last executing test programs: 2m34.243306224s ago: executing program 1 (id=427): syz_emit_ethernet(0x72, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @local, [], "c1fef570000000a454fde1eb"}}}}}}}, 0x0) 2m34.05536712s ago: executing program 1 (id=430): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xf, 0x1, 0x800, 0x7}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) 2m30.063330596s ago: executing program 1 (id=440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffffffffffffa, 0x7013c2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000050, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x3013c1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x6c, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xffffffffffffff78, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x6c}}, 0x24044895) 2m29.341402491s ago: executing program 1 (id=442): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 2m29.278687775s ago: executing program 1 (id=443): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) 2m28.332842264s ago: executing program 1 (id=445): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000000306010800000000000000000a0000000500010007000000090002007340549704"], 0x3c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100005}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 2m13.151098707s ago: executing program 32 (id=445): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000000306010800000000000000000a0000000500010007000000090002007340549704"], 0x3c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100005}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 8.947903424s ago: executing program 5 (id=886): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x2000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0xd, 0x4, 0x12, 0x84}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x4000000000000190, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000600)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000640)=r3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(0x0, 0x4, 0x100) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000680)={'\x00', 0x1a, 0x7, 0x50b48bf1, 0x5, 0x10, r3}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0xfffffffffffffffe) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) 8.634391592s ago: executing program 0 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'virt_wifi0\x00', {'netpci0\x00'}, 0x1000}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001", @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="57b280006d663a13e39e7e3b1d23f613564eaf0390b36c90e126eea6125edacca31f98cb6556a3ace7e920e833eb5f8e8617f6a1c0d23cd89a3129e6d5b246881b0d29c683e233451158982afc4b0a464d720c6bfbb422", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf251b00000008009a0000000000080001002e0000000400cc0008009a00020000000800010037000000100022800c00008008000300040000000800010020000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000140)=0x3) timerfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x200000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40) socket(0x1d, 0x5, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0x2}, {}, {0x6, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 8.615328091s ago: executing program 2 (id=888): write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000e81227a1ddfaf80f3292e92b040a00000000000000000000000000000000000000000a6e829a11dd82451c2aaaa9b240d28801dbd03c771ca27c1c86282dcf7a9b8805561b7e5bfdbbe40a4a99d56c64a502781a675a18b3f759c5081c54741b30934c0d97c93883f210a5e6f66a355cc0ce1fd44ada107741ab2f7f340"], 0x50) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12a54dc33698b32b05007d824d027650f49e99d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) 8.482856424s ago: executing program 5 (id=889): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x5) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r5, 0xc0045004, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0xb635773f04ebbeef, 0x8010, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sendmmsg$unix(r8, &(0x7f000000aa40)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f348177b79621049247bfa4c0725cfbebfacfded5ae1d78ef926d84e5e59c2df1b5b3be475abf2b3f07f6a87bff486d029a880bcab6e2372872e9bfae628194faffa87ef286fe78af09d4e7e3a352b2a533f713af3dee41f7c4a5406f3bc6f4f1bb70f60beb9b7155945f607e8938c6ad4a4d4d2c3f5a0a4166ead5bbd203970585ddda569af637faba17b77299f8612dcd198d2f4cb0e6ddd37465a1d5b307ca1a0fb2f9e3435a2c208c7c3e173b60f4d0b0a3f1269a534457a03d5a4282f5d46d2", 0xc2}, {&(0x7f0000000300)="690ba728f639a81949", 0x9}, {&(0x7f0000001540)="b17434c666f163a0152039451af1120d", 0x10}], 0x4, 0x0, 0x0, 0x80d0}}, {{&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000018c0)="e9bffc3db0e335c0990c1cb4b264659ea89922aaf49bdefd0eff20582efa3b86b1102dd80132e3a430f0d16f6573c0ae1dbe2f6b59647fd91a39264b46c4be219a5baeb403cb93e920ca37715977db8a042e3edf1e1f91c7f3ad4a2ecc22d58d592ffdfd99ab28e266aeca0de3c8181ebfd457c2a318fddb6800ef351de287b0eda75594d4ee0e579c6d208a941acc4141cedd5bfc5a44fb10faea31940f9a7766557eb74341157ec7183a11ec82c7bc6bc6933f17aced5916789864aa824ec393cd7dc1e312dcedb8a2164a2beb8a33bb80ce39def8", 0xd6}, {&(0x7f0000000180)="ce00a0864f9d2bc5a7ff202c554aeb403a52", 0x12}], 0x2, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="1c00001c000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRESDEC=r6, @ANYBLOB="ee7f2931dd3832d777e546275d4de615c69de59a039ab43b812021e495a89e5a157c05773df4c0f1bc39dae66632bfb049d391f2d9a4992e91cf57f366d1fa8ee38c92d34bf01da550c946e3254b99d6bb0e080a48a001c38eaff3064d613d4d81a9b2983309663327ac58d4aa8bfe67dee8bcc1ad8ce5019bbe2801954440afeb2b8c4ec5dab9492e92f224f43ef29aaaf838f94d9deaf05623ae2788d929ede370a218910444dfbac859a504ff9ac4aa6d9524b29d0229e92bac4e41c4b300ec0997d22c592d3fdedf0c03e46d151f", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES64=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRESOCT=r2, @ANYBLOB="1c000010", @ANYRESOCT=r3, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x24008880}}, {{&(0x7f000000a3c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a500)=[{&(0x7f000000a440)="ad368415d04546cd0e3c7a569404bff1663382180707cbf33e1ac19ebfc61bf2db93b227d01c26c5858a0ece68d2931cbbf067a45cc59a1ae1942f45b527c84026a6b944ef528a6b2fb79251e94d361dd69bf37aff93649444ff23da5d8391f2437db5d6988655914ac360bee67f423e0191e4ec44ab840cf39f50018e57cc421d3d7c827c4b84e4f7327c30373342f9d4c6", 0x92}], 0x1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="d53a1e584a8251daf0436e56854d2149abf9a7268353768fcac71bebaf2641c2d9ddf957a645ccc5e2a2e9b02e913d40f2c082b99d810e47d59301305dc0e8d709e5f031a1c93bd04cb9c495db96f6bd69835f57210dfc0e44f333e7d6092dd18858c3cc7a195362f7d8be785d6b90b1648e298f02850c07e12fdc7bf779961d625c511c204c4de7a1fca55f3aec3b", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRESDEC, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000041746f6f5429c6009216422600000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118}}, {{&(0x7f000000a940)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000aa00)=[{&(0x7f0000001780)="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", 0x124}], 0x1, 0x0, 0x0, 0x40000}}], 0x4, 0xc0c5) r10 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r11 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x2) read$midi(r11, 0x0, 0x14) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = dup(r2) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x8f35]}, 0x8) write(r0, &(0x7f0000000000)="24000000010006", 0x7) 8.41105742s ago: executing program 3 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x200, 0x1b, "3eccd25569e20900"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r4 = socket$packet(0x11, 0x0, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000001, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') sendto$packet(r4, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x101, @remote, 0xff}], 0x2c) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000032d110400", @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a0001800802", @ANYRES32=0x0, @ANYBLOB="247437bf68f5291e7f851060a03b0c1ffd8764737149363432d12e825c25e244c294173b388563bbb28fce471385edfaec7b85c4b10b3ecef145101facac6330d173a312d445c9f6f3b85f33b386eace7505d1075728675f480f5445431e33f8bc274191"], 0x28}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 7.927755219s ago: executing program 3 (id=893): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) write$vga_arbiter(r5, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f00000000c0), 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 7.573893856s ago: executing program 0 (id=894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80120000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1012016, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r6, 0x17014}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='sched\x00') read$nci(r7, &(0x7f0000000280)=""/134, 0x86) umount2(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000380)={0x1, 0xc, 0x2, 0x0, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x4) 7.535505078s ago: executing program 5 (id=895): r0 = io_uring_setup(0x3aad, &(0x7f0000000340)={0x0, 0x244, 0x1000, 0x6, 0x3d4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x7, 0x0, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000140)=0x54) r4 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) creat(&(0x7f0000000240)='./file1\x00', 0xcd) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) write$snapshot(r6, &(0x7f0000000180)="d2aec4d4ceb41fa16ef3c9e6942cd330a68a3c9d6795806f5a1474d2b41b2426683dd43a1f7f9c726bb4d17f8be0b102d6a273291a10", 0x36) poll(&(0x7f0000009b00)=[{r4, 0x1080}], 0x1, 0x72) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(r8, &(0x7f0000000100)='net/psched\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xcf62ec613904abe0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200027bd7400fbdbdf250800000008000a000300000006001b008001000006001a004e2200000500210001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x6, 0x0, @random="01bd0400"}, 0x10) 6.885646281s ago: executing program 4 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000000022, 0x0) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) socket(0x10, 0x803, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[], 0x10}}, 0x440480c1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c00010000000000000000090600150001000000337329de9ab367e06ef9fee18f90734af579da6e4a4cd7373690518afeb49ea3763218c587ae7bbbb7c9164f9d15512873f43e8badc3f07bc96201dcbc15fb8d41e10c370e617a3d375eda13f5812d3ad02e3062fe4a4efb0273d6a4693cc2ef67c50f36a5f3e093d6b8a22c508849c32db6d332422930515ca3ef67d462b8f3553fb34aaed1b015f0310a6345d14eb3781969cc6774165d"], 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 5.902434877s ago: executing program 4 (id=897): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 5.901556494s ago: executing program 5 (id=898): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0x140, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce10ba885", @nested={0x4, 0x100}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x101, 0xfe, 0x0, 0x1, [@typed={0xc1, 0x3b, 0x0, 0x0, @binary="9c89a3b4eb4bd8afb544aa6509ad0948c30fe6658b93b6035a9f51bc0bd9364fdc8a3a58243b8dead7faf4f4affeb9a150ffb22a6f62ce2f8501bfc737453cd8945ad7ead9024b26a69a6d882fd2cede3ad9c4b0588108100ca94808c74ec3556cc2498aed0110fcaaf22476980b7b7e855a9367d48abec233ce26215e0ff272afc09855ea5c0804797a2e95a39e87f637bcaf9e762342e839c6e9a41cdafff0c623ac9d30c5ce8fded11828dc61d0efbada3a5b6ca4967a53d32bb521"}, @generic="7b8f28370041f1f4917f1aef5d8d6d67f1e3a33a2cf273b52f1ae23507ea59a5a086ae3f9d94a06baf6b22e4c6b07baf33a42c1931b48e2de9"]}]}, 0x140}], 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 5.857062963s ago: executing program 2 (id=899): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x5, 0x34324241, 0x2, @stepwise={0x8, 0xf, 0x7ff, 0x0, 0xaeae, 0x84a}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x1, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "07a164be5d9265f3"}, 0x10}, 0x1, 0x0, 0x0, 0x10044805}, 0x20004080) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.819190382s ago: executing program 0 (id=900): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000800)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="4008020000000208b03af269913f2759f33d60fc851d636ec8402c25e269e4339cb236732bb0193f2f7849a898939396e1973c2b091afce69612416957552aeb99b04b1ce39040025e2c0a46b24d5f59fee8e9a657e3e254bcffa729e15ddd6ab8237d627619efe954f7aa20dd4daca6d3b5d91fc83a715b807efca1383980e7e951b9ca50f4515f04b5b4191d27dce0799a"], 0x0}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x10, 0x2000) lsm_list_modules(&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=0x28, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000280)={0x0, 0x0, r5}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}, {@privport}, {@cache_fscache}]}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8) shutdown(r6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x65) 5.81871214s ago: executing program 4 (id=901): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e24, 0x0, 0x0, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd, 0x3, 0x20, 0x1, 0xf0a462ef7147f6e5, 0x1, {0x2, r0}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000007c0)={r1, 0x800, {0x2a00, 0x80010000, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100009423000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8b}, 0x0) 5.729605232s ago: executing program 5 (id=902): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000080)="36797ba6a12c8713ae86f09c902c0428aae1d636c437", &(0x7f00000000c0)=""/63, 0x4}, 0x20) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000800)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.501822903s ago: executing program 2 (id=903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) (fail_nth: 3) 5.141852449s ago: executing program 2 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340003ec0000040004001c00018018001000000000000000"], 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @mcast2, 0x5}}, 0x24) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001480)={0x1f8, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa09}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd52}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x170, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x12}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x18, 0x5, 0x0) r4 = msgget$private(0x0, 0x23) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) 4.672589745s ago: executing program 3 (id=905): sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/228) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() ptrace$cont(0x7, r1, 0x7, 0x7fff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x365}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x55b1, &(0x7f0000000280)={0x0, 0x7ffffc, 0x20, 0x3, 0xcf, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x2000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.457335968s ago: executing program 2 (id=906): sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/228) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() ptrace$cont(0x7, r1, 0x7, 0x7fff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x365}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x55b1, &(0x7f0000000280)={0x0, 0x7ffffc, 0x20, 0x3, 0xcf, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x2000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 3.56236025s ago: executing program 3 (id=907): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000632f000000000000", @ANYRES32=0x1, @ANYBLOB="02000000000000000040000000000000000000007cc5d515f0fdb2d2b1ddebacc1cbe62f336e6af57358b0fd33c8c5a9d6f9ee45a4b517a794168167504e5ee5048c9fcd05badec481818214dbea0654095dcb8ef4586d17342b0137f6ddc0033d51dacba7", @ANYRES32, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000070000000000000000000000000000f2ffffffffffffff00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x32, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r7 = timerfd_create(0x0, 0x80800) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000480), &(0x7f00000005c0), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000408000600777272000c0007002e0000000500000008000900390000000600020011000000080008000000000006000400011500009dd1bc731ec23407534e9a44119cefefa09c3871f7c97e846e9125d766d818524997dc6aef68b58d477c3b08c373e7aed3789e59643caa96dd6cdcd9d4741d"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 2.655342251s ago: executing program 4 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000000022, 0x0) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) socket(0x10, 0x803, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[], 0x10}}, 0x440480c1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c00010000000000000000090600150001000000337329de9ab367e06ef9fee18f90734af579da6e4a4cd7373690518afeb49ea3763218c587ae7bbbb7c9164f9d15512873f43e8badc3f07bc96201dcbc15fb8d41e10c370e617a3d375eda13f5812d3ad02e3062fe4a4efb0273d6a4693cc2ef67c50f36a5f3e093d6b8a22c508849c32db6d332422930515ca3ef67d462b8f3553fb34aaed1b015f0310a6345d14eb3781969cc6774165d"], 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.65441858s ago: executing program 2 (id=909): write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000e81227a1ddfaf80f3292e92b040a00000000000000000000000000000000000000000a6e829a11dd82451c2aaaa9b240d28801dbd03c771ca27c1c86282dcf7a9b8805561b7e5bfdbbe40a4a99d56c64a502781a675a18b3f759c5081c54741b30934c0d97c93883f210a5e6f66a355cc0ce1fd44ada107741ab2f7f340"], 0x50) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="12a54dc33698b32b05007d824d027650f49e99d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) 2.628220143s ago: executing program 3 (id=910): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r6, 0x3}}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x7041, 0x0) 2.565877367s ago: executing program 5 (id=911): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.848225837s ago: executing program 0 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='[']}]}}]}]}]}}]}, 0x78}}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.713736264s ago: executing program 3 (id=913): lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x40, 0x3, 0x6, "67982bca756e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 982.906204ms ago: executing program 4 (id=914): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) 736.365513ms ago: executing program 4 (id=915): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001700)={0x2c, r6, 0x5, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 297.649483ms ago: executing program 0 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340003ec0000040004001c00018018001000"/28], 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @mcast2, 0x5}}, 0x24) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001480)={0x1f8, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3780}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffa09}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd52}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x170, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x12}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x18, 0x5, 0x0) r4 = msgget$private(0x0, 0x23) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) 0s ago: executing program 0 (id=917): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="796100000000000700007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): r permissive=1 [ 214.908969][ T979] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 214.990050][ T7745] lo speed is unknown, defaulting to 1000 [ 215.032653][ T7749] 9pnet_fd: Insufficient options for proto=fd [ 215.122565][ T9] usb 4-1: USB disconnect, device number 17 [ 215.351702][ T1223] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 215.609571][ T1223] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 215.680889][ T1223] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.835734][ T7761] FAULT_INJECTION: forcing a failure. [ 215.835734][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.848998][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(full) [ 215.849026][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.849037][ T7761] Call Trace: [ 215.849043][ T7761] [ 215.849048][ T7761] dump_stack_lvl+0x16c/0x1f0 [ 215.849070][ T7761] should_fail_ex+0x512/0x640 [ 215.849092][ T7761] _copy_from_iter+0x29f/0x1720 [ 215.849117][ T7761] ? __alloc_skb+0x200/0x380 [ 215.849134][ T7761] ? __pfx__copy_from_iter+0x10/0x10 [ 215.849157][ T7761] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 215.849184][ T7761] netlink_sendmsg+0x829/0xdd0 [ 215.849209][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.849239][ T7761] ____sys_sendmsg+0xa95/0xc70 [ 215.849264][ T7761] ? copy_msghdr_from_user+0x10a/0x160 [ 215.849283][ T7761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.849318][ T7761] ___sys_sendmsg+0x134/0x1d0 [ 215.849339][ T7761] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.849366][ T7761] ? rcu_is_watching+0x12/0xc0 [ 215.849388][ T7761] ? irqentry_exit+0x3b/0x90 [ 215.849417][ T7761] ? fdget+0x1b6/0x210 [ 215.849436][ T7761] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 215.849460][ T7761] __sys_sendmsg+0x16d/0x220 [ 215.849478][ T7761] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.849495][ T7761] ? rcu_is_watching+0x12/0xc0 [ 215.849525][ T7761] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 215.849549][ T7761] do_syscall_64+0xcd/0x4c0 [ 215.849570][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.849587][ T7761] RIP: 0033:0x7fc1fef8ebe9 [ 215.849602][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.849617][ T7761] RSP: 002b:00007fc1ffd43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.849634][ T7761] RAX: ffffffffffffffda RBX: 00007fc1ff1b6090 RCX: 00007fc1fef8ebe9 [ 215.849645][ T7761] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 215.849655][ T7761] RBP: 00007fc1ffd43090 R08: 0000000000000000 R09: 0000000000000000 [ 215.849665][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.849675][ T7761] R13: 00007fc1ff1b6128 R14: 00007fc1ff1b6090 R15: 00007ffe0ae23ac8 [ 215.849698][ T7761] [ 216.172570][ T1223] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.181657][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.189810][ T1223] usb 1-1: Product: syz [ 216.193939][ T1223] usb 1-1: Manufacturer: syz [ 216.198512][ T1223] usb 1-1: SerialNumber: syz [ 216.266464][ T30] audit: type=1400 audit(1756003513.270:391): avc: denied { mount } for pid=7759 comm="syz.3.496" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.337095][ T30] audit: type=1400 audit(1756003513.290:392): avc: denied { read write } for pid=7759 comm="syz.3.496" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.387649][ T1223] usb 1-1: config 0 descriptor?? [ 216.441425][ T1223] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 216.466906][ T30] audit: type=1400 audit(1756003513.290:393): avc: denied { open } for pid=7759 comm="syz.3.496" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.513670][ T7765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.523460][ T30] audit: type=1400 audit(1756003513.300:394): avc: denied { ioctl } for pid=7759 comm="syz.3.496" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.611339][ T30] audit: type=1400 audit(1756003513.560:395): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.644372][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.665420][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.906533][ T5857] Bluetooth: hci5: command tx timeout [ 216.936077][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.963212][ T5914] usb 1-1: USB disconnect, device number 20 [ 217.017648][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 217.215966][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 217.224403][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 217.245869][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.253994][ T9] usb 4-1: Product: syz [ 217.770057][ T9] usb 4-1: Manufacturer: syz [ 217.775066][ T9] usb 4-1: SerialNumber: syz [ 217.796104][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.800021][ T9] usb 4-1: config 0 descriptor?? [ 217.803762][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.817283][ T7745] bridge_slave_0: entered allmulticast mode [ 217.825783][ T7745] bridge_slave_0: entered promiscuous mode [ 217.832035][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 217.838225][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.838341][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.838450][ T7745] bridge_slave_1: entered allmulticast mode [ 218.023926][ T7745] bridge_slave_1: entered promiscuous mode [ 218.039401][ T9] gspca_stk1135: reg_w 0x2 err -71 [ 218.046675][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.054961][ T9] gspca_stk1135: Sensor write failed [ 218.062076][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.069190][ T9] gspca_stk1135: Sensor write failed [ 218.074601][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.081251][ T9] gspca_stk1135: Sensor read failed [ 218.172913][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.180827][ T9] gspca_stk1135: Sensor read failed [ 218.195655][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.206718][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 218.480111][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.489260][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.712087][ T7789] mmap: syz.2.500 (7789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.716189][ T9] gspca_stk1135: Sensor read failed [ 218.786257][ T7787] lo speed is unknown, defaulting to 1000 [ 218.875783][ T30] audit: type=1326 audit(1756003515.790:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 218.935953][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.952440][ T9] gspca_stk1135: Sensor read failed [ 218.960912][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 218.965854][ T5857] Bluetooth: hci5: command tx timeout [ 218.968305][ T30] audit: type=1326 audit(1756003515.840:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 219.356117][ T9] gspca_stk1135: Sensor write failed [ 219.379709][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 219.393294][ T7745] team0: Port device team_slave_0 added [ 219.410725][ T9] gspca_stk1135: Sensor write failed [ 219.414808][ T7745] team0: Port device team_slave_1 added [ 219.419553][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 219.543309][ T30] audit: type=1326 audit(1756003515.840:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 219.569605][ T9] usb 4-1: USB disconnect, device number 18 [ 219.584826][ T30] audit: type=1326 audit(1756003515.840:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 219.608012][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.114450][ T30] audit: type=1326 audit(1756003515.840:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.137593][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.165036][ T30] audit: type=1326 audit(1756003515.840:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.188249][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.233474][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.248266][ T30] audit: type=1326 audit(1756003515.840:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.271397][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.330392][ T30] audit: type=1326 audit(1756003515.840:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.348292][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.353582][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.385419][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.406961][ T30] audit: type=1326 audit(1756003515.840:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.421398][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.431617][ T30] audit: type=1326 audit(1756003515.840:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.469162][ T30] audit: type=1326 audit(1756003515.840:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.497195][ T30] audit: type=1326 audit(1756003515.960:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.522697][ T30] audit: type=1326 audit(1756003515.970:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.549007][ T30] audit: type=1326 audit(1756003515.970:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 220.572209][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.586958][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.594091][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.623612][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.766386][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 220.775417][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 220.785330][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 220.803204][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 220.907881][ T7820] hub 8-0:1.0: USB hub found [ 220.913322][ T7820] hub 8-0:1.0: 1 port detected [ 221.241091][ T5857] Bluetooth: hci5: command tx timeout [ 221.343351][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.351411][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.359488][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.367659][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.375769][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.384366][ T7810] netlink: 'syz.4.507': attribute type 3 has an invalid length. [ 221.823762][ T7745] hsr_slave_0: entered promiscuous mode [ 221.854365][ T7745] hsr_slave_1: entered promiscuous mode [ 221.866768][ T7745] debugfs: 'hsr0' already exists in 'hsr' [ 221.906407][ T7745] Cannot create hsr debugfs directory [ 222.141093][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 222.327389][ T44] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 222.353305][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.415244][ T44] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.491870][ T7745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.509367][ T44] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.514011][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 222.565662][ T7745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.579443][ T7745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.596356][ T44] usb 1-1: Product: syz [ 222.601446][ T7745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.618134][ T44] usb 1-1: Manufacturer: syz [ 222.627475][ T44] usb 1-1: SerialNumber: syz [ 222.651605][ T44] usb 1-1: config 0 descriptor?? [ 222.699621][ T44] usb 1-1: selecting invalid altsetting 0 [ 222.747107][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.772902][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.796651][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.803740][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.847702][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.854799][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.892327][ T7745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.148674][ T5956] usb 1-1: USB disconnect, device number 21 [ 223.298439][ T5857] Bluetooth: hci5: command tx timeout [ 223.493187][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.562990][ T7854] SELinux: ebitmap: high bit 2148008064 is not equal to the expected value 384 [ 223.587353][ T7854] SELinux: failed to load policy [ 223.621945][ T7860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.654861][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 223.912090][ T7867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.923521][ T7867] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.872584][ T7879] fuse: Bad value for 'user_id' [ 224.895963][ T7879] fuse: Bad value for 'user_id' [ 224.966593][ T7745] veth0_vlan: entered promiscuous mode [ 225.065304][ T7745] veth1_vlan: entered promiscuous mode [ 225.143158][ T7745] veth0_macvtap: entered promiscuous mode [ 225.165173][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 225.165188][ T30] audit: type=1400 audit(1756003522.220:420): avc: denied { lock } for pid=7878 comm="syz.4.519" path="socket:[17166]" dev="sockfs" ino=17166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.222637][ T7745] veth1_macvtap: entered promiscuous mode [ 225.262010][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.277063][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.344826][ T7886] tipc: Started in network mode [ 225.355263][ T7886] tipc: Node identity 1240798b8adb, cluster identity 4711 [ 225.382924][ T7886] tipc: Enabled bearer , priority 0 [ 225.395080][ T698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.434577][ T698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.464615][ T7886] syzkaller0: entered promiscuous mode [ 225.470488][ T7886] syzkaller0: entered allmulticast mode [ 225.490740][ T698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.522844][ T698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.581288][ T7886] tipc: Resetting bearer [ 225.733183][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.734788][ T698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.749287][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.763117][ T698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.815829][ T5914] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.986862][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 226.069492][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.426404][ T5956] tipc: Node number set to 2560326027 [ 226.630070][ T30] audit: type=1400 audit(1756003523.150:421): avc: denied { map } for pid=7894 comm="syz.4.525" path="/108/file0" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.636016][ T7891] tipc: Resetting bearer [ 226.681725][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.681748][ T30] audit: type=1400 audit(1756003523.740:422): avc: denied { mounton } for pid=7745 comm="syz-executor" path="/root/syzkaller.5pX2nr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 226.762647][ T30] audit: type=1400 audit(1756003523.810:423): avc: denied { mount } for pid=7745 comm="syz-executor" name="/" dev="gadgetfs" ino=7427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 226.785092][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.852502][ T7891] tipc: Disabling bearer [ 226.860215][ T5914] usb 3-1: config 0 descriptor?? [ 226.887511][ T5914] hub 3-1:0.0: USB hub found [ 227.065337][ T30] audit: type=1400 audit(1756003524.110:424): avc: denied { read } for pid=7908 comm="syz.5.529" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.106080][ T5914] hub 3-1:0.0: 1 port detected [ 227.111134][ T30] audit: type=1400 audit(1756003524.120:425): avc: denied { open } for pid=7908 comm="syz.5.529" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.153572][ T5907] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 227.187956][ T30] audit: type=1400 audit(1756003524.210:426): avc: denied { ioctl } for pid=7908 comm="syz.5.529" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 227.346540][ T7915] overlayfs: overlapping lowerdir path [ 227.807334][ T5907] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.826341][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.847293][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.856685][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 227.864901][ T5907] usb 1-1: Product: syz [ 227.887615][ T5907] usb 1-1: Manufacturer: syz [ 227.892234][ T5907] usb 1-1: SerialNumber: syz [ 227.912449][ T5907] usb 1-1: config 0 descriptor?? [ 227.937411][ T5907] usb 1-1: selecting invalid altsetting 0 [ 228.851228][ T5907] usb 1-1: USB disconnect, device number 22 [ 228.860292][ T5914] hub 3-1:0.0: hub_ext_port_status failed (err = 3) [ 229.030800][ T7925] SELinux: failed to load policy [ 229.187334][ T5907] usb 3-1: USB disconnect, device number 10 [ 229.551373][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 230.041305][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 230.111274][ T30] audit: type=1400 audit(1756003527.166:427): avc: denied { setopt } for pid=7961 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.415960][ T979] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.587241][ T979] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 233.626118][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.650760][ T979] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.663571][ T979] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 233.672340][ T979] usb 5-1: Product: syz [ 233.690957][ T979] usb 5-1: Manufacturer: syz [ 233.722915][ T979] usb 5-1: SerialNumber: syz [ 233.823451][ T979] usb 5-1: config 0 descriptor?? [ 233.980852][ T979] usb 5-1: selecting invalid altsetting 0 [ 234.088205][ T30] audit: type=1400 audit(1756003531.116:428): avc: denied { mount } for pid=8004 comm="syz.2.554" name="/" dev="autofs" ino=18294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.616478][ T30] audit: type=1400 audit(1756003531.476:429): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.639334][ T1223] usb 5-1: USB disconnect, device number 22 [ 235.152401][ T8028] overlayfs: overlapping lowerdir path [ 235.325770][ T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.807266][ T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 235.829750][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 235.851257][ T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 235.869715][ T979] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 235.879508][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.887696][ T979] usb 1-1: Product: syz [ 236.075773][ T979] usb 1-1: Manufacturer: syz [ 236.080399][ T979] usb 1-1: SerialNumber: syz [ 236.695985][ T8042] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.707100][ T8042] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 236.807475][ T979] usb 1-1: config 0 descriptor?? [ 237.252479][ T8025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.274229][ T979] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 237.337124][ T8051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.348628][ T8051] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 237.873566][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.085176][ T30] audit: type=1800 audit(1756003534.817:430): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.566" name="bus" dev="overlay" ino=708 res=0 errno=0 [ 238.316051][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 238.324833][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.336125][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.347140][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.356855][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.367001][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.384503][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.424008][ T5907] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.436061][ T8064] FAULT_INJECTION: forcing a failure. [ 238.436061][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 238.448813][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.5.567 Not tainted syzkaller #0 PREEMPT(full) [ 238.448836][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.448846][ T8064] Call Trace: [ 238.448852][ T8064] [ 238.448859][ T8064] dump_stack_lvl+0x16c/0x1f0 [ 238.448883][ T8064] should_fail_ex+0x512/0x640 [ 238.448907][ T8064] should_failslab+0xc2/0x120 [ 238.448928][ T8064] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 238.448947][ T8064] ? skb_clone+0x190/0x3f0 [ 238.448970][ T8064] skb_clone+0x190/0x3f0 [ 238.448990][ T8064] netlink_deliver_tap+0xabd/0xd30 [ 238.449015][ T8064] netlink_unicast+0x64c/0x870 [ 238.449044][ T8064] ? __pfx_netlink_unicast+0x10/0x10 [ 238.449065][ T8064] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 238.449093][ T8064] netlink_sendmsg+0x8d1/0xdd0 [ 238.449117][ T8064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.449147][ T8064] ____sys_sendmsg+0xa95/0xc70 [ 238.449171][ T8064] ? copy_msghdr_from_user+0x10a/0x160 [ 238.449190][ T8064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.449226][ T8064] ___sys_sendmsg+0x134/0x1d0 [ 238.449247][ T8064] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.449298][ T8064] __sys_sendmsg+0x16d/0x220 [ 238.449317][ T8064] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.449353][ T8064] do_syscall_64+0xcd/0x4c0 [ 238.449374][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.449392][ T8064] RIP: 0033:0x7f8a7058ebe9 [ 238.449406][ T8064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.449423][ T8064] RSP: 002b:00007f8a71325038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.449440][ T8064] RAX: ffffffffffffffda RBX: 00007f8a707b6180 RCX: 00007f8a7058ebe9 [ 238.449451][ T8064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 238.449461][ T8064] RBP: 00007f8a71325090 R08: 0000000000000000 R09: 0000000000000000 [ 238.449471][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.449482][ T8064] R13: 00007f8a707b6218 R14: 00007f8a707b6180 R15: 00007fffad3ab3b8 [ 238.449506][ T8064] [ 238.664464][ T5907] usb 4-1: Manufacturer: syz [ 238.670974][ T5907] usb 4-1: config 0 descriptor?? [ 238.725788][ T5914] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.735772][ T5894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 238.735940][ T44] usb 1-1: USB disconnect, device number 23 [ 238.955855][ T5907] rc_core: IR keymap rc-hauppauge not found [ 238.962050][ T5907] Registered IR keymap rc-empty [ 238.967508][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 238.985774][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 238.991025][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 238.996592][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.012663][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.037098][ T5914] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 239.048105][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 239.059711][ T5894] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.074227][ T5914] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 239.083816][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 239.096055][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.538822][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.557612][ T5914] usb 3-1: Product: syz [ 239.563454][ T5894] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 239.574579][ T5914] usb 3-1: Manufacturer: syz [ 239.589236][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.596652][ T5894] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 239.673080][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 239.681324][ T5914] usb 3-1: SerialNumber: syz [ 239.688639][ T5894] usb 5-1: Product: syz [ 239.693452][ T5914] usb 3-1: config 0 descriptor?? [ 239.700966][ T5894] usb 5-1: Manufacturer: syz [ 239.705557][ T5894] usb 5-1: SerialNumber: syz [ 239.706396][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.5.573'. [ 239.710245][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.807608][ T5894] usb 5-1: config 0 descriptor?? [ 239.814441][ T5914] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22 [ 239.822944][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.831599][ T5914] usb 3-1: unsupported MDLM descriptors [ 239.851894][ T5894] gs_usb 5-1:0.0: Required endpoints not found [ 239.861194][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.845941][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.875796][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.898245][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.908651][ T5894] usb 3-1: USB disconnect, device number 11 [ 240.919785][ T8093] capability: warning: `syz.5.578' uses 32-bit capabilities (legacy support in use) [ 240.988875][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.069451][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.255793][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.453229][ T8104] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.469480][ T8104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 241.796356][ T5907] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 241.819979][ T5907] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.831893][ T5907] usb 4-1: USB disconnect, device number 19 [ 242.173178][ T8110] No control pipe specified [ 242.943091][ T30] audit: type=1400 audit(1756003539.862:431): avc: denied { setattr } for pid=8119 comm="syz.2.585" name="adsp1" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 242.998002][ T30] audit: type=1400 audit(1756003540.062:432): avc: denied { read } for pid=8113 comm="syz.0.583" path="socket:[18417]" dev="sockfs" ino=18417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.135891][ T5956] usb 5-1: USB disconnect, device number 23 [ 246.251677][ T8130] rdma_rxe: rxe_newlink: failed to add lo [ 246.502749][ T8129] fuse: Unknown parameter 'group_id00000000000000000000' [ 246.538483][ T30] audit: type=1400 audit(1756003543.602:433): avc: denied { ioctl } for pid=8128 comm="syz.3.586" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 247.309273][ T8140] FAULT_INJECTION: forcing a failure. [ 247.309273][ T8140] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 247.375063][ T8140] CPU: 1 UID: 0 PID: 8140 Comm: syz.3.590 Not tainted syzkaller #0 PREEMPT(full) [ 247.375088][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.375098][ T8140] Call Trace: [ 247.375104][ T8140] [ 247.375110][ T8140] dump_stack_lvl+0x16c/0x1f0 [ 247.375130][ T8140] should_fail_ex+0x512/0x640 [ 247.375145][ T8140] should_fail_alloc_page+0xe7/0x130 [ 247.375159][ T8140] prepare_alloc_pages+0x3c2/0x610 [ 247.375177][ T8140] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 247.375196][ T8140] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.375209][ T8140] ? arch_irq_work_raise+0x4f/0x70 [ 247.375224][ T8140] ? __irq_work_queue_local+0x1d7/0x580 [ 247.375244][ T8140] ? irq_work_queue+0xce/0x100 [ 247.375260][ T8140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.375282][ T8140] ? policy_nodemask+0xea/0x4e0 [ 247.375305][ T8140] alloc_pages_mpol+0x1fb/0x550 [ 247.375325][ T8140] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 247.375346][ T8140] ? __lock_acquire+0x62e/0x1ce0 [ 247.375368][ T8140] folio_alloc_mpol_noprof+0x36/0x2f0 [ 247.375384][ T8140] vma_alloc_folio_noprof+0xed/0x1e0 [ 247.375398][ T8140] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 247.375417][ T8140] do_pte_missing+0x2230/0x3ba0 [ 247.375434][ T8140] ? find_held_lock+0x2b/0x80 [ 247.375451][ T8140] __handle_mm_fault+0x152a/0x2a50 [ 247.375472][ T8140] ? __pfx___handle_mm_fault+0x10/0x10 [ 247.375490][ T8140] ? __pte_offset_map_lock+0x174/0x310 [ 247.375504][ T8140] ? find_held_lock+0x2b/0x80 [ 247.375521][ T8140] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 247.375540][ T8140] handle_mm_fault+0x589/0xd10 [ 247.375559][ T8140] __get_user_pages+0x551/0x34a0 [ 247.375578][ T8140] ? down_read_killable+0x220/0x4b0 [ 247.375592][ T8140] ? __lock_acquire+0x62e/0x1ce0 [ 247.375608][ T8140] ? __pfx___get_user_pages+0x10/0x10 [ 247.375627][ T8140] __gup_longterm_locked+0xa92/0x17e0 [ 247.375645][ T8140] ? try_get_folio+0x1d2/0x730 [ 247.375657][ T8140] ? __pfx___gup_longterm_locked+0x10/0x10 [ 247.375680][ T8140] ? try_get_folio+0x255/0x730 [ 247.375698][ T8140] ? find_held_lock+0x2b/0x80 [ 247.375717][ T8140] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 247.375740][ T8140] gup_fast_fallback+0xf78/0x23f0 [ 247.375769][ T8140] ? __pfx_gup_fast_fallback+0x10/0x10 [ 247.375785][ T8140] ? __lock_acquire+0xb97/0x1ce0 [ 247.375810][ T8140] pin_user_pages_fast+0xa7/0xf0 [ 247.375825][ T8140] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 247.375844][ T8140] iov_iter_extract_pages+0x3a2/0x1ed0 [ 247.375860][ T8140] ? finish_task_switch.isra.0+0x221/0xc10 [ 247.375875][ T8140] ? rcu_is_watching+0x12/0xc0 [ 247.375889][ T8140] ? trace_sched_exit_tp+0xd1/0x120 [ 247.375901][ T8140] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 247.375915][ T8140] ? sock_kmalloc+0x111/0x170 [ 247.375928][ T8140] ? kasan_save_stack+0x42/0x60 [ 247.375938][ T8140] ? kasan_save_stack+0x33/0x60 [ 247.375949][ T8140] ? af_alg_alloc_areq+0xbc/0x2e0 [ 247.375960][ T8140] ? ____sys_recvmsg+0x5f6/0x6b0 [ 247.375974][ T8140] ? ___sys_recvmsg+0x114/0x1a0 [ 247.375985][ T8140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.376001][ T8140] extract_iter_to_sg+0xf6e/0x20c0 [ 247.376019][ T8140] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 247.376030][ T8140] ? irqentry_exit+0x3b/0x90 [ 247.376041][ T8140] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.376057][ T8140] ? kasan_save_track+0x14/0x30 [ 247.376068][ T8140] ? af_alg_get_rsgl+0x565/0x7f0 [ 247.376081][ T8140] af_alg_get_rsgl+0x2b8/0x7f0 [ 247.376098][ T8140] aead_recvmsg+0x474/0x16d0 [ 247.376117][ T8140] ? __pfx_aead_recvmsg+0x10/0x10 [ 247.376131][ T8140] ? __pfx_aead_recvmsg+0x10/0x10 [ 247.376149][ T8140] ____sys_recvmsg+0x5f6/0x6b0 [ 247.376166][ T8140] ? __pfx_____sys_recvmsg+0x10/0x10 [ 247.376185][ T8140] ? kfree+0x24f/0x4d0 [ 247.376200][ T8140] ? __lock_acquire+0x62e/0x1ce0 [ 247.376219][ T8140] ___sys_recvmsg+0x114/0x1a0 [ 247.376231][ T8140] ? __pfx____sys_recvmsg+0x10/0x10 [ 247.376251][ T8140] ? __pfx___might_resched+0x10/0x10 [ 247.376267][ T8140] do_recvmmsg+0x2fe/0x750 [ 247.376281][ T8140] ? __pfx_do_recvmmsg+0x10/0x10 [ 247.376304][ T8140] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 247.376332][ T8140] ? __fget_files+0x20e/0x3c0 [ 247.376352][ T8140] __x64_sys_recvmmsg+0x22a/0x280 [ 247.376365][ T8140] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.376382][ T8140] do_syscall_64+0xcd/0x4c0 [ 247.376396][ T8140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.376406][ T8140] RIP: 0033:0x7fc1fef8ebe9 [ 247.376415][ T8140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.376426][ T8140] RSP: 002b:00007fc1ffd64038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 247.376437][ T8140] RAX: ffffffffffffffda RBX: 00007fc1ff1b5fa0 RCX: 00007fc1fef8ebe9 [ 247.376444][ T8140] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 247.376450][ T8140] RBP: 00007fc1ffd64090 R08: 0000000000000000 R09: 0000000000000000 [ 247.376457][ T8140] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 247.376463][ T8140] R13: 00007fc1ff1b6038 R14: 00007fc1ff1b5fa0 R15: 00007ffe0ae23ac8 [ 247.376477][ T8140] [ 248.319035][ T8150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.786644][ T8174] fuse: Unknown parameter 'group_id00000000000000000000' [ 249.818384][ T5956] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.022684][ T30] audit: type=1400 audit(1756003547.072:434): avc: denied { read } for pid=8179 comm="syz.3.603" path="socket:[18868]" dev="sockfs" ino=18868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.061249][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 250.076568][ T5956] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 250.088307][ T8183] validate_nla: 43 callbacks suppressed [ 250.088329][ T8183] netlink: 'syz.4.602': attribute type 12 has an invalid length. [ 250.129263][ T5956] usb 6-1: config 0 has no interface number 0 [ 250.145172][ T5956] usb 6-1: config 0 interface 184 has no altsetting 0 [ 250.182443][ T5956] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 250.197269][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.205499][ T5956] usb 6-1: Product: syz [ 250.209812][ T5956] usb 6-1: Manufacturer: syz [ 250.214402][ T5956] usb 6-1: SerialNumber: syz [ 250.328993][ T5956] usb 6-1: config 0 descriptor?? [ 250.832035][ T5956] smsc75xx v1.0.0 [ 250.905741][ T44] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 251.320957][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 251.360074][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.449559][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 251.611343][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 251.650334][ T44] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 251.659507][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 252.080292][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.088788][ T44] usb 5-1: Product: syz [ 252.108798][ T44] usb 5-1: Manufacturer: syz [ 252.119554][ T44] usb 5-1: SerialNumber: syz [ 252.130504][ T44] usb 5-1: config 0 descriptor?? [ 252.320080][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 253.462140][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 253.473061][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 253.483811][ T5956] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 253.494411][ T5956] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 253.542549][ T5956] usb 6-1: USB disconnect, device number 2 [ 254.031666][ T30] audit: type=1400 audit(1756003551.092:435): avc: denied { ioctl } for pid=8221 comm="syz.5.614" path="socket:[18995]" dev="sockfs" ino=18995 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.148329][ T30] audit: type=1400 audit(1756003551.212:436): avc: denied { accept } for pid=8225 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.189721][ T8227] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 254.313875][ T30] audit: type=1400 audit(1756003551.242:437): avc: denied { setattr } for pid=8224 comm="syz.2.615" name="[userfaultfd]" dev="anon_inodefs" ino=19708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.344055][ T8231] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 254.344055][ T8231] Ue[%#s' [ 254.386443][ T44] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 254.430683][ T44] usb 5-1: USB disconnect, device number 24 [ 254.462491][ T30] audit: type=1400 audit(1756003551.472:438): avc: denied { bind } for pid=8221 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.219314][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.225608][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.316991][ T8244] fuse: Unknown parameter 'group_id00000000000000000000' [ 256.931854][ T8236] netlink: 80 bytes leftover after parsing attributes in process `syz.4.618'. [ 257.060630][ T8236] kAFS: No cell specified [ 257.640070][ T8263] netlink: 'syz.5.624': attribute type 2 has an invalid length. [ 257.648825][ T8263] netlink: 'syz.5.624': attribute type 11 has an invalid length. [ 257.656674][ T8263] netlink: 132 bytes leftover after parsing attributes in process `syz.5.624'. [ 257.899144][ T8267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58369 sclass=netlink_route_socket pid=8267 comm=syz.0.627 [ 257.934252][ T8267] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 257.934252][ T8267] program syz.0.627 not setting count and/or reply_len properly [ 258.955776][ T5956] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 259.276969][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 259.338935][ T8286] FAULT_INJECTION: forcing a failure. [ 259.338935][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 259.364275][ T5956] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 259.373640][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.417751][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz.5.634 Not tainted syzkaller #0 PREEMPT(full) [ 259.417777][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.417787][ T8286] Call Trace: [ 259.417793][ T8286] [ 259.417800][ T8286] dump_stack_lvl+0x16c/0x1f0 [ 259.417824][ T8286] should_fail_ex+0x512/0x640 [ 259.417849][ T8286] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 259.417878][ T8286] should_failslab+0xc2/0x120 [ 259.417898][ T8286] __kmalloc_cache_noprof+0x6a/0x3e0 [ 259.417924][ T8286] ? rcu_is_watching+0x12/0xc0 [ 259.417944][ T8286] ? vhost_task_create+0xe5/0x2e0 [ 259.417962][ T8286] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 259.417986][ T8286] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 259.418013][ T8286] vhost_task_create+0xe5/0x2e0 [ 259.418030][ T8286] ? __pfx_vhost_task_create+0x10/0x10 [ 259.418055][ T8286] ? __pfx_vhost_task_fn+0x10/0x10 [ 259.418090][ T8286] kvm_mmu_post_init_vm+0x1b7/0x380 [ 259.418113][ T8286] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 259.418139][ T8286] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 259.418168][ T8286] kvm_vcpu_ioctl+0x5eb/0x1690 [ 259.418195][ T8286] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 259.418219][ T8286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.418243][ T8286] ? do_vfs_ioctl+0x128/0x14f0 [ 259.418270][ T8286] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 259.418297][ T8286] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 259.418334][ T8286] ? hook_file_ioctl_common+0x145/0x410 [ 259.418361][ T8286] ? selinux_file_ioctl+0x180/0x270 [ 259.418385][ T8286] ? selinux_file_ioctl+0xb4/0x270 [ 259.418410][ T8286] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 259.418436][ T8286] __x64_sys_ioctl+0x18e/0x210 [ 259.418464][ T8286] do_syscall_64+0xcd/0x4c0 [ 259.418487][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.418505][ T8286] RIP: 0033:0x7f8a7058ebe9 [ 259.418518][ T8286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.418535][ T8286] RSP: 002b:00007f8a71367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.418552][ T8286] RAX: ffffffffffffffda RBX: 00007f8a707b5fa0 RCX: 00007f8a7058ebe9 [ 259.418563][ T8286] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 259.418573][ T8286] RBP: 00007f8a71367090 R08: 0000000000000000 R09: 0000000000000000 [ 259.418583][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.418593][ T8286] R13: 00007f8a707b6038 R14: 00007f8a707b5fa0 R15: 00007fffad3ab3b8 [ 259.418617][ T8286] [ 259.678119][ T5956] usb 3-1: config 0 descriptor?? [ 259.684964][ T8274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.127192][ T5956] hid_parser_main: 7 callbacks suppressed [ 260.127206][ T5956] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 260.139701][ T5956] ryos 0003:1E7D:3138.0002: unknown main item tag 0x1 [ 260.184030][ T5956] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 260.292205][ T5956] ryos 0003:1E7D:3138.0002: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 260.334035][ T8271] input: syz0 as /devices/virtual/input/input25 [ 260.343778][ T30] audit: type=1400 audit(1756003557.392:439): avc: denied { ioctl } for pid=8264 comm="syz.2.626" path="socket:[19068]" dev="sockfs" ino=19068 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.395777][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 260.585763][ T44] usb 1-1: device descriptor read/64, error -71 [ 261.026823][ T44] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 261.185782][ T44] usb 1-1: device descriptor read/64, error -71 [ 261.306424][ T44] usb usb1-port1: attempt power cycle [ 261.488639][ T979] usb 3-1: USB disconnect, device number 12 [ 262.196007][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 262.216768][ T44] usb 1-1: device descriptor read/8, error -71 [ 262.223381][ T30] audit: type=1400 audit(1756003559.282:440): avc: denied { bind } for pid=8311 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.264673][ T30] audit: type=1400 audit(1756003559.302:441): avc: denied { listen } for pid=8311 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.307639][ T30] audit: type=1400 audit(1756003559.302:442): avc: denied { connect } for pid=8311 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.859165][ T8319] FAULT_INJECTION: forcing a failure. [ 262.859165][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 262.872666][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.4.643 Not tainted syzkaller #0 PREEMPT(full) [ 262.872688][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.872698][ T8319] Call Trace: [ 262.872703][ T8319] [ 262.872710][ T8319] dump_stack_lvl+0x16c/0x1f0 [ 262.872731][ T8319] should_fail_ex+0x512/0x640 [ 262.872750][ T8319] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.872770][ T8319] should_failslab+0xc2/0x120 [ 262.872788][ T8319] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.872805][ T8319] ? getname_flags.part.0+0x4c/0x550 [ 262.872833][ T8319] getname_flags.part.0+0x4c/0x550 [ 262.872858][ T8319] getname_flags+0x93/0xf0 [ 262.872875][ T8319] __x64_sys_renameat2+0xd4/0x130 [ 262.872898][ T8319] do_syscall_64+0xcd/0x4c0 [ 262.872917][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.872933][ T8319] RIP: 0033:0x7f720c18ebe9 [ 262.872946][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.872961][ T8319] RSP: 002b:00007f720d03e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 262.872977][ T8319] RAX: ffffffffffffffda RBX: 00007f720c3b6090 RCX: 00007f720c18ebe9 [ 262.872987][ T8319] RDX: 0000000000000003 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 262.872997][ T8319] RBP: 00007f720d03e090 R08: 0000000000000001 R09: 0000000000000000 [ 262.873006][ T8319] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.873016][ T8319] R13: 00007f720c3b6128 R14: 00007f720c3b6090 R15: 00007ffd6b441188 [ 262.873038][ T8319] [ 262.882509][ T30] audit: type=1400 audit(1756003559.312:443): avc: denied { setopt } for pid=8311 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.032873][ T44] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 263.235413][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.751001][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.871230][ T44] usb 1-1: device descriptor read/8, error -71 [ 263.886111][ T8334] lo speed is unknown, defaulting to 1000 [ 264.033608][ T44] usb usb1-port1: unable to enumerate USB device [ 264.054409][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.650'. [ 264.096779][ T979] libceph: connect (1)[c::]:6789 error -101 [ 264.109366][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 264.117132][ T8345] ceph: No mds server is up or the cluster is laggy [ 264.118360][ T8344] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 264.236262][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 264.475863][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 264.487543][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.508374][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.543054][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.569972][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 264.594315][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.729190][ T9] usb 4-1: config 0 descriptor?? [ 265.453174][ T8369] FAULT_INJECTION: forcing a failure. [ 265.453174][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 265.465967][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT(full) [ 265.465988][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.465995][ T8369] Call Trace: [ 265.465999][ T8369] [ 265.466003][ T8369] dump_stack_lvl+0x16c/0x1f0 [ 265.466019][ T8369] should_fail_ex+0x512/0x640 [ 265.466032][ T8369] ? fs_reclaim_acquire+0xae/0x150 [ 265.466051][ T8369] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 265.466067][ T8369] should_failslab+0xc2/0x120 [ 265.466080][ T8369] __kmalloc_noprof+0xd2/0x510 [ 265.466095][ T8369] tomoyo_realpath_from_path+0xc2/0x6e0 [ 265.466115][ T8369] tomoyo_check_open_permission+0x2ab/0x3c0 [ 265.466130][ T8369] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 265.466163][ T8369] ? do_raw_spin_lock+0x12c/0x2b0 [ 265.466180][ T8369] tomoyo_file_open+0x6b/0x90 [ 265.466191][ T8369] security_file_open+0x84/0x1e0 [ 265.466209][ T8369] do_dentry_open+0x596/0x1530 [ 265.466225][ T8369] vfs_open+0x82/0x3f0 [ 265.466241][ T8369] path_openat+0x1de4/0x2cb0 [ 265.466259][ T8369] ? __pfx_path_openat+0x10/0x10 [ 265.466272][ T8369] ? mark_held_locks+0x49/0x80 [ 265.466290][ T8369] do_filp_open+0x20b/0x470 [ 265.466302][ T8369] ? __pfx_do_filp_open+0x10/0x10 [ 265.466325][ T8369] ? alloc_fd+0x471/0x7d0 [ 265.466341][ T8369] do_sys_openat2+0x11b/0x1d0 [ 265.466355][ T8369] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.466372][ T8369] ? __fget_files+0x20e/0x3c0 [ 265.466382][ T8369] ? sysvec_kvm_asyncpf_interrupt+0x80/0xc0 [ 265.466397][ T8369] __x64_sys_openat+0x174/0x210 [ 265.466412][ T8369] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.466427][ T8369] ? ksys_write+0x1ac/0x250 [ 265.466442][ T8369] do_syscall_64+0xcd/0x4c0 [ 265.466456][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.466467][ T8369] RIP: 0033:0x7efc2818d550 [ 265.466475][ T8369] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 265.466486][ T8369] RSP: 002b:00007efc28f6fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 265.466497][ T8369] RAX: ffffffffffffffda RBX: 000000000000c001 RCX: 00007efc2818d550 [ 265.466503][ T8369] RDX: 000000000000c001 RSI: 00007efc28f6fc10 RDI: 00000000ffffff9c [ 265.466510][ T8369] RBP: 00007efc28f6fc10 R08: 0000000000000000 R09: 0023617363762f76 [ 265.466516][ T8369] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 265.466523][ T8369] R13: 00007efc283b6128 R14: 00007efc283b6090 R15: 00007fff1b6c0108 [ 265.466537][ T8369] [ 265.466587][ T8369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.748097][ T9] hid (null): unknown global tag 0xd [ 265.756277][ T9] hid (null): report_id 0 is invalid [ 265.762013][ T9] hid (null): global environment stack underflow [ 265.776006][ T9] hid (null): unknown global tag 0xe [ 265.781801][ T9] hid (null): unknown global tag 0xc [ 265.795894][ T9] hid (null): unknown global tag 0xd [ 265.801445][ T9] hid (null): unknown global tag 0xd [ 266.176374][ T9] hid (null): report_id 0 is invalid [ 266.218293][ T30] audit: type=1400 audit(1756003563.258:444): avc: denied { ioctl } for pid=8339 comm="syz.3.649" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 266.631752][ T9] usb 4-1: USB disconnect, device number 20 [ 266.925803][ T5955] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.376831][ T8391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.388335][ T8391] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 267.443736][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.734293][ T5955] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 267.796899][ T30] audit: type=1400 audit(1756003564.812:445): avc: denied { create } for pid=8385 comm="syz.4.659" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 267.965823][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.392648][ T5955] usb 6-1: config 0 descriptor?? [ 268.399442][ T30] audit: type=1400 audit(1756003564.812:446): avc: denied { mounton } for pid=8385 comm="syz.4.659" path="/file0" dev="ramfs" ino=19276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 268.606013][ T30] audit: type=1400 audit(1756003565.662:447): avc: denied { read } for pid=8400 comm="syz.2.664" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 268.653610][ T30] audit: type=1400 audit(1756003565.662:448): avc: denied { open } for pid=8400 comm="syz.2.664" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 268.748109][ T8401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.754230][ T8401] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 269.197678][ T8401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.236989][ T8401] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 269.341922][ T8401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.350581][ T8401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 269.388449][ T8401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.414252][ T8401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 269.427363][ T8401] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.433866][ T8401] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.783503][ T8401] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.805400][ T8401] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 269.812652][ T8401] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 269.830616][ T8401] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 269.870131][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.895998][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.930304][ T5955] usbhid 6-1:0.0: can't add hid device: -71 [ 269.940373][ T5955] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 269.950279][ T5955] usb 6-1: USB disconnect, device number 3 [ 270.285748][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 270.435745][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 270.441583][ T30] audit: type=1400 audit(1756003567.502:449): avc: denied { execute } for pid=8413 comm="syz.4.667" path="/dev/nullb0" dev="devtmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 270.443560][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.736803][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.806059][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 270.931150][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.961241][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.965788][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 270.981158][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.017701][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.038275][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.051076][ T9] usb 4-1: Manufacturer: syz [ 271.059991][ T9] usb 4-1: config 0 descriptor?? [ 271.471171][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 271.477511][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.483657][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 271.848068][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 272.362263][ T8443] lo speed is unknown, defaulting to 1000 [ 272.396188][ T9] rc_core: IR keymap rc-hauppauge not found [ 272.409817][ T9] Registered IR keymap rc-empty [ 272.427374][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 272.467407][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 272.796687][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 272.849584][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 272.949891][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 272.982833][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.024119][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.045806][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 273.107858][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.136591][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.156099][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.272900][ T8448] 9pnet_fd: Insufficient options for proto=fd [ 273.298624][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.336916][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.355870][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.395763][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.425779][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 273.456558][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 273.535777][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 273.536340][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 273.544186][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.556330][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 273.702430][ T30] audit: type=1400 audit(1756003570.733:450): avc: denied { bind } for pid=8469 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.706154][ T9] usb 4-1: USB disconnect, device number 21 [ 273.925755][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 275.618785][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.101442][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 277.775943][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 277.866776][ T8512] netlink: 'syz.2.692': attribute type 6 has an invalid length. [ 278.040916][ T8511] syz.0.693 (8511): /proc/8509/oom_adj is deprecated, please use /proc/8509/oom_score_adj instead. [ 278.195815][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 278.915875][ T30] audit: type=1800 audit(1756003575.233:451): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.692" name="bus" dev="overlay" ino=877 res=0 errno=0 [ 278.947724][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.992035][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.038423][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.092047][ T30] audit: type=1400 audit(1756003576.133:452): avc: denied { ioctl } for pid=8509 comm="syz.0.693" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 279.145480][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 279.164309][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.183671][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.193141][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.202962][ T9] usb 5-1: Manufacturer: syz [ 279.516461][ T9] usb 5-1: config 0 descriptor?? [ 279.544418][ T9] usb 5-1: can't set config #0, error -71 [ 279.555740][ T5907] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.575935][ T9] usb 5-1: USB disconnect, device number 25 [ 279.785083][ T8530] overlayfs: missing 'lowerdir' [ 280.235737][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 280.242144][ T5907] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 280.273517][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.302408][ T5907] usb 6-1: config 0 descriptor?? [ 280.321028][ T5907] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 280.409896][ T8536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.695964][ T30] audit: type=1400 audit(1756003577.745:453): avc: denied { bind } for pid=8535 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.780202][ T30] audit: type=1400 audit(1756003577.755:454): avc: denied { write } for pid=8535 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.227793][ T5907] gspca_nw80x: reg_w err -110 [ 282.269871][ T5907] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 282.595245][ T5907] usb 6-1: USB disconnect, device number 4 [ 282.618850][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 282.684300][ T8553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.747586][ T8557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.754449][ T8557] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.769491][ T8557] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 283.030040][ T8570] tipc: Enabled bearer , priority 10 [ 283.145757][ T5955] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 283.181247][ T30] audit: type=1400 audit(1756003580.245:455): avc: denied { connect } for pid=8569 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.205743][ T5907] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 283.784523][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 283.822683][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.906720][ T8577] overlayfs: missing 'lowerdir' [ 284.262412][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.495933][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 284.515190][ T5907] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 284.598568][ T5907] usb 5-1: config 0 has no interface number 0 [ 284.731865][ T5907] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 284.907685][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.925743][ T5955] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.935539][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.950752][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.952417][ T5955] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.974845][ T5955] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.993744][ T5907] usb 5-1: Product: syz [ 285.006984][ T5907] usb 5-1: Manufacturer: syz [ 285.011699][ T5955] usb 3-1: Manufacturer: syz [ 285.017807][ T5907] usb 5-1: SerialNumber: syz [ 285.022358][ T5955] usb 3-1: config 0 descriptor?? [ 285.024097][ T5907] usb 5-1: config 0 descriptor?? [ 285.045325][ T5907] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 285.378783][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 285.395748][ T5955] rc_core: IR keymap rc-hauppauge not found [ 285.396704][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 285.426297][ T5955] Registered IR keymap rc-empty [ 285.434509][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 285.465768][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 285.499841][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 285.528535][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 285.572805][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 285.587389][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 285.595580][ T5907] usb 5-1: USB disconnect, device number 26 [ 285.601680][ C1] rc rc0: IR event FIFO is full! [ 285.601697][ C1] rc rc0: IR event FIFO is full! [ 285.601710][ C1] rc rc0: IR event FIFO is full! [ 285.601724][ C1] rc rc0: IR event FIFO is full! [ 285.601737][ C1] rc rc0: IR event FIFO is full! [ 285.601919][ C1] rc rc0: IR event FIFO is full! [ 285.631243][ C1] rc rc0: IR event FIFO is full! [ 285.636862][ C1] rc rc0: IR event FIFO is full! [ 285.641977][ C1] rc rc0: IR event FIFO is full! [ 285.646907][ C1] rc rc0: IR event FIFO is full! [ 285.647259][ T5907] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 285.651833][ C1] rc rc0: IR event FIFO is full! [ 285.651846][ C1] rc rc0: IR event FIFO is full! [ 285.651857][ C1] rc rc0: IR event FIFO is full! [ 285.677563][ C1] rc rc0: IR event FIFO is full! [ 285.682474][ C1] rc rc0: IR event FIFO is full! [ 285.687382][ C1] rc rc0: IR event FIFO is full! [ 285.692289][ C1] rc rc0: IR event FIFO is full! [ 285.697199][ C1] rc rc0: IR event FIFO is full! [ 285.702109][ C1] rc rc0: IR event FIFO is full! [ 285.707021][ C1] rc rc0: IR event FIFO is full! [ 285.713144][ C1] rc rc0: IR event FIFO is full! [ 285.718076][ C1] rc rc0: IR event FIFO is full! [ 285.722990][ C1] rc rc0: IR event FIFO is full! [ 285.727914][ C1] rc rc0: IR event FIFO is full! [ 285.733411][ C1] rc rc0: IR event FIFO is full! [ 285.738321][ C1] rc rc0: IR event FIFO is full! [ 285.743226][ C1] rc rc0: IR event FIFO is full! [ 285.748130][ C1] rc rc0: IR event FIFO is full! [ 285.753257][ C1] rc rc0: IR event FIFO is full! [ 285.758165][ C1] rc rc0: IR event FIFO is full! [ 285.763065][ C1] rc rc0: IR event FIFO is full! [ 285.767966][ C1] rc rc0: IR event FIFO is full! [ 285.773168][ C1] rc rc0: IR event FIFO is full! [ 285.778096][ C1] rc rc0: IR event FIFO is full! [ 285.783011][ C1] rc rc0: IR event FIFO is full! [ 285.788138][ C1] rc rc0: IR event FIFO is full! [ 285.811517][ T5907] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 285.815796][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 285.844696][ T5907] quatech2 5-1:0.51: device disconnected [ 285.855795][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 285.863083][ T30] audit: type=1400 audit(1756003582.901:456): avc: denied { setopt } for pid=8594 comm="syz.5.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.025996][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.045778][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.055022][ T30] audit: type=1400 audit(1756003583.111:457): avc: denied { connect } for pid=8594 comm="syz.5.