last executing test programs: 11.047373568s ago: executing program 3 (id=618): socket$netlink(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xec, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xe6, [@rand_addr=0x64010102, @broadcast, @private=0xa010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @empty]}, @noop, @timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x1, [{@rand_addr=0x64010100}, {@private=0xa010100, 0x5}, {@empty, 0x9}, {@multicast1, 0x3}, {@broadcast, 0xfc}, {@remote, 0x4}]}, @ssrr={0x89, 0x23, 0x33, [@rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}]}, @end, @end, @generic={0x44, 0xc, "24196c616781c29e37fc"}, @timestamp={0x44, 0x4, 0xe3, 0x0, 0x5}, @ssrr={0x89, 0x17, 0x33, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0xc, 0x0, [{0x5, 0x6, "8b828659"}]}, @rr={0x7, 0xf, 0x72, [@rand_addr=0x64010101, @local, @private=0xa010101]}, @ssrr={0x89, 0x13, 0xc6, [@remote, @loopback, @remote, @private=0xa010100]}]}}}], 0x108}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r9, 0x80000}) 9.130150782s ago: executing program 3 (id=625): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r3, 0x2f, 0x3, 0x3, 0x1, 0x51, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x10, 0x1, 0x401, 0x2}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x40810, 0x3}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x80, 0x20, 0x4, 0xfffffffb, {{0x16, 0x4, 0x2, 0x36, 0x58, 0x68, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x7, 0x4, 'o;'}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0x0, [0xf6]}, @generic={0x7, 0xc, "07d86232a502e824fc45"}, @generic={0x7, 0x7, "eae86c974b"}, @timestamp_addr={0x44, 0x24, 0xe2, 0x1, 0x4, [{@broadcast, 0xf3f}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1ff}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r5 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r8, &(0x7f0000000a00)={&(0x7f0000000380)={0xa, 0x4e23, 0x1, @mcast1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x8090) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd_index=0x6, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a3c00000012aa09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000100427dd67c9c558a93811a6a2a"], 0x64}}, 0x0) 8.643978847s ago: executing program 4 (id=631): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0xfffffffc, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x4050) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xc4a9, 0x0, 0xa}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r9, 0x5501) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r6, 0x2afd, 0x308b, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000340)=""/114, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xb00, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 8.496531227s ago: executing program 3 (id=632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 7.738389069s ago: executing program 2 (id=634): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x4, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="01002dbd70027100c1582100000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x29, 0x0}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.999079081s ago: executing program 0 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xce, &(0x7f0000000000)=0xa2, 0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) (async) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004503005cffff0000002f907800000000e0000001248022eb00000f0cc300000000000800890086dd88a888be0800000010fe00000100000000000000080022eb17000000200001000200000000000009000000000800655800000000"], 0x0) (async, rerun: 32) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (rerun: 32) recvfrom(r7, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6.740169772s ago: executing program 2 (id=637): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x490}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 6.487297981s ago: executing program 0 (id=638): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2, 0x1000000}}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000009000091320f9c62e814110000000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="11930b9647000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES8=r8], 0x11) 5.622099758s ago: executing program 2 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200040, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched_retired(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@delchain={0x120, 0x65, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {0x7, 0x5}, {0xb, 0xffe6}}, [@f_tcindex={{0xc}, {0x88, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfff9}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc}}, @TCA_TCINDEX_POLICE={0x4c, 0x6, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x6, 0x8ebb, 0x8, 0xd, {0xff, 0x1, 0x1, 0x8, 0x2, 0x9}, {0x6, 0x2, 0x8000, 0x6, 0xe6e, 0x7fff}, 0x3, 0x4, 0xa}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xb}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xe, 0x3}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}]}}, @f_tcindex={{0xc}, {0x34, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0x8}}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffe0, 0x4c552c25b4252df6}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0xfff1}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfffb, 0x9}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xc1}]}}]}, 0x120}}, 0x0) ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000180)={&(0x7f00000003c0)="a7f46437c5e57b8742d2451e6e5e62cd0beb8aa00990e0e4ca84ff1436c105b26c5e0a081a6a70b96eb525813f1cbe3ab8fac6e6302257492dd82e16edc7b49a180caf0f292ff9fb5ac0964052621e6d421481d57c6feca58b9b71e5ffcf33d5da6f4cdc266958bccce6be7a7d89b7bc2f54a56a164d59d5ed78c1d8e2bb574dee7402f550d7829879", 0x89}) recvmmsg(r8, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 5.512632688s ago: executing program 0 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0xe, 0x1011, 0xffffffffffffffff, 0x7185e000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0xc, 0x1, 0xfff7fe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/186, 0xba) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffda8, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4000006}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 5.50461947s ago: executing program 1 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x400000000000afc}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0xedf0b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.452674379s ago: executing program 4 (id=646): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.695367034s ago: executing program 3 (id=647): syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4.503755766s ago: executing program 1 (id=648): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r3, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a500010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50) 4.306528213s ago: executing program 4 (id=649): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = userfaultfd(0x801) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) 3.875659623s ago: executing program 0 (id=650): socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0xd, 0x0, 0x0, 0x0) 3.718981077s ago: executing program 4 (id=651): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = getpgrp(0x0) r1 = fanotify_init(0x0, 0x0) r2 = dup(r1) write$nbd(r2, &(0x7f0000000000)={0x67446698, 0x1}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xfc}, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0xfffffffffffffd60, &(0x7f0000001600)=[{&(0x7f0000000240)="cd", 0xff70}], 0x1}, 0x810) 2.648587056s ago: executing program 0 (id=652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) r5 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x4, &(0x7f0000000000)={0x6bd7, 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c014) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.647400716s ago: executing program 1 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 2.641543587s ago: executing program 4 (id=654): openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x80) listen(0xffffffffffffffff, 0xf65a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc50800014000000687080001400000000408"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_format(r3, &(0x7f00000002c0)='-1\x00', 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 2.179617424s ago: executing program 1 (id=655): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x4040800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000087df9ec674d895211e48a63dbae72e48af673b203e893e384b357c6769a0fa304dfc2323f66a0d9e04a2c0278831c6a7730880db214ab3e1f8ef9d0c79d262dba287af36d8c724a1a1b5101eb03cae908d3751cd90269e85a30ed5d3af911ce13e4a024219d2080710dbcd7405450f1a172588f432464ba5a086b82a45eb4247416b6495568da027b5e9a05eb5991c03c1d81b79814846bd3ba9f0", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000e2fd"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000001c140)=@bpf_ext={0x1c, 0x0, &(0x7f0000000100), &(0x7f0000019300)='GPL\x00', 0xfffff800, 0x10, &(0x7f0000019400)=""/16, 0x41000, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000019600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000019640)={0x4, 0x10, 0x3, 0x101}, 0x10, 0x30240, 0xffffffffffffffff, 0x5, 0x0, &(0x7f000001c0c0)=[{0x5, 0x2, 0x1, 0x9}, {0x4, 0x6, 0xe, 0x6}, {0x2, 0x1, 0xd, 0x8}, {0x0, 0x4, 0x8, 0x2}, {0x1, 0x3, 0xc, 0xb}], 0x10, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_request}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000140)=r5, 0x4) 1.536607739s ago: executing program 0 (id=656): r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x1000000, 0x0, 0x0, 0x0) 1.516321672s ago: executing program 1 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x24, 0x1}, {0x36}, {0x48, 0x1}, {0x16}, {0x36, 0x1}, {0x2}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4e}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x10}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffc0}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.331717171s ago: executing program 2 (id=658): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r6], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x7f, {0x8, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 1.319007431s ago: executing program 1 (id=659): syz_clone(0xc0004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = socket(0x10, 0x3, 0x0) syslog(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x14, 0x33, 0xa01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@noextend}, {@access_client}]}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r5) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 857.483572ms ago: executing program 2 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x1, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 424.46043ms ago: executing program 3 (id=661): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000001200)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000001280)) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(0xffffffffffffffff, 0xc0186449, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 386.841086ms ago: executing program 4 (id=662): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000038c0)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)="2ad043457cf70967ee6119184ce7a52edc65217d2a88c667bfb4c6ca25388076b10b1e889f3e27bb8139cb3ba51ea0f19ec8fab2108356202d8253c07d9e06e2c19478d45029970342ec88cc50f7df53bb1aca1f733c2de2eacfd7d5f3e085c81a207f", 0x63}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [r2, r2, r2, 0xffffffffffffffff, r2, r1, r1, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}], 0xf8, 0x40000}}, {{&(0x7f0000002a40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002ac0)="b8dadfb9440dec64d9093a33450f4cbc5853acc93220f2121cda09f900220d3278fbd38e459ca0a9fb5a6f02368f85f5bf102fcd9b97747df483fb632c27f59c", 0x40}, {&(0x7f0000002b00)="ced2a6", 0x3}, {&(0x7f0000002b40)="d2e835b71d8d90385c989b22e7845156dd08f5aa4ddf19789148756746a70cf9dbed9590a852210c6926b792c7ab12d5efd4c60a", 0x34}, {&(0x7f0000002b80)="1d3044b93786d761347308f3826996c36ef445c37380f67cfd3af5d178a11a444c9b28c52fe2e2341ccff273cfdf8a1f64c0ed1d466ac444f5d9bc158bc25eeb0885777dda31862d782ac235c936ccd10bdba8c03adefad4442f7dea34489c3bf46a11a8681e7d705f6d8a0d728430e1e905969ccccb74f5bc2aee7852b14b9d67d41c7d1d906852681030bb4531f9e4", 0x90}, {&(0x7f0000002c40)="69400e73cdae48ebe5d3225b6132cfeba60c6f9f6b0033a7538d688f3b49f77b403f225a1eff28629607be5f563c60d03b75ebe9206f634810052a1d14b7a694fd96b4f1de2da75260fd3ca83955358f7a9c576e0f523c9356358d9aef8ec42ff0315bdfefb008f1abaeceefaab0a57a9f779bd194ac60996e8deb7610a741ca05a964279baee69d3d4dde43d70930627dddf6cadac058a5aa56c05b7d46ed49f0c056c2ffc2e6691cb63073151a944bc1785b974aabb3b58f1dd7eb69c7055c5b23a204cf409d34887dc144a3a45567edcf0d39254b5bae94", 0xd9}], 0x5, &(0x7f0000002e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x4}}, {{&(0x7f0000003580)=@abs={0x1, 0x0, 0x8}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003600)="74b03288d2a6ec2e90f6ef50bad9f9fd1e09e141d220232273f6718159ef3320396a226bd5423b99d1933d2d3fe03e1fcc514315d14e82af94953815e14971591b682238e2664b256f3344f00493697c", 0x50}, {&(0x7f0000003680)="d7c41e488abcfa581506c1781508702168533edcc412e6a638b69de9638301e5c297c6426e514da000b76cd2613a864ef6b61322263feb3958d4aa1e7997404699958bb26d1cb139509aa4b7a7b6f8", 0x4f}, {&(0x7f0000002e80)="050c5e3b50c29234ef62d62889d40818456bbcfb97b1430f5ac57b05b65603868c456b69e69ef2baa57d17796081", 0x2e}, {&(0x7f0000003700)="db297e96c9d4592c7e1ce793f90c196d4f245598692a756ef30ac92ebff1edecb74d313b8a9238ee04d5423e40cc11eec2a523c055a300b38dc2710083a3d63aff2d8b7f1eaac38165910eaa86247d1eb9b197f5ea58e1de8d0f9d6cb492a79f47862a8f70e43b5349cdbf38a202d504499b20f348e3d358539037d8d28d5590704bab4d994ed0c49ec8736663789823944fd6de96deae5f79217279374d8581a74e0b4ccb03e41107e6a3b89e3bd603ae5b8a0b364d4129f905a8829a4b989bc2d5ef93018e22875e1b7900777a70c90f2e06", 0xd3}], 0x4, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x4050}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000001500100029bd7000a8320d9810932af5fb3f8f5255fbdbdf250a3830c888d96541a37924247b3029a8ab7a714bf2057560658c6a75c4feb5abe9cf4645", @ANYRES32=0x0, @ANYBLOB="14000600180000000200000019dd000080ffffff080009000001000014000200ff02000000000000000000000000000108000a00030000001400010000000000000000000000000000000000080008000000000014000200fc000000000000000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'full', 0x20, 0x4, 0x20, 0x50bf}, 0x2f) syz_io_uring_setup(0x4ba7, &(0x7f0000000980)={0x0, 0xb15b, 0x20, 0x0, 0x2b0, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000180c200000386dd6abe8384b52382e97c8000000000fdff00000000000000bb198000000000040000001000004b3f9b99299220e323cfa50356cdfd42b2130000b7320004000110000050231c82dbc119ca4f304221464a88f4547f2b46700d94d32923970965c943faafaba51d9efed111254c17d4ed85c6dddd71457141c5e4fb159b354ff971b85a0ccdecced982c4885f66cb875c8f4efd3ffaa8a2c44b"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) setsockopt$inet_int(r6, 0x0, 0x15, 0x0, 0x31) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0xfffffffffffffffc) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r7, 0xc08c5114, &(0x7f0000000180)={"4f148885365c01f6327cffbfde3271087d11fca10a424a283dddd79b4894", 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x3, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) 302.25531ms ago: executing program 3 (id=663): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x0, 0x40000040, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x400, 0x6000103a, r4, 0x0) r6 = fanotify_init(0x4, 0x2) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x1, 0xfb, 0x4, &(0x7f0000000100)={0x4, "6a6ea751434fd7f4a4331cbdbff893a5ba0300"}}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x8f) fanotify_mark(r6, 