last executing test programs: 30.127030558s ago: executing program 1 (id=591): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x47b6, 0x800000, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) sendto(r7, 0x0, 0x0, 0x20004040, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.859361331s ago: executing program 1 (id=594): r0 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x4, 0x2, 0x10001d4}) r1 = eventfd2(0x6, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000340)=r1, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="f6a4", 0x2, 0x8084, &(0x7f0000000140)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @local}, 0x14) alarm(0x8000000000000001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES32=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x81) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 26.476686191s ago: executing program 3 (id=597): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0xc890) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000006c0)=ANY=[@ANYRES16=r2], 0x68) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x280, 0x80, 0xa0, 0x20, 0xfffffff8, 0x1c0, 0x0, 0x0, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xffffffff}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x7, 0x4, 0x0, 0x0, 0xa}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e0800"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) getrlimit(0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 26.064452109s ago: executing program 1 (id=598): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0xffffffff, {{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}}, 0x88) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffd2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40005) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x103) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) r7 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010401030000000000000000050000030a090200000000c6a0338b17b123177c6be9b7406c8f0c08000000003165f001ed627cb46ecda5e1c1e3c9b6cf5d6247353e1f5deaabd7f3"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r7, 0xe7d4c009da6c1985}], 0x1, 0x4) 25.719430024s ago: executing program 2 (id=599): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x9, 0x5, 0xc79a, 0xfffffffb, 0x5, 0x6, 0x0, 0x9}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 25.660222066s ago: executing program 3 (id=600): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x3}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2], 0x6c}}, 0x0) epoll_create(0x76f) prlimit64(0x0, 0x1, &(0x7f0000000200)={0xe00000, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004801}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, 0x0, 0x0) sendto$inet(r5, &(0x7f00000005c0)="d7d05508ab5d5893", 0xfe94, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x24000004) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 25.362091849s ago: executing program 2 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x308, 0x1e8, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x1]}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x2, 0x2, 0x7, 0x2, 0x6], 0x0, 0x6}, {0x2, [0x3, 0x7, 0x7, 0x7, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x5}, {0x3, 0x5}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x8001, 0x3], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="fdc90160dea5", 0x101, 0x7, [0x33, 0x40, 0xb, 0x32, 0x3e, 0x2b, 0x1d, 0x1f, 0x32, 0x3e, 0x3a, 0x12, 0x3c, 0x4, 0x23, 0x29], 0x0, 0xfffffffa, 0xcb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, r9, 0xa, 0x2020}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, r4, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x3f}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_setup(0x51d2, &(0x7f0000000080)={0x0, 0xe654, 0x20, 0x0, 0x80000}, 0x0, 0x0) (rerun: 64) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (async, rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) (async) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000100)=0x9) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x101a}, &(0x7f0000000080)=0x8) (async, rerun: 32) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000000240)) (rerun: 32) 23.964191229s ago: executing program 2 (id=606): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/149, 0x95}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000380)=""/147, 0x93}], 0x5) (async) close(0x3) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) (async) ioctl(r0, 0xffffffff, 0x0) 23.109120763s ago: executing program 0 (id=607): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x1c62, 0x2, 0x7}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000300)=@filename='./file0\x00', 0x0, 0x0) 22.224764208s ago: executing program 1 (id=609): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xe000, 0x4000, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000070dbd4b3d6980bc9698d"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000cbbd1c2a73485a260300"/37], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000500000000000000020000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff8500000073000000b7080000000000007b8af8ff00000000b70800000f0000007b56e5655efd6bdda787f68af0ff00000000bfa10000000000000701000006000000000000000000000007040000f0ffffffb70200000800000018050000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0xc0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa002, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x7d54}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={r9, 0xb176, 0x0, 0x6d}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) socket$inet(0x2, 0x0, 0xfffffffd) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={r10}, &(0x7f0000000480)=0x8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4810) 21.911142491s ago: executing program 0 (id=610): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/36, 0x24) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x44}}, 0x0) (async, rerun: 64) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) (async, rerun: 64) pipe2$watch_queue(0x0, 0x80) setrlimit(0x7, &(0x7f0000000400)) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, 0x0) (async) setrlimit(0x6, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4095, 0xfff) 21.802540712s ago: executing program 3 (id=612): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r0, 0x6fb3) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xffffa395, 0x1ff, 0x2, 0x2, 0xc}) (rerun: 64) 21.754903868s ago: executing program 4 (id=613): prlimit64(0x0, 0x6, 0x0, &(0x7f0000000000)) getrlimit(0x2, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0xf2d0, &(0x7f00000000c0)='veth1_macvtap\x00', 0x6, 0xc1, 0x4}) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400440, 0x0) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x1006b}, @void, @ipv4=@icmp={{0x32, 0x4, 0x3, 0xa, 0x109, 0x64, 0x0, 0x0, 0x1, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, {[@generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x1, [{@loopback, 0x3}, {@multicast1, 0x10}, {@local, 0xa}]}, @timestamp={0x44, 0x28, 0xf3, 0x0, 0x6, [0x9, 0x4, 0x2, 0x8, 0x6, 0x4, 0xffff8000, 0x700, 0x8]}, @rr={0x7, 0x27, 0x4a, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x1, [{@private=0xa010102, 0x101}, {@initdev={0xac, 0x1e, 0xcb, 0x0}, 0x3}]}, @timestamp={0x44, 0x2c, 0xed, 0x0, 0x4, [0x2, 0x6, 0x18e4, 0x1e16000, 0x5, 0x1, 0x1ff, 0xff, 0x2, 0x1aa]}, @noop, @end, @end, @ra={0x94, 0x4, 0x1}]}}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x9, 0x0, {0xd, 0x4, 0x0, 0x1b, 0x6d, 0x66, 0x9, 0x3b, 0x2, 0x5, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}, {[@timestamp={0x44, 0x8, 0x59, 0x0, 0x7, [0x4]}, @noop, @rr={0x7, 0x13, 0x4b, [@broadcast, @rand_addr=0x64010101, @empty, @local]}, @noop]}}, "a46e1dfad3"}}}, 0x10d) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x0) fchdir(r1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000380)={{@local, 0x6}, @any, 0x2, 0x7fffffffffffffff, 0x8, 0x8000, 0x7, 0xfffffd0a, 0x400}) connect$llc(r3, &(0x7f00000003c0)={0x1a, 0x305, 0x9, 0xa, 0x6, 0x3}, 0x10) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000400)) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000440)) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000480)=0x4104, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x31, 0x0, "5152c8d66acafad314f32391384f1017894798e31c075153be89c500a0ef13335880d0fec708018b7ebc3da4a608242691aeb9ac9b5f6721d044873dd77c1084e233148b81119aa4853285512a5a75f5"}, 0xd8) sendto$llc(r3, &(0x7f00000005c0), 0x0, 0x24000800, &(0x7f0000000600)={0x1a, 0x323, 0x8, 0x7, 0xf9, 0x4, @multicast}, 0x10) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) stat(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000004200)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000004240)={0xa, 0x9, {0xffffffffffffffff}, {0x0}, 0x7, 0x2}) stat(&(0x7f0000004280)='./file0\x00', &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="fe3ef3686cfbcc21546969d765240d3c37678ccf5a3bcf06b4fbd5c5d85abdd2e9acd20731aec7a8992aec60534d408bbe02d603f7912c34abaa2e08e241c783ad06b3739b9109a009d59fca9d636c5fc99ee7a3344e2cac7af1d3651f68cc5c2321c3290d7ad1adb6a4e8958d5fc6fe3aff0033120cec8f021e419b3e091f4e48363396f3c3b7defd90a26ae45408933b8697f49f51c824ba571fd114b5a69a250c6fa2b8dca7802987511d1de2c8afdd3089b69a9246507d9f9a3a392a1f37c3b65ba33d5bfd5f2efbdcb8de788920f3726f7f9e46b4b8b4f8bfb7a6784627190298fc8d7587", 0xe7}, {&(0x7f00000017c0)="d3311a15832a502d832ec6e283457271062736fe8c1884dc73a2dfe15a38cf4636dd6834ec61156c9964d116d41fd8a4450d42e0f53c99c364094afae3535d748f94b8e77e54a36c293e5c1713561172d0d0b4690951b6b80b30481bbc61dc4229083b6b08ae62942f7cb6f517d31320ea724999a033e1aed8d47fe48735698ec1560d26ac4b0577f8c20ed5576b2c5b027bb60fc72e817667d0b66191077cf5d26693edc5ddf79f616b791a460a1f16dc906f05f4d1cabde70ae21550d866900e27acf031de329a6730fa741d8bd9573ba73ccde9aa96272214c469d26a84ca51fd6e28433478af8ea0f6817e37bf6355", 0xf1}], 0x3, 0x0, 0x0, 0x24000}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000001980)="854c9420a4e551d49879976d9af6f915fe4bb50a5620fde8d08a0f29e0bd230fb5c355184631015ed65b7130f7ee16ecb0f107871dbfbd86eb66c7095721a3a7a8e3fb680b6ba54e09e91c03ba30eca8cad398ea300de64914", 0x59}, {&(0x7f0000001a00)="477f8250ceb85df73bad5306ed56fc9b7783176b3c7df7509656d5d79b6d7d33104feb3c303e5399b0caf996f7d77f2a71d57ef09618bb56c9f69b8530577a5f61e3953cb1aafeb4a85b7173e3ab13fcfc83ba50e0bfe179f3db64be6fb2611c590fc1caca39", 0x66}, {&(0x7f0000001a80)="784c54fff6c474abcc22d330c1edc80603cc23aa965b3521b1f9d488c6668f078e768c6bac458263ae607bc861cd39cc170e74edb0233736e5def00ec9f966b721f4647ee5d127b886e2b6e0d769b2036c942e05212f32ffe04676b49886ee357558c19f2b2d4c85dd1c520b927b3391d051f5d146db0f76aca6cae56fa8adff64e6d6898463557fde5e88997b15157d", 0x90}, {&(0x7f0000001b40)="7c8d17e2e63d755e1ad1facfe9bd256b2587d4e447a2b852970595c52b270f697387bacdb14ca3ef10828a3a308b936e9aff76c82ef3a348b1c0d20c812e1f9c022016db41852c8f6366e970bfd247513e3c87c37a1e45727fdbb33920b009d3071227caf21456ce70ca312a12930f456d4887e001e0442a588b9003543cc351ccf8b9d34a02374e2f323da3d8cd314d9a11671197b2b875ca5b2cfa7ccc6b6e2bcc17bf9daab88092a4f13c3fc1e8d931d5bb054c86be44811df1a556e80027ffe616cb9cd611bb0e1c7ea67fec172b552836f49bd14aca410695f51778aad0702dcc24cd0415dbb6600a8aaec9376a24692af7caad", 0xf6}, {&(0x7f0000001c40)="367124073fd75d05f86141b70c37e4d52d9cb9fbce632e6f13fab1d9df5273aacfdc51efe7a5f6f534b1b4a16bb26d15ec1edcf72d86e5c4e4b7b2bbc83853e1170aa8f9ed127fd46208cde9d29b4c2cac29de77267d28861e24d00c2d2df662fb51197da61c5c8242a3cf42fd6f132adcd3efe674b7f72a03ae9e4d097f934b681ac881e86baab3eb7b972fec1d7569ac2541cd4ed3bb284b222aa9c8f3ce67ea89079a735362a41470c9f52cee6a20c80fd455ee404f193fc9144258fa993f731de517a380578b92f114150d50887e774b811ea23dff1dc45ac197beaa417dfbe585a94c10c1c2b05e57a595a5d391a795", 0xf2}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="e9a4b786d60304b304e187a532b19e27cf2e578db7ecd844d23cd723b529375a2b8764f10ce2db763a5c6ff4e19fb0e83096cc5391c6b66065597f924661976a2dc759accb5fb8dd325a63b8da208686e1ed9eb0307ac1648e2e1de274903e10e30c", 0x62}, {&(0x7f0000003dc0)="f7f6234bd15abc1f10b851f75fada5afc188ab2f45a46043eb6dd3d490e4039ea5b9f7d614bd2bf06656744ab209b868fe9f93cc2e4d4e6b91891b2b589b15cf939b576e07c46e7424d1efc2281a10fb1f3c5797a1a4f0b3e08d932b25ba8d0d57e2b928d91e00fc4916029ea00485f694f30488092f0404e60c556ccedc3baeb71d925444bed78cb349be01aa1a3e9c312cd9fe40c8", 0x96}, {&(0x7f0000003e80)="9067c823c776232f57ad9866121bfeaaa78efb232ae8222f497d71be20cf6d39123e1ed60a98e2833418bd1b41fdeab82573ac7a6ea1ec32ea92418a053f0c271efe186516dbd34882b88f19592494f3c584aa485bae", 0x56}], 0xa, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x60, 0x800}}], 0x2, 0x4) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004440), 0x503002, 0x0) pidfd_getfd(r11, r1, 0x0) r12 = syz_open_dev$vcsa(&(0x7f0000004480), 0x8, 0x30a00) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r12, 0xc1004111, &(0x7f00000044c0)={0x8001, [0x6, 0x0, 0xce], [{0x7, 0x4, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x8, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1}, {0xe1d, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}, {0x6, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x7, 0x1, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x71aa, 0x6, 0x0, 0x0, 0x1}, {0x19bd44b8, 0x6, 0x0, 0x1, 0x0, 0x1}], 0x4}) writev(r3, &(0x7f0000004800)=[{&(0x7f00000045c0)="757ff0848e4388afdc467c8a45c93d316a7718055701473152dd71462e5245e2b1db5f3341522cb3a42a67fba5bff29c65bcb2e69582942661bc8e6b60baf1c667fafe4152db9de9873864b7910afa4aed6863ab285bd18ae897d626f690f959d03ac79bff5244eb6d1e514901bdea7b7dc2512564481b22a4dae6", 0x7b}, {&(0x7f0000004640)="645f1fbfd6cc45113e84218a4089cc876691c9f607e92128a16d8fe7e20cae1a388f4de499c1fe72855b064938939a8ec4d40b5b4e3f4cc40a1aab26a5809e65f939cb5528f83930996b0fc861bca11b2c", 0x51}, {&(0x7f00000046c0)="43de4554037fc43eaedc862e6c54cd2ea421596bbe0d7d12067bea3fe17277d4807d38369a29ab1c6e8ec9f3591baac66a223062566e33e2d0fa6a21c48edd44b1a192d1e66cb0c92e138b383b61df3d387cb68d197158eade5269f3ca1162303d2b99a2ca0cd7da84e92f8b367406c4c42165671f698d5495dd4d32e71608e2f9a3c887702f80b0b28cff6b2f68ec1bcd20050b396245435bdb28bcb57fcf7a91dd43ff", 0xa4}, {&(0x7f0000004780)="e4c7ca51001730859be69c3ea44945c3c5d3a0b89cea2a1991ba4e32fb27d8e017c7080415f89ab2dda014580d98e9cff228328d96cfb1383607d326bf251b45009b9397b893129ca02cc57672a82e31a7db31ad27155c3debdbf9b11e86d74a75c2c3a31b89e25fff6dc8679ecf15a2", 0x70}], 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r12, &(0x7f0000004940)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 21.664631753s ago: executing program 3 (id=614): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x40) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80080) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x50000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@directio}, {@posixacl}], [{@seclabel}]}}) listen(r1, 0x80) accept4$netrom(r1, 0x0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x40, 0xd, 0x4, "c97381a4"}, 0x0, 0x0}) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x42) r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r5, &(0x7f00000002c0)={{0x0, 0x0, 0x80, 0x60}, 0x0, 0x0, 0x1, 0x8}, 0x80, 0x0, 0x0, 0x0) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), &(0x7f0000000380)={&(0x7f00000003c0)={[0x7]}, 0x8}) 21.642461196s ago: executing program 4 (id=615): ioperm(0x1, 0x8, 0x8000000000005) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0xc363d734473e78b2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0xc363d734473e78b2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000323c0)=""/102383, 0x18fef) (async) read$msr(r1, &(0x7f00000323c0)=""/102383, 0x18fef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x48) getpid() (async) r2 = getpid() syz_pidfd_open(r2, 0x0) gettid() syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x41) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x3ff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000002280)={0x9, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000019300)=@multiplanar_mmap={0x101, 0x2, 0x4, 0x100000, 0x2, {0x0, 0xea60}, {0x4, 0x8, 0xa6, 0x5, 0xba, 0xf7, "45187bc1"}, 0x0, 0x1, {&(0x7f0000000240)=[{0x6, 0x3, {0x1}, 0x7ff}, {0x2, 0x9, {0xf1}, 0x3}]}, 0xfffffffc, 0x0, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffcf9}], 0x3c) sendmsg$nl_route_sched(r8, 0x0, 0x20048000) (async) sendmsg$nl_route_sched(r8, 0x0, 0x20048000) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058560f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019380)=ANY=[@ANYRES32=r3, @ANYRESHEX=r7, @ANYRESOCT=r0], 0x104}, 0x1, 0x0, 0x0, 0xbd6ed3455dc1f339}, 0x0) 21.370797761s ago: