last executing test programs: 11.002945049s ago: executing program 2 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="000000001158dca714e79adc000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef9a673}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) (async) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) 11.001461902s ago: executing program 0 (id=1163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000002060108000034e4000000eaffffffff0400010006000000050004000000000078a19bc241e0176adafbef0e7cb7a5eeee572594c8c09fab045ce84d58f2a124b789b63250"], 0x24}}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004280)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="680033008000e100ffffffffffff080211000000505050505050002003000008000000000100010001000301"], 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 10.888330333s ago: executing program 2 (id=1164): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32], 0x50) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) socket(0x23, 0x6, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/207, 0xcf}, {&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f406c4aec4bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff", 0x134}, {&(0x7f0000000740)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb0405e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d328f7d134706eb4d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb832c42d9f60561d5086ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8e7b38ce7c6c4daf306d0136c353c109f0a63c26df5f8866e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee0849699dae2e0bb675bf07392f4b0303f2498c892988420f1e144e73eb89146ccde129625478ae391d7ed1d6f5fc03c603c699250ff4801890eda63df41b0b9d619b2dad24798faf47863f79ee52ee40e8550c52c28a795377d934e9b3cb2f9f0ae973055288f5ebbb6a193e5cf89d3dfff60d4e545abda64b1c55d315931540117b96e72a5cea284c4a9d99d165d19e12176acd226a9ec38d6889c913b8c98b3a", 0x288}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) (async) sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @loopback, 0x0, 0x100000}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="53005915c2f5fd2bef3c2a0321a67b1367cda432df0d947adf55f0ef6a0be08c395187de006029b2fec172d730eda941daaba4d198400b80dfb8d040e0d338646ed6d272a5a40b4fdc1c39a916313035950f98a700", 0x55}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r8, 0xffff) (async) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) (async) socket$alg(0x26, 0x5, 0x0) 10.689990978s ago: executing program 2 (id=1166): socket(0x26, 0x80000, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904"], 0x0) 10.172616179s ago: executing program 0 (id=1167): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000cc0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 10.172234862s ago: executing program 4 (id=1168): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x261, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000280)) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 9.336465457s ago: executing program 1 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500003bd99cf8afd0f10004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000008348b603de20415267380005fc24b23c0c442764ac87ec84e9ae8c24be6cd16fa8869ad1c839fe30a55de31db0100bcca0e4944c4a947ccf6ef29fae1d122369a8ea03bfd848126a593c201f0f55f9885c2c5e534e3e2fb61145753e63bfa93e8b0c27bae4ccce36"], 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a00)={0x400007f, {{0xa, 0x4e23, 0x130e25a2, @local, 0x7}}}, 0x88) 8.836950571s ago: executing program 0 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x3}) r3 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r3, 0x8, 0x2, r3}) 8.825043808s ago: executing program 4 (id=1172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 8.136459787s ago: executing program 3 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/131, 0x83) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8d", 0x8a}], 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r7, &(0x7f00000051c0)={0x2020}, 0x2020) socket$inet_udplite(0x2, 0x2, 0x88) 7.980643205s ago: executing program 0 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500003bd99cf8afd0f10004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000008348b603de20415267380005fc24b23c0c442764ac87ec84e9ae8c24be6cd16fa8869ad1c839fe30a55de31db0100bcca0e4944c4a947ccf6ef29fae1d122369a8ea03bfd848126a593c201f0f55f9885c2c5e534e3e2fb61145753e63bfa93e8b0c27bae4ccce36"], 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000a00)={0x400007f, {{0xa, 0x4e23, 0x130e25a2, @local, 0x7}}}, 0x88) 7.874339902s ago: executing program 4 (id=1175): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0xfff9, 0xe0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x40000000, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000100, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdd) 7.028397685s ago: executing program 3 (id=1176): r0 = gettid() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) (async, rerun: 32) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) (async) r4 = epoll_create(0x20003fd) (async) r5 = eventfd(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3, 0x1}, 0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x2}) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x300, 0xffff, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) (async) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r5, &(0x7f0000000080)={r4, r5, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xa7, 0x50, 0xca, 0x20, 0x5da, 0xa3, 0x8ac8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x100, 0x6, [{{0x9, 0x4, 0x30, 0x4, 0x0, 0x56, 0xfe, 0x14, 0xc}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44b}}, {0x18, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x420}}, {0x33, &(0x7f0000000240)=@string={0x33, 0x3, "2e6e5bee15c7260e673fc5d871b93a1ef5204a2f46501e891c968449b804e1d235fad95842b48a49432fce37dd3aed065f"}}, {0xa9, &(0x7f0000000680)=@string={0xa9, 0x3, "06b8389fa0fc9c61d926b89d1a247a60fee627823256571222eac5462c65af8a369e7607ddf40cf8d26ede06633f345866703fe816b2c505ae5ab77c91247b4f94734a72d405a5c0cc11dce2ccff4f12f742d378a0b7109ba01c898a3fea926567d103957697b7dd18bf569c5f5a78601a7eff1044c1cd183e2624ac7e5ae15893dcb5cfc23bef4e9dd694c44185de97d66f337450ae5b30f3f400640e4dd0a402d4cd52427eeb"}}, {0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="4103ea2e67cbae2867835baa3a1a02f468d2446e2facde4fb30eb0eec022b47305262ac33f4aae6fa6ef670c7b0fea517b580b897fccf9c2557688f0b7b5c324505671748b9c7681919af6a81bb428af225957838d6634aea9ca54c69ce3a06f768a4b20b552e557b81568cb5c0550384ca51870d97afc430bd084c0a6ea7f2012fbb42f502dba98e695b586228dbce925f7776f844339bb0a57864288b68af635d07acc2e15ebe3a9a994703099fcdeb730ebdb5ff97bb5aa42b1"]}, {0x5c, &(0x7f0000000340)=@string={0x5c, 0x3, "0e1a7139a39cb3b7ad63d6245a1974d60e7b728296ccd5d8d4606274380f29b96c8feae361ebf19c52fec8682b1299e3144dbe28c670923712587ef47f360149eecd15400502155f0a6f3419c1b9dcad28b1557af6d7a608b036"}}]}) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xcd}, @l2cap_cid_signaling={{0xc9}, [@l2cap_info_req={{0xa, 0xce, 0x64}, {0x8}}, @l2cap_conf_rsp={{0x5, 0x6, 0x3c}, {0x4000, 0x2, 0x4, [@l2cap_conf_mtu={0x1, 0x2, 0x800}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xe8, 0x2, 0x1, 0x4, 0x8d97, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x1, 0x100, 0x3, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x2, 0xa84, 0x8, 0x7}}]}}, @l2cap_move_chan_rsp={{0xf, 0xea, 0x4}, {0x3, 0x6}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x671e, 0x7}}, @l2cap_conf_req={{0x4, 0x4, 0x2d}, {0xd, 0x1, [@l2cap_conf_flushto={0x2, 0x2, 0x28d3}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x2, 0x2, 0xd6, 0xfffffffd, 0x3}}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x7, 0x88, 0x28, 0x401, 0x8001}}]}}, @l2cap_conf_rsp={{0x5, 0x3, 0x3e}, {0x1ff, 0x5, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0xae}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x2c, 0x3, 0x6, 0x7, 0x401}}, @l2cap_conf_efs={0x6, 0x10, {0x39, 0x2, 0x7, 0x6, 0x9, 0x7fff}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xffc0}, @l2cap_conf_mtu={0x1, 0x2, 0xe}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}]}}, 0xd2) 6.383824606s ago: executing program 2 (id=1177): socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf6, r4, 0x1, 0xb5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffe7b) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d0001071000"], 0x18}}, 0x880) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) 6.330814687s ago: executing program 3 (id=1178): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x2}, {0xf}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40010001, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01031500000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x4000001) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406022414f2ff0e000a000f00000002800000124c1c205fc5b61727ed56a85733eb9e83cedc1d7a649fb5bb524cea5247230288de6c87dab9b66e7c43037a823463b29bf739843b7c6a6a4d8cbdac68432b879d11dab45b5f0baa8abbdb4c20666e8a43fe581a411ba80b329eb2fb8e41105641652288154223172b8a96e37dd9fa2ac1f320e5a366f980", 0xa4}], 0x1}, 0x0) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB="2572be909e38a41704bb8961d4a470b281acabdce7a18296e0d581be1d9d3c2140675e9f9a9ede834f0a59d53c93e4527df3180906127acd355c5d763d355a97d2e247b7f5ce3817c5ecad7380ae3b0fbf5c0c5c379e63737d64c3ee3f945b5a1cdd7a37"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 5.864496011s ago: executing program 3 (id=1179): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x81000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) (async) sched_setattr(0x0, &(0x7f0000000100)={0x92, 0x5, 0x7, 0x8, 0x0, 0xb4d, 0xb, 0x7, 0x1000000, 0x3}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0xffffffffffffffff, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) shmget(0x3, 0x2000, 0x200, &(0x7f000012f000/0x2000)=nil) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getgid() (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.552465592s ago: executing program 4 (id=1180): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0xf3ff}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec621d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 4.437259621s ago: executing program 4 (id=1181): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xf, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="852000000100000085020a800000930c000200002b9500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1}, 0x94) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000300)={{0x3, 0x76d3}, 0x11}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x450, &(0x7f00000000c0)={[{@subsystem='cpuset'}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="e03d030041000b05d2000a000200053582c137153e3704020180fc5409000c007428e3043db9af280f75273a80ba7ad8997a0a128d8b1b21a437826579457864d6a95635b1d8edb455052bf1c28401848fa828a8b235c4d88a075385afb3e8bcc331d5a9f9ed29b7215692bfd0ef1dd9b0872edb57451cd501c66bc4fb8c89b297bec1ef378116dccdbd61e996fcbd0d33afcb1e5386e90600000000000000eed323a0f280848f5484c9279b82546cde7c40", 0xb2}], 0x1}, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000000) (async) openat$selinux_policy(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 4.172839364s ago: executing program 1 (id=1182): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x261, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000280)) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.181140616s ago: executing program 2 (id=1183): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff000000000000"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 3.179696034s ago: executing program 1 (id=1184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x3}) r3 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000300)={r3, 0x8, 0x2, r3}) 2.36774193s ago: executing program 3 (id=1185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c}, 0x14}}, 0x0) 2.355617637s ago: executing program 0 (id=1186): r0 = socket(0x11, 0x3, 0x2) (async, rerun: 32) fallocate(0xffffffffffffffff, 0x7, 0x4, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (rerun: 32) syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x103240) io_destroy(0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000001a40)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000400)="2ef51d08f4576ff6f6991991f06e9dc48aab588e640c3aa4e83befed14d9a745abce40325b2cf911ebfe95b0f9d146b92cf7f63e3227a71e105fdbcf3b3abdd9245f1d51e2c6e75d4286e60f0c52e4a38462307a1deba6ce2907dbceddab28f45a6ab07084990e16047338012b7359b24b7c908cb912f27cdfc5d33854d566a7bf897bbae59dc9d497794be9d4121e5f37c9e24ef6d4a22978e91ae9dc5501e754cf8448c52b3ee06c01f4245147dd671570", 0xb2}, {&(0x7f00000004c0)="2cebc0c065aebfe04efd279540435cac593028df573d11097e1c6f2d0fcde6b95ae08d45a17bc944cb6b8776ce565e29e9b1f35c593388c4e56884337b840beb670f35a8c93a5a8bbcb8f53ce979297811bd541a78562ab6ddc95c6642a1667a3f91c88102ed0f9ef2f17d6195afb3a58c9bc4add77f7698", 0x78}, {&(0x7f00000005c0)="4bd8f8fb06d0e625aa646537cbdfef353dbea906ef45c3ebfcff4a1c7027700050f2b09e54c5daf8f0ff540f020b4f7758524f2ce6f4e65c3dfecf1a178ad37faef3cfcc4ef0c8ae", 0x48}, {&(0x7f0000000300)="32b3a8e1eb8fe180bfb511c598149eb9b02e105d67a9c1a686943905dbf3a7211b972797", 0x24}, {&(0x7f0000000640)="9aea7933fd835d239a1c368c97d170d584876ea3b5f327427142627762c9e76f2f27e923b39191e5df25b73b14fbb326b10631f4327fb1d5144b495f5275b3f84ee1a54c4a57941dd9bc43d9247254b154bf44c4a1e350bd7819a822848564a7fca0e7280db97046f7a7ebd1dac811e9c06347e810c560479003614341b3818bbed847154e9680b0571db15d0825bfe74bfa33dada49397c0765f407576d2863e21e128b4e3d2dc2185ed948f23884151862a4002b3525be38a824edda9ff66dfaa4f5c3bbd0925d91457ea0cfd922b0e0b3382198cf972debe4f4", 0xdb}, {&(0x7f0000000780)="4eee252af94802b4ac64851e03fa610de28520b3e75d2fd6f8f06df5ebecea81c6c613894d7b974861d9b62e6d7bcb1b821656b7d61f01268a39f277c85f81f23c214509207cb9ba6660439cb5bc2aad4678fce93adca09357651e5aea1de2d4852fe197a4fac8c9f9fdbfe95e67bf893e954745b64775c241ae07b51145", 0x7e}], 0x7, &(0x7f0000001a80), 0x0, 0x4044810}}], 0x1, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b40)=ANY=[@ANYBLOB="1d7f0dc83fe26df80b36aa566c9322debfc1586260486d72cc581f8aac4c9e9c3289f51da8c10bf1185eabf696c57a219a5cec2b2b9e830f5a99b15a79ed5e07d369087e425c064703d1224da8474f8f555f4631aab157072688352c6a6d132d4601f1624ba032f52585f1a67af479bb", @ANYRES16=r5, @ANYBLOB="01000000000000002a00000008005800000000000e0001006e65746465767369348e6d0000000f0002006e657464653673686d3000000800030003001000add7084ac5bb201ac85ee9c684c63be836bce07369d9828f039f228ecb1ec7feca38fb41ccb0fdc8298ce5a3e35cd8d610613a7431df3e940b1a32434c35c0ea324f826be1a6aaa2354cf73c49884257ada2e1dfc84396ac2122f2e108c34c372604c9806726aa6670a16a5eb9e528000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24044081) syz_open_procfs$userns(r1, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='pstore\x00', 0x2208004, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404513083000000000000109022400150000c0b109040000010300010009210101000122050009058103ff"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00f4000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) 2.299252361s ago: executing program 1 (id=1187): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r4, &(0x7f0000000180)=""/161, 0xa1) 2.155894875s ago: executing program 0 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x80002001, 0x80) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000), 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2cad"]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000600)=@arm64={0x6, 0x8b, 0x5}) 1.071303332s ago: executing program 3 