last executing test programs: 14.598884276s ago: executing program 0 (id=850): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$isdn(0x22, 0x3, 0x11) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 12.070802986s ago: executing program 1 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x4, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f00000000c0)) write$6lowpan_control(r4, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/socket\x00') bind$rds(r6, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) socket(0xa, 0x3, 0x3a) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 10.798226859s ago: executing program 3 (id=860): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 10.721981665s ago: executing program 3 (id=861): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) close(0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000003680)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\x84', 0x3a, '6', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x50]}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00'}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10.721240529s ago: executing program 4 (id=862): socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000800)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r3, 0x5, &(0x7f0000002200)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44040) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002000000000000000100000408000000000000000200000020000000000000000000000903000000000000000000000400"/74], 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200000, '\x00', 0x0, r7, 0x0, 0x1}, 0x50) 7.994945729s ago: executing program 2 (id=864): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) listen(r1, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f110000", 0xbf}], 0x3, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r4 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffb}, &(0x7f0000000140)=0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000000)="17", 0x1, 0x1, 0x0) 7.823182928s ago: executing program 3 (id=865): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@empty}, 0x14) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}], 0x1}, 0x3}], 0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x100000}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="010028bd70000000000001000000840008808000008024000100d1732899f611cd8994034d7f513dc957630e5493c285aca40065cb6311be696b5800098028000080060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a000000140002000000000000000000000000000000000005000300010000000400008014000200776730000000000000000000000000000800050001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) recvmsg(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setxattr$security_capability(&(0x7f0000000640)='./file0\x00', &(0x7f00000010c0), &(0x7f0000000140)=@v3={0x3000000, [{0x5}, {0x0, 0x6}]}, 0x18, 0x1) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e09, 0x1, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) 7.746442119s ago: executing program 4 (id=866): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) unshare(0x22020600) openat$null(0xffffff9c, &(0x7f0000000000), 0x10002, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x600, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.610910087s ago: executing program 1 (id=867): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) epoll_create(0x200008) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xbc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r3, 0x5605) sendmmsg$inet(r1, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4000010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 6.602826529s ago: executing program 2 (id=868): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000140)={0x9}) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r9, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, r7, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000006c0)=0x46, 0x4) 5.98422308s ago: executing program 4 (id=869): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="050025bd7000fbdbdf25ae895d6e"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x20040000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x2c, 0x0, 0x2, 0xd59f82, 0x19f0, 0x2, 0x19ef, 0x3, 0xa, 0x27fc, 0x67ff, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0x40, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030aed01000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) setpriority(0x2, 0xffffffffffffffff, 0x600000000000000) 5.219626391s ago: executing program 1 (id=870): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0x800}) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 4.914979975s ago: executing program 4 (id=871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)="8b351d28d70200ead8e0dae8aaf111", 0xf}, {&(0x7f0000000500)="82", 0x1}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) 4.894953768s ago: executing program 1 (id=872): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902910013010140cc0904000000010100000a2401f5ffff020102132406060406040003000300030003000a000705240501030a24040508e53a273e3108240405047b653609040100000102000009040101010102000008240201080200030905010920003b0008072501020510000904020000010200000904020101010220000905820920"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x112, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) clock_settime(0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x101, 0x80000004, 0x40010080, 0x5149, 0x8, 0x6, 0xfff, 0x0, 0xffffffff, 0x100, 0x401, 0x1, 0xd, 0x1, 0x0, 0x1bfffffe, 0x0, 0x1a449, 0x3, 0x40000003, 0x85, 0xffdffffb, 0x0, 0x307, 0x400002, 0xe69, 0x2003c, 0x4, 0x106, 0x7]}) 4.802896142s ago: executing program 4 (id=873): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000580)={[0xa]}, 0x8, 0x80800) bind$netlink(r0, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000640)='./file1\x00', &(0x7f00000000c0)='cpuset\x00', 0xb14242, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r1, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1, 0xffffffff, 0x0) syz_emit_vhci(&(0x7f0000001040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xc6, 0x4}, {0x676d, 0xfffb}}}}, 0x11) 4.70568795s ago: executing program 3 (id=874): socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x15f}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f0000000500)={0x8c, 0x100002}, 0x20) 4.639857549s ago: executing program 2 (id=875): socket$kcm(0x10, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x200000000000000) 4.51334403s ago: executing program 0 (id=876): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000400)=ANY=[@ANYBLOB="89ad433c4246ed85047304c0e4bc5c869d9eeea104d754ba464f099a0507d8b40cd28149e05594991b9d29d904a191a1866c9d750e0c10ab7bac19c33f2a910628b8908ef189c0952fdac83f7ea457fbd0", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000003000b00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000008c0)={0x4, @sliced={0x3ff, [0x10, 0x4, 0x7, 0x7, 0x2, 0x4ac, 0x7, 0x7, 0x80, 0x7, 0x1, 0x8, 0xfffd, 0x4, 0xfffb, 0x3, 0x401, 0x0, 0xd, 0x6, 0x7, 0x0, 0xe, 0x6b, 0x6, 0x400, 0x4, 0x7, 0x2, 0xd6c, 0xad9, 0x7, 0x9, 0xfffb, 0xb229, 0xb, 0x7, 0x4, 0x7fff, 0xfff9, 0xa07, 0x9, 0x3, 0x2, 0x9, 0xb]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffee7, &(0x7f0000000100)=0xfff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) 4.136721502s ago: executing program 3 (id=877): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2100) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x8, 0xe7, &(0x7f0000000080)="ba2f594b82ac3f04dacfb50a873be4b46e63a2ebb167ba34a9a6a76bc631db0de8f14102fe9b49366d07f0dbbba2afdb80175859f76f005b6555aab6aa1de175ed5c2d12f86fef8ba68365c60f0f6549dbb8b28a67b70bc21f2da5ffb948fabf58b1fc53da4f107724e92221609f99fc6790746081c4b7e10a4ba2c016bbd6e8d2a87c6f493462429d6a7fee635d7aa52cdffa87a55a90d48ee5294fa908559971afcb724b83c7422f15346778f982e363998bdb6524b65b207f33258c0734b30225b4f460b1a3112563acc27ee4019a9e61329bf7d0734bf448428d0e7e44be64933a334f5656") syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 3.674997379s ago: executing program 2 (id=878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a", 0x90}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x800) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001200192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x2003, 0x0) 3.59710048s ago: executing program 0 (id=879): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0xfffffffc, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000240)='/dev/i2c-#\x00', &(0x7f0000000280)='@&\'/[]/%\\[$*\\\x00', &(0x7f0000000380)='/dev/snd/midiC#D#\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='\x00']}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x32d7, 0x0, 0x46, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) write$cgroup_int(r7, &(0x7f0000000080)=0x80000002, 0x12) 3.35403927s ago: executing program 0 (id=880): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) epoll_create(0x200008) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xbc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034700)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r3, 0x5605) sendmmsg$inet(r1, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4000010) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 2.881412305s ago: executing program 0 (id=881): r0 = socket$inet6(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x35dc00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=ANY=[@ANYBLOB="1c000000520001002abd7000ffdbdf250200000008000100fefffffffdfe5767158a2de5b015e1dda99b1e11e5cd2bfd5e2275ac9f0c0c34611515ece765e4e2c62ef7d5f0a220c31c49377177d03f06fce04f64a0cb5ecdf236658ac9fdc95bd4f4c7f63a46b95432cf54e79fb40fe8106da8"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f00000024c0)={0x50, 0x0, r3, {0x7, 0x9, 0xfffffffe, 0x1038002, 0xd, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x80000000}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe(0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba5ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000004, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x7, "f4246a2d32d4a1244a0f4199da95ffaec64dd75ac0bf853d57c04b97542440e5f4f6a97a07939d4ba70779d36bc810c3be469ef64526ca2988f202696ed214", 0x2c}, 0x80) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) 2.770759887s ago: executing program 2 (id=882): recvmmsg(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="14d576ea", 0x4}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0xc9e43) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1.457686306s ago: executing program 0 (id=883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='source', &(0x7f0000000840)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xa7\xa0|\x0eTX\xda8\x8b\xf7\xa2J@\x1d/\t_SZ', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) rt_sigpending(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r3, 0x1}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="9774f76734b2eadf2904eb5c70862dc63dde1b22a3f99ae29ddf4828be4f9867", 0x20}, {&(0x7f00000003c0)="2d49f001f12ce5c20c476fdc7be7d9a11d8bb4d2e6f470d2571121665aa547cb32e5427e530d43f0aebb5027cfa7aaab892c5346779cdc5397666193ca3fb005f7300ac59e3109ca1d2a23c39ac72a", 0xfffffefe}, {&(0x7f0000000500)="2a0f61a0bcf13700000000000000004b438c46671dae29f3edb968d1e0cd9415fa0fd8038cfd8f16a8049b34a1c3abd68689a9556b589788d50c76fbe487c0b66a6da2cf88a1b77ca96696c00289ea2297abc11ebb9bed77e31af97e2fb21c9b66484a6ffb293469a83854052e0edd0ab6d0476c0e28c76c5f7c6d3eebd4ee6cfb0b4eed66fd3e938b22654172bbdeb542a38781e2c8309652773d78675ba476a3baa60afd1cb314d9e211f01bacb2fe345578d00800ca006bf9ce5543d9fa1cd2471eaf76034afa5bfa85fb06b374eb05ebf207e800a7", 0xd7}, {&(0x7f0000000600)="d6e0bb5ac55c104d71bf8b491cba5756356d5b580138ec9f12bcfb5fcaae9f8deb6c2ac0d6127b5c29e1d550f588a6ad4a4bce575cacb422904acb6ed026f5db4bb6577b2461129c94607d148b06b7a23669b1c77e85f26ca0dc1d0b5ccac7b0835768840e7f137d4007f8a5c4257d490d90f55ac51ae3f81e59d9627648ef49e5c6d614fb", 0x85}], 0x4) r7 = syz_io_uring_setup(0xa6, &(0x7f0000000080)={0x0, 0x7a9c, 0x10, 0xffffffec, 0x44}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3f, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6002, 0x1, {0x27}}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x228000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f00000006c0)={0x5, r2, 'id1\x00'}) io_uring_enter(r7, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 1.457034413s ago: executing program 4 (id=884): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x8080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x11, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3f", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (fail_nth: 11) 1.364909211s ago: executing program 2 (id=885): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x300, 0xfffffffffffffc00}) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000001c0)={0x32, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x2b, 0x2, 0x55}, 0x2c) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000040)={0x1, 0x2, 0xffffffff, 0x4}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r6, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x177, 0x0, 0x100, 0xffffffc, {0x40, 0xd08, 0x0, 0x10000, 0x0, 0xc5, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r7, 0x906}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fchown(r4, r5, r7) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800900010068617368000000001c000280e15e2ee7ae4daf2608000440000000ac0800024000000008140000001100010000000000000000000000000a"], 0x84}}, 0x600c0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b000200000000090400070005de67000904000000ff000000a111d3a910e45ce849b04fd5fe06734f9669b7d28b3ae0129dc16c000207ddf7f3c2d6ad10b455396574ee055d40235ec3f0558a9ca8808952e03fc148f0012cfd0bd153c583abe7c162e134abd030230d28ec75caa21939d531fd29954e4fffc465a7b83b"], 0x0) 1.315038369s ago: executing program 1 (id=886): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808004000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 310.884992ms ago: executing program 1 (id=887): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181642, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=888): socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x15f}, &(0x7f0000000540)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1900, &(0x7f0000000500)={0x8c, 0x100002}, 0x20) kernel console output (not intermixed with test programs): geneve2): making interface the new active one [ 160.065483][ T7065] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 160.084675][ T988] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.174790][ T988] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.203715][ T988] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.230955][ T988] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.284534][ T1546] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 160.734440][ T1546] usb 5-1: device descriptor read/64, error -71 [ 160.964559][ T1546] usb usb5-port1: attempt power cycle [ 161.354422][ T1546] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 161.474475][ T1546] usb 5-1: device descriptor read/8, error -71 [ 161.487004][ T7082] vlan2: entered promiscuous mode [ 161.492719][ T7082] vlan2: entered allmulticast mode [ 161.501589][ T7082] hsr_slave_1: entered allmulticast mode [ 162.103507][ T1546] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 162.128792][ T1546] usb 5-1: device descriptor read/8, error -71 [ 162.295347][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 162.357341][ T1546] usb usb5-port1: unable to enumerate USB device [ 162.448405][ T24] kernel write not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 162.483051][ T7092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.329'. [ 162.813596][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 162.813610][ T30] audit: type=1400 audit(1762160575.295:577): avc: denied { getopt } for pid=7094 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.689933][ T7102] syz.2.332 (7102) used greatest stack depth: 19176 bytes left [ 163.757182][ T30] audit: type=1400 audit(1762160575.595:578): avc: denied { firmware_load } for pid=7094 comm="syz.2.332" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 165.461802][ T7126] lo speed is unknown, defaulting to 1000 [ 165.641438][ T30] audit: type=1400 audit(1762160578.075:579): avc: denied { ioctl } for pid=7131 comm="syz.2.340" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.475000][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.898605][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.935503][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.973623][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 166.996509][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.035797][ T24] usb 1-1: config 0 descriptor?? [ 167.430685][ T1546] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.434613][ T30] audit: type=1400 audit(1762160579.905:580): avc: denied { getopt } for pid=7157 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.457888][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.694560][ T30] audit: type=1400 audit(1762160579.905:581): avc: denied { read } for pid=7157 comm="syz.1.347" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 167.732916][ T30] audit: type=1400 audit(1762160579.905:582): avc: denied { open } for pid=7157 comm="syz.1.347" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 167.875380][ T1546] usb 5-1: Using ep0 maxpacket: 16 [ 167.894145][ T1546] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 167.905873][ T1546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.934381][ T1546] usb 5-1: Product: syz [ 167.954612][ T1546] usb 5-1: Manufacturer: syz [ 167.964425][ T1546] usb 5-1: SerialNumber: syz [ 167.975088][ T1546] usb 5-1: config 0 descriptor?? [ 167.993816][ T1546] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 168.540255][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 168.573009][ T30] audit: type=1326 audit(1762160581.055:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 168.587190][ T7180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.596333][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.596605][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 168.639308][ T1546] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 168.648370][ T30] audit: type=1326 audit(1762160581.055:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 168.672410][ T1546] visor 5-1:0.0: probe with driver visor failed with error -71 [ 168.682716][ T1546] usb 5-1: USB disconnect, device number 9 [ 168.711919][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 168.719078][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 168.775449][ T24] usb 1-1: USB disconnect, device number 4 [ 168.784759][ T30] audit: type=1326 audit(1762160581.105:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a4db8d810 code=0x7ffc0000 [ 168.807957][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.817020][ T7176] geneve3: entered promiscuous mode [ 168.822217][ T7176] geneve3: entered allmulticast mode [ 168.944225][ T30] audit: type=1326 audit(1762160581.105:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.040521][ T30] audit: type=1326 audit(1762160581.105:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.064975][ T30] audit: type=1326 audit(1762160581.115:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.156317][ T30] audit: type=1326 audit(1762160581.115:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.179543][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.205397][ T30] audit: type=1326 audit(1762160581.115:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.228610][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.235261][ T30] audit: type=1326 audit(1762160581.115:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 169.258448][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.215850][ T30] audit: type=1326 audit(1762160581.115:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7154 comm="syz.4.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 172.206617][ T7203] fuse: Invalid rootmode [ 172.237893][ T7203] lo speed is unknown, defaulting to 1000 [ 174.445497][ T7197] syz.0.353 (7197): drop_caches: 2 [ 174.598616][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 174.598632][ T30] audit: type=1400 audit(1762160587.085:645): avc: denied { wake_alarm } for pid=7225 comm="syz.0.364" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.751895][ T7227] syzkaller0: entered promiscuous mode [ 174.757556][ T7227] syzkaller0: entered allmulticast mode [ 174.894915][ T30] audit: type=1326 audit(1762160843.375:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 174.918176][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.093133][ T30] audit: type=1326 audit(1762160843.375:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.122798][ T30] audit: type=1326 audit(1762160843.375:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.146535][ T5925] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 175.157478][ T30] audit: type=1326 audit(1762160843.375:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.188392][ T30] audit: type=1326 audit(1762160843.375:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.214017][ T30] audit: type=1326 audit(1762160843.375:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.237280][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.245141][ T30] audit: type=1326 audit(1762160843.375:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.268361][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.275654][ T30] audit: type=1326 audit(1762160843.385:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.314850][ T30] audit: type=1326 audit(1762160843.385:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x7ffc0000 [ 175.338076][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.354006][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.007484][ T5925] usb 5-1: unable to read config index 0 descriptor/all [ 176.014598][ T5925] usb 5-1: can't read configurations, error -71 [ 176.763957][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.884450][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.934735][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.577149][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.590634][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.052357][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.065625][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.075889][ T5925] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 179.085201][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.093203][ T5925] usb 3-1: Product: syz [ 179.099650][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.110146][ T5925] usb 3-1: Manufacturer: syz [ 179.115711][ T5887] usb 4-1: config 0 descriptor?? [ 179.120851][ T5925] usb 3-1: SerialNumber: syz [ 179.131453][ T5925] usb 3-1: config 0 descriptor?? [ 179.224475][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 179.374428][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 179.381759][ T24] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 179.390940][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.400961][ T24] usb 2-1: config 0 descriptor?? [ 179.411421][ T24] as10x_usb: device has been detected [ 179.417669][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 179.434888][ T24] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 179.455923][ T24] as10x_usb: error during firmware upload part1 [ 179.462532][ T24] Registered device nBox DVB-T Dongle [ 179.596079][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 179.609499][ T24] usb 2-1: USB disconnect, device number 12 [ 179.611561][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 179.627423][ T5887] usb 4-1: USB disconnect, device number 11 [ 179.629572][ T24] Unregistered device nBox DVB-T Dongle [ 179.636399][ T24] as10x_usb: device has been disconnected [ 179.851372][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 179.851387][ T30] audit: type=1400 audit(1762160848.335:660): avc: denied { connect } for pid=7280 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.879141][ T7281] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 179.888730][ T7281] audit: out of memory in audit_log_start [ 179.895479][ T30] audit: type=1400 audit(1762160848.385:661): avc: denied { getopt } for pid=7280 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.020160][ T30] audit: type=1400 audit(1762160848.505:662): avc: denied { ioctl } for pid=7285 comm="syz.4.381" path="socket:[15656]" dev="sockfs" ino=15656 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.023740][ T7287] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 180.066480][ T7287] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 180.129373][ T30] audit: type=1400 audit(1762160848.615:663): avc: denied { create } for pid=7285 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.150160][ T30] audit: type=1400 audit(1762160848.615:664): avc: denied { connect } for pid=7285 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.169664][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.210920][ T30] audit: type=1400 audit(1762160848.615:665): avc: denied { write } for pid=7285 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.349873][ T5925] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 180.365209][ T7287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.380023][ T5925] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 180.401402][ T5925] usb 3-1: USB disconnect, device number 6 [ 180.421823][ T5925] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 180.453543][ T7299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7299 comm=syz.1.384 [ 180.486708][ T5925] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 180.610250][ T7303] lo speed is unknown, defaulting to 1000 [ 181.014702][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.081708][ T30] audit: type=1400 audit(1762160849.565:666): avc: denied { create } for pid=7307 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.101085][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.362991][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 181.473481][ T30] audit: type=1400 audit(1762160849.665:667): avc: denied { read } for pid=7307 comm="syz.0.387" path="socket:[15836]" dev="sockfs" ino=15836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.546026][ T24] usb 2-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 181.604040][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.681890][ T7318] mmap: syz.3.389 (7318) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.779017][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.789046][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.802646][ T24] usb 2-1: Product: 䕴盨汅呦跳寺墀ꗛ峙妧è­ï‹¨îµ½ãœ«î¥•á™á”²é‹†å¯®ç‚‡ [ 181.895165][ T24] usb 2-1: Manufacturer: 塷ዤ鴆ᣅ볚㒄å¬æ´¿æŒ¨ã’·é½Ê¡è²¤î¦ŒïŸå•á“‹éª‡éŽŸî•…ᔔಊꌳ玃⇨穚걮Ӣ쀌ꆖ⨚앟훪䫯췚æ¨ã¡Ÿä‰¤ä…‚醭잺⬺㙆䚷 [ 182.075281][ T24] usb 2-1: SerialNumber: 痢߯ê¨ê‘ºì”é™å¡‡á–œà¶ºåŒ›î·µï›¸à«·ì£›æ °ê²’훗觺⭪㜾渺㎗帒⺹ç«á‰‘陵庰浔攨输塀ꀴá±â¤¶íœë¬¦â´„敉䷜竓覌ãšåš¹ [ 183.093242][ T7329] CUSE: DEVNAME unspecified [ 183.424466][ T5886] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 183.521776][ T24] usb 2-1: 0:2 : does not exist [ 183.551666][ T24] usb 2-1: USB disconnect, device number 13 [ 183.577294][ T5886] usb 4-1: device descriptor read/64, error -71 [ 183.745688][ T7343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.846362][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.854431][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.004479][ T5886] usb 4-1: device descriptor read/64, error -71 [ 184.036096][ T5863] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 184.044553][ T5863] usb 1-1: config 0 has no interface number 0 [ 184.061157][ T5863] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 184.118513][ T5886] usb usb4-port1: attempt power cycle [ 184.124009][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.146457][ T5863] usb 1-1: Product: syz [ 184.163311][ T5863] usb 1-1: Manufacturer: syz [ 184.193386][ T5863] usb 1-1: SerialNumber: syz [ 184.214241][ T5863] usb 1-1: config 0 descriptor?? [ 184.409101][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 184.430920][ T56] usb 1-1: USB disconnect, device number 5 [ 184.484567][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.507166][ T5886] usb 4-1: device descriptor read/8, error -71 [ 184.539845][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 184.654456][ T5863] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 184.754428][ T5886] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.885724][ T5871] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 185.283929][ T5886] usb 4-1: device descriptor read/8, error -71 [ 185.297970][ T5863] usb 3-1: not running at top speed; connect to a high speed hub [ 185.313702][ T5863] usb 3-1: config 186 has an invalid interface number: 40 but max is 0 [ 185.323126][ T5863] usb 3-1: config 186 has no interface number 0 [ 185.329524][ T5863] usb 3-1: config 186 interface 40 has no altsetting 0 [ 185.340735][ T5863] usb 3-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=73.53 [ 185.350082][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.360073][ T5863] usb 3-1: Product: syz [ 185.364434][ T5863] usb 3-1: Manufacturer: syz [ 185.369068][ T5863] usb 3-1: SerialNumber: syz [ 185.405166][ T5886] usb usb4-port1: unable to enumerate USB device [ 185.446639][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.455006][ T5871] usb 5-1: not running at top speed; connect to a high speed hub [ 185.463895][ T5871] usb 5-1: config 56 has an invalid interface number: 90 but max is 0 [ 185.475848][ T5871] usb 5-1: config 56 has no interface number 0 [ 185.481221][ T7368] FAULT_INJECTION: forcing a failure. [ 185.481221][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.482534][ T5871] usb 5-1: config 56 interface 90 has no altsetting 0 [ 185.562161][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(full) [ 185.562186][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.562196][ T7368] Call Trace: [ 185.562201][ T7368] [ 185.562208][ T7368] dump_stack_lvl+0x16c/0x1f0 [ 185.562238][ T7368] should_fail_ex+0x512/0x640 [ 185.562261][ T7368] _copy_to_user+0x32/0xd0 [ 185.562283][ T7368] simple_read_from_buffer+0xcb/0x170 [ 185.562312][ T7368] proc_fail_nth_read+0x197/0x240 [ 185.562332][ T7368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.562354][ T7368] ? rw_verify_area+0xcf/0x6c0 [ 185.562378][ T7368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.562397][ T7368] vfs_read+0x1e4/0xcf0 [ 185.562415][ T7368] ? __pfx___mutex_lock+0x10/0x10 [ 185.562430][ T7368] ? __pfx_vfs_read+0x10/0x10 [ 185.562453][ T7368] ? __fget_files+0x20e/0x3c0 [ 185.562476][ T7368] ksys_read+0x12a/0x250 [ 185.562491][ T7368] ? __pfx_ksys_read+0x10/0x10 [ 185.562506][ T7368] ? fput+0x9b/0xd0 [ 185.562530][ T7368] do_syscall_64+0xcd/0xfa0 [ 185.562557][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.562575][ T7368] RIP: 0033:0x7fbd27d8d9dc [ 185.562588][ T7368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.562603][ T7368] RSP: 002b:00007fbd28c9b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.562620][ T7368] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8d9dc [ 185.562629][ T7368] RDX: 000000000000000f RSI: 00007fbd28c9b0a0 RDI: 0000000000000005 [ 185.562638][ T7368] RBP: 00007fbd28c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.562646][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.562653][ T7368] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffdefb82158 [ 185.562672][ T7368] [ 185.781119][ T5863] igorplugusb 3-1:186.40: endpoint incorrect [ 185.790009][ T5863] usb 3-1: USB disconnect, device number 7 [ 185.809190][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 185.819479][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 185.833030][ T5871] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e [ 185.844536][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.852520][ T5871] usb 5-1: Product: syz [ 185.857148][ T5871] usb 5-1: Manufacturer: syz [ 185.861720][ T5871] usb 5-1: SerialNumber: syz [ 187.202254][ T7396] netlink: 