last executing test programs: 9.880250745s ago: executing program 4 (id=539): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f0000000040)) 9.044084579s ago: executing program 4 (id=541): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="0000000000e7", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\'', 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x6000000}, "30b00afe4e"}}}}}}}, 0x0) 8.972226517s ago: executing program 4 (id=542): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r2 = syz_pidfd_open(r1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000640)}, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8.263770696s ago: executing program 4 (id=545): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x302, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x7, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000feffffff0800000018000180140002006970766c616e31000000000000000000"], 0x2c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x8014) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 7.402871363s ago: executing program 3 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_open_dev$usbfs(0x0, 0x1, 0x42800) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r5, r5, 0x0, 0xc3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={r7, 0x4}, 0x8) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0103000000000000000011585d0008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) 6.382974592s ago: executing program 1 (id=554): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0xc0000006}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7b}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x3c}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}], 0x6, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) 6.358434282s ago: executing program 3 (id=555): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x8b3a5000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/62}, {&(0x7f0000000240)=""/23}, {&(0x7f0000000740)=""/128}, {&(0x7f00000005c0)=""/254}], 0x0, &(0x7f0000000540)=""/85}, 0xf5}], 0x1014b, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="342a339af7ece7d6460000000906010400000000000000000500ffff0c00078008000a40000000050900020073797a310000000005000100070000007762559c50771230de74cc59b8ee90dd1553a081c0e60b2cbb312eb548e9a950ecf8e0813070e23f16d8b11cd91bc89b9f1ccdab48e220191b01980498f85a919fd13c5a00ab016abb304bed4ad9f673a6502abdd6c35507e63108ed2021c966ac73b2895be3737f250aa4db2ef5c6b346"], 0x34}}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) 6.33094623s ago: executing program 0 (id=556): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x8, 0x2, 0x6, 0x8, 0x1, 0x8, 0xf7, 0xe0, 0xbf, 0x5, 0x6}, {0x1ff, 0xb, 0x2, 0x6, 0x81, 0x5, 0x3, 0x1, 0xf, 0xa, 0xa, 0x3, 0x4faf}, {0x7, 0xb, 0x62, 0x2, 0x9, 0x4b, 0x3a, 0x3, 0x9, 0x9, 0x7, 0x0, 0x1}], 0x1ff}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100404c2}, 0x20000005) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000002000000000000090000003c000380140002007663616e30000000000000000000000008000300000000000800010002000000140006"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x100480c7}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r8, &(0x7f0000000480)=ANY=[], 0x125) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x9c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '}\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20}, 0x20094) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002300)={&(0x7f000000b0c0)=@newchain={0x40, 0x64, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfe9a937e3fb8814e}, {0xc, 0x1}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 6.244236038s ago: executing program 0 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67"], 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x1e, 0x10009c, 0xfffffffffffffffe}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r2, 0x0, 0x3, &(0x7f0000000240)='*$\x00'}, 0x30) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) connect$unix(r5, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="0100000200373a4541062101a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697a793acf37119e", 0x57, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="02030e00d3", 0x5, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 5.320649277s ago: executing program 1 (id=559): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4.611601043s ago: executing program 4 (id=562): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1c5) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlink(&(0x7f0000000180)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x60000a, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 4.592108098s ago: executing program 3 (id=563): socket$kcm(0x2, 0x5, 0x84) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x1, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3, 0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100c53fc0013b0ea84c760c9abb700ea280c0ffa8bf136b50f30bc4f0f1a5b753c40699b365491232232225a4b83d9934a73fce52a56fedd2f29031756586dfd0218e1e0859099497f316c460b6119ba05d2078f29ce9c8c43417ba86596800"/115], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384", 0x7}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = epoll_create(0x2) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0x8, &(0x7f0000000340)={[0x10]}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) pselect6(0x40, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0xa, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x200) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') read$char_usb(r4, 0x0, 0x0) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000500)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r5, 0x7c3f, 0x4fdf, 0x4c, &(0x7f0000000040), 0x8) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 4.35854462s ago: executing program 1 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x18, &(0x7f00000006c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @tail_call, @jmp={0x5, 0x0, 0x4, 0x2, 0x6, 0x100, 0xfffffffffffffffc}, @func, @ldst={0x1, 0x2, 0x1, 0x5, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_fd={0x18, 0x7}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x7, 0x0, 0x0, 0x1}]}, 0x10) socket$unix(0x1, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004940), 0x0, 0xa120, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 3.169736185s ago: executing program 0 (id=566): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) (async) 3.168659049s ago: executing program 2 (id=567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800ec000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x80a, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r4, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x34}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) 3.132400934s ago: executing program 1 (id=568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x20005) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.915942627s ago: executing program 3 (id=569): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x7, 0x0, 0x0, 0x1}]}, 0x10) socket$unix(0x1, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde", 0x35}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004940), 0x0, 0xa120, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 2.865971658s ago: executing program 2 (id=570): socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xffffffffffffffaf}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}]}}]}, 0x38}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x400001, 0x0) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="27a17ce4d23d56acf942555d0aeab9dd5cc971384b44070f7e2cea1367cc464361dfb46ee81c00d2ac92a88d7640d6327f4cc3d2cbc3c6b189bb9048fd74cd27d94c79f4913959aa1b6e5f4e37935fc7972826cf6c9e31fd41e6554366390ab76282d386892af9", 0x67}, {&(0x7f0000000580)="ef8a9787e6eb891ff28cfbb4f71ce374b03adf06d001fdb74df7113b6b8f760434beeaf034e0ee9a7271106a521f0cd80fcae6b1255eb5dfb00e5c3c998dfa978658c4f24e9d65fc6805820a3fee2b1198be35c5611318e2100848c9487a6d0333df394bafbadf54f012e4c1ab1fc5ba846b2fbac74d86502ed1fdd9b86d455deaed16e90c10fb7d027d697106be1e3b3f67bb08afa071789a0c0d8fe21d753dbcda868a67e0d8484db4eb5c266626c1f6d83418073e642a0e19cd74ffd7b68936855af9daa6af807479b39c4c3570b48c353b0b28e0fb7c7f6829c6c09e6e726f02", 0xe2}, {&(0x7f0000000080)="2fec7d9dba0b4bc905e9", 0xa}], 0x3) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.731137759s ago: executing program 4 (id=571): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x100, 0x2, &(0x7f0000000200)=[r3, r4], &(0x7f0000000040), &(0x7f0000000600)=[r5], &(0x7f0000000200)}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000040)='rcu_utilization\x00', r6, 0x0, 0x100}, 0xfffffffffffffce3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0x8, 0x7, '\x00', 0xa}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a100000000000000000000000000000000000000000000000000000000000000000000000c2e10000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r8, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000000)="006a0762ce044126631ab299e59f47751a1264037210d35ce7f154aedcac0b5bf0f45edd280ac2f5c40d764908b4f81feac36904f64fd3c0329d66744ef9208a37705ca142d857f764d68cf0aed2b802730d5063d24ef1abfbfb") 2.303818111s ago: executing program 2 (id=572): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_dev$vcsu(0x0, 0x2, 0x610083) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r2 = socket(0x15, 0x1, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x320, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7, 0x6}, {}, {}, {}, {0x0, 0x0, 0x1}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0xff04, 0x0) 2.009558158s ago: executing program 3 (id=573): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x3600, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 1.754961878s ago: executing program 3 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001400)={0x0, "cc168574883d4218d8f12a646dc22722"}) r7 = socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@deltaction={0x298, 0x31, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x298}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 1.699508406s ago: executing program 2 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f9cc0303c9001f28207f57a38da2c6a50ec02a73d0e22da61b7ecc65457021dd73481f8010a94c3d6a8e2ef885af176fd159c629f0cc14ae764004f7753db247f39a29b806ae089d574d47487d49dfb9f069600d547567e888048e509737391f59ed3bcff7c49e09786eea694709ef9c72e1e038"], 0x6) syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000078000000006000083000001100ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000511000100000000fb36eeca6fad50b375a22a504d16ca55"], 0x0) 1.311985121s ago: executing program 1 (id=576): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4000000) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.295903068s ago: executing program 2 (id=577): prctl$PR_SET_KEEPCAPS(0x8, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0xfdff, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x300, 0x318, 0x1, 0x24}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000f4dbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0400ac000a00060008ab19773faaca60b6d1303f427807430211000001000051ee6b5b8179799206d24da86aaf0827cb3b74412bce62957935a49f4f36e8aad5014e73b977d42dfe10a1ead9f54a0050baa4b4929646ac8b0f3c5bc7dab9b11d176d987e99d4682e8400a76e8cc5e9"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 1.280453271s ago: executing program 1 (id=578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0xb, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad019645804", 0x29, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x1) r8 = signalfd4(r0, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r10 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r10, 0xc0844123, &(0x7f0000002fc0)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x80) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000010000000000050000000008", @ANYRES32=r8, @ANYBLOB='kK\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x0) 515.997017ms ago: executing program 0 (id=579): prctl$PR_SET_KEEPCAPS(0x8, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000002) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000000010400000000000000004000012800000018000000100696d6d6564696174650000000000028000000140000000130000028000000100020da48a402db5fa3c87e73996efe456322bd9262d2b7b0bba5d1a56bb8fd37102ae90b19b135d940468a8c26f371f39c22d98a40b0e141122cb9093893d8f805d4981e89e067944a9ba3eaffeb57d212d767803691b7badb8a15384d583c0ab068b6508dba5c5787368c550f2d4ef1063e7e38645b7f4fcd59dcca51a756a5273b0a3f218ef7096743b66e76a6c926e783b1fa998298e85e8235302ae2a21bf9ec9f97a903505ef2b15a23190770194245674ae92c70cd1354754d7c7f2677e0771515f3e687789db406ea327d306a1f7adc12165dd6e95de36c0dd517d14e0c113098e0b35000000000180000001006475700000000280000001400000000d000002400000001a000002400000001100000140000000130000024000000002000001800000010074756e6e656c000000000280000002400000000a0000034000000002000002400000000e00000180000001007866726d000000003bffffff1100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x74a03) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100124d5240e316e9f958002000000109021b00010000000009047800018fa68d0009058a"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 310.234056ms ago: executing program 0 (id=580): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0xfffffffe, 0x0, 0x80, 0x1]}}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, 0x0, 0x20008001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)}], 0x1}, 0x20000044) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}}, 0x40080) userfaultfd(0x801) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x2002497, &(0x7f00000000c0)={0x0, 0x4f6, 0x20, 0x1, 0x26b, 0x0, r0}, 0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00'}) (async) syz_io_uring_setup(0x23d, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1}, &(0x7f00000002c0), &(0x7f0000000000)) 52.961737ms ago: executing program 0 (id=581): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r1, 0x0, 0x0, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a36", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 0s ago: executing program 2 (id=582): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r1 = getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000ac0)={0x14, &(0x7f0000000940)={0x40, 0x12, 0x100, {0x100, 0x10, "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"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000b00)={0x0, 0x14}, 0x0, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x4, 0x6, 0x7ff, 0xd, 0xa, 0x1, 0x4, 0xfff, 0x5, 0x81}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000c40)={0x20, 0x83, 0x2}, 0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): selecting invalid altsetting 6 [ 85.198114][ T10] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 85.213018][ T976] usb 3-1: digital interface selection failed (-22) [ 85.219687][ T976] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 85.220857][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 85.236800][ T976] usb 3-1: setting power OFF [ 85.237669][ T10] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 85.257698][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 85.266212][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 85.341930][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.343429][ T976] (NULL device *): no alternate interface [ 85.358462][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.397577][ T10] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 85.412939][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.412993][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 85.424962][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 85.436156][ T6463] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 85.475227][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 85.487590][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 85.499305][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 85.500616][ T976] usb 3-1: USB disconnect, device number 5 [ 85.509899][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.515054][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.539227][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 85.549799][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 85.558084][ T9] usb 1-1: Product: syz [ 85.562293][ T9] usb 1-1: Manufacturer: syz [ 85.566885][ T9] usb 1-1: SerialNumber: syz [ 85.572454][ T9] usb 1-1: config 0 descriptor?? [ 85.681812][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 85.688024][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 85.699525][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.713985][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.723080][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.731127][ T24] usb 2-1: Product: syz [ 85.735288][ T24] usb 2-1: Manufacturer: syz [ 85.740409][ T24] usb 2-1: SerialNumber: syz [ 85.750306][ T24] usb 2-1: config 0 descriptor?? [ 85.758839][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.768226][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 85.778972][ T9] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 85.786302][ T92] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.793789][ T9] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 85.950827][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 85.957330][ T92] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 85.967114][ T92] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 85.976222][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.984313][ T92] usb 5-1: Product: syz [ 85.988479][ T92] usb 5-1: Manufacturer: syz [ 85.993153][ T9] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 86.000699][ T9] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 86.013033][ T92] usb 5-1: SerialNumber: syz [ 86.018189][ T9] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 86.031513][ T92] usb 5-1: config 0 descriptor?? [ 86.038408][ T92] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 86.046550][ T92] usb 5-1: setting power ON [ 86.051121][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 86.061311][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.075548][ T92] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 86.089021][ T92] usb 5-1: media controller created [ 86.113155][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.141006][ T92] usb 5-1: selecting invalid altsetting 6 [ 86.146821][ T92] usb 5-1: digital interface selection failed (-22) [ 86.153564][ T92] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 86.168526][ T92] usb 5-1: setting power OFF [ 86.174495][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 86.180273][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 86.181461][ T6476] FAULT_INJECTION: forcing a failure. [ 86.181461][ T6476] name failslab, interval 1, probability 0, space 0, times 1 [ 86.198999][ T92] (NULL device *): no alternate interface [ 86.203080][ T9] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 86.203320][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.2.122 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 86.203341][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.203350][ T6476] Call Trace: [ 86.203355][ T6476] [ 86.203361][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 86.203381][ T6476] should_fail_ex+0x512/0x640 [ 86.203400][ T6476] should_failslab+0xc2/0x120 [ 86.203418][ T6476] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 86.203435][ T6476] ? ovl_mount_dir+0x26/0x1f0 [ 86.203454][ T6476] kstrdup+0x53/0x100 [ 86.203470][ T6476] ovl_mount_dir+0x26/0x1f0 [ 86.203486][ T6476] ovl_parse_param+0x10ae/0x1570 [ 86.203503][ T6476] ? selinux_fs_context_parse_param+0xd8/0x130 [ 86.203525][ T6476] ? __pfx_ovl_parse_param+0x10/0x10 [ 86.203542][ T6476] ? trace_kmalloc+0x2b/0xd0 [ 86.203559][ T6476] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 86.203576][ T6476] ? static_key_count+0x5a/0x70 [ 86.203598][ T6476] ? __pfx_ovl_parse_param+0x10/0x10 [ 86.203615][ T6476] vfs_parse_fs_param+0x208/0x3c0 [ 86.203634][ T6476] vfs_parse_fs_string+0xe9/0x150 [ 86.203651][ T6476] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 86.203671][ T6476] ? ovl_next_opt+0x143/0x1c0 [ 86.203687][ T6476] ? __pfx_ovl_next_opt+0x10/0x10 [ 86.203702][ T6476] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 86.203720][ T6476] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 86.203738][ T6476] ? alloc_fs_context+0x59b/0x9c0 [ 86.203757][ T6476] path_mount+0x1438/0x1fd0 [ 86.203778][ T6476] ? __pfx_path_mount+0x10/0x10 [ 86.203797][ T6476] ? kmem_cache_free+0x2d1/0x4d0 [ 86.203810][ T6476] ? putname+0x154/0x1a0 [ 86.203830][ T6476] ? putname+0x154/0x1a0 [ 86.203848][ T6476] ? __x64_sys_mount+0x28d/0x310 [ 86.203866][ T6476] __x64_sys_mount+0x28d/0x310 [ 86.203884][ T6476] ? __pfx___x64_sys_mount+0x10/0x10 [ 86.203906][ T6476] do_syscall_64+0xcd/0x4c0 [ 86.203922][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.203941][ T6476] RIP: 0033:0x7f53ecb8ebe9 [ 86.203953][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.203967][ T6476] RSP: 002b:00007f53eda65038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.203982][ T6476] RAX: ffffffffffffffda RBX: 00007f53ecdb5fa0 RCX: 00007f53ecb8ebe9 [ 86.203992][ T6476] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 86.204001][ T6476] RBP: 00007f53eda65090 R08: 0000200000000340 R09: 0000000000000000 [ 86.204010][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.204019][ T6476] R13: 00007f53ecdb6038 R14: 00007f53ecdb5fa0 R15: 00007ffe5123bff8 [ 86.204033][ T6476] [ 86.242099][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.265196][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 86.271593][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.518907][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 86.518923][ T30] audit: type=1400 audit(1755409764.007:302): avc: denied { ioctl } for pid=6465 comm="syz.0.119" path="socket:[10704]" dev="sockfs" ino=10704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.550715][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 86.558348][ T24] em28xx 2-1:0.0: Config register raw data: 0x00 [ 86.756444][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 86.780966][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 86.794207][ T30] audit: type=1400 audit(1755409764.277:303): avc: denied { bind } for pid=6477 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.838070][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.120'. [ 86.853277][ T30] audit: type=1400 audit(1755409764.287:304): avc: denied { write } for pid=6477 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.853344][ T6470] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 86.911736][ T9] usb 5-1: USB disconnect, device number 3 [ 87.009607][ T5984] usb 1-1: USB disconnect, device number 4 [ 87.059837][ T6482] hub 6-0:1.0: USB hub found [ 87.065319][ T6482] hub 6-0:1.0: 1 port detected [ 87.190393][ T10] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 87.216108][ T10] usb 4-1: USB disconnect, device number 6 [ 87.346907][ T30] audit: type=1400 audit(1755409764.837:305): avc: denied { append } for pid=6485 comm="syz.3.125" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.384068][ T30] audit: type=1400 audit(1755409764.877:306): avc: denied { create } for pid=6485 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.404674][ T30] audit: type=1400 audit(1755409764.897:307): avc: denied { write } for pid=6485 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 87.606443][ T6496] IPVS: persistence engine module ip_vs_pe_s not found [ 87.707523][ T30] audit: type=1400 audit(1755409765.197:308): avc: denied { ioctl } for pid=6498 comm="syz.0.128" path="socket:[10809]" dev="sockfs" ino=10809 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.788692][ T6500] netlink: 64 bytes leftover after parsing attributes in process `syz.0.128'. [ 87.841032][ T49] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.091024][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 88.105503][ T49] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 88.115991][ T49] usb 5-1: config 0 has no interface number 0 [ 88.128647][ T49] usb 5-1: config 0 interface 48 altsetting 2 has an endpoint descriptor with address 0x68, changing to 0x8 [ 88.132007][ T6505] FAULT_INJECTION: forcing a failure. [ 88.132007][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.144515][ T49] usb 5-1: config 0 interface 48 has no altsetting 0 [ 88.160123][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.2.129 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 88.160152][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.160162][ T6505] Call Trace: [ 88.160168][ T6505] [ 88.160175][ T6505] dump_stack_lvl+0x16c/0x1f0 [ 88.160197][ T6505] should_fail_ex+0x512/0x640 [ 88.160218][ T6505] _copy_from_user+0x2e/0xd0 [ 88.160240][ T6505] do_fcntl+0x114/0x15a0 [ 88.160264][ T6505] ? __pfx_do_fcntl+0x10/0x10 [ 88.160287][ T6505] ? selinux_file_fcntl+0x93/0x170 [ 88.160305][ T6505] __x64_sys_fcntl+0x163/0x200 [ 88.160326][ T6505] do_syscall_64+0xcd/0x4c0 [ 88.160343][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.160359][ T6505] RIP: 0033:0x7f53ecb8ebe9 [ 88.160372][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.160387][ T6505] RSP: 002b:00007f53eda23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 88.160404][ T6505] RAX: ffffffffffffffda RBX: 00007f53ecdb6180 RCX: 00007f53ecb8ebe9 [ 88.160413][ T6505] RDX: 0000200000000040 RSI: 0000000000000024 RDI: 0000000000000007 [ 88.160422][ T6505] RBP: 00007f53eda23090 R08: 0000000000000000 R09: 0000000000000000 [ 88.160430][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.160440][ T6505] R13: 00007f53ecdb6218 R14: 00007f53ecdb6180 R15: 00007ffe5123bff8 [ 88.160454][ T6505] [ 88.318156][ T49] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 88.344873][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.355452][ T49] usb 5-1: Product: syz [ 88.359628][ T49] usb 5-1: Manufacturer: syz [ 88.364545][ T49] usb 5-1: SerialNumber: syz [ 88.441130][ T49] usb 5-1: config 0 descriptor?? [ 88.481916][ T10] usb 2-1: USB disconnect, device number 6 [ 88.516973][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 88.526335][ T10] em28xx 2-1:0.0: Freeing device [ 88.580965][ T30] audit: type=1400 audit(1755409766.067:309): avc: denied { create } for pid=6510 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.604971][ T30] audit: type=1400 audit(1755409766.077:310): avc: denied { bind } for pid=6510 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.639262][ T30] audit: type=1400 audit(1755409766.077:311): avc: denied { write } for pid=6510 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.663141][ T6514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.132'. [ 88.779932][ T10] usb 5-1: USB disconnect, device number 4 [ 88.800937][ T6521] hub 6-0:1.0: USB hub found [ 88.806302][ T6521] hub 6-0:1.0: 1 port detected [ 89.238991][ T6526] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 89.247096][ T6526] macvlan0: entered promiscuous mode [ 89.253382][ T6526] macvlan0: entered allmulticast mode [ 89.260265][ T6526] veth1_vlan: entered allmulticast mode [ 89.267422][ T6526] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 90.111004][ T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.118923][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 90.532137][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 90.538533][ T92] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 90.548211][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 90.564977][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.578655][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.594246][ T10] usb 5-1: config 0 descriptor?? [ 90.599620][ T92] usb 3-1: config 0 descriptor?? [ 90.617500][ T10] cp210x 5-1:0.0: cp210x converter detected [ 90.625533][ T92] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 90.943506][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'. [ 91.840089][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 91.840108][ T30] audit: type=1400 audit(1755409768.557:321): avc: denied { read } for pid=6568 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.002061][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 92.037388][ T30] audit: type=1400 audit(1755409768.617:322): avc: denied { create } for pid=6568 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.073428][ T30] audit: type=1400 audit(1755409768.637:323): avc: denied { ioctl } for pid=6568 comm="syz.0.148" path="socket:[11381]" dev="sockfs" ino=11381 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.205084][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.271019][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.578555][ T30] audit: type=1400 audit(1755409770.067:324): avc: denied { setopt } for pid=6584 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.581615][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.765462][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.776567][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.786867][ T30] audit: type=1400 audit(1755409770.287:325): avc: denied { ioctl } for pid=6535 comm="syz.2.140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.787398][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.811746][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.812731][ T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.822113][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.844132][ T10] usb 4-1: config 0 descriptor?? [ 92.972119][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.983166][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.993002][ T49] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 93.002138][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.011452][ T49] usb 1-1: config 0 descriptor?? [ 93.289578][ T6591] fuse: Bad value for 'fd' [ 93.429734][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.437099][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.444602][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.452734][ T92] gspca_sonixj: reg_r err -71 [ 93.454478][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.461838][ T92] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 93.465790][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.478487][ T92] usb 3-1: USB disconnect, device number 6 [ 93.478926][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.491665][ T49] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 93.499368][ T49] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 93.622223][ T5854] usb 5-1: USB disconnect, device number 5 [ 93.636870][ T5854] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 93.663446][ T5854] cp210x 5-1:0.0: device disconnected [ 94.031762][ T49] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 94.039188][ T49] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 94.048243][ T49] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 94.062602][ T10] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 94.071508][ T5854] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.083807][ T49] usb 1-1: USB disconnect, device number 5 [ 94.090977][ T10] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 94.099358][ T10] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 94.107882][ T10] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 94.115726][ T10] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 94.128835][ T10] usb 4-1: USB disconnect, device number 7 [ 94.206567][ T30] audit: type=1400 audit(1755409771.697:326): avc: denied { create } for pid=6608 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 94.335484][ T30] audit: type=1400 audit(1755409771.697:327): avc: denied { write } for pid=6608 comm="syz.1.159" path="socket:[11491]" dev="sockfs" ino=11491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 94.367724][ T5854] usb 5-1: Using ep0 maxpacket: 8 [ 94.375452][ T30] audit: type=1400 audit(1755409771.867:328): avc: denied { setopt } for pid=6611 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.383845][ T5854] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 94.463045][ T5854] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.481872][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.490419][ T5854] usb 5-1: Product: syz [ 94.499417][ T5854] usb 5-1: Manufacturer: syz [ 94.504684][ T5854] usb 5-1: SerialNumber: syz [ 94.509918][ T30] audit: type=1400 audit(1755409771.997:329): avc: denied { write } for pid=6615 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.530339][ T5854] usb 5-1: config 0 descriptor?? [ 94.537304][ T5854] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.548317][ T5854] usb 5-1: setting power ON [ 94.553371][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 94.562357][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.584713][ T5854] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.604514][ T5854] usb 5-1: media controller created [ 94.618815][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.635821][ T5854] usb 5-1: selecting invalid altsetting 6 [ 94.650831][ T5854] usb 5-1: digital interface selection failed (-22) [ 94.657524][ T5854] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 94.670915][ T5854] usb 5-1: setting power OFF [ 94.675524][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 94.690792][ T5854] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 94.700387][ T5854] (NULL device *): no alternate interface [ 94.737281][ T5854] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 94.808377][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.848202][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.959655][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 95.011291][ T6602] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 95.068413][ T49] usb 5-1: USB disconnect, device number 6 [ 95.103025][ T6629] loop8: detected capacity change from 0 to 7 [ 95.129646][ T6629] Dev loop8: unable to read RDB block 7 [ 95.146033][ T6629] loop8: unable to read partition table [ 95.154679][ T6629] loop8: partition table beyond EOD, truncated [ 95.173018][ T6629] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 95.191900][ T6633] /dev/nullb0: Can't open blockdev [ 95.224983][ T30] audit: type=1400 audit(1755409772.697:330): avc: denied { ioctl } for pid=6625 comm="syz.3.164" path="socket:[11542]" dev="sockfs" ino=11542 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.408295][ T6639] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 96.045784][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.366047][ T6646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.730862][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.820596][ T6659] Bluetooth: MGMT ver 1.23 [ 96.870934][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.060819][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 97.067584][ T9] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 97.086259][ T9] usb 3-1: config 0 has no interface number 0 [ 97.101938][ T9] usb 3-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=e3.3b [ 97.138201][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.211513][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.228813][ T9] usb 3-1: Product: syz [ 97.707191][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.717045][ T9] usb 3-1: Manufacturer: syz [ 97.734615][ T9] usb 3-1: SerialNumber: syz [ 97.739553][ T6659] trusted_key: encrypted_key: hex blob is missing [ 97.750348][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 97.787927][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 97.834510][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.834531][ T30] audit: type=1400 audit(1755409775.237:332): avc: denied { connect } for pid=6658 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.877937][ T9] usb 3-1: config 0 descriptor?? [ 97.883770][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.969687][ T10] usb 5-1: config 0 descriptor?? [ 98.331264][ T30] audit: type=1400 audit(1755409775.797:333): avc: denied { listen } for pid=6654 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.583190][ T30] audit: type=1400 audit(1755409776.047:334): avc: denied { shutdown } for pid=6654 comm="syz.2.171" laddr=fe80::e lport=40860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.605000][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.621205][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.629632][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.638111][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.645769][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.658333][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.707339][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.750881][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 98.764006][ T92] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 98.804617][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 98.854498][ T92] usb 1-1: config 0 has no interface number 0 [ 99.535588][ T92] usb 1-1: config 0 interface 48 altsetting 2 has an endpoint descriptor with address 0x68, changing to 0x8 [ 99.588209][ T10] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 99.609916][ T92] usb 1-1: config 0 interface 48 has no altsetting 0 [ 99.725645][ T10] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 99.754757][ T9] smsusb:smsusb_probe: board id=12, interface number 149 [ 99.769169][ T92] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 99.830825][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.845872][ T9] usb 3-1: USB disconnect, device number 7 [ 99.858882][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 99.895999][ T92] usb 1-1: Product: syz [ 99.900205][ T92] usb 1-1: Manufacturer: syz [ 99.915214][ T10] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 99.931518][ T10] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 99.977646][ T92] usb 1-1: SerialNumber: syz [ 100.191822][ T10] usb 5-1: USB disconnect, device number 7 [ 100.198819][ T92] usb 1-1: config 0 descriptor?? [ 100.206573][ T6689] netlink: 'syz.4.180': attribute type 21 has an invalid length. [ 100.214497][ T6689] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 100.222373][ T6689] netlink: 144 bytes leftover after parsing attributes in process `syz.4.180'. [ 100.349965][ T30] audit: type=1400 audit(1755409777.817:335): avc: denied { read } for pid=6684 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.398651][ T30] audit: type=1400 audit(1755409777.817:336): avc: denied { read } for pid=6684 comm="syz.2.179" laddr=172.20.20.170 lport=40453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.448157][ T6689] 9pnet_fd: Insufficient options for proto=fd [ 100.448614][ T10] usb 1-1: USB disconnect, device number 6 [ 100.567450][ T30] audit: type=1400 audit(1755409778.047:337): avc: denied { ioctl } for pid=6690 comm="syz.3.181" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.631347][ T49] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.888208][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 100.911803][ T49] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 100.933609][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.942984][ T49] usb 3-1: Product: syz [ 100.943789][ T6696] fuse: Bad value for 'fd' [ 100.947149][ T49] usb 3-1: Manufacturer: syz [ 100.957741][ T49] usb 3-1: SerialNumber: syz [ 100.967104][ T49] usb 3-1: config 0 descriptor?? [ 100.974626][ T49] appledisplay 3-1:0.0: Could not find int-in endpoint [ 100.991286][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 101.498784][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 101.577200][ T92] usb 3-1: USB disconnect, device number 8 [ 101.659533][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.947399][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.957612][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.968030][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.977450][ T10] usb 5-1: config 0 descriptor?? [ 101.994258][ T10] hub 5-1:0.0: USB hub found [ 102.243237][ T10] hub 5-1:0.0: 2 ports detected [ 102.467645][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 102.490791][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 102.518959][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 102.528850][ T30] audit: type=1400 audit(1755409780.027:338): avc: denied { setopt } for pid=6729 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.529804][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.587809][ T30] audit: type=1400 audit(1755409780.027:339): avc: denied { connect } for pid=6729 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.830537][ T10] usb 5-1: USB disconnect, device number 8 [ 103.208792][ T6741] fuse: Bad value for 'fd' [ 103.430834][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.662864][ T10] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 103.847512][ T10] usb 3-1: config 0 has no interface number 0 [ 103.912247][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 103.922079][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.160888][ T10] usb 3-1: Product: syz [ 104.165152][ T10] usb 3-1: Manufacturer: syz [ 104.188172][ T10] usb 3-1: SerialNumber: syz [ 104.211889][ T10] usb 3-1: config 0 descriptor?? [ 104.600887][ T49] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.976501][ T10] usb-storage 3-1:0.3: USB Mass Storage device detected [ 104.984111][ T30] audit: type=1400 audit(1755409782.467:340): avc: denied { watch } for pid=6742 comm="syz.2.196" path="/34" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.160858][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 105.356882][ T49] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 105.371978][ T49] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.382038][ T49] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.391985][ T49] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.402644][ T49] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.403871][ T6785] fuse: Bad value for 'fd' [ 105.417004][ T49] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.426068][ T92] usb 3-1: USB disconnect, device number 9 [ 105.458354][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.596587][ T6793] warning: `syz.1.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.613605][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.674747][ T49] usb 5-1: usb_control_msg returned -32 [ 105.680370][ T49] usbtmc 5-1:16.0: can't read capabilities [ 105.780786][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 105.786975][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 105.798527][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.811878][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.821396][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.829388][ T10] usb 4-1: Product: syz [ 105.833762][ T10] usb 4-1: Manufacturer: syz [ 105.838362][ T10] usb 4-1: SerialNumber: syz [ 105.843978][ T10] usb 4-1: config 0 descriptor?? [ 105.850398][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.859964][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 105.981204][ T92] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.034483][ T6772] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 106.130930][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 106.148597][ T92] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.159260][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.169156][ T92] usb 2-1: Product: syz [ 106.174723][ T92] usb 2-1: Manufacturer: syz [ 106.181310][ T92] usb 2-1: SerialNumber: syz [ 106.188905][ T92] usb 2-1: config 0 descriptor?? [ 106.194340][ T5984] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 106.257843][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.268391][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.350860][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 106.363814][ T5984] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 106.375126][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.384503][ T5984] usb 3-1: Product: syz [ 106.388758][ T5984] usb 3-1: Manufacturer: syz [ 106.395665][ T5984] usb 3-1: SerialNumber: syz [ 106.400828][ T49] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.402266][ T5984] usb 3-1: config 0 descriptor?? [ 106.431748][ T5984] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 106.488815][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 106.495342][ T10] em28xx 4-1:0.0: Config register raw data: 0x00 [ 106.570848][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 106.581743][ T49] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 106.590979][ T49] usb 1-1: config 0 has no interface number 0 [ 106.601781][ T49] usb 1-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=e3.3b [ 106.610949][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.620042][ T49] usb 1-1: Product: syz [ 106.628805][ T92] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 106.629023][ T49] usb 1-1: Manufacturer: syz [ 106.642718][ T49] usb 1-1: SerialNumber: syz [ 106.648082][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.648335][ T49] usb 1-1: config 0 descriptor?? [ 106.677130][ T92] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.690214][ T92] usb 2-1: media controller created [ 106.708203][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.831601][ T92] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.848177][ T92] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.848465][ T6799] netlink: 'syz.2.214': attribute type 11 has an invalid length. [ 106.864093][ T92] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.886254][ T92] usb 2-1: USB disconnect, device number 7 [ 106.986469][ T92] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 107.054685][ T6772] comedi comedi2: reset error (fatal) [ 107.243611][ T49] smsusb:smsusb_probe: board id=12, interface number 149 [ 107.256091][ T49] usb 1-1: USB disconnect, device number 7 [ 107.378431][ T30] audit: type=1400 audit(1755409784.867:341): avc: denied { mount } for pid=6804 comm="syz.1.216" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.433858][ T30] audit: type=1800 audit(1755409784.927:342): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.216" name="/file0" dev="tmpfs" ino=2 res=0 errno=0 [ 107.434208][ T6805] comedi comedi4: bad chanlist[0]=0x0000000b chan=11 range length=2 [ 107.496989][ T30] audit: type=1400 audit(1755409784.987:343): avc: denied { create } for