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x20080004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f000009e740)={0x2c, &(0x7f000009e440)={0x40, 0xc, 0x7, {0x7, 0x30, "365a76b622"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000480)={@multicast2, @private, @multicast1}, &(0x7f00000004c0)=0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0x240002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$inet6(r8, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="dbe03de3fb", 0x5}, {&(0x7f00000005c0)="4719c97db849847e6f29751d197e55e116f53187954c7a6ff5381a19fbcecede539f0288c745797269c7b45c7d387c7df497073c6fd493bc48fdc5ca427af7c9", 0x40}, {0x0}], 0x3}}], 0x1, 0x4000c04) socket$key(0xf, 0x3, 0x2) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000600)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1b) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x5, 0x9, 0xca, 0x6, 0x2, 0xff, 0x8, r9}, &(0x7f0000000440)=0x20) syz_usb_connect(0x0, 0xfffffffffffffdb1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x374d, 0x4) 896.520819ms ago: executing program 1 (id=1190): r0 = gettid() (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20a600, 0x0) syz_emit_vhci(&(0x7f0000001300)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0xd, 0xc9, "af273aa638281339"}}}, 0xe) (async) read$ptp(r1, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) (async) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 676.521581ms ago: executing program 4 (id=1191): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x2, 0x6, 0x301, 0x0, 0x4000, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x7, 0x1200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x10}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 675.775428ms ago: executing program 1 (id=1192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0xf8ff}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec621d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 0s ago: executing program 2 (id=1193): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x400000000000027}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x6, 0x9d, 0x1, 0x7, 0xfe, 0x8, 0x7, 0x5, 0xb2, 0xc, 0x4, 0x58, 0x5, 0x0, 0x6, 0xfe}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0xb, 0x4008032, r0, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_clone3(&(0x7f0000000340)={0x10019180, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r4, 0x0, &(0x7f0000000140)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xf0}}, 0x0) kernel console output (not intermixed with test programs): 0: couldn't start device: -90 [ 202.446244][ T6008] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 202.494082][ T5919] usb 3-1: USB disconnect, device number 14 [ 202.512207][ T10] usb 2-1: device descriptor read/64, error -71 [ 202.549701][ T7703] Device name cannot be null; rc = [-22] [ 202.559339][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 203.162123][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 203.261179][ T7708] CIFS mount error: No usable UNC path provided in device string! [ 203.261179][ T7708] [ 203.269256][ T30] audit: type=1400 audit(1766357583.227:379): avc: denied { link } for pid=7707 comm="syz.0.428" name="#5" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.271394][ T7708] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.298836][ T10] usb 2-1: device descriptor read/64, error -71 [ 203.309932][ T7709] evm: overlay not supported [ 203.332458][ T30] audit: type=1400 audit(1766357583.257:380): avc: denied { rename } for pid=7707 comm="syz.0.428" name="#6" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.548515][ T10] usb usb2-port1: attempt power cycle [ 203.601116][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 203.613225][ T5919] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.794733][ T5822] Bluetooth: hci4: link tx timeout [ 203.802635][ T5822] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.855463][ T30] audit: type=1400 audit(1766357583.737:381): avc: denied { shutdown } for pid=7712 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.905424][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.949068][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.980753][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.030563][ T5919] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 204.048414][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.058860][ T5919] usb 4-1: config 0 descriptor?? [ 204.162173][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 204.192583][ T10] usb 2-1: device descriptor read/8, error -71 [ 204.532171][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 204.777932][ T7733] hfsplus: unable to find HFS+ superblock [ 204.802544][ T10] usb 2-1: device descriptor read/8, error -71 [ 204.949595][ T10] usb usb2-port1: unable to enumerate USB device [ 205.471093][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 205.668912][ T6008] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 205.681442][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.706986][ T5919] usb 4-1: USB disconnect, device number 11 [ 206.261453][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 206.402035][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 206.628857][ T6008] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.641443][ T6008] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 206.662157][ T6008] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 206.687669][ T6008] usb 5-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.701029][ T6008] usb 5-1: config 8 interface 0 has no altsetting 0 [ 206.729351][ T6008] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 206.749759][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.779545][ T6008] usb 5-1: Product: 놴졵ꮉ㻴䉶篋Ⴠ諛ﻤ另궜悚Ė豉晴遫┱䑏颏쬫䬘馫儦⡻欘⠾瘒莫徙润鯣庖ዳ撪謶ჵ弅﵁Ἐ斺來뢮畽㐄㪋韌 [ 206.822699][ T7752] CIFS mount error: No usable UNC path provided in device string! [ 206.822699][ T7752] [ 206.844274][ T6008] usb 5-1: Manufacturer:   [ 206.872115][ T6008] usb 5-1: SerialNumber: ࠌ [ 206.877878][ T7752] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.055699][ T7758] hfsplus: unable to find HFS+ superblock [ 207.393781][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.422404][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.438839][ T6008] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.449417][ T6008] usb 5-1: selecting invalid altsetting 0 [ 207.460967][ T7762] wireguard0: entered promiscuous mode [ 207.513870][ T6008] usb 5-1: USB disconnect, device number 18 [ 208.280394][ T30] audit: type=1400 audit(1766357588.237:382): avc: denied { setopt } for pid=7774 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.282607][ T7780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.307750][ T7780] IPv6: NLM_F_CREATE should be set when creating new route [ 208.315085][ T7780] IPv6: NLM_F_CREATE should be set when creating new route [ 208.328753][ T7780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.389884][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 208.410551][ T7785] Unknown options in mask b7f2 [ 208.559100][ T7788] kvm: kvm [7781]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 208.762717][ T7797] CIFS mount error: No usable UNC path provided in device string! [ 208.762717][ T7797] [ 208.782197][ T7797] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.178994][ T7802] usb usb8: usbfs: process 7802 (syz.2.456) did not claim interface 0 before use [ 210.359266][ T7805] wireguard0: entered promiscuous mode [ 210.998749][ T7817] capability: warning: `syz.0.463' uses deprecated v2 capabilities in a way that may be insecure [ 211.260261][ T30] audit: type=1400 audit(1766357591.217:383): avc: denied { append } for pid=7813 comm="syz.2.460" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.293553][ T7820] Device name cannot be null; rc = [-22] [ 211.300475][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 211.346686][ T30] audit: type=1400 audit(1766357591.297:384): avc: denied { read } for pid=7813 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.432154][ T30] audit: type=1400 audit(1766357591.387:385): avc: denied { map } for pid=7813 comm="syz.2.460" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.232948][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 212.267334][ T7831] Unknown options in mask b7f2 [ 212.563579][ T7836] CIFS mount error: No usable UNC path provided in device string! [ 212.563579][ T7836] [ 212.583819][ T7836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.922560][ T5919] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 214.183435][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 214.289379][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.418779][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.552873][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.564900][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.598420][ T5919] usb 1-1: config 0 descriptor?? [ 215.199768][ T5919] hub 1-1:0.0: USB hub found [ 215.619669][ T7872] input: syz0 as /devices/virtual/input/input29 [ 215.804174][ T5919] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 215.836002][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 215.849362][ T7875] Unknown options in mask b7f2 [ 215.938259][ T7879] CIFS mount error: No usable UNC path provided in device string! [ 215.938259][ T7879] [ 215.961376][ T7879] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 216.236958][ T5919] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 216.340709][ T5919] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 218.324022][ T5919] usb 1-1: USB disconnect, device number 11 [ 219.755620][ T7921] CIFS mount error: No usable UNC path provided in device string! [ 219.755620][ T7921] [ 219.772089][ T7921] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.816109][ T30] audit: type=1400 audit(1766357599.767:386): avc: denied { getopt } for pid=7916 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.841098][ T7923] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 223.002077][ T6008] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.064263][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'. [ 223.073854][ T7978] Unknown options in mask b7f2 [ 223.139722][ T7980] CIFS mount error: No usable UNC path provided in device string! [ 223.139722][ T7980] [ 223.149920][ T7980] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 223.159866][ T6008] usb 1-1: device descriptor read/64, error -71 [ 223.405008][ T6008] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.413621][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 223.430332][ T7982] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 223.441545][ T30] audit: type=1400 audit(1766357603.407:387): avc: denied { relabelto } for pid=7981 comm="syz.2.507" name="99" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.474951][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 223.495758][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 223.512241][ T30] audit: type=1400 audit(1766357603.407:388): avc: denied { associate } for pid=7981 comm="syz.2.507" name="99" dev="tmpfs" ino=527 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.539950][ T30] audit: type=1400 audit(1766357603.427:389): avc: denied { mounton } for pid=7981 comm="syz.2.507" path="/99" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.572215][ T30] audit: type=1400 audit(1766357603.427:390): avc: denied { mount } for pid=7981 comm="syz.2.507" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 223.594766][ T30] audit: type=1400 audit(1766357603.467:391): avc: denied { accept } for pid=7983 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 223.674530][ T6008] usb 1-1: device descriptor read/64, error -71 [ 223.676027][ T30] audit: type=1400 audit(1766357603.637:392): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 223.782464][ T6008] usb usb1-port1: attempt power cycle [ 223.783391][ T30] audit: type=1400 audit(1766357603.677:393): avc: denied { remove_name } for pid=5806 comm="syz-executor" name="binderfs" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.830068][ T30] audit: type=1400 audit(1766357603.707:394): avc: denied { rmdir } for pid=5806 comm="syz-executor" name="99" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.957909][ T30] audit: type=1326 audit(1766357603.917:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7989 comm="syz.2.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 224.224190][ T6008] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.482674][ T6008] usb 1-1: device descriptor read/8, error -71 [ 224.762094][ T6008] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.784539][ T6008] usb 1-1: device descriptor read/8, error -71 [ 224.902440][ T6008] usb usb1-port1: unable to enumerate USB device [ 226.559395][ T8020] CIFS mount error: No usable UNC path provided in device string! [ 226.559395][ T8020] [ 226.627352][ T8020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 226.859044][ T8030] nbd: must specify a size in bytes for the device [ 226.877555][ T5822] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 228.257855][ T8045] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 228.267864][ T8045] netlink: 'syz.4.525': attribute type 4 has an invalid length. [ 228.382914][ T8045] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.525'. [ 230.589596][ T8066] CIFS mount error: No usable UNC path provided in device string! [ 230.589596][ T8066] [ 230.592086][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 230.601457][ T8066] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.788722][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 231.118872][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 231.118885][ T30] audit: type=1400 audit(1766357610.957:416): avc: denied { ioctl } for pid=8073 comm="syz.4.534" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.210869][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.224325][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 231.235255][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.244010][ T5889] usb 4-1: Product: syz [ 231.250609][ T5889] usb 4-1: Manufacturer: syz [ 231.329547][ T5889] usb 4-1: SerialNumber: syz [ 231.413838][ T5889] usb 4-1: config 0 descriptor?? [ 231.423423][ T8061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 231.654323][ T48] usb 4-1: USB disconnect, device number 12 [ 232.651254][ T30] audit: type=1400 audit(1766357612.607:417): avc: denied { mount } for pid=8101 comm="syz.2.544" name="/" dev="hugetlbfs" ino=17001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 233.182136][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.283748][ T30] audit: type=1326 audit(1766357613.217:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz.2.