executing program 4 (id=616): iopl(0x3) r0 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x2, 0x1, 0x7bbc, 0x1, 0x8000000000000001, r0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3c, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 21.292782514s ago: executing program 0 (id=617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x6, 0x5, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf251100000008000300", @ANYBLOB="0a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x48855}, 0x80) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fedbdf254c0000000c00990004000000300000000c00580000000000000000000c0058000b000000000000000c0058000f00000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x41) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) 21.280367411s ago: executing program 1 (id=618): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18009000005b00000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030113030303030303030303030303130303030302c757341619f86efd7cb8c900599f865725f69643d4ff09f8ab086507839ea3382edb65d4fa5da06e3c02f6ac128accea733238cd727d69ed4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000007100)={0x78, 0x0, r4, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) 21.157517046s ago: executing program 2 (id=619): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0xffffffff, {{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}}, 0x88) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffd2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40005) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x103) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) r7 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010401030000000000000000050000030a090200000000c6a0338b17b123177c6be9b7406c8f0c08000000003165f001ed627cb46ecda5e1c1e3c9b6cf5d6247353e1f5deaabd7f3"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r7, 0xe7d4c009da6c1985}], 0x1, 0x4) 20.533974913s ago: executing program 0 (id=620): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x68331000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000b0a03000000000000000000010000000900020073797a3000000000080003400000001b080007400000000a0900010073795c407e7a310000000008000740000000231400000011000100000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fallocate(r2, 0x29, 0x2000000, 0x8) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x9, 0x40, 0x2, 0x7, 0x3, 0x3, 0x7, 0x0, 0x4, 0xc, 0x81, 0xb8, 0x0, 0x7, 0x20, 0x6}}) ioctl$KDDELIO(r6, 0x4b35, 0x7fffffffffffffff) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c0000f4030000000400000008000000000000007e9fa2d5750bf640eb1063850b4d9cc8000162619706751f5af0ef2cd39333847c11a659c30b62d364f55f620b50821a611b686ce653c2d836130e2dfb75cacd479ce058e153ee79cc9f015ebcf5b72d4c9e5c04950ae8aa72aa6cc21a3518f6278be9f0591716efcd43ce62c616958fcdd2f9a4a21ec78e77f4a31ebdf7c03624aa28bbb2f07804c4393f74a47712f24e1f97caafa1f74ddeb4ada0165eaad83f3c3a1f992a5f4b7f68f1f1c29c582c73eec7ec79cfc4b2375ab6d949fa5d57f1ea9b71d1f213669c", @ANYRES64=r4, @ANYBLOB="000000000000000000000000000000000000001b", @ANYRES64=r6, @ANYRES32=r7, @ANYRES8=r3], 0x50) shutdown(r4, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x38, 0x0, &(0x7f00007d0000)) read(r2, &(0x7f00000005c0)=""/116, 0x74) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) socket(0x10, 0x3, 0x0) 20.400636395s ago: executing program 4 (id=621): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, 0x0, 0x6000050) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x248}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff0000004000"/67], 0x0, 0x56, 0x0, 0x0, 0x3}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0}) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0xe, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 18.864801892s ago: executing program 4 (id=622): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x7) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 18.617896328s ago: executing program 2 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblc\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f0000000040)}, {&(0x7f00000004c0)=""/24, 0x18}, {&(0x7f0000000580)=""/148, 0x94}], 0x6, &(0x7f0000000500)=""/26, 0x1a}, 0x6}], 0x1, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) 18.170609826s ago: executing program 3 (id=624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006272"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) (async) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 17.920678755s ago: executing program 0 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e00340024000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80046071907800e7080a09df168a000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="f9", 0x1}], 0x1}, 0x48844) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.678938972s ago: executing program 2 (id=626): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r0 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) io_setup(0x3, 0x0) (async) io_setup(0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000240)=0x3c, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @remote, 0x80000001}, 0x1c, 0x0}, 0x84) mq_open(&(0x7f0000000100)='\x00', 0x1, 0x1c4, &(0x7f0000000140)={0x80000001, 0x0, 0x3fc, 0x2}) (async) r6 = mq_open(&(0x7f0000000100)='\x00', 0x1, 0x1c4, &(0x7f0000000140)={0x80000001, 0x0, 0x3fc, 0x2}) mq_timedsend(r6, &(0x7f0000000180)="5778d3e2da64d7a5572a663ba72aad42ee6d000cea4b95fa1d81e5c9331fc030ce734ac2e7e916c26c31270e84ddf7e8015f94d6842793bff33986b6d90949e0782a1c20ce54a492db3c24", 0x4b, 0x6, &(0x7f0000000200)) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800458600280064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200a9067c63d1"], 0x0) 17.669037191s ago: executing program 0 (id=627): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x67}, &(0x7f0000000300), &(0x7f0000000200)) (async) r1 = epoll_create(0xaf2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (rerun: 64) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xdf) close(r3) (async) write$P9_RGETLOCK(r3, &(0x7f0000000480)={0x2d, 0x37, 0x2, {0x2, 0x20000, 0x5, r2, 0xf, '/dev/cpu/#/msr\x00'}}, 0x2d) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) fanotify_init(0x200, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async, rerun: 32) listen(0xffffffffffffffff, 0x8000) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x4, 0x3, 0x4, 0xc, '\x00', 0xd6a}, 0x5, 0x100, 0x9, r2, 0x5, 0x8, 'syz0\x00', &(0x7f0000000240)=['&\x00', '/dev/cpu/#/msr\x00', '/dev/cpu/#/msr\x00', '/dev/cpu/#/msr\x00', '\x00>[t\xb7\x8d\x82j\xc5\x0eo\xf90xffffffffffffffff}, 0x4080) write$P9_RSYMLINK(r1, &(0x7f00000006c0)={0x14, 0x11, 0x1, {0x2, 0x1}}, 0x14) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async) setrlimit(0x4, &(0x7f0000000740)={0x1, 0x2}) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000007c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0x8) (async) r5 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000900)=0xe8) (async) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$I2C_FUNCS(r7, 0x705, &(0x7f0000000940)=0x2) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000980)={0x40, 0x1e, 0x6, 0x4, "e835124ad6a20b77210d95e89154ad9c0ed5b0d8a993eb36d07a3c54cacd5eec"}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000009c0)={0x6, 0x4, 0x2, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, 0x28) getrlimit(0xf, &(0x7f0000000a00)) (async) r8 = syz_open_dev$loop(&(0x7f0000000a40), 0xffffffffffffffa1, 0x20000) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000000a80)={0x0, {}, 0x0, {}, 0x8, 0x2, 0x17, 0x10, "9b87de3b18f7b9ee3cb24d1fcebb69a77c9003ab126d92d9c11ddf13707748edbadd49a10b86ed62bb682769dc554116afeaebd7b04f5b9f84d0017d5ff1b3fb", "a41b34fd6da71c07e29e9a894bdec7e7c72534fdacfc4e5ab8044ee33c32ecab", [0x0, 0x101]}) (async) mount(&(0x7f0000000b40)=@sg0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='zonefs\x00', 0x24020, &(0x7f0000000c00)='/dev/ttyS3\x00') (async) setxattr$trusted_overlay_origin(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), &(0x7f0000000cc0), 0x2, 0x5) (async) write$P9_RLOCK(r7, &(0x7f0000000d00)={0x8, 0x35, 0x2, 0x3}, 0x8) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000d40)={@mcast1, 0x74, r6}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d80)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r9, 0x0, &(0x7f0000000dc0)) (async) r10 = fcntl$dupfd(r3, 0x406, r4) ioctl(r10, 0x1, &(0x7f0000000e00)="538375d42f6ab53df462b49d45d5263a42b1881aad52e7f0e759ecc687d539870c1bc7982d784cd91bb249b7b70615cd0cf9092986c1832dc9fc78a05653389a0542f9b9afc1be144a7768532d301bcb50a0eb020d15aef3f9bd3dd06b62935aefc59b150855d6383a7e5fbc00bcff30c46571e82b6b58e0b5ef62251935311849439b5a21b0dd55fe590da4c43c1bc491d69b49e976ffc3") (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) 15.429551406s ago: executing program 1 (id=629): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000600)=0x1) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x54, r3, 0x1, 0x0, 0x0, {0x53}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 8.18005121s ago: executing program 4 (id=630): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000001000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000100fedbdf250300bb29140001800d0001006574683a6772653000000000"], 0x28}}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x256) ioctl$FBIOBLANK(r8, 0x4611, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2e0ac2) syz_open_procfs(0x0, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r7}) r10 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, 0x0) keyctl$set_timeout(0xf, r10, 0xfffff49f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'nr0\x00'}) 0s ago: executing program 32 (id=627): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x67}, &(0x7f0000000300), &(0x7f0000000200)) (async) r1 = epoll_create(0xaf2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (rerun: 64) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xdf) close(r3) (async) write$P9_RGETLOCK(r3, &(0x7f0000000480)={0x2d, 0x37, 0x2, {0x2, 0x20000, 0x5, r2, 0xf, '/dev/cpu/#/msr\x00'}}, 0x2d) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) fanotify_init(0x200, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async, rerun: 32) listen(0xffffffffffffffff, 0x8000) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x4, 0x3, 0x4, 0xc, '\x00', 0xd6a}, 0x5, 0x100, 0x9, r2, 0x5, 0x8, 'syz0\x00', &(0x7f0000000240)=['&\x00', '/dev/cpu/#/msr\x00', '/dev/cpu/#/msr\x00', '/dev/cpu/#/msr\x00', '\x00>[t\xb7\x8d\x82j\xc5\x0eo\xf9 -90 [ 179.623115][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.641889][ T5829] usb usb4-port1: attempt power cycle [ 179.642115][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 179.682882][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 179.722411][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 179.742440][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 179.782447][ T5934] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 179.811072][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.859987][ T5934] usb 2-1: config 0 descriptor?? [ 179.882861][ T7450] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 179.889205][ T7460] Bluetooth: MGMT ver 1.23 [ 180.061756][ T5829] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.093129][ T5829] usb 4-1: device descriptor read/8, error -71 [ 180.135147][ T5934] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.146762][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 180.146772][ T30] audit: type=1400 audit(1766755316.021:561): avc: denied { read write } for pid=7449 comm="syz.1.367" name="lp0" dev="devtmpfs" ino=3010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 180.179548][ C0] usblp0: nonzero read bulk status received: -71 [ 180.234221][ T5877] usb 2-1: USB disconnect, device number 19 [ 180.255051][ T5877] usblp0: removed [ 180.360263][ T30] audit: type=1400 audit(1766755316.061:562): avc: denied { open } for pid=7449 comm="syz.1.367" path="/dev/usb/lp0" dev="devtmpfs" ino=3010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 180.394660][ T5829] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 180.437995][ T5829] usb 4-1: device descriptor read/8, error -71 [ 180.571997][ T5829] usb usb4-port1: unable to enumerate USB device [ 180.668172][ T5928] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 181.117760][ T30] audit: type=1400 audit(1766755316.971:563): avc: denied { accept } for pid=7474 comm="syz.1.371" lport=38752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.695360][ T7482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7482 comm=syz.4.373 [ 181.961772][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 183.044064][ T7505] random: crng reseeded on system resumption [ 183.060934][ T30] audit: type=1400 audit(1766755318.921:564): avc: denied { read write } for pid=7503 comm="syz.1.380" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.084975][ T30] audit: type=1400 audit(1766755318.921:565): avc: denied { ioctl } for pid=7503 comm="syz.1.380" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.741628][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 183.953479][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.993257][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.016861][ T5877] usb 1-1: USB disconnect, device number 13 [ 184.047191][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.097497][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.140807][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.169432][ T7427] kexec: Could not allocate control_code_buffer [ 184.176587][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.193997][ T5885] usb 4-1: config 0 descriptor?? [ 184.262071][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 184.331825][ T6119] usb 3-1: USB disconnect, device number 13 [ 184.424389][ T9] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 184.435697][ T9] usb 5-1: config 8 has no interface number 0 [ 184.452231][ T9] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 184.472203][ T9] usb 5-1: config 8 interface 177 has no altsetting 0 [ 184.481064][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 184.490873][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.562584][ T7523] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 184.618508][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.633386][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.642321][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.673076][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.701264][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.709994][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.718218][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.725695][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.733146][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.740646][ T5885] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 184.753989][ T5885] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 184.789131][ T9] usb 5-1: string descriptor 0 read error: -71 [ 184.805240][ T9] ir_toy 5-1:8.177: required endpoints not found [ 184.827908][ T9] usb 5-1: USB disconnect, device number 21 [ 184.862208][ T6119] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 184.869873][ T5934] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 185.032009][ T6119] usb 2-1: Using ep0 maxpacket: 32 [ 185.038388][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.052031][ T6119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.063292][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 185.081286][ T6119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.084105][ T5885] usb 4-1: USB disconnect, device number 17 [ 185.091688][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.109777][ T6119] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 185.124980][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 185.139000][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.150225][ T6119] usb 2-1: config 0 descriptor?? [ 185.157618][ T5934] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 185.170285][ T5934] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 185.178870][ T5934] usb 1-1: Manufacturer: syz [ 185.185508][ T5934] usb 1-1: config 0 descriptor?? [ 185.412328][ T30] audit: type=1400 audit(1766755321.281:566): avc: denied { bind } for pid=7543 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.455957][ T30] audit: type=1400 audit(1766755321.281:567): avc: denied { write } for pid=7543 comm="syz.2.391" path="socket:[14767]" dev="sockfs" ino=14767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.481204][ T30] audit: type=1400 audit(1766755321.331:568): avc: denied { name_connect } for pid=7545 comm="syz.4.392" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 185.525050][ T30] audit: type=1400 audit(1766755321.381:569): avc: denied { listen } for pid=7545 comm="syz.4.392" lport=47549 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.551785][ T5934] rc_core: IR keymap rc-hauppauge not found [ 185.557725][ T5934] Registered IR keymap rc-empty [ 185.564382][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.592288][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.637120][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 185.653327][ T30] audit: type=1400 audit(1766755321.501:570): avc: denied { connect } for pid=7537 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.711493][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 185.796861][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.094915][ T6119] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 186.122436][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.142173][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.161745][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.182092][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.202369][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.222357][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.301435][ T6119] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 186.312494][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.342042][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.362516][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 186.383831][ T5934] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 186.393618][ T5934] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.443044][ T30] audit: type=1400 audit(1766755322.311:571): avc: denied { bind } for pid=7561 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.698617][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.759084][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.762267][ T6119] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 186.817058][ T30] audit: type=1400 audit(1766755322.511:572): avc: denied { create } for pid=7561 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.837900][ T30] audit: type=1400 audit(1766755322.521:573): avc: denied { bind } for pid=7561 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 186.881492][ T6119] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 187.123343][ T9] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 187.684526][ T7575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.397'. [ 188.408722][ T6119] usb 2-1: USB disconnect, device number 20 [ 189.831126][ T30] audit: type=1400 audit(1766755325.701:574): avc: denied { getopt } for pid=7576 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.380258][ T6824] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.411607][ T5928] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 190.582185][ T6824] usb 3-1: Using ep0 maxpacket: 8 [ 190.599188][ T6824] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 190.662332][ T6824] usb 3-1: config 1 interface 0 has no altsetting 0 [ 190.674292][ T6824] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.722165][ T6824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.752368][ T6824] usb 3-1: Product: syz [ 190.756787][ T6824] usb 3-1: Manufacturer: syz [ 190.761411][ T6824] usb 3-1: SerialNumber: syz [ 190.770308][ T6119] usb 1-1: USB disconnect, device number 14 [ 190.823769][ T7591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.126362][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.157819][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.202158][ T6824] usb 3-1: USB disconnect, device number 14 [ 191.512617][ T30] audit: type=1400 audit(1766755327.381:575): avc: denied { create } for pid=7610 comm="syz.0.407" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.527252][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 191.534318][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 191.539931][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 191.546849][ T7612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.553312][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 191.560422][ T7612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 191.574866][ T7612] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.582579][ T7612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 191.594652][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 191.601036][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 191.913708][ T30] audit: type=1400 audit(1766755327.781:576): avc: denied { unlink } for pid=5828 comm="syz-executor" name="file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.046635][ T30] audit: type=1400 audit(1766755327.921:577): avc: denied { setopt } for pid=7625 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.141436][ T30] audit: type=1400 audit(1766755328.011:578): avc: denied { connect } for pid=7631 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.248072][ T30] audit: type=1400 audit(1766755328.041:579): avc: denied { write } for pid=7631 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.366939][ T30] audit: type=1400 audit(1766755328.061:580): avc: denied { read } for pid=7631 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.458935][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.488197][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.591599][ T5928] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 192.702298][ T5894] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 192.745189][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.758300][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.779525][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.844552][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.861788][ T5894] usb 3-1: device descriptor read/64, error -71 [ 192.885824][ T5928] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 192.902296][ T5928] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 192.915455][ T5928] usb 1-1: Manufacturer: syz [ 192.939011][ T5928] usb 1-1: config 0 descriptor?? [ 193.131711][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.317412][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 193.329919][ T30] audit: type=1400 audit(1766755329.211:581): avc: denied { read } for pid=7644 comm="syz.1.414" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 193.363293][ T5894] usb 3-1: device descriptor read/64, error -71 [ 193.498900][ T5928] usbhid 1-1:0.0: can't add hid device: -71 [ 193.505032][ T5928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.518052][ T5928] usb 1-1: USB disconnect, device number 15 [ 193.612426][ T5894] usb usb3-port1: attempt power cycle [ 193.771830][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424725][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.456673][ T5894] usb 3-1: device descriptor read/8, error -71 [ 194.649014][ T30] audit: type=1400 audit(1766755330.521:582): avc: denied { ioctl } for pid=7650 comm="syz.3.415" path="socket:[16454]" dev="sockfs" ino=16454 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.697046][ T30] audit: type=1400 audit(1766755330.571:583): avc: denied { write } for pid=7650 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.717657][ T30] audit: type=1400 audit(1766755330.601:584): avc: denied { write } for pid=7650 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.721676][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 194.772254][ T5894] usb 3-1: device descriptor read/8, error -71 [ 194.883275][ T5894] usb usb3-port1: unable to enumerate USB device [ 194.891636][ T5928] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 195.055778][ T5928] usb 2-1: config 0 has an invalid interface number: 227 but max is 0 [ 195.064841][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.077308][ T5928] usb 2-1: config 0 has no interface number 0 [ 195.090761][ T5928] usb 2-1: config 0 interface 227 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 195.113768][ T5928] usb 2-1: config 0 interface 227 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 195.128171][ T5928] usb 2-1: config 0 interface 227 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 195.146765][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0 [ 195.156422][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.165359][ T5928] usb 2-1: Product: syz [ 195.169671][ T5928] usb 2-1: Manufacturer: syz [ 195.175457][ T5928] usb 2-1: SerialNumber: syz [ 195.191218][ T5928] usb 2-1: config 0 descriptor?? [ 195.198204][ T7658] trusted_key: syz.4.417 sent an empty control message without MSG_MORE. [ 195.364714][ T1155] wlan0: Trigger new scan to find an IBSS to join [ 195.559467][ T7662] netlink: 'syz.4.418': attribute type 10 has an invalid length. [ 195.567326][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.418'. [ 195.599773][ T7662] batman_adv: batadv0: Adding interface: virt_wifi0 [ 195.607054][ T7662] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.638652][ T7662] batman_adv: batadv0: Interface activated: virt_wifi0 [ 196.016727][ T7664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.416'. [ 196.168328][ T7666] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 196.303597][ T7666] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 196.398434][ T7666] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 196.556888][ T5928] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 196.626653][ T5928] usb 2-1: USB disconnect, device number 22 [ 197.521686][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 197.521718][ T30] audit: type=1326 audit(1766755333.391:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.558126][ T7688] geneve2: entered promiscuous mode [ 197.564870][ T30] audit: type=1326 audit(1766755333.391:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.572534][ T7688] geneve2: entered allmulticast mode [ 197.591149][ T30] audit: type=1326 audit(1766755333.391:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.659643][ T30] audit: type=1326 audit(1766755333.401:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.683418][ T30] audit: type=1326 audit(1766755333.401:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.707141][ T30] audit: type=1326 audit(1766755333.401:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.738850][ T30] audit: type=1326 audit(1766755333.401:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.769587][ T30] audit: type=1326 audit(1766755333.401:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.794099][ T30] audit: type=1326 audit(1766755333.401:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 197.825980][ T30] audit: type=1326 audit(1766755333.401:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7686 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e18f749 code=0x7ffc0000 [ 198.632369][ T6119] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.782071][ T5934] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 198.789741][ T6119] usb 3-1: Using ep0 maxpacket: 32 [ 198.813694][ T6119] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 198.829135][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.846270][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.854439][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.864654][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.876328][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.891265][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.900187][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.909875][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.920776][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.933085][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.942777][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.957892][ T6119] usb 3-1: config 0 has no interface number 0 [ 198.973090][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 198.981974][ T5934] usb 2-1: too many configurations: 106, using maximum allowed: 8 [ 198.991503][ T5934] usb 2-1: config index 0 descriptor too short (expected 111, got 72) [ 199.000595][ T6119] usb 3-1: config 0 has no interface number 0 [ 199.012503][ T5934] usb 2-1: config index 1 descriptor too short (expected 111, got 72) [ 199.029102][ T6119] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 199.043886][ T5934] usb 2-1: config index 2 descriptor too short (expected 111, got 72) [ 199.054219][ T6119] usb 3-1: config 0 has no interface number 0 [ 199.085176][ T5934] usb 2-1: config index 3 descriptor too short (expected 111, got 72) [ 199.097523][ T6119] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 199.117182][ T6119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.132239][ T5934] usb 2-1: config index 4 descriptor too short (expected 111, got 72) [ 199.148824][ T6119] usb 3-1: Product: syz [ 199.153893][ T5934] usb 2-1: config index 5 descriptor too short (expected 111, got 72) [ 199.170209][ T6119] usb 3-1: Manufacturer: syz [ 199.178036][ T5934] usb 2-1: config index 6 descriptor too short (expected 111, got 72) [ 199.187893][ T6119] usb 3-1: SerialNumber: syz [ 199.194922][ T5934] usb 2-1: config index 7 descriptor too short (expected 111, got 72) [ 199.206679][ T6119] usb 3-1: config 0 descriptor?? [ 199.215190][ T5934] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.224823][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.233958][ T5934] usb 2-1: Product: syz [ 199.239585][ T5934] usb 2-1: Manufacturer: syz [ 199.247142][ T5934] usb 2-1: SerialNumber: syz [ 199.265031][ T5934] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.281415][ T5815] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.513460][ T7699] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 199.544395][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.551916][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.565598][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 199.576911][ T7724] bridge0: entered allmulticast mode [ 199.624633][ T7700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.640519][ T7724] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 199.676673][ T7699] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 199.697980][ T7695] bond_slave_0: entered promiscuous mode [ 199.703812][ T7695] bond_slave_1: entered promiscuous mode [ 199.709470][ T7695] syz_tun: entered promiscuous mode [ 199.769975][ T7695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.793426][ T7695] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 199.807934][ T7695] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 199.844685][ T7695] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 199.921982][ T7737] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.434'. [ 199.967696][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 200.003167][ T7724] bridge_slave_1: left allmulticast mode [ 200.017231][ T7724] bridge_slave_1: left promiscuous mode [ 200.053759][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.302407][ T7724] bridge_slave_0: left allmulticast mode [ 200.319108][ T7724] bridge_slave_0: left promiscuous mode [ 200.332223][ T5815] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 200.411680][ T2914] wlan0: Trigger new scan to find an IBSS to join [ 200.421842][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.740015][ T5815] ath9k_htc: Failed to initialize the device [ 200.835360][ T6119] usb 3-1: USB disconnect, device number 19 [ 200.844937][ T5815] usb 2-1: ath9k_htc: USB layer deinitialized [ 201.416232][ T7756] team0 (unregistering): Port device team_slave_0 removed [ 201.451326][ T7756] team0 (unregistering): Port device team_slave_1 removed [ 201.468412][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.632110][ T7767] vivid-000: ================= START STATUS ================= [ 201.720327][ T7767] vivid-000: Enable Output Cropping: true grabbed [ 201.807838][ T7767] vivid-000: Enable Output Composing: true grabbed [ 201.844711][ T7767] vivid-000: Enable Output Scaler: true grabbed [ 201.930941][ T7767] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 201.948127][ T7767] vivid-000: Transmit Mode: HDMI grabbed [ 201.987258][ T7767] vivid-000: Hotplug Present: 0x00000000 [ 202.308583][ T7767] vivid-000: RxSense Present: 0x00000000 [ 202.347168][ T7767] vivid-000: EDID Present: 0x00000000 [ 202.363241][ T7767] vivid-000: ================== END STATUS ================== [ 202.803691][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 203.763864][ T6942] udevd[6942]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 203.919200][ T6942] udevd[6942]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 204.331592][ T5829] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 204.792707][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 204.823030][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.852087][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.882585][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.928837][ T5829] usb 3-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 204.965626][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.014737][ T5829] usb 3-1: config 0 descriptor?? [ 205.132097][ T7805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7805 comm=syz.4.452 [ 205.149172][ T5877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 205.312542][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 205.319670][ T5877] usb 1-1: no configurations [ 205.328861][ T5877] usb 1-1: can't read configurations, error -22 [ 205.447649][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 205.464487][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 205.482635][ T5877] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.491870][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.520020][ T5829] usb 3-1: USB disconnect, device number 20 [ 205.585964][ T24] usb 2-1: USB disconnect, device number 23 [ 205.651799][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 205.657183][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 205.673030][ T5877] usb 1-1: no configurations [ 205.678433][ T5894] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 205.701207][ T5877] usb 1-1: can't read configurations, error -22 [ 205.715349][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.725159][ T5877] usb usb1-port1: attempt power cycle [ 205.732226][ T5894] usb 5-1: Product: syz [ 205.738748][ T5894] usb 5-1: Manufacturer: syz [ 205.743637][ T5894] usb 5-1: SerialNumber: syz [ 205.751915][ T5894] usb 5-1: config 0 descriptor?? [ 205.760106][ T5894] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 206.054433][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.066352][ T5877] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 206.094230][ T7813] netlink: 'syz.2.454': attribute type 11 has an invalid length. [ 206.106182][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 206.114470][ T5877] usb 1-1: no configurations [ 206.119212][ T5877] usb 1-1: can't read configurations, error -22 [ 206.233692][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.250913][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.262596][ T5877] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 206.270418][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 206.281387][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.296345][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 206.301867][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.311912][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.320350][ T5877] usb 1-1: no configurations [ 206.325845][ T5877] usb 1-1: can't read configurations, error -22 [ 206.333635][ T5877] usb usb1-port1: unable to enumerate USB device [ 206.353373][ T24] usb 2-1: config 0 descriptor?? [ 206.571616][ T5894] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 206.600545][ T5894] usb 5-1: USB disconnect, device number 22 [ 206.931022][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 206.959136][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.998100][ T24] usb 2-1: USB disconnect, device number 24 [ 207.175146][ T7823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.455'. [ 207.770918][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.778892][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.789072][ T7831] bridge0: entered allmulticast mode [ 207.808397][ T7831] netlink: 'syz.3.455': attribute type 2 has an invalid length. [ 207.864258][ T7831] bridge_slave_1: left allmulticast mode [ 207.865625][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 207.865638][ T30] audit: type=1400 audit(1766755343.741:616): avc: denied { bind } for pid=7828 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.227199][ T30] audit: type=1400 audit(1766755343.811:617): avc: denied { ioctl } for pid=7827 comm="syz.1.458" path="socket:[17044]" dev="sockfs" ino=17044 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.259396][ T7831] bridge_slave_1: left promiscuous mode [ 208.304840][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.316631][ T7843] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 208.505390][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 208.518375][ T7831] bridge_slave_0: left allmulticast mode [ 208.534073][ T7831] bridge_slave_0: left promiscuous mode [ 208.550337][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.558622][ T7836] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 208.819950][ T7843] hsr0: entered promiscuous mode [ 208.827952][ T7843] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 208.843364][ T7843] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 208.856336][ T7843] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 209.443937][ T7836] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.874977][ T7865] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 209.901565][ T7865] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 209.918061][ T7865] overlayfs: failed to resolve './bus': -2 [ 210.177325][ T30] audit: type=1400 audit(1766755345.751:618): avc: denied { ioctl } for pid=7857 comm="syz.4.464" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 211.044972][ T30] audit: type=1400 audit(1766755346.921:619): avc: denied { bind } for pid=7876 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.092592][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 211.122205][ T5934] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 211.282654][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 211.299324][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.379712][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 211.393385][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 211.422102][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 211.465195][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 211.497254][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 211.519632][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.550003][ T5934] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 211.569429][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.587405][ T5934] usb 5-1: Product: syz [ 211.596982][ T5934] usb 5-1: Manufacturer: syz [ 211.608093][ T5934] usb 5-1: SerialNumber: syz [ 211.624726][ T5934] usb 5-1: config 0 descriptor?? [ 211.635720][ T7874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.660398][ T5934] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 211.676582][ T5934] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 211.916561][ T5894] usb 5-1: USB disconnect, device number 23 [ 212.395925][ T30] audit: type=1326 audit(1766755348.271:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.442648][ T30] audit: type=1326 audit(1766755348.271:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.482819][ T30] audit: type=1326 audit(1766755348.301:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.507990][ T30] audit: type=1326 audit(1766755348.301:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.531999][ T30] audit: type=1326 audit(1766755348.301:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.558755][ T30] audit: type=1326 audit(1766755348.301:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f707458f749 code=0x7ffc0000 [ 212.666296][ T7913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.477'. [ 214.640471][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 214.657965][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 214.871614][ T5877] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.002057][ T6119] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 215.024868][ T5877] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 215.034026][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.044629][ T5877] usb 3-1: config 0 descriptor?? [ 215.153437][ T6119] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 215.165612][ T6119] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.176855][ T6119] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 215.190782][ T6119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.198391][ T6119] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 215.209166][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.223913][ T6119] usb 2-1: config 0 descriptor?? [ 215.518942][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 215.518958][ T30] audit: type=1400 audit(1766755351.391:630): avc: denied { mount } for pid=7928 comm="syz.2.483" name="/" dev="ramfs" ino=17417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 215.783612][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 215.791474][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 215.799555][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 215.807591][ T6119] usbhid 2-1:0.0: can't add hid device: -32 [ 215.950126][ T6119] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 215.960501][ T6119] usb 2-1: USB disconnect, device number 25 [ 216.228480][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.237499][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.247320][ T5877] hackrf 3-1:0.0: Board ID: 00 [ 216.310971][ T7950] netlink: 'syz.4.488': attribute type 30 has an invalid length. [ 216.448918][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.457514][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.473318][ T7951] netlink: 'syz.4.488': attribute type 30 has an invalid length. [ 217.104485][ T5877] hackrf 3-1:0.0: Firmware version: [ 217.112369][ T5877] hackrf 3-1:0.0: Registered as swradio24 [ 217.118120][ T5877] videodev: could not get a free minor [ 217.124460][ T5877] hackrf 3-1:0.0: Failed to register as video device (-23) [ 217.133935][ T5877] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 217.143930][ T5877] usb 3-1: USB disconnect, device number 21 [ 218.411634][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.772298][ T7966] kernel profiling enabled (shift: 63) [ 218.802389][ T7966] profiling shift: 63 too large [ 218.891721][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 218.918257][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.107824][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.118288][ T5927] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 219.127619][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.149877][ T5927] usb 4-1: config 0 descriptor?? [ 219.319381][ T30] audit: type=1326 audit(1766755355.196:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.353985][ T30] audit: type=1326 audit(1766755355.196:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.442369][ T30] audit: type=1326 audit(1766755355.226:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.467481][ T30] audit: type=1326 audit(1766755355.226:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.491362][ T30] audit: type=1326 audit(1766755355.226:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.515549][ T30] audit: type=1326 audit(1766755355.226:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.541640][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.602294][ T30] audit: type=1400 audit(1766755355.226:637): avc: denied { accept } for pid=7989 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 219.622915][ T30] audit: type=1326 audit(1766755355.226:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.647019][ T30] audit: type=1326 audit(1766755355.226:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ffc0000 [ 219.649611][ T5927] hid_parser_main: 6 callbacks suppressed [ 219.649628][ T5927] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 219.805652][ T5927] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 219.813102][ T5927] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 219.820495][ T5927] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 219.827983][ T5927] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 219.860278][ T5927] gt683r_led 0003:1770:FF00.0006: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 219.893723][ T5927] usb 4-1: USB disconnect, device number 18 [ 219.903159][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 219.987518][ T5894] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 219.995768][ T5894] usb 3-1: config 0 has no interface number 0 [ 220.002108][ T5894] usb 3-1: config 0 interface 181 has no altsetting 0 [ 220.013758][ T5894] usb 3-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=dd.a5 [ 220.030317][ T5829] gt683r_led 0003:1770:FF00.0006: failed to send set report request: -19 [ 220.041396][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.045393][ T7990] syz.4.499 (7990) used greatest stack depth: 18360 bytes left [ 220.056093][ T5894] usb 3-1: Product: syz [ 220.061049][ T5894] usb 3-1: Manufacturer: syz [ 220.110347][ T5894] usb 3-1: SerialNumber: syz [ 220.132122][ T5894] usb 3-1: config 0 descriptor?? [ 220.435099][ T7993] set match dimension is over the limit! [ 221.546359][ T5894] usb 3-1: USB disconnect, device number 22 [ 221.613141][ T5815] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 221.822436][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 221.871272][ T5815] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.975643][ T5815] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.107214][ T5815] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 222.150065][ T5815] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 222.170316][ T7988] delete_channel: no stack [ 222.187384][ T5815] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.242409][ T5815] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.280747][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.517987][ T5815] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 222.640696][ T8028] comedi comedi4: bad chanlist[0]=0x000007ff chan=2047 range length=2 [ 223.287554][ T8036] fuse: Unknown parameter 'y0x000000000000000a' [ 224.565050][ T5927] usb 4-1: USB disconnect, device number 19 [ 224.609164][ T8043] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 224.902399][ T5934] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 225.082349][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 225.090624][ T5934] usb 2-1: config index 0 descriptor too short (expected 48164, got 36) [ 225.099998][ T5934] usb 2-1: config 10 has too many interfaces: 111, using maximum allowed: 32 [ 225.110027][ T5934] usb 2-1: config 10 has an invalid descriptor of length 178, skipping remainder of the config [ 225.207589][ T5934] usb 2-1: config 10 has 0 interfaces, different from the descriptor's value: 111 [ 225.240333][ T5934] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 225.258775][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.678643][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 226.386399][ T8087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.844853][ T8087] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 227.024092][ T5934] usb 2-1: string descriptor 0 read error: -71 [ 227.142193][ T5934] usb 2-1: USB disconnect, device number 26 [ 227.181910][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 227.181926][ T30] audit: type=1400 audit(1766755363.056:682): avc: denied { accept } for pid=8093 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.599314][ T30] audit: type=1400 audit(1766755363.336:683): avc: denied { write } for pid=8097 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.002265][ T5934] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 228.072361][ T8107] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.080070][ T5894] IPVS: starting estimator thread 0... [ 228.200968][ T8113] comedi comedi4: bad chanlist[0]=0x000007ff chan=2047 range length=2 [ 228.223371][ T5934] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 228.345103][ T8111] IPVS: using max 42 ests per chain, 100800 per kthread [ 228.503323][ T5934] usb 1-1: config 0 has no interface number 0 [ 228.745566][ T5934] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 228.811238][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.839977][ T5934] usb 1-1: Product: syz [ 228.864478][ T5934] usb 1-1: Manufacturer: syz [ 228.873946][ T5934] usb 1-1: SerialNumber: syz [ 228.885344][ T5934] usb 1-1: config 0 descriptor?? [ 228.896512][ T5934] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 