last executing test programs: 16.673396791s ago: executing program 1 (id=1481): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000240)=0x100, 0x4) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000003c0)="631dfe634c87c0ea477a1a4d6413023a79082277f86ed7bb3002b63b877d520aee98edd52ea47a1df725783626bd888923744607445d5258d2f1a0ee6a6ce67a1019787b4b8556dd94c93b0a6395896883e94bd72b1b90095588c6cb7bcf11f227ec57b51d98eab8c02f53a58491e4fbd604356ad591d35f5458f8d84a1bf81dcc785c8c3db5ca9167273d2d33f45cc46438d45c533b4f81ce92b4e9fdf972b61dbbecebea2e5bd00f951e125314741a0fa22496") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$unix(0x1, 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0xb700) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100c300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 14.067457015s ago: executing program 1 (id=1490): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f00000000c0)={0x40, [0xcae9, 0x1, 0x9, 0x8, 0x7, 0x3, 0x9, 0x274b, 0x6, 0x9, 0x200, 0xd, 0x7fff, 0xfff, 0x8, 0xfff8, 0x5, 0x3, 0x6, 0xfff, 0x0, 0x0, 0x6, 0x6, 0x1ff, 0x8, 0x200, 0x8, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2b, 0x109, 0x2, 0x0, 0x2, 0x84, 0x0, 0xc02, 0xa, 0x2, 0xa, 0x8, 0x8, 0x7, 0x4], 0x6}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 13.52981213s ago: executing program 2 (id=1492): quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000980)={0x0, 0x71, 0x2, &(0x7f0000000040)={0x9b, "79b8142115db2c05f171f5304c0c0000000000000041140c0afd2077a025abe98e"}}) 13.462313613s ago: executing program 1 (id=1493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) munlockall() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000100)={&(0x7f0000000140)=[{0x365e, 0xb00, 0x4f, &(0x7f0000000040)="d1596137019028b4e6973edf1911fbfc4c57a11c8b9430e181a0399636ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827508000000000000009cea"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) 10.246925172s ago: executing program 0 (id=1499): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 10.05757691s ago: executing program 0 (id=1502): socket$nl_xfrm(0x10, 0x3, 0x6) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x13000}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019300)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.315703652s ago: executing program 4 (id=1503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000) r1 = userfaultfd(0x80001) flock(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x3, 0x7, 0x5, 0x1, 0x3}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x0, 0x73, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb8, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 8.379239479s ago: executing program 2 (id=1504): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 8.289541959s ago: executing program 2 (id=1506): syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='sched_migrate_task\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r7, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 7.337739991s ago: executing program 3 (id=1507): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3011}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="67695316d6c4562f780b2ff4643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000038c0)={{0x77359400}}, &(0x7f0000003900)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008040) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x2, 0x4000, 0x2, 0x1b6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r4, &(0x7f00000000c0)='./cgroup\x00', r4, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_io_uring_setup(0x6100, &(0x7f0000000580)={0x0, 0x2f8f, 0x11190, 0x1, 0x1c0, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="6dd2ec9129640ad0bf93af2c6f2cd47a699348b1b0e54aae54991b7e4b7357b71b3fa87a596816dc9957e784ff668843e3aee8c2204f05a6878942d48f817ae2c6714d66e459decb1b402e3d8c577cb98076bf084a927d69aea4af1d2d595ba6592462396bfd88e9ff8f49904642e0a28aea4167ea9045996628018d1bfd66ca0f96be8bb09682dd306b5664a0a2591a685f8a1dc24c7e53155a2a120c195a414d269150185ae04206ee22c6331cd1156ca1646b68a1d5cbf5"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000003ac0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) write(r1, &(0x7f0000000080)="0b000300010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) 7.060542511s ago: executing program 4 (id=1508): socket$unix(0x1, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f00000000c0)={0x40, [0xcae9, 0x1, 0x9, 0x8, 0x7, 0x3, 0x9, 0x274b, 0x6, 0x9, 0x200, 0xd, 0x7fff, 0xfff, 0x8, 0xfff8, 0x5, 0x3, 0x6, 0xfff, 0x0, 0x0, 0x6, 0x6, 0x1ff, 0x8, 0x200, 0x8, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2b, 0x109, 0x2, 0x0, 0x2, 0x84, 0x0, 0xc02, 0xa, 0x2, 0xa, 0x8, 0x8, 0x7, 0x4], 0x6}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.097345317s ago: executing program 4 (id=1509): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f00000000c0)={0x40, [0xcae9, 0x1, 0x9, 0x8, 0x7, 0x3, 0x9, 0x274b, 0x6, 0x9, 0x200, 0xd, 0x7fff, 0xfff, 0x8, 0xfff8, 0x5, 0x3, 0x6, 0xfff, 0x0, 0x0, 0x6, 0x6, 0x1ff, 0x8, 0x200, 0x8, 0x7, 0x5, 0x4, 0x1ff, 0x2, 0x2b, 0x109, 0x2, 0x0, 0x2, 0x84, 0x0, 0xc02, 0xa, 0x2, 0xa, 0x8, 0x8, 0x7, 0x4], 0x6}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.063109423s ago: executing program 2 (id=1510): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0xd8, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x401}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xd}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xe}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}]}]}, 0xd8}}, 0x1010) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x13) 5.059986264s ago: executing program 4 (id=1511): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000006230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000030300005839c900910000", 0x48}], 0x1) 4.782326843s ago: executing program 3 (id=1512): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 4.205053668s ago: executing program 1 (id=1513): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@can_newroute={0x44, 0x18, 0x1, 0x4, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "d1d7fa0450307043"}, 0x2}}, @CGW_MOD_UID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 4.181970256s ago: executing program 3 (id=1514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x8002, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x7, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x0, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x8000, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 3.994744163s ago: executing program 4 (id=1515): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.947044122s ago: executing program 0 (id=1516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000006200)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="daf093516bdd92257bcc5f8bda08255d0501a3eca1355454085b9a58e0b6e4c0b5e51c0547b473f73bf58d4c886b1623ee384085b17ee4dafa0e928b5cc7b59007e3872156c2d917582717c6fa6172263eb38aa38bd54ec375a16c5a0c3b26e0fbe337c272697f930d49ed909841fa98462c8660c4529727ed318936d11264f9986b20afad1c728dbb32b5bb87d2136e66cc5a56c25016476a19b8ee25986f1ecabc25d3bc100006b23f4ab8e9dd3da54a9574d2d6c7650e24b55712383325513ce733a342a5ca4332864df8b235716dad0c9386243125b7b3f16359", 0xdc}, {&(0x7f00000005c0)="1fe95fc1eb99a12002a3036e92fd782d0da28f86a7fcb2eb2731d6f8232127bff24b2ad3f40a54063333cbdc3cba6bbc516e4294e7f64ae62f009c4601bf70fa99e07aa7656cef0b087f28b57962f30014accf96e4bce4f6c1feed689483f9a0a603ade436decc800a427f98b6e85d364b1da50b49b8a4d5e4035a82eef7f7a51b54b62ea5f4a6697705f6e8f934cb6252fc109c30f2beb93d6f00ddc7ba149bd322bebfb1ac7ab72cd724ef28095bc6eb7fd7bf9d7a135342334eaba0c0c903fb9f7a1b389871efebbd95ad34ec4576d9424c2c1e47a7bb034429563324c141c4b103eb3116ee4a975b4a11c486ec5338b29604a6778d43", 0xf8}], 0x2, &(0x7f0000002b40), 0x0, 0x10}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc}) io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) r6 = socket(0x2, 0x80805, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x5]}, &(0x7f0000000200), &(0x7f0000000140)={0x77359400}, 0x8) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x139002, 0x40, 0x2}, 0x18) open_tree(r8, &(0x7f0000000400)='./file0\x00', 0x88000) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000300)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x8000067}, {@remote, 0x4623, 0x2000, 0x100000ca, 0x12d5f, 0x8}}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r2, 0x0, 0x1) fchdir(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008880) openat$cgroup_ro(r9, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) 3.911873701s ago: executing program 1 (id=1517): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e7ff810008"], 0xe) socket(0x2d, 0x2, 0x0) 3.823105268s ago: executing program 4 (id=1518): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120301"], 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000700)=0x8000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x3f) 3.82152827s ago: executing program 3 (id=1519): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x6, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787b52d1ca4f837026d1a8554feacba1e1cd130e04d3e6f39f3d3289737f0374c01a964a02447a75df8a6ca7f040000000072fd29f35239d200", "24431a1e77a68e174f00", [0x9, 0x1000000000400]}}) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000280)=""/113) syz_open_dev$mouse(0x0, 0xee6, 0x20000) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 3.303360073s ago: executing program 1 (id=1520): syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='sched_migrate_task\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb0102030109022400000020000904c40102fffd0180090502021002020034090582020002000000ea5ab4a2f0d7e774014652f8aaea6a74167ce841d4f942c3545dd01ac0f3ef1d62b0ab5dcb1889d3d96946e6812074c4eedb868ef1cf361a1ec9233efb3e61bbf34b7eedbf0825ee0c10b1008da44d264a38ea0c9f872211679a853a00a3e3e42da7be18fddb229d7fca3f5949c911644372853b4d0be5421491fb0a9603af63243395a5e84ef66e07fed6e6cd3689588c0974f3a609a6a7c539c2aa593645a38a0805afa7dd56f90fa68340e7173ffb00c903e2af1fcf355868f7dcc76a23f81dde64988a34c9e3"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r7, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) 3.19619387s ago: executing program 2 (id=1521): r0 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) syz_emit_ethernet(0xd6, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x7, 0x12, "12054b0604000000b983fc5843e178fe"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "1afd922c6bad0f24d6"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0xfffffffe, 0x0]}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(r4, 0x24, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_notify(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getitimer(0x0, &(0x7f0000000000)) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth0_to_hsr\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x40047452, &(0x7f0000001180)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'pim6reg0\x00'}}) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x0, 0x8) fchdir(r7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.970005414s ago: executing program 0 (id=1522): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8054, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r6, 0x83, 0x2001) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403"], 0x10b8}, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) 1.544312999s ago: executing program 3 (id=1523): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x38, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x28, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic, @typed={0x4, 0xe9}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.504958604s ago: executing program 0 (id=1524): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0xac, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x99, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4d", @typed={0x4, 0xe9}]}]}, 0xac}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.358086457s ago: executing program 3 (id=1525): socket(0x25, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000740)={0x0, 0xfad6, 0x100, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x5, 0x1}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0xf5ed204796c7ef45}, 0x6e) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000"], 0x4c}}, 0x40000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) connect(r1, &(0x7f0000000300)=@x25, 0x80) 1.15640118s ago: executing program 0 (id=1526): socket$nl_xfrm(0x10, 0x3, 0x6) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x13000}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019300)={0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000240)) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x400c0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) kernel console output (not intermixed with test programs): [ T9382] dump_stack_lvl+0x16c/0x1f0 [ 377.342043][ T9382] should_fail_ex+0x512/0x640 [ 377.342072][ T9382] ? fs_reclaim_acquire+0xae/0x150 [ 377.342101][ T9382] should_failslab+0xc2/0x120 [ 377.342126][ T9382] __kmalloc_noprof+0xeb/0x910 [ 377.342155][ T9382] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 377.342186][ T9382] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 377.342210][ T9382] tomoyo_realpath_from_path+0xc2/0x6e0 [ 377.342239][ T9382] ? tomoyo_profile+0x47/0x60 [ 377.342268][ T9382] tomoyo_path_number_perm+0x245/0x580 [ 377.342289][ T9382] ? tomoyo_path_number_perm+0x237/0x580 [ 377.342314][ T9382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.342337][ T9382] ? find_held_lock+0x2b/0x80 [ 377.342388][ T9382] ? find_held_lock+0x2b/0x80 [ 377.342414][ T9382] ? hook_file_ioctl_common+0x144/0x410 [ 377.342454][ T9382] ? __fget_files+0x20e/0x3c0 [ 377.342485][ T9382] security_file_ioctl+0x9b/0x240 [ 377.342511][ T9382] __x64_sys_ioctl+0xb7/0x210 [ 377.342534][ T9382] do_syscall_64+0xcd/0xf80 [ 377.342560][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.342578][ T9382] RIP: 0033:0x7f2e3f38f749 [ 377.342593][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.342610][ T9382] RSP: 002b:00007f2e40197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.342627][ T9382] RAX: ffffffffffffffda RBX: 00007f2e3f5e5fa0 RCX: 00007f2e3f38f749 [ 377.342637][ T9382] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 0000000000000003 [ 377.342648][ T9382] RBP: 00007f2e40197090 R08: 0000000000000000 R09: 0000000000000000 [ 377.342658][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.342669][ T9382] R13: 00007f2e3f5e6038 R14: 00007f2e3f5e5fa0 R15: 00007fff700c1268 [ 377.342695][ T9382] [ 377.560414][ T9382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.235305][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.252310][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.348290][ T9391] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 378.996316][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 379.388496][ T30] audit: type=1400 audit(1767939377.078:2185): avc: denied { getopt } for pid=9407 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 379.433423][ T30] audit: type=1400 audit(1767939377.148:2186): avc: denied { execute } for pid=9410 comm="syz.3.859" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.496899][ T9419] block device autoloading is deprecated and will be removed. [ 379.565512][ T9422] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.576577][ T30] audit: type=1400 audit(1767939377.288:2187): avc: denied { write } for pid=9414 comm="syz.0.860" lport=45922 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 380.764182][ T5987] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 381.001889][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 381.008567][ T5987] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.016692][ T5987] usb 3-1: config 0 has no interface number 0 [ 381.114093][ T5987] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 381.134293][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.164896][ T5987] usb 3-1: Product: syz [ 381.178996][ T5987] usb 3-1: Manufacturer: syz [ 381.201973][ T5987] usb 3-1: SerialNumber: syz [ 381.210893][ T5987] usb 3-1: config 0 descriptor?? [ 381.225920][ T5987] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 381.235510][ T5987] usb 3-1: selecting invalid altsetting 1 [ 381.241365][ T5987] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 381.263887][ T5987] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.282629][ T5987] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 381.312330][ T5987] usb 3-1: media controller created [ 381.329955][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.433355][ T5987] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 382.454164][ T5987] zl10353_read_register: readreg error (reg=127, ret==-110) [ 382.532338][ T9439] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 382.703686][ T5987] usb 3-1: USB disconnect, device number 25 [ 383.581962][ T5987] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 383.711916][ T5971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.737798][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 383.755495][ T5987] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 383.769409][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 383.780105][ T5987] usb 5-1: Product: syz [ 383.786114][ T5987] usb 5-1: Manufacturer: syz [ 383.790887][ T5987] usb 5-1: SerialNumber: syz [ 383.800083][ T5987] usb 5-1: config 0 descriptor?? [ 383.861969][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 383.878435][ T5971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.985199][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.005608][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.024878][ T5971] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 384.493802][ T6115] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 384.513667][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.525337][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.533038][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.542612][ T5971] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.562416][ T5971] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.570891][ T5971] usb 2-1: Manufacturer: syz [ 384.588266][ T5971] usb 2-1: config 0 descriptor?? [ 384.594346][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.608025][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.721738][ T6115] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 384.721772][ T6115] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.721797][ T6115] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 384.761860][ T6115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.800333][ T6115] usb 1-1: config 0 descriptor?? [ 384.805761][ T9504] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 385.036008][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 385.048500][ T6115] ryos 0003:1E7D:3138.0005: item fetching failed at offset 3/5 [ 385.049067][ T6115] ryos 0003:1E7D:3138.0005: parse failed [ 385.049124][ T6115] ryos 0003:1E7D:3138.0005: probe with driver ryos failed with error -22 [ 385.116283][ T5971] rc_core: IR keymap rc-hauppauge not found [ 385.153239][ T5971] Registered IR keymap rc-empty [ 385.153595][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.172033][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.193622][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 385.223275][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 385.242127][ T9] usb 1-1: USB disconnect, device number 34 [ 385.269140][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.322983][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.342617][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.373954][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.507243][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.605412][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.662072][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.682035][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.706329][ T6115] usb 5-1: USB disconnect, device number 31 [ 385.731969][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.752482][ T5971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.783619][ T5971] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 385.783645][ T5971] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 385.790332][ T9528] syz_tun: entered promiscuous mode [ 385.813152][ T5971] usb 2-1: USB disconnect, device number 27 [ 385.833036][ T9528] syz_tun: entered allmulticast mode [ 386.047972][ T30] audit: type=1400 audit(1767939383.738:2188): avc: denied { bind } for pid=9530 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 386.131928][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 386.335657][ T9541] __vm_enough_memory: pid: 9541, comm: syz.2.893, bytes: 4503599627366400 not enough memory for the allocation [ 386.431699][ T30] audit: type=1400 audit(1767939384.148:2189): avc: denied { connect } for pid=9546 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.471900][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 386.478603][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.494529][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 386.519304][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.535406][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 386.574461][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.597841][ T9] usb 4-1: config 0 descriptor?? [ 387.093507][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'. [ 387.434318][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 387.443541][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 387.501686][ T9] usb 4-1: USB disconnect, device number 37 [ 388.620734][ T5971] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 389.097305][ T30] audit: type=1400 audit(1767939386.418:2190): avc: denied { setopt } for pid=9573 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.120854][ T9583] netlink: 'syz.2.905': attribute type 1 has an invalid length. [ 389.129579][ T9583] netlink: 3780 bytes leftover after parsing attributes in process `syz.2.905'. [ 389.140067][ T30] audit: type=1400 audit(1767939386.418:2191): avc: denied { write } for pid=9573 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 389.161705][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.189069][ T5971] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 389.260191][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.352584][ T5971] usb 4-1: config 0 descriptor?? [ 390.013645][ T5971] metro_usb 4-1:0.0: required endpoints missing [ 390.161588][ T9586] vivid-003: disconnect [ 390.816359][ T9585] vivid-003: reconnect [ 392.159302][ T5900] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 392.325108][ T5900] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=8f.4f [ 392.477720][ T30] audit: type=1326 audit(1767939390.138:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 392.544156][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.691428][ T5900] usb 3-1: Product: syz [ 392.761953][ T5900] usb 3-1: Manufacturer: syz [ 392.771937][ T5900] usb 3-1: SerialNumber: syz [ 392.794049][ T5900] usb 3-1: config 0 descriptor?? [ 392.817969][ T5900] usb 3-1: can't set config #0, error -71 [ 392.845955][ T30] audit: type=1326 audit(1767939390.138:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 392.904707][ T5900] usb 3-1: USB disconnect, device number 26 [ 392.939584][ T30] audit: type=1326 audit(1767939390.138:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 393.379571][ T30] audit: type=1326 audit(1767939390.138:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 393.405824][ T9] usb 4-1: USB disconnect, device number 38 [ 393.434467][ T30] audit: type=1326 audit(1767939390.138:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 393.491568][ T30] audit: type=1326 audit(1767939390.138:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 393.555831][ T30] audit: type=1326 audit(1767939390.138:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 393.648219][ T9617] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 393.721873][ T30] audit: type=1326 audit(1767939390.138:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 394.004390][ T30] audit: type=1326 audit(1767939390.138:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 394.058377][ T30] audit: type=1326 audit(1767939390.138:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebad8f749 code=0x7ffc0000 [ 394.602413][ T9630] IPVS: lc: FWM 3 0x00000003 - no destination available [ 394.609405][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 395.015967][ T9637] fuse: Bad value for 'fd' [ 396.399299][ T9647] ubi: mtd0 is already attached to ubi31 [ 397.101944][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 397.351937][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 397.358298][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.452719][ T24] usb 5-1: config 0 has no interface number 0 [ 397.476766][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 397.492196][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.500833][ T24] usb 5-1: Product: syz [ 397.505442][ T24] usb 5-1: Manufacturer: syz [ 397.573722][ T9657] 9pnet_fd: Insufficient options for proto=fd [ 397.943221][ T24] usb 5-1: SerialNumber: syz [ 397.951666][ T24] usb 5-1: config 0 descriptor?? [ 397.960191][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 397.969068][ T24] usb 5-1: selecting invalid altsetting 1 [ 397.975899][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 397.985182][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.996499][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 398.006418][ T24] usb 5-1: media controller created [ 398.118226][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.150505][ T9662] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 399.672559][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 399.680037][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 399.702336][ T9644] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 399.709481][ T9667] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 399.989778][ T24] usb 5-1: USB disconnect, device number 32 [ 400.193683][ T9693] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 400.310008][ T9689] fuse: Bad value for 'fd' [ 400.651389][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 400.651406][ T30] audit: type=1400 audit(1767939398.368:2265): avc: denied { execute } for pid=9681 comm="syz.4.930" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 400.918707][ T9704] Device name cannot be null; rc = [-22] [ 402.764430][ T5987] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 402.996578][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 403.173026][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 403.178869][ T5987] usb 3-1: Using ep0 maxpacket: 32 [ 403.185126][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.295754][ T9] usb 5-1: config 0 has no interface number 0 [ 403.316938][ T5987] usb 3-1: config 4 has an invalid interface number: 227 but max is 0 [ 403.327940][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 403.341874][ T5987] usb 3-1: config 4 has no interface number 0 [ 403.355876][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.364844][ T5987] usb 3-1: config 4 interface 227 has no altsetting 0 [ 403.915733][ T9] usb 5-1: Product: syz [ 403.927078][ T5987] usb 3-1: New USB device found, idVendor=05ac, idProduct=d769, bcdDevice=50.2c [ 403.942694][ T9] usb 5-1: Manufacturer: syz [ 404.032233][ T9] usb 5-1: SerialNumber: syz [ 404.037251][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.045350][ T5987] usb 3-1: Product: syz [ 404.049804][ T5987] usb 3-1: Manufacturer: syz [ 404.543433][ T9] usb 5-1: config 0 descriptor?? [ 404.573296][ T5987] usb 3-1: SerialNumber: syz [ 404.582504][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 404.612226][ T5987] ipheth 3-1:4.227: Unable to find alternate settings interface [ 404.629385][ T9] usb 5-1: selecting invalid altsetting 1 [ 404.650289][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 404.661520][ T9732] vivid-000: disconnect [ 404.695308][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 404.723509][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 404.761712][ T9] usb 5-1: media controller created [ 404.832664][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.912003][ T9726] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 405.952856][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 405.978161][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 406.005967][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 406.044190][ T9752] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 406.112087][ T9] usb 5-1: USB disconnect, device number 33 [ 406.127191][ T9757] FAULT_INJECTION: forcing a failure. [ 406.127191][ T9757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.225136][ T9759] __vm_enough_memory: pid: 9759, comm: syz.4.949, bytes: 4503599627366400 not enough memory for the allocation [ 406.244758][ T9755] Device name cannot be null; rc = [-22] [ 406.271898][ T9757] CPU: 0 UID: 0 PID: 9757 Comm: syz.0.947 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.271929][ T9757] Tainted: [L]=SOFTLOCKUP [ 406.271935][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.271947][ T9757] Call Trace: [ 406.271953][ T9757] [ 406.271960][ T9757] dump_stack_lvl+0x16c/0x1f0 [ 406.271989][ T9757] should_fail_ex+0x512/0x640 [ 406.272020][ T9757] _copy_from_iter+0x2a4/0x16c0 [ 406.272049][ T9757] ? __alloc_skb+0x220/0x410 [ 406.272071][ T9757] ? __alloc_skb+0x35d/0x410 [ 406.272088][ T9757] ? __pfx__copy_from_iter+0x10/0x10 [ 406.272104][ T9757] ? netlink_autobind.isra.0+0x158/0x370 [ 406.272123][ T9757] netlink_sendmsg+0x820/0xdd0 [ 406.272139][ T9757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.272158][ T9757] ____sys_sendmsg+0xa5d/0xc30 [ 406.272173][ T9757] ? copy_msghdr_from_user+0x10a/0x160 [ 406.272184][ T9757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.272205][ T9757] ___sys_sendmsg+0x134/0x1d0 [ 406.272217][ T9757] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.272247][ T9757] __sys_sendmsg+0x16d/0x220 [ 406.272258][ T9757] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.272278][ T9757] do_syscall_64+0xcd/0xf80 [ 406.272294][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.272306][ T9757] RIP: 0033:0x7ff64518f749 [ 406.272315][ T9757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.272326][ T9757] RSP: 002b:00007ff645fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.272337][ T9757] RAX: ffffffffffffffda RBX: 00007ff6453e6090 RCX: 00007ff64518f749 [ 406.272344][ T9757] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 406.272350][ T9757] RBP: 00007ff645fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 406.272357][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.272363][ T9757] R13: 00007ff6453e6128 R14: 00007ff6453e6090 R15: 00007ffc7a932798 [ 406.272377][ T9757] [ 406.868576][ T5901] usb 3-1: USB disconnect, device number 27 [ 407.317185][ T9765] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 410.588446][ T5976] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 410.605053][ T9795] overlayfs: failed to resolve './file0': -2 [ 410.613483][ T9795] netlink: 'syz.0.961': attribute type 3 has an invalid length. [ 410.752891][ T5976] usb 5-1: Using ep0 maxpacket: 32 [ 410.759779][ T5976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.767984][ T5976] usb 5-1: config 0 has no interface number 0 [ 410.783597][ T5976] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 410.802602][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.831880][ T5976] usb 5-1: Product: syz [ 410.842805][ T5976] usb 5-1: Manufacturer: syz [ 410.852636][ T5976] usb 5-1: SerialNumber: syz [ 410.882370][ T5976] usb 5-1: config 0 descriptor?? [ 410.892339][ T9800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9800 comm=syz.0.963 [ 410.927025][ T5976] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 410.938577][ T5976] usb 5-1: selecting invalid altsetting 1 [ 410.945165][ T5976] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 410.968934][ T5976] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 410.982132][ T5976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 410.995167][ T5976] usb 5-1: media controller created [ 411.008744][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.323059][ T9804] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 411.352413][ T30] audit: type=1400 audit(1767939409.038:2266): avc: denied { accept } for pid=9799 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 411.801293][ T9809] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 412.241900][ T5976] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 412.252058][ T5976] zl10353_read_register: readreg error (reg=127, ret==-110) [ 412.274593][ T9793] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 412.357440][ T5976] usb 5-1: USB disconnect, device number 34 [ 412.719973][ T30] audit: type=1400 audit(1767939410.438:2267): avc: denied { mount } for pid=9820 comm="syz.0.967" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 412.755568][ T9822] ubi: mtd0 is already attached to ubi31 [ 418.242489][ T30] audit: type=1326 audit(1767939415.898:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.266531][ T30] audit: type=1326 audit(1767939415.898:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.289890][ T30] audit: type=1326 audit(1767939415.898:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.315289][ T30] audit: type=1326 audit(1767939415.898:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.372107][ T9867] No control pipe specified [ 418.381282][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 418.748261][ T30] audit: type=1326 audit(1767939415.898:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.771659][ T30] audit: type=1326 audit(1767939415.898:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.819295][ T30] audit: type=1326 audit(1767939415.928:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.901328][ T30] audit: type=1326 audit(1767939415.928:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 418.970693][ T30] audit: type=1326 audit(1767939415.978:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 419.067171][ T30] audit: type=1400 audit(1767939416.148:2277): avc: denied { setattr } for pid=9860 comm="syz.0.981" name="file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 419.729516][ T9882] bond1: entered promiscuous mode [ 419.741919][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 419.755042][ T9886] macvlan2: entered promiscuous mode [ 419.931962][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 420.157891][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.166465][ T9886] macvlan2: entered allmulticast mode [ 420.192479][ T9] usb 4-1: config 0 has no interface number 0 [ 420.208812][ T9886] bond1: (slave macvlan2): Opening slave failed [ 420.210515][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 420.233665][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.246158][ T9] usb 4-1: Product: syz [ 420.254790][ T9] usb 4-1: Manufacturer: syz [ 420.259614][ T9] usb 4-1: SerialNumber: syz [ 420.267652][ T9] usb 4-1: config 0 descriptor?? [ 420.276110][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 420.285624][ T9] usb 4-1: selecting invalid altsetting 1 [ 420.291420][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 420.322913][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.342704][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 420.356841][ T9890] ubi: mtd0 is already attached to ubi31 [ 420.400613][ T9] usb 4-1: media controller created [ 420.525072][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.631891][ T5976] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 420.831916][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 420.839680][ T5976] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 420.856547][ T5976] usb 3-1: config 179 has no interface number 0 [ 420.863900][ T5976] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 420.884404][ T5976] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 420.926654][ T5976] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 420.944807][ T5976] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 421.030123][ T5976] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 421.048687][ T5976] usb 3-1: config 179 interface 65 has no altsetting 0 [ 421.059918][ T5976] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 421.071656][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.163782][ T9900] IPv6: NLM_F_CREATE should be specified when creating new route [ 421.553983][ T5976] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input29 [ 421.604556][ T9880] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 421.623473][ T5172] input input29: unable to receive magic message: -110 [ 421.645829][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 421.707035][ T5172] input input29: unable to receive magic message: -32 [ 421.778369][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 421.782044][ T5172] input input29: unable to receive magic message: -32 [ 421.819342][ T5172] input input29: unable to receive magic message: -32 [ 421.835646][ T24] usb 3-1: USB disconnect, device number 28 [ 421.835773][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 421.850886][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 421.958282][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 422.074531][ T9] usb 4-1: USB disconnect, device number 39 [ 423.144206][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 423.212012][ T5976] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 423.343284][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.369931][ T9] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 423.413807][ T5976] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 423.425667][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.451453][ T5976] usb 3-1: config 0 has no interface number 0 [ 423.468881][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 423.487113][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.516393][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 423.554648][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 423.628980][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.660022][ T5976] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 423.702695][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.785984][ T5976] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 423.809657][ T9] usb 1-1: Product: syz [ 423.883520][ T9] usb 1-1: Manufacturer: syz [ 423.969824][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 423.985603][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 423.990882][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 424.047063][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 424.115704][ T5976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 424.213726][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 424.213737][ T30] audit: type=1400 audit(1767939421.938:2299): avc: denied { setopt } for pid=9924 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 424.241675][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.407075][ T5976] usb 3-1: config 0 descriptor?? [ 424.465177][ T9921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 424.689808][ T30] audit: type=1400 audit(1767939422.208:2300): avc: denied { setopt } for pid=9924 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 424.804388][ T5976] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 425.206645][ T30] audit: type=1400 audit(1767939422.248:2301): avc: denied { append } for pid=9924 comm="syz.1.995" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 425.665302][ T9921] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 425.871940][ T9921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.994'. [ 425.902321][ T30] audit: type=1326 audit(1767939423.628:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x0 [ 425.925411][ T9921] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 425.935448][ T9921] netlink: 638 bytes leftover after parsing attributes in process `syz.2.994'. [ 425.999216][ T9921] netlink: 1 bytes leftover after parsing attributes in process `syz.2.994'. [ 427.457164][ T5900] usb 3-1: USB disconnect, device number 29 [ 427.508453][ T5976] usb 1-1: USB disconnect, device number 35 [ 427.529277][ T5900] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 428.112847][ T5976] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 428.263364][ T5976] usb 1-1: config index 0 descriptor too short (expected 786, got 18) [ 428.272051][ T5976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.283231][ T5976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 428.424527][ T9966] binder: 9963:9966 ioctl 4610 200000000180 returned -22 [ 428.494911][ T5976] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 428.535991][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.550178][ T5976] usb 1-1: Product: syz [ 428.700753][ T5976] usb 1-1: Manufacturer: syz [ 428.719999][ T5976] usb 1-1: SerialNumber: syz [ 429.249102][ T5976] usb 1-1: config 0 descriptor?? [ 429.681888][ T30] audit: type=1400 audit(1767939427.388:2303): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.789255][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.840864][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.974894][ T30] audit: type=1400 audit(1767939427.388:2304): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.94 dest=58748 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 430.010440][ T30] audit: type=1400 audit(1767939427.398:2305): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.048135][ T30] audit: type=1400 audit(1767939427.398:2306): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.088489][ T30] audit: type=1400 audit(1767939427.438:2307): avc: denied { read } for pid=9950 comm="syz.0.1001" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 430.259891][ T9981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'. [ 430.696133][ T30] audit: type=1400 audit(1767939427.438:2308): avc: denied { open } for pid=9950 comm="syz.0.1001" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 430.732706][ T30] audit: type=1400 audit(1767939427.458:2309): avc: denied { prog_load } for pid=9974 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.845735][ T30] audit: type=1400 audit(1767939427.458:2310): avc: denied { bpf } for pid=9974 comm="syz.4.1006" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.881276][ T30] audit: type=1400 audit(1767939427.458:2311): avc: denied { map_create } for pid=9974 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.901447][ T30] audit: type=1400 audit(1767939427.458:2312): avc: denied { map_read map_write } for pid=9974 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 432.144811][ T5901] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 432.330580][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.487567][ T5901] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 432.536035][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.550973][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 432.575500][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 432.613259][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.624331][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.647220][ T5901] usb 3-1: Product: syz [ 432.659662][ T5901] usb 3-1: Manufacturer: syz [ 432.712212][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 432.732594][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 432.744405][ T5901] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 432.907180][ T5901] usb 1-1: USB disconnect, device number 36 [ 434.415198][ T5900] usb 3-1: USB disconnect, device number 30 [ 435.280390][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 435.280401][ T30] audit: type=1400 audit(1767939432.998:2361): avc: denied { create } for pid=10015 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.392832][ T30] audit: type=1400 audit(1767939433.068:2362): avc: denied { create } for pid=10015 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.385267][ T30] audit: type=1400 audit(1767939433.068:2363): avc: denied { getopt } for pid=10015 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.081960][ T30] audit: type=1400 audit(1767939433.688:2364): avc: denied { read write } for pid=10019 comm="syz.0.1018" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 437.552981][ T30] audit: type=1400 audit(1767939433.688:2365): avc: denied { open } for pid=10019 comm="syz.0.1018" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 437.686323][ T30] audit: type=1400 audit(1767939435.268:2366): avc: denied { create } for pid=10027 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.710036][ T30] audit: type=1400 audit(1767939435.268:2367): avc: denied { write } for pid=10027 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.711472][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10030 comm=syz.4.1021 [ 437.731213][ T30] audit: type=1400 audit(1767939435.308:2368): avc: denied { read } for pid=10025 comm="syz.1.1020" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.743824][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10030 comm=syz.4.1021 [ 437.784752][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10030 comm=syz.4.1021 [ 437.845384][ T30] audit: type=1400 audit(1767939435.308:2369): avc: denied { open } for pid=10025 comm="syz.1.1020" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.869542][ T30] audit: type=1400 audit(1767939435.308:2370): avc: denied { ioctl } for pid=10025 comm="syz.1.1020" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.950093][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10030 comm=syz.4.1021 [ 438.505107][T10043] ubi: mtd0 is already attached to ubi31 [ 438.961933][ T5900] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 438.992596][T10059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 439.114708][ T5900] usb 1-1: config index 0 descriptor too short (expected 786, got 18) [ 439.124886][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.164610][ T5900] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.183925][ T5900] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 439.204576][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.221921][ T5900] usb 1-1: Product: syz [ 439.230737][ T5900] usb 1-1: Manufacturer: syz [ 439.250110][ T5900] usb 1-1: SerialNumber: syz [ 439.266431][ T5900] usb 1-1: config 0 descriptor?? [ 439.273185][T10070] kvm: kvm [10069]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 439.577711][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.587124][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.675361][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.681717][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.731921][ T5901] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 439.909484][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.927302][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.967877][ T5901] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 440.001362][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.032792][ T5901] usb 5-1: config 0 descriptor?? [ 440.318600][T10112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 440.465518][T10125] netlink: 'syz.2.1056': attribute type 2 has an invalid length. [ 440.473696][T10125] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1056'. [ 440.493941][ T5901] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 440.547888][ T5901] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 440.664889][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 440.664905][ T30] audit: type=1400 audit(1767939438.388:2403): avc: denied { sys_module } for pid=10128 comm="syz.1.1057" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 440.696915][ T5901] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x4D [ 440.794068][ T30] audit: type=1400 audit(1767939438.518:2404): avc: denied { unlink } for pid=10135 comm="syz.3.1059" name="#b" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 440.849970][ T30] audit: type=1400 audit(1767939438.518:2405): avc: denied { mount } for pid=10135 comm="syz.3.1059" name="/" dev="overlay" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 440.878006][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 440.894024][T10136] evm: overlay not supported [ 440.908269][ T30] audit: type=1400 audit(1767939438.628:2406): avc: denied { mount } for pid=10137 comm="syz.2.1060" name="/" dev="autofs" ino=27430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 440.935444][ T30] audit: type=1400 audit(1767939438.658:2407): avc: denied { read } for pid=10137 comm="syz.2.1060" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.962825][ T30] audit: type=1400 audit(1767939438.658:2408): avc: denied { open } for pid=10137 comm="syz.2.1060" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.987028][ T30] audit: type=1400 audit(1767939438.658:2409): avc: denied { ioctl } for pid=10137 comm="syz.2.1060" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 441.067643][ T30] audit: type=1400 audit(1767939438.748:2410): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 441.139647][ T30] audit: type=1400 audit(1767939438.858:2411): avc: denied { create } for pid=10143 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 441.345966][T10084] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 441.457359][T10147] netlink: 'syz.1.1063': attribute type 2 has an invalid length. [ 441.490787][ T30] audit: type=1400 audit(1767939438.978:2412): avc: denied { read } for pid=10143 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.534940][ T5901] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 441.548701][ T5901] usb 5-1: USB disconnect, device number 35 [ 441.580636][ T5976] usb 1-1: USB disconnect, device number 37 [ 442.685774][T10157] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 442.707203][T10157] kvm: pic: level sensitive irq not supported [ 442.708671][T10157] kvm: pic: non byte read [ 442.722982][T10161] __vm_enough_memory: pid: 10161, comm: syz.2.1067, bytes: 4503599627366400 not enough memory for the allocation [ 442.753651][T10157] kvm: pic: level sensitive irq not supported [ 442.753813][T10157] kvm: pic: non byte read [ 442.788022][T10157] kvm: pic: level sensitive irq not supported [ 442.788215][T10157] kvm: pic: non byte read [ 442.843633][T10157] kvm: pic: level sensitive irq not supported [ 442.844042][T10157] kvm: pic: non byte read [ 443.311926][ T5901] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 443.451906][ T5971] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 443.512361][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 443.518733][ T5901] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 443.548076][ T5901] usb 1-1: config 0 has no interface number 0 [ 443.603295][ T5901] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 443.619495][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.661891][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 443.669043][ T5971] usb 5-1: config 4 has an invalid interface number: 227 but max is 0 [ 443.679162][ T5901] usb 1-1: Product: syz [ 443.688176][ T5971] usb 5-1: config 4 has no interface number 0 [ 443.712259][ T5901] usb 1-1: Manufacturer: syz [ 443.716948][ T5901] usb 1-1: SerialNumber: syz [ 443.722173][ T5971] usb 5-1: config 4 interface 227 has no altsetting 0 [ 443.769900][ T5901] usb 1-1: config 0 descriptor?? [ 443.790171][ T5971] usb 5-1: New USB device found, idVendor=05ac, idProduct=d769, bcdDevice=50.2c [ 443.810963][ T5901] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 443.830168][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.844859][ T5971] usb 5-1: Product: syz [ 443.861928][ T5971] usb 5-1: Manufacturer: syz [ 443.876410][ T5971] usb 5-1: SerialNumber: syz [ 444.008717][ T5971] ipheth 5-1:4.227: Unable to find alternate settings interface [ 444.029778][ T5901] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 444.102625][ T5901] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 444.124836][T10190] fuse: Bad value for 'fd' [ 445.230563][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 445.612751][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 445.612987][ T5900] usb 1-1: USB disconnect, device number 38 [ 445.659537][T10198] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1081'. [ 445.692393][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 445.716771][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 445.716783][ T30] audit: type=1400 audit(1767939443.438:2426): avc: denied { getopt } for pid=10196 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.801869][ T30] audit: type=1400 audit(1767939443.468:2427): avc: denied { create } for pid=10168 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 445.825300][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 445.854757][ T5900] quatech2 1-1:0.51: device disconnected [ 445.980623][ T30] audit: type=1400 audit(1767939443.698:2428): avc: denied { mounton } for pid=10199 comm="syz.3.1082" path="/proc/750/task" dev="proc" ino=26462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 446.012839][ T30] audit: type=1400 audit(1767939443.728:2429): avc: denied { mount } for pid=10199 comm="syz.3.1082" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 446.271895][ T5971] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 446.348994][ T5900] usb 5-1: USB disconnect, device number 36 [ 446.361890][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 446.454781][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.481865][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.491774][ T5971] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 446.500972][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.523292][ T5901] usb 2-1: config index 0 descriptor too short (expected 786, got 18) [ 446.531490][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.543882][ T5971] usb 4-1: config 0 descriptor?? [ 446.549697][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.577936][ T5901] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 446.587297][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.595638][ T5901] usb 2-1: Product: syz [ 446.599909][ T5901] usb 2-1: Manufacturer: syz [ 446.604930][ T5901] usb 2-1: SerialNumber: syz [ 446.627854][ T5901] usb 2-1: config 0 descriptor?? [ 446.963122][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.975030][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.988675][ T5971] hkems 0003:2006:0118.0007: ignoring exceeding usage max [ 447.013404][ T5971] hkems 0003:2006:0118.0007: item fetching failed at offset 5/7 [ 447.038876][ T5971] hkems 0003:2006:0118.0007: parse failed [ 447.048693][ T5971] hkems 0003:2006:0118.0007: probe with driver hkems failed with error -22 [ 447.301565][ T30] audit: type=1400 audit(1767939444.998:2430): avc: denied { create } for pid=10222 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.661895][ T30] audit: type=1400 audit(1767939445.008:2431): avc: denied { bind } for pid=10222 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.724042][ T30] audit: type=1400 audit(1767939445.008:2432): avc: denied { write } for pid=10222 comm="syz.2.1087" path="socket:[27797]" dev="sockfs" ino=27797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.771836][ T30] audit: type=1400 audit(1767939445.008:2433): avc: denied { create } for pid=10222 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.793377][ T30] audit: type=1400 audit(1767939445.018:2434): avc: denied { connect } for pid=10222 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.842731][T10229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10229 comm=syz.4.1089 [ 448.046701][ T5976] usb 4-1: USB disconnect, device number 40 [ 448.120224][T10233] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 448.132007][T10233] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 448.183138][ T30] audit: type=1400 audit(1767939445.838:2435): avc: denied { accept } for pid=10228 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 448.784334][T10242] input: syz0 as /devices/virtual/input/input30 [ 449.362133][ T5971] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 449.566459][ T5972] usb 2-1: USB disconnect, device number 28 [ 449.700148][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 449.709444][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 449.724413][ T5971] usb 5-1: config 4 has an invalid interface number: 227 but max is 0 [ 449.754785][ T5971] usb 5-1: config 4 has no interface number 0 [ 449.793584][ T5971] usb 5-1: config 4 interface 227 has no altsetting 0 [ 449.856566][ T5971] usb 5-1: New USB device found, idVendor=05ac, idProduct=d769, bcdDevice=50.2c [ 449.928014][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.271903][ T5971] usb 5-1: Product: syz [ 450.292087][ T5971] usb 5-1: Manufacturer: syz [ 450.343629][ T5971] usb 5-1: SerialNumber: syz [ 450.434353][ T5971] ipheth 5-1:4.227: Unable to find alternate settings interface [ 450.982711][ T5976] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 451.030078][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 451.179302][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.205326][ T5976] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 451.232089][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.383582][ T5976] usb 3-1: Product: syz [ 451.388425][ T5976] usb 3-1: Manufacturer: syz [ 451.394832][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 451.394865][ T30] audit: type=1326 audit(1767939449.078:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.395769][ T5976] usb 3-1: SerialNumber: syz [ 451.583253][ T30] audit: type=1326 audit(1767939449.078:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.583511][ T30] audit: type=1326 audit(1767939449.088:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.635560][ T5987] usb 5-1: USB disconnect, device number 37 [ 451.638672][ T30] audit: type=1326 audit(1767939449.158:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.684541][ T30] audit: type=1326 audit(1767939449.198:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.695086][ T5976] usb 3-1: config 0 descriptor?? [ 451.711014][ T30] audit: type=1326 audit(1767939449.198:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.738405][ T5976] cypress_m8 3-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 451.766174][ T30] audit: type=1326 audit(1767939449.198:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.790569][ T5976] nokiaca42v2 ttyUSB0: required endpoint is missing [ 451.795941][ T30] audit: type=1326 