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x0 [ 233.310522][ T8104] CIFS mount error: No usable UNC path provided in device string! [ 233.310522][ T8104] [ 233.476404][ T8104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.592138][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 233.610462][ T5889] usb 4-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 233.675435][ T30] audit: type=1400 audit(1766357613.637:419): avc: denied { watch watch_reads } for pid=8101 comm="syz.2.544" path="/108" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 233.729352][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.801958][ T5889] usb 4-1: Product: syz [ 233.847932][ T5889] usb 4-1: Manufacturer: syz [ 234.034746][ T5889] usb 4-1: SerialNumber: syz [ 234.550025][ T5889] usb 4-1: config 0 descriptor?? [ 234.557620][ T5889] usb 4-1: bad CDC descriptors [ 235.659876][ T30] audit: type=1400 audit(1766357615.617:420): avc: denied { read write } for pid=8096 comm="syz.3.541" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.700036][ T48] usb 4-1: USB disconnect, device number 13 [ 235.718636][ T30] audit: type=1400 audit(1766357615.647:421): avc: denied { open } for pid=8096 comm="syz.3.541" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 235.744103][ T8132] fuse: Unknown parameter '">&vS_p' [ 235.750911][ T30] audit: type=1400 audit(1766357615.647:422): avc: denied { remount } for pid=8096 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.169680][ T8170] CIFS mount error: No usable UNC path provided in device string! [ 238.169680][ T8170] [ 238.199247][ T8170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 239.492239][ T30] audit: type=1400 audit(1766357619.447:423): avc: denied { name_bind } for pid=8175 comm="syz.0.561" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 239.971487][ T8184] input: syz0 as /devices/virtual/input/input30 [ 240.010089][ T8191] xt_hashlimit: max too large, truncated to 1048576 [ 240.229979][ T30] audit: type=1400 audit(1766357619.947:424): avc: denied { create } for pid=8175 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 240.300202][ T30] audit: type=1400 audit(1766357619.967:425): avc: denied { write } for pid=8175 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 240.322849][ T30] audit: type=1400 audit(1766357620.217:426): avc: denied { bind } for pid=8193 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.342253][ T30] audit: type=1400 audit(1766357620.217:427): avc: denied { listen } for pid=8193 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.423798][ T8210] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 240.446999][ T30] audit: type=1400 audit(1766357620.407:428): avc: denied { firmware_load } for pid=8207 comm="syz.3.569" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 240.448675][ T8210] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 240.722243][ T1209] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 240.872152][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 240.879913][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 240.912384][ T8223] fuse: Bad value for 'fd' [ 241.138533][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 241.186952][ T1209] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 241.211243][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 241.252228][ T1209] usb 4-1: Product: syz [ 241.273227][ T1209] usb 4-1: SerialNumber: syz [ 241.286630][ T1209] usb 4-1: config 0 descriptor?? [ 241.890942][ T5917] usb 4-1: USB disconnect, device number 14 [ 242.034847][ T30] audit: type=1400 audit(1766357621.997:429): avc: denied { write } for pid=8230 comm="syz.4.574" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.067207][ T8229] CIFS mount error: No usable UNC path provided in device string! [ 242.067207][ T8229] [ 242.087827][ T8229] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.094882][ T30] audit: type=1400 audit(1766357621.997:430): avc: denied { open } for pid=8230 comm="syz.4.574" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.175580][ T30] audit: type=1400 audit(1766357621.997:431): avc: denied { ioctl } for pid=8230 comm="syz.4.574" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.286399][ T8237] nbd: must specify a size in bytes for the device [ 242.553764][ T8208] syz.3.569 (8208) used greatest stack depth: 19688 bytes left [ 242.933726][ T1209] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 243.000883][ T30] audit: type=1400 audit(1766357622.957:432): avc: denied { read } for pid=8246 comm="syz.0.579" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 243.167291][ T1209] usb 2-1: config 0 has an invalid interface number: 190 but max is 0 [ 243.991139][ T1209] usb 2-1: config 0 has no interface number 0 [ 244.009932][ T1209] usb 2-1: config 0 interface 190 has no altsetting 0 [ 244.028335][ T1209] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 244.038529][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.047120][ T1209] usb 2-1: Product: syz [ 244.051370][ T1209] usb 2-1: Manufacturer: syz [ 244.056114][ T1209] usb 2-1: SerialNumber: syz [ 244.076727][ T1209] usb 2-1: config 0 descriptor?? [ 244.568383][ T1209] hub 2-1:0.190: bad descriptor, ignoring hub [ 244.612168][ T1209] hub 2-1:0.190: probe with driver hub failed with error -5 [ 244.640729][ T1209] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 244.673988][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 244.678896][ T1209] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 244.730855][ T1209] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 244.773540][ T1209] usb 2-1: USB disconnect, device number 24 [ 244.789794][ T8270] CIFS mount error: No usable UNC path provided in device string! [ 244.789794][ T8270] [ 244.799893][ T8270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.866614][ T8272] fuse: Bad value for 'fd' [ 246.652315][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 246.832319][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 246.910698][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.947618][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.982042][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.015488][ T48] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 247.055504][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.115313][ T48] usb 2-1: config 0 descriptor?? [ 247.877340][ T30] audit: type=1400 audit(1766357627.837:433): avc: denied { append } for pid=8294 comm="syz.2.593" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 247.937286][ T3790] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.952151][ T8297] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.095570][ T48] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 248.362478][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 248.500817][ T48] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 248.517267][ T48] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 248.582434][ T5807] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 248.597230][ T48] usb 2-1: USB disconnect, device number 25 [ 248.623010][ T5807] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.656329][ T5807] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.667911][ T5807] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.754997][ T8307] CIFS mount error: No usable UNC path provided in device string! [ 248.754997][ T8307] [ 248.766747][ T8307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.972101][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.810973][ T8336] fuse: Bad value for 'fd' [ 251.033491][ T8343] CIFS mount error: No usable UNC path provided in device string! [ 251.033491][ T8343] [ 251.043699][ T8343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.622774][ T8354] FAULT_INJECTION: forcing a failure. [ 251.622774][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 251.635519][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.4.609 Not tainted syzkaller #0 PREEMPT(full) [ 251.635547][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.635558][ T8354] Call Trace: [ 251.635565][ T8354] [ 251.635572][ T8354] dump_stack_lvl+0x16c/0x1f0 [ 251.635603][ T8354] should_fail_ex+0x512/0x640 [ 251.635629][ T8354] ? fs_reclaim_acquire+0xae/0x150 [ 251.635657][ T8354] should_failslab+0xc2/0x120 [ 251.635682][ T8354] __kmalloc_noprof+0xeb/0x910 [ 251.635714][ T8354] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 251.635745][ T8354] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 251.635768][ T8354] tomoyo_realpath_from_path+0xc2/0x6e0 [ 251.635796][ T8354] ? tomoyo_profile+0x47/0x60 [ 251.635825][ T8354] tomoyo_path_number_perm+0x245/0x580 [ 251.635846][ T8354] ? tomoyo_path_number_perm+0x237/0x580 [ 251.635869][ T8354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.635893][ T8354] ? find_held_lock+0x2b/0x80 [ 251.635946][ T8354] ? find_held_lock+0x2b/0x80 [ 251.635971][ T8354] ? hook_file_ioctl_common+0x144/0x410 [ 251.636005][ T8354] ? __fget_files+0x20e/0x3c0 [ 251.636035][ T8354] security_file_ioctl+0x9b/0x240 [ 251.636061][ T8354] __x64_sys_ioctl+0xb7/0x210 [ 251.636086][ T8354] do_syscall_64+0xcd/0xf80 [ 251.636111][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.636130][ T8354] RIP: 0033:0x7f706018f749 [ 251.636146][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.636164][ T8354] RSP: 002b:00007f7060fdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.636181][ T8354] RAX: ffffffffffffffda RBX: 00007f70603e6090 RCX: 00007f706018f749 [ 251.636194][ T8354] RDX: 0000200000001900 RSI: 000000000000541c RDI: 000000000000000c [ 251.636206][ T8354] RBP: 00007f7060fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 251.636218][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.636228][ T8354] R13: 00007f70603e6128 R14: 00007f70603e6090 R15: 00007ffc86b3ab08 [ 251.636256][ T8354] [ 251.636288][ T8354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.363371][ T5889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.562620][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 252.571934][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.591009][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.636185][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.670000][ T5889] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 252.700594][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.719618][ T5889] usb 1-1: config 0 descriptor?? [ 252.917116][ T8368] overlayfs: missing 'lowerdir' [ 254.061521][ T5889] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 254.090267][ T5889] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 254.106639][ T5889] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 254.221687][ T30] audit: type=1400 audit(1766357634.177:434): avc: denied { shutdown } for pid=8359 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.253351][ T1209] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 255.348061][ T1209] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.374326][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 255.386582][ T1209] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.532619][ T5889] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 255.542382][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.548758][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.562620][ T1209] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.609320][ T30] audit: type=1400 audit(1766357635.567:435): avc: denied { ioctl } for pid=8364 comm="syz.1.613" path="socket:[18472]" dev="sockfs" ino=18472 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.155677][ T8397] CIFS mount error: No usable UNC path provided in device string! [ 256.155677][ T8397] [ 256.165781][ T8397] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.202092][ T5874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.350598][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 256.351961][ T8401] netlink: 60 bytes leftover after parsing attributes in process `syz.4.621'. [ 256.382494][ T30] audit: type=1400 audit(1766357636.347:436): avc: denied { write } for pid=8400 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.402082][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 256.409967][ T5874] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 256.418690][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 256.441349][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 256.570819][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.580924][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 256.605533][ T5874] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 256.617673][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.629419][ T5874] usb 3-1: Product: syz [ 256.633673][ T5874] usb 3-1: Manufacturer: syz [ 256.733359][ T6155] usb 1-1: USB disconnect, device number 16 [ 256.827996][ T5874] usb 3-1: SerialNumber: syz [ 256.838905][ T5874] usb 3-1: config 0 descriptor?? [ 256.846886][ T8380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 256.861516][ T5874] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 256.872222][ T5874] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 256.973531][ T5874] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 257.072069][ T8422] exFAT-fs (loop0): unable to read boot sector [ 257.100726][ T8422] exFAT-fs (loop0): failed to read boot sector [ 257.107180][ T8422] exFAT-fs (loop0): failed to recognize exfat type [ 257.211314][ T5807] usb 3-1: USB disconnect, device number 15 [ 259.087426][ T8434] nbd: must specify a size in bytes for the device [ 259.159908][ T8436] CIFS mount error: No usable UNC path provided in device string! [ 259.159908][ T8436] [ 259.169957][ T8436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.387340][ T8442] loop7: detected capacity change from 0 to 8 [ 259.475081][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 260.712063][ T30] audit: type=1400 audit(1766357640.667:437): avc: denied { write } for pid=8461 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.869663][ T8489] CIFS mount error: No usable UNC path provided in device string! [ 260.869663][ T8489] [ 260.880201][ T8489] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 261.132433][ T6155] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 261.626581][ T6155] usb 1-1: Using ep0 maxpacket: 16 [ 261.651088][ T6155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.678594][ T6155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.703458][ T6155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.795696][ T6155] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 261.807272][ T6155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.824793][ T6155] usb 1-1: config 0 descriptor?? [ 261.866171][ T8502] nbd: must specify a size in bytes for the device [ 262.266308][ T8510] input: syz0 as /devices/virtual/input/input34 [ 262.806697][ T6155] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 262.832225][ T6155] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 262.840317][ T6155] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 263.042210][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 263.381061][ T1209] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 263.394051][ T6155] usb 1-1: USB disconnect, device number 17 [ 263.477977][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 263.501055][ T1209] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 263.605925][ T1209] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 263.748331][ T1209] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 264.543450][ T30] audit: type=1400 audit(1766357644.487:438): avc: denied { create } for pid=8538 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 265.332388][ T30] audit: type=1400 audit(1766357644.487:439): avc: denied { ioctl } for pid=8538 comm="syz.0.655" path="socket:[17879]" dev="sockfs" ino=17879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 265.491605][ T8547] nbd: must specify a size in bytes for the device [ 265.848660][ T30] audit: type=1400 audit(1766357645.767:440): avc: denied { map } for pid=8533 comm="syz.3.652" path="socket:[17882]" dev="sockfs" ino=17882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 266.321330][ T8560] Device name cannot be null; rc = [-22] [ 266.330602][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 268.387332][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 268.446705][ T30] audit: type=1400 audit(1766357648.407:441): avc: denied { setopt } for pid=8580 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.532751][ T8577] cifs: Unknown parameter 