228.972370][ T5934] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 229.198829][ T8130] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 229.241237][ T8130] qnx6: wrong signature (magic) in superblock #1. [ 229.247768][ T8130] qnx6: unable to read the first superblock [ 229.252142][ T5934] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 229.325409][ T30] audit: type=1400 audit(1766755365.196:684): avc: denied { connect } for pid=8121 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.513586][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 229.544851][ T5934] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 230.142170][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.150189][ T5934] usb 5-1: Product: syz [ 230.159069][ T5934] usb 5-1: Manufacturer: syz [ 230.164336][ T5934] usb 5-1: SerialNumber: syz [ 230.171360][ T5934] usb 5-1: config 0 descriptor?? [ 230.188543][ T5934] gspca_main: se401-2.14.0 probing 047d:5003 [ 230.199969][ T5815] usb 1-1: USB disconnect, device number 20 [ 230.390220][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.453213][ T8159] Device name cannot be null; rc = [-22] [ 230.469218][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.506520][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 230.518137][ T8164] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 230.794742][ T8170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 230.914942][ T8171] comedi comedi3: board detection failed [ 231.066504][ T8175] vlan0: entered promiscuous mode [ 231.736329][ T5934] gspca_se401: read req failed req 0x06 error -19 [ 231.763304][ T5934] usb 5-1: USB disconnect, device number 24 [ 232.525609][ T30] audit: type=1400 audit(1766755368.396:685): avc: denied { accept } for pid=8204 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.701383][ T30] audit: type=1400 audit(1766755368.576:686): avc: denied { setopt } for pid=8227 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 232.782228][ T5934] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 233.175901][ T8232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.183461][ T8232] IPv6: NLM_F_CREATE should be set when creating new route [ 233.202019][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 233.208777][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.230557][ T5934] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 233.252415][ T5934] usb 5-1: can't read configurations, error -22 [ 233.425973][ T5934] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 233.471630][ T5927] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 233.570325][ T5816] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 233.622213][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 233.640424][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.661135][ T5934] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 233.680198][ T5934] usb 5-1: can't read configurations, error -22 [ 233.697431][ T5934] usb usb5-port1: attempt power cycle [ 233.721603][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 233.728086][ T5927] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 233.742316][ T5815] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 233.751878][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.261613][ T5927] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 234.344022][ T5815] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 234.356166][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 234.370048][ T5815] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 234.380034][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.392689][ T5815] usb 1-1: config 0 descriptor?? [ 234.479028][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.497199][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.505604][ T30] audit: type=1400 audit(1766755370.376:687): avc: denied { mount } for pid=8244 comm="syz.1.553" name="/" dev="autofs" ino=19876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.532109][ T5934] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.552001][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.559966][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.572822][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 234.575627][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.585973][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.586232][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.593967][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.613461][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.622648][ T5934] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 234.624637][ T8246] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 234.650763][ T5934] usb 5-1: can't read configurations, error -22 [ 234.676575][ T30] audit: type=1400 audit(1766755370.556:688): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.980243][ T5934] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 235.038106][ T5815] magicmouse 0003:05AC:0269.0007: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 235.055005][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 235.057156][ T5927] usb 3-1: USB disconnect, device number 23 [ 235.063709][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.087630][ T5815] usb 1-1: USB disconnect, device number 21 [ 235.100749][ T5934] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 235.116579][ T5934] usb 5-1: can't read configurations, error -22 [ 235.125878][ T5934] usb usb5-port1: unable to enumerate USB device [ 235.168448][ T30] audit: type=1400 audit(1766755371.046:689): avc: denied { block_suspend } for pid=8257 comm="syz.1.556" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 235.190511][ T8256] fido_id[8256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.206984][ T30] audit: type=1400 audit(1766755371.046:690): avc: denied { module_load } for pid=8257 comm="syz.1.556" path="/sys/power/wakeup_count" dev="sysfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 235.387353][ T30] audit: type=1400 audit(1766755371.266:691): avc: denied { bind } for pid=8257 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.409175][ T30] audit: type=1400 audit(1766755371.286:692): avc: denied { accept } for pid=8257 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.552058][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.557'. [ 236.382041][ T30] audit: type=1326 audit(1766755372.216:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ff00000 [ 236.414325][ T7854] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 236.476352][ T30] audit: type=1326 audit(1766755372.216:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.4.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2e78f749 code=0x7ff00000 [ 236.691731][ T7854] usb 1-1: Using ep0 maxpacket: 16 [ 236.698230][ T7854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.708564][ T7854] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 236.720575][ T7854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.737994][ T7854] usb 1-1: config 0 descriptor?? [ 236.771917][ T7854] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 236.901681][ T7854] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 236.958963][ T7854] usb 1-1: USB disconnect, device number 22 [ 237.095321][ T8298] validate_nla: 39 callbacks suppressed [ 237.095337][ T8298] netlink: 'syz.3.566': attribute type 3 has an invalid length. [ 237.442186][ T5815] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 237.596405][ T5815] usb 4-1: device descriptor read/64, error -71 [ 237.701825][ T7854] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 237.808225][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 237.808240][ T30] audit: type=1400 audit(1766755373.686:782): avc: denied { add_name } for pid=8307 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.839729][ T30] audit: type=1400 audit(1766755373.686:783): avc: denied { create } for pid=8307 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.862077][ T5815] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 237.872884][ T30] audit: type=1400 audit(1766755373.686:784): avc: denied { write } for pid=8307 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=4373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.904841][ T7854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 237.916342][ T7854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.926466][ T7854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 237.938122][ T30] audit: type=1400 audit(1766755373.686:785): avc: denied { append } for pid=8307 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=4373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.962982][ T5894] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 237.972526][ T30] audit: type=1400 audit(1766755373.756:786): avc: denied { remove_name } for pid=8336 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.992137][ T5815] usb 4-1: device descriptor read/64, error -71 [ 237.997325][ T30] audit: type=1400 audit(1766755373.756:787): avc: denied { unlink } for pid=8336 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=4373 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.036478][ T7854] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 238.045758][ T7854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.053845][ T5927] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 238.062135][ T7854] usb 3-1: Product: syz [ 238.066517][ T7854] usb 3-1: Manufacturer: syz [ 238.071795][ T7854] usb 3-1: SerialNumber: syz [ 238.078741][ T7854] usb 3-1: config 0 descriptor?? [ 238.112887][ T5815] usb usb4-port1: attempt power cycle [ 238.143730][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 238.156044][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.166222][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 238.172392][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.183428][ T5894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.192817][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.202813][ T5894] usb 5-1: Product: syz [ 238.207008][ T5894] usb 5-1: Manufacturer: syz [ 238.212071][ T5894] usb 5-1: SerialNumber: syz [ 238.234035][ T5927] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 238.254540][ T5927] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.264889][ T5927] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 238.278055][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.285440][ T5927] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 238.295011][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.307735][ T7854] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 238.326821][ T5927] usb 2-1: config 0 descriptor?? [ 238.452300][ T5815] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 238.468349][ T5894] usb 5-1: 0:2 : does not exist [ 238.482738][ T5815] usb 4-1: device descriptor read/8, error -71 [ 238.486422][ T5894] usb 5-1: USB disconnect, device number 29 [ 238.535241][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.560081][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.722116][ T5815] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 238.742611][ T5815] usb 4-1: device descriptor read/8, error -71 [ 238.757200][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 238.764692][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 238.772051][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 238.779193][ T5927] usbhid 2-1:0.0: can't add hid device: -32 [ 238.785359][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 238.799295][ T5927] usb 2-1: USB disconnect, device number 27 [ 238.802219][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.852682][ T5815] usb usb4-port1: unable to enumerate USB device [ 238.963294][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 238.973727][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 238.986404][ T5934] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 239.016500][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.025728][ T8358] syz.4.576 (8358): /proc/8356/oom_adj is deprecated, please use /proc/8356/oom_score_adj instead. [ 239.026690][ T5934] usb 1-1: Product: syz [ 239.044123][ T5934] usb 1-1: Manufacturer: syz [ 239.049835][ T5934] usb 1-1: SerialNumber: syz [ 239.059118][ T5934] usb 1-1: config 0 descriptor?? [ 239.065026][ T8354] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 239.072774][ T8354] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 239.281648][ T5927] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 239.296098][ T8354] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 239.311772][ T8354] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 239.445678][ T30] audit: type=1400 audit(1766755375.326:788): avc: denied { ioctl } for pid=8363 comm="syz.1.579" path="net:[4026532813]" dev="nsfs" ino=4026532813 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 239.473965][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 239.482361][ T30] audit: type=1400 audit(1766755375.356:789): avc: denied { ioctl } for pid=8363 comm="syz.1.579" path="socket:[20138]" dev="sockfs" ino=20138 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.509778][ T5927] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 239.518959][ T5927] usb 5-1: config 0 has no interface number 0 [ 239.528730][ T30] audit: type=1400 audit(1766755375.386:790): avc: denied { setattr } for pid=8363 comm="syz.1.579" name="TIPC" dev="sockfs" ino=20138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.552373][ T30] audit: type=1400 audit(1766755375.386:791): avc: denied { read } for pid=8363 comm="syz.1.579" path="socket:[20137]" dev="sockfs" ino=20137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.593124][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 239.611572][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.619610][ T5927] usb 5-1: Product: syz [ 239.631891][ T5927] usb 5-1: Manufacturer: syz [ 239.636594][ T5927] usb 5-1: SerialNumber: syz [ 239.654229][ T5927] usb 5-1: config 0 descriptor?? [ 239.663201][ T5927] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 239.670911][ T5927] uvcvideo 5-1:0.105: No valid video chain found. [ 239.869880][ T5815] usb 5-1: USB disconnect, device number 30 [ 240.146524][ T5934] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 240.162069][ T5927] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 240.173781][ T5934] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, a2:79:44:f4:fd:5c [ 240.194014][ T5934] usb 1-1: USB disconnect, device number 23 [ 240.214594][ T5934] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 240.352653][ T8375] loop6: detected capacity change from 0 to 524287487 [ 240.362427][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.371079][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.399541][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.408428][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.416464][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.424411][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.432382][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.440259][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.448903][ T8375] ldm_validate_partition_table(): Disk read failed. [ 240.455996][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.463951][ T8375] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.471865][ T8375] Dev loop6: unable to read RDB block 0 [ 240.477699][ T8375] loop6: unable to read partition table [ 240.483740][ T8375] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 240.522970][ T5927] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 240.594688][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.606659][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.661900][ T5894] usb 3-1: USB disconnect, device number 24 [ 240.679092][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 240.732095][ T5927] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 240.750449][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.778854][ T5927] usb 2-1: config 0 descriptor?? [ 240.912269][ T5934] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 241.091855][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 241.112983][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 241.121019][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.150848][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.191324][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.240168][ T5934] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.259994][ T5927] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 