'syz.0.412': attribute type 3 has an invalid length. [ 187.491319][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 187.491354][ T30] audit: type=1400 audit(1762160855.975:675): avc: denied { mount } for pid=7389 comm="syz.1.413" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.525029][ T7390] tmpfs: Cannot enable quota on remount [ 187.591552][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 187.616492][ T5871] mos7840 5-1:56.90: required endpoints missing [ 187.735113][ T5871] usb 5-1: USB disconnect, device number 12 [ 187.749611][ T30] audit: type=1400 audit(1762160856.145:676): avc: denied { ioctl } for pid=7407 comm="syz.4.418" path="socket:[15350]" dev="sockfs" ino=15350 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.834547][ T5863] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.134631][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 188.229373][ T5863] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 188.254721][ T5863] usb 4-1: config 0 has no interface number 0 [ 188.300255][ T5863] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 188.332188][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.374461][ T5863] usb 4-1: Product: syz [ 188.378808][ T7408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.418'. [ 188.391037][ T5863] usb 4-1: Manufacturer: syz [ 188.397564][ T5863] usb 4-1: SerialNumber: syz [ 188.412442][ T5863] usb 4-1: config 0 descriptor?? [ 188.423468][ T5863] smsc95xx v2.0.0 [ 188.651494][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 188.681538][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 188.704855][ T5863] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 188.726063][ T5863] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 188.741019][ T30] audit: type=1400 audit(1762160857.225:677): avc: denied { write } for pid=7433 comm="syz.3.423" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 188.742458][ T5863] usb 4-1: USB disconnect, device number 16 [ 189.656740][ T30] audit: type=1400 audit(1762160858.145:678): avc: denied { ioctl } for pid=7444 comm="syz.0.425" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 189.984709][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.339257][ T30] audit: type=1400 audit(190.316:679): avc: denied { create } for pid=7451 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.044888][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 191.051748][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.058693][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 191.062878][ T7457] bridge_slave_0: left allmulticast mode [ 191.064873][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 191.071111][ T7457] bridge_slave_0: left promiscuous mode [ 191.076642][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 191.107379][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.218694][ T7457] bridge_slave_1: left allmulticast mode [ 191.237717][ T30] audit: type=1400 audit(191.216:680): avc: denied { ioctl } for pid=7456 comm="syz.2.429" path="socket:[16571]" dev="sockfs" ino=16571 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.254028][ T7457] bridge_slave_1: left promiscuous mode [ 191.356737][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.509740][ T7457] bond0: (slave bond_slave_0): Releasing backup interface [ 192.045737][ T5925] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 192.250577][ T7457] bond0: (slave bond_slave_1): Releasing backup interface [ 192.288857][ T7457] team0: Port device team_slave_0 removed [ 192.302298][ T30] audit: type=1400 audit(192.276:681): avc: denied { connect } for pid=7474 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 192.336938][ T7457] team0: Port device team_slave_1 removed [ 192.353651][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.364777][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.375614][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.384141][ T5925] usb 3-1: not running at top speed; connect to a high speed hub [ 192.395335][ T5925] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 192.405673][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.413088][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.422435][ T5925] usb 3-1: config 129 has no interface number 0 [ 192.429184][ T5925] usb 3-1: config 129 interface 28 has no altsetting 0 [ 192.438936][ T5925] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 192.448941][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.459263][ T7457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.478482][ T5925] usb 3-1: Product: syz [ 192.483877][ T5925] usb 3-1: Manufacturer: syz [ 192.495621][ T5925] usb 3-1: SerialNumber: syz [ 192.671542][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 192.883254][ T5925] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 192.909796][ T5925] usb 3-1: USB disconnect, device number 8 [ 193.286040][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 193.954804][ T5887] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.094933][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.101276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.204450][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 194.211313][ T5887] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 194.223927][ T5887] usb 5-1: config 0 has no interface number 0 [ 194.255296][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.279984][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 194.452103][ T5887] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.463916][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.478765][ T5887] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 194.488397][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.102107][ T5887] usb 5-1: config 0 descriptor?? [ 195.124484][ T5887] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 196.397460][ T56] usb 5-1: USB disconnect, device number 13 [ 196.408729][ T56] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 196.860130][ T30] audit: type=1400 audit(196.836:682): avc: denied { getopt } for pid=7566 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.773627][ T30] audit: type=1400 audit(197.746:683): avc: denied { setopt } for pid=7574 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.044542][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.925666][ T7586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.462'. [ 198.935657][ T7586] 8021q: VLANs not supported on vcan0 [ 198.969358][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 198.993493][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.037420][ T5925] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 199.064753][ T7595] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 199.135043][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.144898][ T5925] usb 2-1: Product: syz [ 199.149100][ T5925] usb 2-1: Manufacturer: syz [ 199.153698][ T5925] usb 2-1: SerialNumber: syz [ 199.165027][ T5925] usb 2-1: config 0 descriptor?? [ 199.186409][ T7595] bond0: entered promiscuous mode [ 199.194170][ T5925] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 199.200937][ T7595] bond0: entered allmulticast mode [ 199.238449][ T5925] usb 2-1: selecting invalid altsetting 1 [ 199.254499][ T5863] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 199.358951][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.464'. [ 199.485690][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.491311][ T7596] bond0: (slave ip6gretap1): making interface the new active one [ 199.532006][ T5863] usb 5-1: not running at top speed; connect to a high speed hub [ 199.558418][ T7596] ip6gretap1: entered promiscuous mode [ 199.694782][ T5863] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 199.716008][ T5824] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 199.723361][ T5824] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 199.732623][ T7596] ip6gretap1: entered allmulticast mode [ 199.738788][ T5863] usb 5-1: config 1 has no interface number 0 [ 199.770862][ T7596] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 199.790847][ T5863] usb 5-1: config 1 interface 138 has no altsetting 0 [ 199.822701][ T7599] bond0: left promiscuous mode [ 199.827871][ T7599] ip6gretap1: left promiscuous mode [ 199.830448][ T5863] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 199.833295][ T7599] bond0: left allmulticast mode [ 199.847592][ T7599] ip6gretap1: left allmulticast mode [ 199.856128][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.864628][ T5925] gspca_stk014: reg_r err -110 [ 199.869473][ T5925] stk014 2-1:0.0: probe with driver stk014 failed with error -110 [ 199.902281][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.951490][ T5863] usb 5-1: Product: syz [ 199.972580][ T5863] usb 5-1: Manufacturer: syz [ 200.001447][ T5863] usb 5-1: SerialNumber: syz [ 200.041944][ T30] audit: type=1400 audit(200.006:684): avc: denied { connect } for pid=7605 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.068524][ T7611] overlayfs: missing 'lowerdir' [ 200.795496][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 200.959676][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.100685][ T5863] usb 5-1: USB disconnect, device number 14 [ 202.371369][ T7630] netlink: 'syz.0.471': attribute type 13 has an invalid length. [ 202.477531][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.489496][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.497379][ T5134] Bluetooth: hci4: command 0x0405 tx timeout [ 202.503464][ T30] audit: type=1400 audit(202.456:685): avc: denied { ioctl } for pid=7628 comm="syz.0.471" path="socket:[17682]" dev="sockfs" ino=17682 ioctlcmd=0x4803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 202.744058][ T1546] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 203.055009][ T1546] usb 1-1: device descriptor read/64, error -71 [ 203.414650][ T1546] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 203.514034][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.521859][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.764507][ T1546] usb 1-1: device descriptor read/64, error -71 [ 203.886367][ T1546] usb usb1-port1: attempt power cycle [ 204.264525][ T1546] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 204.287864][ T1546] usb 1-1: device descriptor read/8, error -71 [ 204.524580][ T1546] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 204.556995][ T1546] usb 1-1: device descriptor read/8, error -71 [ 204.602779][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.660064][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.704622][ T1546] usb usb1-port1: unable to enumerate USB device [ 204.833702][ T1546] usb 2-1: USB disconnect, device number 14 [ 204.946363][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.966892][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.006379][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.040820][ T7645] 9pnet_virtio: no channels available for device syz [ 205.172302][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.825891][ T7653] overlay: Unknown parameter 'obj_user' [ 206.184625][ T1546] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 206.904927][ T1546] usb 3-1: too many configurations: 235, using maximum allowed: 8 [ 206.914019][ T1546] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 206.922285][ T1546] usb 3-1: can't read configurations, error -61 [ 207.144392][ T1546] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.315359][ T1546] usb 3-1: too many configurations: 235, using maximum allowed: 8 [ 207.455765][ T1546] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 207.474739][ T1546] usb 3-1: can't read configurations, error -61 [ 207.986772][ T1546] usb usb3-port1: attempt power cycle [ 208.384694][ T1546] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.477538][ T1546] usb 3-1: too many configurations: 235, using maximum allowed: 8 [ 208.505384][ T1546] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 208.514439][ T1546] usb 3-1: can't read configurations, error -61 [ 208.574491][ T5871] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 208.613543][ T7691] usb usb8: usbfs: process 7691 (syz.4.489) did not claim interface 0 before use [ 208.664427][ T1546] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 208.867715][ T5871] usb 1-1: Invalid ep0 maxpacket: 16 [ 208.957724][ T1546] usb 3-1: device descriptor read/8, error -71 [ 209.118506][ T5871] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 209.306773][ T1546] usb usb3-port1: unable to enumerate USB device [ 209.376790][ T7700] openvswitch: netlink: Message has 580 unknown bytes. [ 209.384647][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.486805][ T5871] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.504760][ T5871] usb usb1-port1: attempt power cycle [ 209.548612][ T7705] input: syz1 as /devices/virtual/input/input12 [ 210.114636][ T30] audit: type=1400 audit(210.056:686): avc: denied { name_connect } for pid=7718 comm="syz.2.498" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 210.161263][ T7720] overlayfs: workdir and upperdir must be separate subtrees [ 210.204646][ T1546] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 210.214219][ T5871] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 210.272686][ T5871] usb 1-1: Invalid ep0 maxpacket: 16 [ 210.550850][ T5871] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 210.766348][ T1546] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 210.774827][ T1546] usb 5-1: config 8 has no interface number 0 [ 210.781130][ T1546] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 210.792306][ T5871] usb 1-1: Invalid ep0 maxpacket: 16 [ 210.798368][ T5871] usb usb1-port1: unable to enumerate USB device [ 210.806566][ T1546] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 210.838925][ T1546] usb 5-1: config 8 interface 177 has no altsetting 0 [ 210.853486][ T1546] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 210.871790][ T1546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.893541][ T7710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.005024][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 211.252290][ T1546] usb 5-1: string descriptor 0 read error: -71 [ 211.272330][ T1546] ir_toy 5-1:8.177: required endpoints not found [ 211.285792][ T1546] usb 5-1: USB disconnect, device number 15 [ 211.586893][ T30] audit: type=1326 audit(211.556:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7744 comm="syz.0.