'c' [ 268.622335][ T8577] CIFS mount error: No usable UNC path provided in device string! [ 268.622335][ T8577] [ 268.634874][ T8577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 268.646553][ T30] audit: type=1804 audit(1766357648.577:442): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.666" name="/newroot/133/bus/bus" dev="overlay" ino=720 res=1 errno=0 [ 272.356980][ T8616] wireguard0: entered promiscuous mode [ 272.363271][ T8616] wireguard0: entered allmulticast mode [ 272.525777][ T8623] cifs: Unknown parameter 'c' [ 272.549654][ T8623] CIFS mount error: No usable UNC path provided in device string! [ 272.549654][ T8623] [ 272.665847][ T8623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 273.192328][ T5807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 273.392531][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 273.403256][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.415207][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.425795][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.440411][ T5807] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.449612][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.520398][ T5807] usb 4-1: config 0 descriptor?? [ 273.932175][ T5807] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 273.949638][ T5807] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 273.965265][ T5807] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 274.257778][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 274.670446][ T8655] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 274.886045][ T5867] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 274.886265][ T1209] usb 4-1: USB disconnect, device number 15 [ 274.897871][ T5867] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 274.915438][ T5867] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 275.113297][ T5867] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 275.232082][ T6613] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 275.402074][ T6613] usb 2-1: Using ep0 maxpacket: 16 [ 275.413213][ T6613] usb 2-1: config 0 has no interfaces? [ 275.426975][ T6613] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.455716][ T6613] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.464496][ T6613] usb 2-1: Manufacturer: syz [ 275.484855][ T8664] netlink: 'syz.0.689': attribute type 4 has an invalid length. [ 275.516990][ T6613] usb 2-1: config 0 descriptor?? [ 275.650743][ T30] audit: type=1400 audit(1766357655.587:443): avc: denied { create } for pid=8666 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 276.483163][ T1209] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 276.672345][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 276.685392][ T1209] usb 1-1: config 0 has no interfaces? [ 276.697174][ T1209] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.714621][ T1209] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.727393][ T1209] usb 1-1: Manufacturer: syz [ 276.745506][ T8655] trusted_key: syz.1.686 sent an empty control message without MSG_MORE. [ 276.757679][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.766700][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.832146][ T1209] usb 1-1: config 0 descriptor?? [ 276.881490][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 277.527951][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.950323][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.217812][ T1209] usb 2-1: USB disconnect, device number 26 [ 279.125608][ T8706] fuse: Bad value for 'fd' [ 279.146489][ T8706] binder: 8700:8706 ioctl c0306201 0 returned -14 [ 279.194184][ T30] audit: type=1400 audit(1766357659.107:444): avc: denied { ioctl } for pid=8700 comm="syz.4.698" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.500571][ T8709] usb usb8: usbfs: process 8709 (syz.1.700) did not claim interface 0 before use [ 279.541864][ T5867] usb 1-1: USB disconnect, device number 18 [ 280.302076][ T5996] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 280.323529][ T8720] syzkaller1: entered promiscuous mode [ 280.337261][ T8720] syzkaller1: entered allmulticast mode [ 280.374785][ T8720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=8720 comm=syz.3.704 [ 280.462119][ T5996] usb 5-1: Using ep0 maxpacket: 16 [ 280.494941][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.518615][ T5996] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.556233][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.602111][ T5996] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 280.611389][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.623704][ T5996] usb 5-1: config 0 descriptor?? [ 281.063575][ T5996] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 281.081537][ T5996] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 281.611695][ T5996] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 281.862808][ T30] audit: type=1400 audit(1766357661.827:445): avc: denied { ioctl } for pid=8731 comm="syz.0.709" path="socket:[19249]" dev="sockfs" ino=19249 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 282.135513][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 282.184159][ T5993] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 282.197365][ T5993] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 282.203102][ T48] usb 5-1: USB disconnect, device number 19 [ 282.235521][ T5993] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 282.267075][ T8746] cifs: Unknown parameter 'cac%' [ 282.279377][ T5993] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 282.290708][ T8746] CIFS mount error: No usable UNC path provided in device string! [ 282.290708][ T8746] [ 282.314478][ T8746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.748290][ T5867] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 284.077723][ T8761] sg_write: data in/out 477/14 bytes for SCSI command 0x0-- guessing data in; [ 284.077723][ T8761] program syz.2.715 not setting count and/or reply_len properly [ 284.281695][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 284.292169][ T5867] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 284.696696][ T5867] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 284.705905][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.735382][ T5867] usb 2-1: config 0 descriptor?? [ 284.748941][ T5867] gspca_main: 055f:d001 too many config [ 284.915606][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.718'. [ 284.955622][ T5993] usb 2-1: USB disconnect, device number 27 [ 286.385419][ T8782] cifs: Unknown parameter 'cac%' [ 286.390538][ T8782] CIFS mount error: No usable UNC path provided in device string! [ 286.390538][ T8782] [ 286.400763][ T8782] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 287.975316][ T8805] nbd: must specify a size in bytes for the device [ 288.433269][ T8817] input: syz0 as /devices/virtual/input/input38 [ 288.662899][ T1209] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 288.750469][ T30] audit: type=1400 audit(1766357668.707:446): avc: denied { read write } for pid=8813 comm="syz.0.731" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 288.752452][ T8818] random: crng reseeded on system resumption [ 288.778349][ T30] audit: type=1400 audit(1766357668.717:447): avc: denied { ioctl open } for pid=8813 comm="syz.0.731" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 288.820902][ T8821] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.732'. [ 288.831119][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 288.873470][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.894006][ T30] audit: type=1400 audit(1766357668.857:448): avc: denied { write } for pid=8820 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.906761][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.923744][ T30] audit: type=1400 audit(1766357668.857:449): avc: denied { accept } for pid=8820 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.924070][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.012665][ T8822] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 289.101858][ T1209] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 289.117319][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.176883][ T30] audit: type=1400 audit(1766357669.137:450): avc: denied { create } for pid=8828 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 289.217470][ T30] audit: type=1400 audit(1766357669.137:451): avc: denied { connect } for pid=8828 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 289.262792][ T1209] usb 2-1: config 0 descriptor?? [ 289.282303][ T30] audit: type=1400 audit(1766357669.137:452): avc: denied { mount } for pid=8828 comm="syz.2.736" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 289.309648][ T30] audit: type=1400 audit(1766357669.167:453): avc: denied { search } for pid=8828 comm="syz.2.736" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 289.496118][ T8834] comedi comedi3: comedi_config --init_data is deprecated [ 289.643114][ T30] audit: type=1400 audit(1766357669.417:454): avc: denied { accept } for pid=8830 comm="syz.4.737" lport=49146 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.894977][ T30] audit: type=1400 audit(1766357669.427:455): avc: denied { write } for pid=8830 comm="syz.4.737" lport=49146 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 290.373322][ T1209] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 290.438620][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 290.729646][ T1209] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 290.767813][ T1209] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 290.991757][ T8846] Device name cannot be null; rc = [-22] [ 291.002104][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 291.345871][ T5889] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 291.363758][ T1209] usb 2-1: USB disconnect, device number 28 [ 291.384234][ T5889] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 291.417581][ T5889] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 291.441484][ T5889] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 291.912103][ T8856] overlayfs: missing 'lowerdir' [ 292.020915][ T8857] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 292.034849][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 292.047597][ T8857] bond1 (unregistering): Released all slaves [ 292.872352][ T8871] input: syz0 as /devices/virtual/input/input40 [ 293.285174][ T8878] netlink: 'syz.3.748': attribute type 29 has an invalid length. [ 294.660123][ T8895] Device name cannot be null; rc = [-22] [ 294.669852][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 295.773740][ T8902] ip6erspan0: entered promiscuous mode [ 295.831811][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 295.832163][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 297.524489][ T8925] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 298.538663][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.538679][ T30] audit: type=1326 audit(1766357678.467:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 299.183630][ T30] audit: type=1326 audit(1766357678.467:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 299.209212][ T30] audit: type=1326 audit(1766357678.467:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbf6fb46357 code=0x7ffc0000 [ 299.234845][ T30] audit: type=1326 audit(1766357678.467:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf6fb463b6 code=0x7ffc0000 [ 299.260050][ T30] audit: type=1326 audit(1766357678.467:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 299.296432][ T30] audit: type=1326 audit(1766357678.467:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf6fb46c47 code=0x7ffc0000 [ 299.444516][ T30] audit: type=1326 audit(1766357678.467:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 299.617604][ T8948] nbd: must specify a size in bytes for the device [ 300.271732][ T30] audit: type=1326 audit(1766357678.467:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 300.382198][ T30] audit: type=1326 audit(1766357678.467:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 300.405697][ T30] audit: type=1326 audit(1766357678.467:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6fb8f749 code=0x7ffc0000 [ 301.271694][ T8977] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 302.726003][ T8997] Device name cannot be null; rc = [-22] [ 302.740427][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 306.425007][ T9022] bridge1: entered promiscuous mode [ 306.430231][ T9022] bridge1: entered allmulticast mode [ 306.452285][ T9022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.465045][ T9022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 307.422183][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 307.422201][ T30] audit: type=1400 audit(1766357687.327:569): avc: denied { ioctl } for pid=9037 comm="syz.3.789" path="socket:[20975]" dev="sockfs" ino=20975 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.822632][ T9049] overlayfs: missing 'lowerdir' [ 311.677014][ T9087] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 312.632608][ T9104] x_tables: unsorted underflow at hook 3 [ 312.859015][ T5919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 312.975038][ T9110] Device name cannot be null; rc = [-22] [ 312.984353][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 313.349020][ T30] audit: type=1400 audit(1766357693.307:570): avc: denied { create } for pid=9108 comm="syz.2.808" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.432093][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 313.438573][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.520993][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 313.544098][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.642079][ T5919] usb 5-1: Product: syz [ 313.646643][ T5919] usb 5-1: Manufacturer: syz [ 313.651201][ T5919] usb 5-1: SerialNumber: syz [ 313.680421][ T5919] usb 5-1: config 0 descriptor?? [ 313.694048][ T5919] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 313.897453][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'. [ 313.909669][ T9102] bond0: entered promiscuous mode [ 313.914731][ T9102] bond_slave_0: entered promiscuous mode [ 313.920567][ T9102] bond_slave_1: entered promiscuous mode [ 313.926426][ T9102] dummy0: entered promiscuous mode [ 313.942120][ T9102] bond0: left promiscuous mode [ 313.946930][ T9102] bond_slave_0: left promiscuous mode [ 313.953432][ T9102] bond_slave_1: left promiscuous mode [ 313.958907][ T9102] dummy0: left promiscuous mode [ 313.986891][ T9120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'. [ 314.001841][ T9120] bond0: entered promiscuous mode [ 314.006949][ T9120] bond_slave_0: entered promiscuous mode [ 314.012826][ T9120] bond_slave_1: entered promiscuous mode [ 314.018658][ T9120] dummy0: entered promiscuous mode [ 314.025567][ T9120] bond0: left promiscuous mode [ 314.030357][ T9120] bond_slave_0: left promiscuous mode [ 314.036453][ T9120] bond_slave_1: left promiscuous mode [ 314.042035][ T9120] dummy0: left promiscuous mode [ 314.741235][ T9130] CIFS mount error: No usable UNC path provided in device string! [ 314.741235][ T9130] [ 314.802099][ T9130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.122110][ T5807] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 315.222114][ T5993] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 315.285301][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 315.300789][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.318630][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.329052][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.343695][ T5807] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 315.354927][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.378718][ T5807] usb 2-1: config 0 descriptor?? [ 315.392066][ T5993] usb 4-1: Using ep0 maxpacket: 16 [ 315.404068][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.425430][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.445455][ T5993] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.474305][ T5993] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 315.493167][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.513105][ T5993] usb 4-1: config 0 descriptor?? [ 315.690002][ T30] audit: type=1400 audit(1766357695.647:571): avc: denied { unlink } for pid=5806 comm="syz-executor" name="file5" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.734102][ T5919] pwc: Failed to set LED on/off time (-71) [ 315.740961][ T5919] pwc: send_video_command error -71 [ 315.746286][ T5919] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 315.754061][ T5919] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 315.765621][ T5919] usb 5-1: USB disconnect, device number 20 [ 315.807706][ T5807] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 315.889455][ T5807] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 315.959521][ T9142] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 315.968031][ T9142] overlayfs: overlapping lowerdir path [ 316.068529][ T5993] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 316.327419][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 316.411880][ T5993] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 316.430736][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 316.488353][ T5993] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 316.626241][ T5996] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 316.658423][ T5993] usb 4-1: USB disconnect, device number 16 [ 316.695055][ T5996] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.727250][ T9146] 9p: Bad value for 'rfdno' [ 316.782172][ T5996] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.852693][ T5807] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 316.855409][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.875352][ T5996] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.888386][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.922487][ T5919] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 316.938408][ T5807] usb 2-1: USB disconnect, device number 29 [ 316.947839][ T5919] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.957798][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.965456][ T5919] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 316.968024][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.980412][ T5919] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 317.169013][ T9153] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 317.200544][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.221650][ T9158] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 317.230018][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 317.249535][ T9153] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 317.275398][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.818'. [ 317.343915][ T9158] batadv0: entered promiscuous mode [ 317.359986][ T9158] batadv0: entered allmulticast mode [ 317.449777][ T9158] bond0: (slave batadv0): Releasing backup interface [ 317.468095][ T9158] bridge0: port 3(batadv0) entered blocking state [ 317.513024][ T9158] bridge0: port 3(batadv0) entered disabled state [ 317.532800][ T9167] CIFS mount error: No usable UNC path provided in device string! [ 317.532800][ T9167] [ 317.574806][ T9167] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 317.744686][ T9173] trusted_key: encrypted_key: hex blob is missing [ 317.825380][ T1302] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 317.835038][ T1302] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 318.607135][ T9183] Device name cannot be null; rc = [-22] [ 318.614209][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 319.071500][ T9176] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 319.364424][ T9192] fuse: Bad value for 'user_id' [ 319.369302][ T9192] fuse: Bad value for 'user_id' [ 319.502111][ T5867] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 319.677986][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 319.690068][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.726220][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.743705][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 319.757294][ T5867] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 319.788966][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.810025][ T5867] usb 5-1: config 0 descriptor?? [ 320.046676][ T9201] vcan0: tx address claim with dlc 0 [ 320.310084][ T5867] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 320.551879][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'. [ 320.585947][ T5867] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 320.617406][ T5867] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 320.634726][ T9200] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.654385][ T9207] CIFS mount error: No usable UNC path provided in device string! [ 320.654385][ T9207] [ 320.680526][ T9207] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 320.697163][ T5807] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.711410][ T5867] usb 5-1: USB disconnect, device number 22 [ 320.722343][ T5807] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 320.756321][ T5807] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 320.851717][ T5807] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 321.423403][ T9227] Device name cannot be null; rc = [-22] [ 321.430309][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 322.303396][ T5993] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 322.462256][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 322.470807][ T5993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.488297][ T5993] usb 5-1: config 56 has an invalid interface number: 222 but max is 0 [ 322.517185][ T5993] usb 5-1: config 56 has no interface number 0 [ 322.542479][ T5993] usb 5-1: config 56 interface 222 has no altsetting 0 [ 322.568187][ T5993] usb 5-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 322.606423][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.632101][ T5993] usb 5-1: Product: syz [ 322.652076][ T5993] usb 5-1: Manufacturer: syz [ 322.662055][ T5993] usb 5-1: SerialNumber: syz [ 322.992157][ T5807] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 323.153571][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 323.180013][ T30] audit: type=1400 audit(1766357703.117:572): avc: denied { bind } for pid=9239 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 323.244618][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.295118][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.368270][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.481085][ T5807] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 323.499109][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.512391][ T5807] usb 3-1: config 0 descriptor?? [ 324.101014][ T9250] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 324.410702][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 325.169859][ T30] audit: type=1400 audit(1766357705.127:573): avc: denied { bind } for pid=9252 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.245951][ T5993] option 5-1:56.222: GSM modem (1-port) converter detected [ 325.281629][ T30] audit: type=1400 audit(1766357705.157:574): avc: denied { create } for pid=9252 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 325.305375][ T5993] usb 5-1: USB disconnect, device number 23 [ 325.313553][ T5993] option 5-1:56.222: device disconnected [ 325.390685][ T5807] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 325.400870][ T5867] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.422814][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.432913][ T30] audit: type=1400 audit(1766357705.397:575): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=3000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.443242][ T5807] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 325.458464][ T30] audit: type=1400 audit(1766357705.397:576): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3000 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.502652][ T5867] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.511806][ T5867] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 325.547957][ T5867] usb 4-1: Manufacturer: syz [ 325.573812][ T5807] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 325.711263][ T5867] usb 4-1: config 0 descriptor?? [ 325.882674][ T30] audit: type=1400 audit(1766357705.397:577): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3000 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.099686][ T5867] rc_core: IR keymap rc-hauppauge not found [ 326.117506][ T5867] Registered IR keymap rc-empty [ 326.122406][ T5993] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.144500][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 326.157865][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 326.208393][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 326.227035][ T48] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 326.227355][ T5889] usb 3-1: USB disconnect, device number 16 [ 326.238843][ T48] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.257761][ T30] audit: type=1400 audit(1766357706.217:578): avc: denied { kexec_image_load } for pid=9260 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 326.272077][ T5993] usb 5-1: Using ep0 maxpacket: 16 [ 326.279407][ T48] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.296305][ T48] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 326.296444][ T5993] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 326.332104][ T5993] usb 5-1: config 0 has no interface number 0 [ 326.338242][ T5993] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.373018][ T5993] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.402381][ T5993] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 326.411443][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.434973][ T5993] usb 5-1: config 0 descriptor?? [ 326.592186][ T30] audit: type=1400 audit(1766357706.517:579): avc: denied { read } for pid=9264 comm="syz.1.852" path="socket:[21672]" dev="sockfs" ino=21672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 326.647707][ T48] usb 4-1: USB disconnect, device number 17 [ 326.730206][ T9268] cifs: Unknown parameter 'cach%' [ 326.735411][ T9268] CIFS mount error: No usable UNC path provided in device string! [ 326.735411][ T9268] [ 326.747509][ T9268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 326.943901][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.957411][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.049484][ T9255] kvm: vcpu 0: requested 4736 ns lapic timer period limited to 200000 ns [ 327.119059][ T9255] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 327.465274][ T5993] usbhid 5-1:0.129: can't add hid device: -71 [ 327.484785][ T5993] usbhid 5-1:0.129: probe with driver usbhid failed with error -71 [ 327.601351][ T9280] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 328.222837][ T5993] usb 5-1: USB disconnect, device number 24 [ 328.766707][ T30] audit: type=1400 audit(1766357708.717:580): avc: denied { getopt } for pid=9283 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.242129][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 329.255858][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 329.540612][ T9291] netlink: 52 bytes leftover after parsing attributes in process `syz.1.858'. [ 329.552047][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 329.572902][ T30] audit: type=1400 audit(1766357709.517:581): avc: denied { wake_alarm } for pid=9290 comm="syz.4.857" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.623481][ T5919] usb 3-1: config 0 has no interfaces? [ 329.633396][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.662201][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.670623][ T5919] usb 3-1: Manufacturer: syz [ 329.681615][ T5919] usb 3-1: config 0 descriptor?? [ 329.994871][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.008115][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.520835][ T9312] cifs: Unknown parameter 'cach%' [ 330.542105][ T9312] CIFS mount error: No usable UNC path provided in device string! [ 330.542105][ T9312] [ 330.559207][ T9312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.632095][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 330.822109][ T5867] usb 1-1: device descriptor read/64, error -71 [ 331.003303][ T9319] loop8: detected capacity change from 0 to 1 [ 331.012967][ T9319] Dev loop8: unable to read RDB block 1 [ 331.018571][ T9319] loop8: unable to read partition table [ 331.024940][ T9319] loop8: partition table beyond EOD, truncated [ 331.031120][ T9319] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 331.586786][ T9319] Dev loop8: unable to read RDB block 1 [ 331.594277][ T9319] loop8: unable to read partition table [ 331.596461][ T30] audit: type=1400 audit(1766357711.557:582): avc: denied { read append } for pid=9322 comm="syz.1.868" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.622074][ T5867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 331.624971][ T30] audit: type=1400 audit(1766357711.557:583): avc: denied { open } for pid=9322 comm="syz.1.868" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.659518][ T30] audit: type=1400 audit(1766357711.617:584): avc: denied { ioctl } for pid=9322 comm="syz.1.868" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.661721][ T9319] loop8: partition table beyond EOD, truncated [ 331.809055][ T5889] usb 3-1: USB disconnect, device number 17 [ 331.832459][ T5867] usb 1-1: device descriptor read/64, error -71 [ 331.964589][ T5867] usb usb1-port1: attempt power cycle [ 332.320464][ T9325] loop2: detected capacity change from 0 to 7 [ 332.327867][ T9325] Dev loop2: unable to read RDB block 7 [ 332.347169][ T9325] loop2: unable to read partition table [ 332.393904][ T9325] loop2: partition table beyond EOD, truncated [ 332.492121][ T5889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 332.563948][ T9325] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 332.574569][ T9337] 9p: Bad value for 'port' [ 332.602363][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 332.623067][ T5867] usb 1-1: device descriptor read/8, error -71 [ 332.659509][ T5889] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 332.674996][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.717465][ T5889] usb 3-1: config 0 descriptor?? [ 333.031545][ T30] audit: type=1400 audit(1766357712.937:585): avc: denied { append } for pid=9338 comm="syz.3.872" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 333.245915][ T5889] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 333.279093][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 333.298757][ T5889] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 333.305679][ T5889] [drm] Initialized udl on minor 2 [ 333.316893][ T5889] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.329341][ T5889] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 333.342277][ T5867] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 333.342477][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.359803][ T5889] usb 3-1: USB disconnect, device number 18 [ 333.379564][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 333.389066][ T5867] usb 