241.272433][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 241.283277][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.301936][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.305959][ T5894] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.342765][ T5934] usb 5-1: config 0 descriptor?? [ 241.350499][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.389116][ T5894] usb 3-1: config 0 descriptor?? [ 241.823924][ T5894] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 241.924562][ T5934] microsoft 0003:045E:07DA.000A: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 242.014213][ T5934] microsoft 0003:045E:07DA.000A: no inputs found [ 242.014550][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.032488][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.047903][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.072198][ T5934] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 242.110392][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.133818][ T9] usb 3-1: USB disconnect, device number 25 [ 242.303648][ T5934] usb 5-1: USB disconnect, device number 31 [ 242.594669][ T8426] fido_id[8426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 242.860640][ T9] usb 2-1: USB disconnect, device number 28 [ 245.582532][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 245.582548][ T30] audit: type=1400 audit(1766755381.396:794): avc: denied { write } for pid=8448 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.822738][ T8453] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.592'. [ 245.838802][ T30] audit: type=1400 audit(1766755381.636:795): avc: denied { create } for pid=8454 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.858830][ T30] audit: type=1400 audit(1766755381.646:796): avc: denied { ioctl } for pid=8454 comm="syz.4.595" path="socket:[20213]" dev="sockfs" ino=20213 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.885656][ T30] audit: type=1400 audit(1766755381.646:797): avc: denied { getopt } for pid=8454 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.909563][ T8457] input: syz0 as /devices/virtual/input/input16 [ 246.090601][ T7854] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 246.093377][ T30] audit: type=1400 audit(1766755381.976:798): avc: denied { watch watch_reads } for pid=8458 comm="syz.0.593" path="/118" dev="tmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 246.331690][ T7854] usb 5-1: Using ep0 maxpacket: 16 [ 246.344637][ T7854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.358808][ T8465] tipc: Enabling of bearer rejected, failed to enable media [ 246.390177][ T7854] usb 5-1: config 6 has an invalid interface number: 3 but max is 0 [ 246.398573][ T7854] usb 5-1: config 6 has no interface number 0 [ 246.407752][ T7854] usb 5-1: config 6 interface 3 has no altsetting 0 [ 246.428979][ T7854] usb 5-1: language id specifier not provided by device, defaulting to English [ 246.442015][ T7854] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=44.bd [ 246.451257][ T7854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.462299][ T7854] usb 5-1: Product: ቘᏒ쏷쨻؎⤡앀ẖ畦ꙮ鐛 [ 246.469290][ T7854] usb 5-1: SerialNumber: syz [ 246.752807][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.933282][ T30] audit: type=1400 audit(1766755382.666:799): avc: denied { ioctl } for pid=8466 comm="syz.1.594" path="socket:[19137]" dev="sockfs" ino=19137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.974611][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.437513][ T8455] xt_policy: output policy not valid in PREROUTING and INPUT [ 248.447463][ T30] audit: type=1400 audit(1766755384.306:800): avc: denied { create } for pid=8454 comm="syz.4.595" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.532395][ T30] audit: type=1400 audit(1766755384.306:801): avc: denied { append } for pid=8454 comm="syz.4.595" name="file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.591457][ T30] audit: type=1400 audit(1766755384.316:802): avc: denied { open } for pid=8454 comm="syz.4.595" path="/124/file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.648510][ T30] audit: type=1400 audit(1766755384.466:803): avc: denied { read } for pid=8454 comm="syz.4.595" name="file0" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.744925][ T7854] uvcvideo 5-1:6.3: Found UVC 0.00 device ቘᏒ쏷쨻؎⤡앀ẖ畦ꙮ鐛 (046d:08c1) [ 248.809093][ T7854] uvcvideo 5-1:6.3: No valid video chain found. [ 248.862528][ T8479] xt_connbytes: Forcing CT accounting to be enabled [ 248.875171][ T7854] usb 5-1: USB disconnect, device number 32 [ 248.925404][ T8479] set match dimension is over the limit! [ 249.120488][ T8485] x_tables: duplicate underflow at hook 2 [ 249.774870][ T8496] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.791064][ T8496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.609285][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 251.989377][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.608'. [ 252.079850][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 252.079866][ T30] audit: type=1400 audit(1766755387.956:805): avc: denied { mounton } for pid=8516 comm="syz.0.607" path="/121/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 252.143405][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.176713][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.229977][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.276907][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.302498][ T8515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.354074][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.370049][ T8525] ./file0: Can't open blockdev [ 252.524786][ T5927] usb 3-1: USB disconnect, device number 26 [ 252.696575][ T30] audit: type=1400 audit(1766755388.576:806): avc: denied { listen } for pid=8557 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.746003][ T30] audit: type=1400 audit(1766755388.596:807): avc: denied { ioctl } for pid=8557 comm="syz.3.612" path="socket:[21509]" dev="sockfs" ino=21509 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.800856][ T30] audit: type=1400 audit(1766755388.676:808): avc: denied { listen } for pid=8562 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 252.831144][ T30] audit: type=1400 audit(1766755388.696:809): avc: denied { accept } for pid=8562 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 253.091981][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 253.262232][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 253.272201][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 253.282491][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.303403][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 253.414164][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.617'. [ 253.453701][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 253.723016][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.733383][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 253.746776][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.756729][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.767990][ T10] usb 2-1: Product: syz [ 253.773915][ T10] usb 2-1: Manufacturer: syz [ 253.779831][ T10] usb 2-1: SerialNumber: syz [ 253.791309][ T10] usb 2-1: config 0 descriptor?? [ 254.121581][ T30] audit: type=1400 audit(1766755389.986:810): avc: denied { set_context_mgr } for pid=8587 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 254.257137][ T30] audit: type=1400 audit(1766755389.996:811): avc: denied { map } for pid=8587 comm="syz.4.621" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.289673][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 254.323202][ T30] audit: type=1400 audit(1766755389.996:812): avc: denied { call } for pid=8587 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 254.367221][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 255.300671][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.320197][ T5927] usb 4-1: USB disconnect, device number 24 [ 255.814734][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.222881][ T789] IPVS: starting estimator thread 0... [ 256.234293][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.245891][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.259305][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 256.272979][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.293977][ T9] usb 5-1: config 0 descriptor?? [ 256.312877][ T8601] IPVS: using max 46 ests per chain, 110400 per kthread [ 256.416840][ T8596] fuse: Bad value for 'rootmode' [ 257.022068][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 257.036996][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.758858][ T9] usb 5-1: USB disconnect, device number 33 [ 258.316004][ T8621] cgroup: fork rejected by pids controller in /syz0 [ 258.995976][ T10] usb 2-1: USB disconnect, device number 29 [ 260.978712][ C0] sched: DL replenish lagged too much [ 263.004410][ T5927] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 265.193255][ T6190] udevd[6190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.002867][ T8634] syz.0.627 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 266.014468][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.014492][ T8634] Tainted: [L]=SOFTLOCKUP [ 266.014497][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.014506][ T8634] Call Trace: [ 266.014512][ T8634] [ 266.014518][ T8634] dump_stack_lvl+0x16c/0x1f0 [ 266.014543][ T8634] dump_header+0x101/0x960 [ 266.014571][ T8634] oom_kill_process+0x176/0x910 [ 266.014597][ T8634] out_of_memory+0x350/0x1700 [ 266.014620][ T8634] ? __lock_acquire+0x436/0x2890 [ 266.014640][ T8634] ? __pfx_out_of_memory+0x10/0x10 [ 266.014669][ T8634] mem_cgroup_out_of_memory+0x118/0x130 [ 266.014687][ T8634] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 266.014708][ T8634] ? do_raw_spin_unlock+0x172/0x230 [ 266.014732][ T8634] try_charge_memcg+0x695/0xd30 [ 266.014756][ T8634] ? __pfx_try_charge_memcg+0x10/0x10 [ 266.014775][ T8634] ? __print_lock_name+0xd1/0xe0 [ 266.014797][ T8634] ? rcu_read_unlock+0x17/0x60 [ 266.014826][ T8634] charge_memcg+0x8a/0x230 [ 266.014846][ T8634] __mem_cgroup_charge+0x2b/0x1e0 [ 266.014868][ T8634] filemap_add_folio+0xe6/0x610 [ 266.014883][ T8634] ? __pfx_filemap_add_folio+0x10/0x10 [ 266.014904][ T8634] __filemap_get_folio_mpol+0x511/0xc60 [ 266.014924][ T8634] filemap_fault+0x684/0x29d0 [ 266.014943][ T8634] ? __pfx_filemap_fault+0x10/0x10 [ 266.014970][ T8634] ? __pfx_filemap_map_pages+0x10/0x10 [ 266.014982][ T8634] __do_fault+0x10d/0x490 [ 266.014999][ T8634] ? __pfx_filemap_map_pages+0x10/0x10 [ 266.015011][ T8634] do_fault+0xae4/0x1ad0 [ 266.015028][ T8634] ? __pfx_filemap_map_pages+0x10/0x10 [ 266.015045][ T8634] __handle_mm_fault+0x1919/0x2bb0 [ 266.015074][ T8634] ? __pfx___handle_mm_fault+0x10/0x10 [ 266.015099][ T8634] ? __pte_offset_map_lock+0x174/0x310 [ 266.015118][ T8634] ? find_held_lock+0x2b/0x80 [ 266.015146][ T8634] ? follow_page_pte+0x5cf/0x1390 [ 266.015170][ T8634] handle_mm_fault+0x3fe/0xad0 [ 266.015196][ T8634] __get_user_pages+0x54e/0x3590 [ 266.015224][ T8634] ? __pfx___get_user_pages+0x10/0x10 [ 266.015245][ T8634] ? __kernel_write_iter+0x5a5/0xb10 [ 266.015273][ T8634] get_dump_page+0x257/0x3d0 [ 266.015292][ T8634] ? __pfx_get_dump_page+0x10/0x10 [ 266.015312][ T8634] ? dump_user_range+0x756/0xb70 [ 266.015339][ T8634] dump_user_range+0x195/0xb70 [ 266.015368][ T8634] ? __pfx_dump_user_range+0x10/0x10 [ 266.015392][ T8634] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 266.015413][ T8634] ? __pfx_writenote+0x10/0x10 [ 266.015433][ T8634] elf_core_dump+0x29c3/0x3c10 [ 266.015458][ T8634] ? __pfx_elf_core_dump+0x10/0x10 [ 266.015471][ T8634] ? kasan_save_stack+0x33/0x60 [ 266.015486][ T8634] ? kasan_save_track+0x14/0x30 [ 266.015503][ T8634] ? __kasan_kmalloc+0xaa/0xb0 [ 266.015519][ T8634] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 266.015535][ T8634] ? vfs_coredump+0x1dd9/0x55e0 [ 266.015555][ T8634] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 266.015575][ T8634] ? irqentry_exit+0x38a/0x8c0 [ 266.015592][ T8634] ? asm_exc_page_fault+0x26/0x30 [ 266.015611][ T8634] ? 0xffffffffff600000 [ 266.015660][ T8634] ? vfs_coredump+0x2b85/0x55e0 [ 266.015682][ T8634] vfs_coredump+0x2b85/0x55e0 [ 266.015711][ T8634] ? __pfx_vfs_coredump+0x10/0x10 [ 266.015732][ T8634] ? __lock_acquire+0x436/0x2890 [ 266.015754][ T8634] ? __lock_acquire+0x436/0x2890 [ 266.015774][ T8634] ? lock_acquire+0x179/0x330 [ 266.015796][ T8634] ? lock_acquire+0x179/0x330 [ 266.015827][ T8634] ? arch_stack_walk+0xa6/0x100 [ 266.015854][ T8634] ? stack_trace_save+0x8e/0xc0 [ 266.015870][ T8634] ? __pfx_stack_trace_save+0x10/0x10 [ 266.015886][ T8634] ? stack_depot_save_flags+0x29/0x9b0 [ 266.015911][ T8634] ? __lock_acquire+0x436/0x2890 [ 266.015930][ T8634] ? kasan_save_stack+0x42/0x60 [ 266.015981][ T8634] ? proc_coredump_connector+0x2d1/0x4f0 [ 266.016000][ T8634] ? __pfx_proc_coredump_connector+0x10/0x10 [ 266.016023][ T8634] ? rcu_is_watching+0x12/0xc0 [ 266.016040][ T8634] get_signal+0x22e1/0x26d0 [ 266.016071][ T8634] ? __pfx_get_signal+0x10/0x10 [ 266.016099][ T8634] arch_do_signal_or_restart+0x8f/0x7e0 [ 266.016120][ T8634] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 266.016147][ T8634] ? __bad_area_nosemaphore+0x350/0x690 [ 266.016172][ T8634] irqentry_exit+0x38a/0x8c0 [ 266.016195][ T8634] asm_exc_page_fault+0x26/0x30 [ 266.016208][ T8634] RIP: 0033:0x7f765e18f751 [ 266.016221][ T8634] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 266.016234][ T8634] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 266.016247][ T8634] RAX: 0000000000000000 RBX: 00007f765e3e6180 RCX: 00007f765e18f749 [ 266.016261][ T8634] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 266.016270][ T8634] RBP: 00007f765e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.016279][ T8634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 266.016287][ T8634] R13: 00007f765e3e6218 R14: 00007f765e3e6180 R15: 00007ffc3f613ce8 [ 266.016309][ T8634] [ 266.016316][ T8634] memory: usage 307200kB, limit 307200kB, failcnt 30935 [ 266.537982][ T8634] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 266.546508][ T8634] kmem: usage 9800kB, limit 9007199254740988kB, failcnt 0 [ 266.554235][ T8634] Memory cgroup stats for /syz0: [ 266.554472][ T8634] cache 304521216 [ 266.564749][ T8634] rss 0 [ 266.567517][ T8634] rss_huge 0 [ 266.570699][ T8634] shmem 304422912 [ 266.574962][ T8634] mapped_file 10539008 [ 266.579018][ T8634] dirty 0 [ 266.582565][ T8634] writeback 0 [ 266.585838][ T8634] workingset_refault_anon 509 [ 266.590512][ T8634] workingset_refault_file 3294 [ 266.595924][ T8634] swap 127803392 [ 266.599460][ T8634] swapcached 4096 [ 266.603701][ T8634] pgpgin 353291 [ 266.607150][ T8634] pgpgout 279455 [ 266.610684][ T8634] pgfault 154606 [ 266.614848][ T8634] pgmajfault 134 [ 266.618387][ T8634] inactive_anon 17510400 [ 266.623233][ T8634] active_anon 286916608 [ 266.627377][ T8634] inactive_file 73728 [ 266.631346][ T8634] active_file 0 [ 266.635418][ T8634] unevictable 0 [ 266.638871][ T8634] hierarchical_memory_limit 314572800 [ 266.644854][ T8634] hierarchical_memsw_limit 9223372036854771712 [ 266.650998][ T8634] total_cache 304521216 [ 266.655759][ T8634] total_rss 0 [ 266.659027][ T8634] total_rss_huge 0 [ 266.664117][ T8634] total_shmem 304422912 [ 266.668253][ T8634] total_mapped_file 10539008 [ 266.673339][ T8634] total_dirty 0 [ 266.676775][ T8634] total_writeback 0 [ 266.680559][ T8634] total_workingset_refault_anon 509 [ 266.686291][ T8634] total_workingset_refault_file 3294 [ 266.692075][ T8634] total_swap 127803392 [ 266.696121][ T8634] total_swapcached 4096 [ 266.700252][ T8634] total_pgpgin 353291 [ 266.704727][ T8634] total_pgpgout 279455 [ 266.708773][ T8634] total_pgfault 154606 [ 266.713334][ T8634] total_pgmajfault 134 [ 266.717384][ T8634] total_inactive_anon 17510400 [ 266.722691][ T8634] total_active_anon 286916608 [ 266.727343][ T8634] total_inactive_file 73728 [ 266.732330][ T8634] total_active_file 0 [ 266.736287][ T8634] total_unevictable 0 [ 266.740243][ T8634] anon_cost 0 [ 266.743608][ T8634] file_cost 0 [ 266.746871][ T8634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.627,pid=8631,uid=0 [ 266.762812][ T8634] Memory cgroup out of memory: Killed process 8631 (syz.0.627) total-vm:100192kB, anon-rss:1144kB, file-rss:55540kB, shmem-rss:8580kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 269.281217][ T32] oom_reaper: reaped process 8631 (syz.0.627), now anon-rss:124kB, file-rss:55540kB, shmem-rss:8580kB [ 271.321555][ T5927] usb 4-1: device descriptor read/64, error -110 [ 273.415931][ T8633] syz.0.627 