s ago: executing program 1 (id=892): mount(&(0x7f0000000180)=@rnullb, 0x0, &(0x7f00000003c0)='gadgetfs\x00', 0x1, &(0x7f0000000400)='-/,!^}@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000088000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mq_open(0x0, 0x42, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb3, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000100)={0x20, r7, 0x0, 0x0, &(0x7f0000000140)}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x18, r7, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) 1m7.00677731s ago: executing program 32 (id=892): mount(&(0x7f0000000180)=@rnullb, 0x0, &(0x7f00000003c0)='gadgetfs\x00', 0x1, &(0x7f0000000400)='-/,!^}@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000088000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mq_open(0x0, 0x42, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb3, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f0000000100)={0x20, r7, 0x0, 0x0, &(0x7f0000000140)}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000180)={0x18, r7, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) 9.778174019s ago: executing program 5 (id=1121): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a30000000000900"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9.596676643s ago: executing program 3 (id=1122): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x40001, 0x5, 0x5, 0x80000004, 0x7, "9393858308cadc3fe5df0af03652b354deb58c", 0x1e, 0x103}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a50000000060a0b04000000000000000002000000240004802000018008"], 0x78}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000030601030000000000000000000000030900020073797a3100000000050001ee06000000"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000100000000000000000000000800200000000e0a010200000000000000000a0000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'dt2801\x00', [0x4f23, 0x7f, 0x1, 0x3, 0x2, 0xdea7, 0xc, 0x6, 0xa, 0xfd, 0xfffffffa, 0xffffffff, 0x401, 0x1, 0x6, 0x101, 0x7, 0x7f, 0x1, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x4, 0x81, 0x0, 0xc6]}) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x43, 0x43]}, 0x2f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480)="c1c2b31536e327e6714e17ab7202a6ba78d06f14e81e5d403b1b0726f2882bcddefe2f115442d85a56aa75f006dce847572d7a9f60f3c855106ded60a4e703ae66abdac3955bbe055bc9f88d6cf40db6a3cd2308e1d5464ed3cf5f911adc9dd5ecd643a973a2a9fea221aabab96f6bd5b8426fe5b7fef7d83af648a1418b69effb5b105f82c7803f7999df2a210c81fa1da3b61ae3092ffbc95d12c8bf89ab6a34aa84e5b371694cb1590361731b91e9e51c44539e15d609e00fc587f53355fafb1fea9c44c4c8d20cd2b86a77eeb3088305a60676e05fe33b17abdbbef2", 0xde}, 0x68) 9.582807239s ago: executing program 5 (id=1123): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2000000000000000, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x9, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.581976592s ago: executing program 5 (id=1126): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000340)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x8000, 0xfffeffff0fff6000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 7.647866403s ago: executing program 5 (id=1127): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0xb0000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r7, &(0x7f0000000680), 0x4924924924925c6, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf25080001000200000008001500ad96666008004f000000000008004b001300000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 7.153805539s ago: executing program 3 (id=1129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000100000000000029000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000851880a838000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000100000850000009226060000009500000000000000e64259494ac014247c263755a98de777a4c469dc777baec735a7023528d5d9fff73a209dd393e51ad73f11667cf9ea39ec644196308a5c999ccf25d986b5b378fa684942a7e7cda5085f32e1cdf934262822764ba1f8442f157a245b55baf96da9ca9658e62589e57cbb3a00"/205], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000080f30018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5c5850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x3, 0x0, 0xdededede}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x7, 0x0, 0xdededede}) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000500)={&(0x7f0000000100)=[r6], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x3, 0x1}, 0x10) read$FUSE(r5, &(0x7f000000c280)={0x2020, 0x0, 0x0}, 0x2020) r10 = socket$netlink(0x10, 0x3, 0x0) fstat(r5, &(0x7f00000002c0)) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x14, 0x1c, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x801001a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) execve(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000fc0)='./binderfs/binder1\x00', 0x800, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r11, 0x0) 6.490558011s ago: executing program 0 (id=1130): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 5.959624732s ago: executing program 0 (id=1132): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0'}, 0xb) close(r0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000884) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000043b8e327be8e9700000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000020000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe"]}, 0x108) 5.139576489s ago: executing program 5 (id=1141): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/hci\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400e7ff0206010100000000000000000200000a781c726edb532cbe91425d5e0f30b563fab836f7"], 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x4) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000806050000f6ff000000000005000009050001000700000005000100070000000901020073797a0005000100070000000500010007000000050001000700000005000100070000000900020073797a320000000009001e0073797a3000000000740b6ed1f95f31ec8188435295dc271abeb5a135780f02ca2d896df3dbf648ee4824a6f6c88f95e623186c2faeee7eb60aab20362c42ffd716bf58e9ee7f57d186ca78c7ab2bdc64c79e4f31385b9cf77e6e04707557fb1049"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004090) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000073bbc20e3050205acb2000000010902fd7e954e281567660f0000001aeb3900"], 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) 4.977019822s ago: executing program 0 (id=1142): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905", @ANYRES64], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4.245271395s ago: executing program 4 (id=1143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 4.203272681s ago: executing program 2 (id=1144): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x1, "", [@typed={0x7, 0x2a, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 4.091328823s ago: executing program 2 (id=1145): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) mq_open(&(0x7f0000000100)='\',.\x00', 0x80, 0x82, &(0x7f0000000280)={0x39c, 0x2, 0x6, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000309000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8", 0x4}], 0x1}, 0x0) 4.036931464s ago: executing program 4 (id=1146): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a30000000000900"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.872549143s ago: executing program 4 (id=1147): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x49c, &(0x7f0000000480)={0x0, 0xe7a8, 0x1, 0xffffffff, 0xc0024e}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x44, 0x6, 0x518, 0x170, 0x0, 0x208, 0x208, 0x170, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5826b78f3a540842}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00'}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e22], [0x4e24, 0x4e20], [0x7fff, 0x3, 0x95, 0x0, 0xffffffff, 0x0, 0x4, 0x4, 0x0, 0x3, 0x9, 0x9, 0x1000, 0xb, 0xc4f, 0x3, 0x6, 0x3, 0x81, 0x0, 0x40000000, 0x2, 0x3, 0xffff, 0x6, 0x9, 0x7f, 0x401, 0x8, 0x3, 0x5, 0x0, 0xe4, 0xfffff801, 0x1, 0xffffffff, 0xb, 0x8, 0x5, 0xffff, 0x4, 0x3, 0x39c, 0x4, 0x5, 0x64, 0x7, 0x8, 0x3, 0x3, 0x8, 0xa, 0x0, 0x8, 0x3, 0xeb2, 0x8000, 0x6, 0xc0, 0xe, 0x4, 0x7f, 0x100], 0x4, [{0x9, 0x1, 0x8}, {0x5, 0x4, 0x10}, {0x81, 0x5, 0x7f}, {0x1, 0x29, 0x7f}], 0x1, 0x2, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000300)=r5, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x5c25, 0x204c36, 0xd, 0x0, 0xfffffffffffffe10) 3.36727396s ago: executing program 3 (id=1148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002a80)="01"}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) tkill(r2, 0x12) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 3.300462812s ago: executing program 4 (id=1149): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) r5 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x119, 0x487, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r7, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 3.137156979s ago: executing program 2 (id=1150): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r1, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r1}}, 0x120) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x400fe, 0x13, 0x2, 0x200, &(0x7f0000000640)="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"}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x10, 0x1c, 0x187, &(0x7f0000000a40)}) 2.289097386s ago: executing program 3 (id=1151): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0xb0000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r7, &(0x7f0000000680), 0x4924924924925c6, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf25080001000200000008001500ad96666008004f000000000008004b001300000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 2.288492375s ago: executing program 2 (id=1152): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) futex(0x0, 0x9, 0x0, 0x0, &(0x7f0000000000), 0x14fffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000200)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) open(0x0, 0x89000, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 2.185065907s ago: executing program 4 (id=1153): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r4, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '%'}]}, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.255124501s ago: executing program 0 (id=1154): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000002480)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x19, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c7125a6c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xb6, 0x400]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ftruncate(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) semget$private(0x0, 0x207, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x8}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000002240)={r0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x200000000000001, 0x106) 1.02078751s ago: executing program 3 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r3, 0x6, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') (fail_nth: 14) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)='J', 0x20000, 0x4800, 0x0, 0xf00) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) 1.004603813s ago: executing program 5 (id=1156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 300.072045ms ago: executing program 2 (id=1157): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a30000000000900"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 299.117019ms ago: executing program 3 (id=1158): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x20080522, r1}, &(0x7f00000002c0)={0x1000, 0x10fffc, 0x7ffe, 0x2, 0x81, 0xffffff80}) 57.745877ms ago: executing program 4 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x6c}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1, 0x0, 0x700}, 0x0) 0s ago: executing program 2 (id=1160): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) mq_open(&(0x7f0000000100)='\',.\x00', 0x80, 0x82, &(0x7f0000000280)={0x39c, 0x2, 0x6, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000309000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8", 0x4}], 0x1}, 0x0) kernel console output (not intermixed with test programs): e number 20 using dummy_hcd [ 265.068625][ T8180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.368521][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 265.605721][ T5868] usb 1-1: config index 0 descriptor too short (expected 32509, got 18) [ 265.615660][ T5868] usb 1-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 265.670774][ T5868] usb 1-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 265.704192][ T5868] usb 1-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 265.723616][ T5868] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 265.753369][ T30] audit: type=1400 audit(1767702542.512:453): avc: denied { add_name } for pid=8167 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.787720][ T6087] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.795545][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.893321][ T30] audit: type=1400 audit(1767702542.542:454): avc: denied { create } for pid=8167 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.923667][ T30] audit: type=1400 audit(1767702542.542:455): avc: denied { write } for pid=8167 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.953507][ T30] audit: type=1400 audit(1767702542.542:456): avc: denied { append } for pid=8167 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.564372][ T6087] usb 4-1: Using ep0 maxpacket: 8 [ 266.597676][ T6087] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 266.776354][ T5868] usb 1-1: string descriptor 0 read error: -71 [ 266.783920][ T5868] usb 1-1: USB disconnect, device number 20 [ 266.804119][ T6087] usb 4-1: config 179 has no interface number 0 [ 266.886452][ T6087] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 266.912785][ T6087] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 266.924876][ T30] audit: type=1400 audit(1767702543.682:457): avc: denied { remove_name } for pid=8213 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.970948][ T6087] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.992895][ T30] audit: type=1400 audit(1767702543.682:458): avc: denied { unlink } for pid=8213 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.016869][ T6087] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 267.032040][ T6087] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 267.047356][ T6087] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 267.057790][ T6087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.090460][ T8200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 267.100338][ T6087] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 267.574849][ T6087] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.614350][ T6467] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.884255][ T935] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 267.926866][ T6087] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.954363][ T6087] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.965522][ T6467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 267.975245][ T6087] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.984412][ T6467] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 