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.077877][ T8599] ALSA: mixer_oss: invalid OSS volume '' [ 286.085779][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.093970][ T30] audit: type=1400 audit(1756003583.111:458): avc: denied { read } for pid=8594 comm="syz.5.714" laddr=fe80::8c1:e4ff:fea6:78cf lport=2 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 286.126146][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.196872][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.215783][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.236306][ T5955] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.258416][ T5955] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 286.267649][ T5955] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 286.270171][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 286.308178][ T5955] usb 3-1: USB disconnect, device number 13 [ 286.342285][ T8603] loop3: detected capacity change from 0 to 1 [ 286.358244][ T8603] Dev loop3: unable to read RDB block 1 [ 286.364000][ T8603] loop3: unable to read partition table [ 286.370049][ T8603] loop3: partition table beyond EOD, truncated [ 286.376841][ T8603] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 288.027948][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 288.939532][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.987675][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.075950][ T5955] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 289.133148][ T9] usb 6-1: Product: syz [ 289.190755][ T9] usb 6-1: Manufacturer: syz [ 289.229842][ T9] usb 6-1: SerialNumber: syz [ 289.774450][ T8652] binder: 8651:8652 ioctl c0306201 200000000080 returned -14 [ 289.868263][ T8652] binder: BINDER_SET_CONTEXT_MGR already set [ 289.906303][ T8652] binder: 8651:8652 ioctl 4018620d 200000000040 returned -16 [ 290.115427][ T5955] usb 1-1: Using ep0 maxpacket: 8 [ 290.123208][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.140011][ T5955] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.150864][ T5955] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.160936][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.180685][ T5955] usb 1-1: Product: syz [ 290.184898][ T5955] usb 1-1: Manufacturer: syz [ 290.192047][ T5955] usb 1-1: SerialNumber: syz [ 290.209855][ T5955] usb 1-1: config 0 descriptor?? [ 290.275903][ T30] audit: type=1400 audit(1756003587.331:459): avc: denied { shutdown } for pid=8655 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.366622][ T5907] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 290.382887][ T30] audit: type=1400 audit(1756003587.441:460): avc: denied { ioctl } for pid=8662 comm="syz.2.730" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 290.533008][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 290.545555][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.559821][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.562457][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.579367][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.592266][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.602826][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.616510][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.632985][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.642990][ T5907] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.653398][ T5907] usb 4-1: Manufacturer: syz [ 290.661580][ T5907] usb 4-1: config 0 descriptor?? [ 291.127161][ T5907] rc_core: IR keymap rc-hauppauge not found [ 291.176828][ T5907] Registered IR keymap rc-empty [ 291.198117][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.227415][ T30] audit: type=1400 audit(1756003588.291:461): avc: denied { name_bind } for pid=8636 comm="syz.0.725" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 291.245780][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.288639][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 291.300408][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 291.355909][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 291.399563][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.399779][ T30] audit: type=1400 audit(1756003588.451:462): avc: denied { map } for pid=8636 comm="syz.0.725" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 291.441362][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.534810][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.568036][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.606006][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.645791][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.686417][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.717927][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.746053][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.787308][ T5907] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.818473][ T5907] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 291.827717][ T5907] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 291.845574][ T5907] usb 4-1: USB disconnect, device number 22 [ 292.318621][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 292.363838][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 292.635143][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.205297][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.313762][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 293.330014][ T9] usb 6-1: USB disconnect, device number 5 [ 293.981030][ T9] usb 1-1: USB disconnect, device number 28 [ 294.384870][ T30] audit: type=1400 audit(1756003591.441:463): avc: denied { read } for pid=8753 comm="syz.2.744" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.719287][ T30] audit: type=1400 audit(1756003591.441:464): avc: denied { open } for pid=8753 comm="syz.2.744" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.983684][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.745'. [ 295.335854][ T5955] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 295.501099][ T5955] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.606771][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.618365][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.675599][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.690848][ T5955] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.700427][ T5955] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.710325][ T5955] usb 5-1: Manufacturer: syz [ 295.722175][ T5955] usb 5-1: config 0 descriptor?? [ 297.073366][ T5955] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 297.391426][ T5955] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 298.589213][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 298.829828][ T5894] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 298.838620][ T9] usb 6-1: device descriptor read/64, error -71 [ 299.075787][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.235806][ T9] usb 6-1: device descriptor read/64, error -71 [ 299.346103][ T9] usb usb6-port1: attempt power cycle [ 299.380785][ T8803] fuse: Unknown parameter 'group_id00000000000000000000' [ 299.719104][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 299.805383][ T9] usb 6-1: device descriptor read/8, error -71 [ 300.057478][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 300.096661][ T9] usb 6-1: device descriptor read/8, error -71 [ 300.130568][ T5907] usb 5-1: USB disconnect, device number 27 [ 300.286165][ T9] usb usb6-port1: unable to enumerate USB device [ 300.384364][ T8824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.262332][ T30] audit: type=1400 audit(2000000000.840:465): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 301.305687][ T5907] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 301.479421][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.512683][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.543520][ T5907] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 301.559628][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.619202][ T5907] usb 5-1: config 0 descriptor?? [ 301.670250][ T8839] /dev/nullb0: Can't lookup blockdev [ 301.694625][ T8839] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 301.703562][ T8839] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 301.741746][ T8839] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 303.761085][ T8848] input: syz1 as /devices/virtual/input/input33 [ 303.777287][ T8848] binder: 8847:8848 ioctl c0306201 200000000080 returned -14 [ 303.790130][ T8848] binder_alloc: 8847: binder_alloc_buf, no vma [ 303.805673][ T30] audit: type=1400 audit(2000000003.350:466): avc: denied { bind } for pid=8847 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.862737][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 303.868782][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 303.895689][ T5907] usb 5-1: USB disconnect, device number 28 [ 303.904360][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 303.993689][ T8850] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[8850] [ 304.024582][ T30] audit: type=1400 audit(2000000003.600:467): avc: denied { setopt } for pid=8852 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.137796][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 305.235578][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880341a3800: rx timeout, send abort [ 305.245466][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880341a3800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 305.855516][ T5956] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 305.863107][ T5955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 306.095853][ T5955] usb 3-1: device descriptor read/64, error -71 [ 306.115421][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 306.121846][ T5956] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.130309][ T5956] usb 4-1: config 0 has no interface number 0 [ 306.138455][ T5956] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.150456][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.158520][ T5956] usb 4-1: Product: syz [ 306.163659][ T5956] usb 4-1: Manufacturer: syz [ 306.182203][ T5956] usb 4-1: SerialNumber: syz [ 306.253998][ T8896] SELinux: Context system_u:object_r:klogd_exec_t:s0 is not valid (left unmapped). [ 306.689151][ T30] audit: type=1400 audit(2000000005.830:468): avc: denied { relabelfrom } for pid=8891 comm="syz.0.782" name="UNIX" dev="sockfs" ino=22456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.684696][ T30] audit: type=1400 audit(2000000005.850:469): avc: denied { relabelto } for pid=8891 comm="syz.0.782" name="UNIX" dev="sockfs" ino=22456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:klogd_exec_t:s0" [ 307.955216][ T5956] usb 4-1: config 0 descriptor?? [ 308.011116][ T5955] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 308.044028][ T5956] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 308.195364][ T5955] usb 3-1: device descriptor read/64, error -71 [ 308.361380][ T8910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.405131][ T5955] usb usb3-port1: attempt power cycle [ 308.439773][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 308.454067][ T5956] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 308.715292][ T5907] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 308.835257][ T5956] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.858776][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.925510][ T9] usb 4-1: USB disconnect, device number 23 [ 308.950799][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 308.962402][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 309.021398][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 309.259243][ T9] quatech2 4-1:0.51: device disconnected [ 309.264762][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 309.273055][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.274498][ T5956] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.283311][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.294082][ T8920] netlink: 128 bytes leftover after parsing attributes in process `syz.4.789'. [ 309.312949][ T5956] usb 6-1: config 0 has no interface number 0 [ 309.313511][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.320860][ T5956] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.345201][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.470422][ T5956] usb 6-1: Product: syz [ 309.480018][ T30] audit: type=1400 audit(2000000009.060:470): avc: denied { link } for pid=8923 comm="syz.3.790" name="#39" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.502228][ T5955] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 309.502873][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 309.510067][ T5956] usb 6-1: Manufacturer: syz [ 309.519455][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.538455][ T5907] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 309.551190][ T5907] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.559796][ T5907] usb 1-1: Manufacturer: syz [ 309.566272][ T5907] usb 1-1: config 0 descriptor?? [ 309.571422][ T30] audit: type=1400 audit(2000000009.130:471): avc: denied { rename } for pid=8923 comm="syz.3.790" name="#3a" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.598721][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 309.618558][ T5956] usb 6-1: SerialNumber: syz [ 309.632920][ T5955] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 309.642466][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.651148][ T5956] usb 6-1: config 0 descriptor?? [ 309.662750][ T5955] usb 3-1: Product: syz [ 309.677275][ T5955] usb 3-1: Manufacturer: syz [ 309.682241][ T5955] usb 3-1: SerialNumber: syz [ 309.688609][ T5956] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 309.707262][ T5955] usb 3-1: config 0 descriptor?? [ 309.718268][ T5955] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 310.046312][ T5956] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 310.055275][ T5907] rc_core: IR keymap rc-hauppauge not found [ 310.063833][ T5907] Registered IR keymap rc-empty [ 310.086922][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.095250][ T5956] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 310.125359][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.156051][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 310.179852][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 310.211183][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.239243][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.281845][ T5955] gspca_stk1135: reg_w 0x2 err -110 [ 310.289281][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.289430][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.302817][ T5955] gspca_stk1135: Sensor write failed [ 310.308180][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.314601][ T5955] gspca_stk1135: Sensor write failed [ 310.320118][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.330087][ T5955] gspca_stk1135: Sensor read failed [ 310.335401][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.341731][ T5955] gspca_stk1135: Sensor read failed [ 310.351819][ T5955] gspca_stk1135: Detected sensor type unknown (0x0) [ 310.360663][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.368281][ T5955] gspca_stk1135: Sensor read failed [ 310.374794][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.375235][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.382804][ T5955] gspca_stk1135: Sensor read failed [ 310.395801][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.402184][ T5955] gspca_stk1135: Sensor write failed [ 310.409498][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 310.416786][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 310.424383][ T5955] gspca_stk1135: Sensor write failed [ 310.425253][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.431865][ T5955] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 310.475740][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.489362][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 310.498047][ T5955] usb 6-1: USB disconnect, device number 10 [ 310.505518][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.513110][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 