1-1: device descriptor read/8, error -71 [ 333.439401][ T9346] cifs: Unknown parameter 'cach%' [ 333.447403][ T9346] CIFS mount error: No usable UNC path provided in device string! [ 333.447403][ T9346] [ 333.458795][ T9346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 333.502499][ T5867] usb usb1-port1: unable to enumerate USB device [ 334.030801][ T30] audit: type=1400 audit(1766357713.987:586): avc: denied { read } for pid=9358 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.283420][ T30] audit: type=1400 audit(1766357715.107:587): avc: denied { mounton } for pid=9367 comm="syz.3.882" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 335.916356][ T9385] cifs: Unknown parameter 'cach%' [ 335.921406][ T9385] CIFS mount error: No usable UNC path provided in device string! [ 335.921406][ T9385] [ 335.954852][ T9385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.764052][ T30] audit: type=1400 audit(1766357716.717:588): avc: denied { append } for pid=9393 comm="syz.1.890" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.381735][ T30] audit: type=1400 audit(1766357717.337:589): avc: denied { name_bind } for pid=9407 comm="syz.0.894" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 337.426240][ T9409] nbd: must specify a size in bytes for the device [ 337.652844][ T5993] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.828321][ T5993] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.841164][ T5993] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.854154][ T5867] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 338.120955][ T5993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 338.127706][ T5993] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 338.136855][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.150906][ T5993] usb 1-1: config 0 descriptor?? [ 338.252098][ T5867] usb 2-1: device descriptor read/64, error -71 [ 338.602141][ T5867] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 338.660158][ T5993] hid-led 0003:0FC5:B080.0018: item fetching failed at offset 3/5 [ 338.671920][ T5993] hid-led 0003:0FC5:B080.0018: probe with driver hid-led failed with error -22 [ 338.732198][ T5867] usb 2-1: device descriptor read/64, error -71 [ 338.843639][ T5867] usb usb2-port1: attempt power cycle [ 339.300626][ T5874] usb 1-1: USB disconnect, device number 23 [ 339.576750][ T5867] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 339.605401][ T5867] usb 2-1: device descriptor read/8, error -71 [ 339.718769][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 339.759171][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 339.903013][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 339.923217][ T5867] usb 2-1: device descriptor read/8, error -71 [ 339.986924][ T9440] cifs: Unknown parameter 'cach%' [ 339.992705][ T9440] CIFS mount error: No usable UNC path provided in device string! [ 339.992705][ T9440] [ 340.003125][ T9440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 340.032486][ T5867] usb usb2-port1: unable to enumerate USB device [ 340.748466][ T9453] usb usb8: usbfs: process 9453 (syz.0.906) did not claim interface 0 before use [ 340.828230][ T9455] usb usb8: usbfs: process 9455 (syz.1.907) did not claim interface 0 before use [ 340.873003][ T9457] usb usb8: usbfs: process 9457 (syz.0.908) did not claim interface 0 before use [ 341.612584][ T30] audit: type=1400 audit(1766357721.567:590): avc: denied { ioctl } for pid=9466 comm="syz.0.911" path="socket:[23090]" dev="sockfs" ino=23090 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 342.794646][ T9479] cifs: Unknown parameter 'cach%' [ 342.799853][ T9479] CIFS mount error: No usable UNC path provided in device string! [ 342.799853][ T9479] [ 342.810161][ T9479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.754326][ T9492] netlink: 'syz.0.915': attribute type 4 has an invalid length. [ 344.025842][ T9502] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 344.039884][ T30] audit: type=1326 audit(1766357723.997:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.4.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x0 [ 344.140555][ T30] audit: type=1400 audit(1766357724.077:592): avc: denied { create } for pid=9501 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 344.176150][ T9508] ======================================================= [ 344.176150][ T9508] WARNING: The mand mount option has been deprecated and [ 344.176150][ T9508] and is ignored by this kernel. Remove the mand [ 344.176150][ T9508] option from the mount to silence this warning. [ 344.176150][ T9508] ======================================================= [ 344.212148][ T6008] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 344.231391][ T9511] usb usb8: usbfs: process 9511 (syz.2.920) did not claim interface 0 before use [ 344.256351][ T9508] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 344.264710][ T9508] netlink: 224 bytes leftover after parsing attributes in process `syz.4.919'. [ 344.290877][ T30] audit: type=1400 audit(1766357724.077:593): avc: denied { write } for pid=9501 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 344.393149][ T6008] usb 1-1: Using ep0 maxpacket: 16 [ 344.689091][ T9502] bond1: entered promiscuous mode [ 344.694453][ T9502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.706224][ T6008] usb 1-1: config 0 has no interfaces? [ 344.711282][ T9507] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.724469][ T9507] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 344.729536][ T30] audit: type=1400 audit(1766357724.137:594): avc: denied { remount } for pid=9504 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 344.734856][ T9507] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 344.791663][ T6008] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.826482][ T6008] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.858812][ T6008] usb 1-1: Manufacturer: syz [ 344.865028][ T30] audit: type=1400 audit(1766357724.417:595): avc: denied { setopt } for pid=9512 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 344.895079][ T6008] usb 1-1: config 0 descriptor?? [ 345.136001][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.144883][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.113648][ T9534] cifs: Unknown parameter 'cach%' [ 346.118735][ T9534] CIFS mount error: No usable UNC path provided in device string! [ 346.118735][ T9534] [ 346.134059][ T9534] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 346.561452][ T5919] usb 1-1: USB disconnect, device number 24 [ 347.190066][ T9549] fuse: Unknown parameter '00000000000000000000fd' [ 347.607373][ T30] audit: type=1400 audit(1766357727.567:596): avc: denied { ioctl } for pid=9551 comm="syz.4.932" path="socket:[23235]" dev="sockfs" ino=23235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 347.970383][ T30] audit: type=1400 audit(1766357727.567:597): avc: denied { bind } for pid=9551 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.222178][ T30] audit: type=1400 audit(1766357727.597:598): avc: denied { connect } for pid=9551 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.791899][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.939'. [ 348.867339][ T9580] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 348.989580][ T30] audit: type=1400 audit(1766357728.947:599): avc: denied { write } for pid=9577 comm="syz.0.939" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 349.302110][ T6008] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 349.422184][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 349.452139][ T6008] usb 1-1: device descriptor read/64, error -71 [ 349.680476][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 349.697391][ T5889] usb 3-1: config 0 has no interfaces? [ 349.732106][ T6008] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 349.774020][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 349.783305][ T5889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.791278][ T5889] usb 3-1: Manufacturer: syz [ 349.804099][ T30] audit: type=1400 audit(1766357729.767:600): avc: denied { bind } for pid=9586 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 349.853821][ T9591] netlink: 'syz.3.942': attribute type 2 has an invalid length. [ 349.902098][ T6008] usb 1-1: device descriptor read/64, error -71 [ 350.012530][ T6008] usb usb1-port1: attempt power cycle [ 351.297424][ T5889] usb 3-1: config 0 descriptor?? [ 351.327311][ T30] audit: type=1400 audit(1766357730.857:601): avc: denied { map } for pid=9595 comm="syz.3.943" path="pipe:[5428]" dev="pipefs" ino=5428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 351.466219][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 351.626466][ T9607] tmpfs: Unknown parameter 'noinode32' [ 351.642362][ T6008] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 351.676229][ T6008] usb 1-1: device descriptor read/8, error -71 [ 352.140290][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.150402][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.274244][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 352.283767][ T30] audit: type=1400 audit(1766357732.237:602): avc: denied { setopt } for pid=9612 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.355663][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 353.538329][ T30] audit: type=1400 audit(1766357733.497:603): avc: denied { execute } for pid=9619 comm="syz.1.950" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 354.173435][ T5996] usb 3-1: USB disconnect, device number 19 [ 354.579963][ T9635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9635 comm=syz.2.954 [ 355.113243][ T30] audit: type=1400 audit(1766357735.077:604): avc: denied { block_suspend } for pid=9644 comm="syz.2.956" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 355.740500][ T9651] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 356.007914][ T9662] nbd: must specify a size in bytes for the device [ 357.025178][ T9675] usb usb8: usbfs: process 9675 (syz.2.964) did not claim interface 0 before use [ 357.569306][ T30] audit: type=1326 audit(1766357737.527:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.103351][ T30] audit: type=1326 audit(1766357737.577:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.142822][ T30] audit: type=1326 audit(1766357738.107:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.170274][ T30] audit: type=1326 audit(1766357738.137:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.201769][ T30] audit: type=1326 audit(1766357738.137:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.230949][ T30] audit: type=1326 audit(1766357738.137:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.271016][ T30] audit: type=1326 audit(1766357738.137:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.299080][ T30] audit: type=1326 audit(1766357738.137:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706018f749 code=0x7ffc0000 [ 358.752187][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 358.752202][ T30] audit: type=1400 audit(1766357738.707:616): avc: denied { map } for pid=9693 comm="syz.4.970" path="socket:[23757]" dev="sockfs" ino=23757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.806518][ T30] audit: type=1400 audit(1766357738.767:617): avc: denied { append } for pid=9693 comm="syz.4.970" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 361.581814][ T9739] Device name cannot be null; rc = [-22] [ 361.591349][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 362.908344][ T30] audit: type=1400 audit(1766357742.867:618): avc: denied { ioctl } for pid=9753 comm="syz.4.984" path="socket:[24639]" dev="sockfs" ino=24639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 363.002086][ T5889] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 363.136848][ T9762] fuse: Bad value for 'fd' [ 363.165181][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.190635][ T5889] usb 4-1: not running at top speed; connect to a high speed hub [ 363.317693][ T5889] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 363.326039][ T5889] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 363.337171][ T5889] usb 4-1: config 5 has no interface number 0 [ 363.343793][ T5889] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 363.355228][ T5889] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.811617][ T5889] usb 4-1: config 5 interface 246 has no altsetting 0 [ 363.825693][ T5889] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 363.835606][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.852850][ T30] audit: type=1400 audit(1766357743.817:619): avc: denied { read } for pid=9772 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.854254][ T5889] usb 4-1: Product: syz [ 363.876737][ T5889] usb 4-1: Manufacturer: syz [ 363.881313][ T5889] usb 4-1: SerialNumber: syz [ 363.952136][ T5996] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 364.103147][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 364.120747][ T5996] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.134736][ T5996] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 364.147188][ T5996] usb 2-1: config 159 has no interface number 0 [ 364.157124][ T5996] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.167766][ T5996] usb 2-1: config 159 interface 195 has no altsetting 0 [ 364.183930][ T5996] usb 2-1: string descriptor 0 read error: -22 [ 364.191878][ T5996] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 364.201367][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.491754][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.519138][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.548245][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.556920][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.567371][ T9782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.576147][ T9782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.242534][ T30] audit: type=1400 audit(1766357745.187:620): avc: denied { map } for pid=9791 comm="syz.2.994" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 365.505213][ T5889] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 365.514170][ T3790] usb 4-1: Failed to submit usb control message: -71 [ 365.559610][ T3790] usb 4-1: unable to send the bmi data to the device: -71 [ 365.559830][ T5889] usb 4-1: USB disconnect, device number 18 [ 365.585930][ T30] audit: type=1400 audit(1766357745.187:621): avc: denied { execute } for pid=9791 comm="syz.2.994" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 365.617957][ T3790] usb 4-1: unable to get target info from device [ 365.650704][ T3790] usb 4-1: could not get target info (-71) [ 365.684076][ T3790] usb 4-1: could not probe fw (-71) [ 365.737488][ T30] audit: type=1400 audit(1766357745.267:622): avc: denied { create } for pid=9791 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 365.795706][ T9804] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 365.843666][ T30] audit: type=1400 audit(1766357745.267:623): avc: denied { read } for pid=9791 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 365.868397][ T9804] : entered promiscuous mode [ 366.253323][ T5996] udl 2-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 366.270331][ T5996] [drm:udl_init] *ERROR* Selecting channel failed [ 366.278547][ T9811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.316894][ T5996] [drm] Initialized udl 0.0.1 for 2-1:159.195 on minor 2 [ 366.336223][ T5996] [drm] Initialized udl on minor 2 [ 366.354583][ T5996] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 366.380023][ T5996] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 366.397774][ T6008] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 