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8efc9 code=0x0 [ 212.079498][ T7752] binder: 7747:7752 ioctl c0189374 200000000240 returned -22 [ 212.861682][ T30] audit: type=1400 audit(212.836:688): avc: denied { execute } for pid=7760 comm="syz.3.512" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 212.901741][ T30] audit: type=1400 audit(212.836:689): avc: denied { ioctl } for pid=7757 comm="syz.0.510" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 213.249280][ T7770] tipc: Started in network mode [ 213.256993][ T7770] tipc: Node identity 4a51d9ac26b4, cluster identity 4711 [ 213.264642][ T7770] tipc: Enabled bearer , priority 0 [ 213.283241][ T7770] syzkaller0: entered promiscuous mode [ 213.293700][ T7770] syzkaller0: entered allmulticast mode [ 213.301806][ T30] audit: type=1400 audit(213.266:690): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 213.326546][ T7772] tipc: Started in network mode [ 213.336270][ T7772] tipc: Node identity eaab90024fec, cluster identity 4711 [ 213.345540][ T7772] tipc: Enabled bearer , priority 0 [ 213.361479][ T7772] syzkaller0: entered promiscuous mode [ 213.369581][ T7772] syzkaller0: entered allmulticast mode [ 213.385698][ T7770] tipc: Resetting bearer [ 213.403040][ T7769] tipc: Resetting bearer [ 213.404998][ T7772] FAULT_INJECTION: forcing a failure. [ 213.404998][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 213.421742][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(full) [ 213.421766][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.421776][ T7772] Call Trace: [ 213.421783][ T7772] [ 213.421789][ T7772] dump_stack_lvl+0x16c/0x1f0 [ 213.421818][ T7772] should_fail_ex+0x512/0x640 [ 213.421837][ T7772] ? fs_reclaim_acquire+0xae/0x150 [ 213.421854][ T7772] should_failslab+0xc2/0x120 [ 213.421870][ T7772] __kmalloc_noprof+0xdd/0x880 [ 213.421892][ T7772] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 213.421914][ T7772] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 213.421930][ T7772] tomoyo_realpath_from_path+0xc2/0x6e0 [ 213.421950][ T7772] ? tomoyo_profile+0x47/0x60 [ 213.421974][ T7772] tomoyo_path_number_perm+0x245/0x580 [ 213.421996][ T7772] ? tomoyo_path_number_perm+0x237/0x580 [ 213.422014][ T7772] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.422032][ T7772] ? find_held_lock+0x2b/0x80 [ 213.422058][ T7772] ? find_held_lock+0x2b/0x80 [ 213.422070][ T7772] ? hook_file_ioctl_common+0x145/0x410 [ 213.422088][ T7772] ? __fget_files+0x20e/0x3c0 [ 213.422101][ T7772] security_file_ioctl+0x9b/0x240 [ 213.422114][ T7772] __x64_sys_ioctl+0xb7/0x210 [ 213.422131][ T7772] do_syscall_64+0xcd/0xfa0 [ 213.422148][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.422159][ T7772] RIP: 0033:0x7f841478efc9 [ 213.422168][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.422178][ T7772] RSP: 002b:00007f84156bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.422189][ T7772] RAX: ffffffffffffffda RBX: 00007f84149e5fa0 RCX: 00007f841478efc9 [ 213.422197][ T7772] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 213.422203][ T7772] RBP: 00007f84156bf090 R08: 0000000000000000 R09: 0000000000000000 [ 213.422209][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.422215][ T7772] R13: 00007f84149e6038 R14: 00007f84149e5fa0 R15: 00007fff0c0fefc8 [ 213.422229][ T7772] [ 213.422267][ T7772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.647241][ T7769] tipc: Disabling bearer [ 213.657576][ T7772] tipc: Resetting bearer [ 213.667000][ T7771] tipc: Resetting bearer [ 213.680828][ T7771] tipc: Disabling bearer [ 214.139735][ T7785] xt_hashlimit: invalid rate [ 215.253080][ T7798] fuse: Unknown parameter 'Zd' [ 215.253186][ T30] audit: type=1400 audit(215.226:691): avc: denied { mounton } for pid=7797 comm="syz.1.523" path="/101/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.504380][ T30] audit: type=1400 audit(215.446:692): avc: denied { setattr } for pid=7797 comm="syz.1.523" name="file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.671739][ T30] audit: type=1400 audit(215.446:693): avc: denied { read write } for pid=7797 comm="syz.1.523" name="file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.699464][ T30] audit: type=1400 audit(215.446:694): avc: denied { open } for pid=7797 comm="syz.1.523" path="/101/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.802664][ T30] audit: type=1400 audit(215.696:695): avc: denied { read } for pid=7811 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.823687][ T30] audit: type=1326 audit(215.776:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 216.614439][ T30] audit: type=1326 audit(215.776:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 216.637288][ T30] audit: type=1326 audit(215.776:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 216.660909][ T30] audit: type=1326 audit(215.776:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 216.684059][ T30] audit: type=1326 audit(215.776:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.4.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 216.931667][ T7822] uprobe: syz.1.528:7822 failed to unregister, leaking uprobe [ 217.082463][ T7832] Bluetooth: MGMT ver 1.23 [ 217.097615][ T7831] netlink: 56 bytes leftover after parsing attributes in process `syz.3.529'. [ 217.272289][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.532'. [ 217.549963][ T56] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.139118][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 218.526277][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.550379][ T56] usb 2-1: New USB device found, idVendor=d575, idProduct=8f3b, bcdDevice=82.88 [ 218.889128][ T56] usb 2-1: New USB device strings: Mfr=141, Product=3, SerialNumber=3 [ 219.079577][ T56] usb 2-1: Product: syz [ 219.083820][ T56] usb 2-1: Manufacturer: syz [ 219.089902][ T56] usb 2-1: SerialNumber: syz [ 219.096877][ T56] usb 2-1: config 0 descriptor?? [ 219.105668][ T56] cdc_wdm 2-1:0.0: probe with driver cdc_wdm failed with error -22 [ 219.124437][ T5824] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 219.137058][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 219.232633][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.240646][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.678718][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 220.888131][ T7881] No such timeout policy "syz1" [ 221.016518][ T24] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 221.026055][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.036911][ T24] usb 3-1: config 0 descriptor?? [ 221.231966][ T5824] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 221.232731][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 221.294438][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 221.294457][ T30] audit: type=1400 audit(221.116:745): avc: denied { audit_write } for pid=7880 comm="syz.3.541" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 221.321014][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.659028][ T24] gspca_main: mars-2.14.0 probing 093a:050f [ 221.840804][ T24] usb 3-1: USB disconnect, device number 13 [ 221.964670][ T5871] usb 2-1: USB disconnect, device number 15 [ 223.100226][ T7903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7903 comm=syz.2.545 [ 223.123946][ T7899] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 223.229316][ T7899] bond1: (slave bridge1): making interface the new active one [ 223.324943][ T7899] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 225.926741][ T7922] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 225.934817][ T7922] xt_nfacct: accounting object `syz1' does not exist [ 226.004710][ T7899] netlink: 156 bytes leftover after parsing attributes in process `syz.2.545'. [ 226.106195][ T7903] tty tty2: ldisc open failed (-12), clearing slot 1 [ 226.304172][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.360877][ T7932] delete_channel: no stack [ 226.427616][ T30] audit: type=1400 audit(226.406:746): avc: denied { setopt } for pid=7929 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.062075][ T5824] Bluetooth: hci3: unexpected event for opcode 0x040d [ 227.239339][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.246967][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.512617][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.577923][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.320067][ T7962] tipc: Enabled bearer , priority 0 [ 229.324045][ T7993] FAULT_INJECTION: forcing a failure. [ 229.324045][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 229.339713][ T7993] CPU: 0 UID: 0 PID: 7993 Comm: syz.2.565 Not tainted syzkaller #0 PREEMPT(full) [ 229.339728][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.339734][ T7993] Call Trace: [ 229.339738][ T7993] [ 229.339743][ T7993] dump_stack_lvl+0x16c/0x1f0 [ 229.339764][ T7993] should_fail_ex+0x512/0x640 [ 229.339779][ T7993] should_failslab+0xc2/0x120 [ 229.339792][ T7993] __kmalloc_noprof+0xdd/0x880 [ 229.339807][ T7993] ? sk_prot_alloc+0x1a8/0x2a0 [ 229.339826][ T7993] ? sk_prot_alloc+0x1a8/0x2a0 [ 229.339841][ T7993] sk_prot_alloc+0x1a8/0x2a0 [ 229.339858][ T7993] sk_alloc+0x36/0xc20 [ 229.339871][ T7993] bt_sock_alloc+0x3b/0x3a0 [ 229.339887][ T7993] hci_sock_create+0xbc/0x1a0 [ 229.339903][ T7993] bt_sock_create+0x185/0x350 [ 229.339918][ T7993] __sock_create+0x338/0x8d0 [ 229.339930][ T7993] __sys_socket+0x14d/0x260 [ 229.339940][ T7993] ? __x64_sys_openat+0x174/0x210 [ 229.339954][ T7993] ? __pfx___sys_socket+0x10/0x10 [ 229.339963][ T7993] ? ksys_write+0x1ac/0x250 [ 229.339976][ T7993] __x64_sys_socket+0x72/0xb0 [ 229.339986][ T7993] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.340002][ T7993] do_syscall_64+0xcd/0xfa0 [ 229.340019][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.340029][ T7993] RIP: 0033:0x7f37e738efc9 [ 229.340039][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.340049][ T7993] RSP: 002b:00007f37e828bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 229.340059][ T7993] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f37e738efc9 [ 229.340066][ T7993] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 229.340072][ T7993] RBP: 00007f37e828c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.340078][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.340083][ T7993] R13: 00007f37e75e6038 R14: 00007f37e75e5fa0 R15: 00007ffefc93df78 [ 229.340097][ T7993] [ 229.347555][ T7965] syzkaller0: entered promiscuous mode [ 229.525800][ T30] audit: type=1400 audit(229.486:747): avc: denied { create } for pid=8000 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 229.532250][ T7965] syzkaller0: entered allmulticast mode [ 229.578086][ T7117] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.584844][ T30] audit: type=1400 audit(229.496:748): avc: denied { sys_admin } for pid=8000 comm="syz.2.567" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 229.627679][ T7117] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.666769][ T7965] tipc: Resetting bearer [ 229.715324][ T7965] tipc: Disabling bearer [ 229.739283][ T7117] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.749651][ T7117] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.771280][ T8002] lo speed is unknown, defaulting to 1000 [ 230.294468][ T5824] Bluetooth: hci4: unexpected event for opcode 0x040d [ 230.350656][ T8023] netlink: 'syz.3.570': attribute type 21 has an invalid length. [ 230.358685][ T8023] netlink: 156 bytes leftover after parsing attributes in process `syz.3.570'. [ 230.370161][ T8023] netlink: 'syz.3.570': attribute type 21 has an invalid length. [ 230.378259][ T8023] netlink: 156 bytes leftover after parsing attributes in process `syz.3.570'. [ 230.408132][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 230.495809][ T30] audit: type=1400 audit(230.396:749): avc: denied { accept } for pid=8025 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.771049][ T8033] openvswitch: netlink: EtherType 53b is less than min 600 [ 231.044631][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 231.504502][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 231.542185][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.553366][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.581577][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 231.604129][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.676540][ T5925] usb 3-1: config 0 descriptor?? [ 231.696591][ T5925] xbox_remote_probe: endpoint_in message size==0? [ 231.951022][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 231.976892][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 231.996716][ T5925] usb 3-1: USB disconnect, device number 14 [ 232.017287][ T8049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.114545][ T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 232.325006][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.335002][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 232.369479][ T24] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 232.391189][ T24] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.455842][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 232.475957][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 232.485954][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.497629][ T24] usb 1-1: Product: syz [ 232.522671][ T24] usb 1-1: Manufacturer: syz [ 232.553388][ T24] usb 1-1: SerialNumber: syz [ 232.613467][ T8045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 232.894509][ T5925] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 233.114491][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 233.122106][ T5925] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 233.144244][ T5925] usb 2-1: config 0 has no interface number 0 [ 233.333876][ T30] audit: type=1400 audit(233.286:750): avc: denied { mount } for pid=8090 comm="syz.2.585" name="/" dev="autofs" ino=20129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.461195][ T30] audit: type=1400 audit(233.436:751): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 233.502085][ T5925] usb 2-1: config 0 interface 165 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 233.542099][ T30] audit: type=1400 audit(233.516:752): avc: denied { ioctl } for pid=8096 comm="syz.2.586" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.542389][ T5925] usb 2-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice= 5.fa [ 233.646160][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.656816][ T5925] usb 2-1: config 0 descriptor?? [ 233.726933][ T8098] loop0: detected capacity change from 0 to 524287999 [ 234.101423][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.121331][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 234.148467][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 234.385980][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 234.417605][ T24] usb 1-1: USB disconnect, device number 14 [ 234.424535][ T5168] pxrc 1-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 234.848548][ T8128] input: syz0 as /devices/virtual/input/input14 [ 234.870542][ T8128] FAULT_INJECTION: forcing a failure. [ 234.870542][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.885828][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT(full) [ 234.885853][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.885863][ T8128] Call Trace: [ 234.885869][ T8128] [ 234.885875][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 234.885908][ T8128] should_fail_ex+0x512/0x640 [ 234.885932][ T8128] _copy_from_user+0x2e/0xd0 [ 234.885955][ T8128] input_event_from_user+0x133/0x3b0 [ 234.885982][ T8128] ? __pfx_input_event_from_user+0x10/0x10 [ 234.886007][ T8128] ? __pfx___might_resched+0x10/0x10 [ 234.886030][ T8128] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.886055][ T8128] ? input_event+0xb6/0xd0 [ 234.886080][ T8128] uinput_write+0xbb4/0x12b0 [ 234.886105][ T8128] ? __pfx_uinput_write+0x10/0x10 [ 234.886125][ T8128] ? bpf_lsm_file_permission+0x9/0x10 [ 234.886142][ T8128] ? security_file_permission+0x71/0x210 [ 234.886165][ T8128] ? rw_verify_area+0xcf/0x6c0 [ 234.886192][ T8128] ? __pfx_uinput_write+0x10/0x10 [ 234.886209][ T8128] vfs_write+0x2a0/0x11d0 [ 234.886231][ T8128] ? __pfx_vfs_write+0x10/0x10 [ 234.886245][ T8128] ? find_held_lock+0x2b/0x80 [ 234.886269][ T8128] ? __fget_files+0x204/0x3c0 [ 234.886291][ T8128] ? __fget_files+0x20e/0x3c0 [ 234.886315][ T8128] ksys_write+0x1f8/0x250 [ 234.886331][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 234.886355][ T8128] do_syscall_64+0xcd/0xfa0 [ 234.886383][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.886400][ T8128] RIP: 0033:0x7f4a4db8efc9 [ 234.886414][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.886431][ T8128] RSP: 002b:00007f4a4bdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.886446][ T8128] RAX: ffffffffffffffda RBX: 00007f4a4dde5fa0 RCX: 00007f4a4db8efc9 [ 234.886457][ T8128] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000004 [ 234.886467][ T8128] RBP: 00007f4a4bdee090 R08: 0000000000000000 R09: 0000000000000000 [ 234.886477][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.886486][ T8128] R13: 00007f4a4dde6038 R14: 00007f4a4dde5fa0 R15: 00007ffc31e1c8b8 [ 234.886512][ T8128] [ 235.141035][ T8131] fuse: Bad value for 'fd' [ 235.227087][ T30] audit: type=1400 audit(235.206:753): avc: denied { getopt } for pid=8134 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.394627][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.598837][ T24] usb 4-1: config index 0 descriptor too short (expected 54, got 18) [ 235.622347][ T24] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 235.639972][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.671667][ T5925] usb 2-1: USB disconnect, device number 