0x71, 0x8001038, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000004) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x3f7, 0x30) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) 0s ago: executing program 2 (id=664): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r3, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50) kernel console output (not intermixed with test programs): tensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.021272][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.170614][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 148.186132][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.194954][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.307389][ T5882] usb 2-1: config 0 has no interface number 0 [ 148.323104][ T5882] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.350721][ T5856] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.372872][ T5882] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 148.392397][ T5882] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.411487][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.432917][ T5882] usb 2-1: config 0 descriptor?? [ 148.451496][ T6954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.495399][ T5882] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.531263][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 148.538781][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 148.558766][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 148.579005][ T5856] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 148.588408][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.602972][ T5856] usb 1-1: config 0 descriptor?? [ 148.871690][ T6965] process 'syz.1.266' launched '/dev/fd/11' with NULL argv: empty string added [ 148.896296][ T29] audit: type=1400 audit(1770886501.731:358): avc: denied { execute_no_trans } for pid=6953 comm="syz.1.266" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.971326][ T29] audit: type=1400 audit(1770886501.741:359): avc: denied { getopt } for pid=6953 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.211392][ T5856] savu 0003:1E7D:2D5A.0001: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 149.268886][ T24] usb 1-1: USB disconnect, device number 12 [ 149.601819][ T6966] fido_id[6966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.969840][ T24] usb 2-1: USB disconnect, device number 8 [ 150.236754][ T6970] binder: 6967:6970 ioctl 400c620e 200000000240 returned -22 [ 150.544840][ T6947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.007145][ T6978] xt_TCPMSS: Only works on TCP SYN packets [ 152.367838][ T6993] netlink: 'syz.4.275': attribute type 12 has an invalid length. [ 152.500682][ T5933] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.695622][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 152.699226][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.699259][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.699280][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.699314][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.699333][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.719924][ T5933] usb 1-1: config 0 descriptor?? [ 153.240751][ T6997] FAULT_INJECTION: forcing a failure. [ 153.240751][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 153.253455][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.3.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.253473][ T6997] Tainted: [L]=SOFTLOCKUP [ 153.253477][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 153.253483][ T6997] Call Trace: [ 153.253488][ T6997] [ 153.253492][ T6997] dump_stack_lvl+0x100/0x190 [ 153.253513][ T6997] should_fail_ex.cold+0x5/0xa [ 153.253526][ T6997] ? lsm_blob_alloc+0x68/0x90 [ 153.253536][ T6997] should_failslab+0xc2/0x120 [ 153.253549][ T6997] __kmalloc_noprof+0xe0/0x850 [ 153.253567][ T6997] ? down_write_nested+0x14f/0x200 [ 153.253586][ T6997] lsm_blob_alloc+0x68/0x90 [ 153.253596][ T6997] security_sb_alloc+0x25/0x240 [ 153.253609][ T6997] alloc_super+0x24c/0xd20 [ 153.253621][ T6997] ? __pfx_bpf_fill_super+0x10/0x10 [ 153.253635][ T6997] sget_fc+0x117/0xc70 [ 153.253646][ T6997] ? __pfx_set_anon_super_fc+0x10/0x10 [ 153.253663][ T6997] ? __pfx_bpf_fill_super+0x10/0x10 [ 153.253677][ T6997] get_tree_nodev+0x28/0x190 [ 153.253689][ T6997] vfs_get_tree+0x92/0x320 [ 153.253706][ T6997] vfs_cmd_create+0xd7/0x2a0 [ 153.253723][ T6997] __do_sys_fsconfig+0x55a/0xcb0 [ 153.253741][ T6997] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 153.253757][ T6997] ? fput+0x79/0x100 [ 153.253776][ T6997] do_syscall_64+0x106/0xf80 [ 153.253786][ T6997] ? clear_bhb_loop+0x40/0x90 [ 153.253800][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.253811][ T6997] RIP: 0033:0x7f655639bf79 [ 153.253820][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.253831][ T6997] RSP: 002b:00007f6557342028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 153.253842][ T6997] RAX: ffffffffffffffda RBX: 00007f6556615fa0 RCX: 00007f655639bf79 [ 153.253850][ T6997] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000009 [ 153.253856][ T6997] RBP: 00007f6557342090 R08: 0000000000000000 R09: 0000000000000000 [ 153.253862][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.253868][ T6997] R13: 00007f6556616038 R14: 00007f6556615fa0 R15: 00007ffcbe03cd68 [ 153.253882][ T6997] [ 153.254237][ T29] audit: type=1400 audit(1770886506.041:360): avc: denied { write } for pid=6983 comm="syz.0.273" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 153.394599][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.513848][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.789102][ T5933] usbhid 1-1:0.0: can't add hid device: -71 [ 153.796790][ T5933] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 153.808388][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.819485][ T5933] usb 1-1: USB disconnect, device number 13 [ 154.613597][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.730584][ T5856] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.883263][ T5856] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 154.900573][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.912836][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.941828][ T5856] usb 2-1: config 0 descriptor?? [ 155.087013][ T5882] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 155.126527][ T5882] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.154256][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.180635][ T5882] usb 5-1: Product: syz [ 155.200786][ T5856] usb 2-1: Cannot read MAC address [ 155.206659][ T5882] usb 5-1: Manufacturer: syz [ 155.211374][ T5856] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 155.230598][ T5882] usb 5-1: SerialNumber: syz [ 155.259773][ T5856] usb 2-1: USB disconnect, device number 9 [ 155.480999][ T5882] usb 5-1: USB disconnect, device number 9 [ 155.568170][ T7019] misc userio: No port type given on /dev/userio [ 155.582898][ T7019] misc userio: The device must be registered before sending interrupts [ 155.684679][ T7026] syzkaller0: entered promiscuous mode [ 155.690512][ T7026] syzkaller0: entered allmulticast mode [ 156.104208][ T7031] misc userio: No port type given on /dev/userio [ 156.566948][ T7023] misc userio: The device must be registered before sending interrupts [ 156.811484][ T29] audit: type=1400 audit(1770886509.641:361): avc: denied { name_bind } for pid=7033 comm="syz.3.285" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 156.812700][ T3520] Bluetooth: hci5: Frame reassembly failed (-90) [ 157.782823][ T7045] xt_TCPMSS: Only works on TCP SYN packets [ 158.046530][ T29] audit: type=1400 audit(1770886510.891:362): avc: denied { create } for pid=7046 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.149860][ T7047] FAULT_INJECTION: forcing a failure. [ 158.149860][ T7047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.215702][ T29] audit: type=1400 audit(1770886510.921:363): avc: denied { bind } for pid=7046 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.240688][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.1.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.240716][ T7047] Tainted: [L]=SOFTLOCKUP [ 158.240723][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.240732][ T7047] Call Trace: [ 158.240738][ T7047] [ 158.240744][ T7047] dump_stack_lvl+0x100/0x190 [ 158.240775][ T7047] should_fail_ex.cold+0x5/0xa [ 158.240797][ T7047] _copy_from_user+0x2e/0xd0 [ 158.240826][ T7047] copy_msghdr_from_user+0x9f/0x4f0 [ 158.240853][ T7047] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.240884][ T7047] ? __lock_acquire+0x4a5/0x2630 [ 158.240912][ T7047] ___sys_recvmsg+0xdd/0x1a0 [ 158.240937][ T7047] ? __pfx____sys_recvmsg+0x10/0x10 [ 158.240965][ T7047] ? find_held_lock+0x2b/0x80 [ 158.240998][ T7047] do_recvmmsg+0x301/0x760 [ 158.241026][ T7047] ? __pfx_do_recvmmsg+0x10/0x10 [ 158.241049][ T7047] ? ksys_write+0x190/0x250 [ 158.241065][ T7047] ? ksys_write+0x190/0x250 [ 158.241083][ T7047] ? __mutex_unlock_slowpath+0x15c/0x790 [ 158.241108][ T7047] ? __fget_files+0x21f/0x3d0 [ 158.241132][ T7047] __x64_sys_recvmmsg+0x22a/0x280 [ 158.241155][ T7047] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 158.241182][ T7047] do_syscall_64+0x106/0xf80 [ 158.241197][ T7047] ? clear_bhb_loop+0x40/0x90 [ 158.241217][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.241234][ T7047] RIP: 0033:0x7f28f919bf79 [ 158.241247][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.241263][ T7047] RSP: 002b:00007f28f9fdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 158.241279][ T7047] RAX: ffffffffffffffda RBX: 00007f28f9415fa0 RCX: 00007f28f919bf79 [ 158.241290][ T7047] RDX: 0000000000000001 RSI: 00002000000050c0 RDI: 0000000000000003 [ 158.241300][ T7047] RBP: 00007f28f9fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 158.241310][ T7047] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 158.241320][ T7047] R13: 00007f28f9416038 R14: 00007f28f9415fa0 R15: 00007fff663f1018 [ 158.241352][ T7047] [ 158.241843][ T29] audit: type=1400 audit(1770886510.991:364): avc: denied { listen } for pid=7046 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.741382][ T29] audit: type=1400 audit(1770886511.591:365): avc: denied { read } for pid=7054 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.824080][ T5815] Bluetooth: hci5: command 0x1003 tx timeout [ 158.832021][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.839715][ T29] audit: type=1400 audit(1770886512.511:366): avc: denied { bind } for pid=7063 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.930572][ T5917] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 160.302675][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 160.314189][ T5917] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 160.328493][ T5917] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.531575][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.562637][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.575333][ T5917] usb 1-1: Product: syz [ 160.580360][ T7073] syzkaller0: entered promiscuous mode [ 160.582295][ T5917] usb 1-1: Manufacturer: syz [ 160.590408][ T5917] usb 1-1: SerialNumber: syz [ 160.595339][ T7073] syzkaller0: entered allmulticast mode [ 160.666767][ T5917] cdc_mbim 1-1:1.0: skipping garbage [ 161.996862][ T7064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.004059][ T7064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.098610][ T7105] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.136952][ T29] audit: type=1400 audit(1770886514.971:367): avc: denied { read write } for pid=7103 comm="syz.3.302" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.390703][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.470768][ T7105] CIFS mount error: No usable UNC path provided in device string! [ 162.470768][ T7105] [ 162.482906][ T29] audit: type=1400 audit(1770886514.971:368): avc: denied { open } for pid=7103 comm="syz.3.302" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.516807][ T7105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.641018][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 162.782424][ T47] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 162.792392][ T47] usb 5-1: config 0 has no interface number 0 [ 162.798463][ T47] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.831490][ T47] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 162.864862][ T47] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 162.877182][ T47] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 162.887386][ T29] audit: type=1400 audit(1770886515.701:369): avc: denied { getopt } for pid=7097 comm="syz.1.301" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.909036][ T47] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 163.014427][ T7064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.021680][ T7064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.029050][ T5917] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 163.051329][ T47] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.089306][ T47] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.210793][ T47] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25391, setting to 1024 [ 163.257030][ T47] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 163.316071][ T5917] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 163.357816][ T5917] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 163.383679][ T47] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.507915][ T5917] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 163.532886][ T5917] usb 1-1: USB disconnect, device number 14 [ 163.540902][ T47] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 163.612504][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.630552][ T47] usb 5-1: Product: syz [ 163.645680][ T47] usb 5-1: Manufacturer: syz [ 163.655873][ T47] usb 5-1: SerialNumber: syz [ 163.698062][ T47] usb 5-1: config 0 descriptor?? [ 163.728219][ T7101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.766212][ T7101] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.796984][ T47] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 163.871243][ T47] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 163.909699][ T47] scsi host1: microtekX6 [ 164.179714][ T7101] netlink: 884 bytes leftover after parsing attributes in process `syz.4.300'. [ 164.387238][ T7101] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 164.480545][ T29] audit: type=1400 audit(1770886517.321:370): avc: denied { create } for pid=7099 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 164.885290][ T29] audit: type=1400 audit(1770886517.331:371): avc: denied { write } for pid=7099 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 165.598213][ T7144] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 165.741824][ T7147] macvlan4: entered promiscuous mode [ 165.747141][ T7147] macvlan4: entered allmulticast mode [ 166.005311][ T7147] bond1: entered promiscuous mode [ 166.062964][ T7147] gretap1: entered promiscuous mode [ 166.130923][ T7147] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 166.152202][ T7147] bond1: left promiscuous mode [ 166.157092][ T7147] gretap1: left promiscuous mode [ 166.236555][ T7165] syzkaller0: entered promiscuous mode [ 166.247743][ T7165] syzkaller0: entered allmulticast mode [ 166.654718][ T7160] syzkaller0: entered promiscuous mode [ 166.668761][ T7160] syzkaller0: entered allmulticast mode [ 166.708327][ T5856] usb 5-1: USB disconnect, device number 10 [ 167.022639][ T7184] binder: 7179:7184 ioctl 400c620e 200000000240 returned -22 [ 168.723162][ T29] audit: type=1400 audit(1770886521.571:372): avc: denied { write } for pid=7197 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.990580][ T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.421074][ T47] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 169.550548][ T47] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.559571][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.580714][ T47] usb 2-1: Product: syz [ 169.584878][ T47] usb 2-1: Manufacturer: syz [ 169.589435][ T47] usb 2-1: SerialNumber: syz [ 169.630062][ T47] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.651841][ T29] audit: type=1400 audit(1770886522.491:373): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 169.695424][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.320020][ T29] audit: type=1400 audit(1770886523.161:374): avc: denied { setopt } for pid=7199 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.496761][ T7207] netlink: 'syz.2.320': attribute type 12 has an invalid length. [ 170.985527][ T7214] misc userio: No port type given on /dev/userio [ 170.992929][ T7214] misc userio: The device must be registered before sending interrupts [ 171.631892][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 171.651939][ T24] ath9k_htc: Failed to initialize the device [ 171.772252][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 171.865377][ T7220] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 171.916711][ T7220] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 173.195424][ T29] audit: type=1400 audit(1770886526.031:375): avc: denied { write } for pid=7235 comm="syz.0.329" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.321859][ T29] audit: type=1400 audit(1770886526.031:376): avc: denied { open } for pid=7235 comm="syz.0.329" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.368544][ T5917] IPVS: starting estimator thread 0... [ 173.412463][ T29] audit: type=1400 audit(1770886526.041:377): avc: denied { ioctl } for pid=7235 comm="syz.0.329" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.466977][ T29] audit: type=1400 audit(1770886526.231:378): avc: denied { read } for pid=7242 comm="syz.2.331" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.490006][ T29] audit: type=1400 audit(1770886526.241:379): avc: denied { mounton } for pid=7235 comm="syz.0.329" path="/proc/231/task" dev="proc" ino=13743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 173.522973][ T7249] IPVS: using max 47 ests per chain, 112800 per kthread [ 173.731297][ T5882] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 174.160063][ T7236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.672236][ T7236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.697792][ T7236] bond0 (unregistering): Released all slaves [ 175.040757][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.400537][ T47] usb 3-1: device descriptor read/64, error -71 [ 175.770561][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.910546][ T47] usb 3-1: device descriptor read/64, error -71 [ 176.032627][ T47] usb usb3-port1: attempt power cycle [ 176.290563][ T5882] usb 1-1: no configurations [ 176.295182][ T5882] usb 1-1: can't read configurations, error -22 [ 176.400652][ T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.424411][ T47] usb 3-1: device descriptor read/8, error -71 [ 176.569206][ T7284] FAULT_INJECTION: forcing a failure. [ 176.569206][ T7284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.593559][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.0.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.593589][ T7284] Tainted: [L]=SOFTLOCKUP [ 176.593595][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.593605][ T7284] Call Trace: [ 176.593612][ T7284] [ 176.593618][ T7284] dump_stack_lvl+0x100/0x190 [ 176.593653][ T7284] should_fail_ex.cold+0x5/0xa [ 176.593675][ T7284] _copy_to_user+0x32/0xd0 [ 176.593693][ T7284] simple_read_from_buffer+0xcb/0x170 [ 176.593715][ T7284] proc_fail_nth_read+0x1af/0x230 [ 176.593740][ T7284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.593763][ T7284] ? rw_verify_area+0xce/0x6d0 [ 176.593789][ T7284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.593811][ T7284] vfs_read+0x1e4/0xb30 [ 176.593831][ T7284] ? __pfx_vfs_read+0x10/0x10 [ 176.593847][ T7284] ? __fget_files+0x215/0x3d0 [ 176.593872][ T7284] ? __fget_files+0x21f/0x3d0 [ 176.593898][ T7284] ksys_read+0x12a/0x250 [ 176.593914][ T7284] ? __pfx_ksys_read+0x10/0x10 [ 176.593931][ T7284] ? do_user_addr_fault+0x8d6/0x12f0 [ 176.593952][ T7284] do_syscall_64+0x106/0xf80 [ 176.593968][ T7284] ? clear_bhb_loop+0x40/0x90 [ 176.593989][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.594005][ T7284] RIP: 0033:0x7f0bd8f5c84e [ 176.594019][ T7284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.594035][ T7284] RSP: 002b:00007f0bd9ebbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.594053][ T7284] RAX: ffffffffffffffda RBX: 00007f0bd9ebc6c0 RCX: 00007f0bd8f5c84e [ 176.594064][ T7284] RDX: 000000000000000f RSI: 00007f0bd9ebc0a0 RDI: 0000000000000003 [ 176.594074][ T7284] RBP: 00007f0bd9ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 176.594083][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.594093][ T7284] R13: 00007f0bd9216038 R14: 00007f0bd9215fa0 R15: 00007ffe07278e08 [ 176.594116][ T7284] [ 176.905000][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.913016][ T47] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 176.999938][ T5863] usb 2-1: USB disconnect, device number 10 [ 177.372630][ T47] usb 3-1: device descriptor read/8, error -71 [ 177.450550][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 177.491356][ T47] usb usb3-port1: unable to enumerate USB device [ 177.516652][ T5917] usb 5-1: config 0 has no interfaces? [ 177.598656][ T7290] syzkaller0: entered promiscuous mode [ 177.605764][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 177.620611][ T7290] syzkaller0: entered allmulticast mode [ 177.635493][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.678819][ T5917] usb 5-1: Product: syz [ 177.703112][ T5917] usb 5-1: Manufacturer: syz [ 177.717955][ T5917] usb 5-1: SerialNumber: syz [ 177.753321][ T5917] usb 5-1: config 0 descriptor?? [ 177.818893][ T29] audit: type=1400 audit(1770886530.661:380): avc: denied { read write } for pid=7293 comm="syz.3.346" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 177.870586][ T29] audit: type=1400 audit(1770886530.681:381): avc: denied { open } for pid=7293 comm="syz.3.346" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.047956][ T7306] binder: 7304:7306 ioctl 400c620e 200000000240 returned -22 [ 178.202594][ T5917] usb 5-1: USB disconnect, device number 11 [ 178.323773][ T7314] FAULT_INJECTION: forcing a failure. [ 178.323773][ T7314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.374818][ T7314] CPU: 0 UID: 0 PID: 7314 Comm: syz.1.351 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.374850][ T7314] Tainted: [L]=SOFTLOCKUP [ 178.374856][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 178.374866][ T7314] Call Trace: [ 178.374872][ T7314] [ 178.374878][ T7314] dump_stack_lvl+0x100/0x190 [ 178.374910][ T7314] should_fail_ex.cold+0x5/0xa [ 178.374932][ T7314] _copy_to_user+0x32/0xd0 [ 178.374950][ T7314] binder_ioctl+0x4870/0x7450 [ 178.374983][ T7314] ? tomoyo_path_number_perm+0x188/0x580 [ 178.375010][ T7314] ? __pfx_binder_ioctl+0x10/0x10 [ 178.375037][ T7314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.375057][ T7314] ? do_vfs_ioctl+0x226/0x13e0 [ 178.375086][ T7314] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.375112][ T7314] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.375145][ T7314] ? hook_file_ioctl_common+0x146/0x410 [ 178.375179][ T7314] ? selinux_file_ioctl+0x139/0x290 [ 178.375200][ T7314] ? selinux_file_ioctl+0xb4/0x290 [ 178.375224][ T7314] ? __pfx_binder_ioctl+0x10/0x10 [ 178.375248][ T7314] __x64_sys_ioctl+0x18e/0x210 [ 178.375276][ T7314] do_syscall_64+0x106/0xf80 [ 178.375291][ T7314] ? clear_bhb_loop+0x40/0x90 [ 178.375313][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.375330][ T7314] RIP: 0033:0x7f28f919bf79 [ 178.375344][ T7314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.375361][ T7314] RSP: 002b:00007f28f9f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.375378][ T7314] RAX: ffffffffffffffda RBX: 00007f28f9416090 RCX: 00007f28f919bf79 [ 178.375389][ T7314] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 178.375399][ T7314] RBP: 00007f28f9f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.375409][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.375419][ T7314] R13: 00007f28f9416128 R14: 00007f28f9416090 R15: 00007fff663f1018 [ 178.375446][ T7314] [ 178.375454][ T7314] binder: 7311:7314 ioctl c0306201 2000000001c0 returned -14 [ 178.834647][ T29] audit: type=1400 audit(1770886531.681:382): avc: denied { setopt } for pid=7317 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.905519][ T29] audit: type=1400 audit(1770886531.681:383): avc: denied { ioctl } for pid=7317 comm="syz.3.353" path="socket:[14364]" dev="sockfs" ino=14364 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 180.244191][ T7339] xt_cgroup: path and classid specified [ 180.258870][ T7339] xt_cgroup: path and classid specified [ 180.338162][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'. [ 181.249102][ T47] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.686674][ T47] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 181.739045][ T47] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.750550][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.782901][ T47] usb 3-1: Product: syz [ 181.801625][ T47] usb 3-1: Manufacturer: syz [ 181.807973][ T47] usb 3-1: SerialNumber: syz [ 182.040990][ T7362] tipc: Started in network mode [ 182.045873][ T7362] tipc: Node identity 3650806587b4, cluster identity 4711 [ 182.163448][ T7362] tipc: Enabled bearer , priority 0 [ 182.320589][ T5882] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.349008][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 182.380710][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 182.461107][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 182.479687][ T7365] syzkaller0: entered promiscuous mode [ 182.491339][ T7365] syzkaller0: entered allmulticast mode [ 182.497749][ T7365] tipc: Resetting bearer [ 182.500609][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 182.580918][ T29] audit: type=1400 audit(1770886535.391:384): avc: denied { ioctl } for pid=7373 comm="syz.4.369" path="socket:[13957]" dev="sockfs" ino=13957 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.610694][ T5882] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 182.634835][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.636110][ T47] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 182.690536][ T5882] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.735361][ T7356] tipc: Resetting bearer [ 182.745584][ T5882] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.802800][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.830600][ T5882] usb 1-1: Product: syz [ 182.846499][ T5882] usb 1-1: Manufacturer: syz [ 182.866721][ T5882] usb 1-1: SerialNumber: syz [ 182.884398][ T5882] usb 1-1: config 0 descriptor?? [ 183.202074][ T5882] usb 1-1: USB disconnect, device number 17 [ 183.248655][ T5917] usb 3-1: USB disconnect, device number 16 [ 185.440556][ T29] audit: type=1400 audit(1770886538.261:385): avc: denied { write } for pid=7404 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.205650][ T7414] xt_TCPMSS: Only works on TCP SYN packets [ 186.528252][ T7417] kvm_intel: kvm [7411]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 187.230160][ T7419] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 188.201820][ T7356] tipc: Disabling bearer [ 188.222280][ T47] tipc: Node number set to 2984542309 [ 188.231671][ T7399] netlink: 'syz.1.373': attribute type 12 has an invalid length. [ 188.542071][ T29] audit: type=1400 audit(1770886541.391:386): avc: denied { ioctl } for pid=7432 comm="syz.4.383" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.047490][ T7461] FAULT_INJECTION: forcing a failure. [ 191.047490][ T7461] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 191.060794][ T7461] CPU: 0 UID: 0 PID: 7461 Comm: syz.3.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.060817][ T7461] Tainted: [L]=SOFTLOCKUP [ 191.060822][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.060828][ T7461] Call Trace: [ 191.060832][ T7461] [ 191.060837][ T7461] dump_stack_lvl+0x100/0x190 [ 191.060857][ T7461] should_fail_ex.cold+0x5/0xa [ 191.060869][ T7461] ? prepare_alloc_pages+0x16d/0x5f0 [ 191.060884][ T7461] should_fail_alloc_page+0xeb/0x140 [ 191.060898][ T7461] prepare_alloc_pages+0x1f0/0x5f0 [ 191.060914][ T7461] __alloc_frozen_pages_noprof+0x193/0x2410 [ 191.060933][ T7461] ? find_held_lock+0x2b/0x80 [ 191.060945][ T7461] ? __schedule+0x2f27/0x6000 [ 191.060963][ T7461] ? rcu_is_watching+0x12/0xc0 [ 191.060973][ T7461] ? trace_sched_exit_tp+0xcd/0x100 [ 191.060988][ T7461] ? __schedule+0x1035/0x6000 [ 191.061002][ T7461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.061028][ T7461] ? __pfx___schedule+0x10/0x10 [ 191.061043][ T7461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.061057][ T7461] ? policy_nodemask+0xed/0x4f0 [ 191.061071][ T7461] alloc_pages_mpol+0x1fb/0x550 [ 191.061084][ T7461] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 191.061101][ T7461] alloc_pages_noprof+0x131/0x390 [ 191.061114][ T7461] get_free_pages_noprof+0x10/0xb0 [ 191.061127][ T7461] alloc_loaded_vmcs+0x226/0x2e0 [ 191.061142][ T7461] ? __pfx_alloc_loaded_vmcs+0x10/0x10 [ 191.061160][ T7461] enter_vmx_operation+0x74/0x690 [ 191.061176][ T7461] ? free_nested+0x4ee/0x740 [ 191.061191][ T7461] ? __pfx_enter_vmx_operation+0x10/0x10 [ 191.061206][ T7461] ? __pfx_free_nested+0x10/0x10 [ 191.061225][ T7461] vmx_set_nested_state+0x5b6/0x15f0 [ 191.061244][ T7461] ? __pfx_vmx_set_nested_state+0x10/0x10 [ 191.061265][ T7461] kvm_arch_vcpu_ioctl+0x1fc9/0x53e0 [ 191.061280][ T7461] ? tomoyo_path_number_perm+0x46d/0x580 [ 191.061295][ T7461] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 191.061307][ T7461] ? __pfx_stack_trace_save+0x10/0x10 [ 191.061319][ T7461] ? stack_depot_save_flags+0x27/0x9d0 [ 191.061331][ T7461] ? __lock_acquire+0x4a5/0x2630 [ 191.061345][ T7461] ? tomoyo_path_number_perm+0x46d/0x580 [ 191.061360][ T7461] ? __lock_acquire+0x4a5/0x2630 [ 191.061379][ T7461] ? do_syscall_64+0x106/0xf80 [ 191.061388][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.061404][ T7461] ? lock_acquire+0x17c/0x330 [ 191.061420][ T7461] ? __pfx___might_resched+0x10/0x10 [ 191.061437][ T7461] ? rcu_is_watching+0x12/0xc0 [ 191.061447][ T7461] ? trace_contention_end+0xd6/0x110 [ 191.061463][ T7461] ? __mutex_lock+0x26a/0x1b90 [ 191.061474][ T7461] ? kvm_vcpu_ioctl+0x322/0x16d0 [ 191.061491][ T7461] ? __pfx___mutex_lock+0x10/0x10 [ 191.061501][ T7461] ? kasan_quarantine_put+0x104/0x240 [ 191.061518][ T7461] ? tomoyo_path_number_perm+0x188/0x580 [ 191.061532][ T7461] ? kvm_vcpu_ioctl+0x8a0/0x16d0 [ 191.061546][ T7461] kvm_vcpu_ioctl+0x8a0/0x16d0 [ 191.061563][ T7461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.061578][ T7461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.061591][ T7461] ? do_vfs_ioctl+0x226/0x13e0 [ 191.061609][ T7461] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.061626][ T7461] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.061645][ T7461] ? __fget_files+0x215/0x3d0 [ 191.061657][ T7461] ? hook_file_ioctl_common+0x146/0x410 [ 191.061678][ T7461] ? selinux_file_ioctl+0x139/0x290 [ 191.061692][ T7461] ? selinux_file_ioctl+0xb4/0x290 [ 191.061707][ T7461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.061722][ T7461] __x64_sys_ioctl+0x18e/0x210 [ 191.061740][ T7461] do_syscall_64+0x106/0xf80 [ 191.061749][ T7461] ? clear_bhb_loop+0x40/0x90 [ 191.061762][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.061773][ T7461] RIP: 0033:0x7f655639bf79 [ 191.061783][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.061794][ T7461] RSP: 002b:00007f6557321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.061805][ T7461] RAX: ffffffffffffffda RBX: 00007f6556616090 RCX: 00007f655639bf79 [ 191.061812][ T7461] RDX: 0000200000000640 RSI: 000000004080aebf RDI: 0000000000000008 [ 191.061818][ T7461] RBP: 00007f6557321090 R08: 0000000000000000 R09: 0000000000000000 [ 191.061825][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.061831][ T7461] R13: 00007f6556616128 R14: 00007f6556616090 R15: 00007ffcbe03cd68 [ 191.061845][ T7461] [ 191.984502][ T29] audit: type=1400 audit(1770886544.831:387): avc: denied { accept } for pid=7445 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.309300][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'. [ 193.504565][ T29] audit: type=1400 audit(1770886545.281:388): avc: denied { map } for pid=7470 comm="syz.1.394" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.635545][ T29] audit: type=1400 audit(1770886545.281:389): avc: denied { execute } for pid=7470 comm="syz.1.394" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.733052][ T7482] xt_TCPMSS: Only works on TCP SYN packets [ 193.798875][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.805206][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.051454][ T5882] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.294125][ T7513] FAULT_INJECTION: forcing a failure. [ 197.294125][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 197.306917][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.1.