pid=6809 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.787413][ T30] audit: type=1400 audit(1755409785.277:344): avc: denied { read } for pid=6812 comm="syz.1.218" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.812527][ T30] audit: type=1400 audit(1755409785.277:345): avc: denied { open } for pid=6812 comm="syz.1.218" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.838614][ T30] audit: type=1400 audit(1755409785.297:346): avc: denied { ioctl } for pid=6812 comm="syz.1.218" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.918616][ T30] audit: type=1400 audit(1755409785.407:347): avc: denied { create } for pid=6812 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.938918][ T30] audit: type=1400 audit(1755409785.437:348): avc: denied { read } for pid=6812 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.353474][ T5854] usb 4-1: USB disconnect, device number 8 [ 108.359589][ T5854] em28xx 4-1:0.0: Disconnecting em28xx [ 108.404712][ T5854] em28xx 4-1:0.0: Freeing device [ 108.411481][ T49] usb 5-1: USB disconnect, device number 9 [ 109.691060][ T30] audit: type=1400 audit(1755409787.177:349): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.821088][ T49] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.000776][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 110.014325][ T49] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 110.023534][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.032014][ T49] usb 4-1: Product: syz [ 110.036238][ T49] usb 4-1: Manufacturer: syz [ 110.041268][ T49] usb 4-1: SerialNumber: syz [ 110.076247][ T49] usb 4-1: config 0 descriptor?? [ 110.084150][ T30] audit: type=1400 audit(1755409787.577:350): avc: denied { setopt } for pid=6849 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.107385][ T30] audit: type=1400 audit(1755409787.577:351): avc: denied { ioctl } for pid=6849 comm="syz.0.229" path="socket:[13384]" dev="sockfs" ino=13384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.513960][ T49] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 110.685989][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.700150][ T49] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 110.708355][ T49] usb 4-1: media controller created [ 110.721734][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.751026][ T49] zl10353_read_register: readreg error (reg=127, ret==0) [ 110.759369][ T49] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 110.767702][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 110.783513][ T49] usb 4-1: USB disconnect, device number 9 [ 110.812439][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 110.922415][ T5984] gspca_sonixj: reg_w1 err -71 [ 110.927241][ T5984] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 110.938902][ T5984] usb 3-1: USB disconnect, device number 10 [ 111.185030][ T30] audit: type=1400 audit(1755409788.677:352): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.267010][ T6870] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.234'. [ 111.276504][ T6870] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.234'. [ 111.410883][ T5984] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.690800][ T5984] usb 2-1: Using ep0 maxpacket: 8 [ 111.703299][ T5984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.733780][ T5984] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.764177][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.785041][ T5984] usb 2-1: config 0 descriptor?? [ 112.028137][ T5984] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.351816][ T6889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.973777][ T30] audit: type=1400 audit(1755409791.437:353): avc: denied { write } for pid=6909 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.180822][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.196615][ T49] usb 2-1: USB disconnect, device number 8 [ 114.270800][ T5984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.294413][ T6927] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 114.340833][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 114.348473][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 114.362215][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.373203][ T6935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.435418][ T30] audit: type=1400 audit(1755409791.867:354): avc: denied { shutdown } for pid=6934 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.464029][ T24] usb 5-1: Product: syz [ 114.468274][ T24] usb 5-1: Manufacturer: syz [ 114.474126][ T24] usb 5-1: SerialNumber: syz [ 114.480944][ T24] usb 5-1: config 0 descriptor?? [ 114.601814][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.637706][ T5984] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.689883][ T5984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.720773][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.763673][ T5984] usb 1-1: Product: syz [ 114.783525][ T5984] usb 1-1: Manufacturer: syz [ 114.788158][ T5984] usb 1-1: SerialNumber: syz [ 114.826814][ T5984] cdc_mbim 1-1:1.0: skipping garbage [ 115.042893][ T6922] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 115.042973][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 115.062399][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.074149][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 115.087443][ T24] usb 5-1: media controller created [ 115.152476][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.400765][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.472160][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 115.489821][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 115.499905][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 115.516978][ T24] usb 5-1: USB disconnect, device number 10 [ 115.559160][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 115.660768][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 115.666166][ T6922] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 115.674635][ T5984] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 115.684047][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.692119][ T49] usb 4-1: config 0 has no interface number 0 [ 115.698215][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.711027][ T49] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.736358][ T49] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 115.746193][ T5984] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 115.763139][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.782256][ T49] usb 4-1: config 0 descriptor?? [ 115.911436][ T5984] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 115.928091][ T6956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.970348][ T5984] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 115.985036][ T30] audit: type=1400 audit(1755409793.467:355): avc: denied { ioctl } for pid=6955 comm="syz.2.259" path="socket:[13087]" dev="sockfs" ino=13087 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.053713][ T6962] mmap: syz.4.260 (6962) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.116253][ T5984] wwan wwan0: port wwan0mbim0 attached [ 116.373904][ T30] audit: type=1400 audit(1755409793.797:356): avc: denied { ioctl } for pid=6966 comm="syz.1.262" path="socket:[13100]" dev="sockfs" ino=13100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.539027][ T5984] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 16:8c:bb:de:20:d5 [ 116.645529][ T6958] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 116.717982][ T30] audit: type=1400 audit(1755409794.207:357): avc: denied { connect } for pid=6974 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.772122][ T5984] usb 1-1: USB disconnect, device number 8 [ 116.785753][ T5984] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 116.872414][ T30] audit: type=1400 audit(1755409794.257:358): avc: denied { shutdown } for pid=6944 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.662379][ T5984] wwan wwan0: port wwan0mbim0 disconnected [ 118.853643][ T49] usbhid 4-1:0.1: can't add hid device: -71 [ 118.859644][ T49] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 118.868740][ T49] usb 4-1: USB disconnect, device number 10 [ 118.915487][ T30] audit: type=1326 audit(1755409796.397:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2338ebe9 code=0x7ffc0000 [ 118.978294][ T6999] pim6reg: entered allmulticast mode [ 118.999601][ T30] audit: type=1326 audit(1755409796.397:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2338ebe9 code=0x7ffc0000 [ 119.072078][ T30] audit: type=1326 audit(1755409796.397:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b2338ebe9 code=0x7ffc0000 [ 119.095386][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.143963][ T30] audit: type=1326 audit(1755409796.397:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2338ebe9 code=0x7ffc0000 [ 119.215116][ T6994] pim6reg: left allmulticast mode [ 119.228889][ T30] audit: type=1326 audit(1755409796.397:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2338ebe9 code=0x7ffc0000 [ 119.270850][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 119.284500][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 119.299563][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.318136][ T30] audit: type=1326 audit(1755409796.397:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b23390b07 code=0x7ffc0000 [ 119.357236][ T10] usb 3-1: Product: syz [ 119.494702][ T10] usb 3-1: Manufacturer: syz [ 119.818970][ T10] usb 3-1: SerialNumber: syz [ 119.848615][ T10] usb 3-1: config 0 descriptor?? [ 120.071812][ T7019] netlink: 104 bytes leftover after parsing attributes in process `syz.0.274'. [ 120.332192][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 120.465910][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.480938][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 120.488979][ T10] usb 3-1: media controller created [ 120.505723][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.891046][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 120.908452][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 120.917853][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 120.954353][ T10] usb 3-1: USB disconnect, device number 11 [ 120.986629][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 121.016346][ T49] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.130783][ T5984] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.172392][ T49] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.225692][ T49] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.261282][ T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.286527][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.303538][ T7043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.312934][ T49] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.322096][ T5984] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 121.346188][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.406569][ T5984] usb 1-1: Product: syz [ 121.414564][ T5984] usb 1-1: Manufacturer: syz [ 121.420350][ T5984] usb 1-1: SerialNumber: syz [ 121.420386][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 121.420398][ T30] audit: type=1400 audit(1755409798.907:403): avc: denied { listen } for pid=7050 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.450995][ T5984] usb 1-1: config 0 descriptor?? [ 121.472905][ T30] audit: type=1400 audit(1755409798.907:404): avc: denied { accept } for pid=7050 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.494200][ T30] audit: type=1400 audit(1755409798.967:405): avc: denied { name_connect } for pid=7050 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 121.546193][ T5984] usb 4-1: USB disconnect, device number 11 [ 121.677865][ T9] usb 1-1: USB disconnect, device number 9 [ 121.909466][ T30] audit: type=1400 audit(1755409799.377:406): avc: denied { execute } for pid=7046 comm="syz.0.282" path="/dev/snd/controlC1" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 122.250858][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.450968][ T9] usb 1-1: device descriptor read/64, error -71 [ 122.690480][ T30] audit: type=1400 audit(1755409800.177:407): avc: denied { getopt } for pid=7072 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.755484][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.289'. [ 122.823328][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.849765][ T30] audit: type=1400 audit(1755409800.247:408): avc: denied { map } for pid=7070 comm="syz.3.289" path="pipe:[13908]" dev="pipefs" ino=13908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.878616][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 122.971036][ T9] usb 1-1: device descriptor read/64, error -71 [ 123.111154][ T9] usb usb1-port1: attempt power cycle [ 123.290847][ T5901] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 123.441344][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 123.448960][ T5901] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 123.450804][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.457337][ T5901] usb 3-1: config 0 has no interface number 0 [ 123.475503][ T5901] usb 3-1: config 0 interface 48 altsetting 2 has an endpoint descriptor with address 0x68, changing to 0x8 [ 123.481267][ T9] usb 1-1: device descriptor read/8, error -71 [ 123.495407][ T5901] usb 3-1: config 0 interface 48 has no altsetting 0 [ 123.504584][ T5901] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 123.533880][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.546940][ T5901] usb 3-1: Product: syz [ 123.553444][ T5901] usb 3-1: Manufacturer: syz [ 123.558502][ T5901] usb 3-1: SerialNumber: syz [ 123.571867][ T5901] usb 3-1: config 0 descriptor?? [ 123.731234][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 123.752610][ T9] usb 1-1: device descriptor read/8, error -71 [ 123.844201][ T5984] usb 3-1: USB disconnect, device number 12 [ 123.880350][ T9] usb usb1-port1: unable to enumerate USB device [ 123.975412][ T7110] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 124.358284][ T7127] /dev/nullb0: Can't open blockdev [ 124.665853][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 124.850009][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'. [ 125.236432][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.421313][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 125.538149][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.556432][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.687688][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 125.840790][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.878236][ T9] usb 5-1: config 0 descriptor?? [ 125.903162][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.917154][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.150687][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.208248][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.090771][ T5901] usb 4-1: device descriptor read/64, error -71 [ 127.186996][ T9] usb 5-1: USB disconnect, device number 11 [ 127.310202][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.319'. [ 127.550797][ T5984] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 127.630832][ T5901] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 127.719440][ T5984] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.729903][ T5984] usb 1-1: config 0 has no interface number 0 [ 127.736942][ T5984] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 127.747690][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.759098][ T5984] usb 1-1: config 0 descriptor?? [ 127.769731][ T5984] usb 1-1: selecting invalid altsetting 1 [ 127.777803][ T5984] dvb_ttusb_budget: ttusb_init_controller: error [ 127.784585][ T5984] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 127.800817][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 127.814812][ T5901] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 127.824269][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.826629][ T5984] DVB: Unable to find symbol ves1820_attach() [ 127.839205][ T5901] usb 4-1: Product: syz [ 127.843938][ T5901] usb 4-1: Manufacturer: syz [ 127.848549][ T5901] usb 4-1: SerialNumber: syz [ 127.858969][ T30] audit: type=1400 audit(1755409805.347:409): avc: denied { setopt } for pid=7185 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.882006][ T5901] usb 4-1: config 0 descriptor?? [ 127.908896][ T5984] DVB: Unable to find symbol stv0297_attach() [ 127.916811][ T5984] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 127.997464][ T5984] usb 1-1: USB disconnect, device number 14 [ 128.239451][ T7193] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 128.250355][ T7193] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 128.343294][ T5901] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 128.427922][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.444826][ T5901] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 128.458546][ T5901] usb 4-1: media controller created [ 128.525520][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.581044][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 128.588137][ T5901] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 128.598206][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 128.640909][ T5901] usb 4-1: USB disconnect, device number 13 [ 128.683100][ T5901] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 128.723436][ T7202] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 128.785807][ T7202] bond0: (slave bond_slave_0): Releasing backup interface [ 128.946809][ T5846] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 129.272970][ T30] audit: type=1400 audit(1755409806.667:410): avc: denied { read } for pid=7209 comm="syz.1.329" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 129.826375][ T30] audit: type=1400 audit(1755409806.677:411): avc: denied { open } for pid=7209 comm="syz.1.329" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 129.850574][ T30] audit: type=1400 audit(1755409806.677:412): avc: denied { ioctl } for pid=7209 comm="syz.1.329" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 129.875878][ T30] audit: type=1400 audit(1755409806.707:413): avc: denied { write } for pid=7209 comm="syz.1.329" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 129.939444][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.331'. [ 130.465924][ T7224] input: syz1 as /devices/virtual/input/input8 [ 130.862017][ T7243] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 130.870307][ T30] audit: type=1400 audit(1755409808.347:414): avc: denied { connect } for pid=7240 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.217023][ T30] audit: type=1400 audit(1755409808.347:415): avc: denied { ioctl } for pid=7240 comm="syz.3.339" path="socket:[15437]" dev="sockfs" ino=15437 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.262944][ T30] audit: type=1400 audit(1755409808.347:416): avc: denied { map } for pid=7240 comm="syz.3.339" path="socket:[15437]" dev="sockfs" ino=15437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.286222][ T30] audit: type=1400 audit(1755409808.347:417): avc: denied { read } for pid=7240 comm="syz.3.339" path="socket:[15437]" dev="sockfs" ino=15437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.311452][ T30] audit: type=1400 audit(1755409808.397:418): avc: denied { bind } for pid=7244 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.234458][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 132.331869][ T7272] sg_read: process 182 (syz.4.348) changed security contexts after opening file descriptor, this is not allowed. [ 132.497040][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.503458][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.794311][ T7292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.857781][ T7284] netlink: 148 bytes leftover after parsing attributes in process `syz.3.349'. [ 133.723484][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 133.723500][ T30] audit: type=1326 audit(1755409811.217:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.3.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8818ebe9 code=0x0 [ 133.781210][ T92] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.865236][ T30] audit: type=1400 audit(1755409811.357:421): avc: denied { ioctl } for pid=7317 comm="syz.2.359" path="socket:[15719]" dev="sockfs" ino=15719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.941092][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 133.951936][ T92] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.311230][ T30] audit: type=1400 audit(1755409811.507:422): avc: denied { kexec_image_load } for pid=7321 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 134.333577][ T92] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 134.342880][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.354931][ T92] usb 2-1: Product: syz [ 134.360358][ T92] usb 2-1: Manufacturer: syz [ 134.365369][ T92] usb 2-1: SerialNumber: syz [ 134.375969][ T92] usb 2-1: config 0 descriptor?? [ 134.390599][ T92] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 134.582975][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 134.960779][ T30] audit: type=1400 audit(1755409812.257:423): avc: denied { create } for pid=7334 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 134.983876][ T92] usb 2-1: USB disconnect, device number 9 [ 134.990027][ T7255] usb 2-1: Failed to submit usb control message: -71 [ 135.005596][ T7255] usb 2-1: unable to send the bmi data to the device: -71 [ 135.033529][ T7255] usb 2-1: unable to get target info from device [ 135.042562][ T7255] usb 2-1: could not get target info (-71) [ 135.055885][ T7255] usb 2-1: could not probe fw (-71) [ 135.109912][ T30] audit: type=1400 audit(1755409812.357:424): avc: denied { mount } for pid=7334 comm="syz.2.362" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.359912][ T30] audit: type=1400 audit(1755409812.837:425): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.867806][ T30] audit: type=1400 audit(1755409813.357:426): avc: denied { setopt } for pid=7361 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.512148][ T7369] tipc: Started in network mode [ 136.518170][ T7369] tipc: Node identity 9e68bb0a7a4a, cluster identity 4711 [ 136.557999][ T7369] tipc: Enabled bearer , priority 0 [ 136.589652][ T7370] syzkaller0: entered promiscuous mode [ 136.605068][ T7370] syzkaller0: entered allmulticast mode [ 136.840169][ T7369] 9pnet_fd: p9_fd_create_tcp (7369): problem connecting socket to 127.0.0.1 [ 136.840867][ T30] audit: type=1400 audit(1755409814.327:427): avc: denied { mounton } for pid=7368 comm="syz.4.372" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 136.900596][ T7369] tipc: Resetting bearer [ 136.914285][ T7368] tipc: Resetting bearer [ 136.961487][ T7368] tipc: Disabling bearer [ 137.737722][ T7388] hub 6-0:1.0: USB hub found [ 137.743977][ T7388] hub 6-0:1.0: 1 port detected [ 138.292142][ T7397] netlink: 'syz.1.380': attribute type 9 has an invalid length. [ 138.420931][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 138.475802][ T7397] netlink: 'syz.1.380': attribute type 9 has an invalid length. [ 138.483528][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.484056][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.530896][ T1318] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.565076][ T1318] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.594534][ T30] audit: type=1326 audit(1755409816.077:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 138.610939][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 138.649911][ T7408] fuse: Bad value for 'rootmode' [ 138.767151][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 138.957914][ T30] audit: type=1326 audit(1755409816.077:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 138.981179][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.009080][ T30] audit: type=1326 audit(1755409816.077:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.032282][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.138067][ T30] audit: type=1326 audit(1755409816.077:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.161311][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.250685][ T30] audit: type=1326 audit(1755409816.077:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.317991][ T30] audit: type=1326 audit(1755409816.077:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.343843][ T30] audit: type=1326 audit(1755409816.077:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.367034][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.385726][ T30] audit: type=1326 audit(1755409816.077:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7404 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c398ebe9 code=0x7ffc0000 [ 139.419333][ T30] audit: type=1400 audit(1755409816.137:436): avc: denied { mounton } for pid=7407 comm="syz.4.384" path="/65/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 139.473723][ T30] audit: type=1400 audit(1755409816.167:437): avc: denied { map } for pid=7402 comm="syz.2.382" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.498204][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.524252][ T30] audit: type=1400 audit(1755409817.017:438): avc: denied { ioctl } for pid=7421 comm="syz.2.389" path="socket:[16687]" dev="sockfs" ino=16687 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.549048][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.585020][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 139.750972][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.071125][ T92] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.237876][ T7442] 9pnet_fd: Insufficient options for proto=fd [ 140.300866][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 140.320857][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 140.331835][ T92] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 140.460873][ T9] usb 1-1: device descriptor read/64, error -71 [ 140.470350][ T92] usb 5-1: config 0 has no interface number 0 [ 140.481342][ T92] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 140.542658][ T7449] netlink: 'syz.3.398': attribute type 12 has an invalid length. [ 140.558823][ T92] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 140.575092][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.591005][ T9] usb usb1-port1: attempt power cycle [ 140.596573][ T92] usb 5-1: Product: syz [ 140.604022][ T92] usb 5-1: Manufacturer: syz [ 140.609132][ T92] usb 5-1: SerialNumber: syz [ 140.615423][ T92] usb 5-1: config 0 descriptor?? [ 140.622874][ T92] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 140.636925][ T92] em28xx 5-1:0.132: Video interface 132 found: [ 140.743301][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.110950][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 141.131395][ T9] usb 1-1: device descriptor read/8, error -71 [ 141.980864][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 142.011508][ T9] usb 1-1: device descriptor read/8, error -71 [ 142.102646][ T7467] block nbd3: NBD_DISCONNECT [ 142.107489][ T7467] block nbd3: Disconnected due to user request. [ 142.114146][ T7467] block nbd3: shutting down sockets [ 142.123640][ T9] usb usb1-port1: unable to enumerate USB device [ 142.150907][ T92] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 142.212893][ T92] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 142.223891][ T92] em28xx 5-1:0.132: board has no eeprom [ 142.315814][ T92] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 142.372384][ T5901] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.532137][ T92] em28xx 5-1:0.132: analog set to bulk mode. [ 142.551153][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 142.557494][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 142.564899][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.665807][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.698392][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.711832][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.723414][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.745174][ T5915] usb 5-1: USB disconnect, device number 12 [ 142.764122][ T5901] usb 2-1: config 0 descriptor?? [ 142.764190][ T5915] em28xx 5-1:0.132: Disconnecting em28xx [ 142.949381][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 142.956542][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 142.984047][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 142.999899][ T9] usb 5-1: Decoder not found [ 143.041750][ T9] em28xx 5-1:0.132: failed to create media graph [ 143.048159][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 143.055592][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 143.065302][ T5915] em28xx 5-1:0.132: Closing input extension [ 143.080231][ T5915] em28xx 5-1:0.132: Freeing device [ 143.170784][ T92] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.340868][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 143.348468][ T92] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 143.358682][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.366772][ T92] usb 3-1: Product: syz [ 143.370944][ T92] usb 3-1: Manufacturer: syz [ 143.582009][ T7502] overlayfs: missing 'workdir' [ 143.657640][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.669158][ T92] usb 3-1: SerialNumber: syz [ 143.677243][ T92] usb 3-1: config 0 descriptor?? [ 143.684860][ T92] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 143.990801][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 143.997083][ T5915] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 144.007597][ T5915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.016597][ T5915] usb 5-1: config 1 has no interface number 1 [ 144.022834][ T5915] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.037292][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.046429][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.054473][ T5915] usb 5-1: Product: syz [ 144.058650][ T5915] usb 5-1: Manufacturer: syz [ 144.063294][ T5915] usb 5-1: SerialNumber: syz [ 144.375433][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 144.411600][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 144.411616][ T30] audit: type=1400 audit(1755409821.907:445): avc: denied { ioctl } for pid=7512 comm="syz.3.415" path="socket:[16821]" dev="sockfs" ino=16821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.480203][ T30] audit: type=1400 audit(1755409821.937:446): avc: denied { accept } for pid=7512 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.530584][ T5915] usb 5-1: cannot find UAC_HEADER [ 144.549146][ T5915] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 144.563755][ T5915] usb 5-1: USB disconnect, device number 13 [ 144.627495][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.643449][ T30] audit: type=1400 audit(1755409822.057:447): avc: denied { bind } for pid=7508 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.666250][ T30] audit: type=1400 audit(1755409822.057:448): avc: denied { write } for pid=7508 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.053313][ T30] audit: type=1400 audit(1755409822.547:449): avc: denied { remount } for pid=7516 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.198155][ T7534] hub 6-0:1.0: USB hub found [ 145.215715][ T7534] hub 6-0:1.0: 1 port detected [ 145.760778][ T976] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 145.934281][ T976] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 145.956440][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.980869][ T976] usb 5-1: Product: syz [ 145.985140][ T976] usb 5-1: Manufacturer: syz [ 145.989750][ T976] usb 5-1: SerialNumber: syz [ 146.003035][ T976] r8152-cfgselector 5-1: Unknown version 0x0000 [ 146.009367][ T976] r8152-cfgselector 5-1: config 0 descriptor?? [ 146.101344][ T5915] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.252495][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 146.333237][ T5915] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.342802][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.358534][ T5915] usb 4-1: config 0 descriptor?? [ 146.374031][ T5915] as10x_usb: device has been detected [ 146.384233][ T5915] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 146.436336][ T5915] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 146.458282][ T5915] as10x_usb: error during firmware upload part1 [ 146.460039][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.465666][ T30] audit: type=1400 audit(1755409823.947:450): avc: denied { firmware_load } for pid=5915 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 146.499755][ T5915] Registered device nBox DVB-T Dongle [ 146.501665][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.635857][ T30] audit: type=1400 audit(1755409824.127:451): avc: denied { read } for pid=7538 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.199851][ T7557] hub 6-0:1.0: USB hub found [ 147.205844][ T7557] hub 6-0:1.0: 1 port detected [ 147.552553][ T92] gspca_sonixj: reg_w1 err -71 [ 147.558113][ T92] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 147.569229][ T92] usb 3-1: USB disconnect, device number 14 [ 148.147111][ T976] r8152-cfgselector 5-1: Unknown version 0x0000 [ 148.154551][ T976] r8152-cfgselector 5-1: bad CDC descriptors [ 148.164553][ T976] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 148.241550][ T5901] usbhid 2-1:0.0: can't add hid device: -32 [ 148.247619][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 148.430806][ T92] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 148.520846][ T976] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.580776][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 148.587064][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 148.594757][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 148.606062][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.617789][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.628911][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.640029][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 148.647625][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 148.658969][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.670776][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.681862][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.690828][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 148.693798][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 148.734826][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 148.744424][ T976] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.751544][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.769291][ T976] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 148.772084][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.790056][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.806503][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 148.824661][ T976] usb 5-1: config 0 descriptor?? [ 148.845742][ T92] usb 3-1: string descriptor 0 read error: -22 [ 148.856110][ T976] usb 4-1: USB disconnect, device number 14 [ 149.450818][ T92] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 149.459945][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.462414][ T976] Unregistered device nBox DVB-T Dongle [ 149.565971][ T976] as10x_usb: device has been disconnected [ 149.586226][ T5915] usb 5-1: USB disconnect, device number 15 [ 149.596317][ T92] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 150.234982][ T7588] No source specified [ 150.240585][ T7588] binder: 7571:7588 ioctl c0306201 200000000200 returned -22 [ 150.251077][ T5915] usb 3-1: USB disconnect, device number 15 [ 150.956035][ T7601] fuse: Unknown parameter 'grou00000000000000000000' [ 151.014553][ T30] audit: type=1400 audit(1755409828.507:452): avc: denied { name_bind } for pid=7602 comm="syz.1.442" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 151.096695][ T7606] loop6: detected capacity change from 0 to 2560 [ 151.104058][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.112839][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.121529][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.129872][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.138534][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.146999][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.155565][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.164044][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.172344][ T7606] ldm_validate_partition_table(): Disk read failed. [ 151.179168][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.190094][ T7606] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.199514][ T7606] Dev loop6: unable to read RDB block 0 [ 151.207282][ T7606] loop6: unable to read partition table [ 151.214218][ T7606] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 151.319860][ T30] audit: type=1400 audit(1755409828.587:453): avc: denied { append } for pid=7602 comm="syz.1.442" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.814097][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 152.278412][ T30] audit: type=1400 audit(1755409829.627:454): avc: denied { read } for pid=7629 comm="syz.3.450" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.280682][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.298380][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.330850][ T5915] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.427512][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.474027][ T7640] fuse: Unknown parameter 'grou00000000000000000000' [ 152.526591][ T7642] bridge0: entered promiscuous mode [ 152.532051][ T7642] macsec1: entered promiscuous mode [ 152.570810][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 152.579293][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.599720][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.627781][ T5915] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.661050][ T92] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.681582][ T7633] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.451'. [ 152.724592][ T7650] syz.0.455: attempt to access beyond end of device [ 152.724592][ T7650] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 152.761303][ T5915] usb 5-1: config 0 has no interface number 0 [ 152.799280][ T7650] syz.0.455: attempt to access beyond end of device [ 152.799280][ T7650] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 152.850200][ T5915] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.878428][ T5915] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.889429][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 152.976938][ T5915] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 152.986196][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 152.991581][ T7650] syz.0.455: attempt to access beyond end of device [ 152.991581][ T7650] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 153.004591][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.013821][ T92] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 153.040615][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 153.052631][ T92] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 153.085133][ T5915] usb 5-1: config 0 descriptor?? [ 153.092997][ T7650] syz.0.455: attempt to access beyond end of device [ 153.092997][ T7650] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 153.110856][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.127817][ T7650] syz.0.455: attempt to access beyond end of device [ 153.127817][ T7650] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 153.140943][ T92] usb 3-1: Product: syz [ 153.145153][ T92] usb 3-1: Manufacturer: syz [ 153.157519][ T92] usb 3-1: SerialNumber: syz [ 153.157529][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 153.180904][ T5854] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 153.203393][ T7650] syz.0.455: attempt to access beyond end of device [ 153.203393][ T7650] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 153.223540][ T92] usb 3-1: config 0 descriptor?? [ 153.292093][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 153.303036][ T92] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 153.310773][ T5854] usb 4-1: device descriptor read/64, error -71 [ 153.312372][ T92] usb 3-1: setting power ON [ 153.337090][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 153.358667][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.383221][ T7650] syz.0.455: attempt to access beyond end of device [ 153.383221][ T7650] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 153.426734][ T7650] syz.0.455: attempt to access beyond end of device [ 153.426734][ T7650] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 153.440562][ T92] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 153.449844][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.460681][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.469826][ T92] usb 3-1: media controller created [ 153.479942][ T7636] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.452'. [ 153.492579][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.502341][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 153.524454][ T7650] syz.0.455: attempt to access beyond end of device [ 153.524454][ T7650] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 153.537668][ T92] usb 3-1: selecting invalid altsetting 6 [ 153.543641][ T92] usb 3-1: digital interface selection failed (-22) [ 153.550407][ T92] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 153.559161][ T5854] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.569385][ T92] usb 3-1: setting power OFF [ 153.615109][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 153.621589][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 153.650825][ T92] (NULL device *): no alternate interface [ 153.653852][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 153.688799][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 153.690832][ T5854] usb 4-1: device descriptor read/64, error -71 [ 153.702718][ T92] usb 3-1: USB disconnect, device number 16 [ 153.832259][ T7650] syz.0.455: attempt to access beyond end of device [ 153.832259][ T7650] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 153.845515][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 153.855113][ T7650] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 153.865564][ T7650] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 153.930922][ T5854] usb usb4-port1: attempt power cycle [ 154.290824][ T5854] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.316423][ T5854] usb 4-1: device descriptor read/8, error -71 [ 154.562754][ T5854] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 154.591466][ T5854] usb 4-1: device descriptor read/8, error -71 [ 154.691506][ T5901] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 154.728937][ T5854] usb usb4-port1: unable to enumerate USB device [ 154.880807][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 154.889338][ T5901] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 154.899492][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.908416][ T5901] usb 1-1: Product: syz [ 154.912896][ T5901] usb 1-1: Manufacturer: syz [ 154.917561][ T5901] usb 1-1: SerialNumber: syz [ 154.924568][ T5915] usbhid 5-1:0.1: can't add hid device: -71 [ 154.924911][ T5901] usb 1-1: config 0 descriptor?? [ 154.930582][ T5915] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 154.947020][ T5901] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 154.967807][ T5915] usb 5-1: USB disconnect, device number 16 [ 154.970099][ T5901] cyphidcom ttyUSB0: required endpoint is missing [ 155.652564][ T5915] usb 1-1: USB disconnect, device number 19 [ 155.666384][ T5915] cypress_m8 1-1:0.0: device disconnected [ 155.827715][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.836300][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.982244][ T7693] syz.2.465 (7693) used greatest stack depth: 19424 bytes left [ 156.080965][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 156.230772][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 156.625789][ T92] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 156.645546][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.723351][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.408003][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 157.423447][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 157.441636][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.449642][ T10] usb 4-1: Product: syz [ 157.453906][ T10] usb 4-1: Manufacturer: syz [ 157.466469][ T10] usb 4-1: SerialNumber: syz [ 157.477993][ T10] usb 4-1: config 0 descriptor?? [ 157.494461][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 157.502590][ T10] usb 4-1: setting power ON [ 157.507103][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 157.518153][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.542499][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 157.552927][ T10] usb 4-1: media controller created [ 157.565624][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 157.576356][ T92] usb 3-1: can't read configurations, error -61 [ 157.691005][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.830971][ T92] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 157.896465][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.916558][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.966104][ T10] usb 4-1: selecting invalid altsetting 6 [ 158.004723][ T10] usb 4-1: digital interface selection failed (-22) [ 158.079278][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.467'. [ 158.092494][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 158.104304][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 158.117550][ T7698] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 158.146939][ T92] usb 3-1: can't read configurations, error -61 [ 158.159717][ T10] usb 4-1: setting power OFF [ 158.403219][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 158.408972][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 158.418506][ T92] usb usb3-port1: attempt power cycle [ 158.424489][ T10] (NULL device *): no alternate interface [ 158.447618][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 158.465706][ T10] usb 4-1: USB disconnect, device number 19 [ 158.595454][ T30] audit: type=1400 audit(1755409836.087:455): avc: denied { create } for pid=7721 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 158.623846][ T30] audit: type=1400 audit(1755409836.107:456): avc: denied { ioctl } for pid=7721 comm="syz.0.475" path="socket:[18632]" dev="sockfs" ino=18632 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.627806][ T9] IPVS: starting estimator thread 0... [ 158.655325][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.760853][ T92] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 158.782927][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 158.805557][ T7723] IPVS: using max 70 ests per chain, 168000 per kthread [ 158.820166][ T92] usb 3-1: can't read configurations, error -61 [ 158.885359][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.895986][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.960810][ T92] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 158.992775][ T92] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 159.006359][ T92] usb 3-1: can't read configurations, error -61 [ 159.017247][ T92] usb usb3-port1: unable to enumerate USB device [ 159.100825][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 159.287732][ T30] audit: type=1400 audit(1755409836.767:457): avc: denied { read } for pid=7732 comm="syz.2.478" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.570452][ T30] audit: type=1400 audit(1755409836.767:458): avc: denied { open } for pid=7732 comm="syz.2.478" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.623561][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 159.638494][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.649132][ T30] audit: type=1400 audit(1755409836.777:459): avc: denied { ioctl } for pid=7732 comm="syz.2.478" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.679480][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.687545][ T10] usb 4-1: Product: syz [ 159.695076][ T10] usb 4-1: Manufacturer: syz [ 159.702938][ T10] usb 4-1: SerialNumber: syz [ 159.711911][ T10] usb 4-1: config 0 descriptor?? [ 159.760838][ T976] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 159.890780][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.930817][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 159.965636][ T976] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 159.977239][ T976] usb 1-1: config 0 has no interface number 0 [ 159.986787][ T976] usb 1-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=e3.3b [ 159.996303][ T30] audit: type=1400 audit(1755409837.477:460): avc: denied { bind } for pid=7742 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.997226][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.024333][ T976] usb 1-1: Product: syz [ 160.028508][ T976] usb 1-1: Manufacturer: syz [ 160.033166][ T976] usb 1-1: SerialNumber: syz [ 160.041560][ T976] usb 1-1: config 0 descriptor?? [ 160.060856][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 160.068648][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 160.078528][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.086606][ T24] usb 5-1: Product: syz [ 160.090840][ T24] usb 5-1: Manufacturer: syz [ 160.095448][ T24] usb 5-1: SerialNumber: syz [ 160.103196][ T24] usb 5-1: config 0 descriptor?? [ 160.166005][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 160.174832][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.184632][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 160.192634][ T10] usb 4-1: media controller created [ 160.204389][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.316436][ T976] smsusb:smsusb_probe: board id=12, interface number 149 [ 160.327830][ T976] usb 1-1: USB disconnect, device number 20 [ 160.367242][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.375908][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 160.383860][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 160.394671][ T10] usb 4-1: USB disconnect, device number 20 [ 160.417430][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 160.514339][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 160.523846][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.533602][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 160.541582][ T24] usb 5-1: media controller created [ 160.552955][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.793802][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.801279][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 160.810775][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 160.825295][ T24] usb 5-1: USB disconnect, device number 17 [ 160.852109][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 161.453746][ T7756] ALSA: mixer_oss: invalid OSS volume '' [ 161.459564][ T7756] ALSA: mixer_oss: invalid OSS volume '' [ 161.465402][ T7756] ALSA: mixer_oss: invalid OSS volume '' [ 161.858590][ T30] audit: type=1400 audit(1755409839.347:461): avc: denied { execute } for pid=7761 comm="syz.2.487" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.966544][ T7768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7768 comm=syz.1.488 [ 162.041033][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.230814][ T976] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.233543][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 162.296312][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.344126][ T9] usb 1-1: config 120 has an invalid interface number: 86 but max is 0 [ 162.395622][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.407340][ T9] usb 1-1: config 120 has no interface number 0 [ 162.430483][ T9] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 162.457140][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.478966][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.498839][ T9] usb 1-1: Product: syz [ 162.519481][ T9] usb 1-1: Manufacturer: syz [ 162.545383][ T9] usb 1-1: SerialNumber: syz [ 162.591018][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 162.842703][ T30] audit: type=1400 audit(1755409840.337:462): avc: denied { read write } for pid=7757 comm="syz.0.485" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.866478][ T30] audit: type=1400 audit(1755409840.337:463): avc: denied { open } for pid=7757 comm="syz.0.485" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 162.897610][ T24] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.910562][ T24] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.918050][ T24] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.937543][ T24] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.05 Device [syz0] on syz0 [ 162.980756][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 163.085599][ T976] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 163.105982][ T976] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 163.106020][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 163.128493][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.180522][ T976] usb 5-1: Product: syz [ 163.187007][ T976] usb 5-1: Manufacturer: syz [ 163.193338][ T976] usb 5-1: SerialNumber: syz [ 163.231796][ T976] usb 5-1: config 0 descriptor?? [ 163.253167][ T976] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 163.264828][ T30] audit: type=1400 audit(1755409840.757:464): avc: denied { bind } for pid=7780 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.307067][ T976] usb 5-1: setting power ON [ 163.327940][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 164.051346][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.087775][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.101176][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.217079][ T7767] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.489'. [ 164.295554][ T976] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 164.564623][ T976] usb 5-1: media controller created [ 164.668477][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.708798][ T976] usb 5-1: selecting invalid altsetting 6 [ 164.730064][ T976] usb 5-1: digital interface selection failed (-22) [ 164.750337][ T976] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 164.971572][ T976] usb 5-1: setting power OFF [ 164.976224][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 164.982130][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 164.991766][ T976] (NULL device *): no alternate interface [ 165.349586][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.492450][ T976] usb 5-1: USB disconnect, device number 18 [ 165.700939][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 165.992754][ T9] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found [ 166.543608][ T9] huawei_cdc_ncm 1-1:120.86: bind() failure [ 166.556519][ T9] usb 1-1: USB disconnect, device number 21 [ 166.607724][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 166.634485][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.648149][ T10] usb 4-1: config 0 has no interface number 0 [ 166.662266][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.677353][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.687381][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 166.772639][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.784256][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.793626][ T10] usb 4-1: config 0 descriptor?? [ 166.806853][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.842941][ T7838] bio_check_eod: 2 callbacks suppressed [ 166.842952][ T7838] syz.2.508: attempt to access beyond end of device [ 166.842952][ T7838] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.861846][ T7838] SQUASHFS error: Failed to read block 0x0: -5 [ 166.868003][ T7838] unable to read squashfs_super_block [ 167.117413][ T7840] bridge_slave_0: left allmulticast mode [ 167.123501][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.991324][ T7840] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.191849][ T30] audit: type=1400 audit(1755409846.677:465): avc: denied { setopt } for pid=7856 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.212665][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 169.329467][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 169.368594][ T30] audit: type=1400 audit(1755409846.817:466): avc: denied { write } for pid=7865 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.420975][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 169.435312][ T10] usb 4-1: USB disconnect, device number 21 [ 169.576517][ T7855] netlink: 160 bytes leftover after parsing attributes in process `syz.2.512'. [ 169.690027][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 169.707671][ T30] audit: type=1400 audit(1755409847.177:467): avc: denied { bind } for pid=7873 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.792038][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 169.919108][ T30] audit: type=1400 audit(1755409847.397:468): avc: denied { create } for pid=7873 comm="syz.1.518" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.142868][ T30] audit: type=1400 audit(1755409847.397:469): avc: denied { write } for pid=7873 comm="syz.1.518" name="file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.417937][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 171.433134][ T30] audit: type=1400 audit(1755409847.397:470): avc: denied { open } for pid=7873 comm="syz.1.518" path="/117/file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.465351][ T30] audit: type=1400 audit(1755409848.957:471): avc: denied { getopt } for pid=7883 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.565796][ T7886] FAULT_INJECTION: forcing a failure. [ 171.565796][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 171.578473][ T7886] CPU: 1 UID: 0 PID: 7886 Comm: syz.0.519 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 171.578499][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.578510][ T7886] Call Trace: [ 171.578516][ T7886] [ 171.578524][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 171.578547][ T7886] should_fail_ex+0x512/0x640 [ 171.578569][ T7886] should_failslab+0xc2/0x120 [ 171.578589][ T7886] __kmalloc_cache_noprof+0x6a/0x3e0 [ 171.578616][ T7886] ? autofs_wait+0x307/0x1a70 [ 171.578640][ T7886] autofs_wait+0x307/0x1a70 [ 171.578660][ T7886] ? __pfx___schedule+0x10/0x10 [ 171.578688][ T7886] ? __pfx_autofs_wait+0x10/0x10 [ 171.578710][ T7886] ? kasan_check_range+0x15c/0x1b0 [ 171.578734][ T7886] ? preempt_schedule_thunk+0x16/0x30 [ 171.578758][ T7886] ? preempt_schedule_common+0x44/0xc0 [ 171.578776][ T7886] autofs_mount_wait+0x132/0x380 [ 171.578798][ T7886] autofs_d_automount+0x390/0x7f0 [ 171.578819][ T7886] __traverse_mounts+0x192/0x790 [ 171.578845][ T7886] step_into+0x5aa/0x2270 [ 171.578864][ T7886] ? __pfx_step_into+0x10/0x10 [ 171.578880][ T7886] ? __pfx___up_read+0x10/0x10 [ 171.578899][ T7886] ? lock_release+0x201/0x2f0 [ 171.578923][ T7886] ? lookup_fast+0x156/0x610 [ 171.578940][ T7886] walk_component+0xfc/0x5b0 [ 171.578956][ T7886] path_lookupat+0x142/0x6d0 [ 171.578975][ T7886] filename_lookup+0x224/0x5f0 [ 171.578993][ T7886] ? __pfx_filename_lookup+0x10/0x10 [ 171.579020][ T7886] ? getname_flags.part.0+0x1c5/0x550 [ 171.579046][ T7886] user_path_at+0x3a/0x60 [ 171.579063][ T7886] __x64_sys_mount+0x1fc/0x310 [ 171.579085][ T7886] ? __pfx___x64_sys_mount+0x10/0x10 [ 171.579110][ T7886] do_syscall_64+0xcd/0x4c0 [ 171.579129][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.579146][ T7886] RIP: 0033:0x7f8e79b8ebe9 [ 171.579160][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.579177][ T7886] RSP: 002b:00007f8e77db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.579195][ T7886] RAX: ffffffffffffffda RBX: 00007f8e79db6180 RCX: 00007f8e79b8ebe9 [ 171.579206][ T7886] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 171.579217][ T7886] RBP: 00007f8e77db4090 R08: 0000000000000000 R09: 0000000000000000 [ 171.579228][ T7886] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 171.579239][ T7886] R13: 00007f8e79db6218 R14: 00007f8e79db6180 R15: 00007ffde0ea3768 [ 171.579256][ T7886] [ 171.830226][ T30] audit: type=1400 audit(1755409849.027:472): avc: denied { mount } for pid=7878 comm="syz.0.519" name="/" dev="autofs" ino=17988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 171.917761][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.024740][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.030990][ T30] audit: type=1400 audit(1755409849.377:473): avc: denied { unlink } for pid=5839 comm="syz-executor" name="file0" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.056195][ T30] audit: type=1400 audit(1755409849.447:474): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 172.143511][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.152867][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.163811][ T10] usb 4-1: config 0 descriptor?? [ 172.424756][ T10] usb 4-1: can't set config #0, error -71 [ 172.450890][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 172.462524][ T10] usb 4-1: USB disconnect, device number 22 [ 172.630824][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 172.637491][ T9] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 172.661296][ T9] usb 5-1: config 0 has no interface number 0 [ 172.667414][ T9] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.688650][ T5915] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 172.769874][ T9] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 172.794151][ T9] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 172.806735][ T9] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 172.817203][ T9] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 172.827580][ T9] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.845719][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 