audit(1767939449.208:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.884370][ T30] audit: type=1326 audit(1767939449.208:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 451.911363][ T30] audit: type=1326 audit(1767939449.208:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 452.001851][ T5971] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 452.041737][T10312] Device name cannot be null; rc = [-22] [ 452.128115][T10312] netlink: 'syz.0.1114': attribute type 2 has an invalid length. [ 452.173436][ T5971] usb 4-1: config index 0 descriptor too short (expected 786, got 18) [ 452.186046][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.218746][ T5971] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.238306][ T5971] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 452.248267][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.256683][ T5971] usb 4-1: Product: syz [ 452.261258][ T5971] usb 4-1: Manufacturer: syz [ 452.270843][ T5971] usb 4-1: SerialNumber: syz [ 452.325110][ T5971] usb 4-1: config 0 descriptor?? [ 452.371880][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 452.622440][T10324] IPVS: lc: FWM 3 0x00000003 - no destination available [ 453.081886][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 453.090954][ T24] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 453.100567][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.108933][ T24] usb 2-1: Product: syz [ 453.118629][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.134006][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.162460][ T24] usb 2-1: Manufacturer: syz [ 453.180012][ T24] usb 2-1: SerialNumber: syz [ 453.293931][ T5987] usb 4-1: USB disconnect, device number 41 [ 453.442064][ T24] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 453.470815][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 453.487956][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 453.497736][ T24] usb 2-1: media controller created [ 453.557858][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.571138][ T5971] usb 3-1: USB disconnect, device number 31 [ 453.582628][ T5971] cypress_m8 3-1:0.0: device disconnected [ 453.785689][T10332] Device name cannot be null; rc = [-22] [ 453.796112][T10332] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 453.812118][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 453.862913][ T24] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 453.901856][ T24] usb 2-1: USB disconnect, device number 29 [ 453.925927][T10336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10336 comm=syz.3.1122 [ 454.210642][T10339] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.225115][T10339] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 454.455182][T10339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.340842][T10366] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 455.641884][ T5976] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 455.814599][ T5976] usb 3-1: config index 0 descriptor too short (expected 786, got 18) [ 455.825673][ T5976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.834366][ T5976] usb 3-1: config 0 has no interface number 0 [ 455.843355][ T5976] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 455.854240][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.862811][ T5976] usb 3-1: Product: syz [ 455.868816][ T5976] usb 3-1: Manufacturer: syz [ 455.873657][ T5976] usb 3-1: SerialNumber: syz [ 455.880477][ T5976] usb 3-1: config 0 descriptor?? [ 456.017613][T10384] ubi: mtd0 is already attached to ubi31 [ 456.102926][ T5976] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 456.135202][T10386] input: syz0 as /devices/virtual/input/input31 [ 456.192212][ T5976] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 456.258553][ T5976] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 456.285904][ T5976] usb 3-1: media controller created [ 456.304127][T10369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1133'. [ 456.325412][T10369] block nbd0: reconnected socket [ 457.283145][ T52] block nbd0: Receive control failed (result -32) [ 457.305065][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.504873][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 457.504891][ T30] audit: type=1400 audit(1767939455.228:2507): avc: denied { read write } for pid=10393 comm="syz.0.1141" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.652215][ T5976] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 457.763365][ T30] audit: type=1400 audit(1767939455.258:2508): avc: denied { open } for pid=10393 comm="syz.0.1141" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.219773][ T5976] usb 3-1: USB disconnect, device number 32 [ 458.408279][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 459.045958][ T30] audit: type=1400 audit(1767939456.768:2509): avc: denied { read write } for pid=10408 comm="syz.4.1146" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 459.082718][ T30] audit: type=1400 audit(1767939456.788:2510): avc: denied { open } for pid=10408 comm="syz.4.1146" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 459.465941][T10422] pimreg: entered allmulticast mode [ 459.538516][T10422] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 459.863306][ T30] audit: type=1400 audit(1767939457.588:2511): avc: denied { mounton } for pid=10424 comm="syz.1.1151" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 459.888215][T10425] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 460.991368][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'. [ 461.883161][T10452] input: syz0 as /devices/virtual/input/input32 [ 463.001333][ T30] audit: type=1400 audit(1767939460.718:2512): avc: denied { connect } for pid=10464 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.050653][T10480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10480 comm=syz.3.1168 [ 463.285289][ T30] audit: type=1400 audit(1767939461.008:2513): avc: denied { read write } for pid=10483 comm="syz.1.1170" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.498847][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 463.662940][T10490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 463.697897][ T30] audit: type=1400 audit(1767939461.008:2514): avc: denied { open } for pid=10483 comm="syz.1.1170" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.722783][T10485] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 463.733002][ T30] audit: type=1400 audit(1767939461.398:2515): avc: denied { mount } for pid=10483 comm="syz.1.1170" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 463.786072][ T30] audit: type=1400 audit(1767939461.398:2516): avc: denied { search } for pid=10483 comm="syz.1.1170" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 463.824986][ T30] audit: type=1400 audit(1767939461.398:2517): avc: denied { search } for pid=10483 comm="syz.1.1170" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 463.866157][ T30] audit: type=1400 audit(1767939461.398:2518): avc: denied { search } for pid=10483 comm="syz.1.1170" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 465.686571][ T30] audit: type=1400 audit(1767939463.408:2519): avc: denied { mount } for pid=10506 comm="syz.4.1177" name="/" dev="ramfs" ino=29191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 465.729087][T10509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 465.746312][ T30] audit: type=1400 audit(1767939463.448:2520): avc: denied { mounton } for pid=10506 comm="syz.4.1177" path="/224/file0/bus" dev="ramfs" ino=29192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 465.782070][T10509] overlayfs: failed to set xattr on upper [ 465.787822][T10509] overlayfs: ...falling back to redirect_dir=nofollow. [ 465.788004][T10512] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 465.871938][T10512] overlayfs: failed to set xattr on upper [ 465.877704][T10512] overlayfs: ...falling back to redirect_dir=nofollow. [ 465.882779][T10509] overlayfs: ...falling back to index=off. [ 465.896420][T10512] overlayfs: ...falling back to index=off. [ 465.928794][T10509] overlayfs: ...falling back to uuid=null. [ 466.021885][T10512] overlayfs: ...falling back to uuid=null. [ 466.028890][T10512] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 466.062290][T10512] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 466.106507][T10512] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 466.326028][ T30] audit: type=1400 audit(1767939464.048:2521): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 466.702370][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1182'. [ 469.623067][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1196'. [ 472.455573][T10592] IPv6: NLM_F_CREATE should be specified when creating new route [ 473.341583][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10607 comm=syz.1.1209 [ 473.362217][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10607 comm=syz.1.1209 [ 473.398221][T10606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.410310][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10607 comm=syz.1.1209 [ 473.444546][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10607 comm=syz.1.1209 [ 474.731862][ T5987] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 474.765200][T10641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 474.771508][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10645 comm=syz.4.1224 [ 474.787699][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10645 comm=syz.4.1224 [ 474.801167][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=10645 comm=syz.4.1224 [ 474.814904][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10645 comm=syz.4.1224 [ 474.895543][ T5987] usb 4-1: config index 0 descriptor too short (expected 786, got 18) [ 474.904521][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.914784][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 474.932199][ T5987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.965278][ T5987] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 474.979619][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.016046][ T5987] usb 4-1: Product: syz [ 475.032128][ T5987] usb 4-1: Manufacturer: syz [ 475.046942][ T5987] usb 4-1: SerialNumber: syz [ 475.063992][ T5987] usb 4-1: config 0 descriptor?? [ 475.098607][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 475.112021][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 475.121676][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.156284][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 475.228365][ T9] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 475.407736][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.490877][ T9] usb 3-1: Product: syz [ 475.499369][ T9] usb 3-1: Manufacturer: syz [ 475.507787][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.520837][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.538106][ T5987] usb 4-1: USB disconnect, device number 42 [ 475.549093][ T9] usb 3-1: SerialNumber: syz [ 475.569811][ T9] usb 3-1: config 0 descriptor?? [ 475.589781][ T9] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 475.604270][ T9] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 476.268488][T10637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.276031][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 476.283328][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 476.290516][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 476.343996][T10669] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 476.351918][T10669] overlayfs: failed to set xattr on upper [ 476.365522][T10669] overlayfs: ...falling back to redirect_dir=nofollow. [ 476.378729][T10669] overlayfs: ...falling back to index=off. [ 476.386731][T10669] overlayfs: ...falling back to uuid=null. [ 476.395986][T10669] overlay: filesystem on ./bus not supported as upperdir [ 476.406585][ T9] usb 3-1: USB disconnect, device number 33 [ 476.427407][ T9] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 476.441440][ T9] ti_usb_3410_5052 3-1:0.0: device disconnected [ 476.623461][T10681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10681 comm=syz.3.1235 [ 476.650186][T10681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=10681 comm=syz.3.1235 [ 476.981960][ T5901] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 477.096395][T10698] netlink: 'syz.2.1242': attribute type 11 has an invalid length. [ 477.141329][T10698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1242'. [ 477.150705][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 477.167324][ T5901] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.188631][ T5901] usb 4-1: config 0 has no interface number 0 [ 477.209723][ T5901] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 477.232498][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.257212][ T5901] usb 4-1: Product: syz [ 477.277489][ T5901] usb 4-1: Manufacturer: syz [ 477.290183][ T5901] usb 4-1: SerialNumber: syz [ 477.317674][ T5901] usb 4-1: config 0 descriptor?? [ 477.342668][ T5901] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 477.371236][ T5901] usb 4-1: selecting invalid altsetting 1 [ 477.495679][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 477.981673][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.036172][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 478.056930][ T5901] usb 4-1: media controller created [ 478.117425][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.214740][ T5901] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 478.226425][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 478.234916][ T5901] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 478.352352][ T5901] usb 4-1: USB disconnect, device number 43 [ 478.466428][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 478.843146][ T9] usb 2-1: config index 0 descriptor too short (expected 786, got 18) [ 478.853788][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.890335][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.913402][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 479.435472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.472121][ T9] usb 2-1: Product: syz [ 479.476397][ T9] usb 2-1: Manufacturer: syz [ 479.481960][ T9] usb 2-1: SerialNumber: syz [ 479.507266][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 479.507282][ T30] audit: type=1400 audit(1767939477.228:2523): avc: denied { write } for pid=10730 comm="syz.3.1252" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 479.513131][ T9] usb 2-1: config 0 descriptor?? [ 479.802795][ T30] audit: type=1400 audit(1767939477.468:2524): avc: denied { read } for pid=10730 comm="syz.3.1252" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 479.859015][ T30] audit: type=1400 audit(1767939477.468:2525): avc: denied { open } for pid=10730 comm="syz.3.1252" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 479.924973][ T30] audit: type=1400 audit(1767939477.478:2526): avc: denied { ioctl } for pid=10730 comm="syz.3.1252" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 479.990099][ T30] audit: type=1400 audit(1767939477.478:2527): avc: denied { map } for pid=10730 comm="syz.3.1252" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 480.109141][ T30] audit: type=1400 audit(1767939477.478:2528): avc: denied { execute } for pid=10730 comm="syz.3.1252" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 480.140517][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.227867][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.260634][ T5901] usb 2-1: USB disconnect, device number 30 [ 481.045785][ T30] audit: type=1400 audit(1767939478.758:2529): avc: denied { mounton } for pid=10767 comm="syz.1.1264" path="/268/file0" dev="tmpfs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 481.076834][ T30] audit: type=1400 audit(1767939478.768:2530): avc: denied { mount } for pid=10767 comm="syz.1.1264" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 481.101848][ T30] audit: type=1400 audit(1767939478.768:2531): avc: denied { read } for pid=10767 comm="syz.1.1264" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 481.128842][ T30] audit: type=1400 audit(1767939478.768:2532): avc: denied { open } for pid=10767 comm="syz.1.1264" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 481.514051][ T5987] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 482.138448][T10782] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.216486][ T5987] usb 2-1: device descriptor read/64, error -71 [ 483.477248][ T5987] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 483.492187][T10805] syzkaller0: create flow: hash 2957144132 index 1 [ 483.522353][ T3555] syzkaller0: tun_net_xmit 76 [ 483.530723][ T3555] syzkaller0: tun_net_xmit 48 [ 483.552034][ T5901] syzkaller0: tun_net_xmit 76 [ 483.614548][T10800] syzkaller0: delete flow: hash 2957144132 index 1 [ 483.653278][ T5987] usb 2-1: device descriptor read/64, error -71 [ 483.762213][ T5987] usb usb2-port1: attempt power cycle [ 484.104307][ T5987] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 484.215322][T10810] Device name cannot be null; rc = [-22] [ 484.304530][ T5987] usb 2-1: device descriptor read/8, error -71 [ 484.597346][T10814] selinux_netlink_send: 2 callbacks suppressed [ 484.597458][T10814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10814 comm=syz.1.1278 [ 484.990730][T10818] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 485.004012][T10818] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 485.096699][T10820] IPVS: lc: FWM 3 0x00000003 - no destination available [ 485.104174][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 486.575406][T10835] overlayfs: failed to resolve './file0': -2 [ 489.281934][T10867] ubi: mtd0 is already attached to ubi31 [ 489.827448][T10876] Device name cannot be null; rc = [-22] [ 490.853314][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 491.739365][T10909] overlayfs: failed to resolve './file0': -2 [ 491.765825][T10909] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 491.783490][T10909] overlayfs: failed to set xattr on upper [ 491.790090][T10909] overlayfs: ...falling back to redirect_dir=nofollow. [ 491.800102][T10909] overlayfs: ...falling back to index=off. [ 491.811109][T10909] overlayfs: ...falling back to uuid=null. [ 492.336475][T10919] Device name cannot be null; rc = [-22] [ 493.151469][T10930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 493.326947][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 493.326959][ T30] audit: type=1400 audit(1767939491.048:2538): avc: denied { ioctl } for pid=10935 comm="syz.4.1317" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31618 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 493.383367][T10937] ubi: mtd0 is already attached to ubi31 [ 494.446847][T10953] overlayfs: failed to resolve './file0': -2 [ 496.878138][ T30] audit: type=1400 audit(1767939494.598:2539): avc: denied { watch watch_reads } for pid=10977 comm="syz.4.1327" path="/264" dev="tmpfs" ino=1387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 497.067289][ T30] audit: type=1400 audit(1767939494.788:2540): avc: denied { setopt } for pid=10977 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 499.623234][ T5971] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 499.866173][ T5971] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.884789][ T5971] usb 2-1: config 0 has no interface number 0 [ 499.901034][ T5971] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.919508][ T5971] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 499.936694][ T5971] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 500.090992][ T5971] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 500.102321][ T5971] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 500.113385][ T5971] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 500.126974][ T5971] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 500.189311][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 500.569150][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.579531][ T5971] usb 2-1: config 0 descriptor?? [ 500.595962][T10991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 500.604849][ T30] audit: type=1400 audit(1767939498.318:2541): avc: denied { write } for pid=11010 comm="syz.2.1337" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.604934][ T30] audit: type=1400 audit(1767939498.318:2542): avc: denied { open } for pid=11010 comm="syz.2.1337" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 500.647741][T10991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 500.663774][ T5971] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 500.707497][T11015] nbd: must specify an index to disconnect [ 500.866404][ T30] audit: type=1400 audit(1767939498.588:2543): avc: denied { mounton } for pid=10990 comm="syz.1.1332" path="/276/file0" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 500.961868][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 500.989076][T10991] ldusb 2-1:0.55: Write buffer overflow, 529 bytes dropped [ 501.002591][ T5987] usb 2-1: USB disconnect, device number 35 [ 501.014407][ T5987] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 501.117587][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.133592][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.404388][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.413269][ T24] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 501.423610][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.432790][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 501.444403][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 501.459012][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.472003][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.492881][ T24] usb 5-1: Product: syz [ 501.497080][ T24] usb 5-1: Manufacturer: syz [ 501.525386][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 501.542859][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 501.550889][ T30] audit: type=1400 audit(1767939499.268:2544): avc: denied { listen } for pid=11023 comm="syz.0.1330" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 501.574077][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 501.594153][ T30] audit: type=1400 audit(1767939499.268:2545): avc: denied { accept } for pid=11023 comm="syz.0.1330" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 501.619495][ T30] audit: type=1400 audit(1767939499.268:2546): avc: denied { setopt } for pid=11023 comm="syz.0.1330" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 501.692084][ T30] audit: type=1400 audit(1767939499.268:2547): avc: denied { write } for pid=11023 comm="syz.0.1330" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 502.013995][T11031] vlan2: entered promiscuous mode [ 502.052376][T11031] bridge0: entered promiscuous mode [ 503.091039][ T30] audit: type=1400 audit(1767939499.658:2548): avc: denied { getopt } for pid=11030 comm="syz.1.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 503.198612][T11046] input: syz0 as /devices/virtual/input/input33 [ 504.018463][T11052] netlink: 'syz.2.1349': attribute type 4 has an invalid length. [ 504.026983][T11052] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1349'. [ 504.684278][ T5987] usb 5-1: USB disconnect, device number 38 [ 504.765025][ T30] audit: type=1400 audit(1767939502.488:2549): avc: denied { write } for pid=11057 comm="syz.4.1352" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 504.875744][T11059] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1352'. [ 505.034121][ T5971] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 505.056684][ T30] audit: type=1400 audit(1767939502.618:2550): avc: denied { create } for pid=11057 comm="syz.4.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.251895][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 505.535585][ T5971] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 505.644139][ T5971] usb 2-1: config 0 has no interface number 0 [ 505.667723][ T5971] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 505.799427][ T5971] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 505.818103][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.847040][ T5971] usb 2-1: Product: syz [ 505.861712][ T5971] usb 2-1: Manufacturer: syz [ 505.877555][ T5971] usb 2-1: SerialNumber: syz [ 505.929737][ T5971] usb 2-1: config 0 descriptor?? [ 506.194581][ T5971] usbtouchscreen 2-1:0.214: Failed to read FW rev: -32 [ 506.202014][ T5971] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 508.029394][ T5971] usb 2-1: USB disconnect, device number 36 [ 509.499894][ T5971] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 509.612080][ T2151] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 509.769168][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 509.925225][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 509.945331][ T5971] usb 2-1: can't read configurations, error -61 [ 509.962019][ T2151] usb 3-1: device descriptor read/64, error -71 [ 510.019216][T11097] __vm_enough_memory: pid: 11097, comm: syz.0.1363, bytes: 4503599627366400 not enough memory for the allocation [ 510.111878][ T5971] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 510.174118][T11100] overlayfs: failed to resolve './file1': -2 [ 510.215307][T11100] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 510.222368][T11100] overlayfs: failed to set xattr on upper [ 510.228328][T11100] overlayfs: ...falling back to redirect_dir=nofollow. [ 510.235561][T11100] overlayfs: ...falling back to index=off. [ 510.242345][T11100] overlayfs: ...falling back to uuid=null. [ 510.281874][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 510.291752][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 510.301875][ T2151] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 510.353344][ T5971] usb 2-1: can't read configurations, error -61 [ 510.376432][ T5971] usb usb2-port1: attempt power cycle [ 510.488126][ T2151] usb 3-1: device descriptor read/64, error -71 [ 510.622703][ T2151] usb usb3-port1: attempt power cycle [ 510.771942][ T5971] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 510.832508][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 510.863928][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 510.879049][ T5971] usb 2-1: can't read configurations, error -61 [ 510.913961][ T30] audit: type=1400 audit(1767939508.638:2551): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 510.972346][ T2151] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 510.982564][T11117] mkiss: ax0: crc mode is auto. [ 511.001972][ T30] audit: type=1400 audit(1767939508.718:2552): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.024357][ T2151] usb 3-1: device descriptor read/8, error -71 [ 511.031716][ T30] audit: type=1400 audit(1767939508.718:2553): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.091907][ T5971] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 511.113464][ T30] audit: type=1400 audit(1767939508.718:2554): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.144333][ T30] audit: type=1400 audit(1767939508.718:2555): avc: denied { read } for pid=5482 comm="dhcpcd" name="n106" dev="tmpfs" ino=5091 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 511.174911][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 511.190442][ T30] audit: type=1400 audit(1767939508.718:2556): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=5091 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 511.243296][ T30] audit: type=1400 audit(1767939508.718:2557): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=5091 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 511.272792][ T2151] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 511.294200][ T5971] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 511.302724][ T2151] usb 3-1: device descriptor read/8, error -71 [ 511.311616][ T5971] usb 2-1: can't read configurations, error -61 [ 511.403469][ T5987] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 511.414798][ T2151] usb usb3-port1: unable to enumerate USB device [ 511.430137][ T5971] usb usb2-port1: unable to enumerate USB device [ 512.005915][ T5987] usb 4-1: config index 0 descriptor too short (expected 786, got 18) [ 512.014365][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.031913][ T5987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.069992][ T5987] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 512.080256][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.088343][ T5987] usb 4-1: Product: syz [ 512.092865][ T5987] usb 4-1: Manufacturer: syz [ 512.097812][ T5987] usb 4-1: SerialNumber: syz [ 512.110591][ T5987] usb 4-1: config 0 descriptor?? [ 512.981974][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.998030][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.031947][ T5987] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 513.194720][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.206663][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.217210][ T5987] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 513.228582][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.249091][ T5987] usb 2-1: config 0 descriptor?? [ 513.288465][T11137] overlayfs: failed to resolve './file1': -2 [ 513.301623][T11137] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 513.309267][T11137] overlayfs: failed to set xattr on upper [ 513.315179][T11137] overlayfs: ...falling back to redirect_dir=nofollow. [ 513.322586][T11137] overlayfs: ...falling back to index=off. [ 