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.306936][ T7513] Tainted: [L]=SOFTLOCKUP [ 197.306940][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.306946][ T7513] Call Trace: [ 197.306950][ T7513] [ 197.306954][ T7513] dump_stack_lvl+0x100/0x190 [ 197.306976][ T7513] should_fail_ex.cold+0x5/0xa [ 197.306987][ T7513] ? arch_stack_walk+0xa6/0xf0 [ 197.307000][ T7513] should_failslab+0xc2/0x120 [ 197.307014][ T7513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 197.307024][ T7513] ? skb_clone+0x190/0x400 [ 197.307040][ T7513] skb_clone+0x190/0x400 [ 197.307053][ T7513] dev_queue_xmit_nit+0x255/0xa60 [ 197.307071][ T7513] dev_hard_start_xmit+0x2fb/0x6c0 [ 197.307092][ T7513] __dev_queue_xmit+0x6dd/0x46f0 [ 197.307114][ T7513] ? __pfx___dev_queue_xmit+0x10/0x10 [ 197.307148][ T7513] ? __asan_memcpy+0x3c/0x60 [ 197.307174][ T7513] ? __asan_memcpy+0x3c/0x60 [ 197.307196][ T7513] ? __skb_clone+0x570/0x760 [ 197.307209][ T7513] netlink_deliver_tap+0xa4d/0xcc0 [ 197.307226][ T7513] netlink_unicast+0x650/0x870 [ 197.307243][ T7513] ? __pfx_netlink_unicast+0x10/0x10 [ 197.307262][ T7513] netlink_sendmsg+0x8b0/0xda0 [ 197.307278][ T7513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.307292][ T7513] ? __might_fault+0x70/0x140 [ 197.307314][ T7513] ____sys_sendmsg+0xa54/0xc30 [ 197.307335][ T7513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.307357][ T7513] ___sys_sendmsg+0x190/0x1e0 [ 197.307375][ T7513] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.307407][ T7513] __sys_sendmsg+0x170/0x220 [ 197.307419][ T7513] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.307440][ T7513] do_syscall_64+0x106/0xf80 [ 197.307450][ T7513] ? clear_bhb_loop+0x40/0x90 [ 197.307463][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.307474][ T7513] RIP: 0033:0x7f28f919bf79 [ 197.307484][ T7513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.307495][ T7513] RSP: 002b:00007f28f9fdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.307506][ T7513] RAX: ffffffffffffffda RBX: 00007f28f9415fa0 RCX: 00007f28f919bf79 [ 197.307513][ T7513] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 197.307519][ T7513] RBP: 00007f28f9fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.307525][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.307531][ T7513] R13: 00007f28f9416038 R14: 00007f28f9415fa0 R15: 00007fff663f1018 [ 197.307545][ T7513] [ 197.310581][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 197.634950][ T7513] netlink: 284 bytes leftover after parsing attributes in process `syz.1.403'. [ 197.697301][ T7515] binder: 7514:7515 ioctl c0306201 200000000080 returned -14 [ 197.992632][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 198.029815][ T7524] openvswitch: netlink: Flow key attr not present in new flow. [ 198.051594][ T29] audit: type=1400 audit(1770886550.891:390): avc: denied { mounton } for pid=7522 comm="syz.2.406" path="/82/file0" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.180583][ T29] audit: type=1400 audit(1770886552.011:391): avc: denied { ioctl } for pid=7536 comm="syz.1.410" path="socket:[14805]" dev="sockfs" ino=14805 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.775392][ T5882] usb 5-1: device descriptor read/all, error -71 [ 199.970318][ T29] audit: type=1400 audit(1770886552.801:392): avc: denied { setopt } for pid=7548 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.045615][ T29] audit: type=1400 audit(1770886552.881:393): avc: denied { write } for pid=7552 comm="syz.2.415" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 200.071808][ T7553] syzkaller0: entered promiscuous mode [ 200.106741][ T7553] syzkaller0: entered allmulticast mode [ 200.179449][ T29] audit: type=1400 audit(1770886552.931:394): avc: denied { mount } for pid=7550 comm="syz.4.416" name="/" dev="autofs" ino=15452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.215679][ T29] audit: type=1400 audit(1770886552.941:395): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 200.410585][ T5934] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.724382][ T7564] netlink: 60 bytes leftover after parsing attributes in process `syz.0.419'. [ 200.741552][ T29] audit: type=1400 audit(1770886553.551:396): avc: denied { mount } for pid=7562 comm="syz.0.419" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 200.802759][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 200.809883][ T7564] unsupported nlmsg_type 40 [ 200.845779][ T5934] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 200.854047][ T5934] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.899957][ T5934] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 200.909284][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.918213][ T5934] usb 4-1: Product: syz [ 200.935855][ T7567] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 200.944654][ T5934] usb 4-1: Manufacturer: syz [ 200.954739][ T5934] usb 4-1: SerialNumber: syz [ 200.970001][ T5934] usb 4-1: config 0 descriptor?? [ 201.121830][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 201.190108][ T5934] usb 4-1: USB disconnect, device number 11 [ 201.407591][ T5882] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 201.456972][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.483139][ T5882] usb 1-1: config 0 descriptor?? [ 202.158839][ T5882] ath6kl: Unsupported hardware version: 0x0 [ 202.165498][ T5882] ath6kl: Failed to init ath6kl core: -22 [ 202.182365][ T5882] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 202.892305][ T47] usb 1-1: USB disconnect, device number 18 [ 203.160519][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 203.439144][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.466601][ T5882] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 203.489280][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.520903][ T5882] usb 3-1: Product: syz [ 203.525456][ T5882] usb 3-1: Manufacturer: syz [ 203.530275][ T5882] usb 3-1: SerialNumber: syz [ 203.636123][ T5882] usb 3-1: config 0 descriptor?? [ 203.654282][ T5882] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 203.701137][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.708230][ T7610] syzkaller1: entered promiscuous mode [ 203.722729][ T7610] syzkaller1: entered allmulticast mode [ 203.731508][ T5882] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 203.760664][ T5882] usb 3-1: media controller created [ 203.797441][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.881582][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.910446][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.944833][ T5882] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 204.110521][ T5882] rc_core: IR keymap rc-twinhan1027 not found [ 204.116726][ T5882] Registered IR keymap rc-empty [ 204.134783][ T5882] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 204.176363][ T5882] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 204.222808][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 204.250756][ T5882] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 204.302163][ T5882] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 204.340172][ T5882] usb 3-1: USB disconnect, device number 17 [ 204.412596][ T5934] m920x_read = error: -19 [ 204.428386][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 204.710663][ T5882] m920x_read = error: -19 [ 204.715145][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 204.827557][ T7622] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 204.860518][ T7622] netlink: 156 bytes leftover after parsing attributes in process `syz.4.434'. [ 204.900153][ T7625] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 204.908059][ T5882] m920x_read = error: -19 [ 204.921099][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 204.950936][ T7625] netlink: 156 bytes leftover after parsing attributes in process `syz.4.434'. [ 204.970583][ T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 205.110813][ T5934] m920x_read = error: -19 [ 205.116440][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 205.140697][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 205.147070][ T47] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 205.165810][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.280586][ T5934] m920x_read = error: -19 [ 205.285404][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 205.574531][ T47] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.583640][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.636089][ T47] usb 3-1: Product: syz [ 205.636125][ T5934] m920x_read = error: -19 [ 205.640264][ T47] usb 3-1: Manufacturer: syz [ 205.649534][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 205.769509][ T47] usb 3-1: SerialNumber: syz [ 205.792444][ T47] usb 3-1: config 0 descriptor?? [ 206.000786][ T5882] m920x_read = error: -19 [ 206.026299][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 206.056336][ T24] usb 3-1: USB disconnect, device number 18 [ 206.963603][ T5882] m920x_read = error: -19 [ 206.967982][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 207.005419][ T29] audit: type=1400 audit(1770886559.851:397): avc: denied { map } for pid=7644 comm="syz.4.441" path="socket:[15881]" dev="sockfs" ino=15881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.056076][ T29] audit: type=1400 audit(1770886559.851:398): avc: denied { read } for pid=7644 comm="syz.4.441" path="socket:[15881]" dev="sockfs" ino=15881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.143024][ T5882] m920x_read = error: -19 [ 207.155673][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 207.227642][ T7648] i2c i2c-0: dtv_property_process_set: SET cmd 0x403392c9 undefined [ 207.415469][ T5882] m920x_read = error: -19 [ 207.420237][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 207.642730][ T5882] m920x_read = error: -19 [ 207.656997][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 207.841291][ T5882] m920x_read = error: -19 [ 208.072314][ T7666] tipc: Enabled bearer , priority 0 [ 208.253728][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 208.316226][ T29] audit: type=1400 audit(1770886561.161:399): avc: denied { prog_load } for pid=7661 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 208.374730][ T7668] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 208.425574][ T5882] m920x_read = error: -19 [ 208.449518][ T29] audit: type=1400 audit(1770886561.161:400): avc: denied { bpf } for pid=7661 comm="syz.2.448" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.460588][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 208.809391][ T5882] m920x_read = error: -19 [ 208.847142][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 208.888197][ T29] audit: type=1400 audit(1770886561.231:401): avc: denied { create } for pid=7659 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.924629][ T7657] tipc: Disabling bearer [ 209.054253][ T5882] m920x_read = error: -19 [ 209.055252][ T29] audit: type=1400 audit(1770886561.231:402): avc: denied { create } for pid=7659 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.058677][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 209.086421][ T29] audit: type=1400 audit(1770886561.231:403): avc: denied { create } for pid=7659 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.230862][ T29] audit: type=1400 audit(1770886561.241:404): avc: denied { ioctl } for pid=7659 comm="syz.1.447" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15242 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.257039][ T29] audit: type=1400 audit(1770886561.331:405): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.313296][ T29] audit: type=1400 audit(1770886561.331:406): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.475492][ T5882] m920x_read = error: -19 [ 209.479867][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 209.532023][ T7687] binder: 7685:7687 ioctl 400c620e 200000000240 returned -22 [ 209.650617][ T5882] m920x_read = error: -19 [ 209.655032][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 210.739089][ T5882] m920x_read = error: -19 [ 210.750541][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 210.930864][ T5934] m920x_read = error: -19 [ 210.935272][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 211.134689][ T5934] m920x_read = error: -19 [ 211.140189][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 211.302791][ T5934] m920x_read = error: -19 [ 211.311366][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 211.528545][ T5934] m920x_read = error: -19 [ 211.534064][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 211.718089][ T5934] m920x_read = error: -19 [ 211.728184][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 211.810551][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.910698][ T5934] m920x_read = error: -19 [ 211.915066][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 212.060755][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 212.068715][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 212.077044][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.093016][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 212.102146][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 212.102159][ T29] audit: type=1400 audit(1770886564.941:443): avc: denied { read write } for pid=7712 comm="syz.4.461" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.102938][ T7716] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000005' [ 212.108251][ T29] audit: type=1400 audit(1770886564.951:444): avc: denied { open } for pid=7712 comm="syz.4.461" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.565694][ T5934] m920x_read = error: -19 [ 212.570085][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 212.605165][ T7713] overlayfs: failed to resolve './bus': -2 [ 212.615288][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.623690][ T29] audit: type=1400 audit(1770886564.951:445): avc: denied { mounton } for pid=7712 comm="syz.4.461" path="/93/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 212.644166][ T24] usb 2-1: Product: syz [ 212.646524][ T29] audit: type=1400 audit(1770886565.051:446): avc: denied { mount } for pid=7710 comm="syz.0.460" name="/" dev="autofs" ino=16051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 212.673099][ T29] audit: type=1400 audit(1770886565.061:447): avc: denied { read write } for pid=7710 comm="syz.0.460" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.676395][ T24] usb 2-1: Manufacturer: syz [ 212.696625][ T29] audit: type=1400 audit(1770886565.061:448): avc: denied { open } for pid=7710 comm="syz.0.460" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.696671][ T29] audit: type=1400 audit(1770886565.501:449): avc: denied { shutdown } for pid=7712 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.696708][ T29] audit: type=1400 audit(1770886565.511:450): avc: denied { getopt } for pid=7712 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.696744][ T29] audit: type=1400 audit(1770886565.511:451): avc: denied { connect } for pid=7712 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.696780][ T29] audit: type=1400 audit(1770886565.511:452): avc: denied { name_connect } for pid=7712 comm="syz.4.461" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 212.711721][ T7713] tmpfs: Unknown parameter 'grþßÿÿÿÿÿÿnode_hardlim…eÅ%±Vit' [ 212.747279][ T24] usb 2-1: SerialNumber: syz [ 212.787947][ T5934] m920x_read = error: -19 [ 212.821879][ T7719] FAULT_INJECTION: forcing a failure. [ 212.821879][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 212.843164][ T7716] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 212.850388][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 212.850651][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.850674][ T7719] Tainted: [L]=SOFTLOCKUP [ 212.850679][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.850689][ T7719] Call Trace: [ 212.850694][ T7719] [ 212.850700][ T7719] dump_stack_lvl+0x100/0x190 [ 212.850728][ T7719] should_fail_ex.cold+0x5/0xa [ 212.850748][ T7719] should_failslab+0xc2/0x120 [ 212.850767][ T7719] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 212.850781][ T7719] ? skb_clone+0x190/0x400 [ 212.850803][ T7719] skb_clone+0x190/0x400 [ 212.850821][ T7719] netlink_deliver_tap+0xaed/0xcc0 [ 212.850845][ T7719] netlink_unicast+0x650/0x870 [ 212.850868][ T7719] ? __pfx_netlink_unicast+0x10/0x10 [ 212.850895][ T7719] netlink_sendmsg+0x8b0/0xda0 [ 212.850918][ T7719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.850937][ T7719] ? __might_fault+0x70/0x140 [ 212.850967][ T7719] ____sys_sendmsg+0xa54/0xc30 [ 212.850990][ T7719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.851022][ T7719] ___sys_sendmsg+0x190/0x1e0 [ 212.851046][ T7719] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.851095][ T7719] __sys_sendmsg+0x170/0x220 [ 212.851113][ T7719] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.851145][ T7719] do_syscall_64+0x106/0xf80 [ 212.851159][ T7719] ? clear_bhb_loop+0x40/0x90 [ 212.851177][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.851192][ T7719] RIP: 0033:0x7f655639bf79 [ 212.851204][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.851219][ T7719] RSP: 002b:00007f6557342028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.851234][ T7719] RAX: ffffffffffffffda RBX: 00007f6556615fa0 RCX: 00007f655639bf79 [ 212.851252][ T7719] RDX: 0000000000004040 RSI: 0000200000000100 RDI: 0000000000000003 [ 212.851261][ T7719] RBP: 00007f6557342090 R08: 0000000000000000 R09: 0000000000000000 [ 212.851270][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.851278][ T7719] R13: 00007f6556616038 R14: 00007f6556615fa0 R15: 00007ffcbe03cd68 [ 212.851301][ T7719] [ 212.851343][ T7719] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 212.858230][ T7716] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 212.905782][ T7719] netlink: 'syz.3.462': attribute type 2 has an invalid length. [ 213.090588][ T5934] m920x_read = error: -19 [ 213.093119][ T24] usb 2-1: config 0 descriptor?? [ 213.096219][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 213.169125][ T7719] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 213.182126][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 213.282823][ T5934] m920x_read = error: -19 [ 213.287208][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 213.322377][ T5934] usb 2-1: USB disconnect, device number 11 [ 213.420704][ T5933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.450576][ T5863] m920x_read = error: -19 [ 213.454984][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 213.474845][ T7728] binder: 7726:7728 ioctl 400c620e 200000000240 returned -22 [ 213.580549][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 213.592127][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 213.602166][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.612130][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.622509][ T5934] m920x_read = error: -19 [ 213.626954][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 213.637319][ T5933] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 213.646769][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.655048][ T5933] usb 3-1: Product: syz [ 213.659264][ T5933] usb 3-1: Manufacturer: syz [ 213.664264][ T5933] usb 3-1: SerialNumber: syz [ 213.672230][ T5933] usb 3-1: config 0 descriptor?? [ 213.801479][ T5934] m920x_read = error: -19 [ 213.809712][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 213.974430][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.990623][ T5934] m920x_read = error: -19 [ 213.993997][ T7745] binder: 7744:7745 ioctl c0306201 200000000080 returned -14 [ 213.995700][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 214.015716][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.055846][ T7748] binder: 7744:7748 ioctl c0306201 2000000001c0 returned -14 [ 214.087155][ T24] usb 3-1: USB disconnect, device number 19 [ 214.190621][ T5934] m920x_read = error: -19 [ 214.194990][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 214.472347][ T5863] m920x_read = error: -19 [ 214.495606][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 214.722433][ T5863] m920x_read = error: -19 [ 214.726943][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 214.809059][ T7745] binder: 7744:7745 ioctl c0306201 2000000004c0 returned -14 [ 214.887876][ T7765] netlink: 140 bytes leftover after parsing attributes in process `syz.3.476'. [ 214.897134][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 215.041947][ T5863] m920x_read = error: -19 [ 215.123167][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 215.350589][ T5863] m920x_read = error: -19 [ 215.355010][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 215.530548][ T5934] m920x_read = error: -19 [ 215.534924][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 215.623583][ T5863] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.635346][ T7786] binder: 7780:7786 ioctl 400c620e 200000000240 returned -22 [ 215.689784][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.877131][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.889748][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.901180][ T5917] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 215.923958][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.934761][ T24] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 215.950101][ T24] usb 1-1: Manufacturer: syz [ 216.068851][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.098121][ T5917] usb 5-1: not running at top speed; connect to a high speed hub [ 216.117963][ T24] usb 1-1: config 0 descriptor?? [ 216.189156][ T5917] usb 5-1: config 106 has an invalid interface number: 8 but max is 0 [ 216.343659][ T5917] usb 5-1: config 106 has no interface number 0 [ 216.412929][ T5917] usb 5-1: config 106 interface 8 has no altsetting 0 [ 216.503358][ T5917] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 216.575305][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.637603][ T5917] usb 5-1: Product: syz [ 216.668595][ T5917] usb 5-1: Manufacturer: syz [ 216.711586][ T5917] usb 5-1: SerialNumber: syz [ 217.359084][ T5917] kalmia 5-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 217.415872][ T5917] kalmia 5-1:106.8: probe with driver kalmia failed with error -22 [ 217.468940][ T5917] usb 5-1: USB disconnect, device number 14 [ 217.586536][ T5934] m920x_read = error: -19 [ 217.591437][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 217.668268][ T24] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input10 [ 217.684203][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 217.691428][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 217.691444][ T29] audit: type=1400 audit(1770886570.531:488): avc: denied { read } for pid=5163 comm="acpid" name="mouse1" dev="devtmpfs" ino=2937 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.692506][ T24] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input11 [ 217.721437][ T29] audit: type=1400 audit(1770886570.531:489): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2937 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.743002][ T24] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 217.762128][ T5934] m920x_read = error: -19 [ 217.772872][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 217.781879][ T5863] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 217.803227][ T7800] binder: 7798:7800 ioctl c0306201 200000000080 returned -14 [ 217.813361][ T5863] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 217.829638][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.838082][ T29] audit: type=1400 audit(1770886570.621:490): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2937 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.864670][ T7801] binder: 7798:7801 ioctl c0306201 2000000001c0 returned -14 [ 217.882478][ T5863] usb 2-1: Product: syz [ 217.894792][ T5863] usb 2-1: Manufacturer: syz [ 217.915379][ T5863] usb 2-1: SerialNumber: syz [ 217.932491][ T5863] usb 2-1: config 0 descriptor?? [ 217.949636][ T5863] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 217.958751][ T5882] m920x_read = error: -19 [ 217.963208][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 217.972104][ T5863] usb 2-1: setting power ON [ 217.976690][ T5863] dvb-usb: bulk message failed: -22 (2/0) [ 217.985504][ T5917] usb 1-1: USB disconnect, device number 19 [ 217.986126][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.005648][ T5863] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 218.015145][ T5863] usb 2-1: media controller created [ 218.031347][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.053261][ T5863] usb 2-1: selecting invalid altsetting 6 [ 218.070580][ T5863] usb 2-1: digital interface selection failed (-22) [ 218.089321][ T5863] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 218.108765][ T5863] usb 2-1: setting power OFF [ 218.116713][ T5863] dvb-usb: bulk message failed: -22 (2/0) [ 218.122792][ T5863] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 218.133115][ T5882] m920x_read = error: -19 [ 218.137470][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 218.145669][ T5863] (NULL device *): no alternate interface [ 218.173690][ T5863] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 218.197927][ T5863] usb 2-1: USB disconnect, device number 12 [ 218.301195][ T5934] m920x_read = error: -19 [ 218.305664][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 218.521288][ T5863] m920x_read = error: -19 [ 218.535260][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 218.633237][ T7800] binder: 7798:7800 ioctl c0306201 2000000004c0 returned -14 [ 218.719486][ T5934] m920x_read = error: -19 [ 218.729297][ T29] audit: type=1400 audit(1770886571.541:491): avc: denied { create } for pid=7813 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.750241][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 218.780536][ T29] audit: type=1400 audit(1770886571.541:492): avc: denied { connect } for pid=7813 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.920581][ T5863] m920x_read = error: -19 [ 218.927059][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 219.026081][ T7824] netlink: 68 bytes leftover after parsing attributes in process `syz.3.496'. [ 219.035502][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'. [ 219.140922][ T5917] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 219.353295][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.363099][ T5917] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 219.384179][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.403127][ T29] audit: type=1400 audit(1770886571.781:493): avc: denied { write } for pid=7818 comm="syz.1.495" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.450868][ T5917] usb 3-1: config 0 descriptor?? [ 219.500566][ T5863] m920x_read = error: -19 [ 219.518920][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 219.632410][ T29] audit: type=1400 audit(1770886572.171:494): avc: denied { mount } for pid=7813 comm="syz.0.494" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 219.670861][ T5934] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 219.700646][ T5933] m920x_read = error: -19 [ 219.704991][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 219.730595][ T29] audit: type=1400 audit(1770886572.181:495): avc: denied { getopt } for pid=7813 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.032562][ T5933] m920x_read = error: -19 [ 220.042831][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.053814][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 220.068807][ T5934] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 220.090859][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.103950][ T5934] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 220.121492][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.135087][ T29] audit: type=1400 audit(1770886572.181:496): avc: denied { setattr } for pid=7813 comm="syz.0.494" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.157185][ T5934] usb 2-1: Product: syz [ 220.162632][ T5934] usb 2-1: Manufacturer: syz [ 220.167277][ T5934] usb 2-1: SerialNumber: syz [ 220.176087][ T29] audit: type=1400 audit(1770886572.181:497): avc: denied { read } for pid=7813 comm="syz.0.494" dev="nsfs" ino=4026533189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 220.178164][ T5917] sony 0003:054C:0268.0003: ignoring exceeding usage max [ 220.245460][ T5917] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v90.