310.525193][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.533432][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 310.547643][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.547966][ T5955] quatech2 6-1:0.51: device disconnected [ 310.585248][ T5907] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 310.605208][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 310.606363][ T5907] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 310.613239][ T5956] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.619779][ T5907] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.645157][ T5956] usb 4-1: config 0 has no interface number 0 [ 310.648488][ T5907] usb 1-1: USB disconnect, device number 29 [ 310.659466][ T5956] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.674442][ T5956] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.694560][ T5956] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 310.706635][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.717530][ T5956] usb 4-1: config 0 descriptor?? [ 311.441811][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 311.451464][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'. [ 312.355802][ T8946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 312.392449][ T8946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.422804][ T9] usb 3-1: USB disconnect, device number 16 [ 312.438513][ T8946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.517372][ T8946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.570757][ T8946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.639065][ T8946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 313.304320][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.331147][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.361516][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.396178][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.425985][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.433558][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.445576][ T1223] hid-generic FFFF:1318:480000.0005: unknown main item tag 0x0 [ 313.458301][ T1223] hid-generic FFFF:1318:480000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 313.482017][ T8920] syz.4.789 (8920): drop_caches: 1 [ 313.602330][ T30] audit: type=1400 audit(2000000013.180:472): avc: denied { write } for pid=8966 comm="syz.4.802" path="socket:[21393]" dev="sockfs" ino=21393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.009977][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.801'. [ 314.442010][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 314.448122][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 314.484993][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 314.581715][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 314.644987][ T5856] Bluetooth: hci5: command 0x0405 tx timeout [ 314.651059][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.408479][ T5956] usbhid 4-1:0.1: can't add hid device: -71 [ 315.414514][ T5956] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 315.426597][ T5956] usb 4-1: USB disconnect, device number 24 [ 316.900489][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.910912][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 316.912512][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.698837][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 317.847508][ T9022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 317.862050][ T9022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.816'. [ 318.068837][ T30] audit: type=1326 audit(2000000017.600:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.135504][ T30] audit: type=1326 audit(2000000017.600:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.164172][ T30] audit: type=1326 audit(2000000017.600:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.304020][ T30] audit: type=1326 audit(2000000017.600:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.394101][ T30] audit: type=1326 audit(2000000017.600:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.433213][ T30] audit: type=1326 audit(2000000017.600:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.463545][ T30] audit: type=1326 audit(2000000017.600:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.611539][ T30] audit: type=1326 audit(2000000017.600:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.0.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2818ebe9 code=0x7ffc0000 [ 318.733904][ T30] audit: type=1400 audit(2000000017.770:481): avc: denied { write } for pid=9025 comm="syz.0.817" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 318.736196][ T9032] tipc: Started in network mode [ 318.803009][ T9032] tipc: Node identity ea04a323a5ff, cluster identity 4711 [ 318.845600][ T9032] tipc: Enabled bearer , priority 0 [ 318.862618][ T9034] syzkaller0: entered promiscuous mode [ 318.891259][ T9034] syzkaller0: entered allmulticast mode [ 319.025034][ T9041] binder: BINDER_SET_CONTEXT_MGR already set [ 319.031204][ T9041] binder: 9040:9041 ioctl 4018620d 200000004a80 returned -16 [ 319.095416][ T9032] tipc: Resetting bearer [ 319.109407][ T9031] tipc: Resetting bearer [ 319.119999][ T9031] tipc: Disabling bearer [ 320.939536][ T9061] netlink: 96 bytes leftover after parsing attributes in process `syz.5.825'. [ 321.217291][ T9051] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 321.225085][ T9051] overlayfs: missing 'lowerdir' [ 321.316062][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.435883][ T30] audit: type=1400 audit(2000000020.801:482): avc: denied { create } for pid=9038 comm="syz.2.821" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 321.436322][ T30] audit: type=1400 audit(2000000020.801:483): avc: denied { associate } for pid=9038 comm="syz.2.821" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 321.687994][ T30] audit: type=1400 audit(2000000020.801:484): avc: denied { mounton } for pid=9038 comm="syz.2.821" path="/185/file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 321.815275][ T9077] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 321.906367][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.034510][ T30] audit: type=1400 audit(2000000021.571:485): avc: denied { rmdir } for pid=5854 comm="syz-executor" name="file0" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 322.111211][ T30] audit: type=1400 audit(2000000021.691:486): avc: denied { getopt } for pid=9078 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.982681][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 324.082903][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 324.501509][ T9112] geneve3: entered promiscuous mode [ 324.507558][ T9112] geneve3: entered allmulticast mode [ 324.817822][ T9112] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.839'. [ 324.911792][ T30] audit: type=1400 audit(2000000024.491:487): avc: denied { connect } for pid=9122 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.995718][ T9126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.254284][ T5956] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 328.249321][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 328.302265][ T5956] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 328.336990][ T5956] usb 4-1: config 0 has no interface number 0 [ 328.447963][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 328.457623][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.465677][ T5956] usb 4-1: Product: syz [ 328.469971][ T5956] usb 4-1: Manufacturer: syz [ 328.474835][ T5956] usb 4-1: SerialNumber: syz [ 328.481489][ T5956] usb 4-1: config 0 descriptor?? [ 328.581837][ T5956] hub 4-1:0.132: bad descriptor, ignoring hub [ 328.590766][ T5956] hub 4-1:0.132: probe with driver hub failed with error -5 [ 328.607813][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input35 [ 328.690273][ T9169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.702385][ T9169] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 329.346320][ T5956] usb 4-1: USB disconnect, device number 25 [ 329.704407][ T1223] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 329.720810][ T30] audit: type=1400 audit(2000000029.304:488): avc: denied { ioctl } for pid=9189 comm="syz.5.861" path="socket:[23353]" dev="sockfs" ino=23353 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 329.745247][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.884531][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 330.853894][ T1223] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 330.876409][ T1223] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 330.891430][ T1223] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 330.900513][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 330.910858][ T1223] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 330.920566][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 330.933585][ T1223] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 330.942995][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.967269][ T1223] usb 1-1: config 0 descriptor?? [ 331.197787][ T1223] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 331.358928][ T9220] overlayfs: overlapping lowerdir path [ 331.434134][ T9221] trusted_key: encrypted_key: insufficient parameters specified [ 331.444911][ T9221] trusted_key: encrypted_key: keylen parameter is missing [ 331.747198][ T5956] usb 1-1: USB disconnect, device number 30 [ 331.754609][ T5956] usblp0: removed [ 332.304444][ T9225] lo: entered allmulticast mode [ 332.344039][ T9225] dvmrp1: entered allmulticast mode [ 332.362632][ T9223] lo: left allmulticast mode [ 332.997115][ T30] audit: type=1400 audit(2000000032.584:489): avc: denied { read } for pid=9234 comm="syz.0.873" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.095241][ T30] audit: type=1400 audit(2000000032.584:490): avc: denied { open } for pid=9234 comm="syz.0.873" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.142163][ T30] audit: type=1400 audit(2000000032.584:491): avc: denied { ioctl } for pid=9234 comm="syz.0.873" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.167216][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.204008][ T30] audit: type=1400 audit(2000000032.784:492): avc: denied { append } for pid=9234 comm="syz.0.873" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 333.227045][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.307865][ T30] audit: type=1400 audit(2000000032.804:493): avc: denied { override_creds } for pid=9234 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 333.384260][ T1223] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 333.402220][ T9250] netlink: 'syz.3.875': attribute type 12 has an invalid length. [ 333.440286][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 333.684176][ T5956] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 334.478315][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 334.489293][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 334.498947][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 334.514271][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 334.523454][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.531602][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 334.548559][ T5956] usb 4-1: Product: syz [ 334.552721][ T5956] usb 4-1: Manufacturer: syz [ 334.604096][ T5956] usb 4-1: SerialNumber: syz [ 334.620416][ T5956] usb 4-1: config 0 descriptor?? [ 334.744508][ T1223] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.754771][ T1223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.766075][ T1223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.783883][ T9] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 334.793046][ T9] usb 6-1: config 0 has no interface number 0 [ 334.812336][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 334.822140][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.830165][ T9] usb 6-1: Product: syz [ 334.839082][ T9] usb 6-1: Manufacturer: syz [ 334.847102][ T9] usb 6-1: SerialNumber: syz [ 334.852116][ T1223] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.880130][ T1223] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.894017][ T9] usb 6-1: config 0 descriptor?? [ 334.906005][ T9] qmi_wwan 6-1:0.207: bogus CDC Union: master=0, slave=1 [ 334.914575][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.927871][ T5956] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 335.154729][ T5907] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.169211][ T1223] usb 5-1: GET_CAPABILITIES returned 0 [ 335.721096][ T1223] usbtmc 5-1:16.0: can't read capabilities [ 335.805198][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 335.821541][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.821579][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.821603][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.821623][ T5907] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.821661][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.822671][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.822692][ T5907] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.822709][ T5907] usb 3-1: Manufacturer: syz [ 335.901891][ T5907] usb 3-1: config 0 descriptor?? [ 335.938346][ T5955] usb 5-1: USB disconnect, device number 29 [ 335.973935][ T9] qmi_wwan 6-1:0.207: probe with driver qmi_wwan failed with error -22 [ 335.975968][ T9] usb 6-1: USB disconnect, device number 11 [ 336.017936][ T9266] loop7: detected capacity change from 0 to 7 [ 336.880669][ T9273] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 337.068083][ T5907] rc_core: IR keymap rc-hauppauge not found [ 337.079674][ T5907] Registered IR keymap rc-empty [ 337.085442][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.130899][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.194705][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 337.212129][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 337.252428][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.304508][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.344675][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.392050][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.415078][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.445308][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.474316][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.506686][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.609091][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 337.674258][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 338.050132][ T5907] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 338.077282][ T5907] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.097959][ T5907] usb 3-1: USB disconnect, device number 17 [ 338.182017][ T1223] usb 4-1: USB disconnect, device number 26 [ 338.383980][ T9298] Bluetooth: MGMT ver 1.23 [ 338.497888][ T9299] netlink: 'syz.3.890': attribute type 26 has an invalid length. [ 338.644332][ T5907] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 338.807266][ T5907] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 338.823395][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.833515][ T5907] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 338.846043][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 338.855765][ T5907] usb 3-1: Product: syz [ 338.860104][ T5907] usb 3-1: Manufacturer: syz [ 338.866054][ T5907] usb 3-1: SerialNumber: syz [ 338.874735][ T5907] usb 3-1: config 0 descriptor?? [ 338.886949][ T5907] usb 3-1: selecting invalid altsetting 0 [ 338.964131][ T5956] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 339.122784][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.132996][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.147036][ T5956] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 339.467274][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.498052][ T5956] usb 4-1: Product: syz [ 339.502200][ T5956] usb 4-1: Manufacturer: syz [ 339.506848][ T5956] usb 4-1: SerialNumber: syz [ 339.690961][ T5956] usb 4-1: config 0 descriptor?? [ 339.729288][ T5907] usb 3-1: USB disconnect, device number 18 [ 339.901635][ T30] audit: type=1400 audit(2000000039.484:494): avc: denied { connect } for pid=9310 comm="syz.5.