173.101109][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.231123][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.260747][ T9] usb 5-1: Product: syz [ 173.265009][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.284172][ T9] usb 5-1: Manufacturer: syz [ 173.293287][ T9] usb 5-1: SerialNumber: syz [ 173.302859][ T5915] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 173.313417][ T9] usb 5-1: config 0 descriptor?? [ 173.319448][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.319512][ T7889] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.337415][ T5915] usb 1-1: config 0 descriptor?? [ 173.344246][ T5915] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 173.365901][ T7889] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.433148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 173.480975][ T976] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 173.605705][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.619634][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.711109][ T9] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 173.713720][ T7917] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 173.729283][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 173.736970][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.745213][ T976] usb 4-1: config 0 has no interface number 0 [ 173.751453][ T976] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.808007][ T976] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.818372][ T9] etas_es58x 5-1:0.219: could not retrieve the product info string [ 173.830354][ T976] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 173.845848][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.846700][ T9] usb 5-1: USB disconnect, device number 19 [ 173.873084][ T9] etas_es58x 5-1:0.219: Disconnecting syz syz [ 173.874309][ T976] usb 4-1: config 0 descriptor?? [ 174.364306][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 174.364342][ T30] audit: type=1800 audit(1755409851.847:479): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.532" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 174.928606][ T7944] hub 6-0:1.0: USB hub found [ 174.933647][ T7944] hub 6-0:1.0: 1 port detected [ 175.120837][ T24] usb 1-1: USB disconnect, device number 22 [ 176.477056][ T976] usbhid 4-1:0.1: can't add hid device: -71 [ 176.490545][ T976] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 176.509754][ T976] usb 4-1: USB disconnect, device number 23 [ 177.267664][ T976] IPVS: starting estimator thread 0... [ 177.387259][ T7975] IPVS: using max 72 ests per chain, 172800 per kthread [ 177.560819][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 178.002592][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 178.009590][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 178.018040][ T9] usb 5-1: config 0 has no interface number 0 [ 178.025979][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 178.035164][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.043917][ T9] usb 5-1: Product: syz [ 178.051206][ T9] usb 5-1: Manufacturer: syz [ 178.060805][ T9] usb 5-1: SerialNumber: syz [ 178.067010][ T9] usb 5-1: config 0 descriptor?? [ 178.073708][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 178.158947][ T7967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.295558][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 178.308344][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 179.550861][ T5854] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 179.607160][ T8017] ipvlan2: entered promiscuous mode [ 180.020760][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 180.090942][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.193637][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.321251][ T5854] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 180.330332][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.338703][ T5854] usb 1-1: Product: syz [ 180.343341][ T5854] usb 1-1: Manufacturer: syz [ 180.347958][ T5854] usb 1-1: SerialNumber: syz [ 180.425958][ T8025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 180.425958][ T8025] program syz.1.559 not setting count and/or reply_len properly [ 180.718012][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 180.718025][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 180.718054][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 180.725172][ T5854] usb 1-1: config 0 descriptor?? [ 180.851816][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 180.859392][ T9] usb 5-1: USB disconnect, device number 20 [ 180.875946][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 180.895833][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 180.923347][ T9] quatech2 5-1:0.51: device disconnected [ 181.140628][ T8030] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.563'. [ 181.172210][ T5915] usb 1-1: USB disconnect, device number 23 [ 182.766929][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'. [ 183.368374][ T30] audit: type=1400 audit(1755409860.857:480): avc: denied { append } for pid=8063 comm="syz.4.571" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.401843][ T5854] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 183.419986][ T5854] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.202568][ T8087] unsupported nla_type 52263 [ 184.328871][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 185.046950][ T30] audit: type=1400 audit(1755409862.487:481): avc: denied { mount } for pid=8096 comm="syz.0.579" name="/" dev="rpc_pipefs" ino=20573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 185.070752][ T30] audit: type=1400 audit(1755409862.487:482): avc: denied { watch } for pid=8096 comm="syz.0.579" path="/116/file0" dev="rpc_pipefs" ino=20573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 185.185453][ T8101] IPVS: length: 24 != 792 [ 185.385744][ T30] audit: type=1400 audit(1755409862.497:483): avc: denied { unmount } for pid=8096 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 188.794380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.731511][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.737816][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.351697][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.357985][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.191809][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.730667][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 293.737619][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6079/1:b..l [ 293.745496][ C1] rcu: (detected by 1, t=10502 jiffies, g=18781, q=1124 ncpus=2) [ 293.753264][ C1] task:udevd state:R running task stack:24936 pid:6079 tgid:6079 ppid:5216 task_flags:0x40014c flags:0x00004002 [ 293.766716][ C1] Call Trace: [ 293.769975][ C1] [ 293.772880][ C1] __schedule+0x1190/0x5de0 [ 293.777385][ C1] ? unwind_get_return_address+0x59/0xa0 [ 293.783769][ C1] ? __pfx___schedule+0x10/0x10 [ 293.788601][ C1] ? x64_sys_call+0x14fa/0x1720 [ 293.793424][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.798767][ C1] ? __page_table_check_zero+0x346/0x5d0 [ 293.804379][ C1] preempt_schedule_irq+0x51/0x90 [ 293.809371][ C1] irqentry_exit+0x36/0x90 [ 293.813755][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.819702][ C1] RIP: 0010:__orc_find+0x49/0xf0 [ 293.824607][ C1] Code: 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e <4c> 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 [ 293.844181][ C1] RSP: 0018:ffffc90004baf400 EFLAGS: 00000246 [ 293.850214][ C1] RAX: ffffffff913a8efa RBX: ffffffff90b82154 RCX: dffffc0000000000 [ 293.858153][ C1] RDX: ffffffff81000154 RSI: 0000000000000000 RDI: ffffffff90b82150 [ 293.866100][ C1] RBP: ffffffff90b82150 R08: ffffffff913a8fc6 R09: 0000000000000000 [ 293.874040][ C1] R10: ffffc90004baf4b0 R11: 0000000000000001 R12: ffffffff90b82150 [ 293.881981][ C1] R13: ffffffff8100012f R14: ffffffff90b82150 R15: ffffffff90b82150 [ 293.889931][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 293.895968][ C1] ? syscall_return_via_sysret+0x1c/0x87 [ 293.901570][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 293.907603][ C1] unwind_next_frame+0x2ec/0x20a0 [ 293.912595][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.918638][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.924762][ C1] arch_stack_walk+0x94/0x100 [ 293.929410][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.935445][ C1] stack_trace_save+0x8e/0xc0 [ 293.940093][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 293.945435][ C1] ? debug_check_no_obj_freed+0x31f/0x600 [ 293.951127][ C1] ? rcu_is_watching+0x12/0xc0 [ 293.955861][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 293.961809][ C1] save_stack+0x160/0x1f0 [ 293.966112][ C1] ? __pfx_save_stack+0x10/0x10 [ 293.970934][ C1] ? free_unref_folios+0xa61/0x16b0 [ 293.976111][ C1] ? folios_put_refs+0x56f/0x740 [ 293.981027][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 293.986829][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 293.992953][ C1] ? tlb_finish_mmu+0x168/0x7c0 [ 293.997785][ C1] ? exit_mmap+0x403/0xb90 [ 294.002203][ C1] ? __mmput+0x12a/0x410 [ 294.006427][ C1] ? mmput+0x62/0x70 [ 294.010294][ C1] ? do_exit+0x7c7/0x2bf0 [ 294.014605][ C1] ? do_group_exit+0xd3/0x2a0 [ 294.019437][ C1] ? __x64_sys_exit_group+0x3e/0x50 [ 294.024606][ C1] ? x64_sys_call+0x14fa/0x1720 [ 294.029432][ C1] ? do_syscall_64+0xcd/0x4c0 [ 294.034083][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.040135][ C1] ? lock_release+0x201/0x2f0 [ 294.044784][ C1] ? rcu_read_lock_held+0x9/0x50 [ 294.049695][ C1] __reset_page_owner+0x84/0x1a0 [ 294.054616][ C1] free_unref_folios+0xa61/0x16b0 [ 294.059609][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.064352][ C1] folios_put_refs+0x56f/0x740 [ 294.069087][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 294.074350][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 294.079956][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 294.086084][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.091095][ C1] ? lock_release+0x201/0x2f0 [ 294.095752][ C1] ? __pfx___might_resched+0x10/0x10 [ 294.101006][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 294.106959][ C1] tlb_finish_mmu+0x168/0x7c0 [ 294.111608][ C1] exit_mmap+0x403/0xb90 [ 294.115828][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.120578][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 294.125317][ C1] __mmput+0x12a/0x410 [ 294.129356][ C1] mmput+0x62/0x70 [ 294.133051][ C1] do_exit+0x7c7/0x2bf0 [ 294.137181][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.142177][ C1] ? __pfx_do_exit+0x10/0x10 [ 294.146744][ C1] ? do_group_exit+0x1c3/0x2a0 [ 294.151499][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.156241][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.160972][ C1] do_group_exit+0xd3/0x2a0 [ 294.165447][ C1] __x64_sys_exit_group+0x3e/0x50 [ 294.170457][ C1] x64_sys_call+0x14fa/0x1720 [ 294.175106][ C1] do_syscall_64+0xcd/0x4c0 [ 294.179579][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.185450][ C1] RIP: 0033:0x7f0a6b4f16c5 [ 294.189832][ C1] RSP: 002b:00007ffec9afd7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 294.198231][ C1] RAX: ffffffffffffffda RBX: 000055fdc50e9470 RCX: 00007f0a6b4f16c5 [ 294.206171][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 294.214113][ C1] RBP: 000055fdc4e922c0 R08: 0000000000000000 R09: 0000000000000000 [ 294.222052][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.230000][ C1] R13: 00007ffec9afd800 R14: 0000000000000000 R15: 0000000000000000 [ 294.237940][ C1] [ 294.240932][ C1] rcu: rcu_preempt kthread starved for 5842 jiffies! g18781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 294.252001][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 294.261964][ C1] rcu: RCU grace-period kthread stack dump: [ 294.267827][ C1] task:rcu_preempt state:R running task stack:28968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 294.281266][ C1] Call Trace: [ 294.284515][ C1] [ 294.287426][ C1] __schedule+0x1190/0x5de0 [ 294.291922][ C1] ? __pfx___schedule+0x10/0x10 [ 294.296753][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 294.302373][ C1] ? schedule+0x2d7/0x3a0 [ 294.306670][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.311404][ C1] ? lock_release+0x201/0x2f0 [ 294.316054][ C1] schedule+0xe7/0x3a0 [ 294.320115][ C1] schedule_timeout+0x123/0x290 [ 294.324964][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 294.330328][ C1] ? __pfx_process_timeout+0x10/0x10 [ 294.335600][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.341379][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 294.346811][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 294.351544][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 294.356797][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 294.361701][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 294.366520][ C1] rcu_gp_kthread+0x270/0x380 [ 294.371186][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 294.376351][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.381097][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.386264][ C1] ? __kthread_parkme+0x19e/0x250 [ 294.391259][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 294.396436][ C1] kthread+0x3c5/0x780 [ 294.400472][ C1] ? __pfx_kthread+0x10/0x10 [ 294.405030][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.409764][ C1] ? __pfx_kthread+0x10/0x10 [ 294.414331][ C1] ret_from_fork+0x5d7/0x6f0 [ 294.418912][ C1] ? __pfx_kthread+0x10/0x10 [ 294.423467][ C1] ret_from_fork_asm+0x1a/0x30 [ 294.428206][ C1] [ 294.431195][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 294.437484][ C1] Sending NMI from CPU 1 to CPUs 0: [ 294.442664][ C0] NMI backtrace for cpu 0 [ 294.442675][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 294.442692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.442699][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 294.442715][ C0] Code: 7c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 92 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 294.442727][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 294.442739][ C0] RAX: 00000000010003d4 RBX: 0000000000000000 RCX: ffffffff8b937c29 [ 294.442747][ C0] RDX: ffffed1017086656 RSI: ffffffff8c162680 RDI: ffffffff819133c1 [ 294.442756][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000000 R09: ffffed1017086655 [ 294.442764][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 294.442772][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3b90 R15: 0000000000000000 [ 294.442781][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 294.442795][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.442804][ C0] CR2: 00007fe0756ed480 CR3: 000000001dfee000 CR4: 00000000003526f0 [ 294.442812][ C0] Call Trace: [ 294.442818][ C0] [ 294.442822][ C0] default_idle+0x13/0x20 [ 294.442836][ C0] default_idle_call+0x6d/0xb0 [ 294.442850][ C0] do_idle+0x391/0x510 [ 294.442866][ C0] ? __pfx_do_idle+0x10/0x10 [ 294.442880][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 294.442896][ C0] cpu_startup_entry+0x4f/0x60 [ 294.442910][ C0] rest_init+0x16b/0x2b0 [ 294.442926][ C0] ? acpi_subsystem_init+0x133/0x180 [ 294.442944][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 294.442957][ C0] start_kernel+0x3ee/0x4d0 [ 294.442976][ C0] x86_64_start_reservations+0x18/0x30 [ 294.442995][ C0] x86_64_start_kernel+0x130/0x190 [ 294.443013][ C0] common_startup_64+0x13e/0x148 [ 294.443031][ C0]