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 273.427853][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.427878][ T8633] Tainted: [L]=SOFTLOCKUP [ 273.427883][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.427892][ T8633] Call Trace: [ 273.427897][ T8633] [ 273.427902][ T8633] dump_stack_lvl+0x16c/0x1f0 [ 273.427926][ T8633] dump_header+0x101/0x960 [ 273.427953][ T8633] oom_kill_process+0x176/0x910 [ 273.427978][ T8633] out_of_memory+0x350/0x1700 [ 273.428001][ T8633] ? __lock_acquire+0x436/0x2890 [ 273.428021][ T8633] ? __pfx_out_of_memory+0x10/0x10 [ 273.428050][ T8633] mem_cgroup_out_of_memory+0x118/0x130 [ 273.428065][ T8633] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 273.428085][ T8633] ? do_raw_spin_unlock+0x172/0x230 [ 273.428109][ T8633] try_charge_memcg+0x695/0xd30 [ 273.428132][ T8633] ? __pfx_try_charge_memcg+0x10/0x10 [ 273.428152][ T8633] ? __print_lock_name+0xd1/0xe0 [ 273.428174][ T8633] ? rcu_read_unlock+0x17/0x60 [ 273.428201][ T8633] charge_memcg+0x8a/0x230 [ 273.428220][ T8633] __mem_cgroup_charge+0x2b/0x1e0 [ 273.428243][ T8633] filemap_add_folio+0xe6/0x610 [ 273.428258][ T8633] ? __pfx_filemap_add_folio+0x10/0x10 [ 273.428279][ T8633] __filemap_get_folio_mpol+0x511/0xc60 [ 273.428299][ T8633] filemap_fault+0x684/0x29d0 [ 273.428318][ T8633] ? __pfx_filemap_fault+0x10/0x10 [ 273.428343][ T8633] ? __pfx_filemap_map_pages+0x10/0x10 [ 273.428355][ T8633] __do_fault+0x10d/0x490 [ 273.428372][ T8633] ? __pfx_filemap_map_pages+0x10/0x10 [ 273.428384][ T8633] do_fault+0xae4/0x1ad0 [ 273.428402][ T8633] ? __pfx_filemap_map_pages+0x10/0x10 [ 273.428419][ T8633] __handle_mm_fault+0x1919/0x2bb0 [ 273.428447][ T8633] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.428471][ T8633] ? __pte_offset_map_lock+0x174/0x310 [ 273.428489][ T8633] ? find_held_lock+0x2b/0x80 [ 273.428522][ T8633] ? follow_page_pte+0x5cf/0x1390 [ 273.428546][ T8633] handle_mm_fault+0x3fe/0xad0 [ 273.428572][ T8633] __get_user_pages+0x54e/0x3590 [ 273.428600][ T8633] ? __pfx___get_user_pages+0x10/0x10 [ 273.428619][ T8633] ? __kernel_write_iter+0x5a5/0xb10 [ 273.428642][ T8633] get_dump_page+0x257/0x3d0 [ 273.428662][ T8633] ? __pfx_get_dump_page+0x10/0x10 [ 273.428682][ T8633] ? dump_user_range+0x756/0xb70 [ 273.428708][ T8633] dump_user_range+0x195/0xb70 [ 273.428735][ T8633] ? __pfx_dump_user_range+0x10/0x10 [ 273.428759][ T8633] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 273.428780][ T8633] ? __pfx_writenote+0x10/0x10 [ 273.428800][ T8633] elf_core_dump+0x29c3/0x3c10 [ 273.428826][ T8633] ? __pfx_elf_core_dump+0x10/0x10 [ 273.428838][ T8633] ? kasan_save_stack+0x33/0x60 [ 273.428854][ T8633] ? kasan_save_track+0x14/0x30 [ 273.428870][ T8633] ? __kasan_kmalloc+0xaa/0xb0 [ 273.428884][ T8633] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 273.428901][ T8633] ? vfs_coredump+0x1dd9/0x55e0 [ 273.428922][ T8633] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 273.428941][ T8633] ? irqentry_exit+0x38a/0x8c0 [ 273.428959][ T8633] ? asm_exc_page_fault+0x26/0x30 [ 273.428978][ T8633] ? 0xffffffffff600000 [ 273.429027][ T8633] ? vfs_coredump+0x2b85/0x55e0 [ 273.429048][ T8633] vfs_coredump+0x2b85/0x55e0 [ 273.429078][ T8633] ? __pfx_vfs_coredump+0x10/0x10 [ 273.429099][ T8633] ? __lock_acquire+0x436/0x2890 [ 273.429121][ T8633] ? __lock_acquire+0x436/0x2890 [ 273.429139][ T8633] ? lock_acquire+0x179/0x330 [ 273.429161][ T8633] ? lock_acquire+0x179/0x330 [ 273.429192][ T8633] ? arch_stack_walk+0xa6/0x100 [ 273.429219][ T8633] ? stack_trace_save+0x8e/0xc0 [ 273.429235][ T8633] ? __pfx_stack_trace_save+0x10/0x10 [ 273.429252][ T8633] ? stack_depot_save_flags+0x29/0x9b0 [ 273.429275][ T8633] ? __lock_acquire+0x436/0x2890 [ 273.429294][ T8633] ? kasan_save_stack+0x42/0x60 [ 273.429345][ T8633] ? proc_coredump_connector+0x2d1/0x4f0 [ 273.429364][ T8633] ? __pfx_proc_coredump_connector+0x10/0x10 [ 273.429387][ T8633] ? rcu_is_watching+0x12/0xc0 [ 273.429404][ T8633] get_signal+0x22e1/0x26d0 [ 273.429434][ T8633] ? __pfx_get_signal+0x10/0x10 [ 273.429462][ T8633] arch_do_signal_or_restart+0x8f/0x7e0 [ 273.429484][ T8633] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.429515][ T8633] ? __bad_area_nosemaphore+0x350/0x690 [ 273.429540][ T8633] irqentry_exit+0x38a/0x8c0 [ 273.429561][ T8633] asm_exc_page_fault+0x26/0x30 [ 273.429574][ T8633] RIP: 0033:0x7f765e18f751 [ 273.429587][ T8633] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 273.429601][ T8633] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 273.429613][ T8633] RAX: 0000000000000000 RBX: 00007f765e3e6180 RCX: 00007f765e18f749 [ 273.429622][ T8633] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 273.429631][ T8633] RBP: 00007f765e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.429639][ T8633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.429648][ T8633] R13: 00007f765e3e6218 R14: 00007f765e3e6180 R15: 00007ffc3f613ce8 [ 273.429669][ T8633] [ 273.429674][ T8633] memory: usage 307200kB, limit 307200kB, failcnt 51908 [ 273.921565][ T8633] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 273.929440][ T8633] kmem: usage 9752kB, limit 9007199254740988kB, failcnt 0 [ 273.937744][ T8633] Memory cgroup stats for /syz0: [ 273.937846][ T8633] cache 304582656 [ 273.946376][ T8633] rss 0 [ 273.949114][ T8633] rss_huge 0 [ 273.952327][ T8633] shmem 304574464 [ 273.956025][ T8633] mapped_file 10534912 [ 273.960066][ T8633] dirty 0 [ 273.962992][ T8633] writeback 0 [ 273.966254][ T8633] workingset_refault_anon 509 [ 273.970900][ T8633] workingset_refault_file 3638 [ 273.975654][ T8633] swap 127795200 [ 273.979173][ T8633] swapcached 4096 [ 273.982789][ T8633] pgpgin 353672 [ 273.986224][ T8633] pgpgout 279821 [ 273.989742][ T8633] pgfault 154644 [ 273.993327][ T8633] pgmajfault 171 [ 273.996855][ T8633] inactive_anon 17600512 [ 274.001068][ T8633] active_anon 286978048 [ 274.005423][ T8633] inactive_file 8192 [ 274.009293][ T8633] active_file 0 [ 274.012747][ T8633] unevictable 0 [ 274.016181][ T8633] hierarchical_memory_limit 314572800 [ 274.021563][ T8633] hierarchical_memsw_limit 9223372036854771712 [ 274.027698][ T8633] total_cache 304582656 [ 274.031859][ T8633] total_rss 0 [ 274.036019][ T8633] total_rss_huge 0 [ 274.039720][ T8633] total_shmem 304574464 [ 274.043885][ T8633] total_mapped_file 10534912 [ 274.048457][ T8633] total_dirty 0 [ 274.051926][ T8633] total_writeback 0 [ 274.055711][ T8633] total_workingset_refault_anon 509 [ 274.060882][ T8633] total_workingset_refault_file 3638 [ 274.066162][ T8633] total_swap 127795200 [ 274.070218][ T8633] total_swapcached 4096 [ 274.074380][ T8633] total_pgpgin 353672 [ 274.078337][ T8633] total_pgpgout 279821 [ 274.082408][ T8633] total_pgfault 154644 [ 274.086452][ T8633] total_pgmajfault 171 [ 274.090499][ T8633] total_inactive_anon 17600512 [ 274.095254][ T8633] total_active_anon 286978048 [ 274.099905][ T8633] total_inactive_file 8192 [ 274.104306][ T8633] total_active_file 0 [ 274.108275][ T8633] total_unevictable 0 [ 274.112248][ T8633] anon_cost 0 [ 274.115508][ T8633] file_cost 0 [ 274.118767][ T8633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.627,pid=8629,uid=0 [ 274.133426][ T8633] Memory cgroup out of memory: Killed process 8629 (syz.0.627) total-vm:100192kB, anon-rss:1144kB, file-rss:55540kB, shmem-rss:3716kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 274.477906][ T6251] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.727016][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.491472][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 379.498531][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P789/1:b..l P5828/1:b..l P8620/1:b..l [ 379.509032][ C1] rcu: (detected by 1, t=10503 jiffies, g=24365, q=1108 ncpus=2) [ 379.516841][ C1] task:syz.0.627 state:R running task stack:24312 pid:8620 tgid:8618 ppid:5828 task_flags:0x400840 flags:0x00080000 [ 379.531242][ C1] Call Trace: [ 379.534537][ C1] [ 379.537477][ C1] ? __schedule+0x10b9/0x6150 [ 379.542157][ C1] __schedule+0x1139/0x6150 [ 379.546672][ C1] ? __pfx___schedule+0x10/0x10 [ 379.551524][ C1] ? mark_held_locks+0x49/0x80 [ 379.556283][ C1] preempt_schedule_irq+0x51/0x90 [ 379.561304][ C1] irqentry_exit+0x1d8/0x8c0 [ 379.565896][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.571873][ C1] RIP: 0010:__rcu_read_unlock+0x63/0x5a0 [ 379.577504][ C1] Code: 7c 08 84 d2 0f 85 45 02 00 00 65 4c 8b 25 ad 6f 0e 12 49 8d bc 24 84 04 00 00 8b 9d 84 04 00 00 48 b8 00 00 00 00 00 fc ff df <48> 89 fa 48 c1 ea 03 83 eb 01 0f b6 14 02 48 89 f8 83 e0 07 83 c0 [ 379.597198][ C1] RSP: 0018:ffffc9000e676e58 EFLAGS: 00000246 [ 379.603270][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc9000e676e44 [ 379.611238][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffff888049438484 [ 379.619206][ C1] RBP: ffff888049438000 R08: 0000000000000001 R09: 0000000000000000 [ 379.627176][ C1] R10: 0000000000000001 R11: ffff888049438b30 R12: ffff888049438000 [ 379.635154][ C1] R13: ffffed102808c338 R14: dffffc0000000000 R15: ffff88814bde1800 [ 379.643137][ C1] shrink_slab+0x78a/0x12b0 [ 379.647652][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 379.652588][ C1] ? __pfx___might_resched+0x10/0x10 [ 379.657866][ C1] ? page_counter_calculate_protection+0x23/0x720 [ 379.664283][ C1] ? mem_cgroup_iter+0x38a/0x710 [ 379.669224][ C1] shrink_node+0x918/0x3bb0 [ 379.673755][ C1] ? __pfx_shrink_node+0x10/0x10 [ 379.678791][ C1] ? queue_work_on+0x12a/0x1f0 [ 379.683728][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.688927][ C1] ? queue_work_on+0x8b/0x1f0 [ 379.693691][ C1] ? vmpressure+0x2b9/0x340 [ 379.698202][ C1] ? do_try_to_free_pages+0x362/0x1920 [ 379.703666][ C1] do_try_to_free_pages+0x362/0x1920 [ 379.709066][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 379.714792][ C1] ? find_held_lock+0x2b/0x80 [ 379.719475][ C1] try_to_free_mem_cgroup_pages+0x31b/0x740 [ 379.725362][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 379.731792][ C1] ? psi_memstall_enter+0x225/0x310 [ 379.736999][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.742211][ C1] try_charge_memcg+0x42a/0xd30 [ 379.747080][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 379.752456][ C1] ? peak_open+0x21/0x50 [ 379.756712][ C1] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 379.762431][ C1] __memcg_kmem_charge_page+0xda/0x420 [ 379.767924][ C1] __alloc_frozen_pages_noprof+0x323/0x2430 [ 379.773814][ C1] ? page_table_check_set+0x7e7/0xa40 [ 379.779185][ C1] ? xas_move_index+0xb0/0x110 [ 379.783953][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 379.788988][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.795315][ C1] ? mark_held_locks+0x49/0x80 [ 379.800103][ C1] ? find_held_lock+0x2b/0x80 [ 379.804795][ C1] ? filemap_map_pages+0x1260/0x1e00 [ 379.810093][ C1] ? filemap_map_pages+0x12dd/0x1e00 [ 379.815556][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.821457][ C1] ? policy_nodemask+0xea/0x4e0 [ 379.826309][ C1] alloc_pages_mpol+0x1fb/0x550 [ 379.831165][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.836537][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 379.841314][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.846530][ C1] alloc_pages_noprof+0x131/0x390 [ 379.851554][ C1] pte_alloc_one+0x1e/0x3d0 [ 379.856059][ C1] do_fault+0x8b8/0x1ad0 [ 379.860301][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 379.865760][ C1] __handle_mm_fault+0x1919/0x2bb0 [ 379.870882][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 379.876427][ C1] ? folio_mark_accessed+0xc1/0xbf0 [ 379.881622][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 379.887246][ C1] ? find_held_lock+0x2b/0x80 [ 379.891940][ C1] handle_mm_fault+0x3fe/0xad0 [ 379.896711][ C1] __get_user_pages+0x54e/0x3590 [ 379.901656][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 379.907035][ C1] populate_vma_page_range+0x267/0x3f0 [ 379.912493][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 379.918473][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 379.924288][ C1] __mm_populate+0x1d8/0x380 [ 379.928888][ C1] ? __pfx___mm_populate+0x10/0x10 [ 379.934001][ C1] ? up_write+0x2cf/0x4e0 [ 379.938331][ C1] vm_mmap_pgoff+0x37f/0x470 [ 379.942927][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 379.948032][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 379.954440][ C1] ? count_memcg_events+0x122/0x290 [ 379.959636][ C1] ? find_held_lock+0x2b/0x80 [ 379.964328][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 379.969012][ C1] __x64_sys_mmap+0x125/0x190 [ 379.973688][ C1] do_syscall_64+0xcd/0xf80 [ 379.978196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.984122][ C1] RIP: 0033:0x7f765e18f749 [ 379.988540][ C1] RSP: 002b:00007f765ef81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 379.996944][ C1] RAX: ffffffffffffffda RBX: 00007f765e3e6090 RCX: 00007f765e18f749 [ 380.004909][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 380.012880][ C1] RBP: 00007f765e213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 380.020846][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 380.028810][ C1] R13: 00007f765e3e6128 R14: 00007f765e3e6090 R15: 00007ffc3f613ce8 [ 380.036792][ C1] [ 380.039805][ C1] task:syz-executor state:R running task stack:23640 pid:5828 tgid:5828 ppid:1 task_flags:0x400940 flags:0x00080002 [ 380.053289][ C1] Call Trace: [ 380.056562][ C1] [ 380.059572][ C1] ? __schedule+0x10b9/0x6150 [ 380.064248][ C1] __schedule+0x1139/0x6150 [ 380.068751][ C1] ? kfree+0x27d/0x6e0 [ 380.072826][ C1] ? __pfx___schedule+0x10/0x10 [ 380.077681][ C1] ? mark_held_locks+0x49/0x80 [ 380.082442][ C1] preempt_schedule_irq+0x51/0x90 [ 380.087465][ C1] irqentry_exit+0x1d8/0x8c0 [ 380.092080][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.098068][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 380.103265][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b9 ee 0e 0f 82 74 02 00 00 8b 35 0a ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 380.122875][ C1] RSP: 0018:ffffc900033669b8 EFLAGS: 00000206 [ 380.128948][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000013d622c6 [ 380.137003][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffffffff8bf2b400 [ 380.144985][ C1] RBP: 0000000000000002 R08: 00000000accd7842 R09: 000000002accd784 [ 380.152963][ C1] R10: 0000000000000002 R11: ffff8880266cd4b0 R12: 0000000000000000 [ 380.160948][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.168950][ C1] ? shrink_slab+0x9f4/0x12b0 [ 380.173644][ C1] shrink_slab+0x897/0x12b0 [ 380.178146][ C1] ? shrink_slab+0x7fd/0x12b0 [ 380.182821][ C1] ? shrink_slab+0x7fd/0x12b0 [ 380.187502][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 380.192443][ C1] ? __pfx___might_resched+0x10/0x10 [ 380.197723][ C1] ? page_counter_calculate_protection+0x23/0x720 [ 380.204142][ C1] ? mem_cgroup_iter+0x38a/0x710 [ 380.209083][ C1] shrink_node+0x918/0x3bb0 [ 380.213613][ C1] ? find_held_lock+0x2b/0x80 [ 380.218302][ C1] ? __pfx_shrink_node+0x10/0x10 [ 380.223249][ C1] ? queue_work_on+0x12a/0x1f0 [ 380.228011][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.233205][ C1] ? queue_work_on+0x8b/0x1f0 [ 380.237886][ C1] ? vmpressure+0x2b9/0x340 [ 380.242399][ C1] ? do_try_to_free_pages+0x362/0x1920 [ 380.247858][ C1] do_try_to_free_pages+0x362/0x1920 [ 380.253158][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 380.258888][ C1] try_to_free_mem_cgroup_pages+0x31b/0x740 [ 380.264777][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 380.271207][ C1] ? psi_memstall_enter+0x225/0x310 [ 380.276395][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.281596][ C1] try_charge_memcg+0x42a/0xd30 [ 380.286453][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 380.291832][ C1] ? find_held_lock+0x2b/0x80 [ 380.296512][ C1] charge_memcg+0x8a/0x230 [ 380.300930][ C1] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 380.306918][ C1] __read_swap_cache_async+0x397/0x500 [ 380.312376][ C1] ? __pfx___read_swap_cache_async+0x10/0x10 [ 380.318358][ C1] ? __lock_acquire+0x436/0x2890 [ 380.323304][ C1] swap_cluster_readahead+0x432/0x770 [ 380.328680][ C1] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 380.334569][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 380.339761][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 380.344525][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.350672][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 380.355877][ C1] ? get_vma_policy+0x242/0x3c0 [ 380.360734][ C1] swapin_readahead+0x160/0x1220 [ 380.365712][ C1] ? __pfx_swapin_readahead+0x10/0x10 [ 380.371257][ C1] ? find_held_lock+0x2b/0x80 [ 380.375937][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 