16 [ 235.678725][ T24] usb 4-1: Product: syz [ 235.682880][ T24] usb 4-1: Manufacturer: syz [ 235.709199][ T24] usb 4-1: SerialNumber: syz [ 235.726590][ T24] usb 4-1: config 0 descriptor?? [ 235.961277][ T24] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 236.103541][ T24] usb 4-1: USB disconnect, device number 17 [ 236.402086][ T56] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 236.792486][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.027565][ T56] usb 1-1: not running at top speed; connect to a high speed hub [ 237.043822][ T56] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 237.055593][ T56] usb 1-1: config 129 has no interface number 0 [ 237.082749][ T56] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 237.164748][ T56] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 237.177004][ T56] usb 1-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.194025][ T56] usb 1-1: config 129 interface 28 has no altsetting 0 [ 237.225767][ T56] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 237.246747][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.256009][ T56] usb 1-1: Product: syz [ 237.260254][ T56] usb 1-1: Manufacturer: syz [ 237.265204][ T56] usb 1-1: SerialNumber: syz [ 237.274601][ T8146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.444412][ T5925] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 237.444466][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.460226][ T8166] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.602'. [ 238.568056][ T56] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 238.576835][ T56] etas_es58x 1-1:129.28: could not retrieve the product info string [ 238.633620][ T56] usb 1-1: USB disconnect, device number 15 [ 238.641543][ T56] etas_es58x 1-1:129.28: Disconnecting syz syz [ 238.734349][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.746020][ T24] usb 4-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 238.761534][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.771925][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.814284][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.823793][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.832271][ T5925] usb 3-1: SerialNumber: syz [ 238.832320][ T24] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 238.852871][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.863893][ T5925] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.873239][ T24] usb 4-1: config 0 descriptor?? [ 238.924425][ T5871] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 239.094444][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 239.204243][ T5871] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 239.282468][ T8170] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 239.294423][ T8170] capability: warning: `syz.3.601' uses deprecated v2 capabilities in a way that may be insecure [ 239.648057][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.657286][ T5871] usb 5-1: Product: syz [ 239.661507][ T5871] usb 5-1: Manufacturer: syz [ 239.666333][ T5871] usb 5-1: SerialNumber: syz [ 239.677955][ T5871] usb 5-1: config 0 descriptor?? [ 239.695731][ T5871] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 239.705805][ T30] audit: type=1400 audit(239.686:754): avc: denied { connect } for pid=8171 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 239.813194][ T8174] fuse: Bad value for 'fd' [ 240.182210][ T30] audit: type=1326 audit(240.156:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.206370][ T30] audit: type=1326 audit(240.156:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.230032][ T30] audit: type=1326 audit(240.156:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a4db8d810 code=0x7ffc0000 [ 240.361068][ T30] audit: type=1326 audit(240.156:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.511451][ T30] audit: type=1326 audit(240.156:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.541250][ T30] audit: type=1326 audit(240.186:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.565152][ T30] audit: type=1326 audit(240.186:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.588912][ T30] audit: type=1326 audit(240.186:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 240.596786][ T8186] netlink: 340 bytes leftover after parsing attributes in process `syz.1.608'. [ 241.140203][ T24] usb 4-1: string descriptor 0 read error: -71 [ 241.197106][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 241.239772][ T24] usb 4-1: USB disconnect, device number 18 [ 241.281538][ T30] audit: type=1326 audit(240.186:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.4.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 241.418487][ T5863] usb 3-1: USB disconnect, device number 15 [ 242.247161][ T8197] : entered promiscuous mode [ 242.326790][ T5871] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 242.334192][ T5871] visor 5-1:0.0: probe with driver visor failed with error -71 [ 242.373916][ T5871] usb 5-1: USB disconnect, device number 16 [ 242.403649][ T8212] fuse: Bad value for 'fd' [ 242.653318][ T8220] comedi comedi3: comedi_config --init_data is deprecated [ 244.208009][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 244.242626][ T8242] delete_channel: no stack [ 244.386248][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 244.400050][ T5871] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 244.410592][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.421807][ T5871] usb 5-1: Product: syz [ 244.426279][ T5871] usb 5-1: Manufacturer: syz [ 244.433694][ T5871] usb 5-1: SerialNumber: syz [ 244.450745][ T5871] usb 5-1: config 0 descriptor?? [ 244.470436][ T5871] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 244.477763][ T5925] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 244.681062][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 244.829441][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.844368][ T5925] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.872009][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.900927][ T5925] usb 2-1: config 0 descriptor?? [ 244.942057][ T1546] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 245.040524][ T1546] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.082102][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 245.082118][ T30] audit: type=1326 audit(245.056:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.243975][ T30] audit: type=1326 audit(245.056:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.276169][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 245.313321][ T30] audit: type=1326 audit(245.056:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a4db8d810 code=0x7ffc0000 [ 245.405727][ T30] audit: type=1326 audit(245.056:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.433973][ T30] audit: type=1326 audit(245.056:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.534155][ T5925] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 245.556793][ T30] audit: type=1326 audit(245.056:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.556920][ T9] usb 4-1: config 0 has no interfaces? [ 245.580332][ T30] audit: type=1326 audit(245.056:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.642723][ T30] audit: type=1326 audit(245.056:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.643596][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.756316][ T30] audit: type=1326 audit(245.056:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.781985][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.803137][ T5925] usb 2-1: USB disconnect, device number 17 [ 245.816602][ T9] usb 4-1: SerialNumber: syz [ 245.835658][ T30] audit: type=1326 audit(245.056:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.4.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4db8efc9 code=0x7ffc0000 [ 245.862223][ T9] usb 4-1: config 0 descriptor?? [ 247.654476][ T5871] usb 5-1: clie_3_5_startup: get config number failed: -110 [ 247.797126][ T5871] visor 5-1:0.0: probe with driver visor failed with error -110 [ 247.824190][ T8281] openvswitch: netlink: EtherType 53b is less than min 600 [ 247.863360][ T5871] usb 5-1: USB disconnect, device number 17 [ 247.980661][ T8284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.635'. [ 247.992710][ T8284] netlink: 56 bytes leftover after parsing attributes in process `syz.1.635'. [ 248.104385][ T5925] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.495558][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 248.502479][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 248.510407][ T5925] usb 3-1: can't read configurations, error -61 [ 248.654420][ T5925] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.824447][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 248.867094][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 248.875229][ T5925] usb 3-1: can't read configurations, error -61 [ 248.882049][ T5925] usb usb3-port1: attempt power cycle [ 248.970337][ T5824] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 248.977925][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.020806][ T5871] usb 4-1: USB disconnect, device number 19 [ 249.523193][ T5809] block nbd1: Receive control failed (result -32) [ 249.542383][ T8297] block nbd1: shutting down sockets [ 249.815076][ T5925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.905599][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 250.298481][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 250.440759][ T8322] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 250.772724][ T5925] usb 3-1: device descriptor read/all, error -71 [ 250.937104][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 250.937119][ T30] audit: type=1400 audit(250.866:787): avc: denied { execute } for pid=8318 comm="syz.3.645" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 251.383294][ T8334] FAULT_INJECTION: forcing a failure. [ 251.383294][ T8334] name failslab, interval 1, probability 0, space 0, times 0 [ 251.415933][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.1.650 Not tainted syzkaller #0 PREEMPT(full) [ 251.415959][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.415969][ T8334] Call Trace: [ 251.415975][ T8334] [ 251.415981][ T8334] dump_stack_lvl+0x16c/0x1f0 [ 251.416012][ T8334] should_fail_ex+0x512/0x640 [ 251.416032][ T8334] ? fs_reclaim_acquire+0xae/0x150 [ 251.416055][ T8334] should_failslab+0xc2/0x120 [ 251.416076][ T8334] __kmalloc_noprof+0xdd/0x880 [ 251.416100][ T8334] ? tomoyo_encode2+0x100/0x3e0 [ 251.416124][ T8334] ? tomoyo_encode2+0x100/0x3e0 [ 251.416142][ T8334] tomoyo_encode2+0x100/0x3e0 [ 251.416164][ T8334] tomoyo_encode+0x29/0x50 [ 251.416182][ T8334] tomoyo_realpath_from_path+0x18f/0x6e0 [ 251.416204][ T8334] ? tomoyo_profile+0x47/0x60 [ 251.416228][ T8334] tomoyo_path_number_perm+0x245/0x580 [ 251.416254][ T8334] ? tomoyo_path_number_perm+0x237/0x580 [ 251.416282][ T8334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.416309][ T8334] ? find_held_lock+0x2b/0x80 [ 251.416354][ T8334] ? find_held_lock+0x2b/0x80 [ 251.416372][ T8334] ? hook_file_ioctl_common+0x145/0x410 [ 251.416400][ T8334] ? __fget_files+0x20e/0x3c0 [ 251.416423][ T8334] security_file_ioctl+0x9b/0x240 [ 251.416445][ T8334] __x64_sys_ioctl+0xb7/0x210 [ 251.416471][ T8334] do_syscall_64+0xcd/0xfa0 [ 251.416505][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.416523][ T8334] RIP: 0033:0x7f7efcf8efc9 [ 251.416538][ T8334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.416554][ T8334] RSP: 002b:00007f7efddb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.416571][ T8334] RAX: ffffffffffffffda RBX: 00007f7efd1e5fa0 RCX: 00007f7efcf8efc9 [ 251.416583][ T8334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 251.416593][ T8334] RBP: 00007f7efddb3090 R08: 0000000000000000 R09: 0000000000000000 [ 251.416602][ T8334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.416612][ T8334] R13: 00007f7efd1e6038 R14: 00007f7efd1e5fa0 R15: 00007ffe237e1e08 [ 251.416638][ T8334] [ 251.416656][ T8334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.191116][ T8350] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 252.224479][ T30] audit: type=1400 audit(252.166:788): avc: denied { ioctl } for pid=8345 comm="syz.4.653" path="socket:[20935]" dev="sockfs" ino=20935 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.247229][ T8390] SELinux: failed to load policy [ 254.254876][ T30] audit: type=1400 audit(254.216:789): avc: denied { load_policy } for pid=8389 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 254.398373][ T8393] lo speed is unknown, defaulting to 1000 [ 255.544919][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.544997][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.794374][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 255.967033][ T9] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 255.976553][ T9] usb 5-1: config 5 has no interface number 0 [ 255.994450][ T9] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 256.043435][ T9] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x84 has invalid wMaxPacketSize 0 [ 256.084591][ T9] usb 5-1: config 5 interface 123 has no altsetting 0 [ 256.098323][ T9] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 256.115268][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.123305][ T9] usb 5-1: Product: syz [ 256.255201][ T5925] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.310123][ T9] usb 5-1: Manufacturer: syz [ 256.318112][ T9] usb 5-1: SerialNumber: syz [ 256.482724][ T5925] usb 3-1: config index 0 descriptor too short (expected 38445, got 45) [ 256.495850][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.522865][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.531657][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.549083][ T5925] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.566780][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.574660][ T5925] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 256.583777][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.595875][ T5925] usb 3-1: config 0 descriptor?? [ 256.774474][ T5886] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 256.824554][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 256.897197][ T9] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 256.914792][ T5886] usb 2-1: device descriptor read/64, error -71 [ 256.989204][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 257.003034][ T24] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 257.018317][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.031866][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 257.043568][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.071765][ T24] usb 4-1: config 0 descriptor?? [ 257.154700][ T5886] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 257.294624][ T5886] usb 2-1: device descriptor read/64, error -71 [ 257.436885][ T5886] usb usb2-port1: attempt power cycle [ 257.738899][ T24] aquacomputer_d5next 0003:0C70:F001.0007: unbalanced collection at end of report description [ 257.777083][ T30] audit: type=1400 audit(257.746:790): avc: denied { ioctl } for pid=8425 comm="syz.4.674" path="socket:[21250]" dev="sockfs" ino=21250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.801075][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.816636][ T24] aquacomputer_d5next 0003:0C70:F001.0007: probe with driver aquacomputer_d5next failed with error -22 [ 257.844948][ T5886] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 257.925194][ T5886] usb 2-1: device descriptor read/8, error -71 [ 258.041489][ T5863] usb 4-1: USB disconnect, device number 20 [ 258.136976][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 258.161274][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.206421][ T5886] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 258.237237][ T5886] usb 2-1: device descriptor read/8, error -71 [ 258.274239][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.355347][ T5886] usb usb2-port1: unable to enumerate USB device [ 258.421402][ T5925] waterforce 0003:1044:7A4D.0006: hidraw0: USB HID v0.01 