267.994583][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.013575][ T6467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 268.023543][ T6467] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 268.034349][ T8226] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.041574][ T6467] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 268.051612][ T6467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.062915][ T6087] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.066268][ T935] usb 1-1: config 0 has no interfaces? [ 268.078327][ T6467] usb 2-1: config 0 descriptor?? [ 268.087747][ T935] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 268.097826][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.108821][ T935] usb 1-1: config 0 descriptor?? [ 268.270868][ T6087] usb 3-1: USB disconnect, device number 18 [ 268.296683][ T6467] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 268.349892][ T935] usb 1-1: USB disconnect, device number 21 [ 268.386586][ T5868] usb 4-1: USB disconnect, device number 15 [ 268.398832][ T6467] hdpvr 2-1:0.0: device init failed [ 268.404137][ T6467] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 268.419621][ T6467] usb 2-1: USB disconnect, device number 22 [ 269.250392][ T8269] netlink: 68 bytes leftover after parsing attributes in process `syz.0.602'. [ 269.260081][ T8269] netlink: 68 bytes leftover after parsing attributes in process `syz.0.602'. [ 269.689054][ T8281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.717021][ T8273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8273 comm=syz.1.604 [ 269.754519][ T6467] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 269.807324][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 269.831247][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.607'. [ 269.934520][ T6467] usb 1-1: Using ep0 maxpacket: 32 [ 269.953809][ T6467] usb 1-1: config index 0 descriptor too short (expected 32509, got 18) [ 269.982985][ T6467] usb 1-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 270.015422][ T6467] usb 1-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 270.054429][ T6467] usb 1-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 270.101402][ T6467] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 270.123091][ T6467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.237032][ T6467] usb 1-1: string descriptor 0 read error: -71 [ 271.257047][ T6467] usb 1-1: USB disconnect, device number 22 [ 271.524334][ T6087] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 271.928219][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.963011][ T6087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.979308][ T6087] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 271.989538][ T6087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.003325][ T6087] usb 2-1: config 0 descriptor?? [ 272.440765][ T8320] netlink: 220 bytes leftover after parsing attributes in process `syz.3.618'. [ 272.999807][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.226542][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.394326][ T6087] usb 2-1: string descriptor 0 read error: -22 [ 273.692093][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 273.692111][ T30] audit: type=1400 audit(1767702550.352:463): avc: denied { append } for pid=8341 comm="syz.0.627" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.600096][ T6087] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 274.656985][ T6087] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 274.678709][ T6087] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 274.710028][ T6087] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 274.736633][ T6087] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 274.843222][ T8352] netlink: 68 bytes leftover after parsing attributes in process `syz.1.628'. [ 274.852463][ T8352] netlink: 68 bytes leftover after parsing attributes in process `syz.1.628'. [ 275.104899][ T6087] usb 2-1: USB disconnect, device number 23 [ 275.604280][ T6087] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 275.874254][ T6087] usb 2-1: Using ep0 maxpacket: 32 [ 275.894739][ T6087] usb 2-1: config index 0 descriptor too short (expected 32509, got 18) [ 275.934206][ T6087] usb 2-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 275.948203][ T6087] usb 2-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 275.979402][ T6087] usb 2-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 275.992472][ T6087] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 276.004993][ T6087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.098099][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 276.184838][ T5895] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 276.254410][ T5868] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.283317][ T8375] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.476064][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.490987][ T8375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 276.524714][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 276.559359][ T6087] usb 2-1: string descriptor 0 read error: -71 [ 276.580248][ T5895] usb 1-1: config 0 has no interface number 0 [ 276.593099][ T6087] usb 2-1: USB disconnect, device number 24 [ 276.604516][ T5895] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 276.613797][ T5868] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.635169][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.643437][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.655508][ T5895] usb 1-1: config 0 descriptor?? [ 276.660838][ T5868] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 276.673442][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.683292][ T5895] usb 1-1: selecting invalid altsetting 1 [ 276.691994][ T5895] dvb_ttusb_budget: ttusb_init_controller: error [ 276.701758][ T5868] usb 4-1: config 0 descriptor?? [ 276.711862][ T5895] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 276.806290][ T5895] DVB: Unable to find symbol cx22700_attach() [ 276.876644][ T5895] DVB: Unable to find symbol tda10046_attach() [ 276.883170][ T5895] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 277.905432][ T5895] usb 1-1: USB disconnect, device number 23 [ 278.140187][ T5868] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 278.906948][ T5868] usb 4-1: USB disconnect, device number 16 [ 278.928968][ T30] audit: type=1400 audit(1767702555.692:464): avc: denied { lock } for pid=8376 comm="syz.4.638" path="socket:[18285]" dev="sockfs" ino=18285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 278.968077][ T8386] fido_id[8386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 281.529395][ T30] audit: type=1400 audit(1767702558.292:465): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 282.384564][ T8427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.649'. [ 282.393918][ T8427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.649'. [ 282.755572][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.944206][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 284.220826][ T48] usb 3-1: config index 0 descriptor too short (expected 32509, got 18) [ 284.947698][ T48] usb 3-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 285.056099][ T48] usb 3-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 285.176775][ T48] usb 3-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 285.202533][ T48] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 285.219154][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.302921][ T48] usb 3-1: can't set config #78, error -71 [ 285.320302][ T48] usb 3-1: USB disconnect, device number 19 [ 285.326605][ T935] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 285.506114][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 285.515858][ T935] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.544219][ T935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.561093][ T935] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 285.572547][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.590863][ T935] usb 2-1: config 0 descriptor?? [ 285.674473][ T48] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 285.844346][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 285.858490][ T48] usb 3-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 16 [ 285.899406][ T48] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.961445][ T48] usb 3-1: config 1 interface 0 has no altsetting 0 [ 285.988483][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.007908][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.033407][ T48] usb 3-1: Product: syz [ 286.043540][ T48] usb 3-1: Manufacturer: 䚃瀿ᖩå–馃瘕후査ᔃῧЀ뚭᜴郙蜎僾¶êµå¬’鰴ℙ癡꼴鷶嘉â…îƒä¡˜î–¼àµ©î¸’è•ê‡‘ë…录筡囮뜨㔟訾롧᠚ṃᬟ⾿俩圃㠓㙮峓æ–⟛컋ã¿äƒ¶æ“˜äŸ‘ç·‘í©ä·œï¨—á†á³”娕੯麌æ⫫ᒂ爀턠෈åªëƒ°î‡à­šè””äŽç²¥á¯à¢å¯†ë±¿Ñ—逹 [ 286.084902][ T935] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 286.109405][ T48] usb 3-1: SerialNumber: syz [ 286.193661][ T8481] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 286.399045][ T89] usb 2-1: USB disconnect, device number 25 [ 286.764742][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 286.783294][ T8505] fido_id[8505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 286.933667][ T30] audit: type=1400 audit(1767702563.692:466): avc: denied { write } for pid=8480 comm="syz.2.656" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.984247][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 287.001994][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.128762][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 287.137766][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 287.148159][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 287.157034][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 287.371198][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.410191][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.567981][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.003945][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.013297][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.086409][ T48] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 288.103857][ T30] audit: type=1400 audit(1767702564.862:467): avc: denied { setopt } for pid=8528 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.105734][ T48] usb 3-1: USB disconnect, device number 20 [ 288.219845][ T8531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.664'. [ 288.234767][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 288.240288][ T9] usbtmc 1-1:16.0: can't read capabilities [ 288.305233][ T89] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 289.043465][ T8538] FAULT_INJECTION: forcing a failure. [ 289.043465][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.074777][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.3.666 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.074797][ T8538] Tainted: [L]=SOFTLOCKUP [ 289.074801][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.074808][ T8538] Call Trace: [ 289.074812][ T8538] [ 289.074817][ T8538] dump_stack_lvl+0x16c/0x1f0 [ 289.074835][ T8538] should_fail_ex+0x512/0x640 [ 289.074855][ T8538] _copy_from_user+0x2e/0xd0 [ 289.074876][ T8538] copy_mount_options+0x76/0x190 [ 289.074891][ T8538] __x64_sys_mount+0x1ab/0x310 [ 289.074902][ T8538] ? __pfx___x64_sys_mount+0x10/0x10 [ 289.074913][ T8538] ? fput+0x70/0xf0 [ 289.074926][ T8538] do_syscall_64+0xcd/0xf80 [ 289.074942][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.074959][ T8538] RIP: 0033:0x7f67f418f749 [ 289.074969][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.074980][ T8538] RSP: 002b:00007f67f510c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.074992][ T8538] RAX: ffffffffffffffda RBX: 00007f67f43e5fa0 RCX: 00007f67f418f749 [ 289.074999][ T8538] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 289.075005][ T8538] RBP: 00007f67f510c090 R08: 00002000000003c0 R09: 0000000000000000 [ 289.075012][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.075018][ T8538] R13: 00007f67f43e6038 R14: 00007f67f43e5fa0 R15: 00007ffd93ecf298 [ 289.075032][ T8538] [ 289.076206][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 289.246066][ T89] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 289.255807][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 289.265711][ T89] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 289.275746][ T89] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 289.284873][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.295153][ T89] usb 2-1: config 0 descriptor?? [ 289.298731][ T48] usb 1-1: USB disconnect, device number 24 [ 289.518570][ T89] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 289.544287][ T89] hdpvr 2-1:0.0: device init failed [ 289.549589][ T89] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 289.596074][ T89] usb 2-1: USB disconnect, device number 26 [ 290.445929][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 290.556961][ T48] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 291.174238][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 291.190552][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 291.221857][ T48] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 291.325222][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.334255][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 291.343460][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.344280][ T9] usb 3-1: string descriptor 0 read error: -22 [ 291.366820][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 291.379668][ T48] usb 1-1: Product: syz [ 291.388325][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.414225][ T48] usb 1-1: Manufacturer: syz [ 291.416458][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 291.424920][ T48] usb 1-1: SerialNumber: syz [ 291.445450][ T8561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.674'. [ 291.450212][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.467805][ T48] usb 1-1: config 0 descriptor?? [ 291.472888][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 291.480754][ T9] usb 3-1: media controller created [ 291.496262][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.505648][ T48] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 291.610843][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 291.656592][ T8564] IPVS: Error connecting to the multicast addr [ 291.724594][ T30] audit: type=1400 audit(1767702568.482:468): avc: denied { watch } for pid=8559 comm="syz.3.674" path="/131/file1" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.860442][ T9] usb 3-1: USB disconnect, device number 21 [ 291.870167][ T30] audit: type=1400 audit(1767702568.482:469): avc: denied { watch_sb watch_reads } for pid=8559 comm="syz.3.674" path="/131/file1" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.982309][ T48] gspca_sonixj: reg_r err -110 [ 293.473918][ T48] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 293.701109][ T48] usb 1-1: USB disconnect, device number 25 [ 293.770285][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 294.498971][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 294.630757][ T8592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8592 comm=syz.0.681 [ 294.745959][ T9] usb 2-1: config 0 has no interfaces? [ 294.751911][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 295.466074][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.548361][ T9] usb 2-1: config 0 descriptor?? [ 296.507884][ T30] audit: type=1400 audit(1767702573.272:470): avc: denied { setopt } for pid=8605 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.656655][ T30] audit: type=1400 audit(1767702573.292:471): avc: denied { ioctl } for pid=8605 comm="syz.3.685" path="socket:[19611]" dev="sockfs" ino=19611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.685271][ T30] audit: type=1326 audit(1767702573.752:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.3.685" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67f418f749 code=0x0 [ 298.059038][ T8617] overlayfs: conflicting options: userxattr,metacopy=on [ 298.100722][ T5935] usb 2-1: USB disconnect, device number 27 [ 298.128774][ T8617] batadv_slave_1: entered promiscuous mode [ 298.184326][ T48] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 298.301236][ T8614] batadv_slave_1: left promiscuous mode [ 298.345029][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 298.359474][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.389555][ T48] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 298.403667][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.413108][ T48] usb 3-1: Product: syz [ 298.417811][ T48] usb 3-1: Manufacturer: syz [ 298.422590][ T48] usb 3-1: SerialNumber: syz [ 298.452759][ T48] usb 3-1: config 0 descriptor?? [ 298.480819][ T48] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 298.507239][ T48] usb 3-1: selecting invalid altsetting 1 [ 299.261225][ T8636] process 'syz.1.689' launched './file0' with NULL argv: empty string added [ 299.311762][ T30] audit: type=1400 audit(1767702576.072:473): avc: denied { execute_no_trans } for pid=8628 comm="syz.1.689" path="/125/file0" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 299.392776][ T8640] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 299.503730][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 299.603272][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 300.045587][ T30] audit: type=1400 audit(1767702576.812:474): avc: denied { module_load } for pid=8645 comm="syz.1.693" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 300.108905][ T8640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.246997][ T8643] bond1: (slave dummy0): making interface the new active one [ 300.272261][ T8643] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 300.388831][ T4217] tipc: Subscription rejected, illegal request [ 301.010307][ T8646] bond1 (unregistering): (slave dummy0): Releasing active interface [ 301.019652][ T8646] bond1 (unregistering): Released all slaves [ 301.638565][ T5931] usb 3-1: USB disconnect, device number 22 [ 301.773497][ T8669] syzkaller0: entered promiscuous mode [ 301.915836][ T8669] syzkaller0: entered allmulticast mode [ 301.917368][ T8675] 9p: Bad value for 'rfdno' [ 302.633971][ T5818] Bluetooth: hci1: SCO packet for unknown connection handle 2048 [ 302.638138][ T30] audit: type=1400 audit(1767702579.402:475): avc: denied { mount } for pid=8682 comm="syz.4.704" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 302.683722][ T30] audit: type=1400 audit(1767702579.442:476): avc: denied { watch watch_reads } for pid=8682 comm="syz.4.704" path="/184/file0" dev="tmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 302.734279][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 303.184348][ T89] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 303.737754][ T89] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.781294][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.855512][ T89] usb 3-1: config 0 descriptor?? [ 303.902578][ T89] cp210x 3-1:0.0: cp210x converter detected [ 304.147087][ T8710] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 304.383081][ T8710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.038085][ T8683] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 305.088554][ T8716] bond1: (slave veth3): Enslaving as an active interface with a down link [ 305.096432][ T8724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=8724 comm=syz.2.703 [ 305.137824][ T8718] bond1: (slave dummy0): making interface the new active one [ 305.161104][ T8718] dummy0: entered promiscuous mode [ 305.173374][ T8718] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 305.382939][ T8722] bond1 (unregistering): (slave veth3): Releasing active interface [ 305.398676][ T8722] bond1 (unregistering): (slave dummy0): Releasing active interface [ 305.410400][ T8722] bond1 (unregistering): Released all slaves [ 305.492017][ T8724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.500705][ T8724] bond1: (slave bond2): making interface the new active one [ 305.509672][ T8724] bond1: (slave bond2): Enslaving as an active interface with an up link [ 305.538851][ T89] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 305.559056][ T89] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 305.619551][ T89] usb 3-1: cp210x converter now attached to ttyUSB0 [ 305.670012][ T89] usb 3-1: USB disconnect, device number 23 [ 305.722482][ T8750] veth0: entered promiscuous mode [ 306.051027][ T48] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 306.173565][ T5999] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 306.355794][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.368269][ T30] audit: type=1400 audit(1767702583.062:477): avc: denied { associate } for pid=8753 comm="syz.1.714" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 306.642835][ T5999] usb 1-1: Using ep0 maxpacket: 8 [ 306.657469][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.726777][ T5999] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.759862][ T48] usb 4-1: Product: syz [ 306.789375][ T48] usb 4-1: Manufacturer: syz [ 306.811412][ T5999] usb 1-1: config 179 has no interface number 0 [ 306.828451][ T89] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.831341][ T48] usb 4-1: SerialNumber: syz [ 306.860658][ T5999] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 307.221845][ T5999] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 307.309489][ T5999] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 307.378287][ T5999] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 307.426261][ T5999] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 307.548762][ T5999] usb 1-1: config 179 interface 65 has no altsetting 0 [ 307.617643][ T5999] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 307.677433][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.687113][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.802719][ T8752] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 307.941316][ T5999] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 308.309788][ T30] audit: type=1400 audit(1767702584.982:478): avc: denied { read } for pid=5171 comm="acpid" name="js0" dev="devtmpfs" ino=3057 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.369733][ T30] audit: type=1400 audit(1767702585.002:479): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3057 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.410275][ T89] cp210x 3-1:0.0: device disconnected [ 308.445362][ T5171] input input11: unable to receive magic message: -110 [ 308.473467][ T30] audit: type=1400 audit(1767702585.232:480): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3057 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.421756][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 309.505320][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 309.543373][ T5171] input input11: unable to receive magic message: -32 [ 309.627589][ T5171] input input11: unable to receive magic message: -32 [ 309.655628][ T5171] input input11: unable to receive magic message: -32 [ 309.664022][ T5945] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 309.705789][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 309.783422][ T5171] input input11: unable to receive magic message: -32 [ 309.813431][ T5171] input input11: unable to receive magic message: -32 [ 309.849334][ T5171] input input11: unable to receive magic message: -32 [ 309.971157][ T89] usb 4-1: USB disconnect, device number 17 [ 310.064559][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 310.235911][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.246447][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 310.256219][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.270953][ T9] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 310.280090][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.288180][ T9] usb 3-1: Product: syz [ 310.292371][ T9] usb 3-1: Manufacturer: syz [ 310.297703][ T9] usb 3-1: SerialNumber: syz [ 310.304069][ T9] usb 3-1: config 0 descriptor?? [ 310.315075][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 310.324316][ T9] usb 3-1: Detected SIO [ 310.328572][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 310.337344][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.444324][ T5999] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 310.568483][ T7347] usb 3-1: USB disconnect, device number 24 [ 310.596238][ T5999] usb 2-1: Using ep0 maxpacket: 16 [ 310.707557][ T7347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.717896][ T7347] ftdi_sio 3-1:0.0: device disconnected [ 310.739613][ T5999] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.752092][ T5999] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.761972][ T5999] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 310.762004][ T9] usb 1-1: USB disconnect, device number 26 [ 310.762028][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.651954][ T5945] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 311.669008][ T5945] ath9k_htc: Failed to initialize the device [ 311.797485][ T89] usb 4-1: ath9k_htc: USB layer deinitialized [ 311.814124][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.837648][ T5999] usb 2-1: config 0 descriptor?? [ 311.885762][ T8789] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 311.914385][ T8789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.970928][ T8789] bond4: (slave veth3): Enslaving as an active interface with a down link [ 312.020296][ T8791] bond4: (slave dummy0): making interface the new active one [ 312.045880][ T8791] dummy0: entered promiscuous mode [ 312.063201][ T8791] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 312.369740][ T8789] bond4 (unregistering): (slave veth3): Releasing active interface [ 312.392238][ T8789] bond4 (unregistering): (slave dummy0): Releasing active interface [ 312.418322][ T8789] bond4 (unregistering): Released all slaves [ 313.826370][ T8807] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.724'. [ 313.939004][ T5999] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 314.391248][ T5999] usb 2-1: USB disconnect, device number 28 [ 314.447209][ T8813] fido_id[8813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 314.706899][ T30] audit: type=1400 audit(1767702591.472:481): avc: denied { ioctl } for pid=8818 comm="syz.1.731" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.775339][ T8823] sch_tbf: burst 480 is lower than device lo mtu (11337746) ! [ 315.070901][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 315.798904][ T8834] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.089771][ T8835] Invalid logical block size (260) [ 316.555583][ T8840] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 316.618577][ T8843] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 316.720925][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.734269][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.574777][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 317.626272][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.647471][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.656768][ T9] usb 3-1: config 1 has no interface number 1 [ 317.665756][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.685385][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.696288][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.704332][ T9] usb 3-1: Product: syz [ 318.058968][ T30] audit: type=1400 audit(1767702594.482:482): avc: granted { setsecparam } for pid=8851 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 318.082915][ T9] usb 3-1: Manufacturer: syz [ 318.087735][ T9] usb 3-1: SerialNumber: syz [ 318.108434][ T8858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 318.115144][ T8858] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.126035][ T8858] vhci_hcd vhci_hcd.0: Device attached [ 318.269080][ T30] audit: type=1400 audit(1767702595.032:483): avc: denied { getopt } for pid=8854 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 318.304745][ T89] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 318.419275][ T9] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 318.436171][ T89] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 318.483111][ T9] usb 3-1: USB disconnect, device number 25 [ 318.538462][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.858176][ T8875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.747'. [ 318.884323][ T5945] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 318.926543][ T8859] vhci_hcd: connection reset by peer [ 318.937448][ T12] vhci_hcd vhci_hcd.0: stop threads [ 318.943445][ T12] vhci_hcd vhci_hcd.0: release socket [ 318.951365][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 319.007949][ T8878] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.748'. [ 319.034211][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 319.190544][ T5945] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 319.198941][ T5945] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 319.207996][ T5945] usb 4-1: config 0 has no interface number 0 [ 319.214106][ T5945] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.227303][ T5945] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 319.238613][ T5945] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.250709][ T5945] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 319.259820][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 319.267880][ T5945] usb 4-1: Product: syz [ 319.273542][ T5945] usb 4-1: config 0 descriptor?? [ 319.284452][ T8868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.786281][ T5945] usb 4-1: USB disconnect, device number 18 [ 319.914924][ T8894] overlayfs: failed to clone upperpath [ 319.957852][ T8894] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 320.009028][ T8897] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 320.136667][ T8900] netlink: 'syz.4.754': attribute type 5 has an invalid length. [ 320.162246][ T8890] Invalid logical block size (260) [ 322.434333][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 322.711412][ T9] usb 1-1: config 0 has no interfaces? [ 322.721031][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 322.744218][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.783185][ T9] usb 1-1: config 0 descriptor?? [ 323.172395][ T5945] usb 1-1: USB disconnect, device number 27 [ 323.679182][ T89] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 323.808094][ T8941] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 323.849060][ T8942] overlay: Unknown parameter 'yz0' [ 323.858025][ T8941] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 325.564678][ T8960] lo speed is