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 220.260699][ T5933] m920x_read = error: -19 [ 220.265050][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 220.290175][ T7830] syzkaller1: entered promiscuous mode [ 220.310633][ T5917] sony 0003:054C:0268.0003: failed to claim input [ 220.323099][ T7830] syzkaller1: entered allmulticast mode [ 220.604778][ T5933] m920x_read = error: -19 [ 220.610866][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 220.720772][ T5933] usb 3-1: USB disconnect, device number 20 [ 220.780567][ T5863] m920x_read = error: -19 [ 220.784987][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 220.903257][ T5934] usb 2-1: USB disconnect, device number 13 [ 220.954450][ T5933] m920x_read = error: -19 [ 220.958814][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 221.476058][ T7848] misc userio: No port type given on /dev/userio [ 221.541074][ T7848] misc userio: The device must be registered before sending interrupts [ 221.846423][ T5934] m920x_read = error: -19 [ 221.855601][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 222.030636][ T5934] m920x_read = error: -19 [ 222.042598][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 222.220622][ T5934] m920x_read = error: -19 [ 222.235193][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 222.411886][ T5933] m920x_read = error: -19 [ 222.417731][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 222.430744][ T5934] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.464167][ T7864] netlink: 68 bytes leftover after parsing attributes in process `syz.4.508'. [ 222.474040][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.4.508'. [ 222.764809][ T5933] m920x_read = error: -19 [ 222.769161][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 222.886105][ T5863] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.937869][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 222.954023][ T5934] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 222.963966][ T5933] m920x_read = error: -19 [ 222.968379][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 223.067955][ T5863] usb 2-1: device descriptor read/64, error -71 [ 223.103616][ T5934] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 223.338952][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.347902][ T5882] m920x_read = error: -19 [ 223.355416][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 223.363767][ T5934] usb 3-1: Product: syz [ 223.369986][ T5934] usb 3-1: Manufacturer: syz [ 223.378129][ T5934] usb 3-1: SerialNumber: syz [ 223.393567][ T5934] usb 3-1: config 0 descriptor?? [ 223.400548][ T5863] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.415190][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 223.425195][ T5934] usb 3-1: setting power ON [ 223.429764][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 223.439480][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.452510][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 223.524641][ T7875] cgroup: noprefix used incorrectly [ 223.536335][ T5882] m920x_read = error: -19 [ 223.548946][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 223.559778][ T5934] usb 3-1: media controller created [ 223.585627][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.594097][ T5863] usb 2-1: device descriptor read/64, error -71 [ 223.657479][ T5934] usb 3-1: selecting invalid altsetting 6 [ 223.677798][ T5934] usb 3-1: digital interface selection failed (-22) [ 223.740834][ T5863] usb usb2-port1: attempt power cycle [ 223.747200][ T5882] m920x_read = error: -19 [ 223.752610][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 223.776745][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 223.806771][ T5934] usb 3-1: setting power OFF [ 223.854437][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 223.864332][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 223.890515][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 223.896730][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 223.933688][ T5882] m920x_read = error: -19 [ 223.938160][ T5934] (NULL device *): no alternate interface [ 223.971509][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 223.987976][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 224.003908][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 224.082034][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 224.110604][ T5863] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 224.126231][ T5934] usb 3-1: USB disconnect, device number 21 [ 224.213891][ T5882] m920x_read = error: -19 [ 224.218245][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 224.329251][ T7887] FAULT_INJECTION: forcing a failure. [ 224.329251][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.342457][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.3.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.342484][ T7887] Tainted: [L]=SOFTLOCKUP [ 224.342490][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 224.342500][ T7887] Call Trace: [ 224.342506][ T7887] [ 224.342513][ T7887] dump_stack_lvl+0x100/0x190 [ 224.342544][ T7887] should_fail_ex.cold+0x5/0xa [ 224.342565][ T7887] _copy_to_user+0x32/0xd0 [ 224.342585][ T7887] simple_read_from_buffer+0xcb/0x170 [ 224.342605][ T7887] proc_fail_nth_read+0x1af/0x230 [ 224.342629][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.342652][ T7887] ? rw_verify_area+0xce/0x6d0 [ 224.342677][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.342698][ T7887] vfs_read+0x1e4/0xb30 [ 224.342718][ T7887] ? __pfx_vfs_read+0x10/0x10 [ 224.342735][ T7887] ? __fget_files+0x215/0x3d0 [ 224.342759][ T7887] ? __fget_files+0x21f/0x3d0 [ 224.342784][ T7887] ksys_read+0x12a/0x250 [ 224.342800][ T7887] ? __pfx_ksys_read+0x10/0x10 [ 224.342816][ T7887] ? rcu_is_watching+0x12/0xc0 [ 224.342838][ T7887] do_syscall_64+0x106/0xf80 [ 224.342852][ T7887] ? clear_bhb_loop+0x40/0x90 [ 224.342873][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.342890][ T7887] RIP: 0033:0x7f655635c84e [ 224.342903][ T7887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.342919][ T7887] RSP: 002b:00007f65572fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.342936][ T7887] RAX: ffffffffffffffda RBX: 00007f65573006c0 RCX: 00007f655635c84e [ 224.342947][ T7887] RDX: 000000000000000f RSI: 00007f65573000a0 RDI: 0000000000000007 [ 224.342957][ T7887] RBP: 00007f6557300090 R08: 0000000000000000 R09: 0000000000000000 [ 224.342966][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.342976][ T7887] R13: 00007f6556616218 R14: 00007f6556616180 R15: 00007ffcbe03cd68 [ 224.343000][ T7887] [ 224.674281][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 224.674293][ T29] audit: type=1400 audit(1770886577.411:514): avc: denied { ioctl } for pid=7886 comm="syz.0.513" path="socket:[17459]" dev="sockfs" ino=17459 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.736149][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 224.771022][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 224.778622][ T5863] usb 2-1: device descriptor read/8, error -71 [ 224.847108][ T7875] ceph: No mds server is up or the cluster is laggy [ 224.911372][ T5934] m920x_read = error: -19 [ 224.915707][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 225.070603][ T5863] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 225.110416][ T5934] m920x_read = error: -19 [ 225.115599][ T5863] usb 2-1: device descriptor read/8, error -71 [ 225.130536][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 225.183304][ T29] audit: type=1400 audit(1770886578.031:515): avc: denied { create } for pid=7886 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.240816][ T5863] usb usb2-port1: unable to enumerate USB device [ 225.295674][ T118] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.300650][ T5863] m920x_read = error: -19 [ 225.307581][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 225.321901][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 225.328119][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 225.425208][ T29] audit: type=1400 audit(1770886578.051:516): avc: denied { connect } for pid=7886 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.445854][ T29] audit: type=1400 audit(1770886578.051:517): avc: denied { getopt } for pid=7886 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.470763][ T5863] m920x_read = error: -19 [ 225.475109][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 225.541847][ T7907] xt_TCPMSS: Only works on TCP SYN packets [ 225.683677][ T5863] m920x_read = error: -19 [ 225.690639][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 225.738332][ T118] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 225.972473][ T5934] m920x_read = error: -19 [ 225.976824][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 226.120620][ T118] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 226.151077][ T5934] m920x_read = error: -19 [ 226.155423][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 226.170755][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.180620][ T118] usb 4-1: Product: syz [ 226.202115][ T118] usb 4-1: Manufacturer: syz [ 226.230975][ T118] usb 4-1: SerialNumber: syz [ 226.340724][ T5934] m920x_read = error: -19 [ 226.366953][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 226.530601][ T5934] m920x_read = error: -19 [ 226.908634][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 227.072394][ T5934] m920x_read = error: -19 [ 227.077621][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 227.110619][ T118] usb 4-1: USB disconnect, device number 12 [ 227.280553][ T5934] m920x_read = error: -19 [ 227.290547][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 227.460590][ T5863] m920x_read = error: -19 [ 227.465012][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.637909][ T5863] m920x_read = error: -19 [ 227.642763][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.690632][ T5934] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.794675][ T7932] kvm_intel: kvm [7928]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 227.821709][ T5863] m920x_read = error: -19 [ 227.863157][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 227.890748][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 227.965447][ T5934] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 228.095307][ T5934] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 228.120605][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.128729][ T5934] usb 2-1: Product: syz [ 228.133371][ T5934] usb 2-1: Manufacturer: syz [ 228.138107][ T5934] usb 2-1: SerialNumber: syz [ 228.150432][ T7935] veth0: entered promiscuous mode [ 228.156428][ T29] audit: type=1400 audit(1770886580.991:518): avc: denied { setopt } for pid=7934 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.156456][ T7935] batadv_slave_1: entered promiscuous mode [ 228.191316][ T5863] m920x_read = error: -19 [ 228.207850][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 228.216820][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 228.232091][ T5934] usb 2-1: config 0 descriptor?? [ 228.247964][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 228.259470][ T5934] usb 2-1: setting power ON [ 228.268517][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 228.320664][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.389388][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 228.399604][ T7936] veth0 (unregistering): left promiscuous mode [ 228.406449][ T5934] usb 2-1: media controller created [ 228.414443][ T5863] m920x_read = error: -19 [ 228.422006][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 228.587772][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.612969][ T29] audit: type=1400 audit(1770886581.451:519): avc: denied { write } for pid=7944 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 228.641229][ T5934] usb 2-1: selecting invalid altsetting 6 [ 228.868586][ T5863] m920x_read = error: -19 [ 228.879109][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 228.946472][ T5934] usb 2-1: digital interface selection failed (-22) [ 229.014234][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 229.027148][ T5934] usb 2-1: setting power OFF [ 229.033037][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 229.033430][ T7934] batadv_slave_1: left promiscuous mode [ 229.038994][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 229.054610][ T5934] (NULL device *): no alternate interface [ 229.094472][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 229.133814][ T5934] usb 2-1: USB disconnect, device number 18 [ 229.140880][ T5933] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 229.177913][ T5863] m920x_read = error: -19 [ 229.183472][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 229.546003][ T5934] m920x_read = error: -19 [ 229.550401][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 229.558928][ T5933] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 229.577473][ T5933] usb 3-1: config 0 has no interface number 0 [ 229.592429][ T5933] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 229.617176][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.636152][ T5933] usb 3-1: Product: syz [ 229.636313][ T29] audit: type=1400 audit(1770886582.481:520): avc: denied { mount } for pid=7953 comm="syz.1.532" name="/" dev="ramfs" ino=17600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.650982][ T5933] usb 3-1: Manufacturer: syz [ 229.710662][ T5933] usb 3-1: SerialNumber: syz [ 229.745117][ T5933] usb 3-1: config 0 descriptor?? [ 229.781517][ T5934] m920x_read = error: -19 [ 229.785942][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 229.970607][ T5863] m920x_read = error: -19 [ 229.975126][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 230.215681][ T5863] m920x_read = error: -19 [ 230.225673][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 230.394348][ T7945] Illegal XDP return value 4222473568 on prog (id 92) dev N/A, expect packet loss! [ 230.440608][ T5863] m920x_read = error: -19 [ 230.445021][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 230.467523][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 230.495030][ T29] audit: type=1400 audit(1770886583.341:521): avc: denied { create } for pid=7944 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.710333][ T5863] m920x_read = error: -19 [ 230.720729][ T29] audit: type=1400 audit(1770886583.551:522): avc: denied { write } for pid=7944 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.745244][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 230.912460][ T5934] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 230.921079][ T5933] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.940650][ T5882] m920x_read = error: -19 [ 230.945031][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 230.960164][ T5933] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 230.984407][ T5933] asix 3-1:0.251: probe with driver asix failed with error -71 [ 231.081905][ T5933] usb 3-1: USB disconnect, device number 22 [ 231.130775][ T1635] m920x_read = error: -19 [ 231.135688][ T1635] dvb-usb: error -19 while querying for an remote control event. [ 231.144265][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 231.163385][ T5934] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 231.180498][ T5934] usb 4-1: config 0 has no interface number 0 [ 231.186622][ T5934] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 231.196679][ T5863] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 231.241001][ T5934] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 231.250073][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.270920][ T5934] usb 4-1: Product: syz [ 231.275102][ T5934] usb 4-1: Manufacturer: syz [ 231.279677][ T5934] usb 4-1: SerialNumber: syz [ 231.313068][ T5933] m920x_read = error: -19 [ 231.317739][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 231.344882][ T5934] usb 4-1: config 0 descriptor?? [ 231.360564][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.362110][ T5863] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 15 [ 231.368627][ T7966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.386688][ T5863] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.400800][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.416055][ T5863] usb 2-1: Product: syz [ 231.422413][ T5863] usb 2-1: Manufacturer: syz [ 231.427043][ T5863] usb 2-1: SerialNumber: syz [ 231.491725][ T5882] m920x_read = error: -19 [ 231.496087][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 231.550628][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 231.561836][ T5917] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 231.580561][ T5917] usb 5-1: config 179 has no interface number 0 [ 231.586871][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 231.610078][ T7966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.628584][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 231.645562][ T29] audit: type=1400 audit(1770886584.491:523): avc: denied { create } for pid=7981 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.660596][ T5882] m920x_read = error: -19 [ 231.668194][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.669093][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 231.691033][ T5917] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 231.710210][ T5863] usb 2-1: USB disconnect, device number 19 [ 231.731123][ T29] audit: type=1400 audit(1770886584.491:524): avc: denied { ioctl } for pid=7981 