366.412365][ T5996] usb 2-1: USB disconnect, device number 34 [ 366.424002][ T6008] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 366.920613][ T9823] input: syz0 as /devices/virtual/input/input46 [ 367.206945][ T30] audit: type=1400 audit(1766357754.165:624): avc: denied { module_request } for pid=9816 comm="syz.2.1000" kmod="netdev-vxcan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 367.258339][ T30] audit: type=1400 audit(1766357754.215:625): avc: denied { setopt } for pid=9816 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.730300][ T5996] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 367.873769][ T5996] usb 2-1: device descriptor read/64, error -71 [ 367.929990][ T9829] usb usb8: usbfs: process 9829 (syz.4.1002) did not claim interface 0 before use [ 368.092310][ T9831] x_tables: unsorted entry at hook 2 [ 368.109329][ T9831] x_tables: unsorted entry at hook 2 [ 368.114915][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 368.136504][ T5996] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 368.282099][ T5996] usb 2-1: device descriptor read/64, error -71 [ 368.392560][ T5996] usb usb2-port1: attempt power cycle [ 368.470814][ T9844] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 368.508387][ T9844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.520328][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 368.530483][ T9844] bond3: entered promiscuous mode [ 369.410927][ T5996] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 369.432382][ T5996] usb 2-1: device descriptor read/8, error -71 [ 371.162817][ T9877] input: syz0 as /devices/virtual/input/input47 [ 372.629362][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 373.764362][ T30] audit: type=1400 audit(1766357760.725:626): avc: denied { open } for pid=9897 comm="syz.2.1018" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 373.856430][ T30] audit: type=1400 audit(1766357760.765:627): avc: denied { ioctl } for pid=9897 comm="syz.2.1018" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 374.655578][ T9909] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 375.152264][ T48] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 375.475218][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 375.611247][ T48] usb 5-1: config 0 has no interfaces? [ 375.820910][ T30] audit: type=1400 audit(1766357762.505:628): avc: denied { set_context_mgr } for pid=9925 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 375.875653][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.884800][ T48] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.913285][ T48] usb 5-1: Manufacturer: syz [ 376.045256][ T48] usb 5-1: config 0 descriptor?? [ 376.845345][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.855509][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.064965][ T9937] 9p: Bad value for 'wfdno' [ 378.148216][ T10] usb 5-1: USB disconnect, device number 25 [ 378.493614][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.576489][ T9959] netlink: 'syz.2.1031': attribute type 4 has an invalid length. [ 379.743058][ T6028] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 379.935472][ T6028] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 379.993215][ T6028] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.049305][ T6028] usb 5-1: config 1 interface 0 has no altsetting 0 [ 380.068357][ T6028] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 380.244644][ T48] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 380.256100][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.275295][ T6028] usb 5-1: Product: С [ 380.279407][ T6028] usb 5-1: Manufacturer: Д [ 380.297780][ T6028] usb 5-1: SerialNumber: 鿞눖郷᪉䯋呡飃ᄒ♮쾓繁页뚐䳚㫐뷄彿븅籝앂곝팈컪齰彔裮겖㻇댶䊊属慟푩 [ 380.333503][ T9956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.372557][ T9956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 380.522481][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 381.030530][ T48] usb 3-1: config 0 has no interfaces? [ 382.062195][ T6028] usbhid 5-1:1.0: can't add hid device: -71 [ 382.072416][ T6028] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 382.155650][ T6028] usb 5-1: USB disconnect, device number 26 [ 382.826243][ T9992] cifs: Unknown parameter 'cach%' [ 382.833394][ T30] audit: type=1400 audit(1766357769.795:629): avc: denied { setopt } for pid=9988 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.858675][ T9992] CIFS mount error: No usable UNC path provided in device string! [ 382.858675][ T9992] [ 382.872199][ T9992] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 382.872341][ T30] audit: type=1400 audit(1766357769.825:630): avc: denied { read } for pid=9988 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 383.111234][ T9991] fuse: Bad value for 'fd' [ 383.923405][T10000] cifs: Unknown parameter 'cach%' [ 383.942160][T10000] CIFS mount error: No usable UNC path provided in device string! [ 383.942160][T10000] [ 384.032206][T10000] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.812115][ T5867] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 385.999371][ T48] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 386.101210][ T30] audit: type=1400 audit(1766357773.045:631): avc: denied { read write } for pid=10016 comm="syz.0.1050" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 386.263701][ T30] audit: type=1400 audit(1766357773.055:632): avc: denied { open } for pid=10016 comm="syz.0.1050" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 386.347722][ T48] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 386.388490][ T48] usb 3-1: config 0 descriptor?? [ 386.472145][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 386.523231][ T48] usb 3-1: can't set config #0, error -71 [ 386.531079][ T48] usb 3-1: USB disconnect, device number 20 [ 386.537251][ T5867] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 386.995823][ T5867] usb 2-1: config 32 has no interface number 0 [ 387.011491][ T5867] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.043900][ T5867] usb 2-1: config 32 interface 85 has no altsetting 0 [ 387.069020][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 387.134050][ T30] audit: type=1400 audit(1766357774.095:633): avc: denied { read write } for pid=10032 comm="syz.0.1053" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.178225][ T30] audit: type=1400 audit(1766357774.095:634): avc: denied { open } for pid=10032 comm="syz.0.1053" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.178256][ T30] audit: type=1400 audit(1766357774.095:635): avc: denied { ioctl } for pid=10032 comm="syz.0.1053" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.196226][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.196243][ T5867] usb 2-1: Product: syz [ 387.196252][ T5867] usb 2-1: Manufacturer: syz [ 387.196260][ T5867] usb 2-1: SerialNumber: syz [ 388.353269][T10042] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 388.472532][ T5867] appletouch 2-1:32.85: Failed to request geyser raw mode [ 388.472741][ T5867] appletouch 2-1:32.85: probe with driver appletouch failed with error -5 [ 388.475384][ T5867] usb 2-1: USB disconnect, device number 39 [ 388.520026][ T30] audit: type=1400 audit(1766357775.475:636): avc: denied { setopt } for pid=10032 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 388.639886][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.640971][T10042] bond0: (slave team0): Enslaving as an active interface with an up link [ 389.436280][T10032] delete_channel: no stack [ 389.668832][T10056] usb usb8: usbfs: process 10056 (syz.1.1058) did not claim interface 0 before use [ 389.744349][ T30] audit: type=1400 audit(1766357776.705:637): avc: denied { connect } for pid=10057 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 391.642817][ T30] audit: type=1400 audit(1766357778.605:638): avc: denied { create } for pid=10083 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 391.663593][ T6008] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 391.696004][T10086] usb usb8: usbfs: process 10086 (syz.1.1069) did not claim interface 0 before use [ 391.842904][ T6008] usb 4-1: Using ep0 maxpacket: 16 [ 391.849858][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.022074][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.467353][ T5889] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 392.475254][ T6008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.490703][ T6008] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 392.499845][ T6008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.510867][ T6008] usb 4-1: config 0 descriptor?? [ 393.173949][ T5889] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.187287][ T6008] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 393.195266][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.205035][ T5889] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 393.222037][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 393.230223][ T5889] usb 5-1: Product: syz [ 393.235674][ T6008] shield 0003:0955:7214.0019: Registered Thunderstrike controller [ 393.246628][ T5889] usb 5-1: Manufacturer: syz [ 393.251232][ T5889] usb 5-1: SerialNumber: syz [ 393.256312][ T6008] shield 0003:0955:7214.0019: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 393.269706][ T5889] usb 5-1: config 0 descriptor?? [ 393.278760][ T5889] usb 5-1: selecting invalid altsetting 0 [ 394.330050][ T5889] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 394.348408][ T30] audit: type=1400 audit(1766357781.305:639): avc: denied { execmod } for pid=10083 comm="syz.2.1068" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 394.390992][ T5889] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 394.473487][ T10] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 394.488344][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 394.759487][ T5889] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 394.799756][ T5889] shield 0003:0955:7214.0019: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 395.070876][T10121] overlayfs: empty lowerdir [ 395.372612][ T1209] usb 5-1: USB disconnect, device number 27 [ 395.591243][T10125] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 395.835424][ T6008] usb 4-1: USB disconnect, device number 19 [ 396.439410][T10135] usb usb8: usbfs: process 10135 (syz.2.1081) did not claim interface 0 before use [ 397.230624][T10150] macsec1: entered promiscuous mode [ 397.274744][ T30] audit: type=1400 audit(1766357784.235:640): avc: denied { create } for pid=10158 comm="syz.3.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 397.315169][T10150] macsec1: entered allmulticast mode [ 397.473835][ T30] audit: type=1400 audit(1766357784.245:641): avc: denied { sys_admin } for pid=10158 comm="syz.3.1088" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 397.475484][T10166] 9p: Bad value for 'wfdno' [ 397.648349][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 397.674219][ T30] audit: type=1400 audit(1766357784.595:642): avc: denied { setopt } for pid=10163 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 397.771048][ T30] audit: type=1400 audit(1766357784.725:643): avc: denied { remount } for pid=10163 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 399.142121][ T6028] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 399.354758][ T6028] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 399.369671][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.393499][ T6028] usb 4-1: config 0 descriptor?? [ 399.619027][ T6028] kaweth 4-1:0.0: Firmware present in device. [ 399.670267][ T6028] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 399.701828][ T6028] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 399.807368][ T6028] usb 4-1: USB disconnect, device number 20 [ 400.143293][T10202] input: syz0 as /devices/virtual/input/input50 [ 401.744589][T10227] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 402.312191][ T6008] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 402.462168][ T6008] usb 3-1: Using ep0 maxpacket: 16 [ 402.473059][ T6008] usb 3-1: config 0 has no interfaces? [ 402.479944][ T6008] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.489438][ T6008] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.497646][ T6008] usb 3-1: Manufacturer: syz [ 402.506087][ T6008] usb 3-1: config 0 descriptor?? [ 402.810205][T10227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.825835][T10227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.195956][T10243] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 403.218036][T10243] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 403.253539][T10244] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 404.225856][ T6008] usb 3-1: USB disconnect, device number 21 [ 404.604037][ T30] audit: type=1400 audit(1766357792.544:644): avc: denied { mounton } for pid=10274 comm="syz.2.1116" path="/207/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 404.634953][T10277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.731215][T10280] Device name cannot be null; rc = [-22] [ 404.741076][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 405.237171][ T30] audit: type=1400 audit(1766357792.554:645): avc: denied { mount } for pid=10274 comm="syz.2.1116" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 405.544335][ T6008] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 405.743318][ T6008] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 405.971562][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.059635][ T6008] usb 3-1: Product: syz [ 406.095147][ T6008] usb 3-1: Manufacturer: syz [ 406.119596][ T6008] usb 3-1: SerialNumber: syz [ 406.629925][ T6008] usb 3-1: config 0 descriptor?? [ 408.082928][ T6008] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 408.100463][ T6008] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 408.246703][ T30] audit: type=1400 audit(1766357796.214:646): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 408.313616][ T6008] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 408.402512][ T6008] usb 3-1: USB disconnect, device number 22 [ 409.140193][T10315] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1128'. [ 409.257031][T10316] Bluetooth: hci0: load_link_keys: too big key_count value 65029 [ 409.350131][T10318] cifs: Unknown parameter 'cach%' [ 409.355319][T10318] CIFS mount error: No usable UNC path provided in device string! [ 409.355319][T10318] [ 409.366620][T10318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 410.024792][T10343] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 410.053188][T10341] netlink: 'syz.2.1134': attribute type 4 has an invalid length. [ 410.095462][T10344] netlink: 'syz.3.1135': attribute type 4 has an invalid length. [ 410.111437][ T6008] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 410.402217][ T6008] usb 2-1: Using ep0 maxpacket: 16 [ 410.408693][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.421970][ T6008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.422339][ T1209] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 410.444777][ T6008] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.850761][ T6028] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 410.902797][ T6008] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 410.911949][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.926479][ T6008] usb 2-1: config 0 descriptor?? [ 411.022078][ T6028] usb 3-1: Using ep0 maxpacket: 16 [ 411.031114][ T6028] usb 3-1: config 0 has no interfaces? [ 411.103427][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 411.205421][ T1209] usb 1-1: config 0 has no interfaces? [ 411.263399][ T6028] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.274332][ T6028] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.295758][ T1209] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.306773][ T6028] usb 3-1: Manufacturer: syz [ 411.316018][ T1209] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.341021][ T1209] usb 1-1: Manufacturer: syz [ 411.359045][ T6028] usb 3-1: config 0 descriptor?? [ 411.359343][ T1209] usb 1-1: config 0 descriptor?? [ 411.375748][ T5919] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 411.948465][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 412.123562][ T5919] usb 4-1: config 0 has no interfaces? [ 412.130674][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.189146][ T5919] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.193810][ T6008] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 412.205288][ T5919] usb 4-1: Manufacturer: syz [ 412.242591][ T5919] usb 4-1: config 0 descriptor?? [ 412.558923][ T6008] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 412.605163][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.699625][ T6008] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 412.712220][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.720081][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.738187][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.836466][ T6008] usb 2-1: USB disconnect, device number 40 [ 412.846202][ T5996] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.857749][ T5889] thermal thermal_zone0: Temperature check failed (-19) [ 412.865028][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.922837][ T5996] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 412.992544][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.001542][ T5996] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 413.014162][ T5996] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 414.435977][ T6028] usb 4-1: USB disconnect, device number 21 [ 414.583455][T10369] cifs: Unknown parameter 'cach%' [ 414.588485][T10369] CIFS mount error: No usable UNC path provided in device string! [ 414.588485][T10369] [ 414.602308][T10369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 414.628820][ T5996] usb 1-1: USB disconnect, device number 29 [ 414.739967][ T5889] usb 3-1: USB disconnect, device number 23 [ 414.839094][T10373] Device name cannot be null; rc = [-22] [ 414.848958][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 415.864547][ T30] audit: type=1400 audit(1766357803.834:647): avc: denied { getopt } for pid=10391 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 416.897017][T10403] ip6gre1: entered promiscuous mode [ 417.254863][T10403] ip6gre1: entered allmulticast mode [ 417.305465][T10403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10403 comm=syz.3.1150 [ 420.787095][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 421.152576][T10443] qnx4: unable to read the superblock [ 421.232487][ T30] audit: type=1400 audit(1766357809.184:648): avc: denied { setopt } for pid=10444 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 421.473518][T10454] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1163'. [ 421.519100][T10454] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1163'. [ 422.458858][ T30] audit: type=1400 audit(1766357810.424:649): avc: denied { setattr } for pid=10472 comm="syz.3.1169" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 423.303260][ T5996] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 423.766253][T10486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1169'. [ 423.895165][ T30] audit: type=1400 audit(1766357811.844:650): avc: denied { bind } for pid=10472 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 424.132128][ T6028] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 424.152758][T10486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.164078][T10486] bond0: (slave rose0): Enslaving as an active interface with an up link [ 424.253800][ T5996] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 424.262171][ T5996] usb 3-1: config 0 has no interface number 1 [ 424.271018][ T5996] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 424.280111][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.298512][ T5996] usb 3-1: config 0 descriptor?? [ 424.303939][ T6028] usb 2-1: Using ep0 maxpacket: 16 [ 424.314707][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.500946][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.523173][ T6028] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 424.544890][ T5996] usb 3-1: USB disconnect, device number 24 [ 424.654497][ T6028] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 425.279983][ T30] audit: type=1400 audit(1766357812.994:651): avc: denied { write } for pid=10498 comm="syz.3.1173" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 425.283503][ T6028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.334546][ T6028] usb 2-1: config 0 descriptor?? [ 425.815222][T10519] mkiss: ax0: crc mode is auto. [ 425.936086][ T1209] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 425.970894][ T6028] input: HID 0955:7214 Haptics as /devices/virtual/input/input52 [ 426.020832][ T6028] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 426.033926][ T6028] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 426.092094][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 426.105488][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.124577][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.145425][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 426.158493][ T1209] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 426.167665][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.411942][ T1209] usb 1-1: config 0 descriptor?? [ 426.886936][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 426.930913][ T48] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 426.942820][ T5874] usb 2-1: USB disconnect, device number 41 [ 426.966302][ T48] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.088564][ T1209] input: HID 0955:7214 Haptics as /devices/virtual/input/input53 [ 427.124454][ T48] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.151459][ T48] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 427.804186][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 427.867474][ T1209] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 427.875518][ T1209] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 428.952338][ T5889] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 429.006037][ T5889] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 429.017633][ T5889] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 429.030428][ T5889] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 429.990006][ T5996] usb 1-1: USB disconnect, device number 30 [ 430.314896][ T5996] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 430.502914][T10600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 431.326670][ T5996] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 431.912277][ T5996] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 432.522250][ T5996] usb 4-1: device descriptor read/64, error -71 [ 439.816695][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.257039][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.782013][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 537.788977][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5815/1:b..l [ 537.797283][ C1] rcu: (detected by 1, t=10502 jiffies, g=35833, q=214 ncpus=2) [ 537.804970][ C1] task:syz-executor state:R running task stack:23880 pid:5815 tgid:5815 ppid:5801 task_flags:0x400140 flags:0x00080000 [ 537.819276][ C1] Call Trace: [ 537.822540][ C1] [ 537.825454][ C1] ? __schedule+0x10b9/0x6150 [ 537.830122][ C1] __schedule+0x1139/0x6150 [ 537.834611][ C1] ? __pfx___schedule+0x10/0x10 [ 537.839436][ C1] ? mark_held_locks+0x49/0x80 [ 537.844176][ C1] preempt_schedule_irq+0x51/0x90 [ 537.849176][ C1] irqentry_exit+0x1d8/0x8c0 [ 537.853743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.859720][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 537.864891][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b8 ee 0e 0f 82 74 02 00 00 8b 35 0a e9 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 537.884468][ C1] RSP: 0018:ffffc9000423f570 EFLAGS: 00000206 [ 537.890507][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 0000000085ed89f3 [ 537.898449][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7dd4 RDI: ffffffff8bf2b380 [ 537.906390][ C1] RBP: 0000000000000002 R08: 00000000de0246ed R09: 00000000dde0246e [ 537.914332][ C1] R10: 0000000000000002 R11: ffff88801fb8aff0 R12: 0000000000000000 [ 537.922277][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.930231][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 537.935413][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.941542][ C1] unwind_next_frame+0xd1/0x20b0 [ 537.946476][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 537.951560][ C1] ? __x64_sys_setsockopt+0xbd/0x160 [ 537.956819][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.962945][ C1] arch_stack_walk+0x94/0x100 [ 537.967597][ C1] ? __x64_sys_setsockopt+0xbd/0x160 [ 537.972853][ C1] stack_trace_save+0x8e/0xc0 [ 537.977504][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 537.982853][ C1] kasan_save_stack+0x33/0x60 [ 537.987501][ C1] ? kasan_save_stack+0x33/0x60 [ 537.992338][ C1] ? kasan_save_track+0x14/0x30 [ 537.997157][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 538.001893][ C1] ? __kmalloc_noprof+0x33d/0x910 [ 538.006890][ C1] ? xt_replace_table+0x64b/0x970 [ 538.011885][ C1] ? __do_replace+0x1cf/0x9f0 [ 538.016533][ C1] ? do_ip6t_set_ctl+0x94a/0xc50 [ 538.021444][ C1] ? nf_setsockopt+0x8d/0xf0 [ 538.026006][ C1] ? ipv6_setsockopt+0x135/0x170 [ 538.030917][ C1] ? tcp_setsockopt+0xa7/0x100 [ 538.035655][ C1] ? do_sock_setsockopt+0xf3/0x1d0 [ 538.040738][ C1] ? __sys_setsockopt+0x1a0/0x230 [ 538.045730][ C1] ? __x64_sys_setsockopt+0xbd/0x160 [ 538.051000][ C1] kasan_save_track+0x14/0x30 [ 538.055648][ C1] __kasan_kmalloc+0xaa/0xb0 [ 538.060212][ C1] __kmalloc_noprof+0x33d/0x910 [ 538.065037][ C1] ? xt_replace_table+0x64b/0x970 [ 538.070032][ C1] ? xt_replace_table+0x64b/0x970 [ 538.075021][ C1] xt_replace_table+0x64b/0x970 [ 538.079844][ C1] __do_replace+0x1cf/0x9f0 [ 538.084330][ C1] ? __pfx___do_replace+0x10/0x10 [ 538.089334][ C1] do_ip6t_set_ctl+0x94a/0xc50 [ 538.094073][ C1] ? find_held_lock+0x2b/0x80 [ 538.098724][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 538.104678][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 538.109940][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.115900][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 538.121856][ C1] nf_setsockopt+0x8d/0xf0 [ 538.126249][ C1] ipv6_setsockopt+0x135/0x170 [ 538.130992][ C1] tcp_setsockopt+0xa7/0x100 [ 538.135557][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 538.141431][ C1] do_sock_setsockopt+0xf3/0x1d0 [ 538.146344][ C1] __sys_setsockopt+0x1a0/0x230 [ 538.151168][ C1] __x64_sys_setsockopt+0xbd/0x160 [ 538.156255][ C1] ? do_syscall_64+0x91/0xf80 [ 538.160906][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.166075][ C1] do_syscall_64+0xcd/0xf80 [ 538.170554][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.176419][ C1] RIP: 0033:0x7fc13559163a [ 538.180804][ C1] RSP: 002b:00007fffb3091f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 538.189188][ C1] RAX: ffffffffffffffda RBX: 00007fffb3091ff0 RCX: 00007fc13559163a [ 538.197131][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 538.205079][ C1] RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 [ 538.213020][ C1] R10: 00007fc1357b5d00 R11: 0000000000000206 R12: 00007fc1357b5ca0 [ 538.220961][ C1] R13: 00007fffb3091f8c R14: 0000000000000000 R15: 00007fc1357b7e60 [ 538.228915][ C1] [ 538.231910][ C1] rcu: rcu_preempt kthread starved for 10510 jiffies! g35833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 538.243072][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 538.253013][ C1] rcu: RCU grace-period kthread stack dump: [ 538.258868][ C1] task:rcu_preempt state:R running task stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 538.272311][ C1] Call Trace: [ 538.275566][ C1] [ 538.278472][ C1] ? __schedule+0x10b9/0x6150 [ 538.283125][ C1] __schedule+0x1139/0x6150 [ 538.287612][ C1] ? __pfx___schedule+0x10/0x10 [ 538.292432][ C1] ? find_held_lock+0x2b/0x80 [ 538.297085][ C1] ? schedule+0x2d7/0x3a0 [ 538.301387][ C1] schedule+0xe7/0x3a0 [ 538.305427][ C1] schedule_timeout+0x123/0x290 [ 538.310248][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 538.315590][ C1] ? __pfx_process_timeout+0x10/0x10 [ 538.320850][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 538.326630][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 538.332072][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 538.336824][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 538.342092][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 538.347009][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.351740][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 538.357519][ C1] rcu_gp_kthread+0x26d/0x380 [ 538.362176][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 538.367347][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.372083][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.377253][ C1] ? __kthread_parkme+0x19e/0x250 [ 538.382248][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 538.387419][ C1] kthread+0x3c5/0x780 [ 538.391460][ C1] ? __pfx_kthread+0x10/0x10 [ 538.396023][ C1] ? rcu_is_watching+0x12/0xc0 [ 538.400755][ C1] ? __pfx_kthread+0x10/0x10 [ 538.405317][ C1] ret_from_fork+0x983/0xb10 [ 538.409879][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 538.414962][ C1] ? __switch_to+0x7af/0x10d0 [ 538.419611][ C1] ? __pfx_kthread+0x10/0x10 [ 538.424174][ C1] ret_from_fork_asm+0x1a/0x30 [ 538.428920][ C1] [ 538.431909][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 538.438206][ C1] Sending NMI from CPU 1 to CPUs 0: [ 538.443406][ C0] NMI backtrace for cpu 0 [ 538.443425][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.443448][ C0] Tainted: [L]=SOFTLOCKUP [ 538.443453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.443462][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 538.443485][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 538.443500][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 538.443512][ C0] RAX: 00000000018b263b RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 538.443522][ C0] RDX: 0000000000000000 RSI: ffffffff8dacde6c RDI: ffffffff8bf2b380 [ 538.443533][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 538.443543][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 538.443552][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 538.443562][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 538.443577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.443587][ C0] CR2: 00007fbf70ab1f98 CR3: 000000007a4b9000 CR4: 00000000003526f0 [ 538.443597][ C0] Call Trace: [ 538.443602][ C0] [ 538.443607][ C0] default_idle+0x13/0x20 [ 538.443627][ C0] default_idle_call+0x6c/0xb0 [ 538.443648][ C0] do_idle+0x38d/0x510 [ 538.443672][ C0] ? __pfx_do_idle+0x10/0x10 [ 538.443697][ C0] cpu_startup_entry+0x4f/0x60 [ 538.443718][ C0] rest_init+0x16b/0x2b0 [ 538.443730][ C0] ? acpi_subsystem_init+0x133/0x180 [ 538.443746][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 538.443761][ C0] start_kernel+0x3ef/0x4d0 [ 538.443784][ C0] x86_64_start_reservations+0x18/0x30 [ 538.443806][ C0] x86_64_start_kernel+0x130/0x190 [ 538.443828][ C0] common_startup_64+0x13e/0x148 [ 538.443853][ C0]