513.328663][T11137] overlayfs: ...falling back to uuid=null. [ 513.571229][ T5971] usb 4-1: USB disconnect, device number 44 [ 513.973020][ T5987] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 513.986727][ T5987] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 514.064695][ T5987] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x4D [ 514.365879][ T30] audit: type=1400 audit(1767939512.088:2558): avc: denied { create } for pid=11156 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.817531][ T5987] cp2112 0003:10C4:EA90.0008: error setting SMBus config [ 514.839429][ T5987] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 514.866237][ T5987] usb 2-1: USB disconnect, device number 41 [ 515.572262][ T5987] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 516.242140][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.253073][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.263869][ T5987] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 516.274613][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.291574][ T5987] usb 1-1: config 0 descriptor?? [ 516.917172][ T5987] hid-steam 0003:28DE:1142.0009: reserved main item tag 0xe [ 516.934139][ T5987] hid-steam 0003:28DE:1142.0009: collection stack underflow [ 516.943015][ T5987] hid-steam 0003:28DE:1142.0009: item 0 1 0 12 parsing failed [ 516.972217][ T5987] hid-steam 0003:28DE:1142.0009: steam_probe:parse of hid interface failed [ 516.987736][ T5987] hid-steam 0003:28DE:1142.0009: probe with driver hid-steam failed with error -22 [ 517.246397][T11205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.287703][T11205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.406063][T11207] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 517.705002][ T30] audit: type=1400 audit(1767939515.428:2559): avc: denied { ioctl } for pid=11209 comm="syz.1.1405" path="socket:[33149]" dev="sockfs" ino=33149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 518.835943][ T24] usb 1-1: USB disconnect, device number 39 [ 519.118706][ T30] audit: type=1400 audit(1767939516.798:2560): avc: denied { lock } for pid=11217 comm="syz.2.1407" path="socket:[34063]" dev="sockfs" ino=34063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 519.687877][ T30] audit: type=1326 audit(1767939516.798:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.724350][ T30] audit: type=1326 audit(1767939516.798:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.761133][ T30] audit: type=1326 audit(1767939516.798:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.787524][ T30] audit: type=1326 audit(1767939516.798:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.812018][ T30] audit: type=1326 audit(1767939516.798:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.837407][ T30] audit: type=1326 audit(1767939516.798:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.878515][ T30] audit: type=1326 audit(1767939516.798:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 519.942329][ T30] audit: type=1326 audit(1767939516.798:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.2.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 520.022031][ T5901] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 520.271938][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 520.298725][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 520.325614][ T5901] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 520.344039][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.346380][T11239] No control pipe specified [ 520.378882][ T5901] usb 2-1: Product: syz [ 520.388959][ T5901] usb 2-1: Manufacturer: syz [ 520.402300][ T5901] usb 2-1: SerialNumber: syz [ 520.454239][ T5901] usb 2-1: config 0 descriptor?? [ 520.469610][ T5901] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 520.884836][T11250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11250 comm=syz.0.1418 [ 521.162335][T11254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 521.174135][T11254] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 521.444851][T11257] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 521.452491][T11257] overlayfs: failed to set xattr on upper [ 521.460552][T11257] overlayfs: ...falling back to redirect_dir=nofollow. [ 521.468838][T11257] overlayfs: ...falling back to index=off. [ 521.475337][T11257] overlayfs: ...falling back to uuid=null. [ 523.169830][ T2151] usb 2-1: USB disconnect, device number 42 [ 523.342672][T11273] No control pipe specified [ 523.364867][T11276] input: syz0 as /devices/virtual/input/input36 [ 523.512057][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 523.512086][ T30] audit: type=1326 audit(1767939521.158:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 523.862556][ T30] audit: type=1326 audit(1767939521.158:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 523.953320][ T30] audit: type=1326 audit(1767939521.158:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.112040][ T30] audit: type=1326 audit(1767939521.158:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.161003][ T30] audit: type=1326 audit(1767939521.158:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.209136][ T30] audit: type=1326 audit(1767939521.158:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.403626][ T30] audit: type=1326 audit(1767939521.158:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.641869][ T30] audit: type=1326 audit(1767939521.158:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.692030][ T30] audit: type=1326 audit(1767939521.158:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 524.735467][ T30] audit: type=1326 audit(1767939521.158:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 525.845943][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1436'. [ 526.014843][T11320] input: syz0 as /devices/virtual/input/input37 [ 526.133528][T11322] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 526.145823][T11322] overlayfs: failed to set xattr on upper [ 526.156876][T11322] overlayfs: ...falling back to redirect_dir=nofollow. [ 526.168041][T11322] overlayfs: ...falling back to index=off. [ 526.178956][T11322] overlayfs: ...falling back to uuid=null. [ 528.821442][T11366] input: syz0 as /devices/virtual/input/input38 [ 529.661850][ T5987] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 529.932309][ T5987] usb 4-1: device descriptor read/64, error -71 [ 530.140957][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 530.167951][ T30] audit: type=1326 audit(1767939527.768:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.195520][ T30] audit: type=1326 audit(1767939527.768:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.227194][ T30] audit: type=1326 audit(1767939527.768:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.282358][ T30] audit: type=1326 audit(1767939527.768:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.306389][ T30] audit: type=1326 audit(1767939527.768:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.330106][ T5987] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 530.338377][ T30] audit: type=1326 audit(1767939527.768:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.362734][ T30] audit: type=1326 audit(1767939527.768:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.387978][ T30] audit: type=1326 audit(1767939527.778:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.411983][ T30] audit: type=1326 audit(1767939527.778:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.436333][ T30] audit: type=1326 audit(1767939527.778:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11381 comm="syz.0.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64518f749 code=0x7ffc0000 [ 530.491933][ T5987] usb 4-1: device descriptor read/64, error -71 [ 530.604213][ T5987] usb usb4-port1: attempt power cycle [ 530.717965][T11387] Device name cannot be null; rc = [-22] [ 530.972058][ T5987] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 531.213366][ T5987] usb 4-1: device descriptor read/8, error -71 [ 531.503641][ T5987] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 531.534393][ T5987] usb 4-1: device descriptor read/8, error -71 [ 531.566820][T11398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11398 comm=syz.1.1463 [ 531.733322][ T5987] usb usb4-port1: unable to enumerate USB device [ 531.842492][T11403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.855277][T11403] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 532.313111][T11404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11404 comm=syz.0.1465 [ 532.795946][T11410] input: syz0 as /devices/virtual/input/input39 [ 533.244721][T11416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.275099][T11417] netlink: 'syz.0.1465': attribute type 1 has an invalid length. [ 533.986516][T11426] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 534.461978][ T5987] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 534.771886][ T5987] usb 5-1: device descriptor read/64, error -71 [ 534.817360][T11437] netlink: 54759 bytes leftover after parsing attributes in process `syz.2.1474'. [ 534.872522][T11438] kernel profiling enabled (shift: 63) [ 534.889516][T11438] profiling shift: 63 too large [ 535.022160][ T5987] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 535.402227][ T5987] usb 5-1: device descriptor read/64, error -71 [ 535.622809][ T5987] usb usb5-port1: attempt power cycle [ 535.981902][ T5987] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 536.002999][ T5987] usb 5-1: device descriptor read/8, error -71 [ 536.445127][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 536.445143][ T30] audit: type=1400 audit(1767939534.168:3182): avc: denied { map } for pid=11436 comm="syz.0.1475" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 536.562509][ T5987] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 536.596400][ T5987] usb 5-1: device descriptor read/8, error -71 [ 536.617354][ T30] audit: type=1400 audit(1767939534.338:3183): avc: denied { setopt } for pid=11456 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 536.654992][T11460] input: syz0 as /devices/virtual/input/input40 [ 536.722109][ T5987] usb usb5-port1: unable to enumerate USB device [ 536.788362][T11462] bridge_slave_0: left allmulticast mode [ 536.800831][T11462] bridge_slave_0: left promiscuous mode [ 536.827060][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.894972][T11462] bridge_slave_1: left allmulticast mode [ 536.900950][T11462] bridge_slave_1: left promiscuous mode [ 536.915443][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.012679][T11469] ubi: mtd0 is already attached to ubi31 [ 537.021604][T11462] bond0: (slave bond_slave_0): Releasing backup interface [ 537.107326][T11462] bond0: (slave bond_slave_1): Releasing backup interface [ 537.172456][T11462] team0: Port device team_slave_0 removed [ 537.346983][T11462] team0: Port device team_slave_1 removed [ 537.361547][T11462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.369364][T11462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.403416][T11462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.465535][T11462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.596011][T11462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.766671][T11471] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 539.042008][ T5901] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 539.212922][T11493] fuse: Unknown parameter 'grou00000000000000000000' [ 539.222297][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 539.233404][ T5901] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 539.260215][ T5901] usb 4-1: config 0 has no interfaces? [ 539.609924][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 539.649449][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.694497][ T5901] usb 4-1: Product: syz [ 539.707353][ T5901] usb 4-1: Manufacturer: syz [ 539.714511][ T5901] usb 4-1: SerialNumber: syz [ 539.829042][ T5901] usb 4-1: config 0 descriptor?? [ 539.962003][ T5976] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 541.177232][ T30] audit: type=1400 audit(1767939537.798:3184): avc: denied { sqpoll } for pid=11485 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 541.362490][T11507] tipc: Started in network mode [ 541.367641][T11507] tipc: Node identity 3e655facec04, cluster identity 4711 [ 541.371915][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.375365][T11507] tipc: Enabled bearer , priority 0 [ 541.424633][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.448077][ T5976] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 541.472942][ T5901] usb 4-1: USB disconnect, device number 49 [ 541.485032][T11507] syzkaller0: entered promiscuous mode [ 541.490527][T11507] syzkaller0: entered allmulticast mode [ 541.513292][T11512] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 541.518144][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.815057][T11515] tipc: Resetting bearer [ 541.822262][ T5976] usb 3-1: config 0 descriptor?? [ 541.844958][T11506] tipc: Resetting bearer [ 542.099398][T11506] tipc: Disabling bearer [ 542.945818][ T5901] tipc: Node number set to 3529596844 [ 543.036222][ T5976] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 543.091874][ T2151] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 543.103520][ T5976] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 543.249084][T11532] Device name cannot be null; rc = [-22] [ 543.263410][ T5976] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x4D [ 543.311870][ T2151] usb 2-1: Using ep0 maxpacket: 32 [ 543.421910][ T2151] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 543.442614][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.451109][ T2151] usb 2-1: Product: syz [ 543.457260][ T2151] usb 2-1: Manufacturer: syz [ 543.465491][ T2151] usb 2-1: SerialNumber: syz [ 543.519319][ T2151] usb 2-1: config 0 descriptor?? [ 543.707931][ T2151] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 543.715822][ T2151] dvb-usb: bulk message failed: -22 (2/0) [ 543.729674][ T2151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.742195][ T2151] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 543.750760][ T2151] usb 2-1: media controller created [ 543.783304][ T2151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.825310][ T2151] usb 2-1: selecting invalid altsetting 7 [ 543.832170][ T2151] cxusb: set interface failed [ 543.837378][ T2151] dvb-usb: bulk message failed: -22 (1/0) [ 543.843935][ T5976] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 543.895181][ T5976] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 543.925701][ T2151] DVB: Unable to find symbol lgdt330x_attach() [ 543.941403][ T5976] usb 3-1: USB disconnect, device number 38 [ 543.959967][ T2151] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 544.129080][ T2151] rc_core: IR keymap rc-dvico-portable not found [ 544.185307][ T2151] Registered IR keymap rc-empty [ 544.454694][ T2151] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 544.533329][ T2151] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input41 [ 544.556408][T11546] ubi: mtd0 is already attached to ubi31 [ 544.562133][T11510] cxusb: i2c wr: len=79 is too big! [ 544.562133][T11510] [ 544.567502][ T2151] dvb-usb: schedule remote query interval to 100 msecs. [ 544.872030][ T2151] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 544.981845][ T2151] dvb-usb: bulk message failed: -22 (1/0) [ 545.012601][T11550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 545.111847][ T2151] dvb-usb: bulk message failed: -22 (1/0) [ 545.831324][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 545.945261][ T5987] usb 2-1: USB disconnect, device number 43 [ 546.046233][ T5987] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 546.079158][T11557] tmpfs: Unknown parameter 'giSÖÄV/x /ôd' [ 546.085133][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 546.272127][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 546.395026][ T24] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 546.423585][ T24] usb 3-1: config 0 has no interfaces? [ 546.435380][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 546.445042][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.592450][ T24] usb 3-1: Product: syz [ 547.104774][ T24] usb 3-1: Manufacturer: syz [ 547.109409][ T24] usb 3-1: SerialNumber: syz [ 548.371815][ T24] usb 3-1: config 0 descriptor?? [ 548.637165][ T24] usb 3-1: can't set config #0, error -71 [ 549.051643][ T24] usb 3-1: USB disconnect, device number 39 [ 549.207011][T11579] input: syz0 as /devices/virtual/input/input42 [ 549.674728][ T30] audit: type=1400 audit(1767939547.398:3185): avc: denied { map } for pid=11589 comm="syz.3.1519" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.789869][ T2151] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 549.854189][T11591] loop6: detected capacity change from 0 to 2640 [ 549.860952][ T30] audit: type=1400 audit(1767939547.548:3186): avc: denied { append } for pid=11589 comm="syz.3.1519" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 549.889719][T11591] buffer_io_error: 138 callbacks suppressed [ 549.889731][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 549.957290][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 549.963075][ T2151] usb 5-1: config index 0 descriptor too short (expected 786, got 18) [ 549.974588][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.995756][ T2151] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.009360][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.040294][ T2151] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 550.133736][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.141735][ T2151] usb 5-1: Product: syz [ 550.158030][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.181880][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.188612][ T2151] usb 5-1: Manufacturer: syz [ 550.412780][ T30] audit: type=1326 audit(1767939548.098:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 550.560845][ T30] audit: type=1326 audit(1767939548.098:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 550.601703][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.610101][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.829030][ T2151] usb 5-1: SerialNumber: syz [ 550.843833][ T2151] usb 5-1: config 0 descriptor?? [ 550.889247][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.912423][ T30] audit: type=1326 audit(1767939548.098:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 550.939663][T11591] ldm_validate_partition_table(): Disk read failed. [ 550.949858][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.971984][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 551.055051][T11591] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.346139][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 551.360505][ T30] audit: type=1326 audit(1767939548.098:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 551.384505][T11591] Dev loop6: unable to read RDB block 0 [ 551.390300][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 551.390409][T11591] loop6: unable to read partition table [ 551.400934][ T24] usb 2-1: config 0 has no interfaces? [ 551.475593][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.516280][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 551.525967][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.545690][ T30] audit: type=1326 audit(1767939548.098:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 551.546636][T11591] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 551.609279][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.648107][ T24] usb 2-1: Product: syz [ 551.669577][ T24] usb 2-1: Manufacturer: syz [ 551.689682][ T24] usb 2-1: SerialNumber: syz [ 551.715613][ T24] usb 2-1: config 0 descriptor?? [ 551.747760][ T30] audit: type=1326 audit(1767939548.098:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 551.838096][ T30] audit: type=1326 audit(1767939548.098:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 551.914548][ T30] audit: type=1326 audit(1767939548.098:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0018f749 code=0x7ffc0000 [ 551.941836][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11615 comm=syz.3.1525 [ 552.970471][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=11615 comm=syz.3.1525 [ 553.007178][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=11615 comm=syz.3.1525 [ 553.040189][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=11615 comm=syz.3.1525 [ 562.622271][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.628598][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.111728][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 658.118686][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11617/1:b..l [ 658.126999][ C1] rcu: (detected by 1, t=10502 jiffies, g=45761, q=641 ncpus=2) [ 658.134683][ C1] task:dhcpcd state:R running task stack:27208 pid:11617 tgid:11617 ppid:5482 task_flags:0x40014c flags:0x00080000 [ 658.148591][ C1] Call Trace: [ 658.151867][ C1] [ 658.154784][ C1] ? __schedule+0x10b9/0x6150 [ 658.159435][ C1] __schedule+0x1139/0x6150 [ 658.163914][ C1] ? post_alloc_hook+0x19e/0x220 [ 658.168846][ C1] ? get_page_from_freelist+0xd0b/0x31a0 [ 658.174476][ C1] ? __pfx___schedule+0x10/0x10 [ 658.179322][ C1] ? mark_held_locks+0x49/0x80 [ 658.184067][ C1] preempt_schedule_irq+0x51/0x90 [ 658.189080][ C1] irqentry_exit+0x1d8/0x8c0 [ 658.193661][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 658.199626][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 658.204906][ C1] Code: 0f c1 05 f8 00 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 658.224673][ C1] RSP: 0018:ffffc9000c117590 EFLAGS: 00000206 [ 658.230714][ C1] RAX: 9302be723591f200 RBX: ffffffff8e3c96a0 RCX: ffffc9000c11759c [ 658.238657][ C1] RDX: 0000000000000001 RSI: ffffffff8daa80f3 RDI: ffffffff8bf2b380 [ 658.246602][ C1] RBP: 00007efc6e0f06c5 R08: 0000000027c185dd R09: 00000000d27c185d [ 658.254555][ C1] R10: 0000000000000002 R11: ffff888027b3aff0 R12: ffffffff81a89758 [ 658.262516][ C1] R13: 0000000000000206 R14: ffff888027b3a4c0 R15: 0000000000000002 [ 658.270465][ C1] ? is_module_text_address+0x148/0x220 [ 658.275996][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.282120][ C1] is_module_text_address+0x14d/0x220 [ 658.287476][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.293606][ C1] kernel_text_address+0x81/0x100 [ 658.298620][ C1] ? unwind_get_return_address+0x59/0xa0 [ 658.304252][ C1] __kernel_text_address+0xd/0x40 [ 658.309262][ C1] unwind_get_return_address+0x59/0xa0 [ 658.314699][ C1] arch_stack_walk+0xa6/0x100 [ 658.319355][ C1] stack_trace_save+0x8e/0xc0 [ 658.324005][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 658.329357][ C1] ? kasan_save_stack+0x42/0x60 [ 658.334178][ C1] ? kasan_save_stack+0x33/0x60 [ 658.338996][ C1] kasan_save_stack+0x33/0x60 [ 658.343659][ C1] ? kasan_save_stack+0x33/0x60 [ 658.348486][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 658.353833][ C1] ? kmem_cache_free+0x15e/0x770 [ 658.358741][ C1] ? __put_anon_vma+0x114/0x3a0 [ 658.363564][ C1] ? unlink_anon_vmas+0x58a/0x820 [ 658.368562][ C1] ? free_pgtables+0x212/0xc10 [ 658.373294][ C1] ? exit_mmap+0x3f1/0xb60 [ 658.377684][ C1] ? __mmput+0x12a/0x410 [ 658.381902][ C1] ? mmput+0x62/0x70 [ 658.385776][ C1] ? do_exit+0x7d7/0x2bd0 [ 658.390081][ C1] ? do_group_exit+0xd3/0x2a0 [ 658.394726][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 658.399892][ C1] ? x64_sys_call+0x151c/0x1740 [ 658.404718][ C1] ? do_syscall_64+0xcd/0xf80 [ 658.409368][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.415417][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 658.420606][ C1] kmem_cache_free+0x15e/0x770 [ 658.425341][ C1] ? __put_anon_vma+0x114/0x3a0 [ 658.430168][ C1] ? __put_anon_vma+0x114/0x3a0 [ 658.434993][ C1] __put_anon_vma+0x114/0x3a0 [ 658.439652][ C1] unlink_anon_vmas+0x58a/0x820 [ 658.444480][ C1] free_pgtables+0x212/0xc10 [ 658.449046][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 658.454134][ C1] ? __pfx_down_write+0x10/0x10 [ 658.458964][ C1] exit_mmap+0x3f1/0xb60 [ 658.463181][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 658.467923][ C1] ? __lock_acquire+0x436/0x2890 [ 658.472839][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 658.478358][ C1] __mmput+0x12a/0x410 [ 658.482401][ C1] mmput+0x62/0x70 [ 658.486095][ C1] do_exit+0x7d7/0x2bd0 [ 658.490221][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 658.495227][ C1] ? __pfx_do_exit+0x10/0x10 [ 658.499802][ C1] ? rcu_is_watching+0x12/0xc0 [ 658.504536][ C1] do_group_exit+0xd3/0x2a0 [ 658.509029][ C1] __x64_sys_exit_group+0x3e/0x50 [ 658.514026][ C1] x64_sys_call+0x151c/0x1740 [ 658.518679][ C1] do_syscall_64+0xcd/0xf80 [ 658.523158][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.529024][ C1] RIP: 0033:0x7efc6e0f06c5 [ 658.533424][ C1] RSP: 002b:00007ffd2da0b778 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 658.541830][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007efc6e0f06c5 [ 658.549773][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 658.557715][ C1] RBP: 00007ffd2da0bd88 R08: 000055d0232912c0 R09: 0000000000000002 [ 658.565668][ C1] R10: 00000000000000e0 R11: 0000000000000206 R12: 00007ffd2da0b7c0 [ 658.573618][ C1] R13: 000055d0232928a0 R14: 00007ffd2da0ba00 R15: 00007ffd2da0b7b0 [ 658.581578][ C1] [ 658.584572][ C1] rcu: rcu_preempt kthread starved for 10301 jiffies! g45761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 658.595732][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 658.605680][ C1] rcu: RCU grace-period kthread stack dump: [ 658.611536][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 658.624987][ C1] Call Trace: [ 658.628239][ C1] [ 658.631162][ C1] ? __schedule+0x10b9/0x6150 [ 658.635815][ C1] __schedule+0x1139/0x6150 [ 658.640311][ C1] ? __pfx___schedule+0x10/0x10 [ 658.645134][ C1] ? find_held_lock+0x2b/0x80 [ 658.649789][ C1] ? schedule+0x2d7/0x3a0 [ 658.654092][ C1] schedule+0xe7/0x3a0 [ 658.658132][ C1] schedule_timeout+0x123/0x290 [ 658.662957][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 658.668298][ C1] ? __pfx_process_timeout+0x10/0x10 [ 658.673564][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 658.679339][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 658.684768][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 658.689506][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 658.694763][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 658.699947][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 658.704863][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 658.709694][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 658.715472][ C1] rcu_gp_kthread+0x26d/0x380 [ 658.720121][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.725289][ C1] ? rcu_is_watching+0x12/0xc0 [ 658.730019][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 658.735190][ C1] ? __kthread_parkme+0x19e/0x250 [ 658.740183][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.745472][ C1] kthread+0x3c5/0x780 [ 658.749513][ C1] ? __pfx_kthread+0x10/0x10 [ 658.754075][ C1] ? rcu_is_watching+0x12/0xc0 [ 658.758807][ C1] ? __pfx_kthread+0x10/0x10 [ 658.763369][ C1] ret_from_fork+0x983/0xb10 [ 658.767936][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 658.773020][ C1] ? __switch_to+0x7af/0x10d0 [ 658.777669][ C1] ? __pfx_kthread+0x10/0x10 [ 658.782234][ C1] ret_from_fork_asm+0x1a/0x30 [ 658.786979][ C1] [ 658.789968][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 658.796263][ C1] Sending NMI from CPU 1 to CPUs 0: [ 658.801530][ C0] NMI backtrace for cpu 0 [ 658.801544][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.801563][ C0] Tainted: [L]=SOFTLOCKUP [ 658.801568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.801575][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 658.801594][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 658.801606][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 658.801618][ C0] RAX: 0000000002d1d6a1 RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 658.801627][ C0] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 658.801636][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 658.801644][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 658.801653][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 658.801662][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 658.801676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.801697][ C0] CR2: 00007f14ca133416 CR3: 0000000027f5b000 CR4: 00000000003526f0 [ 658.801706][ C0] Call Trace: [ 658.801715][ C0] [ 658.801720][ C0] default_idle+0x13/0x20 [ 658.801738][ C0] default_idle_call+0x6c/0xb0 [ 658.801756][ C0] do_idle+0x38d/0x510 [ 658.801777][ C0] ? __pfx_do_idle+0x10/0x10 [ 658.801798][ C0] cpu_startup_entry+0x4f/0x60 [ 658.801818][ C0] rest_init+0x16b/0x2b0 [ 658.801829][ C0] ? acpi_subsystem_init+0x133/0x180 [ 658.801842][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 658.801856][ C0] start_kernel+0x3ef/0x4d0 [ 658.801877][ C0] x86_64_start_reservations+0x18/0x30 [ 658.801897][ C0] x86_64_start_kernel+0x130/0x190 [ 658.801909][ C0] common_startup_64+0x13e/0x148 [ 658.801930][ C0] [ 665.277149][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 665.277166][ T30] audit: type=1400 audit(1767939662.998:3257): avc: denied { recv } for pid=11597 comm="iou-sqp-11600" saddr=10.128.0.169 src=41414 daddr=10.128.1.94 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1