unknown, defaulting to 1000 [ 326.762009][ T30] audit: type=1400 audit(1767702602.202:484): avc: denied { bind } for pid=8955 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 326.834203][ T30] audit: type=1400 audit(1767702602.202:485): avc: denied { write } for pid=8955 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.493726][ T8978] input: syz0 as /devices/virtual/input/input13 [ 327.514216][ T7347] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 327.522345][ T935] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 327.861880][ T935] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 327.957956][ T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 327.984089][ T935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 328.008042][ T935] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 328.026724][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.180110][ T935] usb 4-1: config 0 descriptor?? [ 328.188900][ T8968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 328.200391][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 328.212398][ T7347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 328.242206][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 328.368207][ T8987] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 328.375907][ T8987] netlink: 17 bytes leftover after parsing attributes in process `syz.4.774'. [ 328.456697][ T7347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 328.466985][ T7347] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 328.476590][ T7347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.625798][ T7347] usb 3-1: config 0 descriptor?? [ 328.780033][ T935] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 329.191659][ T935] petalynx 0003:18B1:0037.000A: unknown main item tag 0x0 [ 329.274227][ T935] petalynx 0003:18B1:0037.000A: item fetching failed at offset 2/5 [ 329.282814][ T935] petalynx 0003:18B1:0037.000A: parse failed [ 330.788093][ T935] petalynx 0003:18B1:0037.000A: probe with driver petalynx failed with error -22 [ 330.798680][ T7347] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 331.504641][ T7347] hdpvr 3-1:0.0: device init failed [ 331.509929][ T7347] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 331.529943][ T935] usb 4-1: USB disconnect, device number 19 [ 331.581549][ T7347] usb 3-1: USB disconnect, device number 26 [ 331.855553][ T30] audit: type=1400 audit(1767702608.588:486): avc: denied { mounton } for pid=9014 comm="syz.3.782" path="/153/file0" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 332.349669][ T30] audit: type=1400 audit(1767702609.108:487): avc: denied { shutdown } for pid=9002 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 332.538758][ T30] audit: type=1400 audit(1767702609.138:488): avc: denied { read } for pid=9002 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 332.785233][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 332.825256][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 332.842406][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 333.463585][ T9045] netlink: 212284 bytes leftover after parsing attributes in process `syz.4.786'. [ 333.488834][ T9045] netlink: Unknown conntrack attr (0) [ 334.164258][ T5881] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 334.404236][ T9074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.790'. [ 334.413231][ T9074] netlink: 68 bytes leftover after parsing attributes in process `syz.2.790'. [ 334.540320][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 334.605077][ T5881] usb 2-1: config 0 has no interfaces? [ 334.610599][ T5881] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 334.651048][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.693463][ T5881] usb 2-1: config 0 descriptor?? [ 334.725667][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.725696][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.725720][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 334.725742][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 334.725777][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 334.725800][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.727907][ T9] usb 4-1: config 0 descriptor?? [ 334.774246][ T935] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 334.907729][ T5935] usb 2-1: USB disconnect, device number 29 [ 334.938303][ T9] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 334.965410][ T9] hdpvr 4-1:0.0: device init failed [ 334.971115][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 334.984268][ T935] usb 3-1: Using ep0 maxpacket: 32 [ 335.006203][ T935] usb 3-1: config index 0 descriptor too short (expected 32509, got 18) [ 335.022739][ T5945] usb 4-1: USB disconnect, device number 20 [ 335.036755][ T935] usb 3-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 335.051601][ T935] usb 3-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 335.072155][ T935] usb 3-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 335.091135][ T935] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 335.100864][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.266304][ T9089] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.794'. [ 335.899241][ T935] usb 3-1: string descriptor 0 read error: -71 [ 335.929996][ T935] usb 3-1: USB disconnect, device number 27 [ 335.940958][ T30] audit: type=1400 audit(1767702612.698:489): avc: denied { set_context_mgr } for pid=9098 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.501814][ T9101] cgroup: release_agent respecified [ 336.629910][ T30] audit: type=1400 audit(1767702613.388:490): avc: denied { map } for pid=9098 comm="syz.1.797" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.810357][ T30] audit: type=1400 audit(1767702613.548:491): avc: denied { call } for pid=9098 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 336.863304][ T30] audit: type=1400 audit(1767702613.548:492): avc: denied { transfer } for pid=9098 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 338.794434][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 339.029312][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 339.335568][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 339.434522][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.442804][ T9] usb 3-1: Product: syz [ 339.448373][ T9] usb 3-1: Manufacturer: syz [ 339.452981][ T9] usb 3-1: SerialNumber: syz [ 339.460556][ T9] usb 3-1: config 0 descriptor?? [ 339.670081][ T5881] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 339.686000][ T30] audit: type=1400 audit(1767702616.448:493): avc: denied { checkpoint_restore } for pid=9120 comm="syz.2.806" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 339.786756][ T9148] dlm: no local IP address has been set [ 339.806413][ T9148] dlm: cannot start dlm midcomms -107 [ 339.848713][ T9156] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 339.872046][ T9156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.971940][ T5881] usb 4-1: config 0 has no interfaces? [ 339.987655][ T5881] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 340.008045][ T9] usb 3-1: USB disconnect, device number 28 [ 340.029863][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.066390][ T9158] bond1: (slave veth3): Enslaving as an active interface with a down link [ 340.070626][ T5881] usb 4-1: config 0 descriptor?? [ 340.389323][ T5935] usb 4-1: USB disconnect, device number 21 [ 340.468624][ T9158] bond1 (unregistering): (slave veth3): Releasing active interface [ 340.538223][ T9158] bond1 (unregistering): Released all slaves [ 340.597278][ T9166] overlay: ./file0 is not a directory [ 340.904263][ T9] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 341.194188][ T30] audit: type=1400 audit(1767702617.858:494): avc: denied { read write } for pid=9169 comm="syz.1.819" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 341.421436][ T9] usb 3-1: device descriptor read/64, error -71 [ 341.476713][ T30] audit: type=1400 audit(1767702617.858:495): avc: denied { open } for pid=9169 comm="syz.1.819" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 341.704296][ T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 342.002702][ T9] usb 3-1: device descriptor read/64, error -71 [ 342.047167][ T30] audit: type=1400 audit(1767702618.778:496): avc: denied { write } for pid=9176 comm="syz.3.821" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 342.146145][ T30] audit: type=1400 audit(1767702618.808:497): avc: denied { connect } for pid=9174 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 342.176767][ T9] usb usb3-port1: attempt power cycle [ 342.366319][ T9190] netlink: 'syz.1.824': attribute type 4 has an invalid length. [ 342.385557][ T9190] netlink: 'syz.1.824': attribute type 4 has an invalid length. [ 342.500804][ T9192] tipc: Started in network mode [ 342.519554][ T9192] tipc: Node identity 2aacafadfbf5, cluster identity 4711 [ 342.531514][ T9192] tipc: Enabled bearer , priority 0 [ 342.538264][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 342.547586][ T9192] syzkaller0: entered promiscuous mode [ 342.553151][ T9192] syzkaller0: entered allmulticast mode [ 342.642701][ T9] usb 3-1: device descriptor read/8, error -71 [ 342.665757][ T9194] netlink: 116 bytes leftover after parsing attributes in process `syz.1.826'. [ 342.693117][ T9192] netlink: 44 bytes leftover after parsing attributes in process `syz.0.825'. [ 342.703414][ T9192] syzkaller0: mtu greater than device maximum [ 342.711643][ T9191] tipc: Resetting bearer [ 342.767112][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 342.798721][ T9191] tipc: Disabling bearer [ 342.974258][ T9] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 343.017855][ T9] usb 3-1: device descriptor read/8, error -71 [ 343.658666][ T9] usb usb3-port1: unable to enumerate USB device [ 344.057405][ T9211] block nbd0: server does not support multiple connections per device. [ 344.161615][ T9222] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 344.169368][ T9222] netlink: 17 bytes leftover after parsing attributes in process `syz.1.833'. [ 345.031650][ T9211] block nbd0: shutting down sockets [ 345.527416][ T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 345.742700][ T48] usb 4-1: config 0 has no interfaces? [ 345.768287][ T48] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 345.818635][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.827240][ T5935] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 345.918770][ T48] usb 4-1: config 0 descriptor?? [ 346.097389][ T5881] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 346.104196][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 346.123930][ T5935] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 346.149295][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.162398][ T5935] usb 1-1: Product: syz [ 346.166854][ T5935] usb 1-1: Manufacturer: syz [ 346.171872][ T5935] usb 1-1: SerialNumber: syz [ 346.199389][ T5935] usb 1-1: config 0 descriptor?? [ 346.225833][ T9236] openvswitch: netlink: IP tunnel dst address not specified [ 346.248375][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 346.387774][ T48] usb 4-1: USB disconnect, device number 22 [ 346.396920][ T5881] usb 2-1: config 0 has no interfaces? [ 346.406866][ T5881] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 346.417936][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.818285][ T5935] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 346.830483][ T5881] usb 2-1: config 0 descriptor?? [ 346.861704][ T5935] 5e 57 f9 3a eb 9a 47 80 [ 346.877762][ T5935] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 347.050536][ T5881] usb 1-1: USB disconnect, device number 28 [ 347.234585][ T5935] usb 2-1: USB disconnect, device number 30 [ 349.315762][ T9274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.849'. [ 350.244791][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 350.562767][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 350.824407][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 351.354759][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 351.387428][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.403737][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.415322][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 351.425601][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 351.435124][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.457928][ T9] usb 3-1: config 0 descriptor?? [ 351.463726][ T9286] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.558872][ T9295] bond1: option xmit_hash_policy: invalid value (6) [ 351.590389][ T9295] bond1 (unregistering): Released all slaves [ 351.601420][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 351.634219][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 352.474229][ T1084] wlan0: Trigger new scan to find an IBSS to join [ 352.747551][ T9316] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 352.869462][ T5931] usb 3-1: USB disconnect, device number 33 [ 352.877161][ T5818] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 354.858474][ T30] audit: type=1400 audit(1767702631.618:498): avc: denied { append } for pid=9327 comm="syz.3.865" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.084674][ T30] audit: type=1400 audit(1767702631.848:499): avc: denied { lock } for pid=9338 comm="syz.0.868" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.174658][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 355.185028][ T5935] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 355.404255][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 355.416852][ T5935] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 355.450185][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.487174][ T5935] usb 4-1: config 0 descriptor?? [ 355.505640][ T5935] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 355.772898][ T9353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9353 comm=syz.0.871 [ 356.244212][ T5931] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 356.376055][ T9337] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.865'. [ 356.714384][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 356.891280][ T5935] gspca_vc032x: reg_w err -110 [ 356.896152][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.958063][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.964035][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.971887][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.977445][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.982859][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.990241][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.992272][ T5931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 356.995717][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.009978][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.015809][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.021094][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.039717][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.049181][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.068149][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.074553][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.088261][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.330130][ T5931] usb 1-1: Product: syz [ 357.341902][ T5931] usb 