comm="syz.2.539" path="socket:[17170]" dev="sockfs" ino=17170 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.765977][ T5917] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 231.790805][ T5917] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 231.810668][ T29] audit: type=1400 audit(1770886584.491:525): avc: denied { write } for pid=7981 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.830221][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.855346][ T7977] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 231.884328][ T29] audit: type=1400 audit(1770886584.491:526): avc: denied { read } for pid=7981 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.885559][ T7966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7966 comm=syz.3.535 [ 231.970611][ T5882] m920x_read = error: -19 [ 231.975479][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 232.004828][ T5934] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 232.022277][ T5934] asix 4-1:0.191: probe with driver asix failed with error -71 [ 232.044202][ T5934] usb 4-1: USB disconnect, device number 13 [ 232.082725][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.101131][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.851553][ T5863] m920x_read = error: -19 [ 232.855910][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 232.982940][ T29] audit: type=1400 audit(1770886585.831:527): avc: denied { create } for pid=7988 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.050528][ T29] audit: type=1400 audit(1770886585.861:528): avc: denied { connect } for pid=7988 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.949199][ T5934] m920x_read = error: -19 [ 233.950573][ T29] audit: type=1400 audit(1770886585.931:529): avc: denied { create } for pid=7976 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.991286][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 234.385811][ T29] audit: type=1400 audit(1770886587.211:530): avc: denied { mount } for pid=7976 comm="syz.4.537" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.540654][ T5934] m920x_read = error: -19 [ 234.547252][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 234.720735][ T5934] m920x_read = error: -19 [ 234.729407][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 234.891848][ T5934] m920x_read = error: -19 [ 234.960964][ T8004] kvm_intel: kvm [7999]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 235.091795][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 235.114536][ T8003] netlink: 284 bytes leftover after parsing attributes in process `syz.2.545'. [ 235.261489][ T5934] m920x_read = error: -19 [ 235.282125][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 235.472437][ T5934] m920x_read = error: -19 [ 236.084502][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 236.190134][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 236.190146][ T29] audit: type=1400 audit(1770886589.031:532): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 236.225338][ T976] usb 5-1: USB disconnect, device number 15 [ 236.231294][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.231333][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.260590][ T5863] m920x_read = error: -19 [ 236.264976][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 236.309407][ T29] audit: type=1400 audit(1770886589.151:533): avc: denied { name_bind } for pid=8010 comm="syz.2.548" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 236.400882][ T8015] No source specified [ 236.421058][ T29] audit: type=1400 audit(1770886589.251:534): avc: denied { mounton } for pid=8014 comm="syz.4.547" path="/110/bus" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.577371][ T29] audit: type=1400 audit(1770886589.311:535): avc: denied { execmod } for pid=8014 comm="syz.4.547" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 236.621139][ T5863] m920x_read = error: -19 [ 236.648423][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 237.029406][ T29] audit: type=1400 audit(1770886589.311:536): avc: denied { execute } for pid=8014 comm="syz.4.547" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 237.492176][ T5882] m920x_read = error: -19 [ 237.496835][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 237.569838][ T29] audit: type=1400 audit(1770886590.411:537): avc: denied { write } for pid=8027 comm="syz.1.553" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 237.670674][ T5882] m920x_read = error: -19 [ 237.829634][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 238.000563][ T5863] m920x_read = error: -19 [ 238.007153][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 238.245298][ T8043] syzkaller1: entered promiscuous mode [ 238.250987][ T8043] syzkaller1: entered allmulticast mode [ 238.359843][ T5863] m920x_read = error: -19 [ 238.368013][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 238.540038][ T8045] binder: 8044:8045 ioctl c0306201 200000000080 returned -14 [ 238.547602][ T5934] m920x_read = error: -19 [ 238.554343][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 238.616729][ T29] audit: type=1400 audit(1770886591.451:538): avc: denied { execute } for pid=8049 comm="syz.3.558" name="file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.618596][ T8051] binder: 8044:8051 ioctl c0306201 2000000001c0 returned -14 [ 238.724571][ T29] audit: type=1400 audit(1770886591.451:539): avc: denied { execute_no_trans } for pid=8049 comm="syz.3.558" path="/125/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.752519][ T5863] m920x_read = error: -19 [ 238.802277][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 239.035610][ T5863] m920x_read = error: -19 [ 239.040042][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 239.164126][ T8062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.561'. [ 239.173228][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 239.347273][ T5863] m920x_read = error: -19 [ 239.353910][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 239.361947][ T8045] binder: 8044:8045 ioctl c0306201 2000000004c0 returned -14 [ 239.520623][ T5882] m920x_read = error: -19 [ 239.525006][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 239.759940][ T8070] kvm_intel: kvm [8061]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 239.851648][ T29] audit: type=1400 audit(1770886592.571:540): avc: denied { append } for pid=8067 comm="syz.1.563" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.875114][ T5882] m920x_read = error: -19 [ 239.894703][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 240.089877][ T29] audit: type=1400 audit(1770886592.911:541): avc: denied { mount } for pid=8067 comm="syz.1.563" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 240.444318][ T5882] m920x_read = error: -19 [ 240.448687][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 240.610874][ T5863] m920x_read = error: -19 [ 240.615213][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 241.480577][ T5863] m920x_read = error: -19 [ 241.484940][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 241.789856][ T5882] m920x_read = error: -19 [ 241.799080][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 242.141101][ T29] audit: type=1400 audit(1770886594.991:542): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 242.220643][ T5882] m920x_read = error: -19 [ 242.227043][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 242.400596][ T5882] m920x_read = error: -19 [ 242.405034][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 242.453319][ T8085] xt_socket: unknown flags 0x4 [ 242.848871][ T5882] m920x_read = error: -19 [ 242.853324][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 243.098725][ T5882] m920x_read = error: -19 [ 243.103420][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 243.347033][ T5882] m920x_read = error: -19 [ 243.378355][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 243.560959][ T5882] m920x_read = error: -19 [ 243.569499][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 243.842966][ T5882] m920x_read = error: -19 [ 243.857718][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 244.071607][ T8103] netlink: 68 bytes leftover after parsing attributes in process `syz.2.574'. [ 244.080738][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.574'. [ 244.136463][ T5863] m920x_read = error: -19 [ 244.265146][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 244.402650][ T8105] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 244.430622][ T8105] netlink: 224 bytes leftover after parsing attributes in process `syz.4.570'. [ 244.461546][ T5863] m920x_read = error: -19 [ 244.468885][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 244.508161][ T29] audit: type=1400 audit(1770886597.351:543): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 244.535692][ T29] audit: type=1400 audit(1770886597.381:544): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.558779][ T29] audit: type=1400 audit(1770886597.401:545): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.590800][ T29] audit: type=1400 audit(1770886597.401:546): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.612415][ T29] audit: type=1400 audit(1770886597.401:547): avc: denied { read } for pid=5473 comm="dhcpcd" name="n102" dev="tmpfs" ino=4615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.635929][ T29] audit: type=1400 audit(1770886597.401:548): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.659709][ T29] audit: type=1400 audit(1770886597.401:549): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.690819][ T5934] m920x_read = error: -19 [ 244.700742][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 244.728783][ T29] audit: type=1400 audit(1770886597.561:550): avc: denied { mounton } for pid=8112 comm="syz.3.577" path="/proc/449/task" dev="proc" ino=18502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 244.920597][ T5934] m920x_read = error: -19 [ 244.925017][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 245.206476][ T5813] block nbd4: Receive control failed (result -32) [ 245.217444][ T8105] block nbd4: shutting down sockets [ 245.280652][ T5934] m920x_read = error: -19 [ 245.285043][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 245.430486][ T8127] kvm_intel: kvm [8110]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 245.764210][ T8129] binder: 8128:8129 ioctl c0306201 200000000080 returned -14 [ 245.828491][ T8132] binder: 8128:8132 ioctl c0306201 2000000001c0 returned -14 [ 245.890563][ T5934] m920x_read = error: -19 [ 245.895007][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 246.161874][ T5934] m920x_read = error: -19 [ 246.174696][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 246.378917][ T5934] m920x_read = error: -19 [ 246.388859][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 246.454264][ T29] audit: type=1400 audit(1770886599.301:551): avc: denied { read write } for pid=8140 comm="syz.1.585" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 246.560916][ T5934] m920x_read = error: -19 [ 246.565487][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 246.640911][ T8129] binder: 8128:8129 ioctl c0306201 2000000004c0 returned -14 [ 246.783622][ T8153] Bluetooth: MGMT ver 1.23 [ 246.790420][ T5934] m920x_read = error: -19 [ 246.794806][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 247.210537][ T24] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.400644][ T5934] m920x_read = error: -19 [ 247.405018][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 247.431630][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 247.570846][ T5934] m920x_read = error: -19 [ 247.580525][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 247.600541][ T24] usb 5-1: device descriptor read/64, error -32 [ 247.693894][ T8161] binder: 8158:8161 ioctl 400c620e 200000000240 returned -22 [ 247.848410][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 248.160773][ T5934] m920x_read = error: -19 [ 248.165155][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 248.187752][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 248.187906][ T29] audit: type=1400 audit(1770886601.031:557): avc: denied { create } for pid=8156 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.239646][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.256876][ T24] usb 5-1: too many configurations: 62, using maximum allowed: 8 [ 248.269029][ T29] audit: type=1400 audit(1770886601.031:558): avc: denied { bind } for pid=8156 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.350814][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 248.358455][ T24] usb 5-1: can't read configurations, error -71 [ 248.380887][ T24] usb usb5-port1: attempt power cycle [ 248.390202][ T29] audit: type=1400 audit(1770886601.031:559): avc: denied { listen } for pid=8156 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.391122][ T5934] m920x_read = error: -19 [ 249.393661][ T29] audit: type=1400 audit(1770886601.061:560): avc: denied { connect } for pid=8156 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.420557][ T29] audit: type=1400 audit(1770886601.061:561): avc: denied { accept } for pid=8156 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.475137][ T29] audit: type=1400 audit(1770886601.061:562): avc: denied { read } for pid=8156 comm="syz.4.591" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.527565][ T29] audit: type=1400 audit(1770886601.061:563): avc: denied { open } for pid=8156 comm="syz.4.591" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.552953][ T29] audit: type=1400 audit(1770886601.071:564): avc: denied { ioctl } for pid=8156 comm="syz.4.591" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.554498][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 249.918498][ T5934] m920x_read = error: -19 [ 249.923871][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 250.102336][ T5934] m920x_read = error: -19 [ 250.114211][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 250.422150][ T5934] m920x_read = error: -19 [ 250.426513][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 250.558004][ T8180] Bluetooth: MGMT ver 1.23 [ 250.620697][ T5934] m920x_read = error: -19 [ 250.625065][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 250.820637][ T5863] m920x_read = error: -19 [ 250.820659][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 250.854599][ T8189] xt_TCPMSS: Only works on TCP SYN packets [ 250.961531][ T8190] gfs2: not a GFS2 filesystem [ 250.980601][ T5934] m920x_read = error: -19 [ 250.980622][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 251.409409][ T5934] m920x_read = error: -19 [ 251.409425][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 251.785021][ T5934] m920x_read = error: -19 [ 251.785051][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 251.882752][ T8203] SQUASHFS error: Failed to read block 0x0: -5 [ 251.882797][ T8203] unable to read squashfs_super_block [ 251.906767][ T29] audit: type=1400 audit(1770886604.751:565): avc: denied { create } for pid=8202 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.914642][ T29] audit: type=1400 audit(1770886604.761:566): avc: denied { listen } for pid=8200 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.941679][ T5934] m920x_read = error: -19 [ 251.941695][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 252.111137][ T5934] m920x_read = error: -19 [ 252.119033][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 252.249824][ T8213] syzkaller1: entered promiscuous mode [ 252.255493][ T8213] syzkaller1: entered allmulticast mode [ 252.442341][ T5934] m920x_read = error: -19 [ 252.446711][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 252.980072][ T5934] m920x_read = error: -19 [ 253.014594][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 253.190618][ T5934] m920x_read = error: -19 [ 253.194987][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 