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 258.443805][ T9] usb 5-1: USB disconnect, device number 18 [ 258.514743][ T5925] waterforce 0003:1044:7A4D.0006: fw version request failed with -38 [ 258.723394][ T8433] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 259.299995][ T24] usb 3-1: USB disconnect, device number 20 [ 259.312058][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 259.361589][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 259.547671][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 259.552138][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 259.568007][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 259.831280][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 260.235651][ T30] audit: type=1400 audit(260.186:791): avc: denied { lock } for pid=8442 comm="syz.4.680" path="socket:[22246]" dev="sockfs" ino=22246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 260.601325][ T30] audit: type=1400 audit(260.436:792): avc: denied { connect } for pid=8438 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.642076][ T8454] FAULT_INJECTION: forcing a failure. [ 260.642076][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 260.666139][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.3.681 Not tainted syzkaller #0 PREEMPT(full) [ 260.666166][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 260.666178][ T8454] Call Trace: [ 260.666184][ T8454] [ 260.666191][ T8454] dump_stack_lvl+0x16c/0x1f0 [ 260.666223][ T8454] should_fail_ex+0x512/0x640 [ 260.666243][ T8454] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 260.666267][ T8454] should_failslab+0xc2/0x120 [ 260.666288][ T8454] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 260.666307][ T8454] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 260.666332][ T8454] ? kmemdup_nul+0x49/0xf0 [ 260.666358][ T8454] kmemdup_nul+0x49/0xf0 [ 260.666385][ T8454] vfs_parse_fs_qstr+0x112/0x1c0 [ 260.666406][ T8454] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 260.666432][ T8454] ? ovl_next_opt+0x143/0x1c0 [ 260.666460][ T8454] ? __pfx_ovl_next_opt+0x10/0x10 [ 260.666484][ T8454] vfs_parse_monolithic_sep+0x18d/0x210 [ 260.666507][ T8454] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 260.666529][ T8454] ? alloc_fs_context+0x59b/0x9c0 [ 260.666553][ T8454] path_mount+0x768/0x23a0 [ 260.666579][ T8454] ? __pfx_path_mount+0x10/0x10 [ 260.666600][ T8454] ? kmem_cache_free+0x2d4/0x6c0 [ 260.666614][ T8454] ? putname+0x154/0x1a0 [ 260.666638][ T8454] ? putname+0x154/0x1a0 [ 260.666656][ T8454] ? putname+0x154/0x1a0 [ 260.666684][ T8454] ? __x64_sys_mount+0x293/0x310 [ 260.666703][ T8454] __x64_sys_mount+0x293/0x310 [ 260.666723][ T8454] ? __pfx___x64_sys_mount+0x10/0x10 [ 260.666751][ T8454] do_syscall_64+0xcd/0xfa0 [ 260.666780][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.666798][ T8454] RIP: 0033:0x7f841478efc9 [ 260.666813][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.666829][ T8454] RSP: 002b:00007f84156bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.666846][ T8454] RAX: ffffffffffffffda RBX: 00007f84149e5fa0 RCX: 00007f841478efc9 [ 260.666857][ T8454] RDX: 0000200000000080 RSI: 00002000000003c0 RDI: 0000000000000000 [ 260.666867][ T8454] RBP: 00007f84156bf090 R08: 0000200000000400 R09: 0000000000000000 [ 260.666877][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.666887][ T8454] R13: 00007f84149e6038 R14: 00007f84149e5fa0 R15: 00007fff0c0fefc8 [ 260.666913][ T8454] [ 261.312085][ T30] audit: type=1400 audit(261.286:793): avc: denied { accept } for pid=8456 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.726631][ T5809] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 262.736334][ T5809] Bluetooth: hci1: Injecting HCI hardware error event [ 262.746469][ T5809] Bluetooth: hci1: hardware error 0x00 [ 262.826741][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 263.233584][ T30] audit: type=1400 audit(263.206:794): avc: denied { bind } for pid=8486 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.255435][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.694'. [ 263.290973][ T30] audit: type=1400 audit(263.266:795): avc: denied { append } for pid=8486 comm="syz.1.694" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.414476][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 263.420924][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.470720][ T8498] lo speed is unknown, defaulting to 1000 [ 263.498260][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 263.499953][ T9] usb 5-1: New USB device found, idVendor=d575, idProduct=8f3b, bcdDevice=82.88 [ 263.590141][ T30] audit: type=1400 audit(263.496:796): avc: denied { create } for pid=8494 comm="syz.0.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 263.663992][ T9] usb 5-1: New USB device strings: Mfr=141, Product=3, SerialNumber=3 [ 263.672348][ T9] usb 5-1: Product: syz [ 263.677324][ T9] usb 5-1: Manufacturer: syz [ 263.681965][ T9] usb 5-1: SerialNumber: syz [ 263.702671][ T9] usb 5-1: config 0 descriptor?? [ 263.714521][ T24] usb 4-1: device descriptor read/64, error -71 [ 263.716213][ T9] cdc_wdm 5-1:0.0: probe with driver cdc_wdm failed with error -22 [ 265.741864][ T5809] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 266.823106][ T1205] usb 5-1: USB disconnect, device number 19 [ 267.249560][ T8520] binder: 8515:8520 ioctl 9000aea4 200000000480 returned -22 [ 267.344622][ T8520] binder: 8515:8520 ioctl c0189375 200000000000 returned -22 [ 267.514712][ T5871] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.974426][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 267.988916][ T5871] usb 3-1: config 10 has an invalid interface number: 238 but max is 0 [ 268.000669][ T5871] usb 3-1: config 10 has no interface number 0 [ 268.007342][ T5871] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a6.98 [ 268.016648][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.064457][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 268.169588][ T30] audit: type=1400 audit(268.146:797): avc: denied { append } for pid=8545 comm="syz.0.710" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 268.188527][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 268.297955][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 268.324116][ T8548] lo speed is unknown, defaulting to 1000 [ 268.330931][ T5871] usb 3-1: string descriptor 0 read error: -71 [ 268.337490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.355378][ T5871] ftdi_sio 3-1:10.238: FTDI USB Serial Device converter detected [ 268.364065][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 268.379883][ T5871] ftdi_sio ttyUSB0: unknown device type: 0xa698 [ 268.395373][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.407912][ T5871] usb 3-1: USB disconnect, device number 21 [ 268.419180][ T9] usb 5-1: config 0 descriptor?? [ 268.425240][ T5871] ftdi_sio 3-1:10.238: device disconnected [ 268.451776][ T8552] usb usb8: usbfs: process 8552 (syz.3.712) did not claim interface 0 before use [ 268.831407][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.714'. [ 269.129321][ T9] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 269.403211][ T8569] syzkaller0: entered promiscuous mode [ 269.412957][ T8569] syzkaller0: entered allmulticast mode [ 269.492203][ T8536] Invalid source name [ 269.504777][ T9] usb 5-1: USB disconnect, device number 20 [ 269.614732][ T8576] tmpfs: Bad value for 'mpol' [ 270.303932][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.721'. [ 270.884440][ T1205] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 270.958217][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.047300][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 271.054429][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.065541][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.081790][ T1205] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 271.091060][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.101106][ T1205] usb 3-1: config 0 descriptor?? [ 271.109063][ T1205] xbox_remote_probe: endpoint_in message size==0? [ 271.131580][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 271.142661][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.158341][ T9] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00 [ 271.167505][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.175610][ T9] usb 5-1: Manufacturer: syz [ 271.182857][ T9] usb 5-1: config 0 descriptor?? [ 271.610653][ T9] hid-udraw 0003:20D6:CB17.0009: unbalanced collection at end of report description [ 271.620676][ T9] hid-udraw 0003:20D6:CB17.0009: parse failed [ 271.627022][ T9] hid-udraw 0003:20D6:CB17.0009: probe with driver hid-udraw failed with error -22 [ 271.700957][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.0.720'. [ 271.710044][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.0.720'. [ 271.754609][ T1205] usbhid 3-1:0.0: can't add hid device: -71 [ 271.784459][ T1205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.796380][ T1205] usb 3-1: USB disconnect, device number 22 [ 271.812269][ T8601] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 271.829031][ T56] usb 5-1: USB disconnect, device number 21 [ 272.154413][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 272.324590][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 272.335309][ T9] usb 4-1: no configurations [ 272.340224][ T9] usb 4-1: can't read configurations, error -22 [ 272.449653][ T8618] netlink: 'syz.4.728': attribute type 11 has an invalid length. [ 272.555135][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 272.714471][ T30] audit: type=1400 audit(272.686:798): avc: denied { ioctl } for pid=8619 comm="syz.4.729" path="socket:[24161]" dev="sockfs" ino=24161 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.783049][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 272.796673][ T9] usb 4-1: no configurations [ 272.802408][ T9] usb 4-1: can't read configurations, error -22 [ 272.815880][ T9] usb usb4-port1: attempt power cycle [ 273.184421][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 273.232090][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 273.249321][ T9] usb 4-1: no configurations [ 273.269027][ T9] usb 4-1: can't read configurations, error -22 [ 273.414436][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 273.434863][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 273.440511][ T9] usb 4-1: no configurations [ 273.445705][ T9] usb 4-1: can't read configurations, error -22 [ 273.523824][ T9] usb usb4-port1: unable to enumerate USB device [ 273.614984][ T8649] netlink: 104 bytes leftover after parsing attributes in process `syz.0.737'. [ 273.645750][ T30] audit: type=1400 audit(273.606:799): avc: denied { create } for pid=8641 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 273.669010][ T30] audit: type=1400 audit(273.616:800): avc: denied { bind } for pid=8641 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 274.231148][ T30] audit: type=1400 audit(274.196:801): avc: denied { write } for pid=8652 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 274.250585][ T30] audit: type=1400 audit(274.196:802): avc: denied { read } for pid=8652 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 274.474463][ T1205] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 275.235538][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.743'. [ 275.284516][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 275.301017][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.327776][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.355510][ T1205] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 275.434115][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.462271][ T1205] usb 3-1: config 0 descriptor?? [ 275.483508][ T1205] xbox_remote_probe: endpoint_in message size==0? [ 275.693292][ T1205] usbhid 3-1:0.0: can't add hid device: -71 [ 275.715891][ T1205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 275.743120][ T1205] usb 3-1: USB disconnect, device number 23 [ 276.114649][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.854859][ T30] audit: type=1400 audit(276.376:803): avc: denied { setopt } for pid=8686 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 277.105378][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.993930][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 278.000458][ T5809] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 278.205264][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 278.256774][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.271822][ T30] audit: type=1400 audit(278.246:804): avc: denied { map } for pid=8696 comm="syz.4.753" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 278.295726][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.305761][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.314987][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.334647][ T5925] usb 1-1: config 0 descriptor?? [ 278.342721][ T5925] hub 1-1:0.0: USB hub found [ 278.625692][ T5925] hub 1-1:0.0: 1 port detected [ 279.093160][ T30] audit: type=1400 audit(278.966:805): avc: denied { setopt } for pid=8709 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.154149][ T30] audit: type=1400 audit(278.966:806): avc: denied { write } for pid=8709 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.177204][ T30] audit: type=1400 audit(278.966:807): avc: denied { listen } for pid=8709 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.206949][ T30] audit: type=1400 audit(278.966:808): avc: denied { accept } for pid=8709 comm="syz.3.756" lport=39638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.683669][ T1546] hub 1-1:0.0: activate --> -90 [ 280.005213][ T8730] syz.4.763 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 280.464465][ T5925] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 281.121506][ T1546] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 281.254397][ T1546] usb 1-1-port1: connect-debounce failed [ 281.265575][ T1546] usb 1-1-port1: cannot disable (err = -32) [ 281.404404][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 281.438770][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.524554][ T1205] usb 1-1: USB disconnect, device number 16 [ 281.566270][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.419884][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 282.439299][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.627709][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 282.669341][ T8761] FAULT_INJECTION: forcing a failure. [ 282.669341][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 282.698807][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.4.770 Not tainted syzkaller #0 PREEMPT(full) [ 282.698835][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.698845][ T8761] Call Trace: [ 282.698851][ T8761] [ 282.698857][ T8761] dump_stack_lvl+0x16c/0x1f0 [ 282.698889][ T8761] should_fail_ex+0x512/0x640 [ 282.698908][ T8761] ? __kmalloc_noprof+0xca/0x880 [ 282.698933][ T8761] should_failslab+0xc2/0x120 [ 282.698953][ T8761] __kmalloc_noprof+0xdd/0x880 [ 282.698977][ T8761] ? nft_trans_alloc+0x1d/0x2d0 [ 282.699004][ T8761] ? nft_trans_alloc+0x1d/0x2d0 [ 282.699023][ T8761] nft_trans_alloc+0x1d/0x2d0 [ 282.699046][ T8761] nft_delchain+0x24/0x310 [ 282.699069][ T8761] ? nft_flush_table+0x550/0xb10 [ 282.699093][ T8761] nft_flush_table+0x770/0xb10 [ 282.699120][ T8761] nf_tables_deltable+0xa4e/0xcc0 [ 282.699149][ T8761] ? __pfx_nf_tables_deltable+0x10/0x10 [ 282.699182][ T8761] ? __nla_parse+0x40/0x60 [ 282.699210][ T8761] nfnetlink_rcv_batch+0x190d/0x2350 [ 282.699245][ T8761] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 282.699268][ T8761] ? rcu_is_watching+0x12/0xc0 [ 282.699291][ T8761] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.699319][ T8761] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 282.699350][ T8761] ? avc_has_perm_noaudit+0x149/0x3b0 [ 282.699402][ T8761] ? __nla_parse+0x40/0x60 [ 282.699429][ T8761] nfnetlink_rcv+0x3c1/0x430 [ 282.699448][ T8761] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 282.699474][ T8761] netlink_unicast+0x5aa/0x870 [ 282.699504][ T8761] ? __pfx_netlink_unicast+0x10/0x10 [ 282.699538][ T8761] netlink_sendmsg+0x8c8/0xdd0 [ 282.699567][ T8761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.699596][ T8761] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 282.699623][ T8761] ____sys_sendmsg+0xa98/0xc70 [ 282.699641][ T8761] ? copy_msghdr_from_user+0x10a/0x160 [ 282.699663][ T8761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.699692][ T8761] ___sys_sendmsg+0x134/0x1d0 [ 282.699716][ T8761] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.699736][ T8761] ? __lock_acquire+0x622/0x1c90 [ 282.699796][ T8761] __sys_sendmsg+0x16d/0x220 [ 282.699819][ T8761] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.699858][ T8761] do_syscall_64+0xcd/0xfa0 [ 282.699885][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.699902][ T8761] RIP: 0033:0x7f4a4db8efc9 [ 282.699916][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.699933][ T8761] RSP: 002b:00007f4a4bdac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.699950][ T8761] RAX: ffffffffffffffda RBX: 00007f4a4dde6180 RCX: 00007f4a4db8efc9 [ 282.699961][ T8761] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 282.699971][ T8761] RBP: 00007f4a4bdac090 R08: 0000000000000000 R09: 0000000000000000 [ 282.699981][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.699990][ T8761] R13: 00007f4a4dde6218 R14: 00007f4a4dde6180 R15: 00007ffc31e1c8b8 [ 282.700015][ T8761] [ 283.088833][ T5925] usb 4-1: config 0 descriptor?? [ 283.098108][ T5925] usb 4-1: can't set config #0, error -71 [ 283.178023][ T8772] binder: 8767:8772 ioctl c0306201 200000000540 returned -22 [ 283.213896][ T5925] usb 4-1: USB disconnect, device number 27 [ 283.221222][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 283.230562][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 283.614792][ T1205] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 283.724767][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 283.744845][ T1205] usb 1-1: device descriptor read/64, error -71 [ 283.888864][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.901990][ T24] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.931307][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.986966][ T1205] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 284.306839][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.796704][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.837923][ T1205] usb 1-1: device descriptor read/64, error -71 [ 286.050833][ T30] audit: type=1400 audit(285.806:809): avc: denied { read } for pid=8794 comm="syz.2.782" dev="sockfs" ino=24618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.095507][ T1205] usb usb1-port1: attempt power cycle [ 286.129078][ T24] usb 5-1: invalid MIDI out EP 0 [ 286.178086][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 286.480717][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 286.745029][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 286.799493][ T1205] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 286.962209][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.000558][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.010597][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 287.020633][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.033274][ T5925] usb 4-1: config 0 descriptor?? [ 287.043414][ T5925] xbox_remote_probe: endpoint_in message size==0? [ 287.086517][ T1205] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 287.115956][ T8816] kAFS: Can only specify source 'none' with -o dyn [ 287.123628][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 287.134174][ T1205] usb 1-1: Using ep0 maxpacket: 32 [ 287.141257][ T1205] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.151138][ T1205] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 287.164053][ T1205] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 287.177286][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.185656][ T1205] usb 1-1: Product: syz [ 287.189845][ T1205] usb 1-1: Manufacturer: syz [ 287.195243][ T1205] usb 1-1: SerialNumber: syz [ 287.248082][ T5925] usbhid 4-1:0.0: can't add hid device: -71 [ 287.254851][ T5925] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 287.270817][ T5925] usb 4-1: USB disconnect, device number 28 [ 287.374739][ T5871] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 287.405975][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.418475][ T1205] usb 1-1: Limiting number of CPorts to U8_MAX [ 287.425812][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.448059][ T1205] usb 1-1: Not enough endpoints found in device, aborting! [ 287.585272][ T5925] usb 5-1: USB disconnect, device number 22 [ 287.887011][ T8827] macsec1: entered promiscuous mode [ 287.892366][ T8827] bridge0: entered promiscuous mode [ 289.785569][ T1205] usb 1-1: USB disconnect, device number 20 [ 289.811525][ T8833] xt_TCPMSS: Only works on TCP SYN packets [ 289.824201][ T30] audit: type=1400 audit(289.796:810): avc: denied { read } for pid=8820 comm="syz.1.790" path="socket:[24657]" dev="sockfs" ino=24657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 289.962122][ T30] audit: type=1400 audit(289.826:811): avc: denied { read } for pid=8832 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.064226][ T8838] sd 0:0:1:0: PR command failed: 1026 [ 290.071025][ T8838] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 290.083746][ T30] audit: type=1400 audit(289.876:812): avc: denied { shutdown } for pid=8832 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.084021][ T8838] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 290.504489][ T30] audit: type=1400 audit(289.996:813): avc: denied { read } for pid=8835 comm="syz.0.795" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 290.585250][ T30] audit: type=1400 audit(289.996:814): avc: denied { open } for pid=8835 comm="syz.0.795" path="/167/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 290.634588][ T30] audit: type=1400 audit(290.036:815): avc: denied { ioctl } for pid=8835 comm="syz.0.795" path="/167/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 294.505244][ T30] audit: type=1400 audit(294.446:816): avc: denied { search } for pid=8872 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.611209][ T30] audit: type=1400 audit(294.446:817): avc: denied { search } for pid=8872 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.663562][ T30] audit: type=1400 audit(294.446:818): avc: denied { search } for pid=8872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.720009][ T30] audit: type=1400 audit(294.446:819): avc: denied { search } for pid=8872 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.746326][ T30] audit: type=1400 audit(294.446:820): avc: denied { read open } for pid=8877 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.780923][ T30] audit: type=1400 audit(294.446:821): avc: denied { getattr } for pid=8877 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.843178][ T30] audit: type=1400 audit(294.446:822): avc: denied { getattr } for pid=8877 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.995588][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 295.042867][ T30] audit: type=1400 audit(295.016:823): avc: denied { read } for pid=8880 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.064685][ T30] audit: type=1400 audit(295.016:824): avc: denied { open } for pid=8880 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.224756][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 295.231692][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.289428][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.363144][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 295.389345][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.408735][ T24] usb 1-1: config 0 descriptor?? [ 295.421245][ T24] xbox_remote_probe: endpoint_in message size==0? [ 295.634657][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 295.640677][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 295.694773][ T24] usb 1-1: USB disconnect, device number 21 [ 295.734900][ T30] audit: type=1400 audit(295.706:825): avc: denied { add_name } for pid=8872 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.844651][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 298.238070][ T8930] netlink: 140 bytes leftover after parsing attributes in process `syz.3.812'. [ 298.287340][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 300.437058][ T8960] netlink: 64 bytes leftover after parsing attributes in process `syz.2.816'. [ 301.183208][ T8962] xt_cgroup: invalid path, errno=-2 [ 301.444403][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 301.444421][ T30] audit: type=1400 audit(301.406:834): avc: denied { getopt } for pid=8969 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.516356][ T8989] binder_alloc: 8988: binder_alloc_buf size 69424 failed, no address space [ 301.537030][ T8989] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 301.857227][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 301.954421][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 303.355811][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 303.367761][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 303.407801][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.479468][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.928625][ T8985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.953761][ T8985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.089432][ T9023] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.128869][ T30] audit: type=1400 audit(304.006:835): avc: denied { setopt } for pid=9015 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 304.148613][ T5925] IPVS: starting estimator thread 0... [ 304.285148][ T9025] IPVS: using max 40 ests per chain, 96000 per kthread [ 304.412419][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.450995][ T5925] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 304.472619][ T30] audit: type=1400 audit(304.416:836): avc: denied { watch } for pid=9021 comm="syz.3.831" path="/163/bus/file1" dev="overlay" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 304.627460][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.715346][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 304.738668][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.740977][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.774752][ T1546] usb 2-1: USB disconnect, device number 22 [ 304.799079][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.838773][ T5925] usb 3-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 305.330887][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.341392][ T5925] usb 3-1: config 0 descriptor?? [ 305.882143][ T5809] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 305.883466][ T5925] usb 3-1: USB disconnect, device number 25 [ 306.008367][ T30] audit: type=1400 audit(305.966:837): avc: denied { read write } for pid=9048 comm="syz.3.834" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.302311][ T30] audit: type=1400 audit(305.976:838): avc: denied { open } for pid=9048 comm="syz.3.834" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.432592][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 307.523996][ T5930] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.897365][ T9089] overlayfs: failed to resolve './file1': -2 [ 308.050316][ T9087] overlayfs: overlapping lowerdir path [ 308.140588][ T9087] kernel profiling enabled (shift: 6) [ 308.667930][ T30] audit: type=1400 audit(308.646:839): avc: denied { module_request } for pid=9105 comm="syz.4.844" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 309.778429][ T30] audit: type=1400 audit(309.726:840): avc: denied { write } for pid=9125 comm="syz.1.851" path="socket:[25390]" dev="sockfs" ino=25390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.919142][ T9136] lo speed is unknown, defaulting to 1000 [ 310.226269][ T9131] befs: (nbd4): unable to read superblock [ 310.334208][ T9141] tmpfs: Bad value for 'mpol' [ 310.340162][ T30] audit: type=1400 audit(310.306:841): avc: denied { mounton } for pid=9140 comm="syz.3.853" path="/167/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 316.641088][ T30] audit: type=1400 audit(316.616:842): avc: denied { ioctl } for pid=9191 comm="syz.4.866" path="socket:[26312]" dev="sockfs" ino=26312 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.952262][ T9193] bond0: (slave wlan1): Releasing backup interface [ 316.971676][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.978316][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.272828][ T30] audit: type=1326 audit(317.166:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.436395][ T30] audit: type=1326 audit(317.166:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.531589][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.869'. [ 317.628943][ T9210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 317.637124][ T9210] overlayfs: failed to set xattr on upper [ 317.642885][ T9210] overlayfs: ...falling back to redirect_dir=nofollow. [ 317.649915][ T9210] overlayfs: ...falling back to index=off. [ 317.656059][ T9210] overlayfs: ...falling back to uuid=null. [ 317.710121][ T9211] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 317.844745][ T30] audit: type=1326 audit(317.166:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.871371][ T30] audit: type=1326 audit(317.166:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.900514][ T30] audit: type=1326 audit(317.166:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.927583][ T30] audit: type=1326 audit(317.166:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 317.967908][ T30] audit: type=1326 audit(317.176:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 318.120014][ T30] audit: type=1326 audit(317.176:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 318.256380][ T30] audit: type=1326 audit(317.196:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9194 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f37e738efc9 code=0x7ffc0000 [ 318.734944][ T56] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 318.794351][ T24] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 318.897111][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 318.907371][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 318.916538][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.925532][ T56] usb 5-1: Product: syz [ 318.936713][ T56] usb 5-1: Manufacturer: syz [ 318.941449][ T56] usb 5-1: SerialNumber: syz [ 318.966419][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.975408][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 318.990282][ T24] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping [ 318.999533][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.010290][ T24] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 319.020019][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 319.037059][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 319.061787][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.071889][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.356206][ T56] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 319.367669][ T24] usb 2-1: Product: syz [ 319.372724][ T24] usb 2-1: Manufacturer: syz [ 319.377393][ T24] usb 2-1: SerialNumber: syz [ 319.694486][ T56] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 319.845948][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.885967][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.912014][ T56] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.206701][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.343429][ T56] usb 4-1: config 0 descriptor?? [ 320.365653][ T9249] fuse: Bad value for 'fd' [ 320.381950][ T56] hub 4-1:0.0: USB hub found [ 320.583232][ T56] hub 4-1:0.0: 2 ports detected [ 320.588299][ T9226] comedi comedi0: reset error (fatal) [ 320.697401][ T9254] loop6: detected capacity change from 0 to 524287999 [ 320.707975][ T9254] buffer_io_error: 23 callbacks suppressed [ 