380.381305][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 380.386678][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 380.392045][ C1] ? swap_cache_get_folio+0x267/0x8e0 [ 380.397412][ C1] ? swap_cache_get_folio+0x293/0x8e0 [ 380.402779][ C1] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 380.408491][ C1] ? __pfx_get_swap_device+0x10/0x10 [ 380.413772][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 380.418534][ C1] ? do_swap_page+0x962/0x64a0 [ 380.423299][ C1] do_swap_page+0x962/0x64a0 [ 380.427895][ C1] ? __lock_acquire+0x436/0x2890 [ 380.432827][ C1] ? lock_acquire+0x179/0x330 [ 380.437510][ C1] ? __pfx_do_swap_page+0x10/0x10 [ 380.442543][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 380.448367][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.453126][ C1] ? ___pte_offset_map+0x175/0x380 [ 380.458411][ C1] __handle_mm_fault+0x19cb/0x2bb0 [ 380.463531][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 380.469006][ C1] ? find_vma+0xbf/0x140 [ 380.473253][ C1] ? __pfx_find_vma+0x10/0x10 [ 380.477930][ C1] ? lock_acquire+0x179/0x330 [ 380.482606][ C1] handle_mm_fault+0x3fe/0xad0 [ 380.487376][ C1] do_user_addr_fault+0x7a6/0x1370 [ 380.492488][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.497247][ C1] exc_page_fault+0x64/0xc0 [ 380.501748][ C1] asm_exc_page_fault+0x26/0x30 [ 380.506587][ C1] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 380.512396][ C1] Code: c9 75 f6 e9 d2 8d 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 380.532000][ C1] RSP: 0018:ffffc90003367ad8 EFLAGS: 00050246 [ 380.538067][ C1] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000040 [ 380.546030][ C1] RDX: ffff8880266cc980 RSI: ffffffff8162ad8e RDI: 00007ffc3f6136c0 [ 380.553998][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 00000000ffffffff [ 380.561960][ C1] R10: 0000000000000001 R11: ffff8880266cd4b0 R12: 00007ffc3f6134c0 [ 380.569921][ C1] R13: ffff8880266ce380 R14: 00007ffc3f6134c0 R15: 00007ffffffff000 [ 380.577892][ C1] ? copy_fpstate_to_sigframe+0x15e/0xad0 [ 380.583622][ C1] copy_fpstate_to_sigframe+0x178/0xad0 [ 380.589178][ C1] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 380.595262][ C1] ? x86_task_fpu+0x5f/0x90 [ 380.599771][ C1] get_sigframe+0x4a8/0x9c0 [ 380.604280][ C1] ? __pfx_get_sigframe+0x10/0x10 [ 380.609307][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 380.614678][ C1] ? siginfo_layout+0x177/0x290 [ 380.619534][ C1] x64_setup_rt_frame+0x129/0xcf0 [ 380.624574][ C1] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 380.630119][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 380.635590][ C1] arch_do_signal_or_restart+0x5da/0x7e0 [ 380.641225][ C1] ? get_timespec64+0x147/0x240 [ 380.646075][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 380.652236][ C1] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 380.658048][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 380.663336][ C1] do_syscall_64+0x4ee/0xf80 [ 380.667935][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.673821][ C1] RIP: 0033:0x7f765e1c2005 [ 380.678232][ C1] RSP: 002b:00007ffc3f614000 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 380.686636][ C1] RAX: 0000000000000000 RBX: 00000000000001de RCX: 00007f765e1c2005 [ 380.694614][ C1] RDX: 00007ffc3f614040 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.702578][ C1] RBP: 00007ffc3f6140ac R08: 0000000000000000 R09: 0000000000000000 [ 380.710541][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 380.718504][ C1] R13: 00000000000927c0 R14: 000000000003eeeb R15: 00007ffc3f614100 [ 380.726480][ C1] [ 380.729492][ C1] task:kworker/0:2 state:R running task stack:24904 pid:789 tgid:789 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 380.743072][ C1] Workqueue: events_power_efficient gc_worker [ 380.749147][ C1] Call Trace: [ 380.752423][ C1] [ 380.755355][ C1] ? __schedule+0x10b9/0x6150 [ 380.760058][ C1] __schedule+0x1139/0x6150 [ 380.764589][ C1] ? __pfx___schedule+0x10/0x10 [ 380.769445][ C1] ? mark_held_locks+0x49/0x80 [ 380.774217][ C1] preempt_schedule_irq+0x51/0x90 [ 380.779248][ C1] irqentry_exit+0x1d8/0x8c0 [ 380.783846][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 380.789825][ C1] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 380.794944][ C1] Code: 00 00 48 c7 c7 a8 61 89 90 e8 37 ee 05 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c5 da 2a f8 58 48 85 db 0f 85 d4 0f 00 00 e6 df 2a f8 8b 1d 10 5b f5 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 380.814551][ C1] RSP: 0018:ffffc90003637ad8 EFLAGS: 00000293 [ 380.820706][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff899411c9 [ 380.828676][ C1] RDX: ffff888025bfa4c0 RSI: ffffffff899411d8 RDI: 0000000000000007 [ 380.836642][ C1] RBP: ffffffff9b0a38ac R08: 0000000000000007 R09: 0000000000000000 [ 380.844695][ C1] R10: 0000000000000000 R11: ffff888025bfaff0 R12: ffff888025200000 [ 380.852663][ C1] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001945 [ 380.860645][ C1] ? gc_worker+0xe19/0x16e0 [ 380.865154][ C1] ? gc_worker+0xe28/0x16e0 [ 380.869659][ C1] ? gc_worker+0xe28/0x16e0 [ 380.874163][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 380.879798][ C1] ? __pfx_gc_worker+0x10/0x10 [ 380.884567][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.889326][ C1] process_one_work+0x9ba/0x1b20 [ 380.894267][ C1] ? __pfx_psi_avgs_work+0x10/0x10 [ 380.899415][ C1] ? __pfx_process_one_work+0x10/0x10 [ 380.904795][ C1] ? assign_work+0x1a0/0x250 [ 380.909385][ C1] worker_thread+0x6c8/0xf10 [ 380.913993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.919102][ C1] kthread+0x3c5/0x780 [ 380.923168][ C1] ? __pfx_kthread+0x10/0x10 [ 380.927757][ C1] ? rcu_is_watching+0x12/0xc0 [ 380.932511][ C1] ? __pfx_kthread+0x10/0x10 [ 380.937099][ C1] ret_from_fork+0x983/0xb10 [ 380.941689][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 380.946801][ C1] ? __switch_to+0x7af/0x10d0 [ 380.951478][ C1] ? __pfx_kthread+0x10/0x10 [ 380.956072][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.961113][ C1] [ 380.964123][ C1] rcu: rcu_preempt kthread starved for 10649 jiffies! g24365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 380.975306][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 380.985265][ C1] rcu: RCU grace-period kthread stack dump: [ 380.991138][ C1] task:rcu_preempt state:R running task stack:28424 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 381.004684][ C1] Call Trace: [ 381.007956][ C1] [ 381.010879][ C1] ? __schedule+0x10b9/0x6150 [ 381.015554][ C1] __schedule+0x1139/0x6150 [ 381.020050][ C1] ? __lock_acquire+0x436/0x2890 [ 381.024989][ C1] ? __mod_timer+0x8f2/0xd30 [ 381.029586][ C1] ? __pfx___schedule+0x10/0x10 [ 381.034435][ C1] ? find_held_lock+0x2b/0x80 [ 381.039121][ C1] ? schedule+0x2d7/0x3a0 [ 381.043451][ C1] schedule+0xe7/0x3a0 [ 381.047521][ C1] schedule_timeout+0x123/0x290 [ 381.052376][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 381.057839][ C1] ? __pfx_process_timeout+0x10/0x10 [ 381.063125][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 381.068929][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 381.074388][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 381.079161][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 381.084445][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.089644][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 381.094579][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 381.099437][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 381.105244][ C1] rcu_gp_kthread+0x26d/0x380 [ 381.109922][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.115153][ C1] ? rcu_is_watching+0x12/0xc0 [ 381.119912][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.125110][ C1] ? __kthread_parkme+0x19e/0x250 [ 381.130139][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 381.135337][ C1] kthread+0x3c5/0x780 [ 381.139407][ C1] ? __pfx_kthread+0x10/0x10 [ 381.143999][ C1] ? rcu_is_watching+0x12/0xc0 [ 381.148759][ C1] ? __pfx_kthread+0x10/0x10 [ 381.153354][ C1] ret_from_fork+0x983/0xb10 [ 381.157948][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 381.163058][ C1] ? __switch_to+0x7af/0x10d0 [ 381.167739][ C1] ? __pfx_kthread+0x10/0x10 [ 381.172345][ C1] ret_from_fork_asm+0x1a/0x30 [ 381.177128][ C1] [ 381.180139][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 381.186450][ C1] Sending NMI from CPU 1 to CPUs 0: [ 381.191649][ C0] NMI backtrace for cpu 0 [ 381.191664][ C0] CPU: 0 UID: 0 PID: 8634 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.191685][ C0] Tainted: [L]=SOFTLOCKUP [ 381.191690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.191699][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 381.191720][ C0] Code: 24 65 48 8b 15 98 c9 f3 11 65 8b 05 a9 c9 f3 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 <8b> 82 6c 16 00 00 85 c0 74 2b 8b 82 48 16 00 00 83 f8 02 75 20 48 [ 381.191735][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00000246 [ 381.191747][ C0] RAX: 0000000080000101 RBX: ffffc9001d128990 RCX: ffffffff897edf4d [ 381.191757][ C0] RDX: ffff88804e1aa4c0 RSI: ffffffff897edf57 RDI: 0000000000000007 [ 381.191767][ C0] RBP: ffff8880785fdac0 R08: 0000000000000007 R09: 0000000000000000 [ 381.191777][ C0] R10: 0000000000000000 R11: ffff88804e1aaff0 R12: 0000000000000000 [ 381.191786][ C0] R13: 0000000000000000 R14: fffffff0a3da8872 R15: 0000000000000000 [ 381.191795][ C0] FS: 00007f765ef606c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 381.191811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.191821][ C0] CR2: 00007f9f2e9e7dac CR3: 000000003f6f2000 CR4: 00000000003526f0 [ 381.191831][ C0] Call Trace: [ 381.191837][ C0] [ 381.191842][ C0] pie_calculate_probability+0x397/0x850 [ 381.191863][ C0] fq_pie_timer+0x21e/0x5b0 [ 381.191880][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 381.191895][ C0] call_timer_fn+0x19a/0x5a0 [ 381.191912][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 381.191931][ C0] ? mark_held_locks+0x49/0x80 [ 381.191949][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 381.191964][ C0] __run_timers+0x74a/0xae0 [ 381.191983][ C0] ? __pfx___run_timers+0x10/0x10 [ 381.192006][ C0] run_timer_base+0x114/0x190 [ 381.192023][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 381.192041][ C0] run_timer_softirq+0x1a/0x40 [ 381.192057][ C0] handle_softirqs+0x219/0x950 [ 381.192080][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 381.192101][ C0] __irq_exit_rcu+0x109/0x170 [ 381.192120][ C0] irq_exit_rcu+0x9/0x30 [ 381.192140][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 381.192160][ C0] [ 381.192164][ C0] [ 381.192170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.192186][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 381.192202][ C0] Code: e9 4d 1b 5e 00 be 03 00 00 00 5b e9 72 df ed 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 98 c9 f3 11 65 8b 05 a9 c9 f3 11 a9 00 01 ff 00 74 1d [ 381.192215][ C0] RSP: 0018:ffffc9000e736440 EFLAGS: 00000202 [ 381.192225][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8201d05a [ 381.192234][ C0] RDX: ffff88804e1aa4c0 RSI: ffffffff8201cdd7 RDI: 0000000000000001 [ 381.192244][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 381.192252][ C0] R10: 0000000000000001 R11: ffff88804e1aaff0 R12: 0000000000000000 [ 381.192261][ C0] R13: 0000000000000001 R14: ffff88801cb13b00 R15: ffff888034be8000 [ 381.192274][ C0] ? do_shrink_slab+0x8ba/0x1130 [ 381.192289][ C0] ? do_shrink_slab+0x637/0x1130 [ 381.192305][ C0] do_shrink_slab+0x637/0x1130 [ 381.192323][ C0] shrink_slab+0xa1f/0x12b0 [ 381.192339][ C0] ? shrink_slab+0x7fd/0x12b0 [ 381.192354][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 381.192371][ C0] ? __pfx___might_resched+0x10/0x10 [ 381.192384][ C0] ? page_counter_calculate_protection+0x23/0x720 [ 381.192407][ C0] ? mem_cgroup_iter+0x38a/0x710 [ 381.192425][ C0] shrink_node+0x918/0x3bb0 [ 381.192445][ C0] ? __lock_acquire+0x436/0x2890 [ 381.192466][ C0] ? __pfx_shrink_node+0x10/0x10 [ 381.192487][ C0] ? queue_work_on+0x12a/0x1f0 [ 381.192505][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.192522][ C0] ? queue_work_on+0x8b/0x1f0 [ 381.192540][ C0] ? vmpressure+0x2b9/0x340 [ 381.192562][ C0] ? do_try_to_free_pages+0x362/0x1920 [ 381.192583][ C0] do_try_to_free_pages+0x362/0x1920 [ 381.192610][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 381.192635][ C0] try_to_free_mem_cgroup_pages+0x31b/0x740 [ 381.192656][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 381.192675][ C0] ? psi_memstall_enter+0x225/0x310 [ 381.192689][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.192707][ C0] try_charge_memcg+0x42a/0xd30 [ 381.192727][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 381.192745][ C0] ? __print_lock_name+0xd1/0xe0 [ 381.192766][ C0] ? rcu_read_unlock+0x17/0x60 [ 381.192788][ C0] charge_memcg+0x8a/0x230 [ 381.192806][ C0] __mem_cgroup_charge+0x2b/0x1e0 [ 381.192826][ C0] shmem_alloc_and_add_folio+0x50c/0xc20 [ 381.192850][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 381.192872][ C0] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 381.192895][ C0] shmem_get_folio_gfp+0x67f/0x1610 [ 381.192918][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 381.192941][ C0] ? __pfx_timestamp_truncate+0x10/0x10 [ 381.192963][ C0] shmem_write_begin+0x1a4/0x3b0 [ 381.192978][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 381.192992][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 381.193011][ C0] generic_perform_write+0x3c4/0x900 [ 381.193034][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 381.193054][ C0] ? generic_update_time+0xcf/0xf0 [ 381.193067][ C0] ? mnt_put_write_access_file+0x45/0xf0 [ 381.193086][ C0] ? file_update_time_flags+0x35c/0x520 [ 381.193102][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 381.193117][ C0] shmem_file_write_iter+0x10e/0x140 [ 381.193134][ C0] __kernel_write_iter+0x31a/0xb10 [ 381.193152][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 381.193169][ C0] ? __up_read+0x2d1/0x700 [ 381.193188][ C0] ? dump_user_range+0x756/0xb70 [ 381.193211][ C0] dump_user_range+0x413/0xb70 [ 381.193233][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 381.193254][ C0] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 381.193274][ C0] ? __pfx_writenote+0x10/0x10 [ 381.193290][ C0] elf_core_dump+0x29c3/0x3c10 [ 381.193309][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 381.193322][ C0] ? kasan_save_stack+0x33/0x60 [ 381.193338][ C0] ? kasan_save_track+0x14/0x30 [ 381.193353][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 381.193367][ C0] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 381.193384][ C0] ? vfs_coredump+0x1dd9/0x55e0 [ 381.193403][ C0] ? arch_do_signal_or_restart+0x8f/0x7e0 [ 381.193422][ C0] ? irqentry_exit+0x38a/0x8c0 [ 381.193439][ C0] ? asm_exc_page_fault+0x26/0x30 [ 381.193454][ C0] ? 0xffffffffff600000 [ 381.193481][ C0] ? vfs_coredump+0x2b85/0x55e0 [ 381.193500][ C0] vfs_coredump+0x2b85/0x55e0 [ 381.193524][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 381.193543][ C0] ? __lock_acquire+0x436/0x2890 [ 381.193560][ C0] ? __lock_acquire+0x436/0x2890 [ 381.193576][ C0] ? lock_acquire+0x179/0x330 [ 381.193594][ C0] ? lock_acquire+0x179/0x330 [ 381.193616][ C0] ? arch_stack_walk+0xa6/0x100 [ 381.193636][ C0] ? stack_trace_save+0x8e/0xc0 [ 381.193656][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 381.193672][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 381.193693][ C0] ? __lock_acquire+0x436/0x2890 [ 381.193710][ C0] ? kasan_save_stack+0x42/0x60 [ 381.193742][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 381.193760][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 381.193780][ C0] ? rcu_is_watching+0x12/0xc0 [ 381.193795][ C0] get_signal+0x22e1/0x26d0 [ 381.193819][ C0] ? __pfx_get_signal+0x10/0x10 [ 381.193841][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 381.193861][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 381.193884][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 381.193904][ C0] irqentry_exit+0x38a/0x8c0 [ 381.193922][ C0] asm_exc_page_fault+0x26/0x30 [ 381.193935][ C0] RIP: 0033:0x7f765e18f751 [ 381.193947][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 381.193959][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 381.193970][ C0] RAX: 0000000000000000 RBX: 00007f765e3e6180 RCX: 00007f765e18f749 [ 381.193979][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 381.193988][ C0] RBP: 00007f765e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.193996][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.194005][ C0] R13: 00007f765e3e6218 R14: 00007f765e3e6180 R15: 00007ffc3f613ce8 [ 381.194020][ C0]