1-1: Manufacturer: syz [ 357.344328][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.366822][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.372248][ T5931] usb 1-1: SerialNumber: syz [ 357.448248][ T9388] Invalid logical block size (260) [ 357.863394][ T5935] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.868820][ T5935] gspca_vc032x: Unknown sensor... [ 357.873974][ T5935] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 358.195339][ T6715] wlan0: Trigger new scan to find an IBSS to join [ 358.209448][ T5931] usb 1-1: config 0 descriptor?? [ 358.765514][ T5931] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 358.825763][ T5931] 5e 57 f9 3a eb 9a 47 80 [ 358.844399][ T5931] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 359.900579][ T5935] usb 1-1: USB disconnect, device number 29 [ 361.254380][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.577146][ T30] audit: type=1400 audit(1767702638.338:500): avc: denied { bind } for pid=9418 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.615253][ T9421] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 361.672453][ T5931] usb 4-1: USB disconnect, device number 23 [ 361.718338][ T9421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.816646][ T9424] bond1: (slave veth5): Enslaving as an active interface with a down link [ 361.868074][ T9427] bond1: (slave dummy0): making interface the new active one [ 361.896377][ T9427] dummy0: entered promiscuous mode [ 361.924484][ T9427] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 362.107513][ T9442] netlink: 'syz.3.889': attribute type 8 has an invalid length. [ 362.141486][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 362.491898][ T30] audit: type=1400 audit(1767702639.248:501): avc: denied { mount } for pid=9443 comm="syz.1.891" name="/" dev="autofs" ino=22631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 362.668891][ T9448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.824778][ T9448] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 362.835581][ T9448] overlayfs: failed to look up (tracing) for ino (-66) [ 362.943003][ T30] audit: type=1400 audit(1767702639.338:502): avc: denied { mounton } for pid=9443 comm="syz.1.891" path="/178/file1/file0" dev="autofs" ino=22632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 363.185454][ T30] audit: type=1400 audit(1767702639.338:503): avc: denied { mount } for pid=9443 comm="syz.1.891" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 363.207647][ T30] audit: type=1400 audit(1767702639.428:504): avc: denied { mounton } for pid=9443 comm="syz.1.891" path="/178/file1/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 363.593368][ T9421] bond1 (unregistering): (slave veth5): Releasing active interface [ 363.609266][ T30] audit: type=1400 audit(1767702640.368:505): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 363.660807][ T9421] bond1 (unregistering): (slave dummy0): Releasing active interface [ 363.679234][ T30] audit: type=1400 audit(1767702640.408:506): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 363.706181][ T9421] bond1 (unregistering): Released all slaves [ 363.745682][ T9442] bond0: entered promiscuous mode [ 363.771540][ T9442] bond_slave_0: entered promiscuous mode [ 363.783850][ T9442] bond_slave_1: entered promiscuous mode [ 363.813398][ T9442] gretap0: entered promiscuous mode [ 363.841317][ T9442] ip6gretap0: entered promiscuous mode [ 363.988571][ T9450] mmap: syz.2.883 (9450): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 364.003761][ T9442] hsr1: entered promiscuous mode [ 365.351124][ T30] audit: type=1400 audit(1767702642.108:507): avc: denied { write } for pid=9456 comm="syz.0.894" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 365.386425][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.894'. [ 365.412957][ T30] audit: type=1400 audit(1767702642.138:508): avc: denied { open } for pid=9456 comm="syz.0.894" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 365.699981][ T9469] FAULT_INJECTION: forcing a failure. [ 365.699981][ T9469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.764569][ T9469] CPU: 0 UID: 0 PID: 9469 Comm: syz.3.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.764601][ T9469] Tainted: [L]=SOFTLOCKUP [ 365.764606][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.764616][ T9469] Call Trace: [ 365.764622][ T9469] [ 365.764628][ T9469] dump_stack_lvl+0x16c/0x1f0 [ 365.764655][ T9469] should_fail_ex+0x512/0x640 [ 365.764688][ T9469] _copy_to_user+0x32/0xd0 [ 365.764716][ T9469] simple_read_from_buffer+0xcb/0x170 [ 365.764743][ T9469] proc_fail_nth_read+0x197/0x240 [ 365.764762][ T9469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.764782][ T9469] ? rw_verify_area+0xcf/0x6c0 [ 365.764809][ T9469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.764827][ T9469] vfs_read+0x1e4/0xcf0 [ 365.764851][ T9469] ? __pfx___mutex_lock+0x10/0x10 [ 365.764878][ T9469] ? __pfx_vfs_read+0x10/0x10 [ 365.764907][ T9469] ? __fget_files+0x20e/0x3c0 [ 365.764939][ T9469] ksys_read+0x12a/0x250 [ 365.764960][ T9469] ? __pfx_ksys_read+0x10/0x10 [ 365.764983][ T9469] ? fput+0x70/0xf0 [ 365.765003][ T9469] do_syscall_64+0xcd/0xf80 [ 365.765028][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.765046][ T9469] RIP: 0033:0x7f67f418e15c [ 365.765061][ T9469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 365.765078][ T9469] RSP: 002b:00007f67f510c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.765095][ T9469] RAX: ffffffffffffffda RBX: 00007f67f43e5fa0 RCX: 00007f67f418e15c [ 365.765106][ T9469] RDX: 000000000000000f RSI: 00007f67f510c0a0 RDI: 0000000000000004 [ 365.765117][ T9469] RBP: 00007f67f510c090 R08: 0000000000000000 R09: 0000000000000000 [ 365.765127][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.765137][ T9469] R13: 00007f67f43e6038 R14: 00007f67f43e5fa0 R15: 00007ffd93ecf298 [ 365.765162][ T9469] [ 366.251951][ T30] audit: type=1400 audit(1767702643.008:509): avc: denied { create } for pid=9471 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 366.579211][ T6186] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 366.591451][ T9482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.899'. [ 366.709323][ T9486] Invalid logical block size (260) [ 367.624225][ T6186] usb 1-1: Using ep0 maxpacket: 8 [ 367.630697][ T6186] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 367.765357][ T6186] usb 1-1: config 0 has no interface number 0 [ 367.814245][ T6186] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 367.854216][ T6186] usb 1-1: config 0 interface 200 has no altsetting 0 [ 368.333519][ T6186] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 368.386814][ T6186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.414311][ T6186] usb 1-1: Product: syz [ 368.431626][ T6186] usb 1-1: Manufacturer: syz [ 368.439919][ T6186] usb 1-1: SerialNumber: syz [ 368.458762][ T6186] usb 1-1: config 0 descriptor?? [ 368.681692][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 368.681716][ T30] audit: type=1400 audit(1767702645.438:513): avc: denied { write } for pid=9471 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.755258][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.788562][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.860209][ T6186] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input14 [ 368.916061][ T6186] usb 1-1: USB disconnect, device number 30 [ 369.381474][ T30] audit: type=1400 audit(1767702646.138:514): avc: denied { map } for pid=9503 comm="syz.0.906" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.405127][ T30] audit: type=1400 audit(1767702646.138:515): avc: denied { execute } for pid=9503 comm="syz.0.906" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.970490][ T30] audit: type=1400 audit(1767702648.728:516): avc: denied { bind } for pid=9553 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.990873][ T9556] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 372.009909][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 372.024347][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 372.334359][ T30] audit: type=1400 audit(1767702649.038:517): avc: denied { ioctl } for pid=9558 comm="syz.3.923" path="socket:[22882]" dev="sockfs" ino=22882 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.679162][ T9571] FAULT_INJECTION: forcing a failure. [ 372.679162][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 372.691820][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.3.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.691847][ T9571] Tainted: [L]=SOFTLOCKUP [ 372.691853][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.691863][ T9571] Call Trace: [ 372.691869][ T9571] [ 372.691874][ T9571] dump_stack_lvl+0x16c/0x1f0 [ 372.691892][ T9571] should_fail_ex+0x512/0x640 [ 372.691910][ T9571] ? fs_reclaim_acquire+0xae/0x150 [ 372.691927][ T9571] should_failslab+0xc2/0x120 [ 372.691943][ T9571] __kmalloc_noprof+0xeb/0x910 [ 372.691960][ T9571] ? trace_kmalloc+0x2b/0xb0 [ 372.691973][ T9571] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 372.691992][ T9571] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 372.692007][ T9571] tomoyo_realpath_from_path+0xc2/0x6e0 [ 372.692024][ T9571] ? tomoyo_fill_path_info+0x233/0x420 [ 372.692037][ T9571] tomoyo_mount_acl+0x1ae/0x850 [ 372.692052][ T9571] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 372.692066][ T9571] ? kernel_text_address+0x8d/0x100 [ 372.692084][ T9571] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 372.692097][ T9571] ? arch_stack_walk+0xa6/0x100 [ 372.692126][ T9571] ? tomoyo_domain+0xba/0x150 [ 372.692142][ T9571] ? tomoyo_profile+0x47/0x60 [ 372.692160][ T9571] tomoyo_mount_permission+0x16d/0x420 [ 372.692174][ T9571] ? tomoyo_mount_permission+0x14f/0x420 [ 372.692188][ T9571] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 372.692211][ T9571] security_sb_mount+0x9b/0x260 [ 372.692225][ T9571] path_mount+0x158/0x23a0 [ 372.692236][ T9571] ? rcu_is_watching+0x12/0xc0 [ 372.692248][ T9571] ? __pfx_path_mount+0x10/0x10 [ 372.692258][ T9571] ? kmem_cache_free+0x2d8/0x770 [ 372.692270][ T9571] ? putname+0xf5/0x1a0 [ 372.692289][ T9571] ? putname+0xf5/0x1a0 [ 372.692304][ T9571] ? putname+0xf5/0x1a0 [ 372.692321][ T9571] ? __x64_sys_mount+0x293/0x310 [ 372.692331][ T9571] __x64_sys_mount+0x293/0x310 [ 372.692342][ T9571] ? __pfx___x64_sys_mount+0x10/0x10 [ 372.692356][ T9571] do_syscall_64+0xcd/0xf80 [ 372.692372][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.692384][ T9571] RIP: 0033:0x7f67f418f749 [ 372.692393][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.692404][ T9571] RSP: 002b:00007f67f50eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.692415][ T9571] RAX: ffffffffffffffda RBX: 00007f67f43e6090 RCX: 00007f67f418f749 [ 372.692422][ T9571] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 372.692429][ T9571] RBP: 00007f67f50eb090 R08: 00002000000000c0 R09: 0000000000000000 [ 372.692435][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.692442][ T9571] R13: 00007f67f43e6128 R14: 00007f67f43e6090 R15: 00007ffd93ecf298 [ 372.692456][ T9571] [ 372.692460][ T9571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.517796][ T30] audit: type=1800 audit(1767702650.278:518): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.927" name="nullb0" dev="tmpfs" ino=156 res=0 errno=0 [ 373.792514][ T9590] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 373.865482][ T9590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.961393][ T9594] bond4: (slave veth5): Enslaving as an active interface with a down link [ 374.147491][ T9590] bond4: (slave dummy0): making interface the new active one [ 374.152308][ T5818] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 374.202552][ T9590] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 374.232555][ T9601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.932'. [ 374.504829][ T30] audit: type=1400 audit(1767702651.268:519): avc: denied { setopt } for pid=9603 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 374.555263][ T30] audit: type=1400 audit(1767702651.318:520): avc: denied { bind } for pid=9603 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 374.606680][ T9597] bond4 (unregistering): (slave veth5): Releasing active interface [ 374.616318][ T9597] bond4 (unregistering): (slave dummy0): Releasing active interface [ 374.628425][ T9597] bond4 (unregistering): Released all slaves [ 375.154382][ T7347] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 375.326447][ T9618] binder: BINDER_SET_CONTEXT_MGR already set [ 375.332640][ T9618] binder: 9614:9618 ioctl 4018620d 200000000040 returned -16 [ 375.565039][ T7347] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 375.691556][ T7347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.748235][ T7347] usb 4-1: config 0 descriptor?? [ 375.821639][ T30] audit: type=1400 audit(1767702652.578:521): avc: denied { getopt } for pid=9624 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.981410][ T9610] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 376.064085][ T9627] netlink: 'syz.2.941': attribute type 21 has an invalid length. [ 376.072200][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 376.105481][ T9627] netlink: 'syz.2.941': attribute type 21 has an invalid length. [ 376.105554][ T4217] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.133005][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 376.223273][ T4217] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.243576][ T4217] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.257128][ T9630] nvme_fabrics: missing parameter 'transport=%s' [ 376.268367][ T4217] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.274194][ T9630] nvme_fabrics: missing parameter 'nqn=%s' [ 376.323533][ T9632] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 376.795664][ T9637] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 376.803475][ T9637] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 377.469225][ T7347] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0e [ 377.526819][ T7347] hackrf 4-1:0.0: Could not detect board [ 377.532594][ T7347] hackrf 4-1:0.0: probe with driver hackrf failed with error -110 [ 377.591333][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.605225][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.089408][ T30] audit: type=1400 audit(1767702654.848:522): avc: denied { listen } for pid=9652 comm="syz.4.947" path="/239/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 378.159584][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.202837][ T7347] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 379.968641][ T9666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.951'. [ 379.978038][ T9666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.951'. [ 380.037404][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.048562][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.251166][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.262044][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.270579][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.279712][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.287337][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.782791][ T9668] lo speed is unknown, defaulting to 1000 [ 381.168882][ T6715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.302361][ T6715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.314314][ T5816] Bluetooth: hci5: command tx timeout [ 382.604890][ T6715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.824060][ T9710] netlink: 68 bytes leftover after parsing attributes in process `syz.0.956'. [ 382.833077][ T9710] netlink: 68 bytes leftover after parsing attributes in process `syz.0.956'. [ 382.995525][ T9704] 9p: Bad value for 'rfdno' [ 383.036058][ T6715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.214808][ T5881] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 383.371771][ T9668] chnl_net:caif_netlink_parms(): no params data found [ 383.379772][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 383.430553][ T5881] usb 1-1: config index 0 descriptor too short (expected 32509, got 18) [ 383.460874][ T5881] usb 1-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 383.504519][ T5881] usb 1-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 383.534385][ T9724] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 383.546818][ T6715] bridge_slave_1: left allmulticast mode [ 383.552987][ T5881] usb 1-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 383.573183][ T6715] bridge_slave_1: left promiscuous mode [ 383.602573][ T9730] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 383.604563][ T5881] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 383.641873][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.644208][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.686362][ T6715] bridge_slave_0: left allmulticast mode [ 383.692434][ T30] audit: type=1400 audit(1767702660.448:523): avc: denied { ioctl } for pid=9735 comm="syz.4.961" path="socket:[23275]" dev="sockfs" ino=23275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.702238][ T6715] bridge_slave_0: left promiscuous mode [ 383.924170][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 383.993974][ T30] audit: type=1400 audit(1767702660.678:524): avc: denied { bind } for pid=9727 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.065472][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.409819][ T5816] Bluetooth: hci5: command tx timeout [ 384.757921][ T5881] usb 1-1: string descriptor 0 read error: -71 [ 384.804388][ T5881] usb 1-1: USB disconnect, device number 32 [ 384.955699][ T30] audit: type=1400 audit(1767702661.718:525): avc: denied { create } for pid=9727 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 385.186986][ T6715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.199776][ T6715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.210979][ T6715] bond0 (unregistering): Released all slaves [ 385.245993][ T9740] netlink: 'syz.4.961': attribute type 2 has an invalid length. [ 385.253647][ T9740] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 385.261390][ T9740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.321431][ T9738] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 385.348905][ T9738] netlink: 'syz.2.960': attribute type 2 has an invalid length. [ 386.474371][ T5816] Bluetooth: hci5: command tx timeout [ 387.018454][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.067920][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.544941][ T9668] bridge_slave_0: entered allmulticast mode [ 387.553242][ T9668] bridge_slave_0: entered promiscuous mode [ 387.585210][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.616090][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.623349][ T9668] bridge_slave_1: entered allmulticast mode [ 387.665677][ T9668] bridge_slave_1: entered promiscuous mode [ 387.944723][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 388.433450][ T6715] hsr_slave_0: left promiscuous mode [ 388.559853][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 388.569054][ T5816] Bluetooth: hci5: command tx timeout [ 388.625856][ T6715] hsr_slave_1: left promiscuous mode [ 388.639102][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.674370][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.692685][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.784198][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.850072][ T6715] veth1_macvtap: left promiscuous mode [ 388.888933][ T6715] veth0_macvtap: left promiscuous mode [ 388.907887][ T6715] veth1_vlan: left promiscuous mode [ 388.913346][ T6715] veth0_vlan: left promiscuous mode [ 388.924285][ T9806] netlink: 332 bytes leftover after parsing attributes in process `syz.2.971'. [ 390.038333][ T9817] netlink: 84 bytes leftover after parsing attributes in process `syz.3.976'. [ 390.222819][ T9820] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 390.467216][ T6715] team0 (unregistering): Port device team_slave_1 removed [ 390.501544][ T6715] team0 (unregistering): Port device team_slave_0 removed [ 390.515928][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 390.815498][ T9668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.843897][ T9820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.892712][ T9821] bond1: (slave veth7): Enslaving as an active interface with a down link [ 390.916424][ T9822] bond1: (slave dummy0): making interface the new active one [ 390.930367][ T9830] 9p: Bad value for 'rfdno' [ 390.936416][ T9822] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 391.100219][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.130698][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.222247][ T9825] bond1 (unregistering): (slave veth7): Releasing active interface [ 391.246824][ T9825] bond1 (unregistering): (slave dummy0): Releasing active interface [ 391.263214][ T9825] bond1 (unregistering): Released all slaves [ 391.310007][ T9668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.028243][ T9668] team0: Port device team_slave_0 added [ 392.068933][ T9668] team0: Port device team_slave_1 added [ 392.160218][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.176453][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.238170][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.274865][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.290300][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.333425][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.345141][ T30] audit: type=1400 audit(1767702669.108:526): avc: denied { getopt } for pid=9850 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 392.492524][ T9668] hsr_slave_0: entered promiscuous mode [ 392.500210][ T9668] hsr_slave_1: entered promiscuous mode [ 392.511282][ T9668] debugfs: 'hsr0' already exists in 'hsr' [ 392.517363][ T9668] Cannot create hsr debugfs directory [ 392.626988][ T9847] 9p: Bad value for 'rfdno' [ 392.800099][ T9867] overlayfs: conflicting options: userxattr,redirect_dir=on [ 393.122726][ T30] audit: type=1400 audit(1767702669.878:527): avc: denied { wake_alarm } for pid=9871 comm="syz.0.988" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 393.235054][ T9668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 393.247573][ T9668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 393.268065][ T9668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 393.286484][ T9668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.426687][ T9668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.476659][ T9668] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.501038][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.508152][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.549694][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.556806][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.786669][ T6186] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 393.826886][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 393.846730][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 393.959347][ T6186] usb 3-1: config 0 has no interfaces? [ 393.972160][ T9668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.979913][ T6186] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 394.077754][ T6186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.089095][ T6186] usb 3-1: config 0 descriptor?? [ 394.667075][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.0.992'. [ 394.673983][ T9] usb 3-1: USB disconnect, device number 34 [ 394.676206][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.0.992'. [ 395.063469][ T9929] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 395.148947][ T9929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.177383][ T9934] bond1: (slave dummy0): making interface the new active one [ 395.186124][ T9934] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 395.241618][ T9933] bond1: (slave veth1): Enslaving as an active interface with a down link [ 395.646881][ T9947] 9p: Bad value for 'rfdno' [ 396.363467][ T9929] bond1 (unregistering): (slave dummy0): Releasing active interface [ 396.405802][ T9929] bond1 (unregistering): (slave veth1): Releasing active interface [ 396.436047][ T9929] bond1 (unregistering): Released all slaves [ 396.644764][ T9668] veth0_vlan: entered promiscuous mode [ 396.683620][ T9668] veth1_vlan: entered promiscuous mode [ 396.700992][ T6292] kernel read not supported for file /sysvipc/msg (pid: 6292 comm: kworker/1:11) [ 396.733465][ T9965] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 396.776426][ T9668] veth0_macvtap: entered promiscuous mode [ 396.808417][ T9668] veth1_macvtap: entered promiscuous mode [ 396.865348][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.884598][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 396.955157][ T9668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.002128][ T1105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.037511][ T6088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.055646][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 397.098362][ T6088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.102746][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 397.158889][ T6088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.187819][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.196562][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 397.244913][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.265216][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 397.307449][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.323797][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 397.344294][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.345938][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.399421][ T9] usb 1-1: config 0 descriptor?? [ 397.521549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.567458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.728776][ T9] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 397.753962][ T9] hdpvr 1-1:0.0: device init failed [ 398.216420][ T9] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 398.251374][ T30] audit: type=1400 audit(1767702675.008:528): avc: denied { mounton } for pid=9668 comm="syz-executor" path="/root/syzkaller.iYpARn/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 398.288575][ T9] usb 1-1: USB disconnect, device number 33 [ 398.414491][ T30] audit: type=1400 audit(1767702675.068:529): avc: denied { mounton } for pid=9668 comm="syz-executor" path="/root/syzkaller.iYpARn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 398.458702][ T30] audit: type=1400 audit(1767702675.078:530): avc: denied { mounton } for pid=9668 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 398.723140][ T9990] Invalid logical block size (260) [ 401.478185][T10003] 9p: Bad value for 'rfdno' [ 403.804292][ T30] audit: type=1400 audit(1767702680.558:531): avc: denied { create } for pid=10038 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.868632][ T30] audit: type=1400 audit(1767702680.568:532): avc: denied { setopt } for pid=10038 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.903151][T10047] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.942985][ T30] audit: type=1400 audit(1767702680.568:533): avc: denied { read } for pid=10038 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.009577][ T30] audit: type=1400 audit(1767702680.648:534): avc: denied { write } for pid=10038 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.080285][ T30] audit: type=1326 audit(1767702680.728:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.3.1015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f418f749 code=0x0 [ 405.443453][T10066] orangefs: client-core tried to read wrong size [ 405.445506][ T30] audit: type=1400 audit(1767702682.198:536): avc: denied { bind } for pid=10061 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 405.479270][ T30] audit: type=1400 audit(1767702682.198:537): avc: denied { accept } for pid=10061 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.644004][ T30] audit: type=1400 audit(1767702682.238:538): avc: denied { shutdown } for pid=10061 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.792298][T10076] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 405.832005][T10076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.892539][T10076] bond1: (slave veth5): Enslaving as an active interface with a down link [ 405.914746][T10080] bond1: (slave dummy0): making interface the new active one [ 405.923443][T10080] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 406.004265][ T7347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 406.151341][T10076] bond1 (unregistering): (slave veth5): Releasing active interface [ 406.840630][ T7347] usb 6-1: config 0 has no interfaces? [ 406.864802][ T7347] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 406.878091][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.890849][T10076] bond1 (unregistering): (slave dummy0): Releasing active interface [ 406.899943][ T7347] usb 6-1: config 0 descriptor?? [ 406.933682][T10076] bond1 (unregistering): Released all slaves [ 407.126369][ T7347] usb 6-1: USB disconnect, device number 2 [ 407.194402][ T5931] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 407.257715][T10097] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 407.278548][T10097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.304193][T10097] bond1: (slave veth9): Enslaving as an active interface with a down link [ 407.323547][T10097] bond1: (slave dummy0): making interface the new active one [ 407.332043][T10097] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 407.354334][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 407.360838][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.374750][ T5931] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 407.383858][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.393030][ T5931] usb 3-1: Product: syz [ 407.397309][ T5931] usb 3-1: Manufacturer: syz [ 407.401903][ T5931] usb 3-1: SerialNumber: syz [ 407.414232][ T5931] usb 3-1: config 0 descriptor?? [ 407.423882][ T5931] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 407.457445][T10097] bond1 (unregistering): (slave veth9): Releasing active interface [ 407.468168][T10097] bond1 (unregistering): (slave dummy0): Releasing active interface [ 407.477739][T10097] bond1 (unregistering): Released all slaves [ 407.992177][ T5931] IPVS: starting estimator thread 0... [ 408.014149][ T30] audit: type=1400 audit(1767702684.668:539): avc: denied { getopt } for pid=10105 