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 340.369044][ T30] audit: type=1400 audit(2000000039.944:495): avc: denied { write } for pid=9305 comm="syz.3.893" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 340.839342][ T9332] loop2: detected capacity change from 0 to 7 [ 340.860507][ T9332] Dev loop2: unable to read RDB block 7 [ 340.868980][ T9332] loop2: AHDI p1 p2 p3 [ 340.873579][ T9332] loop2: partition table partially beyond EOD, truncated [ 340.886018][ T9332] loop2: p1 start 1601398130 is beyond EOD, truncated [ 340.911664][ T9332] loop2: p2 start 1702059890 is beyond EOD, truncated [ 340.937741][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 341.090159][ T9336] loop9: detected capacity change from 0 to 7 [ 341.099986][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.111809][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.121283][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.134787][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 341.143821][ T9342] FAULT_INJECTION: forcing a failure. [ 341.143821][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.153681][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.165380][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.166178][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.2.903 Not tainted syzkaller #0 PREEMPT(full) [ 341.166198][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.166207][ T9342] Call Trace: [ 341.166212][ T9342] [ 341.166219][ T9342] dump_stack_lvl+0x16c/0x1f0 [ 341.166241][ T9342] should_fail_ex+0x512/0x640 [ 341.166261][ T9342] _copy_from_iter+0x29f/0x1720 [ 341.166284][ T9342] ? __alloc_skb+0x200/0x380 [ 341.166303][ T9342] ? __pfx__copy_from_iter+0x10/0x10 [ 341.166324][ T9342] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 341.166349][ T9342] netlink_sendmsg+0x829/0xdd0 [ 341.166371][ T9342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.166397][ T9342] sock_write_iter+0x4ff/0x5b0 [ 341.166418][ T9342] ? __pfx_sock_write_iter+0x10/0x10 [ 341.166446][ T9342] ? bpf_lsm_file_permission+0x9/0x10 [ 341.166466][ T9342] ? security_file_permission+0x71/0x210 [ 341.166490][ T9342] ? rw_verify_area+0xcf/0x6c0 [ 341.166516][ T9342] vfs_write+0x7d0/0x11d0 [ 341.166532][ T9342] ? __pfx_sock_write_iter+0x10/0x10 [ 341.166553][ T9342] ? __pfx_vfs_write+0x10/0x10 [ 341.166567][ T9342] ? find_held_lock+0x2b/0x80 [ 341.166599][ T9342] ksys_write+0x1f8/0x250 [ 341.166614][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 341.166636][ T9342] do_syscall_64+0xcd/0x4c0 [ 341.166655][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.166670][ T9342] RIP: 0033:0x7f2eba18ebe9 [ 341.166683][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.166698][ T9342] RSP: 002b:00007f2eb83f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.166713][ T9342] RAX: ffffffffffffffda RBX: 00007f2eba3b5fa0 RCX: 00007f2eba18ebe9 [ 341.166723][ T9342] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 341.166732][ T9342] RBP: 00007f2eb83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.166741][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.166750][ T9342] R13: 00007f2eba3b6038 R14: 00007f2eba3b5fa0 R15: 00007ffdd5da3ee8 [ 341.166770][ T9342] [ 341.392595][ T5907] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 341.481989][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.486737][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 341.502563][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.512049][ T9336] ldm_validate_partition_table(): Disk read failed. [ 341.513715][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.541398][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 341.551159][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.559316][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.561614][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.578869][ T9336] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.587024][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 341.599005][ T9336] Dev loop9: unable to read RDB block 0 [ 341.607965][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.668141][ T9336] loop9: unable to read partition table [ 341.731023][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 341.745962][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 341.793868][ T24] usb 1-1: config 0 descriptor?? [ 341.965289][ T5956] mos7840 4-1:0.0: required endpoints missing [ 342.016862][ T5956] usb 4-1: USB disconnect, device number 27 [ 342.040940][ T9336] loop9: partition table beyond EOD, truncated [ 342.047246][ T9336] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 342.047246][ T9336] ) failed (rc=-5) [ 342.087601][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 342.115190][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.409264][ T5907] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 342.555370][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 342.650636][ T5907] usb 6-1: Product: syz [ 342.666182][ T5907] usb 6-1: Manufacturer: syz [ 342.943583][ T24] kone 0003:1E7D:2CED.0006: item fetching failed at offset 0/2 [ 342.969615][ T24] kone 0003:1E7D:2CED.0006: parse failed [ 342.975373][ T24] kone 0003:1E7D:2CED.0006: probe with driver kone failed with error -22 [ 342.988769][ T24] usb 1-1: USB disconnect, device number 31 [ 342.994680][ T5907] usb 6-1: SerialNumber: syz [ 342.995766][ T30] audit: type=1400 audit(2000000042.554:496): avc: denied { shutdown } for pid=9333 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.044586][ T5907] usb 6-1: config 0 descriptor?? [ 343.624318][ T5907] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 343.951091][ T5907] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 344.016478][ T24] usb 6-1: USB disconnect, device number 12 [ 344.734362][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 344.938241][ T44] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.952248][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 344.966408][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.975701][ T44] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 345.192602][ T44] usb 3-1: Product: syz [ 345.199463][ T44] usb 3-1: Manufacturer: syz [ 345.490183][ T44] usb 3-1: SerialNumber: syz [ 345.523600][ T44] usb 3-1: config 0 descriptor?? [ 345.637530][ T44] usb 3-1: selecting invalid altsetting 0 [ 345.837773][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 345.916021][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.935409][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.036139][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.074693][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.122708][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.134304][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.314385][ T5907] usb 3-1: USB disconnect, device number 19 [ 346.330241][ T9] usb 4-1: config 0 descriptor?? [ 346.835572][ T31] INFO: task syz.1.445:7593 blocked for more than 144 seconds. [ 346.843187][ T31] Not tainted syzkaller #0 [ 346.907741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.921607][ T31] task:syz.1.445 state:D stack:28472 pid:7593 tgid:7567 ppid:5852 task_flags:0x400740 flags:0x00004004 [ 346.942158][ T31] Call Trace: [ 346.947816][ T31] [ 346.951936][ T31] __schedule+0x1190/0x5de0 [ 346.967891][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 346.978009][ T31] ? __pfx___schedule+0x10/0x10 [ 346.984302][ T31] ? find_held_lock+0x2b/0x80 [ 346.992746][ T31] ? schedule+0x2d7/0x3a0 [ 347.001132][ T31] schedule+0xe7/0x3a0 [ 347.008257][ T31] schedule_timeout+0x257/0x290 [ 347.017242][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 347.023566][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 347.029876][ T31] ? _raw_spin_unlock_irq+0x29/0x50 [ 347.038523][ T31] __wait_for_common+0x2fc/0x4e0 [ 347.043940][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 347.049555][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 347.058277][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 347.157456][ T31] wait_for_completion_state+0x1c/0x40 [ 347.169287][ T31] vfs_coredump+0x981/0x5670 [ 347.178071][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 347.183433][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 347.188813][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 347.193997][ T31] ? lock_acquire+0x179/0x350 [ 347.198902][ T31] ? lock_acquire+0x179/0x350 [ 347.203843][ T31] ? find_held_lock+0x2b/0x80 [ 347.209431][ T31] ? __kernel_text_address+0xd/0x40 [ 347.214843][ T31] ? lock_acquire+0x179/0x350 [ 347.219898][ T31] ? find_held_lock+0x2b/0x80 [ 347.224712][ T31] ? stack_depot_save_flags+0x3de/0x9c0 [ 347.230401][ T31] ? __pfx___cant_migrate+0x10/0x10 [ 347.235826][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 347.241783][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.247728][ T31] ? stack_depot_save_flags+0x3de/0x9c0 [ 347.253917][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.283429][ T31] ? rcu_is_watching+0x12/0xc0 [ 347.290541][ T31] ? irqentry_exit+0x3b/0x90 [ 347.295394][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 347.303281][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 347.309318][ T31] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 347.315408][ T31] get_signal+0x22e3/0x26d0 [ 347.319932][ T31] ? __pfx_get_signal+0x10/0x10 [ 347.325607][ T31] ? trace_signal_generate+0x18b/0x200 [ 347.331089][ T31] ? find_held_lock+0x2b/0x80 [ 347.335887][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 347.341443][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 347.348184][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 347.357362][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.363269][ T31] ? syscall_user_dispatch+0x10c/0x140 [ 347.377922][ T31] exit_to_user_mode_loop+0x84/0x110 [ 347.383248][ T31] do_syscall_64+0x3f6/0x4c0 [ 347.388090][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.393987][ T31] RIP: 0033:0x7f95c838ebe9 [ 347.398651][ T31] RSP: 002b:00007f95c61910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 347.407099][ T31] RAX: 00000000000000ca RBX: 00007f95c85b6278 RCX: 00007f95c838ebe9 [ 347.415217][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f95c85b627c [ 347.423208][ T31] RBP: 00007f95c85b6270 R08: 00007f95c90ff000 R09: 0000000000000000 [ 347.431273][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.439272][ T31] R13: 00007f95c85b6308 R14: 00007ffde1b94650 R15: 00007ffde1b94738 [ 347.448238][ T31] [ 347.451278][ T31] [ 347.451278][ T31] Showing all locks held in the system: [ 347.459115][ T31] 1 lock held by khungtaskd/31: [ 347.463954][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 347.473908][ T31] 2 locks held by getty/5605: [ 347.478672][ T31] #0: ffff88814dd150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 347.491389][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 347.501752][ T31] 2 locks held by syz.4.915/9399: [ 347.509773][ T31] [ 347.512152][ T31] ============================================= [ 347.512152][ T31] [ 347.523834][ T31] NMI backtrace for cpu 1 [ 347.523849][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 347.523867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.523877][ T31] Call Trace: [ 347.523882][ T31] [ 347.523889][ T31] dump_stack_lvl+0x116/0x1f0 [ 347.523912][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 347.523937][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 347.523971][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 347.523998][ T31] watchdog+0xf0e/0x1260 [ 347.524021][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.524037][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.524059][ T31] ? __kthread_parkme+0x19e/0x250 [ 347.524084][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.524103][ T31] kthread+0x3c2/0x780 [ 347.524120][ T31] ? __pfx_kthread+0x10/0x10 [ 347.524137][ T31] ? rcu_is_watching+0x12/0xc0 [ 347.524158][ T31] ? __pfx_kthread+0x10/0x10 [ 347.524176][ T31] ret_from_fork+0x5d7/0x6f0 [ 347.524192][ T31] ? __pfx_kthread+0x10/0x10 [ 347.524209][ T31] ret_from_fork_asm+0x1a/0x30 [ 347.524242][ T31] [ 347.634820][ T31] Sending NMI from CPU 1 to CPUs 0: [ 347.640046][ C0] NMI backtrace for cpu 0 [ 347.640059][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 347.640075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.640082][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 347.640100][ C0] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 347.640113][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 347.640125][ C0] RAX: 0000000001a4ad13 RBX: 0000000000000000 RCX: ffffffff8b93bc29 [ 347.640134][ C0] RDX: 0000000000000000 RSI: ffffffff8de50210 RDI: ffffffff8c162900 [ 347.640142][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 347.640151][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 347.640159][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4b90 R15: 0000000000000000 [ 347.640177][ C0] FS: 0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 347.640191][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.640199][ C0] CR2: 00007ffd6b43fc68 CR3: 000000002bb42000 CR4: 00000000003526f0 [ 347.640208][ C0] Call Trace: [ 347.640213][ C0] [ 347.640218][ C0] default_idle+0x13/0x20 [ 347.640239][ C0] default_idle_call+0x6d/0xb0 [ 347.640258][ C0] do_idle+0x391/0x510 [ 347.640275][ C0] ? __pfx_do_idle+0x10/0x10 [ 347.640290][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 347.640307][ C0] cpu_startup_entry+0x4f/0x60 [ 347.640322][ C0] rest_init+0x16b/0x2b0 [ 347.640338][ C0] ? acpi_subsystem_init+0x133/0x180 [ 347.640357][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 347.640372][ C0] start_kernel+0x3ee/0x4d0 [ 347.640385][ C0] x86_64_start_reservations+0x18/0x30 [ 347.640398][ C0] x86_64_start_kernel+0x130/0x190 [ 347.640410][ C0] common_startup_64+0x13e/0x148 [ 347.640429][ C0] [ 347.641931][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 347.837677][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 347.846764][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.856794][ T31] Call Trace: [ 347.860049][ T31] [ 347.862956][ T31] dump_stack_lvl+0x3d/0x1f0 [ 347.867530][ T31] vpanic+0x6e8/0x7a0 [ 347.871502][ T31] ? __pfx_vpanic+0x10/0x10 [ 347.875991][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 347.881866][ T31] panic+0xca/0xd0 [ 347.885571][ T31] ? __pfx_panic+0x10/0x10 [ 347.889973][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 347.895331][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 347.901469][ T31] ? watchdog+0xd78/0x1260 [ 347.905863][ T31] ? watchdog+0xd6b/0x1260 [ 347.910260][ T31] watchdog+0xd89/0x1260 [ 347.914483][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.919137][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.924315][ T31] ? __kthread_parkme+0x19e/0x250 [ 347.929325][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.933978][ T31] kthread+0x3c2/0x780 [ 347.938024][ T31] ? __pfx_kthread+0x10/0x10 [ 347.942597][ T31] ? rcu_is_watching+0x12/0xc0 [ 347.947354][ T31] ? __pfx_kthread+0x10/0x10 [ 347.951923][ T31] ret_from_fork+0x5d7/0x6f0 [ 347.956489][ T31] ? __pfx_kthread+0x10/0x10 [ 347.961056][ T31] ret_from_fork_asm+0x1a/0x30 [ 347.965812][ T31] [ 347.969005][ T31] Kernel Offset: disabled [ 347.973304][ T31] Rebooting in 86400 seconds..