320.708005][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.722342][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.731291][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.739931][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.748678][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.757752][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.766367][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.774915][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.783211][ T9254] ldm_validate_partition_table(): Disk read failed. [ 320.790542][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.827586][ T9254] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.837108][ T9254] Dev loop6: unable to read RDB block 0 [ 320.845387][ T9254] loop6: unable to read partition table [ 320.852301][ T9254] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 321.735923][ T5871] usb 5-1: USB disconnect, device number 23 [ 321.775542][ T5871] usblp0: removed [ 321.805558][ T9258] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 321.850834][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 321.878812][ T9258] CIFS: Unable to determine destination address [ 321.880841][ T24] usb 2-1: USB disconnect, device number 23 [ 321.909739][ T56] usb 4-1: USB disconnect, device number 29 [ 378.407187][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.413536][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.064251][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 431.071482][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9270/1:b..l [ 431.079905][ C1] rcu: (detected by 1, t=10502 jiffies, g=27481, q=389 ncpus=2) [ 431.087622][ C1] task:syz.1.887 state:R running task stack:28536 pid:9270 tgid:9270 ppid:5806 task_flags:0x400040 flags:0x00080000 [ 431.101943][ C1] Call Trace: [ 431.105230][ C1] [ 431.108164][ C1] __schedule+0x1190/0x5de0 [ 431.112685][ C1] ? __lock_acquire+0x622/0x1c90 [ 431.117637][ C1] ? __pfx___schedule+0x10/0x10 [ 431.122493][ C1] ? __lock_acquire+0x622/0x1c90 [ 431.127443][ C1] ? mark_held_locks+0x49/0x80 [ 431.132221][ C1] preempt_schedule_irq+0x51/0x90 [ 431.137247][ C1] irqentry_exit+0x36/0x90 [ 431.141660][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.147820][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 431.153977][ C1] Code: 00 00 00 eb b6 e8 30 fa ff ff eb b6 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 8b 05 76 8d 21 05 85 c0 74 20 8b 05 00 bd 21 05 85 c0 [ 431.173576][ C1] RSP: 0018:ffffc9000fb27850 EFLAGS: 00000246 [ 431.179652][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81cc9b53 [ 431.187621][ C1] RDX: ffff88807696c900 RSI: ffffffff81cc9b77 RDI: 0000000000000004 [ 431.195587][ C1] RBP: 00007f7efcf8ef00 R08: 0000000000000004 R09: 000000000000020c [ 431.203547][ C1] R10: 000000000000020c R11: 0000000000000001 R12: ffffffff81a80530 [ 431.211510][ C1] R13: ffffc9000fb27970 R14: 0000000000000000 R15: ffff88807696c900 [ 431.219477][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 431.225640][ C1] ? bpf_ksym_find+0x103/0x1c0 [ 431.230438][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 431.235204][ C1] is_bpf_text_address+0x64/0x1a0 [ 431.240226][ C1] kernel_text_address+0x8d/0x100 [ 431.245258][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 431.250711][ C1] __kernel_text_address+0xd/0x40 [ 431.255729][ C1] unwind_get_return_address+0x59/0xa0 [ 431.261273][ C1] arch_stack_walk+0xa6/0x100 [ 431.265959][ C1] stack_trace_save+0x8e/0xc0 [ 431.270651][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 431.276030][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 431.280974][ C1] kasan_save_stack+0x33/0x60 [ 431.285643][ C1] ? kasan_save_stack+0x33/0x60 [ 431.290484][ C1] ? kasan_save_track+0x14/0x30 [ 431.295325][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 431.300685][ C1] ? __kasan_slab_free+0x5f/0x80 [ 431.305615][ C1] ? kfree+0x2b8/0x6d0 [ 431.309672][ C1] ? security_sk_free+0x9d/0x1a0 [ 431.314578][ C1] ? __sk_destruct+0x591/0x9a0 [ 431.319340][ C1] ? sk_destruct+0xc2/0xf0 [ 431.323735][ C1] ? __sk_free+0xf4/0x3e0 [ 431.328040][ C1] ? sk_free+0x6a/0x90 [ 431.332083][ C1] ? af_alg_release+0x9c/0x100 [ 431.336833][ C1] ? __sock_release+0xb3/0x270 [ 431.341588][ C1] ? sock_close+0x1c/0x30 [ 431.345890][ C1] ? __fput+0x402/0xb70 [ 431.350021][ C1] ? task_work_run+0x150/0x240 [ 431.354757][ C1] ? exit_to_user_mode_loop+0xec/0x130 [ 431.360193][ C1] ? do_syscall_64+0x426/0xfa0 [ 431.365033][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.371093][ C1] kasan_save_track+0x14/0x30 [ 431.376178][ C1] __kasan_save_free_info+0x3b/0x60 [ 431.381359][ C1] __kasan_slab_free+0x5f/0x80 [ 431.386094][ C1] kfree+0x2b8/0x6d0 [ 431.389975][ C1] ? security_sk_free+0x9d/0x1a0 [ 431.394887][ C1] ? security_sk_free+0x9d/0x1a0 [ 431.399797][ C1] security_sk_free+0x9d/0x1a0 [ 431.404547][ C1] __sk_destruct+0x591/0x9a0 [ 431.409113][ C1] sk_destruct+0xc2/0xf0 [ 431.413341][ C1] __sk_free+0xf4/0x3e0 [ 431.417474][ C1] sk_free+0x6a/0x90 [ 431.421344][ C1] af_alg_release+0x9c/0x100 [ 431.425911][ C1] __sock_release+0xb3/0x270 [ 431.430496][ C1] ? __pfx_sock_close+0x10/0x10 [ 431.435320][ C1] sock_close+0x1c/0x30 [ 431.439450][ C1] __fput+0x402/0xb70 [ 431.443410][ C1] task_work_run+0x150/0x240 [ 431.447979][ C1] ? __pfx_task_work_run+0x10/0x10 [ 431.453064][ C1] ? find_held_lock+0x2b/0x80 [ 431.457720][ C1] exit_to_user_mode_loop+0xec/0x130 [ 431.462981][ C1] do_syscall_64+0x426/0xfa0 [ 431.467550][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.473416][ C1] RIP: 0033:0x7f7efcf8efc9 [ 431.477811][ C1] RSP: 002b:00007ffe237e1f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 431.486193][ C1] RAX: 0000000000000000 RBX: 000000000004eecb RCX: 00007f7efcf8efc9 [ 431.494137][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 431.502078][ C1] RBP: 00007f7efd1e7da0 R08: 0000000000000001 R09: 0000000f237e225f [ 431.510020][ C1] R10: 0000001b2ea20000 R11: 0000000000000246 R12: 00007f7efd1e5fac [ 431.517970][ C1] R13: 00007f7efd1e5fa0 R14: ffffffffffffffff R15: 00007ffe237e2080 [ 431.525934][ C1] [ 431.528948][ C1] rcu: rcu_preempt kthread starved for 10044 jiffies! g27481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 431.540110][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 431.550046][ C1] rcu: RCU grace-period kthread stack dump: [ 431.555903][ C1] task:rcu_preempt state:R running task stack:28080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 431.569344][ C1] Call Trace: [ 431.572599][ C1] [ 431.575508][ C1] __schedule+0x1190/0x5de0 [ 431.580015][ C1] ? __pfx___schedule+0x10/0x10 [ 431.584871][ C1] ? find_held_lock+0x2b/0x80 [ 431.589555][ C1] ? schedule+0x2d7/0x3a0 [ 431.593863][ C1] schedule+0xe7/0x3a0 [ 431.597908][ C1] schedule_timeout+0x123/0x290 [ 431.602741][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 431.608102][ C1] ? __pfx_process_timeout+0x10/0x10 [ 431.613365][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 431.619155][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 431.624602][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 431.629343][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 431.634673][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.639902][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 431.644825][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 431.649662][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.655448][ C1] rcu_gp_kthread+0x26d/0x380 [ 431.660102][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 431.665274][ C1] ? rcu_is_watching+0x12/0xc0 [ 431.670017][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.675190][ C1] ? __kthread_parkme+0x19e/0x250 [ 431.680200][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 431.685371][ C1] kthread+0x3c5/0x780 [ 431.689421][ C1] ? __pfx_kthread+0x10/0x10 [ 431.693986][ C1] ? rcu_is_watching+0x12/0xc0 [ 431.698820][ C1] ? __pfx_kthread+0x10/0x10 [ 431.703380][ C1] ret_from_fork+0x675/0x7d0 [ 431.707942][ C1] ? __pfx_kthread+0x10/0x10 [ 431.712513][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.717279][ C1] [ 431.720276][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 431.726582][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 431.735501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.745554][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 431.751180][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 431.770761][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 431.776811][ C1] RAX: 00000000015d6fed RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 431.784756][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 431.792700][ C1] RBP: ffffed1003ad7490 R08: 0000000000000001 R09: ffffed10170a6655 [ 431.800648][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 431.808591][ C1] R13: ffff88801d6ba480 R14: ffffffff908203d0 R15: 0000000000000000 [ 431.816536][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 431.825440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.832001][ C1] CR2: 00007fae860bae10 CR3: 00000000747f2000 CR4: 00000000003526f0 [ 431.839946][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 431.847898][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 431.855841][ C1] Call Trace: [ 431.859094][ C1] [ 431.861999][ C1] default_idle+0x13/0x20 [ 431.866302][ C1] default_idle_call+0x6c/0xb0 [ 431.871050][ C1] do_idle+0x38d/0x500 [ 431.875119][ C1] ? __pfx_do_idle+0x10/0x10 [ 431.879694][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 431.884877][ C1] ? do_idle+0x2e3/0x500 [ 431.889198][ C1] cpu_startup_entry+0x4f/0x60 [ 431.894113][ C1] start_secondary+0x21d/0x2b0 [ 431.898851][ C1] ? __pfx_start_secondary+0x10/0x10 [ 431.904121][ C1] common_startup_64+0x13e/0x148 [ 431.909035][ C1] SYZFAIL: failed to send rpc fd=3 want=11336 sent=0 n=-1 (errno 32: Broken pipe) [ 433.928126][ T4371] bridge_slave_1: left allmulticast mode [ 433.934785][ T4371] bridge_slave_1: left promiscuous mode [ 433.941845][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.953279][ T4371] bridge_slave_0: left allmulticast mode [ 433.959166][ T4371] bridge_slave_0: left promiscuous mode [ 433.964987][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.212419][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.222341][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.233485][ T4371] bond0 (unregistering): Released all slaves [ 434.266855][ T4371] : left promiscuous mode [ 434.322805][ T4371] tipc: Left network mode [ 434.507884][ T4371] hsr_slave_0: left promiscuous mode [ 434.513685][ T4371] hsr_slave_1: left promiscuous mode [ 434.519993][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.527829][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.786175][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 434.818640][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 435.422858][ T4371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.481898][ T4371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.554148][ T4371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.945731][ T4371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.957491][ T4371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.023789][ T4371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.034311][ T4371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.100332][ T4371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.110716][ T4371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.156091][ T4371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.166675][ T4371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.266817][ T4371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.330777][ T4371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.394838][ T4371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.437762][ T4371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.556841][ T4371] bridge_slave_1: left allmulticast mode [ 436.562512][ T4371] bridge_slave_1: left promiscuous mode [ 436.568689][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.577283][ T4371] bridge_slave_0: left allmulticast mode [ 436.582925][ T4371] bridge_slave_0: left promiscuous mode [ 436.588775][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.606283][ T4371] bridge_slave_1: left allmulticast mode [ 436.611946][ T4371] bridge_slave_1: left promiscuous mode [ 436.618183][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.628054][ T4371] bridge_slave_0: left allmulticast mode [ 436.633713][ T4371] bridge_slave_0: left promiscuous mode [ 436.639750][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.659829][ T4371] bridge_slave_1: left allmulticast mode [ 436.665525][ T4371] bridge_slave_1: left promiscuous mode [ 436.671163][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.679794][ T4371] bridge_slave_0: left allmulticast mode [ 436.686237][ T4371] bridge_slave_0: left promiscuous mode [ 436.691878][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.979214][ T4371] bond1 (unregistering): (slave bridge1): Releasing active interface [ 437.093804][ T4371] bond0 (unregistering): Released all slaves [ 437.104462][ T4371] bond1 (unregistering): Released all slaves [ 437.141656][ T4371] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 437.351591][ T4371] bond0 (unregistering): Released all slaves [ 437.457341][ T4371] bond1 (unregistering): (slave geneve2): Releasing active interface [ 437.760089][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.770342][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.779865][ T4371] bond0 (unregistering): Released all slaves [ 437.790093][ T4371] bond1 (unregistering): Released all slaves [ 437.910590][ T4371] bridge0 (unregistering): left promiscuous mode [ 438.102439][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.112332][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.122028][ T4371] bond0 (unregistering): Released all slaves [ 438.132286][ T4371] bond1 (unregistering): Released all slaves [ 438.249107][ T4371] : left promiscuous mode [ 438.320079][ T4371] tipc: Left network mode [ 438.329347][ T4371] tipc: Left network mode [ 438.348647][ T4371] IPVS: stopping backup sync thread 6288 ... [ 438.832217][ T4371] hsr_slave_0: left promiscuous mode [ 438.840757][ T4371] hsr_slave_0: left promiscuous mode [ 438.846553][ T4371] hsr_slave_1: left promiscuous mode [ 438.852150][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.859806][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.872632][ T4371] hsr_slave_0: left promiscuous mode [ 438.878455][ T4371] hsr_slave_1: left promiscuous mode [ 438.884067][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.891805][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.899477][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.906957][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.918099][ T4371] hsr_slave_0: left promiscuous mode [ 438.923813][ T4371] hsr_slave_1: left promiscuous mode [ 438.929723][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.937180][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.967209][ T4371] veth1_macvtap: left promiscuous mode [ 438.973170][ T4371] veth0_macvtap: left promiscuous mode [ 438.979747][ T4371] veth1_vlan: left promiscuous mode [ 438.985162][ T4371] veth0_vlan: left promiscuous mode [ 438.995760][ T4371] veth1_macvtap: left promiscuous mode [ 439.001243][ T4371] veth0_macvtap: left promiscuous mode [ 439.006965][ T4371] veth1_vlan: left promiscuous mode [ 439.013373][ T4371] veth0_vlan: left promiscuous mode [ 439.020695][ T4371] veth1_macvtap: left promiscuous mode [ 439.026268][ T4371] veth0_macvtap: left promiscuous mode [ 439.031778][ T4371] veth1_vlan: left promiscuous mode [ 439.037074][ T4371] veth0_vlan: left promiscuous mode [ 439.849611][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.856074][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.990019][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 440.026371][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 440.527584][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 440.559628][ T4371] team0 (unregistering): Port device team_slave_0 removed