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 408.020023][ T5931] usb 3-1: USB disconnect, device number 35 [ 408.543194][T10111] IPVS: using max 78 ests per chain, 187200 per kthread [ 408.579609][T10114] fuse: Unknown parameter 'gòoep_id' [ 409.244246][ T5931] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 409.273719][ T4217] Bluetooth: hci3: Frame reassembly failed (-84) [ 409.293293][ T4217] Bluetooth: hci3: Frame reassembly failed (-84) [ 409.304480][ T89] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 409.474178][ T89] usb 6-1: Using ep0 maxpacket: 16 [ 409.514020][ T5931] usb 1-1: config 0 has no interfaces? [ 410.098201][ T5931] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 410.108554][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.120181][ T89] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 410.130094][ T5931] usb 1-1: config 0 descriptor?? [ 410.143538][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.156374][T10130] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 410.169532][ T89] usb 6-1: Product: syz [ 410.182231][ T89] usb 6-1: Manufacturer: syz [ 410.197566][ T89] usb 6-1: SerialNumber: syz [ 410.275199][ T89] usb 6-1: config 0 descriptor?? [ 410.290858][T10130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.306111][ T89] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 410.355498][ T89] usb 6-1: Detected FT2232H [ 410.367324][T10132] bond3: (slave veth3): Enslaving as an active interface with a down link [ 410.384369][T10134] bond3: (slave dummy0): making interface the new active one [ 410.408161][T10134] dummy0: entered promiscuous mode [ 410.424358][T10134] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 410.651790][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.666109][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.870949][ T5931] usb 1-1: USB disconnect, device number 34 [ 410.886211][ T89] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 410.935920][ T89] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 410.943965][ T89] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 410.971017][ T89] usb 6-1: USB disconnect, device number 3 [ 410.996554][ T89] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 411.006815][T10130] bond3 (unregistering): (slave veth3): Releasing active interface [ 411.024721][ T89] ftdi_sio 6-1:0.0: device disconnected [ 411.050115][T10130] bond3 (unregistering): (slave dummy0): Releasing active interface [ 411.062164][T10130] bond3 (unregistering): Released all slaves [ 411.197828][ T5816] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 412.366224][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.461131][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.520702][T10166] FAULT_INJECTION: forcing a failure. [ 412.520702][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 412.533419][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.0.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.533444][T10166] Tainted: [L]=SOFTLOCKUP [ 412.533450][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.533458][T10166] Call Trace: [ 412.533464][T10166] [ 412.533469][T10166] dump_stack_lvl+0x16c/0x1f0 [ 412.533493][T10166] should_fail_ex+0x512/0x640 [ 412.533516][T10166] ? fs_reclaim_acquire+0xae/0x150 [ 412.533539][T10166] should_failslab+0xc2/0x120 [ 412.533560][T10166] __kmalloc_noprof+0xeb/0x910 [ 412.533586][T10166] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.533613][T10166] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.533634][T10166] tomoyo_realpath_from_path+0xc2/0x6e0 [ 412.533660][T10166] ? tomoyo_profile+0x47/0x60 [ 412.533686][T10166] tomoyo_path_number_perm+0x245/0x580 [ 412.533706][T10166] ? tomoyo_path_number_perm+0x237/0x580 [ 412.533729][T10166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.533750][T10166] ? find_held_lock+0x2b/0x80 [ 412.533796][T10166] ? find_held_lock+0x2b/0x80 [ 412.533821][T10166] ? hook_file_ioctl_common+0x144/0x410 [ 412.533853][T10166] ? __fget_files+0x20e/0x3c0 [ 412.533884][T10166] security_file_ioctl+0x9b/0x240 [ 412.533910][T10166] __x64_sys_ioctl+0xb7/0x210 [ 412.533933][T10166] do_syscall_64+0xcd/0xf80 [ 412.533959][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.533978][T10166] RIP: 0033:0x7f619f38f749 [ 412.533993][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.534010][T10166] RSP: 002b:00007f61a02ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.534028][T10166] RAX: ffffffffffffffda RBX: 00007f619f5e5fa0 RCX: 00007f619f38f749 [ 412.534039][T10166] RDX: 0000200000000180 RSI: 00000000c004743e RDI: 0000000000000003 [ 412.534050][T10166] RBP: 00007f61a02ca090 R08: 0000000000000000 R09: 0000000000000000 [ 412.534060][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.534070][T10166] R13: 00007f619f5e6038 R14: 00007f619f5e5fa0 R15: 00007ffde8bdbb08 [ 412.534100][T10166] [ 412.743128][T10166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.530341][T10198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1044'. [ 414.635875][T10200] comedi comedi1: comedi_config --init_data is deprecated [ 414.654412][ T6292] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 414.824326][ T6292] usb 6-1: Using ep0 maxpacket: 32 [ 414.847825][ T6292] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 414.857272][ T6292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.904450][T10210] binder: transaction release 21 bad handle 1, ret = -22 [ 414.912190][ T6292] usb 6-1: Product: syz [ 414.944736][ T6292] usb 6-1: Manufacturer: syz [ 414.964182][ T6292] usb 6-1: SerialNumber: syz [ 414.989070][T10217] netlink: 'syz.4.1055': attribute type 5 has an invalid length. [ 414.998613][ T6292] usb 6-1: config 0 descriptor?? [ 415.033707][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 415.067540][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 415.229468][ T6292] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 415.271867][ T6292] 5e 57 f9 3a eb 9a 47 80 [ 415.399622][ T6292] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 415.570649][T10230] Invalid logical block size (260) [ 416.575477][ T89] usb 6-1: USB disconnect, device number 4 [ 417.576605][T10246] Invalid logical block size (260) [ 418.914943][ T30] audit: type=1400 audit(1767702695.438:540): avc: denied { setopt } for pid=10265 comm="syz.5.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 419.400172][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 419.482332][ T30] audit: type=1400 audit(1767702696.238:541): avc: denied { read } for pid=10279 comm="syz.4.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 419.684404][ T6292] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 419.763562][T10289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1067'. [ 419.772582][T10289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1067'. [ 419.857839][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.895786][ T6292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 419.934418][ T6292] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 419.936370][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.000173][ T6292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 420.042248][ T6292] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 420.113577][ T6292] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 420.135249][T10292] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 420.196164][ T6292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.207062][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.216816][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.279225][ T6292] usb 6-1: config 0 descriptor?? [ 420.437910][T10300] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 420.506156][ T6292] hdpvr 6-1:0.0: unexpected answer of status request, len -32 [ 420.524290][ T6292] hdpvr 6-1:0.0: device init failed [ 420.534557][ T6292] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 420.558947][T10300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.586786][ T5931] usb 6-1: USB disconnect, device number 5 [ 420.708808][T10304] bond4: (slave veth7): Enslaving as an active interface with a down link [ 420.749737][T10305] bond4: (slave dummy0): making interface the new active one [ 420.810802][T10305] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 421.086072][T10317] netlink: ct family unspecified [ 421.091063][T10317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.654526][T10315] could not allocate digest TFM handle blake2s-128 [ 422.035679][T10306] bond4 (unregistering): (slave veth7): Releasing active interface [ 422.056584][T10306] bond4 (unregistering): (slave dummy0): Releasing active interface [ 422.077244][T10306] bond4 (unregistering): Released all slaves [ 423.207006][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 423.228973][T10338] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 423.874262][ T6292] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 423.975991][ T30] audit: type=1400 audit(1767702700.738:542): avc: denied { accept } for pid=10355 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 424.374231][ T6292] usb 3-1: Using ep0 maxpacket: 32 [ 424.380862][ T6292] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 424.440894][ T6292] usb 3-1: config 0 has no interface number 0 [ 424.969664][T10367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1079'. [ 424.978890][T10367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1079'. [ 425.315649][ T6292] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.363533][ T6292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.391126][ T6292] usb 3-1: Product: syz [ 425.408477][ T6292] usb 3-1: Manufacturer: syz [ 425.431443][ T6292] usb 3-1: SerialNumber: syz [ 425.454423][ T5930] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 425.466585][ T6292] usb 3-1: config 0 descriptor?? [ 425.489726][ T6292] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 425.654263][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 425.681313][ T5930] usb 1-1: config index 0 descriptor too short (expected 32509, got 18) [ 425.727338][ T5930] usb 1-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 425.758137][ T6292] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 425.768540][ T5930] usb 1-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 425.816719][ T6292] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 425.829721][ T5930] usb 1-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 425.880459][ T5930] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 425.958126][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.303258][T10390] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 426.316137][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 426.591973][ T89] usb 3-1: USB disconnect, device number 36 [ 426.608518][ T5930] usb 1-1: string descriptor 0 read error: -71 [ 426.620401][ T89] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 426.657622][ T5930] usb 1-1: USB disconnect, device number 35 [ 426.693320][ T89] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 426.716873][ T89] quatech2 3-1:0.51: device disconnected [ 426.814384][T10390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.059219][ T30] audit: type=1400 audit(1767702703.818:543): avc: denied { write } for pid=10403 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 427.298080][T10395] bond4 (unregistering): Released all slaves [ 427.503188][T10423] binder: 10422:10423 unknown command 175784343 [ 427.546705][T10423] binder: 10422:10423 ioctl c0306201 200000000080 returned -22 [ 427.580228][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.664340][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.995674][T10440] binder: BINDER_SET_CONTEXT_MGR already set [ 428.020951][T10440] binder: 10437:10440 ioctl 4018620d 200000004a80 returned -16 [ 428.618811][T10440] gtp0: entered promiscuous mode [ 429.025096][ T30] audit: type=1400 audit(1767702705.788:544): avc: denied { ioctl } for pid=10446 comm="syz.5.1097" path="socket:[26679]" dev="sockfs" ino=26679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.055433][ T6292] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 429.228345][ T6292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.254207][ T6292] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.273540][ T6292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.296618][ T6292] usb 3-1: config 0 descriptor?? [ 429.482047][ T30] audit: type=1400 audit(1767702706.238:545): avc: denied { write } for pid=10451 comm="syz.4.1098" path="socket:[25864]" dev="sockfs" ino=25864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 429.626195][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.634993][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.764952][T10445] befs: (nbd2): unable to read superblock [ 429.818663][ T6292] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 429.856658][ T6292] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input15 [ 430.113466][ T6292] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 430.192520][ T6292] usb 3-1: USB disconnect, device number 37 [ 430.227607][ T30] audit: type=1400 audit(1767702706.978:546): avc: denied { shutdown } for pid=10471 comm="syz.5.