253.800875][ T5934] m920x_read = error: -19 [ 253.805515][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 253.887861][ T8237] xt_TCPMSS: Only works on TCP SYN packets [ 253.987996][ T5933] m920x_read = error: -19 [ 253.993086][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.170763][ T5933] m920x_read = error: -19 [ 254.175147][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.255877][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 254.255888][ T29] audit: type=1400 audit(1770886607.101:573): avc: denied { create } for pid=8248 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.291374][ T29] audit: type=1400 audit(1770886607.131:574): avc: denied { create } for pid=8248 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.293549][ T8249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.619'. [ 254.350778][ T5933] m920x_read = error: -19 [ 254.355910][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.537931][ T5933] m920x_read = error: -19 [ 254.542533][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.554927][ T29] audit: type=1400 audit(1770886607.131:575): avc: denied { write } for pid=8248 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 254.710587][ T5933] m920x_read = error: -19 [ 254.714982][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.741647][ T29] audit: type=1400 audit(1770886607.131:576): avc: denied { read append } for pid=8248 comm="syz.1.619" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.774004][ T29] audit: type=1400 audit(1770886607.131:577): avc: denied { open } for pid=8248 comm="syz.1.619" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.856692][ T29] audit: type=1400 audit(1770886607.521:578): avc: denied { ioctl } for pid=8248 comm="syz.1.619" path="socket:[18312]" dev="sockfs" ino=18312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.883572][ T5933] m920x_read = error: -19 [ 254.887907][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 254.910271][ T29] audit: type=1400 audit(1770886607.521:579): avc: denied { setopt } for pid=8248 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.060880][ T5933] m920x_read = error: -19 [ 255.065302][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 255.164640][ T8268] netlink: 'syz.0.622': attribute type 2 has an invalid length. [ 255.177896][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.622'. [ 255.224063][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.230413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.605584][ T5934] m920x_read = error: -19 [ 255.609967][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 255.750518][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 255.790954][ T5933] m920x_read = error: -19 [ 255.795705][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 255.921606][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 255.935373][ T24] usb 1-1: config 0 has no interface number 0 [ 255.941828][ T24] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 255.952671][ T24] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 255.972400][ T5934] m920x_read = error: -19 [ 255.978990][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 255.986508][ T24] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 256.017282][ T24] usb 1-1: config 0 interface 2 has no altsetting 0 [ 256.113322][ T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 256.130088][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.143850][ T24] usb 1-1: Product: syz [ 256.148032][ T24] usb 1-1: Manufacturer: syz [ 256.160570][ T24] usb 1-1: SerialNumber: syz [ 256.160605][ T5933] m920x_read = error: -19 [ 256.203320][ T24] usb 1-1: config 0 descriptor?? [ 256.204108][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 256.220966][ T8275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.242813][ T8275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.376108][ T8297] xt_TCPMSS: Only works on TCP SYN packets [ 256.430884][ T5933] m920x_read = error: -19 [ 256.436023][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 256.871523][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.886484][ T29] audit: type=1400 audit(1770886609.731:580): avc: denied { write } for pid=8295 comm="syz.4.631" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 257.002682][ T24] usb 1-1: USB disconnect, device number 20 [ 257.057314][ T6854] udevd[6854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.085646][ T5934] m920x_read = error: -19 [ 257.090036][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 257.419189][ T5934] m920x_read = error: -19 [ 257.429888][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 257.834681][ T5934] m920x_read = error: -19 [ 257.839055][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 258.031278][ T5934] m920x_read = error: -19 [ 258.146978][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 258.320905][ T5933] m920x_read = error: -19 [ 258.325322][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 258.500672][ T5934] m920x_read = error: -19 [ 258.505062][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 258.759234][ T5933] m920x_read = error: -19 [ 258.764960][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 258.805973][ T8335] bridge1: entered allmulticast mode [ 258.822000][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.640'. [ 258.952120][ T5933] m920x_read = error: -19 [ 258.956580][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 259.107196][ T8341] syzkaller1: entered promiscuous mode [ 259.112863][ T8341] syzkaller1: entered allmulticast mode [ 259.129178][ T5933] m920x_read = error: -19 [ 259.133722][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 259.392737][ T5933] m920x_read = error: -19 [ 259.420503][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 259.580567][ T5933] m920x_read = error: -19 [ 259.585147][ T5933] dvb-usb: error -19 while querying for an remote control event. [ 259.657124][ T29] audit: type=1400 audit(1770886612.491:581): avc: denied { ioctl } for pid=8350 comm="syz.4.646" path="socket:[19155]" dev="sockfs" ino=19155 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.102663][ T29] audit: type=1400 audit(1770886612.491:582): avc: denied { write } for pid=8350 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.192978][ T8351] xt_TCPMSS: Only works on TCP SYN packets [ 260.240431][ T29] audit: type=1400 audit(1770886612.641:583): avc: denied { map } for pid=8345 comm="syz.1.645" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 260.282749][ T5882] m920x_read = error: -19 [ 260.307175][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 260.562445][ T5882] m920x_read = error: -19 [ 260.588333][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 260.715720][ T29] audit: type=1400 audit(1770886613.481:584): avc: denied { create } for pid=8358 comm="syz.1.648" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.076290][ T29] audit: type=1400 audit(1770886613.481:585): avc: denied { write } for pid=8358 comm="syz.1.648" name="file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.148195][ T5934] m920x_read = error: -19 [ 261.165432][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 261.252766][ T29] audit: type=1400 audit(1770886613.491:586): avc: denied { open } for pid=8358 comm="syz.1.648" path="/118/file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.203767][ T5882] m920x_read = error: -19 [ 262.208132][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 262.413341][ T29] audit: type=1400 audit(1770886613.911:587): avc: denied { create } for pid=8361 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.462666][ T5934] m920x_read = error: -19 [ 262.652863][ T29] audit: type=1400 audit(1770886613.911:588): avc: denied { write } for pid=8361 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.692155][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 262.840179][ T29] audit: type=1400 audit(1770886615.101:589): avc: denied { unlink } for pid=5803 comm="syz-executor" name="file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.870590][ T5934] m920x_read = error: -19 [ 262.874947][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 263.263565][ T5934] m920x_read = error: -19 [ 263.267929][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 263.283366][ T8386] syzkaller1: entered promiscuous mode [ 263.288831][ T8386] syzkaller1: entered allmulticast mode [ 263.493369][ T5882] m920x_read = error: -19 [ 263.497709][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 263.680608][ T5882] m920x_read = error: -19 [ 263.688830][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 263.860705][ T5882] m920x_read = error: -19 [ 263.865070][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 264.144894][ T5934] m920x_read = error: -19 [ 264.160690][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 264.330694][ T8437] netlink: 68 bytes leftover after parsing attributes in process `syz.4.654'. [ 264.339677][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'. [ 264.418840][ T8436] syzkaller0: entered promiscuous mode [ 264.468941][ T8436] syzkaller0: entered allmulticast mode [ 264.625713][ T5934] m920x_read = error: -19 [ 264.630081][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 264.884678][ T5934] m920x_read = error: -19 [ 264.889055][ T5934] dvb-usb: error -19 while querying for an remote control event. [ 265.063668][ T5882] ------------[ cut here ]------------ [ 265.069465][ T5882] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 265.076663][ T5882] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x2fd/0x500, CPU#0: kworker/0:5/5882 [ 265.088367][ T5882] Modules linked in: [ 265.092531][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.103548][ T5882] Tainted: [L]=SOFTLOCKUP [ 265.107871][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.117959][ T5882] Workqueue: events drm_fb_helper_damage_work [ 265.124062][ T5882] RIP: 0010:drm_crtc_wait_one_vblank+0x303/0x500 [ 265.130852][ T5882] Code: 48 8b 6b 50 48 85 ed 0f 84 96 01 00 00 e8 35 b0 73 fc 48 89 df e8 8d ba 8f 00 48 89 c6 48 8d 3d 23 9f 4f 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 17 f8 ff ff [ 265.151095][ T5882] RSP: 0018:ffffc90004bafa78 EFLAGS: 00010293 [ 265.157279][ T5882] RAX: ffffffff8c4c6160 RBX: ffff888026d68000 RCX: 0000000000000000 [ 265.165479][ T5882] RDX: ffffffff8c4a4e00 RSI: ffffffff8c4c6160 RDI: ffffffff90e30d40 [ 265.173520][ T5882] RBP: ffffffff8c4a4e00 R08: 0000000000000005 R09: 0000000000000000 [ 265.181535][ T5882] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026d66000 [ 265.189506][ T5882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000039291be1 [ 265.197522][ T5882] FS: 0000000000000000(0000) GS:ffff8881243a8000(0000) knlGS:0000000000000000 [ 265.206503][ T5882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.213115][ T5882] CR2: 000000110c3cece3 CR3: 000000005ccb3000 CR4: 00000000003526f0 [ 265.221119][ T5882] Call Trace: [ 265.224390][ T5882] [ 265.227317][ T5882] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 265.233423][ T5882] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.239498][ T5882] ? lockdep_hardirqs_on+0x78/0x100 [ 265.244746][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.250597][ T5882] ? drm_vblank_get+0x14f/0x280 [ 265.255514][ T5882] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 265.261862][ T5882] drm_fb_helper_damage_work+0x164/0x640 [ 265.267503][ T5882] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.273675][ T5882] ? process_one_work+0x80b/0x1840 [ 265.278801][ T5882] ? rcu_is_watching+0x12/0xc0 [ 265.283563][ T5882] process_one_work+0x9c2/0x1840 [ 265.288506][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 265.293896][ T5882] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.300050][ T5882] worker_thread+0x5da/0xe40 [ 265.304836][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 265.309936][ T5882] ? kthread+0x13a/0x450 [ 265.314211][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 265.319340][ T5882] kthread+0x370/0x450 [ 265.323412][ T5882] ? __pfx_kthread+0x10/0x10 [ 265.327986][ T5882] ret_from_fork+0x754/0xd80 [ 265.332581][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 265.337677][ T5882] ? __switch_to+0x7b4/0x10c0 [ 265.342382][ T5882] ? __pfx_kthread+0x10/0x10 [ 265.346958][ T5882] ret_from_fork_asm+0x1a/0x30 [ 265.351743][ T5882] [ 265.354755][ T5882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.362083][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.373005][ T5882] Tainted: [L]=SOFTLOCKUP [ 265.377307][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.387343][ T5882] Workqueue: events drm_fb_helper_damage_work [ 265.393415][ T5882] Call Trace: [ 265.396673][ T5882] [ 265.399584][ T5882] dump_stack_lvl+0x100/0x190 [ 265.404256][ T5882] vpanic+0x20d/0x630 [ 265.408213][ T5882] panic+0xd1/0xd1 [ 265.411924][ T5882] ? __pfx_panic+0x10/0x10 [ 265.416320][ T5882] ? check_panic_on_warn+0x1f/0x90 [ 265.421413][ T5882] check_panic_on_warn.cold+0x19/0x34 [ 265.426758][ T5882] ? drm_crtc_wait_one_vblank+0x2fd/0x500 [ 265.432460][ T5882] __warn.cold+0x191/0x2f8 [ 265.436853][ T5882] __report_bug+0x296/0x3d0 [ 265.441335][ T5882] ? drm_crtc_wait_one_vblank+0x2fd/0x500 [ 265.447040][ T5882] ? __pfx___report_bug+0x10/0x10 [ 265.452043][ T5882] ? lockdep_hardirqs_on+0x78/0x100 [ 265.457241][ T5882] report_bug_entry+0xe1/0x290 [ 265.462000][ T5882] ? drm_crtc_wait_one_vblank+0x303/0x500 [ 265.467721][ T5882] handle_bug+0x1c9/0x2a0 [ 265.472029][ T5882] exc_invalid_op+0x17/0x50 [ 265.476512][ T5882] asm_exc_invalid_op+0x1a/0x20 [ 265.481351][ T5882] RIP: 0010:drm_crtc_wait_one_vblank+0x303/0x500 [ 265.487656][ T5882] Code: 48 8b 6b 50 48 85 ed 0f 84 96 01 00 00 e8 35 b0 73 fc 48 89 df e8 8d ba 8f 00 48 89 c6 48 8d 3d 23 9f 4f 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 17 f8 ff ff [ 265.507240][ T5882] RSP: 0018:ffffc90004bafa78 EFLAGS: 00010293 [ 265.513281][ T5882] RAX: ffffffff8c4c6160 RBX: ffff888026d68000 RCX: 0000000000000000 [ 265.521226][ T5882] RDX: ffffffff8c4a4e00 RSI: ffffffff8c4c6160 RDI: ffffffff90e30d40 [ 265.529170][ T5882] RBP: ffffffff8c4a4e00 R08: 0000000000000005 R09: 0000000000000000 [ 265.537113][ T5882] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026d66000 [ 265.545057][ T5882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000039291be1 [ 265.553010][ T5882] ? drm_crtc_wait_one_vblank+0x2f3/0x500 [ 265.558721][ T5882] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 265.564775][ T5882] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.570819][ T5882] ? lockdep_hardirqs_on+0x78/0x100 [ 265.575996][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.581782][ T5882] ? drm_vblank_get+0x14f/0x280 [ 265.586610][ T5882] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 265.592913][ T5882] drm_fb_helper_damage_work+0x164/0x640 [ 265.598524][ T5882] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.604653][ T5882] ? process_one_work+0x80b/0x1840 [ 265.609744][ T5882] ? rcu_is_watching+0x12/0xc0 [ 265.614481][ T5882] process_one_work+0x9c2/0x1840 [ 265.619401][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 265.624755][ T5882] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.630893][ T5882] worker_thread+0x5da/0xe40 [ 265.635478][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 265.640575][ T5882] ? kthread+0x13a/0x450 [ 265.644799][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 265.649902][ T5882] kthread+0x370/0x450 [ 265.654049][ T5882] ? __pfx_kthread+0x10/0x10 [ 265.658617][ T5882] ret_from_fork+0x754/0xd80 [ 265.663189][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 265.668280][ T5882] ? __switch_to+0x7b4/0x10c0 [ 265.672938][ T5882] ? __pfx_kthread+0x10/0x10 [ 265.677516][ T5882] ret_from_fork_asm+0x1a/0x30 [ 265.682264][ T5882] [ 265.685531][ T5882] Kernel Offset: disabled [ 265.689832][ T5882] Rebooting in 86400 seconds..