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.319914][T10473] fido_id[10473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 431.929433][ T30] audit: type=1400 audit(1767702708.688:547): avc: denied { append } for pid=10488 comm="syz.5.1107" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 432.304249][ T89] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 432.414167][ T5930] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 432.501124][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.535464][T10508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.591865][T10508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.671033][ T89] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.741191][ T89] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 432.755195][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 432.782907][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 432.792887][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.823749][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 432.835043][ T89] usb 6-1: config 0 descriptor?? [ 432.857325][T10508] syz.3.1111 (10508): /proc/10507/oom_adj is deprecated, please use /proc/10507/oom_score_adj instead. [ 432.869935][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 432.930753][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 432.988312][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.027805][ T5930] usb 1-1: config 0 descriptor?? [ 433.265350][ T5930] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 433.288713][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.310132][ T5930] hdpvr 1-1:0.0: device init failed [ 433.324644][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.331712][ T5930] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 433.354947][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.391316][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.421707][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.452102][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.484762][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.514276][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.514770][ T6292] usb 1-1: USB disconnect, device number 36 [ 433.521186][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.650402][ T89] ortek 0003:1223:3F07.000C: unknown main item tag 0x0 [ 433.710425][ T89] ortek 0003:1223:3F07.000C: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.5-1/input0 [ 434.021082][T10526] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1114'. [ 434.030616][T10526] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1114'. [ 434.079200][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.089591][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.424936][ T89] usb 6-1: USB disconnect, device number 6 [ 435.117700][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 435.230569][T10546] macvlan2: entered promiscuous mode [ 435.268652][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1118'. [ 435.304625][T10546] macvlan2: entered allmulticast mode [ 435.364835][T10546] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 435.814541][T10556] netlink: 'syz.3.1119': attribute type 39 has an invalid length. [ 436.055047][T10536] 9p: Bad value for 'rfdno' [ 436.253145][ T9475] udevd[9475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.325129][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 436.334579][ T9473] udevd[9473]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.556233][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 436.565252][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 437.819561][T10588] can0: slcan on ttyS3. [ 438.003179][T10589] capability: warning: `syz.0.1125' uses 32-bit capabilities (legacy support in use) [ 438.046866][T10588] can0 (unregistered): slcan off ttyS3. [ 439.191735][ T30] audit: type=1400 audit(1767702715.948:548): avc: denied { write } for pid=10597 comm="syz.3.1129" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 439.277773][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.292272][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.614895][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.287770][T10618] netlink: 'syz.0.1135': attribute type 4 has an invalid length. [ 440.668361][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 440.678003][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 440.983022][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 441.904415][ T89] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 442.219562][T10648] ipt_rpfilter: unknown options [ 442.546058][ T5930] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 442.569381][ T89] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.602236][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 442.636630][ T89] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 442.682203][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.759254][ T89] usb 1-1: Product: syz [ 442.764204][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 442.779485][ T89] usb 1-1: Manufacturer: syz [ 442.784990][ T89] usb 1-1: SerialNumber: syz [ 442.790654][ T5930] usb 6-1: config index 0 descriptor too short (expected 32509, got 18) [ 443.460554][ T89] usb 1-1: config 0 descriptor?? [ 443.465670][ T5930] usb 6-1: config 78 has too many interfaces: 149, using maximum allowed: 32 [ 443.477721][ T5930] usb 6-1: config 78 has an invalid descriptor of length 102, skipping remainder of the config [ 443.488475][ T5930] usb 6-1: config 78 has 0 interfaces, different from the descriptor's value: 149 [ 443.488518][ T5930] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 443.488540][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.491222][T10636] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 444.015998][ T89] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 444.056225][ T89] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 444.089981][ C0] powermate: config urb returned -71 [ 444.096837][ C0] powermate: config urb returned -71 [ 444.102379][ C0] powermate: config urb returned -71 [ 444.107840][ C0] powermate: config urb returned -71 [ 444.134686][ T5930] usb 6-1: string descriptor 0 read error: -71 [ 444.143569][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 444.159492][ T5930] usb 6-1: USB disconnect, device number 7 [ 444.166577][ T89] usb 1-1: USB disconnect, device number 37 [ 444.725958][ T30] audit: type=1400 audit(1767702721.488:549): avc: denied { append } for pid=10675 comm="syz.0.1154" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.755462][T10676] loop6: detected capacity change from 0 to 2640 [ 444.786576][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.825492][ T30] audit: type=1400 audit(1767702721.588:550): avc: denied { map } for pid=10675 comm="syz.0.1154" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.864233][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.928862][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.954168][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.120890][T10679] FAULT_INJECTION: forcing a failure. [ 445.120890][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 445.133561][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.3.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.133592][T10679] Tainted: [L]=SOFTLOCKUP [ 445.133599][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.133609][T10679] Call Trace: [ 445.133616][T10679] [ 445.133623][T10679] dump_stack_lvl+0x16c/0x1f0 [ 445.133652][T10679] should_fail_ex+0x512/0x640 [ 445.133679][T10679] ? fs_reclaim_acquire+0xae/0x150 [ 445.133705][T10679] should_failslab+0xc2/0x120 [ 445.133728][T10679] __kmalloc_noprof+0xeb/0x910 [ 445.133755][T10679] ? tomoyo_encode2+0x100/0x3e0 [ 445.133783][T10679] ? tomoyo_encode2+0x100/0x3e0 [ 445.133805][T10679] tomoyo_encode2+0x100/0x3e0 [ 445.133832][T10679] tomoyo_encode+0x29/0x50 [ 445.133862][T10679] tomoyo_realpath_from_path+0x18f/0x6e0 [ 445.133893][T10679] tomoyo_mount_acl+0x664/0x850 [ 445.133917][T10679] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.133940][T10679] ? kernel_text_address+0x8d/0x100 [ 445.133965][T10679] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 445.133987][T10679] ? arch_stack_walk+0xa6/0x100 [ 445.134037][T10679] ? tomoyo_domain+0xba/0x150 [ 445.134064][T10679] ? tomoyo_profile+0x47/0x60 [ 445.134097][T10679] tomoyo_mount_permission+0x16d/0x420 [ 445.134118][T10679] ? tomoyo_mount_permission+0x14f/0x420 [ 445.134140][T10679] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 445.134174][T10679] security_sb_mount+0x9b/0x260 [ 445.134197][T10679] path_mount+0x158/0x23a0 [ 445.134214][T10679] ? rcu_is_watching+0x12/0xc0 [ 445.134233][T10679] ? __pfx_path_mount+0x10/0x10 [ 445.134250][T10679] ? kmem_cache_free+0x2d8/0x770 [ 445.134267][T10679] ? putname+0xf5/0x1a0 [ 445.134292][T10679] ? putname+0xf5/0x1a0 [ 445.134312][T10679] ? putname+0xf5/0x1a0 [ 445.134335][T10679] ? __x64_sys_mount+0x293/0x310 [ 445.134347][T10679] __x64_sys_mount+0x293/0x310 [ 445.134362][T10679] ? __pfx___x64_sys_mount+0x10/0x10 [ 445.134382][T10679] do_syscall_64+0xcd/0xf80 [ 445.134403][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.134417][T10679] RIP: 0033:0x7f67f418f749 [ 445.134430][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.134444][T10679] RSP: 002b:00007f67f510c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.134459][T10679] RAX: ffffffffffffffda RBX: 00007f67f43e5fa0 RCX: 00007f67f418f749 [ 445.134468][T10679] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 00002000000000c0 [ 445.134477][T10679] RBP: 00007f67f510c090 R08: 00002000000001c0 R09: 0000000000000000 [ 445.134485][T10679] R10: 0000000000400080 R11: 0000000000000246 R12: 0000000000000002 [ 445.134494][T10679] R13: 00007f67f43e6038 R14: 00007f67f43e5fa0 R15: 00007ffd93ecf298 [ 445.134514][T10679] [ 445.403737][T10679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.418588][ T30] audit: type=1400 audit(1767702722.178:551): avc: denied { open } for pid=10678 comm="syz.3.1155" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 445.442418][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.451080][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.507459][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.516065][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.523894][ T9473] ldm_validate_partition_table(): Disk read failed. [ 445.530547][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.552857][ T9473] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.560762][ T9473] Dev loop6: unable to read RDB block 0 [ 445.566546][ T9473] loop6: unable to read partition table [ 445.573029][T10676] ldm_validate_partition_table(): Disk read failed. [ 445.579751][T10676] Dev loop6: unable to read RDB block 0 [ 445.586283][T10676] loop6: unable to read partition table [ 445.592719][T10676] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 550.674072][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 550.681050][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7347/1:b..l [ 550.689426][ C0] rcu: (detected by 0, t=10503 jiffies, g=36593, q=778 ncpus=2) [ 550.697134][ C0] task:kworker/1:12 state:R running task stack:24792 pid:7347 tgid:7347 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 550.711436][ C0] Workqueue: events_power_efficient gc_worker [ 550.717523][ C0] Call Trace: [ 550.720795][ C0] [ 550.723718][ C0] ? __schedule+0x10b9/0x6150 [ 550.728396][ C0] __schedule+0x1139/0x6150 [ 550.732903][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 550.737676][ C0] ? __pfx___schedule+0x10/0x10 [ 550.742525][ C0] ? mark_held_locks+0x49/0x80 [ 550.747290][ C0] preempt_schedule_irq+0x51/0x90 [ 550.752314][ C0] irqentry_exit+0x1d8/0x8c0 [ 550.756912][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.762887][ C0] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 550.767998][ C0] Code: 00 00 48 c7 c7 a8 67 89 90 e8 67 ea 05 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 e5 d8 2a f8 58 48 85 db 0f 85 d4 0f 00 00 06 de 2a f8 8b 1d f0 5c f5 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 550.787609][ C0] RSP: 0018:ffffc900032e7ad8 EFLAGS: 00000293 [ 550.793681][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff899415e9 [ 550.801648][ C0] RDX: ffff888029024980 RSI: ffffffff899415f8 RDI: 0000000000000007 [ 550.809611][ C0] RBP: ffffffff9b0a38ec R08: 0000000000000007 R09: 0000000000000000 [ 550.817572][ C0] R10: 0000000000000000 R11: ffff8880290254b0 R12: ffff888025200000 [ 550.825536][ C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001881 [ 550.833509][ C0] ? gc_worker+0xe19/0x16e0 [ 550.838016][ C0] ? gc_worker+0xe28/0x16e0 [ 550.842526][ C0] ? gc_worker+0xe28/0x16e0 [ 550.847138][ C0] ? __pfx_gc_worker+0x10/0x10 [ 550.851902][ C0] ? rcu_is_watching+0x12/0xc0 [ 550.856666][ C0] process_one_work+0x9ba/0x1b20 [ 550.861614][ C0] ? __pfx_process_srcu+0x10/0x10 [ 550.866640][ C0] ? __pfx_process_one_work+0x10/0x10 [ 550.872029][ C0] ? assign_work+0x1a0/0x250 [ 550.876624][ C0] worker_thread+0x6c8/0xf10 [ 550.881219][ C0] ? __kthread_parkme+0x19e/0x250 [ 550.886236][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.891350][ C0] kthread+0x3c5/0x780 [ 550.895415][ C0] ? __pfx_kthread+0x10/0x10 [ 550.900003][ C0] ? rcu_is_watching+0x12/0xc0 [ 550.904764][ C0] ? __pfx_kthread+0x10/0x10 [ 550.909351][ C0] ret_from_fork+0x983/0xb10 [ 550.913943][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 550.919058][ C0] ? __switch_to+0x7af/0x10d0 [ 550.923732][ C0] ? __pfx_kthread+0x10/0x10 [ 550.928323][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.933095][ C0] [ 550.936105][ C0] rcu: rcu_preempt kthread starved for 10481 jiffies! g36593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 550.947287][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 550.957248][ C0] rcu: RCU grace-period kthread stack dump: [ 550.963122][ C0] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 550.976609][ C0] Call Trace: [ 550.979876][ C0] [ 550.982799][ C0] ? __schedule+0x10b9/0x6150 [ 550.987481][ C0] __schedule+0x1139/0x6150 [ 550.991980][ C0] ? __lock_acquire+0x436/0x2890 [ 550.996915][ C0] ? __mod_timer+0x8f2/0xd30 [ 551.001508][ C0] ? __pfx___schedule+0x10/0x10 [ 551.006347][ C0] ? find_held_lock+0x2b/0x80 [ 551.011024][ C0] ? schedule+0x2d7/0x3a0 [ 551.015354][ C0] schedule+0xe7/0x3a0 [ 551.019417][ C0] schedule_timeout+0x123/0x290 [ 551.024258][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 551.029620][ C0] ? __pfx_process_timeout+0x10/0x10 [ 551.034935][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 551.040738][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 551.046195][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 551.050958][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 551.056239][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.061528][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 551.066461][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 551.071315][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 551.077119][ C0] rcu_gp_kthread+0x26d/0x380 [ 551.081812][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 551.087042][ C0] ? rcu_is_watching+0x12/0xc0 [ 551.091800][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.097000][ C0] ? __kthread_parkme+0x19e/0x250 [ 551.102024][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 551.107311][ C0] kthread+0x3c5/0x780 [ 551.111383][ C0] ? __pfx_kthread+0x10/0x10 [ 551.116060][ C0] ? rcu_is_watching+0x12/0xc0 [ 551.120816][ C0] ? __pfx_kthread+0x10/0x10 [ 551.125496][ C0] ret_from_fork+0x983/0xb10 [ 551.130084][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 551.135193][ C0] ? __switch_to+0x7af/0x10d0 [ 551.139877][ C0] ? __pfx_kthread+0x10/0x10 [ 551.144465][ C0] ret_from_fork_asm+0x1a/0x30 [ 551.149250][ C0] [ 551.152325][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 551.158660][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.169261][ C0] Tainted: [L]=SOFTLOCKUP [ 551.173581][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.184063][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 551.189698][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 551.209297][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 551.215358][ C0] RAX: 00000000019666e7 RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 551.223409][ C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 551.231382][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 551.239353][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 551.247406][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bad0 R15: 0000000000000000 [ 551.255370][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 551.264295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.270874][ C0] CR2: 000000110c31a113 CR3: 0000000030ec1000 CR4: 00000000003526f0 [ 551.278841][ C0] Call Trace: [ 551.282200][ C0] [ 551.285120][ C0] default_idle+0x13/0x20 [ 551.289452][ C0] default_idle_call+0x6c/0xb0 [ 551.294215][ C0] do_idle+0x38d/0x510 [ 551.298295][ C0] ? __pfx_do_idle+0x10/0x10 [ 551.302962][ C0] cpu_startup_entry+0x4f/0x60 [ 551.307722][ C0] rest_init+0x16b/0x2b0 [ 551.311957][ C0] ? acpi_subsystem_init+0x133/0x180 [ 551.317243][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 551.322781][ C0] start_kernel+0x3ef/0x4d0 [ 551.327285][ C0] x86_64_start_reservations+0x18/0x30 [ 551.332746][ C0] x86_64_start_kernel+0x130/0x190 [ 551.337854][ C0] common_startup_64+0x13e/0x148 [ 551.342888][ C0]